PUP.Win32.Vuze_6d43aa1854

by malwarelabrobot on July 11th, 2014 in Malware Descriptions.

Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: PUP


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 6d43aa185492628807399a8906d8cd91
SHA1: 069af748caf4ad184cf15a59cd26081e79e560f6
SHA256: 13e34c41001bba1b7c95294ba7817f69eaa8bf4d90bbf61fb353a7916cf05cb6
SSDeep: 768:ZJ4tQf6WvobgFvzmHvuNg0QYF0A acOMOnQxswzOLl2kTAOL6Wi:H223o0RyuOniMOnQpz87UOVi
Size: 72008 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: PackerUPXCompresorGratuitowwwupxsourceforgenet, UPolyXv05_v6
Company: Azureus Software, Inc.
Created at: 2009-12-06 00:50:46
Analyzed on: Windows7Ada SP1 64-bit


Summary:

PUP. Potentially Unwanted Program. An application that does not display malicious behavior yet is installed without having first sought affirmative user consent for installation. Users may not realize, due to the nature of the installation procedure, that an application they have not explicitly agreed to has been installed. This category can also be used to classify other applications which in a certain context can be wanted e.g. remote administration tools or IRC clients.

Payload

No specific payload has been found.

Process activity

The PUP creates the following process(es):

unpack200.exe:1956
unpack200.exe:2152
install.exe:3444
Internet Explorer Settings.exe:912
java.exe:2652
MoviesToolbarMediaBar.exe:2072
makecab.exe:3164
VuzeFW.exe:1324
TrustedInstaller.exe:4064
Cloud_Backup_Setup.exe:2172
VuzeInstaller.exe:1948
mediabar.exe:2580
i4jdel0.exe:3824
vcredist_x64.exe:3428
regsvr32.exe:2280
regsvr32.exe:716
regsvr32.exe:2660
regsvr32.exe:2916
pack.exe:2584
vz_toolbar_6087708222368454533.tmp:2176
MyPC Backup.exe:3656
%original file name%.exe:240
BackupSetup.exe:3268
SafetyNutManager.exe:2908
SafetyNutManager.exe:1360

The PUP injects its code into the following process(es):

Azureus.exe:3688
safetynut.exe:3024
IEXPLORE.EXE:1232

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process Azureus.exe:3688 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\downloads.config.saving (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1IC2GYKH.txt (432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU520801376764858893.tmp (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\downloads.config.bak (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\.certs (138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU1857582111776477852.tmp.saving (789 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811\exe4jlib.jar (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\A2934E465825A08068350C5F09199D7883C39EF0.dat._az.saving (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\content[1].css (7040 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\azureus.config.saving (2352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\getitbtn[1].png (1191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU6608397041386595396.tmp (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azupnpav\cd.dat.saving (174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\metasearch.config.bak (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0P8FK5HQ.txt (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811\i4jdel.exe (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[1].js (16820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU4985686955725836781.tmp (4489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\azutp_0.5.4.zip (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\j[1].js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\azutp_0.5.4.jar (190827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aznettor-win32_0.6.2.zip (44786 bytes)
C:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-gdip-win32-4233.dll (17529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\86C45E49AF3044B2345687D9F8A69C01EF04144C.dat._az.saving (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\addresses.saving (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\contacts.saving (1099 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin.properties_0.5.4 (93 bytes)
C:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-win32-4233.dll (61080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BH1D52YH.txt (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\exported_params.properties (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\UPnP_1.log (16939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\VuzeActivities.config.saving (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\metasearch.config.saving (361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\86C45E49AF3044B2345687D9F8A69C01EF04144C.dat.saving (803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\devices.config.saving (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\client.vuze[1].xml (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ftux_bg[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\plugin.properties.tmp (210 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\azutp_0.5.4.zip (6496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\prototype[1].js (87919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\_aztest45.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU4022566134111339103.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\diverse.saving (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin.properties.tmp (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\getting_started_logo[1].png (3110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\LICENSE (1430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\aercm_0.4.9.jar (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\Plugin Update_1.log (82302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU518110075039867081.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\54066FBA522970CECA1C2C3941D9F2DCD6988D2C.dat._az.saving (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\_aztest45.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin_install.properties_0.5.4 (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U5534RLU.txt (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\_aztest45.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index[1].htm (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\MediaServer_1.log (502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\debug_1.log (2976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\stats\2014\07\11.dat (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\config.txt (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\M52MKK4D.txt (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\reset-fonts-grids[1].css (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\net\pm_default.dat.saving (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU4022566134111339103.tmp.saving (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU1137253537282528070.tmp (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\azureus.config.bak (2299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\banips.config.saving (81 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\plugin.properties_0.6.2 (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\AzureusTor.exe (1379165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\aznettor_0.6.2.zip (4489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\54066FBA522970CECA1C2C3941D9F2DCD6988D2C.dat.saving (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\plusone[1].js (31365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~DF1028210EED873449.TMP (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\g=jsCorp[1].js (17274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aercm_0.4.9.jar (13024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\cb=gapi[1].js (66349 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\R4923NUN.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\aznettor_0.6.2.jar (118110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\A2934E465825A08068350C5F09199D7883C39EF0.dat.saving (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\effects[1].js (15785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU1857582111776477852.tmp (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\home_get_plus_btn[1].png (2598 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[2].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\6B1ZU3M8.txt (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\.keystore (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU1137253537282528070.tmp.saving (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\LICENSE (1060 bytes)

The process unpack200.exe:1956 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user.jar (34439 bytes)

The process unpack200.exe:2152 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jruntime.jar (112270 bytes)

The process install.exe:3444 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\152256f44d3c6559509e12dbc91a\install.res.1033.dll (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\dd_vcredistUI2BA3.txt (151574 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VWLCC54.tmp (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\dd_vcredistMSI2BA3.txt (206843 bytes)

The process java.exe:2652 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE33E.tmp (267 bytes)

The process MoviesToolbarMediaBar.exe:2072 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\sysid.dat (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_star_16x.png (782 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsisFirewall.dll (16 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_B260506C25B5617AB5972F1DE58B4B0E (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\DTX\Reporting\ReportingHelper.dll (7392 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\install.ico (8 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\InetLoad.dll (804 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc6DE1.tmp (160346 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\dtuser.exe (33888 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sysid.dat (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx64.dll (5064 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\ocode.xml (390 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_tools_16x.png (557 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\inetc.dll (804 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\toolbar.htm (704 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\toolbar.xml (16 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\trackid.dat (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\trackid.dat (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll (8 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\6_Easy-Audio-MP3-WMA-OGG-Cutter.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\UAC.dll (804 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo_movies_18h.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (378 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\guid.dat (38 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\geodata.xml (162 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_reviews_16x.png (812 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\2_Free_FLV_Player.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\manifest.xml (2272 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\geolocation[1].xml (162 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\AccessControl.dll (21 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{b714512e-696c-455b-9307-c390f71ba22c}\geodata.xml (162 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\1_Free_Video_Converter.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appid.dat (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\ioSpecial.ini (26 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll (812 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\components\windowmediator.js (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_ticket_16x.png (684 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\3_Free_FLV_Converter.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_B260506C25B5617AB5972F1DE58B4B0E (1520 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\5_FREE_WMA_MP3_Converter.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\setupCfg.xml (587 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\external.js (24832 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb64.dll (27704 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\imeshvuzebandoo-manifest.xml (9 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\partner.xml (218 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\toolbar.xul (24832 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\tb_icon.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\4_Free_CD_DVD_burner.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\apnuserid.dat (16 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\as_guid.dat (38 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\uninstall.exe (6458 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\appid.dat (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\apnuserid.dat (16 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)

The process makecab.exe:3164 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Windows\Logs\CBS\CbsPersist_20140711103344.cab (11744 bytes)
C:\Windows\Temp\cab_3164_6 (8 bytes)
C:\Windows\Temp\cab_3164_4 (564989 bytes)
C:\Windows\Temp\cab_3164_5 (76 bytes)
C:\Windows\Temp\cab_3164_2 (564989 bytes)
C:\Windows\Temp\cab_3164_3 (76 bytes)

The process VuzeFW.exe:1324 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsbD4EC.tmp\nsisFirewall.dll (16 bytes)

The process TrustedInstaller.exe:4064 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Windows\winsxs\Temp\fdd1c89ff39ccf0118000000e00f2c0c\0ef9c89ff39ccf011a000000e00f2c0c_catalog (21 bytes)
C:\Windows\System32\config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regtrans-ms (20704 bytes)
C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c (4 bytes)
C:\Windows\System32\config\SOFTWARE (46848 bytes)
C:\Windows\winsxs\Temp\252251a4f39ccf013f000000e00f2c0c\364951a4f39ccf0140000000e00f2c0c_manifest (766 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\ee0ed3a3f39ccf0137000000e00f2c0c_mfc90ita.dll (129 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\2084d3a3f39ccf0139000000e00f2c0c_mfc90kor.dll (95 bytes)
C:\Windows\System32\config\COMPONENTS{15e3db1a-917a-11e2-9ef7-000c29a8bd90}.TMContainer00000000000000000002.regtrans-ms (28680 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\0cbe969ef39ccf0114000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\960418a0f39ccf011f000000e00f2c0c_manifest (6 bytes)
C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\961a8da4f39ccf0147000000e00f2c0c_vcomp90.dll (120 bytes)
C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\86f38ca4f39ccf0146000000e00f2c0c_manifest (864 bytes)
C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\6cc9a299f39ccf0103000000e00f2c0c_manifest (859 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\473717a2f39ccf0123000000e00f2c0c_mfcm90u.dll (670 bytes)
C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c\bfbfb09df39ccf010a000000e00f2c0c_manifest (760 bytes)
C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c\a1b303a5f39ccf014e000000e00f2c0c_catalog (22 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\252251a4f39ccf013f000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\b7688da4f39ccf0148000000e00f2c0c_catalog (22 bytes)
C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c (4 bytes)
C:\Windows\System32\config\COMPONENTS (219854 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\1713d1a3f39ccf012f000000e00f2c0c_manifest (13 bytes)
C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.2.regtrans-ms (856 bytes)
C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c\a1b303a5f39ccf014d000000e00f2c0c_manifest (676 bytes)
C:\Windows\winsxs\Temp\a80c2ba3f39ccf0128000000e00f2c0c\ca5a2ba3f39ccf012a000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\af65a399f39ccf0104000000e00f2c0c_atl90.dll (853 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\6eed929ef39ccf0111000000e00f2c0c_msvcr90.dll (4811 bytes)
C:\Windows\Logs\CBS\CBS.log (80990 bytes)
C:\Windows\winsxs\Temp\a80c2ba3f39ccf0128000000e00f2c0c\b9332ba3f39ccf0129000000e00f2c0c_manifest (760 bytes)
C:\Windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin (4409 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\dee7d2a3f39ccf0136000000e00f2c0c_mfc90fra.dll (670 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\0f5dd3a3f39ccf0138000000e00f2c0c_mfc90jpn.dll (95 bytes)
C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.0.regtrans-ms (80953 bytes)
C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.1.regtrans-ms (856 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\b75218a0f39ccf0121000000e00f2c0c_mfc90u.dll (38780 bytes)
C:\Windows\winsxs\Temp\fdd1c89ff39ccf0118000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\8b24d2a3f39ccf0131000000e00f2c0c_mfc90cht.dll (79 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\9b4bd2a3f39ccf0132000000e00f2c0c_mfc90esn.dll (130 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\5dc6929ef39ccf0110000000e00f2c0c_manifest (5 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\960418a0f39ccf0120000000e00f2c0c_mfcm90.dll (670 bytes)
C:\Windows\winsxs\Temp\fdd1c89ff39ccf0118000000e00f2c0c\0ef9c89ff39ccf0119000000e00f2c0c_manifest (760 bytes)
C:\Windows\System32\config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf (1688 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\fb96969ef39ccf0113000000e00f2c0c_msvcm90.dll (1526 bytes)
C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c\d0e6b09df39ccf010b000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\585e17a2f39ccf0124000000e00f2c0c_catalog (21 bytes)
C:\Windows\System32\config\SYSTEM.LOG1 (1099 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c (4 bytes)
C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\ca21969ef39ccf0112000000e00f2c0c_msvcp90.dll (7701 bytes)
C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\44c5a499f39ccf0105000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\cdc0d2a3f39ccf0135000000e00f2c0c_mfc90enu.dll (113 bytes)
C:\Windows\System32\config\SOFTWARE.LOG1 (45600 bytes)
C:\Windows\System32\config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms (15680 bytes)
C:\Windows\System32\config\SYSTEM (1120 bytes)
C:\Windows\System32\config\COMPONENTS.LOG1 (203612 bytes)
C:\Windows\winsxs\Temp\252251a4f39ccf013f000000e00f2c0c\364951a4f39ccf0141000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\92a1cca0f39ccf0122000000e00f2c0c_mfc90.dll (38780 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\41d2d3a3f39ccf013a000000e00f2c0c_mfc90rus.dll (127 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\52f9d3a3f39ccf013b000000e00f2c0c_catalog (21 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\273ad1a3f39ccf0130000000e00f2c0c_mfc90chs.dll (78 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\ac72d2a3f39ccf0133000000e00f2c0c_mfc90esp.dll (130 bytes)
C:\Windows (288 bytes)
C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.blf (8230 bytes)
C:\Windows\System32\config (772 bytes)
C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\bc99d2a3f39ccf0134000000e00f2c0c_mfc90deu.dll (670 bytes)
C:\Windows\winsxs\Temp\a80c2ba3f39ccf0128000000e00f2c0c (4 bytes)

The process Cloud_Backup_Setup.exe:2172 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aff.conf (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nshF680.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BackupSetup.exe (445914 bytes)

The process VuzeInstaller.exe:1948 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_14_5p83tu_12q8bqh.png (149 bytes)
%Program Files% (x86)\Vuze\i4j7532908762072901178.tmp (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\stats.properties (564 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j6811556439309651913.tmp (3668 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j8578322081339386258.tmp (392 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j8497481475386490810.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j2490832045750922624.tmp (42 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j4008672141177128901.tmp (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\unicows.dll (108139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_13_5p83tu.properties (1 bytes)
%Program Files% (x86)\Vuze\i4j8901760369182727175.tmp (20260 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2369904822501633107.tmp (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_26_5p83tu.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j7965540711709444556.tmp (6911320 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j161262380139373512.tmp (160 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j1571486291747910349.tmp (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j1908509527689728685.tmp (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_23_5p83tu_1etf9b9.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jf119851443119624234.log (392 bytes)
%Program Files% (x86)\Vuze\i4j7844668204558049304.tmp (14992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_1_5p83tu.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2246758117025369636.tmp (2696 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2888739553016443387.tmp (18240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_15_5p83tu_1a89bbn.png (589 bytes)
%Program Files% (x86)\Vuze\.install4j\autoUninstall.0 (182 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2117814312740666059.tmp (1 bytes)
%Program Files% (x86)\Vuze\i4j3323363540883806357.tmp (548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_6_5p83tu.utf8 (6 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j5369609528216524484.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_19_5p83tu.html (6 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j7203923366131859188.tmp (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_4_5p83tu.utf8 (6 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j1046613275160153739.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_16_5p83tu_x2womb.png (1 bytes)
%Program Files% (x86)\Vuze\plugins\azupnpav\i4j8030197494188790572.tmp (4956201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_17_5p83tu_1rv17he.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jruntime.jar.pack (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j5136658709726980285.tmp (6 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2776336052705506423.tmp (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j5774336664796834070.tmp (11114 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j5408184897662267240.tmp (286788 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j6897090767390779379.tmp (5 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j3707232557848410276.tmp (21968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j8425644083374272121.tmp (123 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j4216610523093472600.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\_shfoldr.dll (8481 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5589497900963994914.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_8_5p83tu.utf8 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j6576437874901834977.tmp (53080 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j335531713615118721.tmp (2696 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5504928427479105329.tmp (1 bytes)
%Program Files% (x86)\Vuze\plugins\azupnpav\i4j8747241237344386203.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_9_5p83tu.properties (1 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2140359785627941555.tmp (3808 bytes)
%Program Files% (x86)\Vuze\.install4j\installation.log (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j1200905448623983853.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j2327411212952264794.bat (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_25_5p83tu_1jaybna.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j6520400365285019815.tmp (25871 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j1569002173053924734.tmp (13060 bytes)
%Program Files% (x86)\Vuze\i4j3400932194734209451.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j7376135460985435728.bat (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_21_5p83tu_bm8amj.ico (6 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6695278889048417273.tmp (5952 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j2424983389265510852.tmp (129184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\i4j3507678777117320673.tmp (8681059 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6111299788363906805.tmp (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_10_5p83tu.utf8 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j5964291548243864546.tmp (2840760 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\i4j8342355379803153095.tmp (1 bytes)
%Program Files% (x86)\Vuze\installer.log (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jparams.conf (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j1142501053254481120.tmp (42596 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5262834023396430321.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user\mism.exe (6 bytes)
%Program Files% (x86)\Vuze\plugins\azplugins\i4j6937536722579425605.tmp (45364 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6073979558356333230.tmp (63904 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j8092955921587662952.tmp (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_24_5p83tu_10qu06u.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6786443290599820746.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j5768457985002643611.tmp (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_12_5p83tu.utf8 (6 bytes)
%Program Files% (x86)\Vuze\.install4j\files.log (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\platform.zip (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azrating\i4j7686554087770592710.tmp (2716622 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6641836503768349089.tmp (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jdel0.exe (2732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j4801722411858584871.tmp (160 bytes)
%Program Files% (x86)\Vuze\i4j7745004716421649102.tmp (148469 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5431609977347394196.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j8731728351829231228.tmp (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\i4j8805125335022701360.tmp (26638 bytes)
%Program Files% (x86)\Vuze\.install4j\install.prop (50 bytes)
%Program Files% (x86)\Vuze\i4j6335536770489013278.tmp (62889621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j4662540795836078577.tmp (872 bytes)
%Program Files% (x86)\Vuze\i4j1253025572946621350.tmp (18412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_3_5p83tu.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j_log_Vuze_2169043936883018978.log (403052 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jinst.dll (56450 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j6693571438154325364.tmp (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j1835239142706765858.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j3074898337843294455.tmp (1505161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j9132141798385351468.tmp (1 bytes)
%Program Files% (x86)\Vuze\plugins\azupdater\i4j2317658831101174049.tmp (187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_7_5p83tu.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j5479369677910341825.tmp (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_18_5p83tu_1uj26g4.png (6 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2507119398623277174.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j330773320309737287.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j1495549841345352520.tmp (15010 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jdel.exe (15863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\custom\i4j6910200151280016333.tmp (32 bytes)
%Program Files% (x86)\Vuze\i4j7199591124009447698.tmp (3656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j2911317602929031727.tmp (64578 bytes)
%Program Files% (x86)\Vuze\i4j3088277215870280227.tmp (4573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_20_5p83tu_1v90f0m.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j3189716060939270430.tmp (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j_nlog_2 (57786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j3138298188563576857.tmp (3 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j7492897945929948988.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6768937469992469324.lnk (1 bytes)
%Program Files% (x86)\Vuze\.install4j\response.varfile (548 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6221843567801459418.tmp (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_5_5p83tu.properties (1 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2487707538004362310.tmp (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j1566934166140311658.tmp (1928 bytes)
%Program Files% (x86)\Vuze\plugins\azplugins\i4j4326313241666951297.tmp (6350537 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6324460525823129804.tmp (9496 bytes)
%Program Files% (x86)\Vuze\i4j550800673652724556.tmp (988 bytes)
%Program Files% (x86)\Vuze\i4j1510908736777320165.tmp (447647694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vz_toolbar_6087708222368454533.tmp (610034 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j5255041105555732393.tmp (24822517 bytes)
%Program Files% (x86)\Vuze\plugins\azupnpav\i4j7416322647950849705.tmp (29624 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i4j8861707286957798552.tmp (1 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j3964753195331676449.tmp (589 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5661239597715331454.tmp (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\MessagesDefault (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_0_5p83tu.utf8 (6 bytes)
%Program Files% (x86)\Vuze\i4j3782399921828609446.tmp (991431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2460384918039454931.tmp (1 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2869898223483512041.tmp (2696 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j175169251891838585.tmp (1928 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j8030996206320897858.tmp (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_11_5p83tu.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_22_5p83tu_1c34961.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j2831361815097039750.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j7774787035564401077.tmp (75283 bytes)
%Program Files% (x86)\Vuze\i4j3487317646487596578.tmp (15204 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j311047735938769443.tmp (1928 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j7559424535388071394.tmp (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2340166147623900005.tmp (1992 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j5110052495645963791.tmp (1928 bytes)
C:\Users\Public\Desktop\i4j6176390172570571415.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\Cloud_Backup_Setup.exe (21788 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j3105696425881871926.tmp (4597971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j7795196040418503851.bat (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j465398494323637494.tmp (218545 bytes)
%Program Files% (x86)\Vuze\.install4j\user\i4j3013459623939999959.tmp (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j6004440717324378339.tmp (3026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j7717290447012084026.tmp (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_2_5p83tu.utf8 (6 bytes)
%Program Files% (x86)\Vuze\plugins\azupnpav\i4j4060340564912904129.tmp (125 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j6257896736602755674.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\installer.config (32 bytes)
%Program Files% (x86)\Vuze\i4j6236813550558667444.tmp (5992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user.jar.pack (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azrating\i4j412582795549569049.tmp (6576 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j2814300937934726573.tmp (15904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j9000516021604691255.tmp (202 bytes)
%Program Files% (x86)\Vuze\.install4j\i4j7496365687807878079.tmp (1 bytes)

The process mediabar.exe:2580 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\MoviesToolbarMediaBar.exe (18125 bytes)

The process i4jdel0.exe:3824 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657 (12 bytes)

The process vcredist_x64.exe:3428 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\152256f44d3c6559509e12dbc91a\vc_red.cab (65618 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1036.txt (12 bytes)
C:\152256f44d3c6559509e12dbc91a\vcredist.bmp (5 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.OpenMP.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\$shtdwn$.req (788 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1033.txt (10 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.MFC.cat (658 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1040.dll (2110 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1049.txt (13 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugMFC.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1031.txt (229 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugMFC.cat (236 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.MFC.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1036.dll (1355 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1042.dll (1988 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.OpenMP.cat (297 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.2052.txt (3 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.CRT.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1033.dll (1452 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1041.txt (5 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.ATL.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.2052.dll (1632 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.3082.txt (12 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.MFCLOC.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\vc_red.msi (3176 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.CRT.cat (630 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1042.txt (650 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugOpenMP.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1049.dll (1720 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1028.txt (3 bytes)
C:\152256f44d3c6559509e12dbc91a\eula.1040.txt (657 bytes)
C:\152256f44d3c6559509e12dbc91a\globdata.ini (1 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.3082.dll (989 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1028.dll (1130 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugOpenMP.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugCRT.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1031.dll (1160 bytes)
C:\152256f44d3c6559509e12dbc91a\install.exe (13918 bytes)
C:\152256f44d3c6559509e12dbc91a\install.res.1041.dll (1126 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugCRT.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.ATL.cat (155 bytes)
C:\152256f44d3c6559509e12dbc91a\install.ini (844 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.MFCLOC.cat (9 bytes)
C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs (8 bytes)
C:\152256f44d3c6559509e12dbc91a (8 bytes)

The process regsvr32.exe:2280 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\dtx.ini (15 bytes)

The process regsvr32.exe:716 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\dtx.ini (2 bytes)

The process pack.exe:2584 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

%Program Files% (x86)\Movies Toolbar\SafetyNut\favicon.ico (1 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\configmgrc3.cfg (45 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetyldr.dll (797 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetynut_ie.dll (18728 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetycrt.dll (6550 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetyldr_u.dll (19 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\Internet Explorer Settings Update.exe (10335 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut.exe (34234 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\Internet Explorer Settings.exe (9519 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut_ie.dll (18290 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll (6296 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\ctlstrm.exe (1500 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\ctlstrm.exe (1137 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetynut.dll (19552 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut.dll (19656 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe (30676 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetyldr.dll (19 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\Internet Explorer Settings Update.exe (10540 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\Internet Explorer Settings.exe (10257 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetyldr_u.dll (22 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\configmgrc3.cfg (36 bytes)

The process vz_toolbar_6087708222368454533.tmp:2176 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2868.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2C28.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E80.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E40.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DC0.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\pack.exe (121063 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\276D.tmp (8020 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\Uninstall.exe (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\272E.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DA0.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\28E6.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2BC9.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsm1C77.tmp (365009 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\217D.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2B7A.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Starter.exe (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\22B6.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2578.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E00.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2315.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2ABD.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\29D1.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\mediabar.exe (75669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2A2F.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2B1B.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\registry.dll (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll (66073 bytes)
%Program Files% (x86)\Movies Toolbar\SafetyNut\Helper.dll (15019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DD1.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2BF9.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2392.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\249D.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E50.tmp (8020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\MoviesToolbarMediaBar.exe (97 bytes)

The process MyPC Backup.exe:3656 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

%Program Files% (x86)\MyPC Backup\MPCBClient.dll (48 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Sync Folder.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5 (1624 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_settings.db (1229 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_settings.db-journal (31598 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_7DD744F73D87EE469E5BC583C31249E2 (1624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_7DD744F73D87EE469E5BC583C31249E2 (471 bytes)
%Program Files% (x86)\MyPC Backup\log\WAIT_HANDLES.log (540 bytes)

The process %original file name%.exe:240 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VuzeLog.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VuzeInstall\VuzeInstaller.exe (655926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C90.tmp (2359 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C91.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\Vuze_Installer32[1].exe (615586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\rpc[1].php (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C91.tmp\inetc.dll (808 bytes)

The process BackupSetup.exe:3268 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\DotNetChecker.dll (1597 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\Uninstall.lnk (858 bytes)
%Program Files% (x86)\MyPC Backup\syncing.ico (12088 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_file_cache.db (7 bytes)
%Program Files% (x86)\MyPC Backup\Service Start.exe (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\NSISdl.dll (30 bytes)
%Program Files% (x86)\MyPC Backup\pt_PT.mo (1856 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.60.x64.dll (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\AccessControl.dll (20 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.52.x86.dll (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk (1 bytes)
%Program Files% (x86)\MyPC Backup\Crypto64.dll (1856 bytes)
%Program Files% (x86)\MyPC Backup\diffstack.dll (1552 bytes)
%Program Files% (x86)\MyPC Backup\Shared Stack.dll (89498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\mpbtrk.log (8 bytes)
%Program Files% (x86)\MyPC Backup\ObjectListView.dll (13584 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_queues.db (13 bytes)
%Program Files% (x86)\MyPC Backup\BackupStack.exe (1552 bytes)
%Program Files% (x86)\MyPC Backup\GetText.dll (12 bytes)
%Program Files% (x86)\MyPC Backup\AWSSDK.dll (106386 bytes)
%Program Files% (x86)\MyPC Backup\Configuration Updater.exe (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsSCM.dll (13 bytes)
C:\Users\"%CurrentUserName%"\Desktop\MyPC Backup.lnk (1 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.60.x86.dll (5520 bytes)
%Program Files% (x86)\MyPC Backup\tick.ico (12088 bytes)
%Program Files% (x86)\MyPC Backup\Updater.exe (31856 bytes)
%Program Files% (x86)\MyPC Backup\MyPC Backup.exe (93176 bytes)
%Program Files% (x86)\MyPC Backup\RegisterExtensionDotNet20_x86.exe (784 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_sig_cache.db (6 bytes)
%Program Files% (x86)\MyPC Backup\mypcbackup.ico (13368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\MyPC Backup\LogicNP.EZShellExtensions.dll (8560 bytes)
%Program Files% (x86)\MyPC Backup\uninst.exe (1546 bytes)
%Program Files% (x86)\MyPC Backup\x64\System.Data.SQLite.dll (33633 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.52.x64.dll (5520 bytes)
%Program Files% (x86)\MyPC Backup\MPCBContextMenu.dll (217172 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_backup_conf.db (16 bytes)
%Program Files% (x86)\MyPC Backup\syncicon.ico (1856 bytes)
%Program Files% (x86)\MyPC Backup\MPCBIconOverlays.dll (124204 bytes)
%Program Files% (x86)\MyPC Backup\de_DE.mo (1856 bytes)
%Program Files% (x86)\MyPC Backup\it_IT.mo (1856 bytes)
%Program Files% (x86)\MyPC Backup\es_ES.mo (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\MyPC Backup.lnk (1 bytes)
%Program Files% (x86)\MyPC Backup\Database\mpcb_settings.db (9 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.51.x86.dll (4992 bytes)
%Program Files% (x86)\MyPC Backup\fr_FR.mo (1856 bytes)
%Program Files% (x86)\MyPC Backup\MPCBClient.dll (39329 bytes)
%Program Files% (x86)\MyPC Backup\RegisterExtensionDotNet20_x64.exe (16 bytes)
%Program Files% (x86)\MyPC Backup\RestartExplorer.exe (16 bytes)
%Program Files% (x86)\MyPC Backup\AlphaVSS.Common.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14D9.tmp (604687 bytes)
%Program Files% (x86)\MyPC Backup\Crypto32.dll (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vcredist_x64.exe (405172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\System.dll (23 bytes)
%Program Files% (x86)\MyPC Backup\UnRegisterExtensions.exe (15 bytes)
%Program Files% (x86)\MyPC Backup\Signup Wizard.exe (33877 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsRandom.dll (808 bytes)
%Program Files% (x86)\MyPC Backup\x86\System.Data.SQLite.dll (30464 bytes)

The process SafetyNutManager.exe:2908 makes changes in the file system.
The PUP creates and/or writes to the following file(s):

C:\ProgramData\SafetyNut\coordinator.cfg (7408 bytes)
C:\ProgramData\SafetyNut\S-1-5-21-2858020935-2156992550-3658131804-1003.cfg (4014 bytes)
C:\ProgramData\SafetyNut\general.cfg (1 bytes)

Registry activity

The process Azureus.exe:3688 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Vuze]
"Content Type" = "application/x-vuze"

[HKCR\BC\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers\Azureus\Type]
"urn:btih" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Classes\bc]
"URL Protocol" = ""

[HKCU\Software\Classes\Magnet\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCU\Software\Classes\bc\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCR\magnet]
"(Default)" = "Magnet URI"

[HKCR\BC\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\.magnet]
"Content Type" = "application/x-magnet"

[HKCR\MIME\Database\Content Type\application/x-bc-uri]
"Extension" = ".bcuri"

[HKCU\Software\Classes\Magnet\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\BCTP\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Magnet]
"Content Type" = "application/x-magnet"

[HKCU\Software\Classes\bc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\Vuze\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bctp-uri]
"Extension" = ".bctpuri"

[HKCR\Vuze]
"(Default)" = "Vuze File"

[HKCU\Software\Classes\Magnet]
"URL Protocol" = ""

[HKCU\Software\Classes\.vuze]
"Content Type" = "application/x-vuze"

[HKCR\BC\shell]
"(Default)" = "open"

[HKCU\Software\Classes\Vuze\shell]
"(Default)" = "open"

[HKCR\Vuze\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCR\.dht]
"(Default)" = "DHT"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-magnet]
"Extension" = ".magnet"

[HKCR\DHT\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "9D AA F6 AB F3 9C CF 01"

[HKCR\BC]
"(Default)" = "BC URI"

[HKCU\Software\Classes\Magnet]
"(Default)" = "Magnet URI"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"Azureus.exe" = "9000"

[HKCU\Software\Classes\BCTP\shell]
"(Default)" = "open"

[HKCU\Software\Classes\DHT]
"URL Protocol" = ""

[HKCR\BCTP]
"(Default)" = "BCTP URI"

[HKCU\Software\Classes\.dht]
"(Default)" = "DHT"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers\Azureus]
"(Default)" = ""

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-dht]
"Extension" = ".dht"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers]
"(Default)" = ""

[HKCU\Software\Classes\DHT]
"Content Type" = "application/x-dht"

[HKCU\Software\Classes\.vuze]
"(Default)" = "Vuze"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCR\.bcuri]
"(Default)" = "BC"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "Azureus.exe"

[HKCU\Software\Classes\.bcuri]
"Content Type" = "application/x-bc-uri"

[HKCR\DHT]
"(Default)" = "DHT URI"

[HKCU\Software\Classes\DHT\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers\Azureus]
"DefaultIcon" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCR\MIME\Database\Content Type\application/x-vuze]
"Extension" = ".vuze"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCR\DHT\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "6A 47 E9 86 F3 9C CF 01"

[HKCR\.magnet]
"(Default)" = "Magnet"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKCR\DHT\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers\Azureus]
"Description" = "Download with Vuze (formerly Azureus)"

[HKCU\Software\Classes\BCTP]
"URL Protocol" = ""

[HKCR\BCTP\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKLM\SOFTWARE\Wow6432Node\magnet]
"(Default)" = ""

[HKCR\.bctpuri]
"(Default)" = "BCTP"

[HKCU\Software\Classes\bc]
"Content Type" = "application/x-bc-uri"

[HKCU\Software\Classes\BCTP]
"(Default)" = "BCTP URI"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bc-uri]
"Extension" = ".bcuri"

[HKCU\Software\Classes\DHT]
"(Default)" = "DHT URI"

[HKCU\Software\Classes\Vuze]
"(Default)" = "Vuze File"

[HKCR\BCTP\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\Magnet\shell]
"(Default)" = "open"

[HKCR\magnet\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCR\BCTP\shell]
"(Default)" = "open"

[HKCR\magnet\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCU\Software\Classes\BC\shell]
"(Default)" = "open"

[HKCR\.vuze]
"(Default)" = "Vuze"

[HKCR\Vuze\shell]
"(Default)" = "open"

[HKCR\MIME\Database\Content Type\application/x-dht]
"Extension" = ".dht"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1338205842"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKCU\Software\Classes\.bctpuri]
"(Default)" = "BCTP"

[HKCR\Vuze\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCR\MIME\Database\Content Type\application/x-magnet]
"Extension" = ".magnet"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-vuze]
"Extension" = ".vuze"

[HKCU\Software\Classes\bc]
"(Default)" = "BC URI"

[HKCU\Software\Classes\.magnet]
"(Default)" = "Magnet"

[HKCU\Software\Classes\DHT\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\DHT\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.bcuri]
"(Default)" = "BC"

[HKCU\Software\Classes\.dht]
"Content Type" = "application/x-dht"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\.bctpuri]
"Content Type" = "application/x-bctp-uri"

[HKLM\SOFTWARE\Wow6432Node\magnet\Handlers\Azureus]
"ShellExecute" = "%Program Files% (x86)\Vuze\Azureus.exe %URL"

[HKCR\Magnet\shell]
"(Default)" = "open"

[HKCU\Software\Classes\BCTP]
"Content Type" = "application/x-bctp-uri"

[HKCU\Software\Classes\Vuze\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKCU\Software\Classes\BCTP\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCR\MIME\Database\Content Type\application/x-bctp-uri]
"Extension" = ".bctpuri"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The PUP deletes the following registry key(s):

[HKCR\Vuze\shell\open\command]
[HKCR\Vuze\DefaultIcon]
[HKCR\.vuze]
[HKCR\Vuze\Content Type]
[HKCR\Vuze]
[HKCR\Vuze\shell]
[HKCR\Vuze\shell\open]

The PUP deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Internet Explorer Settings.exe:912 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

The process MoviesToolbarMediaBar.exe:2072 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"nt" = "http://www.search.ask.com/?o=APN11693&p2=^BNE^BND515^YY^UA&apn_uid=9010306441844733&apn_ptnrs=^BNE&tpid=VZ-DTX&apn_dtid=^BND515^YY^UA&apn_dbr=&doi=2014-07-11&trgb=IE&psv=&gct=tab"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA1330A7-84CB-427A-9110-655C257D4386}]
"Policy" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"timeofinstall" = "2014-07-11T13:32:40"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled-IE" = "VZ-DTX"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppPath" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"InstallLocation" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKCU\Software\APNDTX\VZ-DTX]
"trgb" = "IE"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppName" = "dtuser.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"Publisher" = "IAC Search and Media"
"DisplayName" = "Movies Toolbar(Dist. by Azureus Software, Inc.) for Internet Explorer"

[HKCU\Software\APNDTX\{b714512e-696c-455b-9307-c390f71ba22c}\IE]
"DisplayName" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKCU\Software\APNDTX\{b714512e-696c-455b-9307-c390f71ba22c}]
"lastinstalled" = "IE"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"apn_dtid" = "^BND515^YY^UA"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\Detection.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll,"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"o" = "APN11693"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA1330A7-84CB-427A-9110-655C257D4386}]
"AppName" = "dtuser.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b714512e-696c-455b-9307-c390f71ba22c}]
"AppPath" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"NoModify" = "1"

[HKCU\Software\APNDTX\VZ-DTX]
"Browsers" = "1-IE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"Policy" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"EstimatedSize" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA1330A7-84CB-427A-9110-655C257D4386}]
"AppPath" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"SB" = "http://www.search.ask.com/web?o=APN11693&p2=^BNE^BND515^YY^UA&apn_uid=9010306441844733&apn_ptnrs=^BNE&tpid=VZ-DTX&apn_dtid=^BND515^YY^UA&apn_dbr=&doi=2014-07-11&trgb=IE&psv=&gct=sb&q={searchTerms}"
"nthp_cr" = "1"
"hpr_cr" = "http://www.search.ask.com/?o=APN11693&p2=^BNE^BND515^YY^UA&apn_uid=9010306441844733&apn_ptnrs=^BNE&tpid=VZ-DTX&apn_dtid=^BND515^YY^UA&apn_dbr=&doi=2014-07-11&trgb=IE&psv=&gct=hp"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"UninstallString" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\uninstall.exe /UN=IE /PID=VZ-DTX /PCD=IMH"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"dateofinstall" = "2014-07-11"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppName" = "dtuser.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b714512e-696c-455b-9307-c390f71ba22c}]
"Policy" = "3"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"apn_ptnrs" = "^BNE"
"ds" = "http://www.search.ask.com/web?o=APN11693&p2=^BNE^BND515^YY^UA&apn_uid=9010306441844733&apn_ptnrs=^BNE&tpid=VZ-DTX&apn_dtid=^BND515^YY^UA&apn_dbr=&doi=2014-07-11&trgb=IE&psv=&gct=&q={searchTerms}"

[HKCU\Software\imeshvuzebandoo]
"Installer Language" = "1033"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"DisplayIcon" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\install.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppPath" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"Policy" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b714512e-696c-455b-9307-c390f71ba22c}]
"AppName" = "uninstall.exe"

[HKCU\Software\APNDTX\{b714512e-696c-455b-9307-c390f71ba22c}\IE]
"Path" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"AppID" = "100"

[HKCU\Software\APNDTX]
"Version" = "2.0.0.0"

[HKCU\Software\APNDTX\VZ-DTX]
"lastinstalled" = "IE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "36 E5 0A 26 F3 9C CF 01"

[HKCU\Software\APNDTX]
"ToolbarID" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\imeshvuzebandooIE]
"NoRepair" = "1"
"DisplayVersion" = "2.0.0.0"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"hp" = "http://www.search.ask.com/?o=APN11693&p2=^BNE^BND515^YY^UA&apn_uid=9010306441844733&apn_ptnrs=^BNE&tpid=VZ-DTX&apn_dtid=^BND515^YY^UA&apn_dbr=&doi=2014-07-11&trgb=IE&psv=&gct=hp"
"Version" = "2.0.0.0"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled" = "VZ-DTX"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"Locale" = "en_UA"
"CountryCode" = "UA"
"sysid" = "515"
"apn_uid" = "9010306441844733"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "62 14 1B 73 F3 9C CF 01"

[HKCU\Software\APNDTX\VZ-DTX\IE\macro]
"TrackID" = "BND515"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The PUP deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBarLayout"

The PUP disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"NSIS.Library.RegTool.v1"

"NSIS.Library.RegTool.v3"

"NSIS.Library.RegTool.v2"

"NSIS.Library.RegTool.v5"

"NSIS.Library.RegTool.v4"

The process TrustedInstaller.exe:4064 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\COMPONENTS\CanonicalData\Catalogs\333c3c8a825eb46b5db7da4db82125807c7afa0591882445f186c767af2ac85e]
"c!policy.9.0...vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_330b958c9268999d" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfc90u.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_92995f253c01eddb]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.4148]
"S1H" = "14 AA 6E 76 31 91 54 C4 03 11 34 8A 36 B3 FF AB"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_9aefdaaa829eb818]
"CatalogThumbprint" = "0244eac606f513cdc5623c418d394dd7fdcf005174c9136143ffd57e370c8bba眵Ɓ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.30729.4148]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 0F 8E 52 01 4B 08 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_3a15284abf58447e]
"c!policy.9.0...ft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_3a15284abf58447e" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4940]
"MCP_c22d037d" = "00 00 00 00 5A 96 52 01 4B 08 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.4148]
"sf" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4148]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"f!mfcm90.dll" = "6D 00 66 00 63 00 6D 00 39 00 30 00 2E 00 64 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_3624aa14c1dce505]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 B9 C8 52 01 CE 04 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90kor.dll" = "4D 00 46 00 43 00 39 00 30 00 4B 00 4F 00 52 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 00 F9 52 01 E0 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1\UnstagedFiles]
"atl90.dll" = "41 54 4C 39 30 2E 64 6C 6C"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_39e222e84b9e7e6f]
"CatalogThumbprint" = "fe0fac4e315b16deed38f335d82d54236d1dddb87577f2cadc062421a1e828a3"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633]
"S256H" = "24 BE B9 75 C2 7B 1D 95 FD D4 FE 4E 13 54 0E 21"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.4148]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 98 E5 52 01 68 13 00 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_330b958c9268999d]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1]
"S1H" = "38 09 81 95 0B 31 B2 00 22 13 37 FF CF FB FF 41"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1]
"CT" = "36 00 64 00 63 00 31 00 62 00 39 00 63 00 33 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8]
"S1H" = "FE 8C 92 2C 75 1D 5B CC FB 3B D3 CB 22 A9 B8 23"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 87 B0 52 01 C6 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.4148]
"S1H" = "AE 6F 51 9A C7 46 73 82 69 39 92 25 65 46 09 57"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90chs.dll" = "4D 46 43 39 30 43 48 53 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"f!mfc90u.dll" = "6D 00 66 00 63 00 39 00 30 00 75 00 2E 00 64 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.1]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
"msvcm90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.1]
"S1H" = "76 C9 DC 05 BC 6B 6B 4C A3 FA EB 6F 47 42 95 CE"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8]
"sf" = "2"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_330b958c9268999d]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\CanonicalData\Catalogs\6dc1b9c301d48eb965f7f4cee06ac63e7207040bfa6101252e8cea08a0855d4e]
"c!microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_92995f253c01eddb" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_3da38fdebd0e6822]
"Identity" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 A5 9E 52 01 3E 08 00 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_330b958c9268999d]
"CatalogThumbprint" = "333c3c8a825eb46b5db7da4db82125807c7afa0591882445f186c767af2ac85ecƁ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"S256H" = "26 93 44 15 5C 4C F6 E2 AE DE 35 F5 1F 79 11 C0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1]
"sf" = "2"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_3da38fdebd0e6822]
"CatalogThumbprint" = "cc70a861e6263ece8ebd924aed1f90031fe1c199ab22cd0f7c7f0a2558cd9322.Ɓ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 24 08 53 01 6C 05 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90enu.dll" = "4D 00 46 00 43 00 39 00 30 00 45 00 4E 00 55 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_a5325551f9d85633]
"AppID" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.30729.4148]
"(Default)" = "10"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_3624aa14c1dce505]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"
"CatalogThumbprint" = "522ed40176b2323ddf1104a8cafa128db5f21bbac59aaf6b48e59ac154a036f70Ɓ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.4148]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 59 D2 52 01 3F 13 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_3da38fdebd0e6822]
"ClosureFlags" = "3"

[HKU\.DEFAULT\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"Identity" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4D"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 42 89 52 01 CD 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.30729.4148]
"S1H" = "E4 EC 8B 0B 75 55 36 62 51 1D 04 0E 86 AD 97 AC"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633]
"c!microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_a5325551f9d85633" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_a5325551f9d85633]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_3a15284abf58447e]
"CatalogThumbprint" = "d2ca8f3588969dd145bf8b1a7124f0754cebffde0e20d205e2e767ee4bf69d2a"
"AppID" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90fra.dll" = "4D 00 46 00 43 00 39 00 30 00 46 00 52 00 41 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 87 CD 52 01 D2 04 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90rus.dll" = "4D 00 46 00 43 00 39 00 30 00 52 00 55 00 53 00"

[HKLM\COMPONENTS\CanonicalData\Catalogs\a8095efeef7cae736f55a416d69c2b12e250b764bbf39505a3456a6903d27c7d]
"c!microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_99b61f5e8371c1d4" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.21022.8]
"MCP_c22d037d" = "00 00 00 00 90 0D 53 01 8F 04 00 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_3a15284abf58447e]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 1F 12 53 01 D6 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 74 84 52 01 CE 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.1]
"S1H" = "EF 36 D4 10 E0 A9 EA 70 90 91 65 79 2A 07 E7 18"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 E3 A6 52 01 D4 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8\UnstagedFiles]
"vcomp90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)]
"UtilizedSpace_MCP_c22d037d" = "F7 22 52 01 00 00 00 00"

[HKLM\COMPONENTS\CanonicalData\Catalogs\fe0fac4e315b16deed38f335d82d54236d1dddb87577f2cadc062421a1e828a3]
"c!policy.9.0...vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_39e222e84b9e7e6f" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"c!microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_92995f253c01eddb" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.1]
"CT" = "64 00 32 00 63 00 61 00 38 00 66 00 33 00 35 00"

[HKLM\COMPONENTS\CanonicalData\Catalogs\0244eac606f513cdc5623c418d394dd7fdcf005174c9136143ffd57e370c8bba]
"c!microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_9aefdaaa829eb818" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818]
"Identity" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 41"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_3a15284abf58447e]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\CanonicalData\Catalogs\522ed40176b2323ddf1104a8cafa128db5f21bbac59aaf6b48e59ac154a036f7]
"c!policy.9.0...ft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_3624aa14c1dce505" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4148]
"S1H" = "83 EB 34 D7 CE D2 B9 DC 71 DB B8 49 AA 21 EA 78"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.1]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_3a15284abf58447e]
"S256H" = "69 55 F7 F5 CC 99 69 B8 69 B9 90 86 6D B9 02 DA"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90fra.dll" = "4D 46 43 39 30 46 52 41 2E 44 4C 4C"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_92995f253c01eddb]
"AppID" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4D"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_39e222e84b9e7e6f]
"c!policy.9.0...vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_39e222e84b9e7e6f" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1]
"CT" = "30 00 32 00 34 00 34 00 65 00 61 00 63 00 36 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_330b958c9268999d]
"Identity" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_3a15284abf58447e]
"Identity" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_951ab4128654b0c9]
"CatalogThumbprint" = "95ce0638280a2ff1d3cb1be6be97e25e47ff2be6f7c987e85530957c3751bf90眍Ɓ"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"c!microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_99b61f5e8371c1d4" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4940]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.30729.4148]
"S1H" = "DD 16 14 4C C5 08 00 43 4F CC B2 B6 FE 9C 3F 5E"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.4148]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4940]
"S1H" = "AA 99 E7 4A 4B C1 C0 3A D2 57 8D E2 4A 0B 3A 42"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"Identity" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4D"
"S256H" = "6C E2 C2 01 E1 39 B8 B7 FD D6 B0 15 1A D0 20 DB"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8]
"MCP_c22d037d" = "00 00 00 00 B3 02 53 01 71 05 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1]
"S1H" = "23 CA 6B 65 00 D5 28 6A FC B4 CD 40 F3 13 09 16"
"sf" = "2"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_330b958c9268999d]
"AppID" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_3da38fdebd0e6822]
"S256H" = "34 66 B6 B0 1E 23 20 74 33 3A E8 90 DE BA 8F D9"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_39e222e84b9e7e6f]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90esn.dll" = "4D 00 46 00 43 00 39 00 30 00 45 00 53 00 4E 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"c!microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_951ab4128654b0c9" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818]
"f!atl90.dll" = "41 00 54 00 4C 00 39 00 30 00 2E 00 64 00 6C 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_a5325551f9d85633]
"CatalogThumbprint" = "4c41971c13d332f75376e357800f14c8671cabe1762b1395ecb015bdaebe1343Ɓ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 9F 79 52 01 6B 05 00 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633]
"Identity" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4940]
"sf" = "1"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_3624aa14c1dce505]
"AppID" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_951ab4128654b0c9]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_39e222e84b9e7e6f]
"AppID" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"f!mfc90.dll" = "6D 00 66 00 63 00 39 00 30 00 2E 00 64 00 6C 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1]
"sf" = "2"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\CanonicalData\Catalogs\d2ca8f3588969dd145bf8b1a7124f0754cebffde0e20d205e2e767ee4bf69d2a]
"c!policy.9.0...ft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_3a15284abf58447e" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.1]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.4148]
"S1H" = "59 FC 44 3F E4 A9 36 69 AC E0 F5 9F A7 98 6B C9"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_3624aa14c1dce505]
"Identity" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
"msvcr90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 FC BE 52 01 BD 09 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4940]
"MCP_c22d037d" = "00 00 00 00 B7 AB 52 01 D0 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90enu.dll" = "4D 46 43 39 30 45 4E 55 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.1]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90jpn.dll" = "4D 00 46 00 43 00 39 00 30 00 4A 00 50 00 4E 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_951ab4128654b0c9]
"AppID" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 4D"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.4148]
"(Default)" = "6"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_99b61f5e8371c1d4]
"AppID" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 43"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1]
"CT" = "39 00 35 00 63 00 65 00 30 00 36 00 33 00 38 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\9.0]
"9.0.21022.8" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_3624aa14c1dce505]
"c!policy.9.0...ft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_3624aa14c1dce505" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90deu.dll" = "4D 00 46 00 43 00 39 00 30 00 44 00 45 00 55 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.1]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1]
"sf" = "2"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.4148]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
"msvcp90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_92995f253c01eddb]
"CatalogThumbprint" = "6dc1b9c301d48eb965f7f4cee06ac63e7207040bfa6101252e8cea08a0855d4eƁ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.4148]
"S1H" = "4F C7 D7 36 AD BC B2 7C 10 86 7E 21 90 BD D1 34"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8]
"CT" = "34 00 63 00 34 00 31 00 39 00 37 00 31 00 63 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4940]
"(Default)" = "6"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_3da38fdebd0e6822]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfc90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1]
"S1H" = "DA 6E 20 D5 AE 2F 76 AF 71 19 31 70 48 42 36 52"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.1]
"sf" = "1"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90kor.dll" = "4D 46 43 39 30 4B 4F 52 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1]
"CT" = "61 00 38 00 30 00 39 00 35 00 65 00 66 00 65 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4148]
"sf" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.1]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.1]
"CT" = "63 00 63 00 37 00 30 00 61 00 38 00 36 00 31 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.1]
"sf" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide]
"PublisherPolicyChangeTime" = "Type: REG_QWORD, Length: 8"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_9aefdaaa829eb818]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 E0 FD 52 01 D3 04 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\v!9.0.30729.1]
"S1H" = "E6 CA F0 F6 A2 0D C9 9F 62 27 42 55 D7 B2 1B 34"
"CT" = "66 00 65 00 30 00 66 00 61 00 63 00 34 00 65 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\v!9.0.30729.1]
"CT" = "35 00 32 00 32 00 65 00 64 00 34 00 30 00 31 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"f!msvcm90.dll" = "6D 00 73 00 76 00 63 00 6D 00 39 00 30 00 2E 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_3da38fdebd0e6822]
"c!policy.9.0...ft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_3da38fdebd0e6822" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\ServicingStackVersions]
"6.1.7601.17592 (win7sp1_gdr.110408-1631)" = "2014/7/11:10:33:47.468 6.1.7601.17592 (win7sp1_gdr.110408-1631)"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.1]
"S1H" = "64 21 A7 13 7F 81 51 EC C9 C6 32 1F CB 89 4E ED"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633]
"f!vcomp90.dll" = "76 00 63 00 6F 00 6D 00 70 00 39 00 30 00 2E 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_39e222e84b9e7e6f]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90esp.dll" = "4D 00 46 00 43 00 39 00 30 00 45 00 53 00 50 00"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_99b61f5e8371c1d4]
"CatalogThumbprint" = "a8095efeef7cae736f55a416d69c2b12e250b764bbf39505a3456a6903d27c7dꍕƁ"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1]
"S1H" = "CC E5 48 A1 81 09 83 7C D5 26 1A F8 35 AB 54 9D"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.21022.8]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90esp.dll" = "4D 46 43 39 30 45 53 50 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4940]
"S1H" = "74 EA A7 88 4B 21 D7 1F 33 34 94 89 89 7C 0A F6"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90ita.dll" = "4D 00 46 00 43 00 39 00 30 00 49 00 54 00 41 00"

[HKLM\COMPONENTS\CanonicalData\Catalogs\95ce0638280a2ff1d3cb1be6be97e25e47ff2be6f7c987e85530957c3751bf90]
"c!microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_951ab4128654b0c9" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.4148]
"(Default)" = "6"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90cht.dll" = "4D 00 46 00 43 00 39 00 30 00 43 00 48 00 54 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90esn.dll" = "4D 46 43 39 30 45 53 4E 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"f!msvcp90.dll" = "6D 00 73 00 76 00 63 00 70 00 39 00 30 00 2E 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_330b958c9268999d]
"c!policy.9.0...vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_330b958c9268999d" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097\v!9.0.30729.4148]
"S1H" = "80 93 28 44 A9 44 70 27 55 3E C3 07 5D F5 63 DF"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.4148]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfcm90u.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.4148]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4940]
"sf" = "1"

[HKLM\COMPONENTS\CanonicalData\Catalogs\4c41971c13d332f75376e357800f14c8671cabe1762b1395ecb015bdaebe1343]
"c!microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_a5325551f9d85633" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\v!9.0.30729.4148]
"S1H" = "31 95 AA CA BF 6A 85 7B 8A 02 CC 29 B3 F8 BA 35"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1]
"MCP_c22d037d" = "00 00 00 00 4D B5 52 01 AF 09 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"S256H" = "08 8C D1 14 A3 5A A0 03 0F 8A C8 09 40 2C 7C 22"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.21022.8]
"CT" = "33 00 33 00 33 00 63 00 33 00 63 00 38 00 61 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_39e222e84b9e7e6f]
"Identity" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1]
"(Default)" = "10"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818]
"c!microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_9aefdaaa829eb818" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90jpn.dll" = "4D 46 43 39 30 4A 50 4E 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_3624aa14c1dce505]
"S256H" = "8D C0 05 84 25 4A F1 6C 47 CA 9C 96 C9 44 75 51"

[HKLM\COMPONENTS]
"ExecutionState" = "2"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.4148]
"MCP_c22d037d" = "00 00 00 00 0A 7F 52 01 6A 05 00 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfcm90.dll" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818]
"ClosureFlags" = "3"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_330b958c9268999d]
"S256H" = "FE AE 5D B0 21 40 AA 1D 6C CD 8E EF 81 27 94 DF"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818]
"S256H" = "EB E1 76 88 C7 DC EA 0B F8 87 58 62 C8 C7 2A 58"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90rus.dll" = "4D 46 43 39 30 52 55 53 2E 44 4C 4C"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_9aefdaaa829eb818]
"AppID" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 41"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90deu.dll" = "4D 46 43 39 30 44 45 55 2E 44 4C 4C"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"Identity" = "4D 69 63 72 6F 73 6F 66 74 2E 56 43 39 30 2E 43"

[HKLM\COMPONENTS\CanonicalData\Deployments\microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_99b61f5e8371c1d4]
"i!SIAW_" = "00 00 00 00 1F 00 00 00 43 3A 5C 57 69 6E 64 6F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee\9.0]
"9.0.30729.1" = "01"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4]
"f!msvcr90.dll" = "6D 00 73 00 76 00 63 00 72 00 39 00 30 00 2E 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.21022.8]
"S1H" = "9E 2C 9A 79 1D 8E C7 78 4A 73 08 8C 2E 1E AF C1"

[HKLM\COMPONENTS\DerivedData\Components\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_39e222e84b9e7e6f]
"S256H" = "0E DF 78 65 CB 6E 59 40 E6 8D 63 1A FE E7 83 B0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\9.0]
"9.0.21022.8" = "01"

[HKLM\COMPONENTS\CanonicalData\Catalogs\cc70a861e6263ece8ebd924aed1f90031fe1c199ab22cd0f7c7f0a2558cd9322]
"c!policy.9.0...ft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_3da38fdebd0e6822" = "Type: REG_BINARY, Length: 0"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.4148]
"S1H" = "E3 17 DA F8 C4 AE B9 52 16 AF B2 EE 85 45 57 D7"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f\v!9.0.21022.8]
"sf" = "1"

[HKLM\COMPONENTS]
"StoreDirty" = "01"

[HKLM\COMPONENTS\CanonicalData\Deployments\policy.9.0...ft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_3da38fdebd0e6822]
"AppID" = "70 6F 6C 69 63 79 2E 39 2E 30 2E 4D 69 63 72 6F"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb]
"f!mfc90chs.dll" = "4D 00 46 00 43 00 39 00 30 00 43 00 48 00 53 00"

[HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9]
"f!mfcm90u.dll" = "6D 00 66 00 63 00 6D 00 39 00 30 00 75 00 2E 00"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90cht.dll" = "4D 46 43 39 30 43 48 54 2E 44 4C 4C"
"mfc90ita.dll" = "4D 46 43 39 30 49 54 41 2E 44 4C 4C"

The PUP deletes the following registry key(s):

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1\UnstagedFiles]
[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8\UnstagedFiles]

The PUP deletes the following value(s) in system registry:

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90fra.dll"
"mfc90esp.dll"

[HKLM\COMPONENTS]
"PoqexecFailure"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_bbd99e435df8a088]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90rus.dll"
"mfc90enu.dll"

[HKLM\COMPONENTS]
"PendingXmlIdentifier"
"LastScavengeFlags"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_1eef21b42ca2596f]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90esn.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809\v!9.0.21022.8\UnstagedFiles]
"vcomp90.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_bb797aeb5e404097]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfcm90u.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d\v!9.0.30729.1\UnstagedFiles]
"atl90.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
"msvcr90.dll"
"msvcp90.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90jpn.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_none_a268ec259de3174d]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfc90.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90chs.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471\v!9.0.30729.1\UnstagedFiles]
"msvcm90.dll"

[HKLM\COMPONENTS]
"RepairTransactionPended"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90kor.dll"

[HKLM\COMPONENTS]
"LastScavengeCookie"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90deu.dll"

[HKLM\COMPONENTS]
"ExecutionState"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_bb22ca2f5e815913]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfc90u.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_policy.9.0.microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_399d052615c6abee]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS]
"StoreDirty"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_none_a2f75f3b9d7989e4\v!9.0.30729.1\UnstagedFiles]
"mfcm90.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90cht.dll"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_none_ba5d016b21242809]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba471]
"SomeUnparsedVersionsExist"

[HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_none_f0ee8071fb10f4e2\v!9.0.30729.1\UnstagedFiles]
"mfc90ita.dll"

The process VuzeInstaller.exe:1948 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\ej-technologies\exe4j\jvms\c:/program files (x86)/java/jre6/bin/java.exe]
"Version" = "1.6.0_18"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities\FileAssociations]
".vuze" = "Vuze"
".torrent" = "Azureus"

[HKLM\SOFTWARE\Wow6432Node\ej-technologies\install4j\installations]
"allinstdirs8461-7759-5462-8226" = "%Program Files% (x86)\Vuze"

[HKCR\Azureus\shell]
"(Default)" = "open"

[HKCR\Azureus\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities\UrlAssociations]
"magnet" = "Magnet"

[HKCR\.torrent]
"(Default)" = "Azureus"

[HKCU\Software\ej-technologies\exe4j]
"InstallStarted" = "1"

[HKLM\SOFTWARE\Wow6432Node\ej-technologies\install4j\installations]
"instdir8461-7759-5462-8226" = "%Program Files% (x86)\Vuze"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities]
"ApplicationName" = "Vuze"

[HKCR\Vuze\Content Type]
"(Default)" = "application/x-vuze"

[HKLM\SOFTWARE\Wow6432Node\Azureus]
"(Default)" = "%Program Files% (x86)\Vuze"

[HKCU\Software\Azureus]
"exec" = "%Program Files% (x86)\Vuze\Azureus.exe"

[HKCR\Vuze\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"DisplayIcon" = "%Program Files% (x86)\Vuze\.install4j\i4j_extf_21_5p83tu_bm8amj.ico"

[HKCU\Software\ej-technologies\install4j\installations]
"allinstdirs8461-7759-5462-8226" = "%Program Files% (x86)\Vuze"

[HKCU\Software\ej-technologies\exe4j]
"InstallStarted_1948" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"URLInfoAbout" = "http://www.vuze.com"

[HKCU\Software\ej-technologies\exe4j\pids\c:\users\"%CurrentUserName%"\appdata\local\temp\vuzeinstall]
"vuzeinstaller.exe" = "1948"

[HKLM\SOFTWARE\Wow6432Node\Azureus]
"exec" = "%Program Files% (x86)\Vuze\Azureus.exe"

[HKCR\Azureus\Content Type]
"(Default)" = "application/x-bittorrent"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"Publisher" = "Azureus Software, Inc."

[HKCR\Azureus]
"(Default)" = "Vuze Download"

[HKLM\SOFTWARE\RegisteredApplications]
"Vuze" = "SOFTWARE\Azureus\Capabilities"

[HKCU\Software\ej-technologies\exe4j\jvms\c:/program files (x86)/java/jre6/bin/java.exe]
"LastWriteTime" = "0A 23 A7 C6 6B E4 CE 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"UninstallString" = "%Program Files% (x86)\Vuze\uninstall.exe"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities]
"ApplicationDescription" = "Bittorrent Downloader and Manager"

[HKCU\Software\Azureus]
"(Default)" = "%Program Files% (x86)\Vuze"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"InstallLocation" = "%Program Files% (x86)\Vuze"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities\UrlAssociations]
"dht" = "DHT"

[HKCR\Vuze]
"(Default)" = "Vuze File"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"DisplayVersion" = "5.3.0.0"

[HKCU\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent\OpenWithProgids]
"Azureus" = ""

[HKCR\Azureus\shell\open\command]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe %1"

[HKCR\.vuze]
"(Default)" = "Vuze"

[HKCR\Vuze\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Vuze\Azureus.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"VersionMajor" = "5"

[HKCR\Vuze\shell]
"(Default)" = "open"

[HKCU\Software\ej-technologies\install4j\installations]
"instdir8461-7759-5462-8226" = "%Program Files% (x86)\Vuze"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
"VersionMinor" = "3"
"DisplayName" = "Vuze"

[HKLM\SOFTWARE\Wow6432Node\Azureus\Capabilities\MIMEAssociations]
"application/x-bittorrent" = "Azureus"

The PUP deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]

The PUP deletes the following value(s) in system registry:

[HKCU\Software\ej-technologies\exe4j]
"InstallStarted_1948"

The process i4jdel0.exe:3824 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\Detection.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsSCM.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jdel0.exe,"

The process regsvr32.exe:2280 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{b714512e-696c-455b-9307-c390f71ba22c}]
"(Default)" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKCR\Wow6432Node\CLSID\{b714512e-696c-455b-9307-c390f71ba22c}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx.dll"
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{b714512e-696c-455b-9307-c390f71ba22c}]
"(Default)" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{b714512e-696c-455b-9307-c390f71ba22c}" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B714512E-696C-455B-9307-C390F71BA22C}]
"(Default)" = ""

The process regsvr32.exe:716 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCR\CLSID\{b714512e-696c-455b-9307-c390f71ba22c}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx64.dll"

[HKCR\CLSID\{b714512e-696c-455b-9307-c390f71ba22c}]
"(Default)" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{b714512e-696c-455b-9307-c390f71ba22c}" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B714512E-696C-455B-9307-C390F71BA22C}]
"(Default)" = ""

[HKCR\CLSID\{b714512e-696c-455b-9307-c390f71ba22c}\InprocServer32]
"ThreadingModel" = "Apartment"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b714512e-696c-455b-9307-c390f71ba22c}]
"(Default)" = "Movies Toolbar(Dist. by Azureus Software, Inc.)"

The process regsvr32.exe:2660 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCR\MoviesToolbarHelper.DNSGuard.1]
"(Default)" = "SafetyNut"

[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFD52~1.DLL"

[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\ProgID]
"(Default)" = "MoviesToolbarHelper.UrlHelper.1"

[HKCR\MoviesToolbarHelper.DNSGuard\CLSID]
"(Default)" = "{338a754c-b46e-4bf2-8ac8-23de36862ad3}"

[HKCR\MoviesToolbarHelper.DNSGuard]
"(Default)" = "SafetyNut"

[HKCR\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFD52~1.DLL"
"ThreadingModel" = "Apartment"

[HKCR\MoviesToolbarHelper.DNSGuard\CurVer]
"(Default)" = "MoviesToolbarHelper.UrlHelper.1"

[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}]
"(Default)" = "SafetyNut"

[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{934BEE21-C5A4-457E-B130-77CA098FBBD3}\1.0\0\win64]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFD52~1.DLL"

[HKCR\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}]
"(Default)" = "ErrorFilter Class"

[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\VersionIndependentProgID]
"(Default)" = "MoviesToolbarHelper.UrlHelper"

[HKCR\MoviesToolbarHelper.DNSGuard.1\CLSID]
"(Default)" = "{338a754c-b46e-4bf2-8ac8-23de36862ad3}"

The PUP deletes the following registry key(s):

[HKCR\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}]
[HKCR\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\Programmable]
[HKCR\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\InprocServer32]
[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\Programmable]
[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\ProgID]
[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}]
[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\VersionIndependentProgID]
[HKCR\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]

The process regsvr32.exe:2916 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\ProgID]
"(Default)" = "MoviesToolbarHelper.UrlHelper.1"

[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\MoviesToolbarHelper.DNSGuard]
"(Default)" = "SafetyNut"

[HKCR\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}\TypeLib]
"Version" = "1.0"
"(Default)" = "{934BEE21-C5A4-457E-B130-77CA098FBBD3}"

[HKCR\MoviesToolbarHelper.DNSGuard\CurVer]
"(Default)" = "MoviesToolbarHelper.UrlHelper.1"

[HKCR\Wow6432Node\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SAFD52~1.DLL"

[HKCR\TypeLib\{934BEE21-C5A4-457E-B130-77CA098FBBD3}\1.0\0\win32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SAFD52~1.DLL"

[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\InprocServer32]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1\SAFD52~1.DLL"

[HKCR\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}]
"(Default)" = "IDNSGuard"

[HKCR\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MoviesToolbarHelper.DNSGuard.1]
"(Default)" = "SafetyNut"

[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\VersionIndependentProgID]
"(Default)" = "MoviesToolbarHelper.UrlHelper"

[HKCR\MoviesToolbarHelper.DNSGuard\CLSID]
"(Default)" = "{338a754c-b46e-4bf2-8ac8-23de36862ad3}"

[HKCR\TypeLib\{934BEE21-C5A4-457E-B130-77CA098FBBD3}\1.0\HELPDIR]
"(Default)" = "C:\PROGRA~2\MOVIES~1\SAFETY~1"

[HKCR\Wow6432Node\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}\TypeLib]
"(Default)" = "{934BEE21-C5A4-457E-B130-77CA098FBBD3}"

[HKCR\Wow6432Node\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}]
"(Default)" = "IDNSGuard"

[HKCR\Wow6432Node\Interface\{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}\TypeLib]
"Version" = "1.0"

[HKCR\TypeLib\{934BEE21-C5A4-457E-B130-77CA098FBBD3}\1.0]
"(Default)" = "MoviesToolbarHelper Type Library"

[HKCR\TypeLib\{934BEE21-C5A4-457E-B130-77CA098FBBD3}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}]
"(Default)" = "ErrorFilter Class"

[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}]
"(Default)" = "SafetyNut"

[HKCR\MoviesToolbarHelper.DNSGuard.1\CLSID]
"(Default)" = "{338a754c-b46e-4bf2-8ac8-23de36862ad3}"

The PUP deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\Programmable]
[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}\InprocServer32]
[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\InprocServer32]
[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\ProgID]
[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}]
[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\Programmable]
[HKCR\Wow6432Node\CLSID\{338a754c-b46e-4bf2-8ac8-23de36862ad3}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{d6715933-3f8b-44bc-b4b2-682164832b31}]

The process vz_toolbar_6087708222368454533.tmp:2176 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"aw" = "No"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"DisplayName" = "Ask.com"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338a754c-b46e-4bf2-8ac8-23de36862ad3}]
"Flags" = "1024"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"ShowTabsWelcome" = "0"

[HKCU\SystemBrand]
"conflicted" = "SafetyNut"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"SuggestionsURL_JSON" = "http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&qu={searchTerms}&ft=json"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"OpenInForeground" = "0"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"sysid" = "515"
"Guid" = "{41A62DBF-5907-D9D4-1A4B-41BD8123E852}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3F 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"ShowSearchSuggestions" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"FaviconPath" = "%Program Files% (x86)\Movies Toolbar\SafetyNut\favicon.ico"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"sitime" = "1405074779"

[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x64" = "%Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"QuickTabsThreshold" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Recovery]
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "D3 4B 6D 7D F3 9C CF 01"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut]
"Version" = "5.0.0.13042"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"kbn" = "13042"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"URL" = "http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&q={searchTerms}"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut]
"browser" = " ie"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShowActivities" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"ostype" = "win64"

[HKCU\Software\Microsoft\Internet Explorer\Approved Extensions]
"{338A754C-B46E-4BF2-8AC8-23DE36862AD3}" = "51 66 7A 6C 4C 1D 3B 1B 5C 69 90 2F 51 E7 9F 06"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"Deleted" = "0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"FrameAuto" = "1"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"ShowSearchSuggestions" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"osl" = "en-US"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"FrameAuto" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"clid" = "{90103A6E-4184-4733-8978-81A79802DEAE}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"debugger" = "tasklist.exe"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\Detection.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll,"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"SuggestionsURL_JSON" = "http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&qu={searchTerms}&ft=json"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"ptype" = "n"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"URL" = "http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&q={searchTerms}"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"Enabled" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"DisplayName" = "Ask.com"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"ShortcutBehavior" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"ie_ds_supported" = "1"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"UseHomepageForNewTab" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"kisid" = "0"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"Groups" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"10" = "10"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"OpenAllHomePages" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"iver" = "5.0.0.13042"
"UID" = "9010306441844733"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut]
"activeBrowser" = "ie"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "62 14 1B 73 F3 9C CF 01"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"UC" = "405"
"os_user_type" = "Admin"
"LN" = "en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"AppID" = "100"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"SuggestionsURL_JSON" = "http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&qu={searchTerms}&ft=json"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShowClosedTabs" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"Deleted" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"home" = "%Program Files% (x86)\Movies Toolbar"
"osver" = "6.1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"FaviconPath" = "%Program Files% (x86)\Movies Toolbar\SafetyNut\favicon.ico"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"URL" = "http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=515&v=n13042-405&apn_uid=9010306441844733&apn_dtid=BND515&o=APN11693&apn_ptnrs=BNE&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"ie_hp_supported" = "1"
"iTime" = "2014-07-11"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"Country" = "UA"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"Deleted" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x86" = "%Program Files% (x86)\Movies Toolbar\SafetyNut\safetycrt.dll"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"DisplayName" = "Ask.com"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"pver" = "5.0.0.13042"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"10" = "10"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"ShowSearchSuggestions" = "1"

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"kapid" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8515}]
"FaviconPath" = "%Program Files% (x86)\Movies Toolbar\SafetyNut\favicon.ico"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The PUP adds the reference to itself to be executed when a user logs on:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoRestartShell" = "1"

The PUP deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\Recovery\AdminActive]
[HKCU\Software\Microsoft\Internet Explorer\Recovery]
[HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete]

The PUP deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"Appinit_Dlls"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows]
"Appinit_Dlls"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The PUP disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"removeMoviesToolbardatamngr"

"removeMoviesToolbartoolbar"

The process MyPC Backup.exe:3656 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

The process %original file name%.exe:240 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"
"WpadDecisionTime" = "E0 CC 14 69 3A 95 CF 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"
"WpadDecisionTime" = "36 E5 0A 26 F3 9C CF 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The PUP deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process BackupSetup.exe:3268 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\Detection.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\b7cc93c8\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsSCM.dll,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup]
"DisplayName" = "MyPC Backup"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup]
"DisplayVersion" = ""
"URLInfoAbout" = "http://www.mypcbackup.com"
"Publisher" = "JDi Backup Ltd"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup]
"DisplayIcon" = "%Program Files% (x86)\MyPC Backup\MyPC Backup.exe"
"UninstallString" = "%Program Files% (x86)\MyPC Backup\uninst.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MyPC Backup]
"(Default)" = "%Program Files% (x86)\MyPC Backup\BackupStack.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup]
"HelpLink" = "http://support.mypcbackup.com"

The PUP deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process SafetyNutManager.exe:1360 makes changes in the system registry.
The PUP creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\SafetyNut\General]
"srn1" = "F06DEFF2-5B9C-490D-910F-35D3A9119622"
"srn0" = "SafetyNutManager"

Dropped PE files

MD5 File path
8c738758980decd765211002d600c344 c:\Program Files (x86)\Movies Toolbar\SafetyNut\Helper.dll
55691ee6213482d357f8aa967c556adf c:\Program Files (x86)\Movies Toolbar\SafetyNut\Internet Explorer Settings.exe
95779d2bbed54feb645495285be970f2 c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\dtuser.exe
1a1aa1878f88a247728e2af246ee8245 c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx.dll
06450c9d3113c68c07ac2c570c7f709a c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx64.dll
b505d6a5896e99e06c48f5a5414ea490 c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb.dll
e4024be136ac6ccdb8285d88fecfa87e c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb64.dll
c5d83275ca9e2d4798dab0b0cb083357 c:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\uninstall.exe
4c313ed9cdc308744d35cda60812d7d0 c:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe
86594f130bf9fb126ce77219f9f92ff1 c:\Program Files (x86)\Movies Toolbar\SafetyNut\Uninstall.exe
42cb78faf217f5ceb3f740ab27fb3115 c:\Program Files (x86)\Movies Toolbar\SafetyNut\configmgrc3.cfg
2d6e84bb80489c9b44ccdcd361a1d202 c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetycrt.dll
e08aca68408950b19ece2b2c617eb339 c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetyldr.dll
20e78ea8fa0fab4a01d11f778a600355 c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetyldr_u.dll
b01e621cd288b80f8536409d7efc976d c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetynut.dll
19e0effa74767c74eda9faf62a6484f5 c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetynut.exe
9c731f228e20d52e0f42c99816ac5f29 c:\Program Files (x86)\Movies Toolbar\SafetyNut\safetynut_ie.dll
00574985b381bd646e73713f8df56fe5 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\Internet Explorer Settings.exe
8bc32259b95c51cd95eaf3a819e20ae2 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\configmgrc3.cfg
38b2164cf778333e1878461a11317e11 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll
c29c68f06001eefc9e2a6b16b2b1c5b8 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetyldr.dll
b0dbe864c9f538185923ed279d0b6dbb c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetyldr_u.dll
5bd877272a695d549120302a227c4cc8 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetynut.dll
b373f9f3d81086e4e313ec3f48cbf687 c:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetynut_ie.dll
e2c80c6c8ba5d2847601c5f8d426b63a c:\Program Files (x86)\MyPC Backup\AWSSDK.dll
5bfc53c0daee82e70ef02b9cf7ae3042 c:\Program Files (x86)\MyPC Backup\AlphaVSS.51.x86.dll
ba1d420f7fa1b4eef8cc127bee74a023 c:\Program Files (x86)\MyPC Backup\AlphaVSS.52.x64.dll
568754948b2aa5fcc41217fb28425cc5 c:\Program Files (x86)\MyPC Backup\AlphaVSS.52.x86.dll
a3ef02398e089dcd9708cbc4e427d0f7 c:\Program Files (x86)\MyPC Backup\AlphaVSS.60.x64.dll
057cf7fd20135899d616714534d0b7a8 c:\Program Files (x86)\MyPC Backup\AlphaVSS.60.x86.dll
3116e40a8b9709917e1dc1db4e068152 c:\Program Files (x86)\MyPC Backup\AlphaVSS.Common.dll
926dc40857c15a10325946e555020c39 c:\Program Files (x86)\MyPC Backup\BackupStack.exe
79fa03520f0389d286f50b92c522e017 c:\Program Files (x86)\MyPC Backup\Configuration Updater.exe
753da5b59f0fc465ccd60a598d9b5780 c:\Program Files (x86)\MyPC Backup\Crypto32.dll
199b0a1373fc914a9b756b1f9f882899 c:\Program Files (x86)\MyPC Backup\Crypto64.dll
581bf5d22365fb13b6dc11b64e2b329f c:\Program Files (x86)\MyPC Backup\GetText.dll
9b2ac62a9aab3369b253411c14b92fcb c:\Program Files (x86)\MyPC Backup\LogicNP.EZShellExtensions.dll
03e3bba202b3794ffcc16aa345ae69d7 c:\Program Files (x86)\MyPC Backup\MPCBClient.dll
33503824b2219604cb540148063910b2 c:\Program Files (x86)\MyPC Backup\MPCBContextMenu.dll
67147424a0aaf6c71e9acf0122bae9bc c:\Program Files (x86)\MyPC Backup\MPCBIconOverlays.dll
757e57a561676b7ad066bce63e31d02c c:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
5a5498e2176e0f40a8fddd53da88920e c:\Program Files (x86)\MyPC Backup\ObjectListView.dll
4bb211393828d585cb5396a273008d94 c:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet20_x64.exe
74a8c01b69adedd7f1330245cd994821 c:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet20_x86.exe
158c16d067a3e27c1234b03aa69120b2 c:\Program Files (x86)\MyPC Backup\RestartExplorer.exe
a5d9e1fa931b1002c7a798448496e04c c:\Program Files (x86)\MyPC Backup\Service Start.exe
256f0ddfada4a1f4e20f7abdc99a0e28 c:\Program Files (x86)\MyPC Backup\Shared Stack.dll
1f80c15acc3c04ffad4efb17274200bf c:\Program Files (x86)\MyPC Backup\Signup Wizard.exe
760cda7e27bc06b622490333816c7f1c c:\Program Files (x86)\MyPC Backup\UnRegisterExtensions.exe
738a57e0d8dd303b87220f209bd49024 c:\Program Files (x86)\MyPC Backup\Updater.exe
1946bde7c1276752a747bf987bd0ccbf c:\Program Files (x86)\MyPC Backup\diffstack.dll
81db880082752821345938f1b98f7d77 c:\Program Files (x86)\MyPC Backup\uninst.exe
9f71303bddecf888cc77c2a486769c9d c:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
80725a732aba27911402f9ca09fede23 c:\Program Files (x86)\MyPC Backup\x86\System.Data.SQLite.dll
33c369a535290299ed5e5167cea37fdc c:\Program Files (x86)\Vuze\.install4j\_shfoldr.dll
de395adb369470a953a11b8c300697e2 c:\Program Files (x86)\Vuze\.install4j\i4jdel.exe
7064bbef31ec2f71b5bef2a2c9e735a7 c:\Program Files (x86)\Vuze\.install4j\i4jinst.dll
e1102cedf0c818984c2aca2a666d4c5f c:\Program Files (x86)\Vuze\.install4j\unicows.dll
cb7d8f3ee1cdb0b87f2e82425f429096 c:\Program Files (x86)\Vuze\.install4j\user\mism.exe
718db77b8ab413db07b42fbd28b69d9f c:\Program Files (x86)\Vuze\Azureus.exe
7231d7c02089b0151ec422e569768b35 c:\Program Files (x86)\Vuze\AzureusUpdater.exe
10b8fd725d073ffe3a035f4bd0b5b2d1 c:\Program Files (x86)\Vuze\VuzeFW.exe
402563c0b51e446031c33d60e2fe5c71 c:\Program Files (x86)\Vuze\aereg.dll
a06600b3467e56c541161843253dc9c7 c:\Program Files (x86)\Vuze\uninstall.exe
70b22ef84ad2fc743eaa988334d0cb9b c:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-gdip-win32-4233.dll
5c0731a3a6028ab1362e0d0f5711ddc7 c:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-win32-4233.dll
0a742ec41a8fd5ed0f6b827365352abb c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\Vuze_Installer32[1].exe
e73b0f1819602cb6ef176fb78d76a47b c:\Users\"%CurrentUserName%"\AppData\Local\Temp\249D.tmp
e73b0f1819602cb6ef176fb78d76a47b c:\Users\"%CurrentUserName%"\AppData\Local\Temp\2B7A.tmp
cc1e34422f0fe7957531b7db55f193b5 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\BackupSetup.exe
888dc5ed27077fa016de05069effc83a c:\Users\"%CurrentUserName%"\AppData\Local\Temp\DTX\Reporting\ReportingHelper.dll
c0fe25f036dbad335a0227d4e7fa7511 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811\i4jdel.exe
de395adb369470a953a11b8c300697e2 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jdel0.exe
62efa7b730eb0523a026ea4325403b77 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsSCM.dll
8c738758980decd765211002d600c344 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll
05450face243b3a7472407b999b03a72 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll
fbda05aa26e02d38effb82294e83ea69 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll
40395c175553cb14d2050888efccdf00 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vcredist_x64.exe
bf32bf92400aee1414e66873c6b34183 c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\jacob-1.17-M2-x64.dll
b3774a86dc21ca4867380d5ad3844aed c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\jacob-1.17-M2-x86.dll
396a432ee4eaa1ed28bb1d6acbbda128 c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\libProcessAccess.dll
9e25d3fb7e91873f7f478263f0f53756 c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\libProcessAccess64.dll
6c6ea5e02fc8465df805b96fb490fc55 c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\AzureusTor.exe
9bd1c2ec28db8f8381c93e659d2df780 c:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\AzureusTor.exe.bak
c101f49f8fbdc203757ebf954d83af12 c:\Windows\Installer\$PatchCache$\Managed\EFEE0228DC83E77358593193D847A0EC\9.0.30729\FL_msdia71_dll_2_60035_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8
45e475fa46d8f04a682eb5eed5476e08 c:\Windows\winsxs\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_9aefdaaa829eb818\ATL90.dll
1e7ce519349ca4b49930ad843470a3f9 c:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4\msvcm90.dll
1f914c93052445e6629c37b81d421f7b c:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4\msvcp90.dll
425d035880430fbed64dd6205c77f5b2 c:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_99b61f5e8371c1d4\msvcr90.dll
e75de70a944462a9912c93e888b4106f c:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9\mfc90.dll
6962af1e97d8566e9c3496dc118fd3b7 c:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9\mfc90u.dll
e6ffdd8f997366fd88a799743579d389 c:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9\mfcm90.dll
f668d2f0c2377cc3b1459506a00b0f0b c:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.1_none_951ab4128654b0c9\mfcm90u.dll
deebddd75a0ecb8afd463bd3b2d9131a c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90CHS.DLL
b0552cba0f603e1730762056add5eb9a c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90CHT.DLL
2822498a5df669d223e6b093c00cb93a c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90DEU.DLL
91e5d7df820fb0fe7ead68c32bead0da c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90ENU.DLL
85bdf40f2af1944f579a7a134bd08a34 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90ESN.DLL
390ab412debb2be22fcaca5a59c9a3c2 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90ESP.DLL
598dcb951afd9a3d3d2e1abf7603de60 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90FRA.DLL
9e87f90e281ea1f41669920b349189c5 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90ITA.DLL
67695d68d782b48625a6c3ec08954216 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90JPN.DLL
91f1a8b875354dd5a1939e329af45656 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90KOR.DLL
32a4c8c6c2d09b98b14af92cd991a6d8 c:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90RUS.DLL
63e472c8410a0e9ce25c35a0482bbbbf c:\Windows\winsxs\amd64_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_a5325551f9d85633\vcomp90.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: Azureus Software, Inc.
Product Name: Vuze Stub Installer
Product Version:
Legal Copyright: (c) Azureus Software, Inc.
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description:
Comments:
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
UPX0 4096 212992 0 0 d41d8cd98f00b204e9800998ecf8427e
UPX1 217088 20480 17920 5.4398 2bca64eec5c017d838fff59dba2a7841
.rsrc 237568 28672 28160 3.07614 f19117df66a61d056f9cf8a1800c6d99

Dropped from:

466e5331f275b9202b9e4e8f501fbd41
bf8e760ce9685f4cb537ed8b38d2a28a

Downloaded by:

0341588c42d308555a6a44d38e2de102
f6f6f15dccf8bf9f17d3a6a91e46166d

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://d2ojrr2o5sghfq.cloudfront.net/files/Vuze_Installer32.exe
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/install/getpartner.php?format=json
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.0.0
hxxp://ec2-174-129-43-34.compute-1.amazonaws.com/install/imesh/imesh_ERROR:
hxxp://ec2-174-129-43-34.compute-1.amazonaws.com/install/imesh/AskLogo.png
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/mycc/
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"ask2"}}]}
hxxp://ec2-174-129-43-34.compute-1.amazonaws.com/install/imesh/imesh_ie.png
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/installer/featured_content.php
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"pcc"}}]}
hxxp://a1755.g.akamai.net/cdn/bundles/vuze/1/MoviesToolbarSetup_Vuze.exe
hxxp://websearch.ask.com/geolocation 199.36.100.106
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?33f733156f3622ea
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFNn9RNfzIsVHD4+5L79Hfs=
hxxp://snutbe-lb-1790352312.us-east-1.elb.amazonaws.com/login
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=9010306441844733&anxv=2.0.0.0&anxp=^BNE^BND515^YY^UA&tpid=VZ-DTX&appid=100&sysid=515&psv=&installationResult=success&executionTime=14025&targetbrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=6.1.1.sp1.x64&osArchitecture=64&ieVersionInstalled=10.0.9200.16521&ffVersionInstalled=29.0.1.5239&crVersionInstalled=35.0.1916.153&apn_dbr=IE&ie_ds=0&ie_hpr=1&ff_crm=0&ff_hpr=0&cr_ds=0&cr_hb=0&cr_start=0&ie_tbon=1&cr_tbon=0&ff_tbon=0&ie_tboff=0&ff_tboff=0&cr_tboff=0&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en
hxxp://snutbe-lb-1790352312.us-east-1.elb.amazonaws.com/install_statistics.php
hxxp://s3-website-us-east-1.amazonaws.com/93b19d8ae82613548f2de430759bddb8/Cloud_Backup_Setup.exe
hxxp://track.mypcbackup.com/6f952fa1/D0wnloads/MyPCBackup_Setup.exe 184.154.150.131
hxxp://mypcbackup.jdibackup.netdna-cdn.com/MyPCBackup_Setup.exe
hxxp://e3432.g.akamaiedge.net/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
hxxp://a1778.g2.akamai.net/media/js/common/unified-min-ee6aeb0d09eae95edfbfda15518aeedf.js
hxxp://a1778.g2.akamai.net/media/js/ask/ask-min-c133bfd6d3d4f57d8088f9be9b0b304a.js
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.10.1/jquery.min.js
hxxp://e3432.g.akamaiedge.net/ulpixel?anxuu=2A2E399E-C102-494A-9932-C609DB8FF83B&anxa=APNSearchOasis&anxv=4393&anxd=2014-07-10T04:00:00Z&anxsn=&anxu=http://www.search.ask.com/&anxl=en-US&anxlv=1405074796505&anxrd=none&anxrp=-&anxrk=-&anxrm=-&anxrb=-&anxrc=-&anxrs=-&anxsq=2&acoc=APN11693A&q=&o=APN11693A&l=dis&acpt=homepage&userip=193.138.244.231&tpr=&anxi=99A715B0-8605-40A0-86DA-D20C1D55B7B0&du=1&anxe=backFill&anxr=1789178047
hxxp://e3432.g.akamaiedge.net/assets/b2b/ask_flower_03b_24bit_06.png
hxxp://googlehosted.l.googleusercontent.com/static/fonts/cabin/v4/JEgmtEDzc-IH8jBshQXrYA.woff
hxxp://a1294.w20.akamai.net/beacon.js
hxxp://a1294.w20.akamai.net/b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796740&ns_c=utf-8&c8=Ask.com&c7=http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9=
hxxp://a1294.w20.akamai.net/b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796741&ns_c=utf-8&c8=Ask.com&c7=http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9=
hxxp://a1778.g2.akamai.net/media/images/favicon_new.ico
hxxp://track.mypcbackup.com/aadebc4830c51c2794a960fe5a9e11df.php 184.154.150.131
hxxp://a767.dscms.akamai.net/download/2/d/6/2d61c766-107b-409d-8fba-c39e61ca08e8/vcredist_x64.exe
hxxp://a1621.g.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1621.g.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1621.g.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1621.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?032d2f2dca96a284
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.1.2&service=rpc&payload={"azid":"installer","azv":"1.0.1.2","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"STUB_EXEC_0","azv":"1.0.1.2","installation-id":"","installer-version":"1.0.1.2","os-version":"Windows 7 Professional N_6.1_amd64_Service Pack 1","azid":"","java-version":"Java 32"}}]}
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir/SSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW+VUAg=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt+lGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAyvGbEyaFTw/abLEQ3zC1w=
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=config:login
hxxp://ec2-174-129-43-152.compute-1.amazonaws.com/version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as0:6:ip_asn0:4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:ip12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e
hxxp://ec2-174-129-43-152.compute-1.amazonaws.com/version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as5:343236:ip_asn22:IPCOM-AS IP-Com Ltd,UA4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:sc12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e3:tsli2e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=vuzenews:get-entries
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-featured
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/update/pluginlist3.php?type=&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&pmv=1.27&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-popular
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/update/pluginlist3.php?plugin=aercm&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aercm=0.4.8
hxxp://d2ojrr2o5sghfq.cloudfront.net/torrent/torrents/aercm_0.4.9.jar.torrent
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/update/pluginlist3.php?plugin=azutp&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_azutp=0.5.3
hxxp://d2ojrr2o5sghfq.cloudfront.net/torrent/torrents/azutp_0.5.4.zip.torrent
hxxp://web-rpc-2073581709.us-east-1.elb.amazonaws.com/update/pluginlist3.php?plugin=aznettor&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aznettor=0.6
hxxp://d2ojrr2o5sghfq.cloudfront.net/torrent/torrents/aznettor-win32_0.6.2.zip.torrent
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/welcome.start?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/css/reset-fonts-grids.css
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/min/g=jsCorp
hxxp://googleapis.l.google.com/ajax/libs/prototype/1.7.0.0/prototype.js
hxxp://googleapis.l.google.com/ajax/libs/scriptaculous/1.9.0/effects.js
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/css/content.css
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://dev.visualwebsiteoptimizer.com/j.php?a=22587&u=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&r=0.22641796904262673 5.10.88.212
hxxp://www-google-analytics.l.google.com/collect?v=1&_v=j23&a=1889048950&t=pageview&_s=1&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&dp=/ftux&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&_u=MGAAgAg~&jid=836542324&cid=1940305532.1405074858&tid=UA-1474242-4&z=1283527551
hxxp://d1ov8b9v5fwdrf.cloudfront.net/img/ftux/new/ftux_bg.gif
hxxp://stats.l.doubleclick.net/collect?t=dc&aip=1&v=1&_v=j23&tid=UA-1474242-4&cid=1940305532.1405074858&jid=836542324&_u=MGAAgAg~&z=681472631
hxxp://d1ov8b9v5fwdrf.cloudfront.net/img/ftux/new/getting_started_logo.png
hxxp://e6845.ce.akamaiedge.net/crls/secureca.crl
hxxp://d1ov8b9v5fwdrf.cloudfront.net/img/new/home_get_plus_btn.png
hxxp://d1ov8b9v5fwdrf.cloudfront.net/img/ftux/getitbtn.png
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6aQ==
hxxp://plus.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGPd858N5gFU
hxxp://www-google-analytics.l.google.com/collect?v=1&_v=j23&a=1889048950&t=event&_s=2&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&ec=FTUX&ea=impression&_u=MGAAgAg~&jid=&cid=1940305532.1405074858&tid=UA-1474242-4&z=1994118105
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAFSh8UnRmbfJXQAAQAAAVI=
hxxp://d2ojrr2o5sghfq.cloudfront.net/torrent/files/aznettor-win32_0.6.2.zip
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEE85k74DXWqU5PECQf8LKFs=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDc7OSu8vFjrL37grdbCbMg=
hxxp://cf2.vuze.com/img/new/home_get_plus_btn.png 54.230.95.30
hxxp://vrpc.vuze.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template 54.225.151.16
hxxp://cdn.mypcbackup.com/MyPCBackup_Setup.exe 108.161.187.46
hxxp://b.scorecardresearch.com/beacon.js 188.43.72.26
hxxp://plugins.vuze.com/update/pluginlist3.php?plugin=aznettor&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aznettor=0.6 23.23.236.2
hxxp://aff-software.s3-website-us-east-1.amazonaws.com/93b19d8ae82613548f2de430759bddb8/Cloud_Backup_Setup.exe 54.231.16.132
hxxp://cf1.vuze.com/torrent/torrents/aznettor-win32_0.6.2.zip.torrent 54.230.94.142
hxxp://cf1.vuze.com/torrent/files/aznettor-win32_0.6.2.zip 54.230.94.142
hxxp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1 107.20.216.14
hxxp://www.search.ask.com/assets/b2b/ask_flower_03b_24bit_06.png 23.215.96.65
hxxp://stats.g.doubleclick.net/collect?t=dc&aip=1&v=1&_v=j23&tid=UA-1474242-4&cid=1940305532.1405074858&jid=836542324&_u=MGAAgAg~&z=681472631 173.194.70.156
hxxp://vrpc.vuze.com/vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.1.2&service=rpc&payload={"azid":"installer","azv":"1.0.1.2","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"STUB_EXEC_0","azv":"1.0.1.2","installation-id":"","installer-version":"1.0.1.2","os-version":"Windows 7 Professional N_6.1_amd64_Service Pack 1","azid":"","java-version":"Java 32"}}]} 54.225.151.16
hxxp://plugins.vuze.com/update/pluginlist3.php?plugin=azutp&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_azutp=0.5.3 23.23.236.2
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= 23.43.139.27
hxxp://cf1.vuze.com/files/Vuze_Installer32.exe 54.230.94.142
hxxp://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4 23.215.96.65
hxxp://client.vuze.com/css/content.css 107.20.216.14
hxxp://vrpc.vuze.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=config:login 54.225.151.16
hxxp://client.vuze.com/welcome.start?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1 107.20.216.14
hxxp://preved.safetynutbe.com/login 174.129.22.63
hxxp://vrpc.vuze.com/mycc/ 54.225.151.16
hxxp://service.safetynutbe.com/install_statistics.php 50.17.206.223
hxxp://cdn01.vuze.com/install/imesh/imesh_ie.png 174.129.43.34
hxxp://crl.geotrust.com/crls/secureca.crl 23.43.133.163
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=9010306441844733&anxv=2.0.0.0&anxp=^BNE^BND515^YY^UA&tpid=VZ-DTX&appid=100&sysid=515&psv=&installationResult=success&executionTime=14025&targetbrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=6.1.1.sp1.x64&osArchitecture=64&ieVersionInstalled=10.0.9200.16521&ffVersionInstalled=29.0.1.5239&crVersionInstalled=35.0.1916.153&apn_dbr=IE&ie_ds=0&ie_hpr=1&ff_crm=0&ff_hpr=0&cr_ds=0&cr_hb=0&cr_start=0&ie_tbon=1&cr_tbon=0&ff_tbon=0&ie_tboff=0&ff_tboff=0&cr_tboff=0&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en 74.113.233.187
hxxp://download.cdn.safetynutbe.com/cdn/bundles/vuze/1/MoviesToolbarSetup_Vuze.exe 188.43.72.227
hxxp://cdn01.vuze.com/install/imesh/imesh_ERROR: Unresolved installer variable 174.129.43.34
hxxp://themes.googleusercontent.com/static/fonts/cabin/v4/JEgmtEDzc-IH8jBshQXrYA.woff 173.194.39.76
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAFSh8UnRmbfJXQAAQAAAVI= 108.162.232.202
hxxp://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/effects.js 173.194.70.95
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt+lGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAyvGbEyaFTw/abLEQ3zC1w= 93.184.220.29
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDc7OSu8vFjrL37grdbCbMg= 23.43.139.27
hxxp://vrpc.vuze.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-featured 54.225.151.16
hxxp://www.google-analytics.com/collect?v=1&_v=j23&a=1889048950&t=pageview&_s=1&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&dp=/ftux&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&_u=MGAAgAg~&jid=836542324&cid=1940305532.1405074858&tid=UA-1474242-4&z=1283527551 173.194.39.99
hxxp://cf2.vuze.com/img/ftux/getitbtn.png 54.230.95.30
hxxp://cf1.vuze.com/torrent/torrents/azutp_0.5.4.zip.torrent 54.230.94.142
hxxp://b.scorecardresearch.com/b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796740&ns_c=utf-8&c8=Ask.com&c7=http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9= 188.43.72.26
hxxp://akd.apnstatic.com/media/images/favicon_new.ico 212.30.134.197
hxxp://cf2.vuze.com/img/ftux/new/getting_started_logo.png 54.230.95.30
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGPd858N5gFU 173.194.113.193
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= 23.43.139.27
hxxp://cf1.vuze.com/torrent/torrents/aercm_0.4.9.jar.torrent 54.230.94.142
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= 23.43.139.27
hxxp://download.microsoft.com/download/2/d/6/2d61c766-107b-409d-8fba-c39e61ca08e8/vcredist_x64.exe 212.30.134.183
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl 188.43.73.9
hxxp://client.vuze.com/min/g=jsCorp 107.20.216.14
hxxp://vrpc.vuze.com/vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"pcc"}}]} 54.225.151.16
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= 23.43.139.27
hxxp://gtglobal-ocsp.geotrust.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6aQ== 23.43.139.27
hxxp://vrpc.vuze.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-popular 54.225.151.16
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= 23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl 188.43.73.9
hxxp://www.google-analytics.com/collect?v=1&_v=j23&a=1889048950&t=event&_s=2&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&ec=FTUX&ea=impression&_u=MGAAgAg~&jid=&cid=1940305532.1405074858&tid=UA-1474242-4&z=1994118105 173.194.39.99
hxxp://plugins.vuze.com/update/pluginlist3.php?plugin=aercm&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aercm=0.4.8 23.23.236.2
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFNn9RNfzIsVHD4+5L79Hfs= 23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= 23.43.139.27
hxxp://vrpc.vuze.com/vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=vuzenews:get-entries 54.225.151.16
hxxp://b.scorecardresearch.com/b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796741&ns_c=utf-8&c8=Ask.com&c7=http://www.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9= 188.43.72.26
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?032d2f2dca96a284 188.43.72.240
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir/SSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW+VUAg= 93.184.220.29
hxxp://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEE85k74DXWqU5PECQf8LKFs= 23.43.139.27
hxxp://www.google-analytics.com/analytics.js 173.194.39.99
hxxp://cf2.vuze.com/img/ftux/new/ftux_bg.gif 54.230.95.30
hxxp://client.vuze.com/css/reset-fonts-grids.css 107.20.216.14
hxxp://vrpc.vuze.com/vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.0.0 54.225.151.16
hxxp://akd.apnstatic.com/media/js/common/unified-min-ee6aeb0d09eae95edfbfda15518aeedf.js 212.30.134.197
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl 188.43.73.9
hxxp://www.vuze.com/installer/featured_content.php 107.20.216.14
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js 173.194.70.95
hxxp://akd.apnstatic.com/media/js/ask/ask-min-c133bfd6d3d4f57d8088f9be9b0b304a.js 212.30.134.197
hxxp://www.vuze.com/install/getpartner.php?format=json 107.20.216.14
hxxp://plugins.vuze.com/update/pluginlist3.php?type=&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&pmv=1.27&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav: 23.23.236.2
hxxp://cdn01.vuze.com/install/imesh/AskLogo.png 174.129.43.34
hxxp://www.search.ask.com/ulpixel?anxuu=2A2E399E-C102-494A-9932-C609DB8FF83B&anxa=APNSearchOasis&anxv=4393&anxd=2014-07-10T04:00:00Z&anxsn=&anxu=http://www.search.ask.com/&anxl=en-US&anxlv=1405074796505&anxrd=none&anxrp=-&anxrk=-&anxrm=-&anxrb=-&anxrc=-&anxrs=-&anxsq=2&acoc=APN11693A&q=&o=APN11693A&l=dis&acpt=homepage&userip=193.138.244.231&tpr=&anxi=99A715B0-8605-40A0-86DA-D20C1D55B7B0&du=1&anxe=backFill&anxr=1789178047 23.215.96.65
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl 188.43.73.9
hxxp://vrpc.vuze.com/vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"ask2"}}]} 54.225.151.16
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?33f733156f3622ea 188.43.72.240
hxxp://ajax.googleapis.com/ajax/libs/prototype/1.7.0.0/prototype.js 173.194.70.95
hxxp://version.vuze.com/version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as5:343236:ip_asn22:IPCOM-AS IP-Com Ltd,UA4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:sc12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e3:tsli2e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e 174.129.43.152
hxxp://version.vuze.com/version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as0:6:ip_asn0:4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:ip12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e 174.129.43.152
dht.vuze.com 174.129.43.152
cpc1-king8-0-0-cust125.19-1.cable.virginm.net 77.103.196.126
tracker.update.vuze.com 184.73.171.7
apis.google.com 173.194.113.194
ieonline.microsoft.com 204.79.197.200


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY Vulnerable Java Version 1.6.x Detected
ET TROJAN Suspicious User-Agent (Installer)
ET TROJAN Java EXE Download by Vulnerable Version - Likely Driveby
ET POLICY Java EXE Download
ET TROJAN Suspicious User-Agent (NSIS_DOWNLOAD)
ET POLICY Executable served from Amazon S3
ET P2P Azureus P2P Client User-Agent
ET P2P possible torrent download
ET P2P Vuze BT UDP Connection
ET MALWARE SOCKSv5 UDP Proxy Inbound Connect Request (Linux Source)
ET P2P BitTorrent - Torrent File Downloaded
ET POLICY HTTP Request on Unusual Port Possibly Hostile
GPL P2P BitTorrent announce request
ET P2P BitTorrent Announce
ET P2P Vuze BT UDP Connection (4)
GPL P2P BitTorrent transfer

Traffic

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDc7OSu8vFjrL37grdbCbMg= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Tue, 08 Jul 2014 22:12:37 GMT
Expires: Tue, 15 Jul 2014 22:12:37 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1844
Cache-Control: max-age=387556, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:35:27 GMT
Connection: keep-alive
0..0......)0..%.. .....0......0...0...........0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign
Class 3 Code Signing 2010 OCSP Responder..20140708221237Z0s0q0I0... ..
.................F....0.yV......{&.K......&.......7;9 ..X./~....l.....
20140708221237Z....20140715221237Z0...*.H...............t....[....&;.*
. .T.....FP'.FoC.}.]NT:... .b..R.=.l$.wm1........9.....5k..O1...vCo.'O
,..C.*./.J.Ca/.......4...r..6.....{..........P6(.\2..0.E6....!.....09.
..L. ...&$j...m......}.uZ...;.n..q............KJr(:.5|a..Jj ..nR...9..
..t..K.(V0@J..|D...3...s...Q>.....0...0...0..........0...?..-..A.F.
.p0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....V
eriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.c
om/rpa (c)101.0,..U...%VeriSign Class 3 Code Signing 2010 CA0...140621
000000Z..140919235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U
....VeriSign Trust Network1:08..U...1VeriSign Class 3 Code Signing 201
0 OCSP Responder0.."0...*.H.............0..........}..{.x.fh........'.
U...D.D.n.g......B..(1.....o4.=..<v.F.aV..U...'........B........77.
..........:....=....C..T.K..j......8..i..}..f........0:J...'.{M...-.g.
-(.4n......J...}.....U..8.o.{....\. ......q...h..<.....<.M...^.7
....S.x.=....rs#S~VY.....=.....GJw.........0...0...U....0.0....U. ...0
..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. ..
.....0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by reference li
ab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........0... ....

<<< skipped >>>

GET /MyPCBackup_Setup.exe HTTP/1.0
Host: cdn.mypcbackup.com
User-Agent: NSISDL/1.2 (Mozilla)
Accept: */*


HTTP/1.1 200 OK
Date: Fri, 11 Jul 2014 10:33:15 GMT
Content-Type: application/octet-stream
Content-Length: 5464192
Connection: close
x-amz-id-2: QXTM8aFpDZceuTRo0JYwwenK7VhV0UZhyTIO4vAUSWtLkT8f6XPilHxVUeMi9VKS
x-amz-request-id: AA53935064E4F43F
Last-Modified: Tue, 24 Jun 2014 08:32:36 GMT
ETag: "cc1e34422f0fe7957531b7db55f193b5"
Server: NetDNA-cache/2.2
X-Cache: HIT
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................P......S.S......................................s.
.........(m.......... NS.`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@..@.data........
........r..............@....ndata.......@...........................rs
rc...(m.......n...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>B..H.P.u..u..u...Hr@..B...SV.5.>B..E.WP.u...Lr@..e...E..E.
P.u...Pr@..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
...Tr@..u....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......P
p@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h.6B.W..Xr@..u.W...u....E.P.u..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir/SSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW+VUAg= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.digicert.com


HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=509498
Content-Type: application/ocsp-response
Date: Fri, 11 Jul 2014 10:33:44 GMT
Etag: "53bf8034-1d7"
Expires: Thu, 17 Jul 2014 22:33:44 GMT
Last-Modified: Fri, 11 Jul 2014 06:12:04 GMT
Server: ECS (ams/D1BF)
X-Cache: HIT
Content-Length: 471
0..........0..... .....0......0...0......E.......1-Q...!..m....2014071
0170000Z0s0q0I0... ............@..D3=?..Mn8...Q..E.......1-Q...!..m...
....._..fuSC.o.P.....20140710170000Z....20140717170000Z0...*.H........
.....94......>.....i......H.uBj..m..|......4.....y...!@.#...|./._,.
.:.k......e.*T.mz...m8e.XZ]..q?..V....K]... (J...{.`.W.?....."...%....
I-.1s..hcb..c.Iak.E......)<.u......O.k.....pX.L.Y.>B..:..X.}...*
..X.k.f.....B........m.'...(.KH....f....8....d...I......5..%HTTP/1.1 2
00 OK..Accept-Ranges: bytes..Cache-Control: max-age=509498..Content-Ty
pe: application/ocsp-response..Date: Fri, 11 Jul 2014 10:33:44 GMT..Et
ag: "53bf8034-1d7"..Expires: Thu, 17 Jul 2014 22:33:44 GMT..Last-Modif
ied: Fri, 11 Jul 2014 06:12:04 GMT..Server: ECS (ams/D1BF)..X-Cache: H
IT..Content-Length: 471..0..........0..... .....0......0...0......E...
....1-Q...!..m....20140710170000Z0s0q0I0... ............@..D3=?..Mn8..
.Q..E.......1-Q...!..m........_..fuSC.o.P.....20140710170000Z....20140
717170000Z0...*.H.............94......>.....i......H.uBj..m..|.....
.4.....y...!@.#...|./._,..:.k......e.*T.mz...m8e.XZ]..q?..V....K]... (
J...{.`.W.?....."...%....I-.1s..hcb..c.Iak.E......)<.u......O.k....
.pX.L.Y.>B..:..X.}...*..X.k.f.....B........m.'...(.KH....f....8....
d...I......5..%
....

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt+lGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAyvGbEyaFTw/abLEQ3zC1w= HTTP/1.1

Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.digicert.com


HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=510625
Content-Type: application/ocsp-response
Date: Fri, 11 Jul 2014 10:33:44 GMT
Etag: "53bf87cf-1d7"
Expires: Thu, 17 Jul 2014 22:33:44 GMT
Last-Modified: Fri, 11 Jul 2014 06:44:31 GMT
Server: ECS (ams/D1C4)
X-Cache: HIT
Content-Length: 471
0..........0..... .....0......0...0......Z..{*....q..`.-.eu.X..2014071
1062900Z0s0q0I0... .........G.h...#......Vm.Q....Z..{*....q..`.-.eu.X.
.....2hT........\....20140711062900Z....20140718064400Z0...*.H........
.......HVN/....S.2... j\p....l.?9..ZGb.$A....nn.oO-..z..}d...6...`..3.
....7..:{..e..x37.G......{vp........j.WxRr.5.........-...(29x9..A.....
....%s..E ...F..w...~XhK.H..}5..z.tX.S..7R?.....Y..AD.._9..C.>{(..3
H/......<....\_.@L.Gp..!.C.dCf.zKk.6..B..,.q..._...w.hHTTP/1.1 200
OK..Accept-Ranges: bytes..Cache-Control: max-age=510625..Content-Type:
application/ocsp-response..Date: Fri, 11 Jul 2014 10:33:44 GMT..Etag:
"53bf87cf-1d7"..Expires: Thu, 17 Jul 2014 22:33:44 GMT..Last-Modified
: Fri, 11 Jul 2014 06:44:31 GMT..Server: ECS (ams/D1C4)..X-Cache: HIT.
.Content-Length: 471..0..........0..... .....0......0...0......Z..{*..
..q..`.-.eu.X..20140711062900Z0s0q0I0... .........G.h...#......Vm.Q...
.Z..{*....q..`.-.eu.X......2hT........\....20140711062900Z....20140718
064400Z0...*.H...............HVN/....S.2... j\p....l.?9..ZGb.$A....nn.
oO-..z..}d...6...`..3.....7..:{..e..x37.G......{vp........j.WxRr.5....
.....-...(29x9..A.........%s..E ...F..w...~XhK.H..}5..z.tX.S..7R?.....
Y..AD.._9..C.>{(..3H/......<....\_.@L.Gp..!.C.dCf.zKk.6..B..,.q.
.._...w.h..

<<< skipped >>>

GET /collect?t=dc&aip=1&v=1&_v=j23&tid=UA-1474242-4&cid=1940305532.1405074858&jid=836542324&_u=MGAAgAg~&z=681472631 HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: stats.g.doubleclick.net
Connection: Keep-Alive
Cookie: id=caebd6253000002||t=1384780400|et=730|cs=002213fd480c4c2631f7c541a4


HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Wed, 09 Jul 2014 04:24:39 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 194980
Alternate-Protocol: 80:quic
GIF89a.............,...........D..;..


GET /vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.1.2&service=rpc&payload={"azid":"installer","azv":"1.0.1.2","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"STUB_EXEC_0","azv":"1.0.1.2","installation-id":"","installer-version":"1.0.1.2","os-version":"Windows 7 Professional N_6.1_amd64_Service Pack 1","azid":"","java-version":"Java 32"}}]} HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: vrpc.vuze.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:33:34 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 14
Connection: keep-alive
{"replies":[]}..


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.thawte.com


HTTP/1.1 200 OK
Last-Modified: Wed, 09 Jul 2014 00:32:51 GMT
Expires: Wed, 16 Jul 2014 00:32:51 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1586
Cache-Control: max-age=395984, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:34:49 GMT
Connection: keep-alive
0.........'0..#.. .....0......0...0........a0_1.0...U....US1.0...U....
thawte, Inc.1907..U...0thawte Primary Root OCSP Responder Certificate
2..20140709003251Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1.
.j..F.WHP..G.Mxs..../.p./.^....20140709003251Z....20140716003251Z0...*
.H.............K cwmP..z...2..s..aR... q.[N.d..\.($...8.Kw}Yw(.g......
b,....U.t......W?". ....m.X.J.C....M.h{....0..........6D...=. ..'.ok4T
....p.....D"...N :a;.....(lg..F.T.[......-7Y.@u.?......VY.u...R.3..9..
zL.......5%Ct3.>e%.8...rjE#..K`.%....qwE.$iA..B...9W...... _.....0.
..0...0.............MMG....Y...{.0...*.H........0..1.0...U....US1.0...
U....thawte, Inc.1(0&..U....Certification Services Division1806..U.../
(c) 2006 thawte, Inc. - For authorized use only1.0...U....thawte Prima
ry Root CA0...131112000000Z..141212235959Z0_1.0...U....US1.0...U....th
awte, Inc.1907..U...0thawte Primary Root OCSP Responder Certificate 20
.."0...*.H.............0.........5...............#...{..M&.U.......:dD
.}/.. .......w3X...U....`iM..a(......-.Z.a..y"......S3...._.....W.....
..7.".p..c......?4v....:L....#..f......?F.(2.HSi2...$M..Y}Y=...m.Du...
..sg..m4c....1..%^..G..{..s.....;:7...a.v.1..[..|.?....9.pi./.........
.}.(X_.-......l0j0...U.%..0... .......0... .....0......0...U.......0.0
...U...........0$..U....0...0.1.0...U....2048-TGV-4620...*.H..........
...0.*P_..-<._..xr..........e...(........... .[.2..$/).gW...J.u....
......6`...^.b..A.T.F.7..r.B...R...o.._.eF.........G.cK.../._ ..u...W.
..S2......#.At.h...X..-MO....O8...<......."vDE..8.cR....tA..;7.

<<< skipped >>>

GET /version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as0:6:ip_asn0:4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:ip12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e HTTP/1.1
User-Agent: Java/1.6.0_18
Host: version.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Server: Azureus 5.3.0.1_CVS
Connection: close
Content-Length: 977
d16:autoinstall_pids30:azutp,aercm,azlocprov,aznettor20:autoinstall_pi
ds_sig160:R.Z&...YNy...'....E98p4V..5.LX..*.O........$..U.....?......)
....<.'j1%..t.....]MCB.....>....x=W.. ..J./..uf6.a...N.O..;R]...
uE1....&..)..n.....#.-.x.b&?xdK.|#.~8:dht_bootld1:a4:L...1:pi49148eed1
:a4:^..g1:pi51000eed1:a4:....1:pi49570eed1:a4:...~1:pi20767eed1:a4:...
.1:pi17165eed1:a4:K...1:pi53863eed1:a4:....1:pi41960eed1:a4:K.c.1:pi62
702eed1:a4:pv..1:pi52174eed1:a4:.yk_1:pi42132eed1:a4:G..f1:pi6881eed1:
a4:F...1:pi27234eed1:a4:X..I1:pi34657eed1:a4:....1:pi58779eed1:a4:....
1:pi37308eed1:a4:....1:pi65489eee10:enable_dht4:true23:enable_dht_exte
nded_use4:true10:feat_flags3:5128:filename63:hXXp://cf1.vuze.com/torre
nt/torrents/Azureus5.3.0.0.jar.torrent17:plugin_update_url24:hXXp://pl
ugins.vuze.com/11:source_infod2:cc2:UA10:dvd_formati0ee17:source_ip_ad
dress15:193.138.244.2317:swt_url69:hXXp://torrent.vuze.com/torrents/sw
t-4233-win32-win32-x86.zip.torrent11:swt_version4:42337:version7:5.3.0
.0e..


GET /93b19d8ae82613548f2de430759bddb8/Cloud_Backup_Setup.exe HTTP/1.1
X-Client-Application: install4j
User-Agent: Java/1.6.0_18
Host: aff-software.s3-website-us-east-1.amazonaws.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
x-amz-id-2: 8XO4CaPJ/oi9DwTcYvSJbBeGCrGByHfr86VXaRaPjTex4yisP4tlk5iJo0SoAKo99/zOAhBp5IE=
x-amz-request-id: 535CF7FCFE579AD8
Date: Fri, 11 Jul 2014 10:33:14 GMT
Last-Modified: Tue, 08 Jul 2014 14:36:42 GMT
ETag: "2172fa81a270f7ac62cb01fb9c1d2056"
Content-Type: application/octet-stream
Content-Length: 73832
Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................^...........0.......p....@.........
.................................................................t....
......0m..............p...............................................
.............p...............................text...L\.......^........
.......... ..`.rdata.......p.......b..............@..@.data...X\......
.....v..............@....ndata...................................rsrc.
..0m.......n...z..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
.h.B..H.P.u..u..u...Hr@..B...SV.5p.B..E.WP.u...Lr@..e...E..E.P.u...Pr@
..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u
....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..
Tp@..u..5Xp@.W...E..E.h ...Pj.h`.B.W..Xr@..u.W...u....E.P.u...\r@._^3.
[.....L$....B...Si.....VW.T.....tO.q.3.;5..B.sB..i......D.......t.G...
..t...O..t .....u...3....3...F.....;5..B.r._^[...U..QQ.U.SV..i....

<<< skipped >>>

GET /update/pluginlist3.php?plugin=azutp&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_azutp=0.5.3 HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: plugins.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:13 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 800
Connection: Close
...........T.n.0.}. .."........@.......c;....|....8.f...o.=s...9..b.3#
:}..n.>..u....E..uW......v.....M...T.o.<^.m......."._.OQ........
...d.....?K...*W..... ...>...[...}%4.p...X...oc.D....}xh..H..5A ...
.U....&..v.6a.hG_.e..R.$.h...0....P!I....v......Q...6...e....l...t.1..
Y..;..'MN.h.0.dk..[..SkR:h.:...,'....[6........[....VY1TPQB...oT9.3j#_
....X..hy.x.=( .....$M....k..R..,y.&z...s.....G*......#I.0.UuJ.<..8
#.....=k?.ovt....6A(.R....u.........#..\...L.O.1UY.f....J.....l;......
n.QKM&v%.bRlJ.Y.`../3H.fI.&......C...[.(9.l..q.r../.nrXl/eQ].W..B.....
.........:..Z^\.D5s..7.A..7............!...h.GR.....3.F`]...i=.X...kC.
.};v...aS........x...<sb.e.I}T..........I.Em,`...........n....V....
..-...7...........p....v......6.d.D.Me...dz..h <[.H.. .7.f..o..84.5
.#..Gq. 9... a}......8..r.>L..v...uL.|....}. .....


GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGPd858N5gFU HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com


HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Jul 2014 17:56:19 GMT
Expires: Sun, 13 Jul 2014 17:56:19 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Age: 146280
Cache-Control: public, max-age=345600
Alternate-Protocol: 80:quic
0..........0..... .....0......0...0......J......h.v....b..Z./..2014070
9080136Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.c......T....20140709080136Z....20140716080136Z0...*.H.............K.5
M.....mX..O..C..4..!rk.............*.9.[Z.[....L~c.v...$Z.S>h.IX.d.
.>...}.$[L.A....d.....C..u....<$$.......E8V...1..e..)_....:..U.\
=OXX.b..M...L..d-......e.K..K..k.....O7..g.....%.:...U ........&...d.\
.<...._.R....7A..\xxF:....)..X./nI.V..6.p..........,HTTP/1.1 200 OK
..Content-Type: application/ocsp-response..Date: Wed, 09 Jul 2014 17:5
6:19 GMT..Expires: Sun, 13 Jul 2014 17:56:19 GMT..Server: ocsp_respond
er..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Opti
ons: SAMEORIGIN..Age: 146280..Cache-Control: public, max-age=345600..A
lternate-Protocol: 80:quic..0..........0..... .....0......0...0......J
......h.v....b..Z./..20140709080136Z0k0i0A0... ..........j.....p.I.#z.
..(~d..J......h.v....b..Z./..c......T....20140709080136Z....2014071608
0136Z0...*.H.............K.5M.....mX..O..C..4..!rk.............*.9.[Z.
[....L~c.v...$Z.S>h.IX.d..>...}.$[L.A....d.....C..u....<$$...
....E8V...1..e..)_....:..U.\=OXX.b..M...L..d-......e.K..K..k.....O7..g
.....%.:...U ........&...d.\.<...._.R....7A..\xxF:....)..X./nI.V..6
.p..........,..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Fri, 11 Jul 2014 08:33:09 GMT
Expires: Fri, 18 Jul 2014 08:33:09 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1972
Cache-Control: max-age=597542, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:35:17 GMT
Connection: keep-alive
0..........0..... .....0......0...0..S........0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class
3 Code Signing 2009-2 OCSP Responder..20140711083309Z0s0q0I0... ......
....!7h....O.d...AG&h.....k.&p..?...-.5........M.s.Q~...@?j.......2014
0711083309Z....20140718083309Z0...*.H.............. /..K..2.J.v..."..S
..j.......! ..&@1.....Gp.O.... M..%..x "d.?..)..(Gl,..v[.~.4.1q..\.$v.
^..>.u9S6.[./..(.........]....Y.....d..).... .2........?e2...KS....
./..gF.HG....\u|...`.[..EP@.=.."......L`_.L0os7U.......;B......&}oY...
..c.D...yKv...C.5.nj.XguxN._....#0...0...0.............8.9v......d..0.
..*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriS
ign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/r
pa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...14062200
0000Z..140920235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U..
..VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisig
n.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 OCSP
Responder0.."0...*.H.............0.............'..Q96....O..d.\.>.
......../0......F..Z`qM... .u0.....uM........._.H.Pk#.?^7)..........9.
...0.E:......|V....r.k.J...S.c.X........<..^P...\!.D.Tg....{....v.z
.....6....^r.~..U L..m.J.IV._.E...&.8 ..x..;-.r..g..H{.oB.U.'G.`,.$..x
cJ;w.(..=...}It.4...?..W..........0...0...U....0.0....U. ...0..0....`.
H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. .......

<<< skipped >>>

GET /beacon.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: b.scorecardresearch.com
DNT: 1
Connection: Keep-Alive
Cookie: UID=120c9bfd-194.221.64.106-1384780341; UIDR=1384780341


HTTP/1.1 200 OK
Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Fri, 25 Jul 2014 10:33:17 GMT
Date: Fri, 11 Jul 2014 10:33:17 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
..........mU...6.}......CF.l/.4..k4.<.h. i.\..(.bK.....".{.e..M..".
3...sF..(_[3;...J..._..)A.m?).. <..U.V....ce.......R........J......
.$........{q.|...x#...;.[,.7....r'.p....p.6......7....K.A.Jv:....eJ..V
...vb...q.5..$!.........M.(b...=.q...sZ.6:...t<.Rj".0.X"#.Dd...f.5.
n....E0.*.E..tRy.>i`..\.......`!.Ed.^.....}..".~.l.?.9..6....s.1...
z?....e.K >..0....W,nd...k.....N.g.G?^:..(.cS0c<..V...P#Bjo....M
.....0..o...,....A.p.....\...Z'2T5.........^SrE8.....y....@.s...Y.....
........l`y..1.,.h.N......d.......< z<....c.g..G.f..M....._..M.3
=.|... .r.{-.. ..@.d..]G.<"..R/j........U.F.\..Q.c.A..u)....6_.=?..
....~q1I0.l....K^...$......f..R..j..A %J4Ip.....L;..m..i...~(......_..
A..z..Be .b'.....r..8".i.t&.......a.~..8..C....P&d.....*.M......'.@.H.
.b...Yp..v/l,.3G9.......2I..[....]`.X8.q..>%n..t..nW....!.. ...M...
...,.%.....>#k.g.A.jf..sC`S ..v.{[....$~F...|..zr!..hK}U.....N..S&d
"...v?$..|.V.4QWy.....T)K2.T.'........Ee.j<Ml:f@...{....i..7...d..Y
.7 .;.y..zmz\9.a.....Y..E.,.I....-e/V.%......Z.........../Y....)..O.6.
....h...G.8../.9.VzU.....C....P...s....Q..e.;.....>*.k._kd...9.qJ..
8.L........o......J-.P&.RY#.l}. ............g...g...".Al...
....



GET /b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796740&ns_c=utf-8&c8=Ask.com&c7=http://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9= HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: b.scorecardresearch.com
DNT: 1
Connection: Keep-Alive
Cookie: UID=120c9bfd-194.221.64.106-1384780341; UIDR=1384780341


HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Date: Fri, 11 Jul 2014 10:33:17 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GIF89a.............!.......,...........D.;.....



GET /b?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&ns__t=1405074796741&ns_c=utf-8&c8=Ask.com&c7=http://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4&c9= HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: b.scorecardresearch.com
DNT: 1
Connection: Keep-Alive
Cookie: UID=120c9bfd-194.221.64.106-1384780341; UIDR=1384780341


HTTP/1.1 204 No Content
Content-Length: 0
Date: Fri, 11 Jul 2014 10:33:17 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
HTTP/1.1 204 No Content..Content-Length: 0..Date: Fri, 11 Jul 2014 10:
33:17 GMT..Connection: keep-alive..Pragma: no-cache..Expires: Mon, 01
Jan 1990 00:00:00 GMT..Cache-Control: private, no-cache, no-cache=Set-
Cookie, no-store, proxy-revalidate..


GET /aadebc4830c51c2794a960fe5a9e11df.php HTTP/1.0
Host: track.mypcbackup.com
User-Agent: NSISDL/1.2 (Mozilla)
Accept: */*


HTTP/1.1 200 OK
Date: Fri, 11 Jul 2014 10:33:22 GMT
Server: Apache
Set-Cookie: SESSID=uss73p994rc86sd253brl4f6k7; path=/; domain=.mypcbackup.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: LC_CURRENCY=US; expires=Mon, 21-Jul-2014 10:33:22 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: ?uva6aT*=US; expires=Mon, 21-Jul-2014 10:33:22 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: LC_CURRENCY=US; expires=Mon, 21-Jul-2014 10:33:22 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: ?uva6aT*=US; expires=Mon, 21-Jul-2014 10:33:22 GMT; path=/; domain=.mypcbackup.com
Content-Length: 8
Connection: close
Content-Type: text/html; charset=UTF-8
Set-Cookie: MPBWWW=3891563201.1.1048088192.452905472; path=/
Complete..


GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAFSh8UnRmbfJXQAAQAAAVI= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.msocsp.com


HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Fri, 11 Jul 2014 10:34:21 GMT
Content-Type: application/ocsp-response
Content-Length: 1501
Connection: keep-alive
Set-Cookie: __cfduid=dd5555b3b60fefa2c1e1634982302d3b21405074861682; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.msocsp.com; HttpOnly
Last-Modified: Tue, 08 Jul 2014 00:38:35 GMT
Expires: Tue, 15 Jul 2014 10:34:20 GMT
ETag: "000647091904d2d217089177220ddd907ca4bab4"
Cache-Control: public, max-age=345599
CF-Cache-Status: HIT
CF-RAY: 1484591d8e930f57-FRA
0..........0..... .....0......0...0.......j.....N ...#c........2014070
8003835Z0..0..0L0... ...........p.....!M.....PH.O....-.lM=.P3...x....$
.......R..'Ff.%t.....R....20140708003835Z....20140712003835Z."0 0... .
....0......20130708003835Z0...*.H.............mC|J...%.D..3..B..?.y(..
.Z....[3.....y..D...'"*[..]1tl.......sl....]?Q5Os.U.5A....7....;....8W
....C..d.B..5_....*...Nr....9.v..>.`..!...~&m..Q.........$|.,{.Q..u
'....%5/...7..!.q.........b.%..v'.......R,b...).J&....k....8. ."?t.e&.
..i{............${!!.;.=.....0...0...0..............V.X..7s.B.....V0..
.*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0
...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microso
ft IT SSL SHA10...140630194542Z..140829194542Z0!1.0...U....Should be i
gnore by CA0.."0...*.H.............0.........1._G....#.L;!>Q.z.m?e8
.-1\...Scf....0.....E(/F.(..nN...U....3"&M./..r-2@....th..u;...j.k..\.
d'...s2D...W6.g.9...xk................Q.GZK.1.\-.E.......l.h.]%i4....v
.....J.-. O. ?.*...A3...h.#..."..c....PhV.>..;...Y...._.".t....|c..
....3.l.YUZ."p.r..C.U-[y..........0..0...U.......j.....N ...#c......0.
..U.#..0.....-.lM=.P3...x....$.0...U...........0...U.%..0... .......0.
.. .....7....0.0... .......0... .....0......0...*.H...............mT.`
Gr.d....7.... .u[X.b..M.......RI......f.[&}'.Cply.q....o...G...3...:(.
...\/...>...2CO..>.[.>...'...,....e....8....t...y.S......./.&
lt;..{h..S'.4X....$=...XSx...E.}C.E.Pu.W....B...#B.Wj..u<..g.......
.?....U%....h..:.A5<....J.?..dT.....=.....y.^.....5......

<<< skipped >>>

GET /img/ftux/new/ftux_bg.gif HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: cf2.vuze.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1940305532.1405074858; _dc=1


HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 1103
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sun, 22 Jun 2014 03:54:38 GMT
Expires: Tue, 22 Jul 2014 03:54:38 GMT
Last-Modified: Tue, 17 Jun 2014 14:19:00 GMT
Server: nginx
Age: 1665581
X-Cache: Hit from cloudfront
Via: 1.1 4cebe2fc1703437d8a79e556e38f6d7a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: WJ-SwlY5g1IM3jKeK4Q6MpbnLEmt-gcQbDIA-KJ-KPRKSHAjpbPsJg==
GIF89a..m..........!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:02639E47708111DFB4168ED7
869466B2" xmpMM:DocumentID="xmp.did:02639E48708111DFB4168ED7869466B2"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:02639E45708111DFB4
168ED7869466B2" stRef:documentID="xmp.did:02639E46708111DFB4168ED78694
66B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...........................................
......................................................................
.................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJ
IHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ......................
...........!.......,......m...........4...;
....

<<< skipped >>>

GET /img/new/home_get_plus_btn.png HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: cf2.vuze.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1940305532.1405074858; _dc=1


HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15639
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sun, 22 Jun 2014 03:54:39 GMT
Expires: Tue, 22 Jul 2014 03:54:39 GMT
Last-Modified: Tue, 17 Jun 2014 14:19:06 GMT
Server: nginx
Age: 1665580
X-Cache: Hit from cloudfront
Via: 1.1 4cebe2fc1703437d8a79e556e38f6d7a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: C1AOYpZgkukQlykC6hiuAL_KpS2cgR3Mg4Zuvh9a7zmhUi-65fT3Hw==
.PNG........IHDR..............l......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:EEF39646CF6511E2B827E909
24532C76" xmpMM:DocumentID="xmp.did:EEF39647CF6511E2B827E90924532C76"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EEF39644CF6511E2B8
27E90924532C76" stRef:documentID="xmp.did:EEF39645CF6511E2B827E9092453
2C76"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>......9.IDATx....\....yyy....c...D.)v..D...
a...c.%v...5......1.{I7..1.[L46.R.X`..........av.Y.......>..m.....{
...b\..."7.%D.......W..A!......(...Y,............t*....q.2I.DF..~...=.
.....9?N..CC cw7H.........*k...Id..EV.YdW...q..`:>.............V.BJ
d5HYQ.....EXD&.Md.YEf.].p}.........BZ......)._%.......U.(......F.#...e
o.....!mmSHYF"..*\\\......a. ..H......._u.....@uHYR.......0.........%.
.u...!-.!.>.\.......>.n........GW..x..1.Q....,J[.......5.:7s.'..
.....KEqQ^pe.<8..Q8..q.:t................g.8..i.....Z>n}.R....Y.
..&dn.@...4dlh...$|GTr.b7.........B......D..6............/8..7p..=

<<< skipped >>>

GET /?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4 HTTP/1.1
Accept: text/html, application/xhtml xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.search.ask.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
X-UA-Compatible: IE=Edge
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/html;charset=UTF-8
Date: Fri, 11 Jul 2014 10:33:16 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: wsc-accepting=1; Domain=.VVV.search.ask.com; Expires=Sat, 11-Jul-2015 10:33:16 GMT; Path=/
Set-Cookie: wsc-sh="pVQws/wx3UdYSjwJpRlAEw=="; Version=1; Domain=.VVV.search.ask.com; Max-Age=15768000; Expires=Fri, 09-Jan-2015 22:33:16 GMT; Path=/
Set-Cookie: wsc-user="o=APN11693A&l=dis"; Version=1; Domain=.VVV.search.ask.com; Max-Age=15768000; Expires=Fri, 09-Jan-2015 22:33:16 GMT; Path=/
Set-Cookie: wsc-ulsid=5eac7476-c0ee-498c-b5ef-9326a0cad533; Domain=.VVV.search.ask.com; Path=/
Set-Cookie: anx="os=-&g=-&oc=-&sn=dubprdapnoa46.dub.jabodo.com&od=none&op=-&fv=1405074796505&ob=-&om=-&lv=1405074796505&ok=-&nv=1"; Version=1; Domain=.VVV.search.ask.com; Max-Age=7776000; Expires=Thu, 09-Oct-2014 10:33:16 GMT; Path=/
00000185.............=kw.....s..@.&..5%.-...~....Ik...n..DB.c.d...^...
..lg....V..... ....`f03...../N..\....|s..[......'D.;...'.........n.s..
F.U.......m.....e....*Z;.N..........^b....._...g..._....]..^.'".gdB~=$
|$b:4.g.....}..s-{......%..(.o.T.iu.ic./v..v.=.G..!....n1j.....&.sfZ..
...#b....U.......jS..#..f....5.l...t.....`. .....F:...$...".-.......^.
......m.....&#..}.....}.:.s.m.d5..>q.`M......U.O...00000B50...!J...
'.gRgG@!?.e...... ...8pv$....Y.^z..aq... bn....wp..c"........::;......
.?.W..=...}.-...%`......{.....gSP....v..D...e...y%....s...=.^....o.`..
Q.0=dQ...}b. ...A..C.e.3.{7,.l..Z..y.....t>...3.......M.k...H......
..X.]!...W...f1..._j..8.L...0}.P....D..{Q........~..[,...............
..#21.a1......,...A\\vP......Qh...v{.].P...8..\.....\UWqY-W.P......q..
9...j....].S......lNC...R.2e.7..H-.r>H..T.PL.`..|Jp.l...[a...b..O..
............Y..........C.{r...(.^(4...q..M.?K5.d=L(.A.,m.#W......H....
.p.......Q.....@w...O.J......q......v.C..?.EW...e...._..s;.2Fm.]&~Z...
F...P........!....4...S.aG.RH.2..I.!...Kx...g.'..n.....m7B....G>.1.
..Y.......(`.S.{.....K1B0..).mom .a.O.I...G..a......s..JY..q...[..D...
.H..p$...H.G....:.$E.[@...<O.>..w......2.t.zN..(...s...F..7....n
...Jm.(M...BVIh.....oWv2Jb....F.-...}..^>.H...s.<..)~9s.....*$B.
nQ*.Q`,...1~.k.n.?....7..M.....g..........d||......c..t.$....!.......`
..4A..@..>.....hV-$.<.......-....p..HNu.}.M...H.h..Q.........5..
).....u..v.^5...H..$$ &TvL,.QDz.-3ta.1...(..q.a..(o.zF6..L....(..4H...
..z.h....l...v......,..;.:.....)....y.RZU.T.tZ.........hu%P..}.r?.

<<< skipped >>>

GET /ulpixel?anxuu=2A2E399E-C102-494A-9932-C609DB8FF83B&anxa=APNSearchOasis&anxv=4393&anxd=2014-07-10T04:00:00Z&anxsn=&anxu=http://VVV.search.ask.com/&anxl=en-US&anxlv=1405074796505&anxrd=none&anxrp=-&anxrk=-&anxrm=-&anxrb=-&anxrc=-&anxrs=-&anxsq=2&acoc=APN11693A&q=&o=APN11693A&l=dis&acpt=homepage&userip=193.138.244.231&tpr=&anxi=99A715B0-8605-40A0-86DA-D20C1D55B7B0&du=1&anxe=backFill&anxr=1789178047 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.search.ask.com
DNT: 1
Connection: Keep-Alive
Cookie: wsc-accepting=1; wsc-sh="pVQws/wx3UdYSjwJpRlAEw=="; wsc-user="o=APN11693A&l=dis"; wsc-ulsid=5eac7476-c0ee-498c-b5ef-9326a0cad533; anx="u=2A2E399E-C102-494A-9932-C609DB8FF83B&fv=1405074796505&lv=1405074796371&nv=2&t=-&v=-&p=-&si=-&sn=dubprdapnoa46.dub.jabodo.com&od=none&op=-&ok=-&om=-&ob=-&oc=-&os=-&w=1916&h=902&cd=24&f=-&g=-"; anxs="s=649872429&sv=1405074796325&sd=none&sp=-&sk=-&sm=-&sb=-&sc=-&ss=-"


HTTP/1.1 204 No Content
Server: Apache
X-UA-Compatible: IE=Edge
Content-Length: 0
Vary: Accept-Encoding
Content-Type: text/html;charset=UTF-8
Date: Fri, 11 Jul 2014 10:33:17 GMT
Connection: keep-alive
HTTP/1.1 204 No Content..Server: Apache..X-UA-Compatible: IE=Edge..Con
tent-Length: 0..Vary: Accept-Encoding..Content-Type: text/html;charset
=UTF-8..Date: Fri, 11 Jul 2014 10:33:17 GMT..Connection: keep-alive..


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Wed, 09 Jul 2014 20:57:40 GMT
Expires: Wed, 16 Jul 2014 20:57:40 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1972
Cache-Control: max-age=469340, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:35:20 GMT
Connection: keep-alive
0..........0..... .....0......0...0..S........0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class
3 Code Signing 2009-2 OCSP Responder..20140709205740Z0s0q0I0... ......
....!7h....O.d...AG&h.....k.&p..?...-.5.......l$.%t...............2014
0709205740Z....20140716205740Z0...*.H.............D.{.vyP&).S.'.3.u...
....n.....J.....@..=.J..[\....E.T.3u:.;'G..f....?..e..[.M...6....xe.P.
.p...A......Gk...!\..b......L?..y2.>.tG=....^@"t.G..m,..`(i~...:...
....;V.t.......*....2........\..........SOiL4.V...Q......2.S..u....F.E
-...F...S.....3.....w.<u...c....#0...0...0.............8.9v......d.
.0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....Ve
riSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.co
m/rpa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...14062
2000000Z..140920235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...
U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.veri
sign.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 O
CSP Responder0.."0...*.H.............0.............'..Q96....O..d.\.&g
t;........./0......F..Z`qM... .u0.....uM........._.H.Pk#.?^7).........
.9....0.E:......|V....r.k.J...S.c.X........<..^P...\!.D.Tg....{....
v.z.....6....^r.~..U L..m.J.IV._.E...&.8 ..x..;-.r..g..H{.oB.U.'G.`,.$
..xcJ;w.(..=...}It.4...?..W..........0...0...U....0.0....U. ...0..0...
.`.H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. ....

<<< skipped >>>

GET /analytics.js HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Fri, 11 Jul 2014 03:07:17 GMT
Expires: Fri, 11 Jul 2014 15:07:17 GMT
Last-Modified: Tue, 17 Jun 2014 01:05:58 GMT
X-Content-Type-Options: nosniff
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 10852
Cache-Control: public, max-age=43200
Age: 26821
Alternate-Protocol: 80:quic
...........|kW............a..]].n.m).-.-...C.L0.$u......}..d;..}.8k..y
.>%....M.*OGC?.>..}).d.F:..a...l<.&.\.E..P..D,.I..L...4..hO..
m...#.K...Y.O..}...Y.....;.P.8K.P..u=...tr....;...D^.Lr@d.M..J<.^E^
....>~E....D.yj4:M.{...Xf[..G...\..y.,..d..l..tr$.....LQ..u&.P{..y.
Q..S4.%2O......z.J.[y...4G....)zB.Z. ..a.#..U...a?G...l6.G...%.(..)Z..
j..B..A.:OQg.$..........l4N......y.q.0....u...2.8..t ..Ol.........I.?F
....a.<...M...6.{..mIeF...x<@.#I.>O.2.e....c.....1.x.y'..5v1.
...E.=...k...h.\._.oQ.....I..FE&............R.h..T9Fe..F[m..U....@vUoy
.....h0BA..(.E..?...._..65eZ.].1Z......o..y...........8.........Xa....
....p4..M.......Fsm}..........>S=....i.m.......yA....lV..W.......T%
.5e....zQD.htt_.G.\WJvG.I...[Y&.z(......0....w..|.E..l..,...>J..F-.
.. .M_.j4...*,.......i.......F.I*.W..Q.ndGv..[.?....K...o...j_........
....N1...#h........1.pNN2..b.*..^*.&.hz.Ky?.4.P.._......._.k..U.,.i.}
.....O....c.......c...r..{B..\.........8eo.I....s..S.ZM.-...T....<.
.{.=u..f.h........l&......Yr6:O.;..j.oR.:....Y......'....*.........B..
......y.m.2..j.@&.4..B...)...B.CK.'O.>..[P...n....Oq/....>M@...P
? ..._..Sys....x.....>.u.{..iq.....G!...........N.wqq.z.......$V.uu
...GI.%Y..Z...vZ.....iwB'.....6.]].tl..S...(.0....#...&..n.:..@x..&..c
......R..r...X.f..i]^.N......=C...#e./.M......gBG..,..DK...yp..v.....6
:....Wr.>N....n&{~?..P.>....=.....Y2.$...*\B"..*...12.V......jRp
.............cu...U.c^..1...u]...i...m...*6..L....|s......x....6..f9@.
..(.g...=...bP.......&..~t$."=RS:..R.ug......'..w.......r.........

<<< skipped >>>

GET /collect?v=1&_v=j23&a=1889048950&t=pageview&_s=1&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&dp=/ftux&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&_u=MGAAgAg~&jid=836542324&cid=1940305532.1405074858&tid=UA-1474242-4&z=1283527551 HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Thu, 10 Jul 2014 15:01:49 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 70350
Alternate-Protocol: 80:quic
GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *
..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options
: nosniff..Content-Type: image/gif..Date: Thu, 10 Jul 2014 15:01:49 GM
T..Server: Golfe2..Content-Length: 35..Cache-Control: private, no-cach
e, no-cache=Set-Cookie, proxy-revalidate..Age: 70350..Alternate-Protoc
ol: 80:quic..GIF89a.............,...........D..;
....



GET /collect?v=1&_v=j23&a=1889048950&t=event&_s=2&dl=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&ul=en-us&de=utf-8&dt=Vuze - Welcome&sd=24-bit&sr=1916x902&vp=1708x769&je=1&ec=FTUX&ea=impression&_u=MGAAgAg~&jid=&cid=1940305532.1405074858&tid=UA-1474242-4&z=1994118105 HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Thu, 10 Jul 2014 15:01:49 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 70350
Alternate-Protocol: 80:quic
GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *
..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options
: nosniff..Content-Type: image/gif..Date: Thu, 10 Jul 2014 15:01:49 GM
T..Server: Golfe2..Content-Length: 35..Cache-Control: private, no-cach
e, no-cache=Set-Cookie, proxy-revalidate..Age: 70350..Alternate-Protoc
ol: 80:quic..GIF89a.............,...........D..;..


GET /ajax/libs/scriptaculous/1.9.0/effects.js HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: ajax.googleapis.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Wed, 09 Jul 2014 04:15:03 GMT
Expires: Thu, 09 Jul 2015 04:15:03 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 8722
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 195554
Alternate-Protocol: 80:quic
...........=.{......X.n.H.E.G_.(.|.._../R..._>.\..@..@.......{.....
&_.........\{`g..."..n<Z.YwQ2>..QUv.Q..~..n..........c..6x.d....
v.i..v{......{..WEr:.X8. ..t...j6.K.f1..,.VU>.....0.>K.......HN.
UV..L`..(.d.>..... ...*>..$.....Uf....}H.."......'...*..Yqj."..I
..e2?K .3|.$%....Wl.....$.l1..>.......e......G.eu..i2...w....`c^.I.
]/9.j~C....I....h;D.Q6?.EU...$...1{xyy......$ fq.........6.....IR.....
.....%.6.*..;.q....v."...*..<.J.*K..>.,..*......c.q..EV.0..$..V.
...H...y..}.E..QK. ..U.I.^R>?.....[.iR.A'..t.d........o.3.......q2.
.UF...A.Lo..4.1........[...Klj(....5.V....>t.(....{.WO.....`%...q..
...m17...6........aCC..4.)......'...T..`.%........!..!..........l?....
)..`..)..#~Y}..yi...e..%..^..t..,I.T/R.BS...j.T.1.........C.u...t..@.[
.... ....s...ln.. .|.u'i\U.fD..Y2..@R.....yV.W v...a#.......M....?...K
.......4.O.b.d.H .....qK^.....g....9/F..d*.4..3.....wx=..../ .C.a....4
..,.........".(y.....%.....8............ZrHd.n.Ny.v.&s.>.GIu.4Ul.0,
Aj...j0......j....G..".u.V..d.6j.I<..q6Z.!.x\q5.a...V....Z&...^^.g.
9..n.(.F....D..!....d.@?..?Kt^g......A...EV.$9......-........O........
I.....w..c.K..c.....-...s..P...$.4.P.g..@.............R..|....%."P..'K
.q:0#.g.QnJHl...)....7....hg....T.... `1.|...6.:.&.b.x.V....`D.6l..6.z
..(..1.f!....#..Y.D].....Ev....H..~....I./R.0....>5.......h..4.....
C..\^5.l..vG.&{.}...l../.p[.x.ENK.l..Z=w...*..[..Vz.'."...._.....0..&g
t;.'.....l......(..RZ...}.z.$.{....Y|..d...T.I...`...=.s.|..d.....l...
.}J.2."!%0.i|5.J.s..\&.`....S=...4.\.....c1 D9RNhl.5i...h...'...l]

<<< skipped >>>

GET /assets/b2b/ask_flower_03b_24bit_06.png HTTP/1.1
Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: VVV.search.ask.com
DNT: 1
Connection: Keep-Alive
Cookie: wsc-accepting=1; wsc-sh="pVQws/wx3UdYSjwJpRlAEw=="; wsc-user="o=APN11693A&l=dis"; wsc-ulsid=5eac7476-c0ee-498c-b5ef-9326a0cad533; anx="u=2A2E399E-C102-494A-9932-C609DB8FF83B&fv=1405074796505&lv=1405074796371&nv=2&t=-&v=-&p=-&si=-&sn=dubprdapnoa46.dub.jabodo.com&od=none&op=-&ok=-&om=-&ob=-&oc=-&os=-&w=1916&h=902&cd=24&f=-&g=-"; anxs="s=649872429&sv=1405074796325&sd=none&sp=-&sk=-&sm=-&sb=-&sc=-&ss=-"


HTTP/1.1 200 OK
Server: Apache
ETag: "39770cfbcf97706a06c201473b36eee6:1395958182"
Last-Modified: Thu, 27 Mar 2014 22:09:42 GMT
Accept-Ranges: bytes
Content-Length: 81881
Content-Type: image/png
Cache-Control: max-age=31536000
Date: Fri, 11 Jul 2014 10:33:17 GMT
Connection: keep-alive
.PNG........IHDR...R.........L..Q....tEXtSoftware.Adobe ImageReadyq.e&
lt;...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:32C2E1F0822168118C14D2ECE7CF9657" xmpMM:DocumentID="xmp.did:F238
AFE0603811E3B5F48C2584927F24" xmpMM:InstanceID="xmp.iid:F238AFDF603811
E3B5F48C2584927F24" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:501F5DD3AA2468118C
14BB53F3C93040" stRef:documentID="xmp.did:32C2E1F0822168118C14D2ECE7CF
9657"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.,....<.IDATx....|.U.....M..B .^....ET.R
l.* .....ky_..b...*...AAAP.tB.I.@HBz.......M6[....M....fv..{..3...2*I.
...............................)..................)..................!
.........R............T.T.......HDm.:....l..x.(^..e0.N".Y}......3..y=.
......~.}...\.M~........@.V*.r.!U?9..u... ..}.gO.........Sv...*...x..$
o.".h..\.9i.!.)......!.j.'...bi4.....".%'......A*-fI.s%..........,....
.. .J.n......._._nh...J..T#....W.8..\.&Q[.....U...rOY..Q...U.g..UJ..|
..MR....&...(.....S\..*...is.N........v.....l[.'.......g.Tq.*..U.W

<<< skipped >>>

GET /download/2/d/6/2d61c766-107b-409d-8fba-c39e61ca08e8/vcredist_x64.exe HTTP/1.0
Host: download.microsoft.com
User-Agent: NSISDL/1.2 (Mozilla)
Accept: */*


HTTP/1.0 200 OK
Content-Type: application/octet-stream
Last-Modified: Fri, 08 Aug 2008 21:48:10 GMT
Accept-Ranges: bytes
ETag: "df115773a0f9c81:0"
Server: Microsoft-IIS/8.5
Content-Disposition: attachment
Content-Length: 4961800
Date: Fri, 11 Jul 2014 10:33:23 GMT
Connection: close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...........K...K...
K.......D...K... ......._.......J.......J...RichK...........PE..L...{.
.B.................z..........rY... ........... ......................
........9.L.......... ..........................@...........t.........
....K..$...........!............................................... ..
.............................text....x... ...z.................. ..`.d
ata................~..............@....rsrc...t.........K.............
....@..@..............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
....................................................t...Z.............
......&...<...L............................................... ...:
...J...V...^...x.......................................&...<...J...
^...t.......................................(...:...R...b...p.........
..........................&...N...b...|...............r.......\...L...
:...,...........................................~...f.................
......z...............................&...0...D...:...............:...
........$...................{..B.............&..................Z.

<<< skipped >>>

GET /version?d5:appid2:az7:appname7:Azureus3:dhti21119e2:id20:eQapZLDFhPfDVIoWOLS33:id220:ñË©"äëQh…RüVÃîvç5:ip_as5:343236:ip_asn22:IPCOM-AS IP-Com Ltd,UA4:java8:1.6.0_1812:java_rt_name31:Java(TM) SE Runtime Environment15:java_rt_version12:1.6.0_18-b076:javamxi247e10:javavendor21:Sun Microsystems Inc.6:locale0:11:orig_locale5:en_US2:os9:Windows 77:os_arch3:x8610:os_arch_dm2:3210:os_version3:6.17:pluginsl11:aefeatman_v7:aercm:f9:azlocprov8:azitunes8:azrating5:azutp9:azplugins8:aznettor9:azbpdht:18:azupnpav9:azextseed14:azlocaltracker9:aznetstat7:azbuddy8:azintrsse6:reason2:sc12:swt_platform5:win3211:swt_versioni4233e12:total_uptimei0e3:tsli2e2:ui3:az39:user_modei0e9:using_phei0e7:version7:5.3.0.0e HTTP/1.1
User-Agent: Java/1.6.0_18
Host: version.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Server: Azureus 5.3.0.1_CVS
Connection: close
Content-Length: 977
d16:autoinstall_pids30:azutp,aercm,azlocprov,aznettor20:autoinstall_pi
ds_sig160:R.Z&...YNy...'....E98p4V..5.LX..*.O........$..U.....?......)
....<.'j1%..t.....]MCB.....>....x=W.. ..J./..uf6.a...N.O..;R]...
uE1....&..)..n.....#.-.x.b&?xdK.|#.~8:dht_bootld1:a4:L.e.1:pi18218eed1
:a4:c^.s1:pi29489eed1:a4:...61:pi37675eed1:a4:....1:pi18118eed1:a4:./
.1:pi6881eed1:a4:BW..1:pi27502eed1:a4:`3E.1:pi46786eed1:a4:B)F-1:pi375
64eed1:a4:K...1:pi46665eed1:a4:rl..1:pi15491eed1:a4:G...1:pi17528eed1:
a4:ciE]1:pi50978eed1:a4:....1:pi56220eed1:a4:y...1:pi35016eed1:a4:J.Xv
1:pi32590eed1:a4:....1:pi29315eee10:enable_dht4:true23:enable_dht_exte
nded_use4:true10:feat_flags3:5128:filename63:hXXp://cf1.vuze.com/torre
nt/torrents/Azureus5.3.0.0.jar.torrent17:plugin_update_url24:hXXp://pl
ugins.vuze.com/11:source_infod2:cc2:UA10:dvd_formati0ee17:source_ip_ad
dress15:193.138.244.2317:swt_url69:hXXp://torrent.vuze.com/torrents/sw
t-4233-win32-win32-x86.zip.torrent11:swt_version4:42337:version7:5.3.0
.0e..


GET /img/ftux/new/getting_started_logo.png HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: cf2.vuze.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1940305532.1405074858; _dc=1


HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 7489
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sun, 22 Jun 2014 03:54:38 GMT
Expires: Tue, 22 Jul 2014 03:54:38 GMT
Last-Modified: Tue, 17 Jun 2014 14:19:00 GMT
Server: nginx
Age: 1665581
X-Cache: Hit from cloudfront
Via: 1.1 4cebe2fc1703437d8a79e556e38f6d7a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: INlZ-HWsnBxs3e5eh2-7kyRfz1UFQ8JmOLb80XUHoPvbSYsZOe2wqA==
.PNG........IHDR.......H.............sRGB.........pHYs................
.tIME.....,.........IDATx..........W.K...@7;..!.L"c23.$j.3..:....e....
..A.T@...,...{_...!O.MF....6N....o.{......[.o/..<..s.n.Z......{.y..
)&&&&6.v.4....m......~........`]....{..>...D.]11.......g.......k...
ZG..._v...|........mc.:gl.....%.%........._RG.O..*.k...t..9.:.\|&.....
.`.`u[rM{aU...W....I..v........_.....%g./../<...)ic7..aw.........k.
...LZO. &&..A ...w......._:..&^i..zRy......x.I..M.m.^....^i@....Xn~..Y
..91....c...'.......R..M..`a....QP.9.6}.......bbbQ.....-9...0a.{.....v
m..&Vq.v..I...X.Q. &&....6..5..a`79...].K.,.RK:.n..vGU...yUZR. &&....s
....I.v-m7...R.....).!Y..H^iI....Xv..;..3.o...<.n..&..=......n;...v
....]11........g.][d8ba.../.H....G...;....B.S. &&...z....G=.]`..i.....
.-.K........%iB. &&.....k..P.....d.....R..R;..y... ....mW. &&..P.f....
g.2oW..uE..n...@...o._.......e1.. |.)nc7.....]=98....]....X.... .....v
...S.....t...=n...n$\H{.v.....E..V.'......R...........kaw.`W. &&.j...f
L...3.HdHd..L...^....l..I.2....X.!......9........w.....R..Y..d...r7KmB
m..s...]11.@...Y....9..O..H......~...... o.t...i..G. &&.h......... 2..
]p...6.K-......Q..].|lu....&.....2...}...'.s....s.;......dX..~,...Z.-.
..v...|.5...<a................v......b...{..S.a)i.m.....z...`WLLL.p
.W;..e4......S....$~jy.:v-..x..v3c.%..>I.....Np\.W. &&........K.GA.
......<.....O...vY....-o.&..`WLLLS...<?.`}|g.....].....s..5. 3j2
8.]..9x..vI......y........;b..L...o7..{.......dpD.#n.....uxy...,......
..F...`..Kdx. 2...%.'3Yj'x$.6....Z]jSj....`WLL..m.../<....]Wd.D

<<< skipped >>>

GET /img/ftux/getitbtn.png HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: cf2.vuze.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1940305532.1405074858; _dc=1


HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 8694
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sun, 22 Jun 2014 03:54:39 GMT
Expires: Tue, 22 Jul 2014 03:54:39 GMT
Last-Modified: Tue, 17 Jun 2014 14:19:01 GMT
Server: nginx
Age: 1665580
X-Cache: Hit from cloudfront
Via: 1.1 4cebe2fc1703437d8a79e556e38f6d7a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: A9BN9GKrBe4HYzIjxXlZ0EseUGIpzu0HHTHkONOMiLSbszdzNs28lQ==
.PNG........IHDR.......L......<......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:B685C885E01511E3A33EB
46C841C3479" xmpMM:DocumentID="xmp.did:B685C886E01511E3A33EB46C841C347
9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B685C883E01511E
3A33EB46C841C3479" stRef:documentID="xmp.did:B685C884E01511E3A33EB46C8
41C3479"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>}x.J...jIDATx.....U........t..)Jo...(`.F
c.IT..FclQI46.....O#..Q...`WT@@.P.....E..V...{....l.^....|......s..3g.
..../...jg.v.j.U.,....a.j.T{K.........v.j.Usl.........Z.pry...^.gU..Z.
.,,j.v.MR..p.y.LH......E..\...Ig....S...cdaQ....d....w..l.......Q....
U.g....Aq.j. ......aa..h.%..F....h......q..h....:.q..h.t...kr..B||.t..
U.9..))).={...u....x<..ukIHH.P(T..|w.......N.:I0.<..^.W...d..].}
...,M.6........:..8.E:..}......{.4h..j.J....?......^..me..mRPPP.9...23
3..X4.tV`....p...............4'==...e.3~.x.y....@ ...;.Y.d....l....m..
........;;..o..._.^..|.rGMx}....G..E.]...7....K...;:..-....a..t.R.

<<< skipped >>>

GET /torrent/torrents/aercm_0.4.9.jar.torrent HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Type: application/x-bittorrent
Content-Length: 745
Connection: close
Server: nginx
Date: Sun, 22 Jun 2014 03:32:03 GMT
Last-Modified: Tue, 15 Apr 2014 17:29:10 GMT
Expires: Mon, 23 Jun 2014 03:32:03 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Age: 75371
X-Cache: Hit from cloudfront
Via: 1.1 13be6f06029966b75af2e6bcb4d1867a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Wy-9GwWjomXjtnMcx38J7Set6FAhG0W6GliosCty3Eqxw8REL3C9TA==
d8:announce44:hXXp://tracker.update.vuze.com:6969/announce13:announce-
listll44:hXXp://tracker.update.vuze.com:6969/announceel45:hXXp://track
er.update.vuze.com:16969/announceee18:azureus_propertiesd17:dht_backup
_enablei0ee7:comment20:Provided by Vuze.com13:comment.utf-820:Provided
by Vuze.com10:created by19:Azureus/5.3.0.1_CVS13:creation datei139758
2919e4:infod6:lengthi302955e4:name15:aercm_0.4.9.jar10:name.utf-815:ae
rcm_0.4.9.jar12:piece lengthi32768e6:pieces200:=k.Yd1.Il..8.$.m.0.....
......]a...Gp\..uF.K.....f .J.K.a......l>..Tj....D..._q....O.......
.....Q..[G2..5j.^t..33.z..L..8..).6....PVn.(.}.OM.C.FuW.j......`.q..)]
.i.-.`J\...Z.=.B..{........_.5Q...8?....7:privatei0ee8:url-listl49:htt
p://cf1.vuze.com/torrent/files/aercm_0.4.9.jaree..


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Tue, 08 Jul 2014 23:27:51 GMT
Expires: Tue, 15 Jul 2014 23:27:51 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1972
Cache-Control: max-age=391948, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:35:23 GMT
Connection: keep-alive
0..........0..... .....0......0...0..S........0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class
3 Code Signing 2009-2 OCSP Responder..20140708232751Z0s0q0I0... ......
....!7h....O.d...AG&h.....k.&p..?...-.5.......A..2.....:...:......2014
0708232751Z....20140715232751Z0...*.H.............jr.o.......r...w..U.
M. 9.=....P'.$...K..<.x.P..oe.G.1.#.M.s..r.b......k..9N....9...I.nH
\.X$..67..u.......s...LOrf.Oh.f......Q.P?..g8.=....7h%.e4....$&.{....b
K....S.. .7O..'k.kUs.....OwO...Y....H..v...4. ...k4..tt..Mf9....6;.W..
(u.ZJwO...ix.;..W._.*;s.-zV.....#0...0...0.............8.9v......d..0.
..*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriS
ign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/r
pa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...14062200
0000Z..140920235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U..
..VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisig
n.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 OCSP
Responder0.."0...*.H.............0.............'..Q96....O..d.\.>.
......../0......F..Z`qM... .u0.....uM........._.H.Pk#.?^7)..........9.
...0.E:......|V....r.k.J...S.c.X........<..^P...\!.D.Tg....{....v.z
.....6....^r.~..U L..m.J.IV._.E...&.8 ..x..;-.r..g..H{.oB.U.'G.`,.$..x
cJ;w.(..=...}It.4...?..W..........0...0...U....0.0....U. ...0..0....`.
H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. .......

<<< skipped >>>

GET /update/pluginlist3.php?plugin=aznettor&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aznettor=0.6 HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: plugins.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:13 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 373
Connection: Close
............OO.0...|.............&..:y.W..I.....'-.*$@......~)n-..DY.h
.....x.#.5...N.3.r(6$........ra...j.M]...;..5.q6..j.~......w.u........
..3t..8..s.8VP..>.Y..5...@..=hg-.....4..?...S.k' u.....^.l.. .4....
.R.{......]...P...)..,.s..[..(...Hb1!.T.....Z,5..]U.../.../0R..&....De
..sz....^p..,P]...s....I..%.R.E...."-Y.[..!.2..I_...{.x' \.lAh-...Y..u
...2.g...$.!..F}...g!.......


GET /install/imesh/AskLogo.png HTTP/1.1
User-Agent: Java/1.6.0_18
Host: cdn01.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Jul 2014 10:31:09 GMT
Content-Type: image/png
Content-Length: 834
Last-Modified: Thu, 26 Jun 2014 10:03:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Expires: Sat, 12 Jul 2014 10:31:09 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
.PNG........IHDR.............".L.....IDAT(.MSkH.Q.>N.........'5..,#
...,...Z^.(.h.90....(B......2....2.D....E...m..9..9u..}..}....y..<.
........D ..n.......D.. uq1R..]Q^8.[......-.._...._..m..K...r...o....B
.@...n .23..84tF...A.....,_.....g...I........"Me..iT...]...b....c....0
X....;O..f.;9.@.....V_w.`2..........=lhF....uu0........t$...N'...t...x
p9...........]_........iD8.....}..1Y.)..u......<%....`...cG.....I..
...r9..l....jk*......`G....,(......v..B...,....p.s.(.u..`-.'&..x.92...
.`......T.....`%7..\.........U..T^L.....3.F....N'%.....j...M....T.ut..
......VT.2..s.:^g ............zW.........--T..CC.gr....@SZ..;...kt..W.
..!..[}..it4%0.u..........b...rL.dR.................@...q.4&..EE ....O
.x.A...h....\.k..M...1.t.....U.E!,...8x.gL....89.-/;k|.........C.../..
..g.*R...(a.g..Zl...4a.Iqh..,......L..2..X......Q......9pKP.y....IEND.
B`.HTTP/1.1 200 OK..Server: nginx..Date: Fri, 11 Jul 2014 10:31:09 GMT
..Content-Type: image/png..Content-Length: 834..Last-Modified: Thu, 26
Jun 2014 10:03:34 GMT..Connection: keep-alive..Keep-Alive: timeout=60
..Expires: Sat, 12 Jul 2014 10:31:09 GMT..Cache-Control: max-age=86400
..Accept-Ranges: bytes...PNG........IHDR.............".L.....IDAT(.MSk
H.Q.>N.........'5..,#...,...Z^.(.h.90....(B......2....2.D....E...m.
.9..9u..}..}....y..<.........D ..n.......D.. uq1R..]Q^8.[......-.._
...._..m..K...r...o....B.@...n .23..84tF...A.....,_.....g...I........"
Me..iT...]...b....c....0X....;O..f.;9.@.....V_w.`2..........=lhF....uu
0........t$...N'...t...xp9...........]_........iD8.....}..1Y.)..u.

<<< skipped >>>

GET /install/imesh/imesh_ie.png HTTP/1.1

User-Agent: Java/1.6.0_18
Host: cdn01.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Jul 2014 10:31:24 GMT
Content-Type: image/png
Content-Length: 21301
Last-Modified: Thu, 26 Jun 2014 10:03:35 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Expires: Sat, 12 Jul 2014 10:31:24 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
.PNG........IHDR.......A.....'.V... .IDATx...w.]u.....sn.;.'$...H ....
.....". .vYt.....Z...6]Q....*...t...P........Lo......8.~..w&..(z.<.
..{.9..z..PJ.:.?Vuh0.i..#!..A....L...."..nR..@.....2.k.e%.....a.......
.#.D*ES]....q$..P.^7U...y.2.Gw<- ..&.9!.m.]..T'-.R.......H...!...v.
......[.Oh O..U....t.k..?.@.B.;2...afMi......T.R.*T.....%a....vu.`Fk5.
...a.......7.f......4.$ .^..U.B._..d$..L.8y..?.2d....y.pp0.....W.0...L
@x...-..1_(....1!T.B.............A..9.2Z.*...bFK......0...$.v....G.(..
..%.. ....Y.....RA2.dj}.....3}.*T...>@7.`4..).8...2Z..Q[c5). ...L.O
!..gr$,ECM..........K\1...Q.....P...UT...Y.. T..UhB...C%....eJc5.d.2Z.
.QC}.S.....fp.&f..0...A..H@y..?(......)..`vk.C9.....L.A.*T..Uhr....v..
X..)M.P..e.......}S...m..wy....h^..}Ewv....R%....#|Q........_SQ.8.....
k....}.|>...k..v.....[..RK.p......>i...|Aa...........)..U.#9....
Y...U.B...&P...G.$....f..@ .....Pe.Xzj...^Nb ..&.....7....' .By.l....g
.^..Shar....f.O..%...6....... h.....(.X......7..d.v......s............
9.....3.....1........g..z.1..A.Q...yU....c..Pp$..E.H..L.......i T..U..
.].8.7..)..H...`..2.O..^.w..~...I.RL..b~..~...M..@K._R..J.......D.{.-}
.!..D..Q....9.#].WA...dt........B......L$..O....0W\q%......O.l.@!..YS.
... ..#.k.&n......F._.C..&.N.!..8...h...N..N.. T..U...U...F..#C...uLHY
....o.G...W.]...sQ..){i.....R..#..........(M.V...B.@... ....&<.m..3
.7.B...t......s.Aw.p)_5....Gx(.T..J....Z..8.aQ__W....._z....H}B....c..
.ebK...?e.8B...............T}..P.*..*...I..!:..H..^.Q.n...H...._....%.
UG...T.*bC.%...]C."#@......[.P.Y<..U.....2... .v........3..._..

<<< skipped >>>

GET /j.php?a=22587&u=http://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows%207&vzemb=1&r=0.22641796904262673 HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: dev.visualwebsiteoptimizer.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: openresty
Date: Fri, 11 Jul 2014 10:32:43 GMT
Content-Type: application/x-javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
27............./ ..O.OI.K...,......c*u<......0..HTTP/1.1 200 OK..Se
rver: openresty..Date: Fri, 11 Jul 2014 10:32:43 GMT..Content-Type: ap
plication/x-javascript; charset=UTF-8..Transfer-Encoding: chunked..Con
nection: keep-alive..Content-Encoding: gzip..27............./ ..O.OI.K
...,......c*u<......0..


GET /installer/featured_content.php HTTP/1.1
User-Agent: Java/1.6.0_18
Host: VVV.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html
Date: Fri, 11 Jul 2014 10:31:33 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: PHPSESSID=3o00c6liim15cv11mugpfn07o5; path=/
Set-Cookie: azv=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: azid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: locale=en_US; expires=Mon, 10-Jul-2017 10:31:33 GMT; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 179
Connection: keep-alive
{"torrent_url":"http:\/\/vhdn.vuze.com\/vhdn\/download.php?cid=40722",
"image_url":"http:\/\/VVV.vuze.com\/installer\/featured\/images\/pirac
y-crusade-installer-image.jpg","id":12}..


GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1
Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=0-262143
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 262144
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 0-262143/1606588
Age: 64401
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ID3H6YoHMyhrsPDjIUzyrVi3uHlpOqEOzubMx7FdRd-y6boc1oiz9w==
PK.........X.D................aznettor_0.6.2.jar..cpf.....F....m;wl..:
..q....m...N:......{..aj.;5..Z_V.........."........F#.%....,0(0EI.Q&Y%
).EQ%Y)Iu.fE..q0.;....y&.9dy&.....5.E....C.0.yX..@...........7.....6..
.rr.bq..s....Z...8..[.8..8Z.=.\..X.N.,n.@..'W..{.)...A..lf.ps.U_w\..&D
X.&..M....).f...G...Q.U '..E3.K..........NINI..&..fW..N...7sq.....O"..
..2...5`F.6=Z..F...5M...P..(.&...DY\.HQ.t......P...X....7..........7s.
UP......j..... J.%\..:.?...2.9.........<\.*...i>.a....Z.y..a..\`
.6.E....t3?.rs.6.....Nn....Y].|..u..=.....!.4$.x..... ...2.....<S.M
&.......l_.......K.%...9..."..H(..[,;%`.A...a-.....q...aw.]Ej...N....'
..f.>....~C..-Z|.;.Oh.9.....!.......4{.p....*,m.t...).".T...<$=7
V.h!....2.....$...:....F.a....6.b.........x.2....<..1..p..Fi..w]1z.
.`.....,/.....".2).s~dG\.E]._...,..fA.8S..G../...j.Fce.#Od.' ....FI.fo
..0.q...F.......c...2.(..r.!m...nK.......X5J....rY.B..{..=...U..".....
O.<Y...j......eH..TE..l. .....l....L.q.6DB...;.........\....y.n....
...q......w..........%.1...f..*NPyZZO."..F..l....9..Gp_.....b........7
....D.F.....5SWn4.KEG(;..".....uj.nr2~e.p. ..C.f....)..7...7.X...Iu...
..0....o..c.....H....$.........,.h..27.aw..G.4F...".).{...EU....~.....
q!.n^3.9....!...hM,t..S....I..z..Ro.;M.. .".g..2m.....ZgUd......y..Db.
d.J..Br..K. ..%....'.s.r1".B.VB*_..ZH...yu..N*.T......@P&m.....X....8.
z.:.L.&..b1. ...5.,...B...r..B.1.A...v...f.>A..........O.Mv...N...T
"M......].....z6.H.(%k..x..S.....$O..d.h._`.......!...c.N*MV......@.X{
.....38.......m....4.h...%m~E.x|......D..K......4 ....p........2C

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=262144-524287
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 262144
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 262144-524287/1606588
Age: 64401
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: NzXOYpYvP-MZAh8_9mNx-ZwM6u3btXSzOa-svBUN9fDfjCsr-F-aYQ==
S...7.....s..|B..{(5.M.a.|w.-....SbV.PG .<...N.:A.8....jJ.J...W..s.
K..........T.$.......l.e.m.{.bz.\.. ...o.]...1.:`<J..J....3d.....=L
Gz.....z.....i..,.V....F.,}[.'j...i'm...FM..:.p....L......v..%5..}...j
..y^D%S..}.c..z&..9*.../#x............z1..]....R..4..U.{.Y....Q.\..k.i
.i/.G.........k..].P.}/.. `.........`./...bL....-..W..O:._Y..MQ...#V..
?....u...9.>........F!4.o...#Omo3.....D.>..)F.G...w..].=E?.|.}.Z
5.{....n.......X.u./.H.....v.n.!l..u`.t..G...Xo.....0.q.B.......F..~J.
... V...X&[..#.SaL...-..p.....A.v../..a0.. .......j.1..L..`z.b.%..o...
.TC.O...Z...".x.$.z..n{...6..........a.[yR.b.....X.y......ow.-.#......
.g.... W.......Y..K....i6.......... .......uv.......w.FF...a.HI.U.....
...\.t~.%....A.2}.@v..;..}.....>...C.._.J&.*L..\h.f...d.]..$7X.....
.~...".../lD..EJ.....34J...P..A..y(.Do,..VD#.....pi..).A.Hc`........Hc
@G ~...M.q....,e.b-.A.XKA...;.bck.?.......2a.m..u..m?.....l.0f........
........Z..D..<...HtT..bP.'..D..7.c...........d.i.X....._.gYS.}....
.J.....A7.g.....N..B6'....2u;.V...'..J..!.1..$.oS.Y.![9...u9.?....n..T
.\..ebC..mWQ..P....>...zm.Bu......_......*\'...u..Y.=sv...).64;....
yE....F.R7..nd0k...*..N...,2D.Y...C0o.......o_7j<.^....M...u.."TK*.
......AG..ma=.{..T}.f10.....'.S....jU.iXt.....F.......b.Y2.'.4..4..p.[
c.{t......w.z.oYO.z..5?....x....v...)ts.\...Q...CB....s,,/..........C.
..F..r.qEX~..b.,..e:.]....v..-nO......Rr...].s..}.y.m..%....^.9..^...s
.~...Ts......\.w....o..Z.bK&.p..zN.!.. d.u.'W......8.{u.P.UT...c.U^?.
t...'e.R.C..@....T9.p.)|..aJ`...c.2.E..L.<..qn..M..t...h.z.....

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=524288-786431
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 262144
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 524288-786431/1606588
Age: 64402
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: lLwhWpdrEW2Jw0FuahPi2HQPTFMIvcBXafSrzrhVzwpmoibqtETEZg==
.[..;-#...C..U....a052g.Y....!rK..}_..^.......'.=. ..(.....Y......Xb..
Q......^..q.zV..T.^|\'i...h.G.........O.._.(..8..Yl.&.(s...K.._Ej...s,
.>.~.V.i.6......k..-.E..S.......VQ.............................o...
.....#...K.U...@ro[.....|x.$8.|..i .L.?Ub.2EG..d......#....#yr.L..F..i
.:.<m......#...jKCee......dXTLR....afzh.R\.0.|k.Lk.$.a.i..C..Ec,E.M
.tJ.9$1...xx.......|Q.u..6,..../..x..7.....t...=v...NT....4x L8&m.ZC..
...73....qA@. z.8.[4%...*M....a.._d*F.........-....iB..o..... ..>..
l.(.........oo|..5...i....@.8B/.p..a.......|.....$.>...#f[.....=}..
\...DV....&........d..2......2qZ..!u....P.k6......7.M@..WO`.^.i.....H.
....#.........n......eZ7&..@}.........K...T2......2h.:{..}.yy...!<.
.W....).X&.........h...*.A."........[8.C...~...)..UXC...~.......S....B
y...|...^*..............GVl..E..O.)2y)P&.)2...$.^..A...~Sh...*.Wco...~
.22.b.E..?P........_.E.\..........p.....!F_q......s#...bl..J.B...[.>
;.../.jGW......s.,..|..y8.).4.b.....y../3.V...\&....\.l.e......7.....v
.h..Y.AQ;S..l."..<...........2.fZY~:.NI.).../...o...=.K..~.$..O.}.Q
{s.pnY@.@.:..b.}2..e..H..]F..Z8.Xm.as.$........7........>....P,.s..
"w..L.g.3.b........"{..\..0.l)..%;.^D9.;..OV.\.V.......&..f&........p.
.&.bxw.. gh....x.:...Kw.u.......L..W....2........y=.....d0..~..r..U...
./......l3..6..u{}.........J(.l.^..(...y............cZ...jh.s.........
..;.G.D..a....:.@]..F....5c.@...t=(....4q..n...%.........Z!iQk..k..wG9
...`.....c#dZg_Q...2....O..x..Q$[....u.;9.Z.m.^T;.^r..z.......U...{...
z..z.._!.....%....i.....&>.c. H.2.............Am.m~Z.U...C..aC.

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=983040-1146879
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 163840
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 983040-1146879/1606588
Age: 64403
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Mc7BAcyG9xtBs96VnZC8ZVNypH80X9amgQyV8lV8Rds7zVzaNWy7Vw==
.&....u....1..q...."8Xw....X._...D.8qT...B....W...8.....K.o..?.,e.9.f.
.|.......~A{.Dh....;0....;..|zg.@,..?.#67..'...Ou..O../..U.q./...9pKd.
.....v#n.r.^.....U......eO"...P...1.e^.sL.....r..;T;R[.U...f........e.
@.............D$..t.Z~.w.6..{^...,........E.?9..i......H..y.aG..p.=../
i'Xns ..N..*cZ.:._.P.. ...V.r.....i...f..."!AN....t..ln.......`ls.G.Z&
lt;.r..C;.w.|bt.......:...........fd......8.../.y......sj..;!%..df..".
..si......S...Y<6......_.h.l....h@>V.p.g..>0-U.....8.!.h.`...
'.|..S,.'.yw'4....muc.k-.............,....~.....R<.&.. %h.#..|.0t.[
O....J....s.{..{4.u.7...Q.S.......i.^&c..|.....n..(I.2......./.?.Hk..?
.M.L.,.....;e.F.....p7.....w.WI.....@.j/Gk.H7osO`..&.-.x...IN.........
...Z.-?....k...7wiM..*....U;|..i......Wp...H.....F.>..g.=.5z?p..7{.
o.n;....c.L..r.`...79.l.......2.......C.LQTv.tb(.. .....t.\...........
S.PH0.Y.h.#.A.V....F.r...#..6^.|.d.|.......`H....d`.....S}..`../'.U...
\...x...5.......,~...z.*jS.y)-......F.1K.*.5....5..o...*....Fe.&.@.xS.
.T.v. ;.....T....5.)..}4....P....~.M..E...2..8...p...C.(k..."..s.{s7.
........Q.^.b..~..?.._..j....|`.7...x.#..x..ie.......<....~........
j....L:...vPS....d....>.[....HL@1~...L..us8.0?....G..Ez......%w.w.e
Q.%)?.1...W......A.?.|...}..`t..g. ...i.....*8.....y..a..|S.i..w....&g
t;.C.?.........?\j......"q..6.........h?sx...>JN6.g...s....~.j..r..
.u.....4<?.{.~k...cE...B..Z..F....k..k.z.1...A.$....... ...........
i.....i.9...=.........f\y.w.M.p3m.3.d....%C..D..X.-...J.a..i..e..u.z..
eX.?.XB:N^b..T.7...%.}{..w..(....]..]X.c,T,...c..'j.j.. Xh.H..q?..

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=819200-851967
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 32768
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 819200-851967/1606588
Age: 64404
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: fusLmQx8pEQ6ATn7ikhFZI55-yMHKN1B7TMOn0nOzkgGynr8lD5nkQ==
.~.._...Q......\2..}...y..H.....a...*..ak.1........:.F....z.#UP.C-[.ZS
........d. ...(=.J.D.5...R...c.?v}Dc...G*..dh.T"........... 7....J[c.n
...R.4*m.Q.~].I7..r(....L].4V.sS./.8.l....Hx......(..e.b..T.........Y.
....,.B|~.=3.9...GgQ.`..I.}..X.m.%Pq....S.o..(.U....,.=v.,..g.=.?)OM.d
.......~M;.gc....-$]?......K\....4....x. `.....]QId...l./x...7r...._..
.....Cr..."~K,...........?O._.."...f..;...~..G....SO....|.........|...
........t.?..._.........X.5..';|.....!-<..lA.S...f..'.x..<......
......1?,Ys.3##p....w...........UD...W..k.....w.z........QZvei,.'].. .
)w....Q..|].@.%...&..`0..&o.h&[k&.7c....s../...0.....L*.M9.Y.......^5w
.;T.....F. .....C)..gu.Zt.,.-..E$....I.. ..8~....b.7;H.I....W...Q..]G.
..."....?.RA/Z...8.7.r....@7..A..o..5t..|..Wj....]{....z........*.z\..
X3...<.F.D.....K.@....M...~.V.......~/s.....H..s....P.|<...o.u.}
................:(y.. vx"..!...{D...M.....3.t.[..a&y.....S.$.o...}W.M.
.....{t.Z...[.{.......s%.....r....8.~.-...3'.A.{.*a............".J/...
..e...e&`.......j..k.f......i.^..m.....i.7...7h.JA.`.g?.....=.2..Zg.B.
....0l......`.W,\..ae......2.4<;.....f...fy...J.....Y-9/.W...xT.JEZ
...S...Y.....j.;.............}m`...n.>..*...s.f.9~.w.q......Z..V...
..'....`u.nhX..0.G.e.{......Y.R..ko......8...u..7.jl....L...5.........
X.,.v.V5.......Z..x....L;......B4.F.d<"..(.,..U.m..nS.....?........
;\..#O..D.....k.qX...B.....%..:.k...6.....3.C....h#...k..;W.B.9J.U..C.
`..>HS.S..'.*..6...k#.O....Q.0.N.n^.X.3q..5.G;z.6.H{)_ggN....HT..Q.
..G............G.:....j..........7..R....>(.......NF.._.:.....x

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=1540096-1572863
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 32768
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 1540096-1572863/1606588
Age: 64404
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: uHvDtWJ88-G4YRu-mAjtD9cTHccv19PhHRDUD65Qah7uAWphCeYilQ==
7..............5...g..K.......a.>....p.^......|..S.3i.Y.7i.I..Z"...
....W...\Z.6..k@.,..cE.W.c..mx...<.;5r....3_...t.....\)..]..7t...y.
.....C.G... ..."'.z/....T.Zr[A..T.......0.4.....U..).9......P@..`Q....
.V.n.W ..&.Y..M.{.w.Ms.....z.zQ..........W....JW.O.o.......,....X2.F-Z
.......A.....6m.6m.m.... @..).(. ^*T)...U.D)Z.Q....F.P%@....U.f23....V
.X=....=....9.T......>.~.....?KS._.1..^.A..{x........m..-._...5....
.~x./.>b.........,..W.......u...3Ho..\.......;g.(......#.(..t.[..-.
.:7*1...L...6G.q{!..m..K.r.p.6...?7..-...2@..$M.....D[...E....G..W....
.xr.);...M...qG3..1g=..^...U.9 Yg... ..vx..f....T.J.G.......e..J.....L
^&.|.. .....L..../..l........'.9......R...b.. .sr...q8.Y....rV.7..c...
..F..|G.......S.........._.. ..u.U...}..;..Q.>*..bd.n..K...)X....Kg
b..[g....z..}ku...\...Q..,..n..._V.4....V...M...~&n:......c...d{..=1..
..X6..AA...j8E...&..%..a....}l..*.v....L......l..u.L|P....po......a>
;..v.v.Ae;....*..5U...=}..WK......s......G....._....K..'p/.'....;..s.{
>y.../_.r.....Re...K._\........%.d...qm._..2.E....Ko.........?V.E..
..V.T.A0..A...... .. ...4..5......L.......5....^.g..H`..kyk.l.}T.*V_.M
.`...#..p.p>o..!..FZ.........q.._.y..Y...~v...... .....>.N;Ae..3
.;...F=L..7...n!Z_....C,.|.T.P..{w...}x...'/...........L.........}..}.
....u...g.."9.B......_..|......x_1..D{S._.. ..X.].J~....z2 ......g..'8
....s..l...^..Y.{..u..*..{=.....EC.69.......#D..0.(}..B R..Sr..).c...4
?..9[~K.h.S.V...A............0.....~..Z6.F.m....?..<3.`...q.7....c.
os.._.<......}...._;...{...$b..[.].,..K.^.[.?)........QF......O

<<< skipped >>>

GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=1605632-1606587
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 956
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 1605632-1606587/1606588
Age: 64404
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: lfQwjFCFW9irOPqaUz403CzDY5YUG4sBUhTdlE0kF_sU1ALDJ_mUoA==
.GF....J..e......-......}sC.'...>....)..j.v....."W.c .j....!.......
[{7..d....)......l.......>Fm.........#.......4.....~...Q....,...}..
d.....[p...6..0o&. .4.!...c.......7;...=9.72....pmjL..&abR....6.B..O..
\W....CYQ..k...7.._PK..............PK.........X.D................plugi
n.properties..1..1..{..p/............(..l.....\.*..3.6..(....Z..sx....
.....jO.^...n....I..4.r.4....5?..........w....l....*..>PK....w.q...
....PK.........X.D................azureus.sig..._.PB./Q.5E..`.>V.s.
.>.MR.7.......H.;..E.8.,{.`..k....MhXd.S.....s.u.2.2U).%j.!p..jwH..
.q....Y -....F5.It....._.;.!..s...A.f@=......<... ..W.%...Cy/*#LTu.
.):...g.<PK..2.0j........PK...........X.D}guoh.....................
....aznettor_0.6.2.jarPK...........X.DG.E.....H.9...................Az
ureusTor.exePK...........X.D...........................y..LICENSEPK...
........X.D..w.q.........................plugin.propertiesPK..........
.X.D2.0j..........................azureus.sigPK..........)...}.....ont>....



GET /torrent/files/aznettor-win32_0.6.2.zip HTTP/1.1

Connection: Keep-Alive
User-Agent: Azureus 5.3.0.0;Windows 7;Java 1.6.0_18
Range: bytes=1572864-1605631
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 206 Partial Content
Content-Type: application/zip
Content-Length: 32768
Connection: keep-alive
Server: nginx
Date: Thu, 19 Jun 2014 15:42:27 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:17 GMT
Expires: Fri, 20 Jun 2014 15:42:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Range: bytes 1572864-1605631/1606588
Age: 64404
X-Cache: Hit from cloudfront
Via: 1.1 ae96545e0552212804f85fcc54706cdb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zRnrcEiVuYjp2tQpOibUdy7kLzp0vJdHf7UyUJIXG2KmGZfyVVtZUw==
.4........7......6G.M.......?.....G .....;Le...A.d|..s.:*..W....>..
.~.i.]........0...Le.;z.j.g!4.......-... n.Wg.|....k....q....G........
....) %~%.0.K..B..Hk.-->..C....p=.7YY.......y)...;m..........O...[.
,...B.....8-?.N...a./. ZXf.L4...^..h...2.......Y..-\&qCd.f)...4..y0G..
.O.......r.....`....[.}|6.....\.)...2b/R.....}'..Su...2.o.o....M.....~
....`n....F] =[].O.........[g./...o..9@.-R...a.2..t.3O..wj.%.Z.%R..X..
vZ.h..&..Q.'k0..Bm.E~wd.c*_..1$..#~...f..Z|.oC~..3..~...`.j..r.6....t.
.W..~..z.6D.?......jc/...q..5.S...u.-.F.....y.:)...r$D.y...:.o.G......
Oe.i.!s)?.%..kpv.......A.Z......ar........z..d.^... ...../.g.x...D..o.
......e......\s........y..`.2jL...1..NP.>......Xe....N....O..i.....
.~.d....BN...S.\n.....n..I....[.Tw.....x....~YJ.#...o...O4....n......s
..l ~.C...`%&q./~.6q.....s...1' .j...y''....o~c6..!sw.-a... .'..~..a..
....8.|..xX....ySV....U.5spiP...|J..S....vF..o.......}.'o..3kU.mcg....
{. ..[..s...8..O._T.xR.[..r=...CZ.........Cmy.....B.-..=}N.......'....
..d.&..{..?W.Ie...)U..7[..V..Y....%n.x...~;...:...g..........1.S.0.j..
....;...>.b3?.I.}...........'.&p.b....k...F.Y..&...z.M..;y..'..Vc.c
......3..Z...........j>..# .....%...7..c.X.<*...W..........s..l4
o....#ys..{q6.7..v...GmQg.....7g...`..lF..d.=i...........W.{Y.w.1...p.
..,...o...(,.yQ...?.}W..............~ ..N.yWze....[..w...........&....
ngMt.!...&..`.;P..C..2T..V.ZW.[........../..SL_..Kk../.5...DM..S...w.&
gt;.l....c...fC.2.F.9 I..._...N.i...a.'B..3!..R...........\...C...|B.D
..uK..........q...\.4 ..w....)...3...%...1E.Y.1..=..S..F....;." .l

<<< skipped >>>

GET /css/content.css HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: client.vuze.com
Connection: Keep-Alive
Cookie: PHPSESSID=reshf2skjua6acsi815d242m46; azv=5.3.0.0; azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH; locale=en_US; wid=YZNL7LBLWDJXWZB3MBJ8U7ZGLENSFY74; wazid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/css
Date: Fri, 11 Jul 2014 10:34:18 GMT
Last-Modified: Thu, 10 Jul 2014 10:49:12 GMT
Server: nginx
Vary: Accept-Encoding
transfer-encoding: chunked
Connection: keep-alive
a43.............ZIo.....W4.. 1..v..-.\r.%...-.y.)......S[......-.....U
]...|4....Ya..,..C\......&..lW...6..-.&.F.,.../.<%Y...TQ.._...ViTD.
8J~.U..H.Q:.3.oLn..VA}............2/.p4.,..|C.R..U.deA.l.SU..c.....C..
.7[)..b............F......c.....|...=K.}.^N.._.O.f.}.......Q.E........
...N..!.eU.*...d....]y...<4g.xs..]V.....rs...Td.(.....s.......E.I..
...Y..Eyyg....l.......6.....u.......9U._.Ms.....l.v.n.Iyx.....}Z....&l
t;.._..x.m.f. h....m....T.....Q8.|.]..#\N....t2.K...g..@.e.......H...
8..Y&..t.<....v..<.....lq.M...6/......hm...hF..r..Q..6.2`.0...E.
.........!..N.V....*)Q].....G.r^..U#p2......&{.......F..^(...P..aBV...
k...k8$........M.....$......:1d...L..hq.].....6Q.......z.8... .O3.O..o
.p:}F.>..[^.z_.....M;....b....9...m..\..Uk;..4..At.......bO.Nq$o5.4
.!.|J.S...`.."3_.6hm....%..J.....L~...c.....T..N<.Q..@H...*"....h.|
^.}....2o8...e..f..n.W..:jO6mT.bX~j.....U.u...ST...f............1.....
In..#....N..QT.#.......p!C.....F*....%.,6Eo.'.r.......'...y..N..`.A...
Xy....Z.F..}....8.<..i.Ch.)Y........x....D..F...;P...}.s_..........
J...S.:HqQc...v....;k..6.vy......9esm.@....G.......}'G .......;U>..
AT..........j.,... .n...f.9.b.....@.?_,c...m.z-"(%d..3.a....`0Nr,.....
...b.T..c(..{...rEm.o..S\.3=........73.LH..NK......?.gW.7O...)........
...*...c.k]........|.u}.r..........}@.f..x......x0........P:....J.q!.[
`...U..;88.{..R.Y{...^ ..^..m..(... j@.#..m.Z."h....5.....Ma..\.>.(
..\,......-.*.kF..0.g......3>..,9:....9..2........rC...Qx'......d.w
....k....k.1.A....b-J.....z:GGk..].7..*..f....}.&.T.7.{w@.O,2D..'I

<<< skipped >>>

GET /update/pluginlist3.php?plugin=aercm&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav:&ver_aercm=0.4.8 HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: plugins.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:12 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 926
Connection: Close
...........UKo.8...W.z-"[v.....v.@.....{4(j,qM..I.I.}?R...{(r. ..{.X..
]...........4G........[c._......)....e.*}..V.~.>..Q....m.(..6E9 .',
5....M.........................._. ...aae{S...3...FPky.~.z.X.f'.W..D..
t..,...Q..._....-.....P.....:..........\.=H:).....<.....P;.=...2qvW
..../W.G....|x.k......ipL......X...g/V.V.#w8.c.2.B........q...0....jEW
....^.xF.g5L...*SL-..a...rE....u.....Own.......D..Qo<.....X..}...M.
e..&.j5..H........(...I..../...AYv4=.$.7T1.8/..:.......&.j...A2..".E..
L......*......W.P.....PJ8T...j.`.|U...../.%.."..*...FG..h..* .C|....."
k?!.%.'.8....9._q..r.].6S.,.OTL..d..8.5.hJ/.............2.......$.hgM.
QTB....`4.....st.o..#Fe..=.{..e...Xk\..<z....q........(.....-......
C.....|..s.g,....p..3....].....5..a....BYd.X...L.`..`a.A.i..q..jZ.!..)
.9....}Xdt........6w..#.....d...L.H...c..\q.sR..r.-....j....V. .v(....
.Bl...W^............X......-. .Q.'#P.........zE...s..2H.....v.#u......
@.NS...-..].*.2..=.._..?<.....


GET /vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"ask2"}}]} HTTP/1.1
User-Agent: Java/1.6.0_18
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:31:23 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 74
Connection: keep-alive
{"replies":[{"type":"payload","seq-id":1,"payload":{"can-install":true
}}]}..


GET /vzrpc/rpc.php?msg=offers:can-offer&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"offers","op-id":"can-offer","values":{"offer":"pcc"}}]} HTTP/1.1
User-Agent: Java/1.6.0_18
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:31:34 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 99
Connection: keep-alive
{"replies":[{"type":"payload","seq-id":1,"payload":{"can-install":fals
e,"reason":"CC","cc":"UA"}}]}..


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Thu, 10 Jul 2014 04:17:59 GMT
Expires: Thu, 17 Jul 2014 04:17:59 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1895
Cache-Control: max-age=496008, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:32:54 GMT
Connection: keep-alive
0..c......\0..X.. .....0.....I0..E0...........0..1.0...U....US1.0...U.
...Symantec Corporation1.0...U....Symantec Trust Network1?0=..U...6Sym
antec Class 3 PCA - G5 OCSP Responder Certificate 2..20140710041759Z0s
0q0I0... ...................B.>.I.$&.....e......0..C9...313..R...%V
.......K3.....20140710041759Z....20140717041759Z0...*.H...............
.....v.]..\..u.5............c*W4...-..0........0@O&..dS.....N.g.|.....
`.AsT.2H5$..V.....?3.i.....c$.Q}K.....hVH- ..?:.Qp..\.........J.DJT...
.L...L.K....&.:.. .2....-b.b.%k].7.$[.4B......X..(YSr......\g....&^J..
.u.....c..f!.g...p..........)...."...Y.#_5q.....0...0...0..........U..
3....2.......0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1
.0...U....VeriSign Trust Network1:08..U...1(c) 2006 VeriSign, Inc. - F
or authorized use only1E0C..U...<VeriSign Class 3 Public Primary Ce
rtification Authority - G50...131112000000Z..141212235959Z0..1.0...U..
..US1.0...U....Symantec Corporation1.0...U....Symantec Trust Network1?
0=..U...6Symantec Class 3 PCA - G5 OCSP Responder Certificate 20.."0..
.*.H.............0.........2...#.522.K.....G.....].........5......1.mW
.....k....zz.5.....ts.o..v.....QtN.W.zO....t....B...:.......GVd.'=....
.......6.Lg../......`.. .U..V ...6......Y....e.)....o....._.b.....1...
...[.<.j.hT3..f......vJ>...Q.7....U...W3....i!...hu.JK...`.L...S
..@.~N...........0...0...U.......0.0l..U. .e0c0a..`.H...E....0R0&.. ..
.......hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.symauth.co
m/rpa0...U.%..0... .......0...U...........0... .....0......0$..U..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFNn9RNfzIsVHD4+5L79Hfs= HTTP/1.1

Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Fri, 11 Jul 2014 06:13:26 GMT
Expires: Fri, 18 Jul 2014 06:13:26 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1844
Cache-Control: max-age=589510, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:32:54 GMT
Connection: keep-alive
0..0......)0..%.. .....0......0...0...........0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign
Class 3 Code Signing 2010 OCSP Responder..20140711061326Z0s0q0I0... ..
.................F....0.yV......{&.K......&.......Sg.._....>>...
......20140711061326Z....20140718061326Z0...*.H.............v......\`m
\.8Y..<..^....kd..%_"C.e.?.~...L....om.j...>.T[.x")..&j.yH...T..
..r..j.....#F6.E#<l. ."89!........K.B6..H....V.Ud6a.o....2..0X..W.T
G>~.C....e.qq.5I.V ...=..tL...\~$..k....-.H.<.t......3..G..v....
...tP..M.`.<.."S..P..A.\Shh....j..L...r....g...........0...0...0...
.......0...?..-..A.F..p0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...140621000000Z..140919235959Z0..1.0...U....US1.0...U....
VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Cla
ss 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0........
..}..{.x.fh........'.U...D.D.n.g......B..(1.....o4.=..<v.F.aV..U...
'........B........77...........:....=....C..T.K..j......8..i..}..f....
....0:J...'.{M...-.g.-(.4n......J...}.....U..8.o.{....\. ......q...h..
<.....<.M...^.7....S.x.=....rs#S~VY.....=.....GJw.........0...0.
..U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.ve
risign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS in
corp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0

<<< skipped >>>

GET /install/imesh/imesh_ERROR: Unresolved installer variable HTTP/1.1
User-Agent: Java/1.6.0_18
Host: cdn01.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 11 Jul 2014 10:31:09 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=60
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>....


POST /vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.0.0 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Installer
Connection: close
Accept-Encoding: gzip
Content-Length: 372
Cache-Control: no-cache
Pragma: no-cache
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

service=rpc&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"INSTALL_STARTED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}}]}
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:31:08 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 34
Connection: Close
...........V*J-..L-V......=.a.......


GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6aQ== HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: gtglobal-ocsp.geotrust.com


HTTP/1.1 200 OK
Last-Modified: Wed, 09 Jul 2014 06:57:51 GMT
Expires: Wed, 16 Jul 2014 06:57:51 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1459
Cache-Control: max-age=419154, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:34:19 GMT
Connection: keep-alive
0..........0..... .....0......0...0........Y0W1.0...U....US1.0...U....
GeoTrust Inc.100...U...'GeoTrust Global CA TGV OCSP Responder 2..20140
709065751Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>
;U....... ...:i....20140709065751Z....20140716065751Z0...*.H..........
.....h..4}V.z..VY$...T..P.W..X...;G...m.5LV]V....i.yj....Ui...x$..1.N-
.7.mq...)...y.>........Q..o5._..^~......&..N....0\... _].j.~.{wP...
....!b.....05.....$........8...Fr'..N.t.(EQ....:z.o..a..;;.P...Eo.....
^$x..&.j.Q.jY<9..&...g....=....m.....(..LO...K5 .NF.....0...0...0..
}........:p0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0..
.U....GeoTrust Global CA0...131122231748Z..141212231748Z0W1.0...U....U
S1.0...U....GeoTrust Inc.100...U...'GeoTrust Global CA TGV OCSP Respon
der 20.."0...*.H.............0...........b0..?.qg.M.Z0..$N.O.o..Nz.a..
I..x...:z....&.=...........6n.q.....V.e..*2:\..T..v..S8.z]..". ...~9..
...%#..Z..LF..........,.Z. .K.p...5".T....7b....ET..)7..|..C.w@-.-8fT.
.F|..T....@XT...b.n`hx...& d^.&....?Q{`N..5g.4.~..6Bg...r|..]. ..->
.....3z...4}.a.C}.......0}0...U.#..0....z.h.....d..}.}e...N0... .....0
......0...U.%..0... .......0...U...........0$..U....0...0.1.0...U....2
048-TGV-4790...*.H.............z^..V.....<.%..eI(.....?....AT.v....
..gt..=........L0..1...uL}6..t......8}...?..Oi./..z.).....?G.'lz.P....
l.W....<."(.i] ...A/.z.$.j....2...D..7..GADZ....$.=....i...>.g $
.3#.....t\...|U.<.....-..0....<....8$.KL.w....r......%..rJ.XL.ju
h....8.o.]..l....^D.....

<<< skipped >>>

POST /vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.0.0 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Installer
Connection: close
Accept-Encoding: gzip
Content-Length: 1905
Cache-Control: no-cache
Pragma: no-cache
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

service=rpc&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"BROWSER_ie","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":2,"listener-id":"install-stats","op-id":"log","values":{"event-type":"INSTALL_UNELEVATED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":3,"listener-id":"install-stats","op-id":"log","values":{"event-type":"TOOLBAR_ACCEPTED:IMESH_SEARCH_START","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":4,"listener-id":"install-stats","op-id":"log","values":{"event-type":"PCC_DNA_NOTALLOWED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:31:35 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 34
Connection: Close
...........V*J-..L-V......=.a.......


GET /install/getpartner.php?format=json HTTP/1.1
User-Agent: Java/1.6.0_18
Host: VVV.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html
Date: Fri, 11 Jul 2014 10:31:05 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: PHPSESSID=hdm28ro6ur28irkgt1qk31enf1; path=/
Set-Cookie: azv=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: azid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: locale=en_US; expires=Mon, 10-Jul-2017 10:31:05 GMT; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Cache-Control: no-store, no-cache, must-revalidate, p
ost-check=0, pre-check=0..Content-Type: text/html..Date: Fri, 11 Jul 2
014 10:31:05 GMT..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Pragma: no-c
ache..Server: nginx..Set-Cookie: PHPSESSID=hdm28ro6ur28irkgt1qk31enf1;
path=/..Set-Cookie: azv=deleted; expires=Thu, 01-Jan-1970 00:00:01 GM
T; path=/..Set-Cookie: azid=deleted; expires=Thu, 01-Jan-1970 00:00:01
GMT; path=/..Set-Cookie: locale=en_US; expires=Mon, 10-Jul-2017 10:31
:05 GMT; path=/..Vary: Accept-Encoding..X-Powered-By: PHP/5.3.12..Cont
ent-Length: 0..Connection: keep-alive..


GET /crls/secureca.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.geotrust.com


HTTP/1.1 200 OK
Server: Apache
ETag: "9680092cf0225f136447cd26b4a9d74e:1405074018"
Last-Modified: Fri, 11 Jul 2014 10:20:18 GMT
Date: Fri, 11 Jul 2014 10:34:19 GMT
Content-Length: 1714
Connection: keep-alive
Content-Type: application/pkix-crl
0...0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equ
ifax Secure Certificate Authority..140711100302Z..140721100302Z0...0..
...&..120627171036Z0........140521155053Z0.....-..140617185011Z0......
..120627171058Z0....``..120627171034Z0.....3..020515130611Z0....j...14
0226123519Z0........120627171039Z0........120627171002Z0........120627
171038Z0....i...120627171035Z0........100301134531Z0........1006231417
52Z0........120627171026Z0.....)..140617185515Z0........120627171025Z0
........120627171050Z0.....#..140606204021Z0....H...120627171011Z0....
....120627171026Z0....._..120627171036Z0........140618143145Z0....7...
140416231149Z0....%...020514181157Z0........140605215230Z0........1407
09194633Z0........120627171058Z0........140618224415Z0....x...14050720
4001Z0....}...120627170911Z0.....8..120627171035Z0....."..120627171030
Z0....]E..140618144819Z0........140429180917Z0........100729164439Z0..
..x...130924204342Z0....M\..140430000442Z0.....D..120627171051Z0.....N
..100623141726Z0....X...140427081922Z0........120627171036Z0....7...12
0627171052Z0..../(..120627171032Z0....zo..120627171025Z0....v...140618
150003Z0........120627171039Z0........120627171031Z0....*...1206271710
32Z0........100729164732Z0........120627171017Z0........120627171031Z0
........140618143256Z0....hA..120627171034Z0....~...120627171035Z0....
....120627171003Z0.....$..120627171037Z0....V...140624123102Z0....x=..
120627171055Z0........140416233935Z0....t6..140425041720Z0....S...1404
23105438Z0....jp..120627171034Z0........140606222139Z0....Bf..1206

<<< skipped >>>

GET /media/js/ask/ask-min-c133bfd6d3d4f57d8088f9be9b0b304a.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: akd.apnstatic.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
Last-Modified: Thu, 10 Jul 2014 19:11:48 GMT
ETag: "44d23-15c85-4fddb98ad4500"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24984
Content-Type: application/javascript
Cache-Control: max-age=31536000
Date: Fri, 11 Jul 2014 10:33:16 GMT
Connection: keep-alive
............{..F.(..........HY~..t...x'.=...{(..x....4..RH..~....(.I..
..&.k...........>.n..4.k\.}./n....*.....8.a..(.y..p...e....a./&..H.
/.b.VHu.0....o..xR4.:....[./...X...,...&a<.....E..QL....>5.E...~
j.g...l.8....@..X.V.l...r...l1>....I.....d..Z.f.........-ga........
g.L..#..Y'#._...xV..4....iw...;|.\.aq......G{........";/..l...4.G....&
lt;..-...Bz..Y.9......M.."{..V...... (:O.q....-....QC.{.5[N.xa9.k...x2
..T..Y.j....v...<...e{..9.....<...C.........."h6.ga...?.{.M.....
..Z..^....l..)1r\....o....L.*~......,.7......T....(....3./.f?Y.<...
..._.$...Y2.-...^y..f..#...#/8"u.......Eq.GT .J.i..4)lh.r..lac....Q?..
A<....E1.J..&1^`G........1.;.l...v...O.......v...#7vG...b..........
.@B.k..yzk..;..}^.H..V2.....^.....n...sq..i;..p..M~..5p.r....ul..$w.A.
..b.,..v{...4^@sn...([..@-g....T...O4..=..N<)..Wm.{....p...:L..O.4.
..|.........l...8".....?w..9...W.?..:.....~..........q.....N.(...x./J.
....G..J..8....(.Tc3.:....L...._r..N..R......$XfF....g...N...o........
.W....... ..._.z........./.o\..gL.N.K.X"gb.,j..'^g.........L......`...
....la..Q...A.....]W....D.R....,..4........1.e.@./~x...A.B.60.F..lV...
.j...R....^l.V.$[...i..f..}Mb\.......}..1J........_.Pa.&_.I. ....~....
uA..z.;.w.;.....}.q....3..#5...i..S?..q.[O.T.*..t:[w.........#sr(.$M..
..c.b):.r..._`5{....$.uB...`.....l......F...^.uY..Ij..H.W..}....p...xi
...w.p8....VqU6.....!.....>.....k.$.7u3.J.C.....(.gl..d.o6/.>.E.
.Cw...A..P.ivQ.e'e.&.Mvj&.c.d.AJf...E...k.Nq...GJ\/.k$0....h....w.....
<V..6...[.c`..|u.ab....W.D.H.a..........u.....,........T.M@!Y.~

<<< skipped >>>

GET /media/images/favicon_new.ico HTTP/1.1

Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Host: akd.apnstatic.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 26 Nov 2013 04:15:26 GMT
ETag: "41216-47e-4ec0cbae25380"
Accept-Ranges: bytes
Content-Length: 1150
Content-Type: image/x-icon
Cache-Control: max-age=31536000
Date: Fri, 11 Jul 2014 10:33:17 GMT
Connection: keep-alive
............ .h.......(....... ..... .................................
......................................................................
..............................................................PP......
............00..pp..............................@@....................
..................@@..................................................
........................................``......MM....................
..........@@..........................................MM..............
................................__..............^^......~~............
..........``..PP......................................................
........................``..................................PP........
..........................``..........................................
................qq..@@..............@@..................pp............
......@@......................................@@......................
........``.. ........................................................
......................................................................
......................................................................
..............................HTTP/1.1 200 OK..Server: Apache..Last-Mo
dified: Tue, 26 Nov 2013 04:15:26 GMT..ETag: "41216-47e-4ec0cbae25380"
..Accept-Ranges: bytes..Content-Length: 1150..Content-Type: image/x-ic
on..Cache-Control: max-age=31536000..Date: Fri, 11 Jul 2014 10:33:17 G
MT..Connection: keep-alive.............. .h.......(....... ..... .....
..................................................................

<<< skipped >>>

GET /install/imesh/AskLogo.png HTTP/1.1
User-Agent: Java/1.6.0_18
Host: cdn01.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Jul 2014 10:31:24 GMT
Content-Type: image/png
Content-Length: 834
Last-Modified: Thu, 26 Jun 2014 10:03:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Expires: Sat, 12 Jul 2014 10:31:24 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
.PNG........IHDR.............".L.....IDAT(.MSkH.Q.>N.........'5..,#
...,...Z^.(.h.90....(B......2....2.D....E...m..9..9u..}..}....y..<.
........D ..n.......D.. uq1R..]Q^8.[......-.._...._..m..K...r...o....B
.@...n .23..84tF...A.....,_.....g...I........"Me..iT...]...b....c....0
X....;O..f.;9.@.....V_w.`2..........=lhF....uu0........t$...N'...t...x
p9...........]_........iD8.....}..1Y.)..u......<%....`...cG.....I..
...r9..l....jk*......`G....,(......v..B...,....p.s.(.u..`-.'&..x.92...
.`......T.....`%7..\.........U..T^L.....3.F....N'%.....j...M....T.ut..
......VT.2..s.:^g ............zW.........--T..CC.gr....@SZ..;...kt..W.
..!..[}..it4%0.u..........b...rL.dR.................@...q.4&..EE ....O
.x.A...h....\.k..M...1.t.....U.E!,...8x.gL....89.-/;k|.........C.../..
..g.*R...(a.g..Zl...4a.Iqh..,......L..2..X......Q......9pKP.y....IEND.
B`.HTTP/1.1 200 OK..Server: nginx..Date: Fri, 11 Jul 2014 10:31:24 GMT
..Content-Type: image/png..Content-Length: 834..Last-Modified: Thu, 26
Jun 2014 10:03:34 GMT..Connection: keep-alive..Keep-Alive: timeout=60
..Expires: Sat, 12 Jul 2014 10:31:24 GMT..Cache-Control: max-age=86400
..Accept-Ranges: bytes...PNG........IHDR.............".L.....IDAT(.MSk
H.Q.>N.........'5..,#...,...Z^.(.h.90....(B......2....2.D....E...m.
.9..9u..}..}....y..<.........D ..n.......D.. uq1R..]Q^8.[......-.._
...._..m..K...r...o....B.@...n .23..84tF...A.....,_.....g...I........"
Me..iT...]...b....c....0X....;O..f.;9.@.....V_w.`2..........=lhF....uu
0........t$...N'...t...xp9...........]_........iD8.....}..1Y.)..u.

<<< skipped >>>

GET /ajax/libs/prototype/1.7.0.0/prototype.js HTTP/1.1
Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: ajax.googleapis.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Wed, 09 Jul 2014 04:14:58 GMT
Expires: Thu, 09 Jul 2015 04:14:58 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 37451
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 195559
Alternate-Protocol: 80:quic
............}_.9.(.w...7g...@fv....%.L8... .rm._c7......a..g.TU*..V..d
...y..N.z).J.R.T*m.E...x6..N......io.Of..4.f7...F.1...x.m7.s%R..^.=...
.......4.F..lr....H..2.f^(XY6...y1....Yz1.....M..u........Q:.^..m..[.?
.{.b.Dp/......|P4."...m.&...|.....l......iN8...9.^m.j...omse.c:.h.F.WV
..oD.VTW..7 ..t|Sd.V._.G......*=...<UUG...*.....*....f;.D^.O.).;..5
..l..........K...&...7.1.N......c...t..s....QD(D..a .....N:...........
.V5..].?DU/..../........}:...... ....$z.mls.......*.a......_^..~U.^..h
.... ;M/.i.@7.....o6gY1..i.......8..."K.............h....CE.f.1...Y...
.4.(......#.......su..A.y..f..._......&....t...#...../_8...Swtm=......
.'>-K%T.....d..2.-.k~...G.h..A..q]........~=Y...x*......~.Q....7UC.
ihq]......E...pAy.v ...|2.OgY_..L..m.z.Zh....B...........Njb...C...;n.
..{0.....M......-2.I.......D.O....?..=....i.St....:..........7/.......
.fgm..z..7T..s.]K:k*.X{..-e.......V$.@...H......To.T...Fx6.lk....*....
.dK1.(../...J...n.z6.E...bRdn...%...&8....(F...o5...v.......R...._..(.
7.._.....~.e.u.........L.%....B,U^..].........p..F..!Z.o.'....)E..P...
G.....$..$......6.y..T-QV.s.q].......t...&.B..z....n. 88......Z..JO...
. .._..,.NT... c......W...^yC..b>..B..u5.e..5....f.V...g....bFS...:
...P..N......J./...f...F..x..YA .p..U.l^..R...j\..........m.A.....Si..
.Z..@@5.o...1;".`......9.;.....v..J..C`7....o.X~s..M.N.P._.f@..S(.P6..
X..JF.&...H.-.,5..X2.<...UC`...`.....Y.s.pyol7Zb.3.......!P.9..O.l.
....'..n.T[l.......T......~r....!..,...aA.$p...6....hJ.'e.0.0.Sw......
..Z.4..y0C.P..,{t.|r6."...I.j2..3..:i.<0FJ.<-..."a..{8.x....

<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?032d2f2dca96a284 HTTP/1.1
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT
If-None-Match: "0b96c77303ecf1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified
Content-Type: application/octet-stream
Last-Modified: Wed, 12 Mar 2014 20:20:10 GMT
ETag: "0b96c77303ecf1:0"
Date: Fri, 11 Jul 2014 10:33:25 GMT
Connection: keep-alive
HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Wed, 12 Mar 2014 20:20:10 GMT..ETag: "0b96c77303ecf1:0"..D
ate: Fri, 11 Jul 2014 10:33:25 GMT..Connection: keep-alive..


GET /torrent/torrents/azutp_0.5.4.zip.torrent HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Type: application/x-bittorrent
Content-Length: 665
Connection: close
Server: nginx
Date: Sun, 22 Jun 2014 03:32:09 GMT
Last-Modified: Wed, 16 Apr 2014 20:25:22 GMT
Expires: Mon, 23 Jun 2014 03:32:09 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Age: 61256
X-Cache: Hit from cloudfront
Via: 1.1 9e2316f9bf6c03b8640526708b3cdb00.cloudfront.net (CloudFront)
X-Amz-Cf-Id: FyZuHzBnmqdAxIRUKThtc40rlkfO-miC-wS_AEe83r9KfL34RxOHCg==
d8:announce44:hXXp://tracker.update.vuze.com:6969/announce13:announce-
listll44:hXXp://tracker.update.vuze.com:6969/announceel45:hXXp://track
er.update.vuze.com:16969/announceee18:azureus_propertiesd17:dht_backup
_enablei0ee7:comment20:Provided by Vuze.com13:comment.utf-820:Provided
by Vuze.com10:created by19:Azureus/5.3.0.1_CVS13:creation datei139767
9890e4:infod6:lengthi185738e4:name15:azutp_0.5.4.zip10:name.utf-815:az
utp_0.5.4.zip12:piece lengthi32768e6:pieces120:..f:......S.~....7.....
..!-..iU..f.>...W..es....R..k.D...KTP..&h. ......L......;D.Z..HQ..T
.G...!......t%.ln.N..eKc....QR7:privatei0ee8:url-listl49:hXXp://cf1.vu
ze.com/torrent/files/azutp_0.5.4.zipee..


GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAFSh8UnRmbfJXQAAQAAAVI= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.msocsp.com


HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Fri, 11 Jul 2014 10:34:21 GMT
Content-Type: application/ocsp-response
Content-Length: 1501
Connection: keep-alive
Set-Cookie: __cfduid=dc0a21f3221d9473313fd0f06ffdff7ed1405074861674; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.msocsp.com; HttpOnly
Last-Modified: Tue, 08 Jul 2014 00:38:35 GMT
Expires: Tue, 15 Jul 2014 10:34:20 GMT
ETag: "000647091904d2d217089177220ddd907ca4bab4"
Cache-Control: public, max-age=345599
CF-Cache-Status: HIT
CF-RAY: 1484591d78d10f75-FRA
0..........0..... .....0......0...0.......j.....N ...#c........2014070
8003835Z0..0..0L0... ...........p.....!M.....PH.O....-.lM=.P3...x....$
.......R..'Ff.%t.....R....20140708003835Z....20140712003835Z."0 0... .
....0......20130708003835Z0...*.H.............mC|J...%.D..3..B..?.y(..
.Z....[3.....y..D...'"*[..]1tl.......sl....]?Q5Os.U.5A....7....;....8W
....C..d.B..5_....*...Nr....9.v..>.`..!...~&m..Q.........$|.,{.Q..u
'....%5/...7..!.q.........b.%..v'.......R,b...).J&....k....8. ."?t.e&.
..i{............${!!.;.=.....0...0...0..............V.X..7s.B.....V0..
.*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0
...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microso
ft IT SSL SHA10...140630194542Z..140829194542Z0!1.0...U....Should be i
gnore by CA0.."0...*.H.............0.........1._G....#.L;!>Q.z.m?e8
.-1\...Scf....0.....E(/F.(..nN...U....3"&M./..r-2@....th..u;...j.k..\.
d'...s2D...W6.g.9...xk................Q.GZK.1.\-.E.......l.h.]%i4....v
.....J.-. O. ?.*...A3...h.#..."..c....PhV.>..;...Y...._.".t....|c..
....3.l.YUZ."p.r..C.U-[y..........0..0...U.......j.....N ...#c......0.
..U.#..0.....-.lM=.P3...x....$.0...U...........0...U.%..0... .......0.
.. .....7....0.0... .......0... .....0......0...*.H...............mT.`
Gr.d....7.... .u[X.b..M.......RI......f.[&}'.Cply.q....o...G...3...:(.
...\/...>...2CO..>.[.>...'...,....e....8....t...y.S......./.&
lt;..{h..S'.4X....$=...XSx...E.}C.E.Pu.W....B...#B.Wj..u<..g.......
.?....U%....h..:.A5<....J.?..dT.....=.....y.^.....5......

<<< skipped >>>

POST /install_statistics.php HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Host: service.safetynutbe.com
Content-Length: 2094
Cache-Control: no-cache

XML=<secure_request><salt>515</salt><data>4gXg6gQOl3lzDy/i4URJaYxQXybBKPh1MQwKWnj77wppbe1HOPyhHF8GMMS6AE0QXAZ34dwtcLTFncC3ckE45Xbr0hhA41f7smIeORMx5rJJOR pv3HG97Cnr7/F i8bIH6AhMZaqW1D6t7NZDiyjzHvVvz jp9VVEQkzOIEBQatcIHkw3RzqEtsyjpNq8EjQmmMjNFc eXQF1nekFjFa8o940HpeJF Oi 3Mpb78UxMe2QHNHmD0/m5idX2OOwQaI0iToJSzD8wMq4gLE3CYVWdJzneMVhi83aVt7XoPbBQXr50vut8OY222ZH5dSl4IAzwbvG09fdUdXOBlciGY7jdrwmSa UL5xWtI4RaAUrtJJPuE5e9pLeO/NozQTKr6YdnDRJNSoTRqAyTTEYkc RwBQ59RIH74/Toia4kdO1u7ro4l/k4kFAs4LZ71ZngQpJIK4MJgyj6hKOa2eWcHPas zwiG f0daZCxXYAsy seJkYoMHlE4pWpZQmXetEvmBQuX4kV/pXZJfPPw8Pb/326ZPZOJp4UFtxiiOgXkrbL5smc61f0TYd1rPSaVEXsf5vmLhu4tiwVP7BmPwlZ4R3P9zcs5Iq786CWhtluRuI5SK9JuiJTnfSxeY6OOLqj0G0BYWsxnUr4qugtmSVuGizB7T15ktScQGzcmcWl1tGEnsN/tlgUAwwIfaDz2/xgkP/5Kf3nZ6LAFSdafo1DskC/jb8RkXHTBteOkMb3 Q/QIKPfZSYklokurmml6zG5cgB6Bo6itjh8hl0LhfQEblbvEvMpneSzRaf50Agxx1Gfr gac8NgRUqKrWhw2t2qnAC1VRCheFtw/6v5CACfHiTiGitfoo8Y/z2qEvQJav9ZPn78d7OMw8jv1hJiFLGGp563PQtlQTS3Ax9OHw0hgFVKA5uuNAdxfXNC5MUFyak2aeRcetg/QuSm822r5C9I GiO6HaNOPgUjHovby2VnJXm3RP1N48Ve35AUtuprN4hzLnK1MiGJQon8BixhRCMfEhD03XMFb/uR0Uc rHCEF nBcHZRLm7RjZARNTb7R5KBFhmDuK13ijz9sgn3uG6B w9F8a0pZDCqfjIwoPrAfDVLvwKHgX8SQ88SGWXHQeEQhUs9s4JdU331HcjFwQv7GUMmC5bhhgsafgvv8DSQ5nT31M/kSrPXjpom3WK2ozBPN8zenfyoR3GC1zvBJDPA1yWTXKJwF4ZqKi QtuB5
HTTP/1.1 200 OK
Content-Type: text/xml
Date: Fri, 11 Jul 2014 10:32:59 GMT
Server: nginx
Content-Length: 498
Connection: keep-alive
<?xml version="1.0" encoding="utf-8"?>..<secure_reply>..  
<data>4gXg6gQOl3lzDy/i4URJaUxrNbxdn4dVvWpNIIQpGOg2vNNAFBlDG1B08p
wXzlt5qRA2qS/WNEuRIU1DCy7nEOsGlw02uzE5qsXoq5uIZnHD5kahgZZZF0lO8izoFM0L
XsGbs32slswLuwx3aDwAdXAS34Crpj8hX0NrzU4y7yG8UJdta4X3fjuNvEbnYxsGt3C0q4
gy3aK94Sczf1 nLmt/jUUQpJS1xKe32kXOLRkcU0eykUN/D2jgKHbepnJInUz56P pARZp
B/2iSKMs8y/zSVVL6LOjs4njCpj4sRLqFpTDBXsZNTDdaRmL7I8H6DpYVljbADBFR2P97B
CIwOg6WFZY2wAwRUdj/ewQiMDoOlhWWNsAMEVHY/3sEIjAvDfxy7HFSVz 8Q7GdCTsAg==
</data>..</secure_reply>..HTTP/1.1 200 OK..Content-Type: t
ext/xml..Date: Fri, 11 Jul 2014 10:32:59 GMT..Server: nginx..Content-L
ength: 498..Connection: keep-alive..<?xml version="1.0" encoding="u
tf-8"?>..<secure_reply>.. <data>4gXg6gQOl3lzDy/i4URJaU
xrNbxdn4dVvWpNIIQpGOg2vNNAFBlDG1B08pwXzlt5qRA2qS/WNEuRIU1DCy7nEOsGlw02
uzE5qsXoq5uIZnHD5kahgZZZF0lO8izoFM0LXsGbs32slswLuwx3aDwAdXAS34Crpj8hX0
NrzU4y7yG8UJdta4X3fjuNvEbnYxsGt3C0q4gy3aK94Sczf1 nLmt/jUUQpJS1xKe32kXO
LRkcU0eykUN/D2jgKHbepnJInUz56P pARZpB/2iSKMs8y/zSVVL6LOjs4njCpj4sRLqFp
TDBXsZNTDdaRmL7I8H6DpYVljbADBFR2P97BCIwOg6WFZY2wAwRUdj/ewQiMDoOlhWWNsA
MEVHY/3sEIjAvDfxy7HFSVz 8Q7GdCTsAg==</data>..</secure_reply&g
t;....


POST /login HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded; Charset=UTF-8
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Content-Length: 1656
Host: preved.safetynutbe.com

XML=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
HTTP/1.1 200 OK
Content-Type: text/xml
Date: Fri, 11 Jul 2014 10:32:54 GMT
Server: nginx
X-Server: web1
Content-Length: 3526
Connection: keep-alive
<?xml version="1.0" encoding="utf-8"?>..<secure_reply>..  
<data>4gXg6gQOl3lzDy/i4URJaUxrNbxdn4dVvWpNIIQpGOgXYNo6zSJgwSteqj
szDWngv12nWLgGrYCMfuy3aPB1F17cXu7BDKKHC4kv6/yNjCMRJaJg1dG5StKj6aNLkim2
s1e817zXmpfXO8Py E7FF5qhr d3WAUKqMjQnKSoyS JMvDR0MUisa8gAXOrawPo9VwAal
7WrknLHA3JcViZQBFArCMqOty4WBwVRX5RrIbBQjzsx2XQWdCHn Mh/Airf4 hyNa3l/Kd
VEN2x5Eg4nVDQ1Zp1rg0LA4XLFIoAjvXUDmPz7P0/MtzrUBtPhRymRPqFmjqzL2DO5oFg5
QBIJrr21sSWe5EaTWFRCQAUeyiwZOkw8JGxqK0ymIsNxN1i6mcGIHU9Err5zWbBnvOM/dT
fXIzf2ohZTdMO/DeK549SO3bXY8nsu3toKaIciBvaL vWvb6W5N0L9IjQjMQf/pO X62Il
BqUYvYmz/Mb5PIfStzXdhMIyI9EmV U8gzzR20rSTrNVdnyMFT4LSvarHqG2tjFknEF72J
ZM/fGd7b/nADvZ558Xlo5rRsqKaiXPqcEvB8zhY7sV4426BilAyO9xqEGmGFtu3bp3MWjp
l7ql21rH1MAusMGvjEsykpAulzKeFKqyd8v7tC4jp3GYl52IOZRx62t2YIoCPJfrtlyitH
vUJOZ1Zy7QP2ETVwyQCQV ps6E709vG9Cba h4xBT/mhuEDJ8gteeRhIo6CtpaZfqOyTRn
LfcAA C4sHBv/fren K9JBwhNYKs77eA4rw25l0s7T/e3d3p/IEz2j5P/gyqXmLuYVTTrH
7LPPZaifLC8T/omwkLzM9sYU/VO8U E mMgkF/XryyUm2vU9fqgodwmidxPs5hFo/cm5wP
uLXHZ3MskITdGGpSLnVCSl6j50idHY2O359DRcLAr2cjpYtWKMK8gBknB6u Q6BLcR8OF
I2kaIPEm6kSGD8KDTopKZwneINyb7u/EQzO8r9oC3eZTcl9DSCZGaRMagXWLvQhpZ8CeJn
hDvXNY rvQaq2TOdQT8WOhvwTIZ2VZlRTTsEKlVC1SwZl1eH8citggjcsKgdO8 k0bAriZ
hYF1i70IaWfAniZ4Q71zWPq70GqtkznUE/Fjob8EyGdlWZUU07BCpVQtUsGZdXh/HBUDwt
5eIKaQEYQdl0xdTAKAXKlNpuUs3f781a6h7lxkuphrqgAjbUcuSzdBSizH Nx96jEamnj8
ympD8DuwocyCAToecsQL0Lri10Bu8dg WcQX5yFeci87ZIdkjZmsAcHp91fsdAhu5Q1AYU
wtsMX0qvNRy3TlOXf2pl3OZBHebugsvTGaLShC65zXm8pik13sgKAfEkh5RqqZr y8BRfk
uPuDU0O6TA/JFXRFD2vMNT2qCxIvT 7sAFxAm 4NfJ7vIkovsiR0NcTv9tYtASRjgF

<<< skipped >>>

GET /media/js/common/unified-min-ee6aeb0d09eae95edfbfda15518aeedf.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: akd.apnstatic.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
Last-Modified: Thu, 12 Jun 2014 18:08:58 GMT
ETag: "2540f-5341-4fba774692280"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6561
Content-Type: application/javascript
Cache-Control: max-age=31536000
Date: Fri, 11 Jul 2014 10:33:16 GMT
Connection: keep-alive
...........<.v.......:dD...:..&'...M.l...........H...........H.v...
..0.`0.y.....Z.*.I..-........c..%.-.Zv......*m.\o....'.q|..Ep.7..Eq.B.
.]..Db....!.P. .............y. x.\.W.i~x..Z.m..3....m[.<.|/8...).FT
Y.xb.6..........2...4...bC..X..~}.p...pzmh..b...\...7.......7..... ...
.....<.s-...Y.O.....I.E.;Q$!t.B....#........!....-7....4..e>.V.n
(.C.|..0.l..dG.a."@Y...)4...uQ.../.2..O...(.......`Fn..8`X..`A..Xl.aq.
y.......KZ..@}.\o..W$..]`.s.T..Mr.G....H.....f...FgA...f...!*..y....h.
51..@3..sM.-....cs".....H......O..gO|1...a. ....NK......a!h..y,...N..;
...e.~S......s..y......g..O......<}D|.D/^...v..G..A.`..=........g..
.6A.......f.....>xz......A...5.yZ.BKZ....P.......cJcu..^...v/.|.2..
.../.....g....4C..NKz9yKZj;..p..".......W.zI....j.S.$.y.S{....R.:.v'..
... ...h.T>.. ......rU~...v.*<...I...J.),..j.)v...h..;...$...T..
@..`..l~x..Q6]l.T...|"e.x.k/...t..?..y.........hb....4.%.s.c..kr.....P
9zM.G.....:e..8...R.zyQ.......2.[./..F?.........#...s.t.A!k..m../..1B.
..j.V........!...e.....i./ .P..v{....G...........Qp..B(p.. ...UQ....?~
......Cg.. v.o..u.....S...fU..)...^..~%m.%E...8.2.p1;&..`..K._1...R\..
..L..p...EE....b.....ZZ....KkfM.#0.BYm.......:.1..4p."....hx.....5_R..
...A.u....eY....'_.....M.puj.Z.....Ve....A.W...Um.G....|.a..uK...4...w
x..(#."o...A/.*#j.u...wvd4.7...a..k...#.U.._.WDp..2.G..e...!.9..vR .U.
.(Y......Z>.ph.SR...a.8VEj.n.f...2..._n.R..3..9...P.)...MC.E...E..[
*..v.5...<.....%...^....w.........b.,.....:z..c..~.5QF.4.m.ho.b.\.Q
NR.=....J.oO"T^.$^.*..p...=dF..B.=dG`.}.0....sa....76R2J.E....._Z.

<<< skipped >>>

GET /update/pluginlist3.php?type=&version=5.3.0.0&app=Azureus&os=Windows 7&osv=6.1&arch=x86&ui=az3&java=1.6.0_18&swt_platform=win32&swt_version=4233&pmv=1.27&epids=aefeatman_v:aercm:azlocprov:azitunes:azrating:azutp:azplugins:azplugins:azplugins:aznettor:azupnpav: HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: plugins.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:11 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
transfer-encoding: chunked
Connection: Close
a55............uX]S...}...#.ZXl.!5......Y.c.{...gd[.|...c~.=....a .%VK
.V..>.Z....}k...F...q.....4Yx.`i"[W....J>Y.R.R...l.4.q*O....S,.c
.`...:{4g...qB./....u.}]..2W......c...]q.....j.j\..................Y.L
%F..S.'.U..q.QE. %..x...G..sm.m..[Q/eqS.j...:.Z{Y9...Np.......~..K..M4
.8....b..}..a......D.F....SY6...........&...4 hZ<i).rY...z(-..h...g
c..(...?.k.j...F.._.d..|......f....,rx0.^.yoX ......3u.M...c8p.i.' q..
^H.......4G.>1..y.O...b.:Y... ....J.l.|jL../.........&Z.[..>.W..
.....9...:PDv......Apr0..?.N.. ..jm|pl....F..^8D..8%....^.N.:...@._aR0
...'e...k.D...jL.(.VJ.RV.....0:.(c.. ....J......sJ...d..>.j..."..l.
Lp.....CftJ.N.T...*d;.6.,|.."Z.`.F..ar.....}...Y..7.9..7...H..,.!.u...
....I..P.b.*B...d..=............|qF.Y.\........QS.%.Y...'mZ.....d...u.
...@v.:k....F<N\.8D.../e4.1....73#.2..._.f...w...#k5.dP.>KS....`
./zg.|..[.*.'Ye*'.h.tF)..EJ.....p..k..:c....;.$...>M... ..J!..!....
...j..,'N$O....;.....4...}..!k.....q.eH5=.dW.V..T.\.S&...D...=&v..=k.R
..0.v.?..3e.^T.....D.....`......#F.."...=......../_.N...$..F..I1.&.U6g
.p.8..{5$..r..f..C,H.$_.cd8.....si/.~!W.=`D...]:...o6d./.w.....{...{WW
. ...^5...bu./o.}..........\......L..^......i..`A.d.~l.....KS?[`crp.f.
.. .........5.........#.Q_d.....h......tj].....gX...>.@.....B..L[".
..a.c8....A...,.0.#uT.^.W.....o ... ..*..h.@g.....%......1s...(=X.....
.du....O......0.......(...qt..`.....`O.Z....C..1E.x.v1N.Q.fz.3.*...mC.
...n.7@S.Y.........t..3......T.....1.|..H...&.....7......s.o..Z....#..
/....q.X....y...A)..M.....i...E..v.\..F.(....Q)n..H.:..6O....0._&g

<<< skipped >>>

GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=9010306441844733&anxv=2.0.0.0&anxp=^BNE^BND515^YY^UA&tpid=VZ-DTX&appid=100&sysid=515&psv=&installationResult=success&executionTime=14025&targetbrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=6.1.1.sp1.x64&osArchitecture=64&ieVersionInstalled=10.0.9200.16521&ffVersionInstalled=29.0.1.5239&crVersionInstalled=35.0.1916.153&apn_dbr=IE&ie_ds=0&ie_hpr=1&ff_crm=0&ff_hpr=0&cr_ds=0&cr_hb=0&cr_start=0&ie_tbon=1&cr_tbon=0&ff_tbon=0&ie_tboff=0&ff_tboff=0&cr_tboff=0&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: anx.apnanalytics.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 204 No Content
Server: nginx/1.0.10
Date: Fri, 11 Jul 2014 10:32:55 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Cache-Control: max-age=0


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com


HTTP/1.1 200 OK
Last-Modified: Fri, 11 Jul 2014 04:13:09 GMT
Expires: Fri, 18 Jul 2014 04:13:09 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1702
Cache-Control: max-age=581932, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:35:18 GMT
Connection: keep-alive
0..........0..... .....0......0...0........A0?1=0;..U...4VeriSign Clas
s 3 Code Signing 2004 CA OCSP Responder..20140711041309Z0s0q0I0... ...
.....?.@..w.........Y.!......Q...==d6|h.[x....7..`..........cV.!.....2
0140711041309Z....20140718041309Z0...*.H.............:B..H.4.=Q..`....
..Qd.S.....?d.i._^.X.:bh{...6.W.. .|-.3..UW.k..3B...).=3.-G..........G
....9L..U8=#..T.5......f?.QoL......*.....3I....*.....Z....F.......G...
..Q.....6....2.....K..'[..OJ.EEJ...6...v.....b......q.......!.....|.E.
..4.....)`.Ce..[.6T....<>QB......0...0...0..{.........[..I|.....
Zm..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U...
.VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign
.com/rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...1404
28000000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 200
4 CA OCSP Responder0.."0...*.H.............0.........Y....h..@..>..
...%.-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l.
....f..;]s!.\"v...|....].@.....K7m2...N......-S.I......5n...G7. ..W...
.n..*..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....<
;..6.....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%..
0... .......0...U...........0... .....0......0f..U. ._0]0[..`.H...E...
.0L0#.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.symc
b.com/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>q
..i1o...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..wo
......E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|...

<<< skipped >>>

GET /6f952fa1/D0wnloads/MyPCBackup_Setup.exe HTTP/1.0
Host: track.mypcbackup.com
User-Agent: NSISDL/1.2 (Mozilla)
Accept: */*


HTTP/1.1 301 Moved Permanently
Date: Fri, 11 Jul 2014 10:33:14 GMT
Server: Apache
Set-Cookie: SESSID=5ee4jchtihqjkcakdtm6rmb983; path=/; domain=.mypcbackup.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: LC_CURRENCY=US; expires=Mon, 21-Jul-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: ?uva6aT*=US; expires=Mon, 21-Jul-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: LC_CURRENCY=US; expires=Mon, 21-Jul-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: ?uva6aT*=US; expires=Mon, 21-Jul-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: 748a7624422584634822bd3a2bf604ae=0c81561fd2ef3771645442c4bdfce122; expires=Sat, 08-Nov-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
Set-Cookie: intc=1; expires=Sat, 12-Jul-2014 10:33:14 GMT; path=/; domain=.mypcbackup.com
P3P: CP="We do not have a P3P policy"
location: hXXp://cdn.mypcbackup.com/MyPCBackup_Setup.exe
Set-Cookie: aff_id=63057; expires=Tue, 12-Aug-2014 05:59:59 GMT; path=/; domain=mypcbackup.com
Set-Cookie: hop_name=63057; expires=Tue, 12-Aug-2014 05:59:59 GMT; path=/; domain=mypcbackup.com
Set-Cookie: hop_id=89413; expires=Tue, 12-Aug-2014 05:59:59 GMT; path=/; domain=mypcbackup.com
Set-Cookie: hash=c271cb21681ee075d891b81a21e9a572; expires=Tue, 12-Aug-2014 05:59:59 GMT; path=/; domain=mypcbackup.com
Set-Cookie: tid=D0wnloads; expires=Tue, 12-Aug-2014 05:59:59 GMT; path=/; domain=mypcbackup.com
Set-Cookie: 6f952fa1unique=true; expires=Thu, 09-Oct-2014 10:33:14 GMT; path=/; domain=mypcbackup.com
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
Set-Cookie: MPBWWW=3891563201.1.1048088192.452895456; path=/

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=vuzenews:get-entries HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 419

service=rpc&payload={"commands":[{"seq-id":0,"values":{"reason":"initial","ago-ms":63072000000},"listener-id":"vuzenews","op-id":"get-entries"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:11 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 703
Connection: keep-alive
...........U.n.@...........&r].Vj"..H)..6.{e`]X................3..9...
$|......=Q......<., ....M..n..{.............:..)....JN..0B....v....
..%/#.n..e.1b!...DD....^y.H..^...(..(.5...'.EnE......,...gq.r\..|... R
........C~..=.4....d.......\.V......dj..@.d.....C..}r._........k...)..
E:.x:y.f...h.y...CcO.PS.c;.SA.k...z=.}.. ...84...0..H.8(..*`....T.Z...
OFtq...Z.F.].o..f.5.OE........v......Z..K7\w..j..V.[....V....[.$D,..OQ
.Gj.2K.......| ...F..b...wb-J5..2..;..1x6..T|6.D.....p....?...........
c8.fV..j.eh5E....V.../$x....?]....1...xJ.......c"A..._..t.....8Z..m.ZU
....M.b.4.?..x...c.$..}....?....Z.|c....,Le...O.N..cjp......qV.#.a..h.
*u..e.fM..b[..^8SY..../.7Ko.....mud....... ..&g...w.i..(.....z>...?
..z,!....HTTP/1.1 200 OK..Content-Encoding: gzip..Content-Type: text/p
lain..Date: Fri, 11 Jul 2014 10:34:11 GMT..Server: nginx..Vary: Accept
-Encoding..X-Powered-By: PHP/5.3.12..Content-Length: 703..Connection:
keep-alive.............U.n.@...........&r].Vj"..H)..6.{e`]X...........
.....3..9...$|......=Q......<., ....M..n..{.............:..)....JN.
.0B....v......%/#.n..e.1b!...DD....^y.H..^...(..(.5...'.EnE......,...g
q.r\..|... R........C~..=.4....d.......\.V......dj..@.d.....C..}r._...
.....k...)..E:.x:y.f...h.y...CcO.PS.c;.SA.k...z=.}.. ...84...0..H.8(..
*`....T.Z...OFtq...Z.F.].o..f.5.OE........v......Z..K7\w..j..V.[....V.
...[.$D,..OQ.Gj.2K.......| ...F..b...wb-J5..2..;..1x6..T|6.D.....p....
?...........c8.fV..j.eh5E....V.../$x....?]....1...xJ.......c"A..._..t.
....8Z..m.ZU....M.b.4.?..x...c.$..}....?....Z.|c....,Le...O.N..cjp

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-featured HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 438

service=rpc&payload={"commands":[{"seq-id":0,"values":{"page-num":1,"items-per-page":512,"fud":""},"listener-id":"searchtemplate","op-id":"list-featured"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:11 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 165
Connection: keep-alive
..........E....0.D.e..RE..#..MJ..-..&M.h).wW.=..... Q..f0..x...".>.
..3M;g.h.;..h....z..Ao....B..`]..........uU.Z.....D.....{.9..PH%=....Q
...(...O..Q:...w.s._.S......
....



POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:list-popular HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 387

service=rpc&payload={"commands":[{"seq-id":0,"values":{"fud":""},"listener-id":"searchtemplate","op-id":"list-popular"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:12 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 418
Connection: keep-alive
...........T.N.0...........#./...V..lR.c.g.R..;k..P...%..3...8 f.H.5K.
V...X.._J.s...^.D.....L......$W..t..,A...*..B@.....y...8.. .s...X ..k.
zI.....G-..A.B Z..V.r3=6......R..=...X.uf.....:..m6....J. .=C4..;.....
N(?...[.....!....I;55.i.Hn7C...s..[U..Q8...@u.eM..(.Z(...."}.=.....k[.
..Q...A8.Ea......9.?_..B...sA.*.'.....J....%......R..7..}6.#...8......
&....y..... ".Jx3...}|....^.t=p.........c........-..?..z=Y..........font>....



POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 389

service=rpc&payload={"commands":[{"seq-id":0,"values":{"templateId":3},"listener-id":"searchtemplate","op-id":"get-template"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:12 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 573
Connection: keep-alive
............mo.0..........*..C%] ..A6Mk&........@.....3*.do...w...|w..
h(2....Gb.....l.).I..x..N.A.l...YF.L...V..!..b%.SnIp5...^......$W.l..!
..Ln.O.0&.. .jA..$....,wY|-...r-$P...2(...&....q....NR..DIZ.....E....n
..mQ.KT..Wl.D=.A.;.}.|.[....c\%....W....SE.I.M.....W.....=...6.......G
zE.....h..^....9......Y...;.J..Y....;.u9o.i...9m..D5.2.t.{...."QY.K...
9......SWt/7e......*G ...[..t...N..N...........DM G...N...2..@-..7RV..
.....F...L}..0\4....<........v.]..|...E....e..dBn..._L..s........x.
,...Q...T.........p.&.....J.#j..r......#...u..o...BT.jX.k5.1A#..\.;WE.
1..?o(..M<......HTTP/1.1 200 OK..Content-Encoding: gzip..Content-Ty
pe: text/plain..Date: Fri, 11 Jul 2014 10:34:12 GMT..Server: nginx..Va
ry: Accept-Encoding..X-Powered-By: PHP/5.3.12..Content-Length: 573..Co
nnection: keep-alive..............mo.0..........*..C%] ..A6Mk&........
@.....3*.do...w...|w..h(2....Gb.....l.).I..x..N.A.l...YF.L...V..!..b%.
SnIp5...^......$W.l..!..Ln.O.0&.. .jA..$....,wY|-...r-$P...2(...&....q
....NR..DIZ.....E....n..mQ.KT..Wl.D=.A.;.}.|.[....c\%....W....SE.I.M..
...W.....=...6.......GzE.....h..^....9......Y...;.J..Y....;.u9o.i...9m
..D5.2.t.{...."QY.K...9......SWt/7e......*G ...[..t...N..N...........D
M G...N...2..@-..7RV.......F...L}..0\4....<........v.]..|...E....e.
.dBn..._L..s........x.,...Q...T.........p.&.....J.#j..r......#...u..o.
..BT.jX.k5.1A#..\.;WE.1..?o(..M<......
....

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 389

service=rpc&payload={"commands":[{"seq-id":0,"values":{"templateId":5},"listener-id":"searchtemplate","op-id":"get-template"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:13 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 629
Connection: keep-alive
.............N.0.._.,.j.%-.D..4.$..f.X.,o<m.$v.vRh....nY..o.....7.=
......`H..&.........q......N.8..L.....q..$....T....N.%.`xr~zv....1.3`.
.......5....`x(..).fA..$.c\KV9..!.T-s.r.$Pw0.c.1".L.Em=..=.......P.6.D
bam..G..r..W..}..........d....._.ee.......$.....D9a ..v.@. B.....x....
...7......j......\z.w<..O.F.`\-...-.|.......0f............&...7..Q.
.)-}.wo...!.*.J.....|...z...bx.VY.z;.tc....,...#....1.E....C.a..J..Np.
.@.`74.ei.2b...7......`.Mv..j.n.......D.....i:.r..*.6.^.O&.]..w..-x|.#
.si.o..,.Y .W..\...H.......u...p........X-....D..Ny..p..c..)8.]q.....d
....x$q..p..1...X.EP...[@.|3../8e.S.*u$.[5..m3.9....V)c.T..L.7.......H
.....HTTP/1.1 200 OK..Content-Encoding: gzip..Content-Type: text/plain
..Date: Fri, 11 Jul 2014 10:34:13 GMT..Server: nginx..Vary: Accept-Enc
oding..X-Powered-By: PHP/5.3.12..Content-Length: 629..Connection: keep
-alive...............N.0.._.,.j.%-.D..4.$..f.X.,o<m.$v.vRh....nY..o
.....7.=......`H..&.........q......N.8..L.....q..$....T....N.%.`xr~zv.
...1.3`........5....`x(..).fA..$.c\KV9..!.T-s.r.$Pw0.c.1".L.Em=..=....
...P.6.Dbam..G..r..W..}..........d....._.ee.......$.....D9a ..v.@. B..
...x.......7......j......\z.w<..O.F.`\-...-.|.......0f............&
...7..Q..)-}.wo...!.*.J.....|...z...bx.VY.z;.tc....,...#....1.E....C.a
..J..Np..@.`74.ei.2b...7......`.Mv..j.n.......D.....i:.r..*.6.^.O&.]..
w..-x|.#.si.o..,.Y .W..\...H.......u...p........X-....D..Ny..p..c..)8.
]q.....d....x$q..p..1...X.EP...[@.|3../8e.S.*u$.[5..m3.9....V)c.T..L.7
.......H.....
....

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 390

service=rpc&payload={"commands":[{"seq-id":0,"values":{"templateId":59},"listener-id":"searchtemplate","op-id":"get-template"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:13 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 757
Connection: keep-alive
..........}U]O.0.. 'Ky9.%M..y.~....k{.. .$..".C..@..~k....'!d....7kwM.
.S.%...D..@|...T...H./m...n........l"W.WE.-.../8D4R......y..sm...`.*.Y
......x.O..*....*.%...6.....k...6.E.B..'b..j}...k........._9....0A....
U."3Q*....d.ZuR.......28Y...w..2.).'.>.......H*...Y......V.}...'.&.
.-..r...,..."x...B.5.r.....s.....'FX..R..F...Q...X.o..]....a...w..Re.:
.s.I..Y.S.-..k.J.X.`.....3o.E..iG..O...,.U>........Q..Er%...j..Z.@.
.,....f.[..S.l.Z............. *).T...G8 f.h.r.....f.xx.../...8.4.....I
`..........?o.......fnD.;]B./.b.D.2.2.Ux@...UN...Q..e....]Z.6&6.}.c...
....b.&....z...5.o'..ol.au..?..5.?m.OG.....Y..n4.h.#....g..C..E}g.nf.n
..P.....;......"6...'.?,V. ..j.I.......T%..(...<..K3@.:K....._.Fo..
3.z.i.*...(|........r}...I...gZB.U....mo.a.d..d^.....6...?...BQ...HTTP
/1.1 200 OK..Content-Encoding: gzip..Content-Type: text/plain..Date: F
ri, 11 Jul 2014 10:34:13 GMT..Server: nginx..Vary: Accept-Encoding..X-
Powered-By: PHP/5.3.12..Content-Length: 757..Connection: keep-alive...
.........}U]O.0.. 'Ky9.%M..y.~....k{.. .$..".C..@..~k....'!d....7kwM..
S.%...D..@|...T...H./m...n........l"W.WE.-.../8D4R......y..sm...`.*.Y.
.....x.O..*....*.%...6.....k...6.E.B..'b..j}...k........._9....0A....U
."3Q*....d.ZuR.......28Y...w..2.).'.>.......H*...Y......V.}...'.&..
-..r...,..."x...B.5.r.....s.....'FX..R..F...Q...X.o..]....a...w..Re.:.
s.I..Y.S.-..k.J.X.`.....3o.E..iG..O...,.U>........Q..Er%...j..Z.@..
,....f.[..S.l.Z............. *).T...G8 f.h.r.....f.xx.../...8.4.....I`
..........?o.......fnD.;]B./.b.D.2.2.Ux@...UN...Q..e....]Z.6&6.}.c

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=searchtemplate:get-template HTTP/1.1

User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 390

service=rpc&payload={"commands":[{"seq-id":0,"values":{"templateId":56},"listener-id":"searchtemplate","op-id":"get-template"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:14 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 884
Connection: keep-alive
..........}U]S.:.. .../!...._..P.....n..f4..$*.d.a..........f..^...Z.]
/....`Hr.$.........q.#....'...1&K.-.1...3I.v.#..b&.SnIr<<.0..~..
..Bg...... .:k&...`.J..S$._...Jz.>KV.L>K.Z....|!j..r.$P...i..#.L
.Ee.x..w....'r%..."..VIv...\....{.~........j....#.o..a....p>.e....$
[..04.Z........_3V{k./..e......C..l&l.....#.N....~oX...s..k&s..._-.hx.
....xd..lr.wg3.Kf........L.Ti....(...ht......9...9....YhY....A....*\.r
5..-......cJ^^-.....B..."G-...........Y..j..<..VLPW....c.....v.h'j.
.y......c..wj.-Z~....vs......1..Z..r.r.O.7L...%...AR/.9..:.. =..))....
.......e....i...a.j....^B...RX.~.~...... .d..`.L')....P......@s..q....
;.C......._...N'.I.O..^i..O....;...k.;.@....!...r5.`.....n&._2....4.b.
.[=....e.0.v....U....[7..2..jo..tF'<..^~....s'..q......;...`.......
................./.}...Q]y._on0.L..u....m\a.K.....^oZ:>.G...J6...N.
O...[../h.v...Z|....)......../ ...<qr:>..V.~)...T......ju.....]Q
....HTTP/1.1 200 OK..Content-Encoding: gzip..Content-Type: text/plain.
.Date: Fri, 11 Jul 2014 10:34:14 GMT..Server: nginx..Vary: Accept-Enco
ding..X-Powered-By: PHP/5.3.12..Content-Length: 884..Connection: keep-
alive............}U]S.:.. .../!...._..P.....n..f4..$*.d.a..........f..
^...Z.]/....`Hr.$.........q.#....'...1&K.-.1...3I.v.#..b&.SnIr<<
.0..~....Bg...... .:k&...`.J..S$._...Jz.>KV.L>K.Z....|!j..r.$P..
.i..#.L.Ee.x..w....'r%..."..VIv...\....{.~........j....#.o..a....p>
.e....$[..04.Z........_3V{k./..e......C..l&l.....#.N....~oX...s..k&s..
._-.hx.....xd..lr.wg3.Kf........L.Ti....(...ht......9...9....YhY..

<<< skipped >>>

GET /ajax/libs/jquery/1.10.1/jquery.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: ajax.googleapis.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Mon, 03 Jun 2013 01:27:22 GMT
Date: Wed, 09 Jul 2014 04:14:45 GMT
Expires: Thu, 09 Jul 2015 04:14:45 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 32862
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 195511
Alternate-Protocol: 80:quic
.............{...0.{....U.sD.N...3.u.4i....&-E..HPB....j.....Yf.B.....
.Mk..`.3g...>..........'..x49...ep.d<.\.......|...*.3q.u..A._..7
...<M.e....NO....w.2.6.n.........&.F.h........l.u.......8.D!.Y.m.|}
T.\..4_r......n.g.(edn^.1=K...S....X......B...#..JnG.<.J..\nw......
{/6p.d........Q.............&{].......\...F...H.....Q.......T.T.F..^..
...d1.g........WC.../...n..t..(....7..K.L......../^.<.}:^....#(...a
..c......O..Y0.w.x\....'..A..T..r_..7........./.O.'g5.~A.-Dx.?/.....y.
E..a-.n.|.`..B..q.......: .E.................U.z.wX.8.....*vq...2..]..
'<%..Sr).C.N6....F.......x.........q...,*c...7.\p.G.h.zq...MRVq..u.
.y.....BH...|.M.*.........*.........-?..h...@p..~.c...:n<....}.,.*|
... O.&..@.....\$...U\E. *.{yF.)....(...(V.*.*.nO.P..h[.U.....a....R.b
-...o..s..5lY...............'^I[.&Oml.xx.H...e.b....0..Y..l.8...N&.N..
.Ogs......"|5.o.%,..$u=H....q..1..:..hf>...h.{......3>?3...X..5.
.Q...l....e..".`.7qq..X..l....z..7......,_.oa..l....=WX.:.Fb0...~T.e..
......u.%.w.........g.t.(...K=...<Y.3u.gx.....>..d........_..q~y
.......D~|..(.. .7.=.%...T@.S.I..xY.DP7......q~........q..\...u......L
W.....ac>.`V..........W.W[..K.h0.W..7...iQDw>..[\..z....cQ.T,tv.
...h..)5..............Vr....p|.........x./.....\.|....c%].l@9.......k.
5.kQ5.^..j/b@.a/....;...|/h..F..%..M.H..y...%p.D.{..:c.._...H......ME.
.N..:TA.....H.........3..:.L...OK......gv&....Y6.5.g.E8_@....MO.s..-..
..Df...........lup..J.u......P..(...~..W.[Z.....0|.C1....X.....v...HDC
....2rz.`..5pl)l..}.g{)..)bB."..8.,A)ao/e..l. {../.A;..u.q.A].%...

<<< skipped >>>

GET /files/Vuze_Installer32.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: cf1.vuze.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 10304032
Connection: keep-alive
Server: nginx
Date: Wed, 09 Jul 2014 22:24:40 GMT
Last-Modified: Tue, 08 Jul 2014 21:23:22 GMT
Expires: Thu, 10 Jul 2014 22:24:40 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Age: 43429
X-Cache: Hit from cloudfront
Via: 1.1 2ce6276171358bf7d052aa190ed98f8d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hCM7qrIIMUdwE40ysSug-1aUzu5JQahjjGFm6WreWx9D1iqazXGECQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........$...J...J.
..J.T.....J.......J..B1...J...K.P.J.......J.....$.J.......J.......J.Ri
ch..J.........................PE..L.....)S............................
D.............@.......................................@...............
..................l...x....0...t.............. ....@..H...............
....................Xx..@............................................t
ext...x........................... ..`.rdata..6.......................
....@..@.data...............................@....rsrc....t...0...t....
..............@..@.reloc...-........... ..............@..B............
......................................................................
......................................................................
......................................................................
......................................................................
............................................U...u..u..u..u...?...E....
].U...u..u..u..u...?...E....]...$.B...A..V....$.B...A...D$..t.V..A..Y.
.^.......C..Vj.h....j.j.j.h.....:?..P....B.....t....u..#?..Ph..B......
h0.B..'/.......^.Vj...=...t$.j.VP...C../A.....C.V.@...0>........u..
..C...u.j..t=..Y...C.j....VP..@.....C.....@..^....C...t.P.t$...B..YY..
.2.....C...t.P.t$...A..YY...2..QSUV.5..B.W.|$.3.UUj<W..W..1..Y..U..
.U.C.PW..W..2.....Uh..B..g......j.j..C.PW..W..1...Ph..B..D$..C...k.(.l
$..\ .Sh..B..-......j.j..C.PW..W.[1..Yj.j....SW....W.G1....SUh..B.

<<< skipped >>>

GET /geolocation HTTP/1.1
User-Agent: NSIS_DOWNLOAD
Host: websearch.ask.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Fri, 11 Jul 2014 10:32:41 GMT
Server: Apache
Content-Length: 162
Connection: close
Content-Type: text/xml;charset=UTF-8
<?xml version="1.0" encoding="UTF-8"?>.<geodata><locati
on country="UA" countryName="Ukraine" state="" city="Kharkiv" zipcode=
"" ip="193.138.244.231"/>.</geodata>...


GET /welcome.start?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1 HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: client.vuze.com
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Date: Fri, 11 Jul 2014 10:34:17 GMT
location: /ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Server: nginx
X-Powered-By: PHP/5.3.12
Content-Length: 0
Connection: keep-alive
....



GET /ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: client.vuze.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Content-Type: text/html
Date: Fri, 11 Jul 2014 10:34:17 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: PHPSESSID=reshf2skjua6acsi815d242m46; path=/
Set-Cookie: azv=5.3.0.0; expires=Tue, 27-Sep-2022 10:34:17 GMT; path=/
Set-Cookie: azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH; expires=Tue, 27-Sep-2022 10:34:17 GMT; path=/
Set-Cookie: locale=en_US; expires=Mon, 10-Jul-2017 10:34:17 GMT; path=/
Set-Cookie: wid=YZNL7LBLWDJXWZB3MBJ8U7ZGLENSFY74; expires=Tue, 27-Sep-2022 10:34:17 GMT; path=/
Set-Cookie: wazid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH; expires=Tue, 27-Sep-2022 10:34:17 GMT; path=/
Set-Cookie: locale=en_US; expires=Mon, 10-Jul-2017 10:34:17 GMT; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
transfer-encoding: chunked
Connection: keep-alive
d3a.............[ks.6..l..? t[I.D..;.,g._..$.O,'}...@"$..H..$;....,...
,_....wjK$.X....b.........c....-;.x...!.*....a.z.=R/..Z.u#..n..>...
.....I.....|n..v......q2...^...v......G.Gpg...go"..hzE|....u.....J.&..
..o. .....f.1.b.t..'...........X. .y...Ee&"w..8.j........... ....]....
...U|._]..o.9.......;o..!.%n.A.......(...$A..u.3.x.|....X...9.....8".D
n...G,...%c...].',..4....|.W.$......p'[.....B../..X....Q.v,...5Z..&...
r'|d......6......;.U.K...{...;.G.-..(...)J?p}G\..`.x^0...._.q$..if1.,.
....-.........N....o....n.....c.....c...njz........,.>. ..[.&...d..
.....JR....'..q.q.....-....9.....K..0..|x........, .....?......{.....D
>L..|..^=M8_..A...w.t$.~.\... .....i._.. ..{..=..h....i...$/.@.&...
(Wa.....{U.TE.\.qr.....t^..q5....!"F\.E...xj...D....m...%.C.....>..
=...7...........l...V.n.u.g\=.X..2....Z...]l..J..........,....k..Z....
........o-.......1......P...;..N\.:.\..A...-u.o.8.....E........yyRZ...
~....Y.M.....%.*....._......k6........Y..?.....%;...".F...w\.-.1^.../.
..@_,.y......{....R..'x>..~......{.T....w..<....:>..G..."....
.#l..E.... .E..(...s..`^v....\P.(..*..).Ow..%.v.c...J...@p.#."~#..\...
.&..x...S(...A......nT..{......Q...z..q...!.1...cb.;4....bN...K1.....6
..L.-......0.RN...........K...W.... ..XF........w...;..:.V.I.g)oz.h...
i.E..E..7...[....$...w{V....G....S.......Sdv........8.|8.;..Y.........
....Q.....<..0.......;>..S?..N..x.b...&.1q.Q.K.O }..N.V....$....
..\.@f...nL.z..."......L.V..){..e.Go......O....9{......C=...6....._...
..UZ.Q......-.au..;c0o..H......lXZ.;I4.m)..c....7.{o....9B..qo."1.

<<< skipped >>>

GET /css/reset-fonts-grids.css HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: client.vuze.com
Connection: Keep-Alive
Cookie: PHPSESSID=reshf2skjua6acsi815d242m46; azv=5.3.0.0; azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH; locale=en_US; wid=YZNL7LBLWDJXWZB3MBJ8U7ZGLENSFY74; wazid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH


HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/css
Date: Fri, 11 Jul 2014 10:34:17 GMT
Last-Modified: Thu, 10 Jul 2014 10:49:12 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 1733
Connection: keep-alive
...........XK..6.... .5......c.Ny\R.[N9M..F.2. {.K..GH.B.Omn...-...Z.&
lt;=~....=;..........x.du........ ..Z.........F%.8 h3..;7%.=QS........
.C-D.<=..By....Nn......=../.......6...{?...$.O|..my%%....R..$gNZN8#
uH...1.....zO...B&F..?..Q^.T.N..).k.. .......H.....s (.5..x..#k. ...d.
Q.w.Y......pS..g.@..'.....00a...v...Qvo E..Y()....-.....D.6.).K..U...
..&.,&...|..P..q6r6.....0.....M...I8.Dz[.....4....n..INeC)..d...X..h#.
..eYy....._Os.*WY...6..6..Q.,X.q.J%(..........=...x....:.*;1~MXS...].0
U.h.s.{.......MsG...>......r..Aw..E.g.......aU^I.woO....7u.......'.
.YC...6r.X.Zq..6...m.....(..eO..d......a..s...I..p3C.%/e........i'.S;.
0x~H9k....Ut...h(...........>...R...L.".7V......F........w ..y.A...
M..j...R....._.)}.q.G;).X.......tb......... ...T.....'cm..P[..g..D..G.
U~T.....S..)...HV...Y..\)d..C..5..x.Cw..7....)i...z.....h..g.X.6..z]..
8.L]O6.S..v6....f?k..B.|.....;.S...#?..YpKM.L...D'v.a<./..n"B.u....
..3.....o..}8q..|.....1...G..V.Q....C.v.h;.^.;...Gs..hj3@O...y...gQ.E.
t..4..T.._......N......,....!.E?t.Fz1.K}h.{....~...wt..Z...#..0...A7%.
:.].u...L./.$!=.>3...:y.:..05 .\.:;..R......|!...\.t!W .n. b..V.cC.
:.}.F.C3.0G.1E.1C.1A.....Z.Z.A... .hSA.....s.b....W.....RSxKM.....Zi .
.;XX.........M.}...x.,9.5,..T6...X.H....A....;.y..z,...y...........Q.a
.....X.....(.........Y..S&.h..!.vt...n.?d.E1..m.g.....L%..^5...j.^".?.
x.....q.....)w.8............DL..w2E[e......c..~..I`.!Az....a.....FBB.
_0..."....y..~l...:"..|..a5.....%.x...`X.o.LLi..Q.wt....)..l..n S...{.
;.....`.KJ.I.....f...X.E...Q}..'N...^.9................~..C.....L.

<<< skipped >>>

GET /min/g=jsCorp HTTP/1.1

Accept: */*
Referer: hXXp://client.vuze.com/ftux/index.php?iid=dlle14050746647944up43eo&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: client.vuze.com
Connection: Keep-Alive
Cookie: PHPSESSID=reshf2skjua6acsi815d242m46; azv=5.3.0.0; azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH; locale=en_US; wid=YZNL7LBLWDJXWZB3MBJ8U7ZGLENSFY74; wazid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH


HTTP/1.1 200 OK
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Type: application/x-javascript; charset=utf-8
Date: Fri, 11 Jul 2014 10:34:17 GMT
ETag: "pub1404989350;gz"
Expires: Fri, 11 Jul 2014 11:04:17 GMT
Last-Modified: Thu, 10 Jul 2014 10:49:10 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 8105
Connection: keep-alive
...........=.w.8....H8}..V\.....G.....M.t..s..\.l.......|...~..!R...3;
.?...X$...@..)5....x^.Y..g.~.....<..P.1..Y....y.....?..?.S.-r^..t..
.|..h...g..&J...]oq.........C.....t)...WQ.......q.....K^.....z..u...`.
.j..._....q..Q.....-.....$iT:N....]td X...%G..[.......A.D...$N..IM=W..
......j.....j.0.....U.......w.,.W..... =(.6..eV..<.}.y..DE...<*
.......$...e..yy;..yD%oQN...U!5t.,.C...K.^..Eyt.G.E.-`..T..o.p..8.|...
r..e....z...e1..Z?....8...G._........}..{.../a*.~-..#...91..(&B.%.....
...NU. x~..x........q.v......?`]-..S%!$*W..$.o.8......Q....].r.....uR~
...kt.;..3.E....l..E..T.~...G#.k5fPMZ.H..r.6...*..Pz.|...<...*@..%;
.M..L..~..u.s...u.....D_..5.x..1...*..H.C..R..Q>...y.^....2.d..;..n
...iv.nHD&.F:]..gQ...U|..Y............].J.4.:...N.N.c....|t..(....."x.
.8k.\....OX...sQN.q. .8V......g......1.f.m..KB'F...j..S...d....^T.....
=06~s$....P.n.........e.'......{`...Zl.).Ht.M...*!x8:...J.!..9X..$.Js.
0B!s..]EZ*.........|Y..A.q.Z......%g....Y.kR8.L._........I[......Sr...
l...].."?..I.$.Dy..."....x...`y....hh.@..P..?01..Rp..(./..8........ca/
....R..Y....,F..2.].6..'o-Y....,..Z. ..M.5.}.F.>..'I. ._=.WE.e..v%.
.....m.A.\...4;.%N..~!C-Z.lC....aCq]T....E....r`-.=\G]....Z>m.YK..9
.Rv...hPk..*k..D\.=......S.c.J6.......W~.oF.p.1...0.G?.......[4.!..- .
.f..A............um.*fYZ.S~S.....(N.9....M.x\v.q........cF...c...a_g..
.g..Q@z.m8..8../Qu3.....~.e.|a...B...%....(. ......J....-}...i..%...z.
...[H....%.."Y....m.. ....`...5.a6.....ovS6..E....6tbP.......R...H....
#.IH.x..0..'.S(".S...A..,bt..R.T.....3...%D../.3...Z.[[.p.F.h.-...

<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?33f733156f3622ea HTTP/1.1
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Thu, 05 Dec 2013 22:47:50 GMT
If-None-Match: "0af536cf2ce1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Type: application/octet-stream
Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT
Accept-Ranges: bytes
ETag: "0b2464b1797cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 6408
Date: Fri, 11 Jul 2014 10:32:54 GMT
Connection: keep-alive
MSCF............,...................O.......'#.........D.z .disallowed
cert.stl....2..'#CK...8T...g........g.k..".....mlI."d..m...P$"....e.J.
.......z.....\..........9g.9....~.........Q.Q......Q..DL.8.C.PS.K0.!P.
0........#.DY.8.....V.....$.C....a.0...........`......;.S.....0#...m..
. ..`0...?.!vR?.....d....`......_@..}....$...i..OR'..$....K..'Z....o.g
..*.Vc.....[nY e./.EJ...B.Y.......Ag......!....9......u..!..1Yy.......
r...Ss^@...M.Dtl\....i.k....3...B.Z.:.p.N....*......x,...ah/..].[....G
B..T..$A....SY..t.E5R..R...9!....*.*68V....1... ...Q{...".Op@L.2M...1;
xd{.C.u?..e.U.=f.nx.........y.G..0.......\L .'.^....$......N=..m...Ujr
Zs...J.I.C....;......q_..e......?.T..2..bw....E.L.{...S...~.<......
...-.Q..|.l. .1..6r....[}!J..,...naPk.U.... ..{@LH..W....>.Sq...8.5
.,.z..0.jL.S..........]...yW_...Y.1..h.7...9{.....I......g.Y.,1...i8n.
6..........4.]...........=........^..n.K7...c.g).Z. .0..$7.ys.p...B.5.
].f...|(3!.|..P...j..^..j....#(...@...As..*.O..i..u....9..S.Y.n..HXW..
.F ..i...:.......!.] r......D..*ld.b.>>:Pp.....5:1 o=..5.'..4...
....hO....{.V.rx..V...%.}..u...6Wv-..".iV.b..B0.Q..,...E.Dy...x..5....
?Z.$L..1.....4...=.....g!....%..:..c..j..v~....._R.6.......;.#.Y*p..J.
4.#'..Vo...g^K...J....._.^..u...)....&/.....q....o......4.....S...,q..
...p.8IIe.....d|.3{)...M.0.X...4.."..P.......Hk.... ]!.!... ..#.x..<
;..X.........'.E(<b[.......#.. ....XiLl|..=.....&P.@H.J.oo...a...x
B....l.....@.P......!8..@...q2..;.......mm....>~............j%..>
;.X.,V...J...C ....*..Z.8- RKGW...0./Z.__..)7g_'{.......pr......;.

<<< skipped >>>

GET /cdn/bundles/vuze/1/MoviesToolbarSetup_Vuze.exe HTTP/1.1
User-Agent: Java/1.6.0_18
Host: download.cdn.safetynutbe.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Server: Apache
Last-Modified: Thu, 19 Jun 2014 15:29:08 GMT
Accept-Ranges: bytes
Content-Length: 9175352
X-Stat-Server: web1
Content-Type: application/octet-stream
Cache-Control: max-age=2592000
Expires: Sun, 10 Aug 2014 10:32:02 GMT
Date: Fri, 11 Jul 2014 10:32:02 GMT
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......A{.c...0...0
...0.b<0...0.b,0...0...0...0...0...0..%0...0.."0...0Rich...0.......
.................PE..L...&..Q.................r.......B...9...........
.@..........................pV......U....@............................
..............PV.............h........................................
........................................................text....p.....
..r.................. ..`.rdata...*.......,...v..............@..@.data
....~..........................@....ndata....O..@.....................
......rsrc........PV.....................@..@.reloc.......`V..........
...........@..B.......................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....=G..H.P.u..u..u.....@..K...SV.5.=G.W.E.P.u.....@..e...E..E.P.u...
..@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU
..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.
P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.....
..P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.
u.....@._^3.[.....L$...=G...i. @...T.....tUVW.q.3.;5.=G.sD..i. @...D..
S.....t.G.....t...O..t .....u...3....3...F. @..;5.=G.r.[_^...U..QQ

<<< skipped >>>

GET /mycc/ HTTP/1.1
User-Agent: Java/1.6.0_18
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive


HTTP/1.1 200 OK
Content-Type: text/html
Date: Fri, 11 Jul 2014 10:31:23 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 2
Connection: keep-alive
UA..


GET /static/fonts/cabin/v4/JEgmtEDzc-IH8jBshQXrYA.woff HTTP/1.1
Accept: */*
Referer: hXXp://VVV.search.ask.com/?o=APN11693A&gct=hp&d=515-100&v=n13042-405&t=4
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Origin: hXXp://VVV.search.ask.com
Accept-Encoding: gzip, deflate
Host: themes.googleusercontent.com
DNT: 1
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: font/woff
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Wed, 09 Jul 2014 10:10:08 GMT
Expires: Thu, 09 Jul 2015 10:10:08 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 83840
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 174189
Alternate-Protocol: 80:quic
wOFF......G.................................GPOS.......e..P..6..GSUB..
.$........j.X,LTSH.............y.qOS/2...<...Y...`kf..VDMX.......u.
....0.[cmap.......%.......$cvt ..!8...(...(....fpgm..!`.......s.Y.7gas
p.."d............glyf.."p......>x...Dhdmx...4......,.Y.I4head......
.6...6.k..hhea.......!...$....hmtx...0.......4..).kern......o.....Nyv.
loca..>.........4..&maxp..@.... ... .&..name..@........q...;post..D
p...[....I...prep..F........4.kf.x...{lT......al.wp...)iKB_1.R.G..m.n.
..l[k uw...R.....G....J[E.....i7.%@.m...(.B ....l.6~?.3...........xf&l
t;.c......s..w......A|"..Ur............1F...7..;..x.x..9O.U_..g.t...E.
}.}5...^...;.w[.....{!...W..y.....r....-.....-.'....1......p.o..y.....
(-x......W....;..Z..%.......*\[...G.....=X........#....,]..kK.[z...%.S
..%?-.(.@..Jw.~....?,.i....e.......)./.Z........]......S.....OV<Z..
.}..*...V~..g..*.*'..D..r.,.Z..l2........<n......&,;..<...4..M.o
.....1..s....2.#Uf@..n....r...r.l0#...m.O.C{...f/4..9$.9.2...k.....!x.
|.M.|....O...L@j.P6I.l.%P.........R...d.<-..i.Z..6c.r0U....N.9.M.@T
..%..Z.........8G....! ;...)..60....TH.9....7#y................L.H...a
..H.#.k..!$..r.,~tX....RFU...<...&..qlA...o :..[..B-j..."...9b.2..7
.f....q%....&....[.s?3.b./q|.}.[.|. a..~.O.,q..27...s.....N...n"......
E.6(F/%...[..*.....5..j.{.a.U..B..[.......at....n...H.%...J..E.Q$~..u.
......d.X..pnAOK.6........<...C......CW.|V3o13.!]'.... TN3v...B....
.~=.?.b......B.....b5..EvOKQ.XK..T.F.63NdM8...........4.-. Z5DW>...
. 0.....a...\..O0r..Z.w..e...j..>.w.....V...R......p.......mF.a

<<< skipped >>>

GET /torrent/torrents/aznettor-win32_0.6.2.zip.torrent HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: close
Accept-Encoding: gzip
Host: cf1.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2


HTTP/1.1 200 OK
Content-Type: application/x-bittorrent
Content-Length: 1574
Connection: close
Server: nginx
Date: Sun, 22 Jun 2014 03:52:46 GMT
Last-Modified: Wed, 09 Apr 2014 18:02:10 GMT
Expires: Mon, 23 Jun 2014 03:52:46 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
Age: 74536
X-Cache: Hit from cloudfront
Via: 1.1 9e2316f9bf6c03b8640526708b3cdb00.cloudfront.net (CloudFront)
X-Amz-Cf-Id: QPErsnzL7UG1JTk5IiRcivhwe0zP8GSDDRwUqb1J9OBABy0wteH1xA==
d8:announce44:hXXp://tracker.update.vuze.com:6969/announce13:announce-
listll44:hXXp://tracker.update.vuze.com:6969/announceel45:hXXp://track
er.update.vuze.com:16969/announceee18:azureus_propertiesd17:dht_backup
_enablei0ee7:comment20:Provided by Vuze.com13:comment.utf-820:Provided
by Vuze.com10:created by19:Azureus/5.3.0.1_CVS13:creation datei139706
6511e4:infod6:lengthi1606588e4:name24:aznettor-win32_0.6.2.zip10:name.
utf-824:aznettor-win32_0.6.2.zip12:piece lengthi32768e6:pieces1000:...
. i..X&..8....sa.1;o..oC,.d.^#ue<...VQ....DD......}C....Y...3....O.
..}.J....o...C.E}.gcZ.4..1T...rF..$d_...L..i..r=..F.....j ..c.{...OO..
.D#}......n#f.7.....N.F....9..u.KM..s.y..4....po9......,._.3yp..D...w.
(.O..b-!..1OC... .&.....v..4r;...F....L.}//T........sT.r..x......D.5..
.%.Z.........pY....mXs.|.o.%......Q;`.W....#.R..F....UE.B.s.......N.n.
=....[!.bXX,.......a....p?#.K......m'r .p_........9SY...D<lh;.5...$
.Jq0...!..w..9......-J........ZT(K...b...7v}"E........@.6.....`4f....K
. ..79.C_M....)..4.k....^.|....(7....@.d..4a.Ja`.H`.K...i..C.u..?.1{cs
.....K... ...][. ........^H...E.....$.....zf../Q.....T..L....%...o.@..
.H{?e.t...[Q.b..cdu6q....E.Y..`.~...h.3.........I.b.N.77.....Q.....`..
l..JP)L.S.j...R._[<1....v....e......5.R..-..S......4d\2........9.._
.C.x..".....].p.u..a.=..p_.:........u..M..<..s!...[....t.9p.'1l}...
l.:G.r(z......{...: N.0..9......G.y.!Eg.K.%.r....%....Y.....?d.X3.>
n*....#F...3c.....w.....O.......`9B..6.J.......$g...........SA/..g....
.Z%x.......H(.m1........?../.1..7:privatei0ee8:url-listl58:hXXp://

<<< skipped >>>

POST /vzrpc/rpc.php?azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1&msg=config:login HTTP/1.1
User-Agent: Azureus 5.3.0.0
Connection: Keep-Alive
Accept-Encoding: gzip
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-type: application/x-www-form-urlencoded
Content-Length: 450

service=rpc&payload={"commands":[{"seq-id":0,"values":{"version":"5.3.0.0","vid":"eQapZLDFhPfDVIoWOLS3","locale":"en"},"listener-id":"config","op-id":"login"}],"mode":"free","azid":"6HF2SIXE5NIWRHMFAENVF7CWYMM645XH","azv":"5.3.0.0"}&azid=6HF2SIXE5NIWRHMFAENVF7CWYMM645XH&azv=5.3.0.0&locale=en&os.name=Windows 7&vzemb=1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:34:01 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 189
Connection: keep-alive
..........u.A..0.....J..pa....0i`..#E:.H.............[..Ae#.."(h.@.T..
.....8....}G.Q[F...G..[.U...&;.b'.V.....]..b..A..`...I....(c..G.JC...C
.....5......_...2....[....{l*...L..<NS1..."......HTTP/1.1 200 OK..C
ontent-Encoding: gzip..Content-Type: text/plain..Date: Fri, 11 Jul 201
4 10:34:01 GMT..Server: nginx..Vary: Accept-Encoding..X-Powered-By: PH
P/5.3.12..Content-Length: 189..Connection: keep-alive............u.A..
0.....J..pa....0i`..#E:.H.............[..Ae#.."(h.@.T.......8....}G.Q[
F...G..[.U...&;.b'.V.....]..b..A..`...I....(c..G.JC...C.....5......_..
.2....[....{l*...L..<NS1..."........


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEE85k74DXWqU5PECQf8LKFs= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: th.symcd.com


HTTP/1.1 200 OK
Last-Modified: Tue, 08 Jul 2014 14:07:17 GMT
Expires: Tue, 15 Jul 2014 14:07:17 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1470
Cache-Control: max-age=358424, public, no-transform, must-revalidate
Date: Fri, 11 Jul 2014 10:34:50 GMT
Connection: keep-alive
0..........0..... .....0......0...0........[0Y1.0...U....US1.0...U....
Thawte, Inc.1301..U...*Thawte Code Signing CA - G2 OCSP Responder..201
40708140717Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.....
..q..O9...]j....A..([....20140708140717Z....20140715140717Z0...*.H....
.........I[F......i.O7.`..A.......H.e..m......{Hx!............d....n.L
......V..n...............o..N)...M .S........X..K.........K..U] ..Z..p
.*.........e...TV......f`.jv{..<k.y../Z.~.|.y..w..e......`......4..
..T..[S.wh4.....t..>.,......UU.,e.iC.q...16l.[..}..2.:...J....0...0
...0..y.......>.w....G....9...0...*.H........0J1.0...U....US1.0...U
....Thawte, Inc.1$0"..U....Thawte Code Signing CA - G20...140627000000
Z..140925235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawt
e Code Signing CA - G2 OCSP Responder0.."0...*.H.............0........
...'....1...Q.C....I.-jz.........."......4..([&.....!......<..&....
N..T............AY.e.>.....N".&...W...E.U.., ....s...gL.n#...pi.[..
..og5..W-..!.....w7.:....`9......*,.W.|.f..8..[..Ej.Kuh..8<}.f..to.
}...>.M....,......5.....Z.6.i............0^...) ..31.D.......d0b0..
.U....0.0...U.%..0... .......0...U........0... .....0......0"..U....0.
..0.1.0...U....TGV-B-12160...*.H...............h./..!...^.*.d..A(.s.X.
.F...$.tcz....v^Y..X.n2.6.L.s....I....)..?..F?i.^.k..w.5y....O...H2%b.
...B..G...R...:...8..M....e.S.|.]B..i. Y.?..(.3.g.[Y5U....!.F.R....D.I
r..JO....V.%.&{.d.E...Y..$x..Z.-./....5.#.(t...a.j.y|W..-H.5.s...J ,..
.-c.l..6{...Ny!....O&..

<<< skipped >>>

POST /vzrpc/rpc.php?msg=install-stats:log&azid=installer&azv=1.0.0.0 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Installer
Connection: close
Accept-Encoding: gzip
Content-Length: 1627
Cache-Control: no-cache
Pragma: no-cache
Host: vrpc.vuze.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

service=rpc&payload={"azid":"installer","azv":"1.0.0.0","commands":[{"seq-id":1,"listener-id":"install-stats","op-id":"log","values":{"event-type":"IMESH_STB_INSTALL_SUCCEEDED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":2,"listener-id":"install-stats","op-id":"log","values":{"event-type":"IMESH_IE_INSTALL_SUCCEEDED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":3,"listener-id":"install-stats","op-id":"log","values":{"event-type":"MYPCB_INSTALL_SUCCEEDED","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-version":"Windows 7_6.1_x86_Service Pack 1","java-version":"1.6.0_18-b07","distrib-source":"vuze.www","azid":"","azv":"5.3.0.0"}},{"seq-id":4,"listener-id":"install-stats","op-id":"log","values":{"event-type":"CONTENT_OFFER_DECLINED:12","installation-id":"dlle14050746647944up43eo","installer-version":"53.7","os-ve
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/plain
Date: Fri, 11 Jul 2014 10:33:32 GMT
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.12
Content-Length: 34
Connection: Close
...........V*J-..L-V......=.a.......


GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1
Cache-Control: max-age = 900
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Mon, 05 May 2014 05:04:34 GMT
If-None-Match: "87fbb3811f68cf1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.microsoft.com


HTTP/1.1 304 Not Modified
Content-Type: application/pkix-crl
Last-Modified: Mon, 05 May 2014 05:04:34 GMT
ETag: "87fbb3811f68cf1:0"
Cache-Control: max-age=900
Date: Fri, 11 Jul 2014 10:33:24 GMT
Connection: keep-alive
....



GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Sat, 24 May 2014 05:04:51 GMT
If-None-Match: "96bfbfb1d77cf1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.microsoft.com


HTTP/1.1 304 Not Modified
Content-Type: application/pkix-crl
Last-Modified: Sat, 24 May 2014 05:04:51 GMT
ETag: "96bfbfb1d77cf1:0"
Cache-Control: max-age=900
Date: Fri, 11 Jul 2014 10:33:25 GMT
Connection: keep-alive
....



GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 07 May 2014 05:04:02 GMT
If-None-Match: "a413fc3b169cf1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.microsoft.com


HTTP/1.1 304 Not Modified
Content-Type: application/pkix-crl
Last-Modified: Wed, 07 May 2014 05:04:02 GMT
ETag: "a413fc3b169cf1:0"
Cache-Control: max-age=900
Date: Fri, 11 Jul 2014 10:33:25 GMT
Connection: keep-alive
....



GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Cache-Control: max-age = 900
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Tue, 01 Jul 2014 05:04:34 GMT
If-None-Match: "924558f3e994cf1:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.microsoft.com


HTTP/1.1 304 Not Modified
Content-Type: application/pkix-crl
Last-Modified: Tue, 01 Jul 2014 05:04:34 GMT
ETag: "924558f3e994cf1:0"
Cache-Control: max-age=900
Date: Fri, 11 Jul 2014 10:33:25 GMT
Connection: keep-alive
HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Tue, 01 Jul 2014 05:04:34 GMT..ETag: "924558f3e994cf1:0"..Cach
e-Control: max-age=900..Date: Fri, 11 Jul 2014 10:33:25 GMT..Connectio
n: keep-alive..


The PUP connects to the servers at the folowing location(s):

SafetyNutManager.exe_2908:

.text
`.rdata
@.data
.rsrc
@.reloc
t.Pj:
3|$83|$0
3|$@3|$4
\$,3\$43
.QZ^&
~$)~()|$
T$DRSSh
xSSSh
FTPjKS
FtPj;S
C.PjRV
.GFy,
8sqliu
u.VWh|jE
 2 34 567
<%u7j
X<%u2j
boost::filesystem::directory_iterator::operator  
kernel32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
GetProcessWindowStation
operator
CPPSQLITE_ERROR
SQLITE_DONE
SQLITE_ROW
SQLITE_RANGE
SQLITE_FORMAT
SQLITE_AUTH
SQLITE_NOLFS
SQLITE_MISUSE
SQLITE_MISMATCH
SQLITE_CONSTRAINT
SQLITE_TOOBIG
SQLITE_SCHEMA
SQLITE_EMPTY
SQLITE_PROTOCOL
SQLITE_CANTOPEN
SQLITE_FULL
SQLITE_NOTFOUND
SQLITE_CORRUPT
SQLITE_IOERR
SQLITE_INTERRUPT
SQLITE_READONLY
SQLITE_NOMEM
SQLITE_LOCKED
SQLITE_BUSY
SQLITE_ABORT
SQLITE_PERM
SQLITE_INTERNAL
SQLITE_ERROR
SQLITE_OK
%s[%d]: %s
select count(*) from sqlite_master where type='table' and name='%s'
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
922337203685477580
SQLITE_
?API call with %s database connection pointer
%s\etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
%s(%d)
keyinfo(%d
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
foreign key mismatch
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
%s:%d
no such index: %s
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
Recovered %d frames from WAL file %s
foreign key constraint failed
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
%s: %s
%s: %s.%s
%s: %s.%s.%s
misuse of aliased aggregate %s
not authorized to use function: %s
too many terms in %s BY clause
invalid name: "%s"
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
On page %d at right child:
On tree page %d cell %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
Page %d:
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
%s-mjX
unable to use function %s in the requested context
zeroblob(%d)
database %s is locked
cannot detach database %s
no such database: %s
no such collation sequence: %s
%s.%s
unknown database %s
bind on a busy prepared statement: [%s]
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a PRIMARY KEY column
automatic extension loading failed: %s
B}Tunable to close due to unfinished backup operation
d-d-d d:d:d
d:d:d
d-d-d
database schema is locked: %s
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
PRAGMA vacuum_db.synchronous=OFF
cannot VACUUM - SQL statements in progress
BmTunknown database: %s
misuse of aggregate: %s()
indexed columns are not unique
PRIMARY KEY must be unique
%s.%s may not be NULL
no such vfs: %s
%s-shm
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
sqlite3_get_table() called with two or more incompatible queries
%s ORDER BY
%s VIRTUAL TABLE INDEX %d:%s
%s USING PRIMARY KEY
%s VIA MULTI-INDEX UNION
%s WITH INDEX %s
cannot use index: %s
%s WITH AUTOMATIC INDEX
%s AS %s
TABLE %s
at most %d tables in a join
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
no such trigger: %S
unable to open database: %s
database %s is already in use
too many attached databases - max %d
sqlite_sequence
there is already an index named %s
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
no such table: %s
sqlite_subquery_%p_
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
cannot open value of type %s
cannot open %s column for writing
no such column: "%s"
cannot open view: %s
cannot open virtual table: %s
indexed
foreign key
sqlite_altertab_%s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
*** in database %s ***
unsupported encoding: %s
foreign_key_list
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
-- TRIGGER %s
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
E:\Work\SearchSuite\G13\CGL\Libs\boost/exception/detail/exception_ptr.hpp
class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\SystemTools.cpp
void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\StringTools.cpp
E:\Work\SearchSuite\G13\CGL\Tools\FileTools.cpp
keywords
SELECT value FROM meta WHERE key = 'version'
SELECT %s FROM keywords_backup ORDER BY id ASC
Not supported chrome db
CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC
UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp
void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
DROP TABLE %s
select %s from %s where key = '%s';
select * from %s where %s = '%s';
update %s set %s = %d where key = '%s';
DELETE FROM keywords WHERE short_name = '%s';
INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);
SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'
UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
keywords_backup
E:\Work\SearchSuite\G13\CGL\libs\boost/exception/detail/exception_ptr.hpp
e:\work\searchsuite\g13\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp
{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}
void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)
E:\Work\SearchSuite\G13\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
unsupported version
Can't terminate a sub-expression with an alternation operator |.
A regular expression can start with the alternation operator |.
Alternation operators are not allowed inside a DEFINE block.
More than one alternation operator | was encountered inside a conditional expression.
A repetition operator cannot be applied to a zero-width assertion.
Invalid alternation operators within (?...) block.
The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.
Found a closing repetition operator } with no corresponding {.
The repeat operator " " cannot start a regular expression.
The repeat operator "?" cannot start a regular expression.
The repeat operator "*" cannot start a regular expression.
right-curly-bracket
left-curly-bracket
0123456789
Unmatched quantified repeat operator { or \{.
Invalid preceding regular expression prior to repetition operator.
asio.misc
asio.misc error
Open/Key
Service/Create, Path=%s, Reg=%s
Args=%s
../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp
IDdqdCtx/Connect, File=%s
Unsupported IDdqd version = 0x%x. Expected = 0x%x
IDdqd/Ctl Code = 0x%x
WStr::FromRsrc, ID=%u
%s*.%s
%s%u.%s
RegKey::%s %s, Access=0x%x
RegKey::%s %s
VMem/Alloc, Size=%u
HomoHeap/Init, Size=%u
HomoHeap/Alloc, Size=%u
Access violation. Address=0xX, access=%s
SEH Exception. Code=0xX, NumParams=%u, Addr=0xX
System error %u (0xX)
%s. Source=
[u/u/u u:u:u.u]
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u
\Registry\Machine\System\ControlSetu\Services\%s
Cannot create HTTP request instance
Login to
Login request (not encrypted)
Login request (encrypted)
Update/patch exec timed out
Login successful, attempt to send stats to "
Url is empty, it means statistics will not be sent, but will be deleted
Exception in Login thread:
Unknown exception in Login thread
As I cannot login with url:
thread.entry_event
thread.exit_event
key does not exist. Attempt to create it
BrowserDefendert.job
BrowserDefender.job
BitGuard.job
RegOpenKeyTransactedW
RegCreateKeyTransactedW
Failed to open a [general] key
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp
select url from keywords where short_name like '%s'
SQLite Error
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp
class std::vector,class std::allocator >,class std::allocator,class std::allocator > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string,class std::allocator > &)
delete from engine_data where engineid = '%s';
update engine_data set value = '%s' where name = 'order' and value = '%s';
insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');
DELETE FROM addon WHERE id='%s'
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')
unsupported exception
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/json_parser.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp
update meta set value = %s where key = 'Default Search Provider ID';
SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp
void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
KeySize
: this object does't support a special last block
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
is not a valid key length
%Y-%m-%d %H:%M:%S
UrlEscape failed
UrlEscape succeeded
CMD_LIST_SETTINGS called
CMD_LIST_FOLDERS called
CreateThread failed, GLE=%d.
%s/[d-d-d d_d_d]%s
Crash detected > attempt to %s address %x
Last Error: %d. %s
: this object doesn't support resynchronization
StreamTransformation: this object doesn't support random access
Boost.Variant internal error: 'which' out of range.
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb
OLEAUT32.dll
RegCloseKey
ADVAPI32.dll
SHLWAPI.dll
WS2_32.dll
USER32.dll
GetProcessHeap
CreateIoCompletionPort
KERNEL32.dll
SHELL32.dll
ole32.dll
RegOpenKeyExW
RegCreateKeyExW
ReportEventW
RPCRT4.dll
SensApi.dll
WININET.dll
VERSION.dll
WTSAPI32.dll
GetCPInfo
ConnectNamedPipe
CreateNamedPipeW
DisconnectNamedPipe
WaitNamedPipeW
dbghelp.dll
PSAPI.DLL
ShellExecuteExW
SHFileOperationW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyW
UrlEscapeW
USERENV.dll
PeekNamedPipe
Coordinator.exe
??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A
.?AVwindows_file_codecvt@@
zcÁ
.?AVCppSQLite3Query@@
.?AVCppSQLite3Table@@
.?AVCppSQLite3Statement@@
.?AVCppSQLite3DB@@
.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@
.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.PAUErrorTag@SystemTools@Tools@@
.PAUPathTag@ErrorInfo@FileTools@Tools@@
.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@
.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@
.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@
.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@
.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@
.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@
.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.PAUMessageTag@ErrorInfo@KipodLogger@@
.PAUWhatTag@PTL@@
.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@
.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@
.?AUwincert_x64_token@detail@protection@kipod@@
.?AUwincert_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x64_token@detail@protection@kipod@@
.?AVOperaStatistic@KipodStatistic@@
.?AVChromeStatistic@KipodStatistic@@
.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@
.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@
.?AVCppSQLite3Exception@@
.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AVFireFox@@
.?AVJsonParserExecption@Json@KipodTools@@
.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@
.?AVOpera@@
.?AVChrome@@
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVInvalidKeyLength@CryptoPP@@
.PAVBufferedTransformation@CryptoPP@@
.PAVRandomNumberGenerator@CryptoPP@@
.?AVsettings_pipe_failed@@
.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@
.?AVSimpleKeyingInterface@CryptoPP@@
.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@
.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@
P
5(6.686_6
5%5x6
6&606:6~6
7:U:6;H;s;
06Y6
5(7,7074787
<$<*<8<~<
4(4#6&999
=_> ?2?7?
7}7
= =$=(=,=0=4=8=<=
3 3$3(3,303
1024282<2`3
5#5(595>5
4&535 6{6
3$414;4@4^4
9 9$9(9,9094989<9
8"8&8*8.858
= =$=(=,=0=4=
8 9$9(9,9094989
9 9$9(9,90949
;#<(<4<><
31383?3{3
3?3s3
9(9~9&:6:
3&4943696
4O6s6
? ?$?(?,?0?4?8?\?
< <$<(<,<0<4<8<
4*414]4}4
4%4S4Y4y4
657[7-9}:m<
:#;2;@;#<3<|<
< <$<(<,<0<
>,>0>4>8><>
=
8 8$8(8,8084888<8
2!2@2_2~2
3%4U4
6|7!8
5-6}6
5 5$5(5,5054585<5
< <$<(<,<0<4<8<<<
8 8$8(8,8084888
6 6$6(6,60646
2 2$2(2,2024282<2
1 1@1`1|1
0 0(040<0
0$0,080`0
>(>0><>`>
1$1,181\1|1
pKERNEL32.DLL
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
ADVAPI32.DLL
WUSER32.DLL
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
5<>:"/\|?*
\\?\UNC\
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
ChromeNewTab
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
chrome_nt_supported
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{52db1893-8a90-4192-aede-08e00b8f8#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&qu=
http://dts.search.ask.com/sr?l=dis&o=APN11693&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{DB3CB725-C39D-434E-80D1-DB271BB972C8}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&o=APN11693&q=
http://www.search.ask.com?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
Firefox/Extension
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
profile.preference_hashes.
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
SubKey
Chrome/Homepage
backup.homepage
Chrome homepage
Chrome/StartPages
backup.session.urls_to_restore_on_startup
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
Chrome/NewTab
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
\Google\Chrome\User Data
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
.alpha
\\.\pipe\SafetyNutPipe
backup.homepage_is_newtabpage
backup.extensions.ids
backup.browser.show_home_button
backup.session.restore_on_startup
Fbackup.session.urls_to_restore_on_startup
Fchrome.exe
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\
\Google\Chrome\User Data\Default\Web Data
search_url
"%1%" : "%2%"
chrome_url_overrides
chrome-extension://%1%/%2%
opera.exe
session.restore_on_startup
\Opera\Opera\operaprefs.ini
\Opera\operaprefs_default.ini
\Opera\Opera\search.ini
\Opera\locale\%1%\search.ini
\Opera\Opera\toolbar\standard_toolbar.ini
Home URL
\Opera\Opera\sessions\autosave.win
Search Panel Toolbar.content
firefox.exe
\Mozilla\Firefox
\search.json
\search.sqlite
\extensions.ini
user_pref("browser.startup.homepage", "
user_pref("browser.startup.page",
user_pref("browser.search.selectedEngine", "
user_pref("browser.search.defaultenginename", "
user_pref("browser.search.order.1", "
user_pref("keyword.URL", "
user_pref("general.useragent.extra.%1%", "
user_pref("%1%.Updater.Enabled", "
xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"
Url[@type='text/html']
windows
Software\SafetyNut\Files\ChromeHomepage
Software\SafetyNut\Chrome\DS
Software\Mozilla\Mozilla Firefox
http\shell\open\command
software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice
Software\Opera Software
Opera.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
extensions.ini
\install.rdf
xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"
firefox
chrome
opera
G:Url[@type='text/html']
coordinator.cfg
FSafetyNut\safetyldr.dll
SafetyNut\x64\safetyldr.dll
SafetyNut\x64\safetycrt.dll
SafetyNut\safetycrt.dll
SafetyNut\ctlstrm.exe
SafetyNut\x64\ctlstrm.exe
SafetyNut\SafetyNutManager.exe
Fcoordinator.cfg
general.cfg
SafetyNutManager.exe
Local\{03E80AE5-9DD3-4DFA-A6AA-336927088046}
safetynut.exe
Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2
F\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622configmgrc3
configmgrc3.cfg
F06DEFF2-5B9C-490D-910F-35D3A9119622
{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}
{7CE786FC-4564-455B-AD3D-46697468C070}
Service failed. %s
Internet Explorer Settings.exe
new_chrome.exe
chrome.exe
ieuser.exe
iexplore.exe
u$System64\csrss.exe
$System64\lsass.exe
$System64\services.exe
$System64\svchost.exe
$Windows\explorer.exe
Windows
Starting SafetyNut Manager Service, version 5.0.0.13042 built Wed Jun 11 07:50:05 2014
stats.cfg
firefox/homepage
firefox/selectedsearch
chrome/homepage
chrome/defaultsearch
%3%
WinHttp.WinHttpRequest.5.1
5.0.0.13042
application/x-www-form-urlencoded
login_request
/login_reply/properties/node()
/login_reply/block_exec/file
/login_reply/auto_update/pack_url/node()
/login_reply/patch_update/patch/node()
target_statistics_url
.XML=
SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls
Wincert\win32cert.dll
Wincert\win64cert.dll
%s failed w/err 0xlx
Advapi32.dll
safetynutbe.com
/login
http://preved.%s
{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}
{d48c9ead-f59f-4dea-ac97-7065fea79f42}
{af6ac4f2-9825-4fb6-a600-92bc5361f209}
{23cd218f-af09-443f-bbb1-adb89fd5986d}
{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{28387537-e3f9-4ed7-860c-11e69af4a8a0}
{b7b37500-99b4-46ad-8bf3-2480bcedc38c}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
search.fantastigames.com
dts.search-results.com
www.gotsearch.com
www.insertsearch.com
www.mlsearch.com
www.searchsupreme.com
www.newsearchtab.com
www.adoresearch.com
www.searchsheet.com
www.searchqu.com
www.searchnu.com
www.searchcore.net
search.lphant.net
search.lphant.com
search.shareazaweb.com
search.shareazaweb.net
search.bearshare.net
search.bearshare.com
search.imesh.com
search.imesh.net
%1%.%2%.%3%.%4%
PathToExe
user_pref("extensions.lastAppVersion", "
user_pref("extensions.lastPlatformVersion", "
user_pref("extensions.extensions.databaseSchema",
%s|%d|%d|%d
backup.pinned_tabs
https
%d.%d
logfile.txt
dwinlogon.exe
Msxml2.DOMDocument.3.0
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
([^"]*)?("([^"] )")?([^"]*)?
.E:\Work\SearchSuite\G13\CGL\libs\boost/optional/optional.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/smart_ptr/shared_ptr.hpp
e:\work\searchsuite\g13\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
!p.empty() && "Empty path not allowed for put_child."
hE:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
!value.empty()
E:\Work\SearchSuite\G13\CGL\libs\boost/regex/v4/basic_regex.hpp
0 != m_pimpl.get()
.E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/forced_return.hpp
!"#$%&'()* ,
{029ea614-c5b4-4b79-ac5c-d2b17f0fcb01}
{285e37e7-90b6-4318-b84f-941c18ad07e8}
{54a32f25-e2e2-411f-8853-e5f7b32db6a7}
Assertion failed: %s, file %s, line %d
F{029ea614-c5b4-4b79-ac5c-d2b17f0fcb01}
%Program Files% (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe

SafetyNutManager.exe_3040:

.text
`.rdata
@.data
.rsrc
@.reloc
t.Pj:
3|$83|$0
3|$@3|$4
\$,3\$43
.QZ^&
~$)~()|$
T$DRSSh
xSSSh
FTPjKS
FtPj;S
C.PjRV
.GFy,
8sqliu
u.VWh|jE
 2 34 567
<%u7j
X<%u2j
boost::filesystem::directory_iterator::operator  
kernel32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
GetProcessWindowStation
operator
CPPSQLITE_ERROR
SQLITE_DONE
SQLITE_ROW
SQLITE_RANGE
SQLITE_FORMAT
SQLITE_AUTH
SQLITE_NOLFS
SQLITE_MISUSE
SQLITE_MISMATCH
SQLITE_CONSTRAINT
SQLITE_TOOBIG
SQLITE_SCHEMA
SQLITE_EMPTY
SQLITE_PROTOCOL
SQLITE_CANTOPEN
SQLITE_FULL
SQLITE_NOTFOUND
SQLITE_CORRUPT
SQLITE_IOERR
SQLITE_INTERRUPT
SQLITE_READONLY
SQLITE_NOMEM
SQLITE_LOCKED
SQLITE_BUSY
SQLITE_ABORT
SQLITE_PERM
SQLITE_INTERNAL
SQLITE_ERROR
SQLITE_OK
%s[%d]: %s
select count(*) from sqlite_master where type='table' and name='%s'
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
922337203685477580
SQLITE_
?API call with %s database connection pointer
%s\etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
%s(%d)
keyinfo(%d
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
foreign key mismatch
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
%s:%d
no such index: %s
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
Recovered %d frames from WAL file %s
foreign key constraint failed
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
%s: %s
%s: %s.%s
%s: %s.%s.%s
misuse of aliased aggregate %s
not authorized to use function: %s
too many terms in %s BY clause
invalid name: "%s"
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
On page %d at right child:
On tree page %d cell %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
Page %d:
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
%s-mjX
unable to use function %s in the requested context
zeroblob(%d)
database %s is locked
cannot detach database %s
no such database: %s
no such collation sequence: %s
%s.%s
unknown database %s
bind on a busy prepared statement: [%s]
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a PRIMARY KEY column
automatic extension loading failed: %s
B}Tunable to close due to unfinished backup operation
d-d-d d:d:d
d:d:d
d-d-d
database schema is locked: %s
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
PRAGMA vacuum_db.synchronous=OFF
cannot VACUUM - SQL statements in progress
BmTunknown database: %s
misuse of aggregate: %s()
indexed columns are not unique
PRIMARY KEY must be unique
%s.%s may not be NULL
no such vfs: %s
%s-shm
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
sqlite3_get_table() called with two or more incompatible queries
%s ORDER BY
%s VIRTUAL TABLE INDEX %d:%s
%s USING PRIMARY KEY
%s VIA MULTI-INDEX UNION
%s WITH INDEX %s
cannot use index: %s
%s WITH AUTOMATIC INDEX
%s AS %s
TABLE %s
at most %d tables in a join
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
no such trigger: %S
unable to open database: %s
database %s is already in use
too many attached databases - max %d
sqlite_sequence
there is already an index named %s
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
no such table: %s
sqlite_subquery_%p_
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
cannot open value of type %s
cannot open %s column for writing
no such column: "%s"
cannot open view: %s
cannot open virtual table: %s
indexed
foreign key
sqlite_altertab_%s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
*** in database %s ***
unsupported encoding: %s
foreign_key_list
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
-- TRIGGER %s
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
E:\Work\SearchSuite\G13\CGL\Libs\boost/exception/detail/exception_ptr.hpp
class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\SystemTools.cpp
void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\StringTools.cpp
E:\Work\SearchSuite\G13\CGL\Tools\FileTools.cpp
keywords
SELECT value FROM meta WHERE key = 'version'
SELECT %s FROM keywords_backup ORDER BY id ASC
Not supported chrome db
CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC
UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp
void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
DROP TABLE %s
select %s from %s where key = '%s';
select * from %s where %s = '%s';
update %s set %s = %d where key = '%s';
DELETE FROM keywords WHERE short_name = '%s';
INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);
SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'
UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
keywords_backup
E:\Work\SearchSuite\G13\CGL\libs\boost/exception/detail/exception_ptr.hpp
e:\work\searchsuite\g13\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp
{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}
void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)
E:\Work\SearchSuite\G13\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
unsupported version
Can't terminate a sub-expression with an alternation operator |.
A regular expression can start with the alternation operator |.
Alternation operators are not allowed inside a DEFINE block.
More than one alternation operator | was encountered inside a conditional expression.
A repetition operator cannot be applied to a zero-width assertion.
Invalid alternation operators within (?...) block.
The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.
Found a closing repetition operator } with no corresponding {.
The repeat operator " " cannot start a regular expression.
The repeat operator "?" cannot start a regular expression.
The repeat operator "*" cannot start a regular expression.
right-curly-bracket
left-curly-bracket
0123456789
Unmatched quantified repeat operator { or \{.
Invalid preceding regular expression prior to repetition operator.
asio.misc
asio.misc error
Open/Key
Service/Create, Path=%s, Reg=%s
Args=%s
../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp
IDdqdCtx/Connect, File=%s
Unsupported IDdqd version = 0x%x. Expected = 0x%x
IDdqd/Ctl Code = 0x%x
WStr::FromRsrc, ID=%u
%s*.%s
%s%u.%s
RegKey::%s %s, Access=0x%x
RegKey::%s %s
VMem/Alloc, Size=%u
HomoHeap/Init, Size=%u
HomoHeap/Alloc, Size=%u
Access violation. Address=0xX, access=%s
SEH Exception. Code=0xX, NumParams=%u, Addr=0xX
System error %u (0xX)
%s. Source=
[u/u/u u:u:u.u]
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u
\Registry\Machine\System\ControlSetu\Services\%s
Cannot create HTTP request instance
Login to
Login request (not encrypted)
Login request (encrypted)
Update/patch exec timed out
Login successful, attempt to send stats to "
Url is empty, it means statistics will not be sent, but will be deleted
Exception in Login thread:
Unknown exception in Login thread
As I cannot login with url:
thread.entry_event
thread.exit_event
key does not exist. Attempt to create it
BrowserDefendert.job
BrowserDefender.job
BitGuard.job
RegOpenKeyTransactedW
RegCreateKeyTransactedW
Failed to open a [general] key
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp
select url from keywords where short_name like '%s'
SQLite Error
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp
class std::vector,class std::allocator >,class std::allocator,class std::allocator > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string,class std::allocator > &)
delete from engine_data where engineid = '%s';
update engine_data set value = '%s' where name = 'order' and value = '%s';
insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');
DELETE FROM addon WHERE id='%s'
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')
unsupported exception
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/json_parser.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp
update meta set value = %s where key = 'Default Search Provider ID';
SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp
void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
KeySize
: this object does't support a special last block
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
is not a valid key length
%Y-%m-%d %H:%M:%S
UrlEscape failed
UrlEscape succeeded
CMD_LIST_SETTINGS called
CMD_LIST_FOLDERS called
CreateThread failed, GLE=%d.
%s/[d-d-d d_d_d]%s
Crash detected > attempt to %s address %x
Last Error: %d. %s
: this object doesn't support resynchronization
StreamTransformation: this object doesn't support random access
Boost.Variant internal error: 'which' out of range.
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb
OLEAUT32.dll
RegCloseKey
ADVAPI32.dll
SHLWAPI.dll
WS2_32.dll
USER32.dll
GetProcessHeap
CreateIoCompletionPort
KERNEL32.dll
SHELL32.dll
ole32.dll
RegOpenKeyExW
RegCreateKeyExW
ReportEventW
RPCRT4.dll
SensApi.dll
WININET.dll
VERSION.dll
WTSAPI32.dll
GetCPInfo
ConnectNamedPipe
CreateNamedPipeW
DisconnectNamedPipe
WaitNamedPipeW
dbghelp.dll
PSAPI.DLL
ShellExecuteExW
SHFileOperationW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyW
UrlEscapeW
USERENV.dll
PeekNamedPipe
Coordinator.exe
??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A
.?AVwindows_file_codecvt@@
zcÁ
.?AVCppSQLite3Query@@
.?AVCppSQLite3Table@@
.?AVCppSQLite3Statement@@
.?AVCppSQLite3DB@@
.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@
.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.PAUErrorTag@SystemTools@Tools@@
.PAUPathTag@ErrorInfo@FileTools@Tools@@
.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@
.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@
.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@
.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@
.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@
.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@
.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.PAUMessageTag@ErrorInfo@KipodLogger@@
.PAUWhatTag@PTL@@
.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@
.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@
.?AUwincert_x64_token@detail@protection@kipod@@
.?AUwincert_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x64_token@detail@protection@kipod@@
.?AVOperaStatistic@KipodStatistic@@
.?AVChromeStatistic@KipodStatistic@@
.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@
.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@
.?AVCppSQLite3Exception@@
.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AVFireFox@@
.?AVJsonParserExecption@Json@KipodTools@@
.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@
.?AVOpera@@
.?AVChrome@@
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVInvalidKeyLength@CryptoPP@@
.PAVBufferedTransformation@CryptoPP@@
.PAVRandomNumberGenerator@CryptoPP@@
.?AVsettings_pipe_failed@@
.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@
.?AVSimpleKeyingInterface@CryptoPP@@
.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@
.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@
P
5(6.686_6
5%5x6
6&606:6~6
7:U:6;H;s;
06Y6
5(7,7074787
<$<*<8<~<
4(4#6&999
=_> ?2?7?
7}7
= =$=(=,=0=4=8=<=
3 3$3(3,303
1024282<2`3
5#5(595>5
4&535 6{6
3$414;4@4^4
9 9$9(9,9094989<9
8"8&8*8.858
= =$=(=,=0=4=
8 9$9(9,9094989
9 9$9(9,90949
;#<(<4<><
31383?3{3
3?3s3
9(9~9&:6:
3&4943696
4O6s6
? ?$?(?,?0?4?8?\?
< <$<(<,<0<4<8<
4*414]4}4
4%4S4Y4y4
657[7-9}:m<
:#;2;@;#<3<|<
< <$<(<,<0<
>,>0>4>8><>
=
8 8$8(8,8084888<8
2!2@2_2~2
3%4U4
6|7!8
5-6}6
5 5$5(5,5054585<5
< <$<(<,<0<4<8<<<
8 8$8(8,8084888
6 6$6(6,60646
2 2$2(2,2024282<2
1 1@1`1|1
0 0(040<0
0$0,080`0
>(>0><>`>
1$1,181\1|1
pKERNEL32.DLL
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
ADVAPI32.DLL
WUSER32.DLL
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
5<>:"/\|?*
\\?\UNC\
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
ChromeNewTab
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
chrome_nt_supported
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{52db1893-8a90-4192-aede-08e00b8f8#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&qu=
http://dts.search.ask.com/sr?l=dis&o=APN11693&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{DB3CB725-C39D-434E-80D1-DB271BB972C8}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&o=APN11693&q=
http://www.search.ask.com?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
Firefox/Extension
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
profile.preference_hashes.
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
SubKey
Chrome/Homepage
backup.homepage
Chrome homepage
Chrome/StartPages
backup.session.urls_to_restore_on_startup
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
Chrome/NewTab
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
\Google\Chrome\User Data
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
.alpha
\\.\pipe\SafetyNutPipe
backup.homepage_is_newtabpage
backup.extensions.ids
backup.browser.show_home_button
backup.session.restore_on_startup
Fbackup.session.urls_to_restore_on_startup
Fchrome.exe
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\
\Google\Chrome\User Data\Default\Web Data
search_url
"%1%" : "%2%"
chrome_url_overrides
chrome-extension://%1%/%2%
opera.exe
session.restore_on_startup
\Opera\Opera\operaprefs.ini
\Opera\operaprefs_default.ini
\Opera\Opera\search.ini
\Opera\locale\%1%\search.ini
\Opera\Opera\toolbar\standard_toolbar.ini
Home URL
\Opera\Opera\sessions\autosave.win
Search Panel Toolbar.content
firefox.exe
\Mozilla\Firefox
\search.json
\search.sqlite
\extensions.ini
user_pref("browser.startup.homepage", "
user_pref("browser.startup.page",
user_pref("browser.search.selectedEngine", "
user_pref("browser.search.defaultenginename", "
user_pref("browser.search.order.1", "
user_pref("keyword.URL", "
user_pref("general.useragent.extra.%1%", "
user_pref("%1%.Updater.Enabled", "
xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"
Url[@type='text/html']
windows
Software\SafetyNut\Files\ChromeHomepage
Software\SafetyNut\Chrome\DS
Software\Mozilla\Mozilla Firefox
http\shell\open\command
software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice
Software\Opera Software
Opera.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
extensions.ini
\install.rdf
xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"
firefox
chrome
opera
G:Url[@type='text/html']
coordinator.cfg
FSafetyNut\safetyldr.dll
SafetyNut\x64\safetyldr.dll
SafetyNut\x64\safetycrt.dll
SafetyNut\safetycrt.dll
SafetyNut\ctlstrm.exe
SafetyNut\x64\ctlstrm.exe
SafetyNut\SafetyNutManager.exe
Fcoordinator.cfg
general.cfg
SafetyNutManager.exe
Local\{03E80AE5-9DD3-4DFA-A6AA-336927088046}
safetynut.exe
Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2
F\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622configmgrc3
configmgrc3.cfg
F06DEFF2-5B9C-490D-910F-35D3A9119622
{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}
{7CE786FC-4564-455B-AD3D-46697468C070}
Service failed. %s
Internet Explorer Settings.exe
new_chrome.exe
chrome.exe
ieuser.exe
iexplore.exe
u$System64\csrss.exe
$System64\lsass.exe
$System64\services.exe
$System64\svchost.exe
$Windows\explorer.exe
Windows
Starting SafetyNut Manager Service, version 5.0.0.13042 built Wed Jun 11 07:50:05 2014
stats.cfg
firefox/homepage
firefox/selectedsearch
chrome/homepage
chrome/defaultsearch
%3%
WinHttp.WinHttpRequest.5.1
5.0.0.13042
application/x-www-form-urlencoded
login_request
/login_reply/properties/node()
/login_reply/block_exec/file
/login_reply/auto_update/pack_url/node()
/login_reply/patch_update/patch/node()
target_statistics_url
.XML=
SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls
Wincert\win32cert.dll
Wincert\win64cert.dll
%s failed w/err 0xlx
Advapi32.dll
safetynutbe.com
/login
http://preved.%s
{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}
{d48c9ead-f59f-4dea-ac97-7065fea79f42}
{af6ac4f2-9825-4fb6-a600-92bc5361f209}
{23cd218f-af09-443f-bbb1-adb89fd5986d}
{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{28387537-e3f9-4ed7-860c-11e69af4a8a0}
{b7b37500-99b4-46ad-8bf3-2480bcedc38c}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
search.fantastigames.com
dts.search-results.com
www.gotsearch.com
www.insertsearch.com
www.mlsearch.com
www.searchsupreme.com
www.newsearchtab.com
www.adoresearch.com
www.searchsheet.com
www.searchqu.com
www.searchnu.com
www.searchcore.net
search.lphant.net
search.lphant.com
search.shareazaweb.com
search.shareazaweb.net
search.bearshare.net
search.bearshare.com
search.imesh.com
search.imesh.net
%1%.%2%.%3%.%4%
PathToExe
user_pref("extensions.lastAppVersion", "
user_pref("extensions.lastPlatformVersion", "
user_pref("extensions.extensions.databaseSchema",
%s|%d|%d|%d
backup.pinned_tabs
https
%d.%d
logfile.txt
dwinlogon.exe
Msxml2.DOMDocument.3.0
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
([^"]*)?("([^"] )")?([^"]*)?
.E:\Work\SearchSuite\G13\CGL\libs\boost/optional/optional.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/smart_ptr/shared_ptr.hpp
e:\work\searchsuite\g13\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
!p.empty() && "Empty path not allowed for put_child."
hE:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
!value.empty()
E:\Work\SearchSuite\G13\CGL\libs\boost/regex/v4/basic_regex.hpp
0 != m_pimpl.get()
.E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/forced_return.hpp
!"#$%&'()* ,
{029ea614-c5b4-4b79-ac5c-d2b17f0fcb01}
{285e37e7-90b6-4318-b84f-941c18ad07e8}
{54a32f25-e2e2-411f-8853-e5f7b32db6a7}
Assertion failed: %s, file %s, line %d
F{029ea614-c5b4-4b79-ac5c-d2b17f0fcb01}
%Program Files% (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe

safetynut.exe_3024:

.text
`.rdata
@.data
.rsrc
@.reloc
8%uNP
tùX
SSSSh
3|$83|$0
3|$@3|$4
\$,3\$43
~$)~()|$
.QZ^&
.GFy,
8sqliu
u.VWhl^G
 2 34 567
T$DRSSh
xSSSh
FTPjKS
FtPj;S
C.PjRV
<%u7j
X<%u2j
CPPSQLITE_ERROR
SQLITE_DONE
SQLITE_ROW
SQLITE_RANGE
SQLITE_FORMAT
SQLITE_AUTH
SQLITE_NOLFS
SQLITE_MISUSE
SQLITE_MISMATCH
SQLITE_CONSTRAINT
SQLITE_TOOBIG
SQLITE_SCHEMA
SQLITE_EMPTY
SQLITE_PROTOCOL
SQLITE_CANTOPEN
SQLITE_FULL
SQLITE_NOTFOUND
SQLITE_CORRUPT
SQLITE_IOERR
SQLITE_INTERRUPT
SQLITE_READONLY
SQLITE_NOMEM
SQLITE_LOCKED
SQLITE_BUSY
SQLITE_ABORT
SQLITE_PERM
SQLITE_INTERNAL
SQLITE_ERROR
SQLITE_OK
%s[%d]: %s
select count(*) from sqlite_master where type='table' and name='%s'
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
922337203685477580
SQLITE_
?API call with %s database connection pointer
%s\etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
%s(%d)
keyinfo(%d
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
foreign key mismatch
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
%s:%d
no such index: %s
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
Recovered %d frames from WAL file %s
foreign key constraint failed
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
%s: %s
%s: %s.%s
%s: %s.%s.%s
misuse of aliased aggregate %s
not authorized to use function: %s
too many terms in %s BY clause
invalid name: "%s"
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
On page %d at right child:
On tree page %d cell %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
Page %d:
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
%s-mjX
unable to use function %s in the requested context
zeroblob(%d)
database %s is locked
cannot detach database %s
no such database: %s
no such collation sequence: %s
%s.%s
unknown database %s
bind on a busy prepared statement: [%s]
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a PRIMARY KEY column
automatic extension loading failed: %s
B}Tunable to close due to unfinished backup operation
d-d-d d:d:d
d:d:d
d-d-d
database schema is locked: %s
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
PRAGMA vacuum_db.synchronous=OFF
cannot VACUUM - SQL statements in progress
BmTunknown database: %s
misuse of aggregate: %s()
indexed columns are not unique
PRIMARY KEY must be unique
%s.%s may not be NULL
no such vfs: %s
%s-shm
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
sqlite3_get_table() called with two or more incompatible queries
%s ORDER BY
%s VIRTUAL TABLE INDEX %d:%s
%s USING PRIMARY KEY
%s VIA MULTI-INDEX UNION
%s WITH INDEX %s
cannot use index: %s
%s WITH AUTOMATIC INDEX
%s AS %s
TABLE %s
at most %d tables in a join
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
no such trigger: %S
unable to open database: %s
database %s is already in use
too many attached databases - max %d
sqlite_sequence
there is already an index named %s
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
no such table: %s
sqlite_subquery_%p_
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
cannot open value of type %s
cannot open %s column for writing
no such column: "%s"
cannot open view: %s
cannot open virtual table: %s
indexed
foreign key
sqlite_altertab_%s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
*** in database %s ***
unsupported encoding: %s
foreign_key_list
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
-- TRIGGER %s
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
E:\Work\SearchSuite\G13\CGL\Libs\boost/exception/detail/exception_ptr.hpp
class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\SystemTools.cpp
void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13\CGL\Tools\StringTools.cpp
E:\Work\SearchSuite\G13\CGL\Tools\FileTools.cpp
keywords
SELECT value FROM meta WHERE key = 'version'
SELECT %s FROM keywords_backup ORDER BY id ASC
Not supported chrome db
CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC
UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp
void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
DROP TABLE %s
select %s from %s where key = '%s';
select * from %s where %s = '%s';
update %s set %s = %d where key = '%s';
DELETE FROM keywords WHERE short_name = '%s';
INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);
SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'
UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
keywords_backup
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\KipodTools\IETools.cpp
bool __cdecl KipodTools::IETools::`anonymous-namespace'::UnlockKey(struct HKEY__ *)
bool __cdecl KipodTools::IETools::`anonymous-namespace'::LockKey(struct HKEY__ *)
Only Internet Explorer code should write this user setting. See http://go.microsoft.com/fwlink/?LinkId=159651 for more details.
WTSAPI32.dll
E:\Work\SearchSuite\G13\CGL\libs\boost/exception/detail/exception_ptr.hpp
E:\Work\SearchSuite\G13\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
boost::filesystem::directory_iterator::operator  
kernel32.dll
Can't terminate a sub-expression with an alternation operator |.
A regular expression can start with the alternation operator |.
Alternation operators are not allowed inside a DEFINE block.
More than one alternation operator | was encountered inside a conditional expression.
A repetition operator cannot be applied to a zero-width assertion.
Invalid alternation operators within (?...) block.
The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.
Found a closing repetition operator } with no corresponding {.
The repeat operator " " cannot start a regular expression.
The repeat operator "?" cannot start a regular expression.
The repeat operator "*" cannot start a regular expression.
right-curly-bracket
left-curly-bracket
0123456789
Unmatched quantified repeat operator { or \{.
Invalid preceding regular expression prior to repetition operator.
unsupported version
Visual C   CRT: Not enough memory to complete call to strerror.
GetProcessWindowStation
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
operator
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
backup.homepage
backup.homepage_is_newtabpage
backup.browser.show_home_button
backup.session.restore_on_startup
backup.session.urls_to_restore_on_startup
backup.extensions.ids
RegOpenKeyTransactedW
RegCreateKeyTransactedW
RegDeleteKeyTransactedW
RegDeleteKeyExW
unsupported exception
../../../../CGL/Libs\boost/property_tree_typed/string_path.hpp
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
../../../../CGL/Libs\boost/property_tree_typed/json_parser.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_read.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_write.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/ptree_implementation.hpp
%s|%d|%d|%d
backup.pinned_tabs
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
SELECT internal_id FROM addon WHERE id='%s'
INSERT INTO addon (id, location, type, visible, active, userDisabled, appDisabled, descriptor, softDisabled, pendingUninstall) VALUES ('%s', 'app-profile', 'extension', 1, 1, 0, 0, '%s', 0, 0)
UPDATE addon SET userDisabled='%i', appDisabled='%i', softDisabled='%i', active='%i' WHERE id='%s'
e:\work\searchsuite\g13\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp
{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}
../../../../CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)
../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\KipodUI\KipodUI\Protector\KeyProtect.cpp
class std::basic_string,class std::allocator > __thiscall ProtectKeyInfo::GetDisplayRealValue(void) const
yahoo.com
ask.com
imesh web search
.default-search.net
.search-results.com
.search.ask.com
.unthreat.com
.fantastigames.com
.gotsearch.com
.insertsearch.com
.mlsearch.com
.searchsupreme.com
.newsearchtab.com
.adoresearch.com
.searchsheet.com
.searchqu.com
.searchnu.com
.searchcore.net
.lphant.net
.lphant.com
.shareazaweb.com
.shareazaweb.net
.bearshare.net
.bearshare.com
.imesh.com
.imesh.net
KeySize
: this object does't support a special last block
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
is not a valid key length
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
Boost.Variant internal error: 'which' out of range.
%Y-%m-%d %H:%M:%S
UrlEscape failed
UrlEscape succeeded
E:\Work\SearchSuite\G13\SearchSuite\Client\Kipod\Bin\Release\DataMngrUI.pdb
GetProcessHeap
KERNEL32.dll
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
USER32.dll
GDI32.dll
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegNotifyChangeKeyValue
RegEnumKeyW
ADVAPI32.dll
SHELL32.dll
ole32.dll
OLEAUT32.dll
SensApi.dll
WININET.dll
VERSION.dll
ImageGetCertificateData
CertGetCertificateContextProperty
ImageEnumerateCertificates
CertGetNameStringW
CertFreeCertificateContext
CRYPT32.dll
imagehlp.dll
UrlIsW
UrlEscapeW
SHLWAPI.dll
COMCTL32.dll
USERENV.dll
WaitNamedPipeW
GetCPInfo
PeekNamedPipe
RegOpenKeyW
ShellExecuteExW
SHFileOperationW
DataMngrUI.exe
??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A
.?AVCppSQLite3Query@@
.?AVCppSQLite3Table@@
.?AVCppSQLite3Statement@@
.?AVCppSQLite3DB@@
.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@
.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@
.PAUErrorTag@SystemTools@Tools@@
.PAUPathTag@ErrorInfo@FileTools@Tools@@
.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@
.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@
.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@
.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@
.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PBU_CERT_CONTEXT@@$0A@P6GHPBU1@@Z$1?CertFreeCertificateContext@@YGH0@ZVCloseResultPolicy@Default@HTL@PTL@@VCreatePolicy@456@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.PAUMessageTag@ErrorInfo@@
.?AVwindows_file_codecvt@@
zcÁ
.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AVJsonParserExecption@Json@KipodTools@@
.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@
.?AVCppSQLite3Exception@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@
.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@
.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@
.PAUMessageTag@ErrorInfo@KipodLogger@@
.PAUWhatTag@PTL@@
.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@
.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AVProtectChromeDBInfo@@
.?AVProtectKeyInfo@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.?AV?$_Ref_count@V?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@@tr1@std@@
.?AV?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@
.?AV?$sp_counted_impl_p@VProtectKey@@@detail@boost@@
.?AV?$sp_counted_impl_p@VProtectChromeDBInfo@@@detail@boost@@
.?AVProtectKey@@
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVInvalidKeyLength@CryptoPP@@
.PAVBufferedTransformation@CryptoPP@@
.PAVRandomNumberGenerator@CryptoPP@@
.?AVsettings_pipe_failed@@
.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
;);/;6;=;^;
0)0/060=0^0
74888<8@8
8(9,90949
9(:,:0:4:
7s7F7c7
: :$:(:,:0:
88U8w8~8
> >$>(>,>
2!2'2.2|2
7 878^8|8
6#7.757<7
5#606:6#707:7
4%5s5
1-2}2
1(2,2024282<2@2
3!3*3/3^3
7&7 71757@7
7%7X7`7f7
00s0
11s1
2/2s2
3?3s3
11181?1{1
? ?$?(?,?0?4?8?\?
7 7$7(7,7074787
9 9$9(9,9094989<9@9
0#232#333#434
=#>1>#?2?
= =$=(=,=
4%4U4j4
6%6U6
?#?'? ?/?3?7?
0 0$0(0,0004080<0
0$161{1/3
8%9U9
5%6U6
2%3U3
; ;$;(;,;0;4;8;<;@;
? ?$?(?,?
: :$:(:,:
4 4(444\4
>$>,>8>\>|>
1,181\1|1
4 4@4\4`4|4
5 5@5\5`5
6 6@6`6|6
<$<0<`<|<
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
<>:"/\|?*
\\?\UNC\
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
\Google\Chrome\User Data
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
ChromeNewTab
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
chrome_nt_supported
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{52db1893-8a90-4192-aede-08e00b8f8#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&qu=
http://dts.search.ask.com/sr?l=dis&o=APN11693&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{DB3CB725-C39D-434E-80D1-DB271BB972C8}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=BNE&apn_uid=#uid#&o=APN11693&q=
http://www.search.ask.com?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
Firefox/Extension
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN11693&apn_ptnrs=BNE&q=
http://www.search.ask.com/?o=APN11693A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
profile.preference_hashes.
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
SubKey
Chrome/Homepage
Chrome homepage
Chrome/StartPages
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
Chrome/NewTab
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
Cannot open key
Cannot unlock key
Cannot open key for writing
Cannot set key value
Cannot lock key
Cannot delete key value
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
nKERNEL32.DLL
WUSER32.DLL
ADVAPI32.DLL
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
\\.\pipe\SafetyNutPipe
software\Web Assistant\script_storage
software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\%1%\Software\Web Assistant
{6338b328-94f8-4baf-8705-2dd99277e145}
{7fa0174c-f11b-41a6-bcc7-4023e41c2df7}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
DependentKey
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
{4f2fbda2-b7d9-4330-ad7e-67382de0699e}
\Mozilla\Firefox
{a7bcb4f3-1ecf-49ad-8a8b-073d960c91d6}
{7afa8245-3d06-42eb-961a-faa64025aa33}
{5476c609-a0ba-41c5-848e-44c6eaeeaf36}
Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{98f07288-6e90-498c-a53d-cbf6c8f54eec}L
{98f07288-6e90-498c-a53d-cbf6c8f54eec}R
Software\Mozilla\Mozilla Firefox
{cf22b27b-8143-4cc3-9903-2de08768b93b}L
{cf22b27b-8143-4cc3-9903-2de08768b93b}R
extensions.settings
\Google\Chrome\User Data\Default\Preferences
{c7a9770e-d7ae-4970-a081-c35e2141e293}
Cannot create mutex to control KipodUI instance, error with code %d
Advapi32.dll
https
Init %s
Current value changed to %s
%s: failed to get current value
\StringFileInfo\xx\CompanyName
Cannot get wow keys
Riched20.dll
Received event: kn - %s, nv - %s, size - %i
%s: set enabled %i
Load in %s
Load vn %s
Load ii %s
Load subkey %s
Load subkeyid %s
Opera
FireFox
Enable %i for %s
VBoxHook.dll
\\.\VBoxMiniRdrDN
Changes for %s
E:\Work\SearchSuite\G13\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
([^"]*)?("([^"] )")?([^"]*)?
E:\Work\SearchSuite\G13\CGL\libs\boost/optional/optional.hpp
E:\Work\SearchSuite\G13\CGL\libs\boost/smart_ptr/shared_ptr.hpp
e:\work\searchsuite\g13\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
!p.empty() && "Empty path not allowed for put_child."
hE:\Work\SearchSuite\G13\CGL\libs\boost/property_tree_typed/string_path.hpp
!value.empty()
E:\Work\SearchSuite\G13\CGL\libs\boost/regex/v4/basic_regex.hpp
0 != m_pimpl.get()
E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13\CGL\libs\boost/variant/detail/forced_return.hpp
%d.%d
logfile.txt
!"#$%&'()* ,
{029ea614-c5b4-4b79-ac5c-d2b17f0fcb01}
{285e37e7-90b6-4318-b84f-941c18ad07e8}
{54a32f25-e2e2-411f-8853-e5f7b32db6a7}
Assertion failed: %s, file %s, line %d
%Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut.exe
Display the new toolbarOMovies! Toolbar has detected an attempt to change your browser homepage settingJThis setting controls the website you see each time you open your browser.
%1%cMovies! Toolbar has detected an attempt to change your default search and browser homepage settingsrThese settings control the website you see each time you open your browser and the searches made via your browser.
add a new extension to FirefoxOMovies! Toolbar has blocked an attempt to
add a new add-on or extension to Chrome&Distributed by : Azureus Software, Inc
5.0.0.13042
safetynut.exe

IEXPLORE.EXE_1232:

.text
`.data
.idata
.rsrc
@.reloc
u\j.Xf9
j.Xf9
USER32.dll
api-ms-win-downlevel-shell32-l1-1-0.dll
IEFRAME.dll
SHELL32.dll
iexplore.pdb
api-ms-win-downlevel-shlwapi-l1-1-0.dll
iertutil.dll
api-ms-win-downlevel-advapi32-l1-1-0.dll
KERNEL32.dll
msvcrt.dll
_wcmdln
_amsg_exit
RegOpenKeyExW
RegCloseKey
name="Microsoft.InternetExplorer"
true
KEYW
.ENNNG.
a.ry.v
l.igM4
?1%SGf
xh.JW^
.97777"7" " " !
3.... )) 
8888888888888
8888888888
.lPV)
úW1
.ApX/
H.ZAf
ð[U
%s!FK
1YYYY1YY9GEAA=77YRNNNW:.VT1
888777777
Y.hilkRROMLK=C,
..(((($$
3...((((%
3....(.''$
3.2...((((%
33.2....(,'
55323222...
(%&'00443445?
00.,,,4(
000.,,9(
0020..9(
003200;(
(#'( (''''!'!
Microsoft.InternetExplorer.Default
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe
{28fb17e0-d393-439d-9a21-9474a070473a}
imm32.dll
Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}
Kernel32.dll
"%s" %s
kernel32.dll
IEXPLORE.EXE
{00000000-0000-0000-0000-000000000000}
\\?\Volume
Imaging_CreateWebPagePreview_Perftrack
Browseui_Tabs_Tearoff_BetweenWindows
Browseui_Tabs_Tearoff_BetweenWindows_TabProc
Frame_URLEntered
Imaging_CreateWebPagePreview
WS_ExecuteQuery
Shdocvw_BaseBrowser_FireEvent_WindowStateChanged
IdleTask_Execution_Time
Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute
IMTravelLogMVC_TravelURL
10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)
Windows
10.00.9200.16521

IEXPLORE.EXE_1232_rwx_00050000_00001000:

%Program Files% (x86)\Movies Toolbar\SafetyNut\safetyldr.dll

Azureus.exe_3688:

.text
`.data
.idata
.rsrc
This executable was created with an evaluation version of
Could not open %s
sun.locale.formatasdefault is %s
Kernel32.DLL
language/country is %s
number of sections: %d
size of optional headers: %d
resSectionTableStart: %d
rawDataSize: %d, rawDataOffset: %d
extracting %s (size: %I64d)
ReadFile failed %d %d %I64d
WriteFile failed %d %d
Included files: %d
%s\%s
creating directory %s
failed to create directory %s
Failed to extract %s
Log: %s
emptying %s
attempting to remove %s (%d)
attempting to delete %s
error %d
error %d %d
%s\e4j_w_testdir
GetTempPath returned %d (last error %d)
No temp dir defined. Using home %s
make dir returned %d
%s\temp
c:\temp
c:\tmp
tempPath is %s
GetTempFileName failed (last error %d)
%se4j%d
tempFile is %s
%se4j_p%d.tmp
javaw.exe
adding vmoptions from <%s> (%s) (%p)
-Djava.class.path=
%s\user
vmoption count %d
vmoption %d: %s
Could not call System.exit() %d
com/exe4j/runtime/WinLauncher
exe4j.semaphoreName
-D%s=%s
exe4j.manualJre
-D%s=true
exe4j.jev
exe4j.isInstall4j
exe4j.moduleName
sun.java.command
exe4j.processCommFile
exe4j.tempDir
exe4j.unextractedPosition
-D%s=%d
-Djava.library.path=
exe4j.consoleCodepage
-D%s=cp%d
\.install4j\firstrun
checkFirstRun stopped further execution
main class: %s
param count: %d
C:\Users\hannes\dev\proj\install4j\build\src\c\windows\JavaVMLauncher.cpp
param %d: %s
expanding %s to %s in %s.
%EXE4J_EXEDIR%
%INSTALL4J_EXEDIR%
%EXE4J_TEMPDIR%
%EXE4J_PATHLIST_SEPARATOR%
%EXE4J_JVM_HOME%
${EXE4J_EXEDIR}
${INSTALL4J_EXEDIR}
${EXE4J_TEMPDIR}
${EXE4J_PATHLIST_SEPARATOR}
${EXE4J_JVM_HOME}
${launcher:sys.launcherDirectory}
${launcher:sys.launcherTempDirectory}
${launcher:sys.pathlistSeparator}
${launcher:sys.jvmHome}
${launcher:sys.tempDir}
${%s}
-Dsun.locale.formatasdefault=true
-Duser.language=
-Duser.country=
classpath entry %s
__exe4j_WinMain@12
c:\i4j_nlog
Started executable %s at %s
SOFTWARE\ej-technologies\exe4j\pids\
release semaphore 2 failed %d
semaphore name %s, code %d, value %p
other pid %d
notification via %s
semaphore creation failed %d
wait returned %d
CreateFile failed %d
WriteFile failed %d
release semaphore failed %d
com/exe4j/runtime/Exe4JController
%s\bin\splashscreen.dll
loading splashscreen dll from %s
Could not load splashscreen.dll
Could not find functions in splashscreen.dll
splash load memory returned %d (%p, %p, %d)
LoadDLL (%d, %s, %d)
Got JRE location %s (java exe: %d)
MinVersion: %s, MaxVersion: %s
Trying to load JVM-DLL from %s
\.install4j\pref_jre.cfg
Has preferred location %s
Testing location %s (type %c)
\.install4j\inst_jre.cfg
Has installer location %s
Testing relative location %s
%s exists
found JRE from previous installation (user) %s
found JRE from previous installation (machine) %s
%d/%d
kernel32.dll
%s_dir%d
Temp dir: %s
Could not create dir (%d)
native lib dir is %s
Setting PATH (native libs) %s
Setting PATH (native libs) %s failed with error %d
PATH=%s
change working directory to %s
%s\explorer.exe /select,%s
calling %s
could not open explorer window %d
.install4j\i4jruntime.jar
.vmoptions
vmoptions: exe file: %s, long: %s, opts1: %s, file: %p
vmoptions: opts2: %s, file: %p
\jre\bin\java.exe
\lib\tools.jar
\bin\java.exe
SOFTWARE\ej-technologies\exe4j\jvms\
SOFTWARE\ej-technologies\exe4j\locatedjvms\
Could not create process %s > %s (error %d)
Exit Code %d
1.0.0
Java version: %s
checkJavaExe (%s, [out], %s, %s, %d)
got version from registry %s
got version from execution %s
w.exe
checkJavaExe returning %d
found installations: %s
%s\jre
found sun %s %s
found located %s %s
java.exe
\jvm.dll
Trying %s (exists %d)
Failed with error code %d
Setting PATH %s
Setting PATH %s failed with error %d
..\jre\bin\java.exe
c:/program files (x86)/mingw/bin/../lib/gcc-lib/mingw32/2.95.3-6/../../../../include/g  -3/std/bastring.cc
%s\%s.pack
%s\bin\unpack200.exe
-r "%s" "%s"
could not delete packed file (error %d)
%s\lib\rt.jar.pack
%s\lib\jsse.jar
lib\rt.jar
lib\charsets.jar
lib\plugin.jar
lib\deploy.jar
lib\ext\localedata.jar
lib\jsse.jar
%Program Files% (x86)\Vuze\
zureus.exe
%Program Files% (x86)\Vuze\Azureus.exe
c:\program files (x86)\java\jre6\bin\..
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811
RegCloseKey
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
GetConsoleOutputCP
GetWindowsDirectoryA
EnumWindows
ExitWindowsEx
ADVAPI32.DLL
COMCTL32.DLL
KERNEL32.dll
msvcrt.dll
SHELL32.DLL
USER32.dll
))###&&&&
`00&&"""
%XWf9C
-Dsun.locale.formatasdefault=
&-Dsun.locale.formatasdefault=true
Log: %S
@MSG_ERROR_DIALOG_CAPTION@
@MSG_ERROR_DIALOG_OK@
@MSG_ERROR_DIALOG_TEXT@
www.vuze.com
Azureus.exe

Azureus.exe_3688_rwx_02540000_003C8000:

( 8 8 8 8

Azureus.exe_3688_rwx_09CF1000_0002F000:

Can't map name to dispid: %s
Advise failed with %x (CONNECT_E_ADVISELIMIT is %x)
.mixcrt
KERNEL32.DLL
mscoree.dll
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
operator
kernel32.dll
GetProcessWindowStation
USER32.DLL
zcÁ
C:\PROGRA~2\Vuze\Azureus.exe
GetConsoleOutputCP
GetProcessHeap
GetCPInfo
RegCloseKey
RegOpenKeyExA
.text
`.rdata
@.data
.rsrc
@.reloc
t%x / %s


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    unpack200.exe:1956
    unpack200.exe:2152
    install.exe:3444
    Internet Explorer Settings.exe:912
    java.exe:2652
    MoviesToolbarMediaBar.exe:2072
    makecab.exe:3164
    VuzeFW.exe:1324
    TrustedInstaller.exe:4064
    Cloud_Backup_Setup.exe:2172
    VuzeInstaller.exe:1948
    mediabar.exe:2580
    i4jdel0.exe:3824
    vcredist_x64.exe:3428
    regsvr32.exe:2280
    regsvr32.exe:716
    regsvr32.exe:2660
    regsvr32.exe:2916
    pack.exe:2584
    vz_toolbar_6087708222368454533.tmp:2176
    MyPC Backup.exe:3656
    %original file name%.exe:240
    BackupSetup.exe:3268
    SafetyNutManager.exe:2908
    SafetyNutManager.exe:1360

  2. Delete the original PUP file.
  3. Delete or disinfect the following files created/modified by the PUP:

    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\downloads.config.saving (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1IC2GYKH.txt (432 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU520801376764858893.tmp (419 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\downloads.config.bak (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\.certs (138 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU1857582111776477852.tmp.saving (789 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811\exe4jlib.jar (1928 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\A2934E465825A08068350C5F09199D7883C39EF0.dat._az.saving (31 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\content[1].css (7040 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\azureus.config.saving (2352 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\getitbtn[1].png (1191 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU6608397041386595396.tmp (275 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB (1432 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azupnpav\cd.dat.saving (174 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\metasearch.config.bak (325 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0P8FK5HQ.txt (213 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4j3C64.tmp_dir1405074811\i4jdel.exe (1928 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[1].js (16820 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU4985686955725836781.tmp (4489 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\azutp_0.5.4.zip (275 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\j[1].js (19 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\azutp_0.5.4.jar (190827 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aznettor-win32_0.6.2.zip (44786 bytes)
    C:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-gdip-win32-4233.dll (17529 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\86C45E49AF3044B2345687D9F8A69C01EF04144C.dat._az.saving (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\addresses.saving (71 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[1].gif (35 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\contacts.saving (1099 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin.properties_0.5.4 (93 bytes)
    C:\Users\"%CurrentUserName%"\.swt\lib\win32\x86\swt-win32-4233.dll (61080 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BH1D52YH.txt (634 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\exported_params.properties (306 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\UPnP_1.log (16939 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\VuzeActivities.config.saving (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\metasearch.config.saving (361 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\86C45E49AF3044B2345687D9F8A69C01EF04144C.dat.saving (803 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\devices.config.saving (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0 (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\client.vuze[1].xml (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ftux_bg[1].gif (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\plugin.properties.tmp (210 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\azutp_0.5.4.zip (6496 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\prototype[1].js (87919 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\_aztest45.dll (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU4022566134111339103.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\dht\diverse.saving (25 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin.properties.tmp (115 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\getting_started_logo[1].png (3110 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\LICENSE (1430 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\aercm_0.4.9.jar (419 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\Plugin Update_1.log (82302 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\tmp\AZU518110075039867081.tmp (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\54066FBA522970CECA1C2C3941D9F2DCD6988D2C.dat._az.saving (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (876 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\_aztest45.dll (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\plugin_install.properties_0.5.4 (42 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U5534RLU.txt (280 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\_aztest45.dll (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index[1].htm (492 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\MediaServer_1.log (502 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\logs\debug_1.log (2976 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\stats\2014\07\11.dat (164 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\config.txt (102 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\M52MKK4D.txt (76 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\reset-fonts-grids[1].css (2696 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\net\pm_default.dat.saving (124 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU4022566134111339103.tmp.saving (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU1137253537282528070.tmp (705 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\azureus.config.bak (2299 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\banips.config.saving (81 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\plugin.properties_0.6.2 (188 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\AzureusTor.exe (1379165 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\aznettor_0.6.2.zip (4489 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\54066FBA522970CECA1C2C3941D9F2DCD6988D2C.dat.saving (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\plusone[1].js (31365 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~DF1028210EED873449.TMP (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\g=jsCorp[1].js (17274 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aercm_0.4.9.jar (13024 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\cb=gapi[1].js (66349 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\collect[1].gif (35 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0 (1432 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\R4923NUN.txt (89 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\aznettor_0.6.2.jar (118110 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\active\A2934E465825A08068350C5F09199D7883C39EF0.dat.saving (899 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB (463 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\effects[1].js (15785 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\torrents\AZU1857582111776477852.tmp (785 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\home_get_plus_btn[1].png (2598 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[2].gif (35 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\6B1ZU3M8.txt (840 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\.keystore (63 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\AZU1137253537282528070.tmp.saving (709 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\LICENSE (1060 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user.jar (34439 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jruntime.jar (112270 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1033.dll (94 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\dd_vcredistUI2BA3.txt (151574 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VWLCC54.tmp (392 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\dd_vcredistMSI2BA3.txt (206843 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE33E.tmp (267 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\sysid.dat (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\System.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_star_16x.png (782 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsisFirewall.dll (16 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_B260506C25B5617AB5972F1DE58B4B0E (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\DTX\Reporting\ReportingHelper.dll (7392 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\install.ico (8 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\InetLoad.dll (804 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc6DE1.tmp (160346 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\dtuser.exe (33888 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sysid.dat (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx64.dll (5064 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\ocode.xml (390 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_tools_16x.png (557 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\inetc.dll (804 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\toolbar.htm (704 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\toolbar.xml (16 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\trackid.dat (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\trackid.dat (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\nsProcess.dll (8 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\6_Easy-Audio-MP3-WMA-OGG-Cutter.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\UAC.dll (804 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo_movies_18h.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (378 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\guid.dat (38 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\geodata.xml (162 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_reviews_16x.png (812 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\2_Free_FLV_Player.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\manifest.xml (2272 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\geolocation[1].xml (162 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\AccessControl.dll (21 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{b714512e-696c-455b-9307-c390f71ba22c}\geodata.xml (162 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\1_Free_Video_Converter.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appid.dat (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\ioSpecial.ini (26 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr6DF1.tmp\xml.dll (812 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\components\windowmediator.js (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_ticket_16x.png (684 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\3_Free_FLV_Converter.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_B260506C25B5617AB5972F1DE58B4B0E (1520 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\5_FREE_WMA_MP3_Converter.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\setupCfg.xml (587 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\external.js (24832 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb64.dll (27704 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\imeshvuzebandoo-manifest.xml (9 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\partner.xml (218 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\toolbar.xul (24832 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\tb_icon.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\4_Free_CD_DVD_burner.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\apnuserid.dat (16 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\as_guid.dat (38 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\uninstall.exe (6458 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\appid.dat (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\apnuserid.dat (16 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
    C:\Windows\Logs\CBS\CbsPersist_20140711103344.cab (11744 bytes)
    C:\Windows\Temp\cab_3164_6 (8 bytes)
    C:\Windows\Temp\cab_3164_4 (564989 bytes)
    C:\Windows\Temp\cab_3164_5 (76 bytes)
    C:\Windows\Temp\cab_3164_2 (564989 bytes)
    C:\Windows\Temp\cab_3164_3 (76 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsbD4EC.tmp\nsisFirewall.dll (16 bytes)
    C:\Windows\winsxs\Temp\fdd1c89ff39ccf0118000000e00f2c0c\0ef9c89ff39ccf011a000000e00f2c0c_catalog (21 bytes)
    C:\Windows\System32\config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regtrans-ms (20704 bytes)
    C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c (4 bytes)
    C:\Windows\System32\config\SOFTWARE (46848 bytes)
    C:\Windows\winsxs\Temp\252251a4f39ccf013f000000e00f2c0c\364951a4f39ccf0140000000e00f2c0c_manifest (766 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\ee0ed3a3f39ccf0137000000e00f2c0c_mfc90ita.dll (129 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\2084d3a3f39ccf0139000000e00f2c0c_mfc90kor.dll (95 bytes)
    C:\Windows\System32\config\COMPONENTS{15e3db1a-917a-11e2-9ef7-000c29a8bd90}.TMContainer00000000000000000002.regtrans-ms (28680 bytes)
    C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\0cbe969ef39ccf0114000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\960418a0f39ccf011f000000e00f2c0c_manifest (6 bytes)
    C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\961a8da4f39ccf0147000000e00f2c0c_vcomp90.dll (120 bytes)
    C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\86f38ca4f39ccf0146000000e00f2c0c_manifest (864 bytes)
    C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\6cc9a299f39ccf0103000000e00f2c0c_manifest (859 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\473717a2f39ccf0123000000e00f2c0c_mfcm90u.dll (670 bytes)
    C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c (4 bytes)
    C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c\bfbfb09df39ccf010a000000e00f2c0c_manifest (760 bytes)
    C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c\a1b303a5f39ccf014e000000e00f2c0c_catalog (22 bytes)
    C:\Windows\winsxs\Temp\75cc8ca4f39ccf0145000000e00f2c0c\b7688da4f39ccf0148000000e00f2c0c_catalog (22 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\1713d1a3f39ccf012f000000e00f2c0c_manifest (13 bytes)
    C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.2.regtrans-ms (856 bytes)
    C:\Windows\winsxs\Temp\918c03a5f39ccf014c000000e00f2c0c\a1b303a5f39ccf014d000000e00f2c0c_manifest (676 bytes)
    C:\Windows\winsxs\Temp\a80c2ba3f39ccf0128000000e00f2c0c\ca5a2ba3f39ccf012a000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\af65a399f39ccf0104000000e00f2c0c_atl90.dll (853 bytes)
    C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\6eed929ef39ccf0111000000e00f2c0c_msvcr90.dll (4811 bytes)
    C:\Windows\Logs\CBS\CBS.log (80990 bytes)
    C:\Windows\winsxs\Temp\a80c2ba3f39ccf0128000000e00f2c0c\b9332ba3f39ccf0129000000e00f2c0c_manifest (760 bytes)
    C:\Windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin (4409 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\dee7d2a3f39ccf0136000000e00f2c0c_mfc90fra.dll (670 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\0f5dd3a3f39ccf0138000000e00f2c0c_mfc90jpn.dll (95 bytes)
    C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.0.regtrans-ms (80953 bytes)
    C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.1.regtrans-ms (856 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\b75218a0f39ccf0121000000e00f2c0c_mfc90u.dll (38780 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\8b24d2a3f39ccf0131000000e00f2c0c_mfc90cht.dll (79 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\9b4bd2a3f39ccf0132000000e00f2c0c_mfc90esn.dll (130 bytes)
    C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\5dc6929ef39ccf0110000000e00f2c0c_manifest (5 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\960418a0f39ccf0120000000e00f2c0c_mfcm90.dll (670 bytes)
    C:\Windows\winsxs\Temp\fdd1c89ff39ccf0118000000e00f2c0c\0ef9c89ff39ccf0119000000e00f2c0c_manifest (760 bytes)
    C:\Windows\System32\config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf (1688 bytes)
    C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\fb96969ef39ccf0113000000e00f2c0c_msvcm90.dll (1526 bytes)
    C:\Windows\winsxs\Temp\bfbfb09df39ccf0109000000e00f2c0c\d0e6b09df39ccf010b000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\585e17a2f39ccf0124000000e00f2c0c_catalog (21 bytes)
    C:\Windows\System32\config\SYSTEM.LOG1 (1099 bytes)
    C:\Windows\winsxs\Temp\4c9f929ef39ccf010f000000e00f2c0c\ca21969ef39ccf0112000000e00f2c0c_msvcp90.dll (7701 bytes)
    C:\Windows\winsxs\Temp\93129c99f39ccf0102000000e00f2c0c\44c5a499f39ccf0105000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\cdc0d2a3f39ccf0135000000e00f2c0c_mfc90enu.dll (113 bytes)
    C:\Windows\System32\config\SOFTWARE.LOG1 (45600 bytes)
    C:\Windows\System32\config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms (15680 bytes)
    C:\Windows\System32\config\COMPONENTS.LOG1 (203612 bytes)
    C:\Windows\winsxs\Temp\252251a4f39ccf013f000000e00f2c0c\364951a4f39ccf0141000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\86dd17a0f39ccf011e000000e00f2c0c\92a1cca0f39ccf0122000000e00f2c0c_mfc90.dll (38780 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\41d2d3a3f39ccf013a000000e00f2c0c_mfc90rus.dll (127 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\52f9d3a3f39ccf013b000000e00f2c0c_catalog (21 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\273ad1a3f39ccf0130000000e00f2c0c_mfc90chs.dll (78 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\ac72d2a3f39ccf0133000000e00f2c0c_mfc90esp.dll (130 bytes)
    C:\Windows\System32\config\COMPONENTS{15e3db19-917a-11e2-9ef7-000c29a8bd90}.TxR.blf (8230 bytes)
    C:\Windows\winsxs\Temp\06ecd0a3f39ccf012e000000e00f2c0c\bc99d2a3f39ccf0134000000e00f2c0c_mfc90deu.dll (670 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\aff.conf (86 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nshF680.tmp\NSISdl.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BackupSetup.exe (445914 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_14_5p83tu_12q8bqh.png (149 bytes)
    %Program Files% (x86)\Vuze\i4j7532908762072901178.tmp (25 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\stats.properties (564 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j6811556439309651913.tmp (3668 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j8578322081339386258.tmp (392 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j8497481475386490810.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j2490832045750922624.tmp (42 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j4008672141177128901.tmp (149 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\unicows.dll (108139 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_13_5p83tu.properties (1 bytes)
    %Program Files% (x86)\Vuze\i4j8901760369182727175.tmp (20260 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2369904822501633107.tmp (1928 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_26_5p83tu.jpg (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j7965540711709444556.tmp (6911320 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j161262380139373512.tmp (160 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j1571486291747910349.tmp (2696 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j1908509527689728685.tmp (776 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_23_5p83tu_1etf9b9.png (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jf119851443119624234.log (392 bytes)
    %Program Files% (x86)\Vuze\i4j7844668204558049304.tmp (14992 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_1_5p83tu.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2246758117025369636.tmp (2696 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2888739553016443387.tmp (18240 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_15_5p83tu_1a89bbn.png (589 bytes)
    %Program Files% (x86)\Vuze\.install4j\autoUninstall.0 (182 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2117814312740666059.tmp (1 bytes)
    %Program Files% (x86)\Vuze\i4j3323363540883806357.tmp (548 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_6_5p83tu.utf8 (6 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j5369609528216524484.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_19_5p83tu.html (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j7203923366131859188.tmp (392 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_4_5p83tu.utf8 (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j1046613275160153739.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_16_5p83tu_x2womb.png (1 bytes)
    %Program Files% (x86)\Vuze\plugins\azupnpav\i4j8030197494188790572.tmp (4956201 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_17_5p83tu_1rv17he.png (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jruntime.jar.pack (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j5136658709726980285.tmp (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2776336052705506423.tmp (34 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j5774336664796834070.tmp (11114 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j5408184897662267240.tmp (286788 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j6897090767390779379.tmp (5 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j3707232557848410276.tmp (21968 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j8425644083374272121.tmp (123 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j4216610523093472600.tmp (160 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\_shfoldr.dll (8481 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5589497900963994914.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_8_5p83tu.utf8 (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j6576437874901834977.tmp (53080 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j335531713615118721.tmp (2696 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5504928427479105329.tmp (1 bytes)
    %Program Files% (x86)\Vuze\plugins\azupnpav\i4j8747241237344386203.tmp (160 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_9_5p83tu.properties (1 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2140359785627941555.tmp (3808 bytes)
    %Program Files% (x86)\Vuze\.install4j\installation.log (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j1200905448623983853.tmp (160 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j2327411212952264794.bat (42 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_25_5p83tu_1jaybna.png (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j6520400365285019815.tmp (25871 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j1569002173053924734.tmp (13060 bytes)
    %Program Files% (x86)\Vuze\i4j3400932194734209451.tmp (50 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j7376135460985435728.bat (43 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_21_5p83tu_bm8amj.ico (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6695278889048417273.tmp (5952 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j2424983389265510852.tmp (129184 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\i4j3507678777117320673.tmp (8681059 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6111299788363906805.tmp (34 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_10_5p83tu.utf8 (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j5964291548243864546.tmp (2840760 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\i4j8342355379803153095.tmp (1 bytes)
    %Program Files% (x86)\Vuze\installer.log (29 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jparams.conf (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j1142501053254481120.tmp (42596 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5262834023396430321.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user\mism.exe (6 bytes)
    %Program Files% (x86)\Vuze\plugins\azplugins\i4j6937536722579425605.tmp (45364 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6073979558356333230.tmp (63904 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j8092955921587662952.tmp (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_24_5p83tu_10qu06u.png (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6786443290599820746.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j5768457985002643611.tmp (141 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_12_5p83tu.utf8 (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\files.log (392 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\platform.zip (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azrating\i4j7686554087770592710.tmp (2716622 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6641836503768349089.tmp (3808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4jdel0.exe (2732 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j4801722411858584871.tmp (160 bytes)
    %Program Files% (x86)\Vuze\i4j7745004716421649102.tmp (148469 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5431609977347394196.tmp (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j8731728351829231228.tmp (188 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aercm\i4j8805125335022701360.tmp (26638 bytes)
    %Program Files% (x86)\Vuze\.install4j\install.prop (50 bytes)
    %Program Files% (x86)\Vuze\i4j6335536770489013278.tmp (62889621 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j4662540795836078577.tmp (872 bytes)
    %Program Files% (x86)\Vuze\i4j1253025572946621350.tmp (18412 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_3_5p83tu.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j_log_Vuze_2169043936883018978.log (403052 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jinst.dll (56450 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j6693571438154325364.tmp (5952 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j1835239142706765858.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j3074898337843294455.tmp (1505161 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j9132141798385351468.tmp (1 bytes)
    %Program Files% (x86)\Vuze\plugins\azupdater\i4j2317658831101174049.tmp (187 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_7_5p83tu.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j5479369677910341825.tmp (519 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_18_5p83tu_1uj26g4.png (6 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2507119398623277174.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j330773320309737287.tmp (160 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j1495549841345352520.tmp (15010 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4jdel.exe (15863 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\custom\i4j6910200151280016333.tmp (32 bytes)
    %Program Files% (x86)\Vuze\i4j7199591124009447698.tmp (3656 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j2911317602929031727.tmp (64578 bytes)
    %Program Files% (x86)\Vuze\i4j3088277215870280227.tmp (4573 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_20_5p83tu_1v90f0m.png (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aefeatman_v\i4j3189716060939270430.tmp (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j_nlog_2 (57786 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j3138298188563576857.tmp (3 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j7492897945929948988.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j6768937469992469324.lnk (1 bytes)
    %Program Files% (x86)\Vuze\.install4j\response.varfile (548 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6221843567801459418.tmp (2696 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_5_5p83tu.properties (1 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2487707538004362310.tmp (2696 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j1566934166140311658.tmp (1928 bytes)
    %Program Files% (x86)\Vuze\plugins\azplugins\i4j4326313241666951297.tmp (6350537 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6324460525823129804.tmp (9496 bytes)
    %Program Files% (x86)\Vuze\i4j550800673652724556.tmp (988 bytes)
    %Program Files% (x86)\Vuze\i4j1510908736777320165.tmp (447647694 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vz_toolbar_6087708222368454533.tmp (610034 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j5255041105555732393.tmp (24822517 bytes)
    %Program Files% (x86)\Vuze\plugins\azupnpav\i4j7416322647950849705.tmp (29624 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i4j8861707286957798552.tmp (1 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j3964753195331676449.tmp (589 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5661239597715331454.tmp (564 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\MessagesDefault (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_0_5p83tu.utf8 (6 bytes)
    %Program Files% (x86)\Vuze\i4j3782399921828609446.tmp (991431 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2460384918039454931.tmp (1 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2869898223483512041.tmp (2696 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j175169251891838585.tmp (1928 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j8030996206320897858.tmp (2696 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_11_5p83tu.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_22_5p83tu_1c34961.png (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j2831361815097039750.tmp (160 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j7774787035564401077.tmp (75283 bytes)
    %Program Files% (x86)\Vuze\i4j3487317646487596578.tmp (15204 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j311047735938769443.tmp (1928 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j7559424535388071394.tmp (776 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j2340166147623900005.tmp (1992 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j5110052495645963791.tmp (1928 bytes)
    C:\Users\Public\Desktop\i4j6176390172570571415.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\Cloud_Backup_Setup.exe (21788 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j3105696425881871926.tmp (4597971 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i4j7795196040418503851.bat (75 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\aznettor\i4j465398494323637494.tmp (218545 bytes)
    %Program Files% (x86)\Vuze\.install4j\user\i4j3013459623939999959.tmp (5952 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azitunes\i4j6004440717324378339.tmp (3026 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azutp\i4j7717290447012084026.tmp (93 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\i4j_extf_2_5p83tu.utf8 (6 bytes)
    %Program Files% (x86)\Vuze\plugins\azupnpav\i4j4060340564912904129.tmp (125 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j6257896736602755674.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\installer.config (32 bytes)
    %Program Files% (x86)\Vuze\i4j6236813550558667444.tmp (5992 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\e4jE282.tmp_dir1405074657\user.jar.pack (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azrating\i4j412582795549569049.tmp (6576 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j2814300937934726573.tmp (15904 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Azureus\plugins\azlocprov\i4j9000516021604691255.tmp (202 bytes)
    %Program Files% (x86)\Vuze\.install4j\i4j7496365687807878079.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\MoviesToolbarMediaBar.exe (18125 bytes)
    C:\152256f44d3c6559509e12dbc91a\vc_red.cab (65618 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1036.txt (12 bytes)
    C:\152256f44d3c6559509e12dbc91a\vcredist.bmp (5 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.OpenMP.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\$shtdwn$.req (788 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1033.txt (10 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.MFC.cat (658 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1040.dll (2110 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1049.txt (13 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugMFC.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1031.txt (229 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugMFC.cat (236 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.MFC.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1036.dll (1355 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1042.dll (1988 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.OpenMP.cat (297 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.2052.txt (3 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.CRT.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1041.txt (5 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.ATL.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.2052.dll (1632 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.3082.txt (12 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.MFCLOC.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\vc_red.msi (3176 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.CRT.cat (630 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1042.txt (650 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugOpenMP.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1049.dll (1720 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1028.txt (3 bytes)
    C:\152256f44d3c6559509e12dbc91a\eula.1040.txt (657 bytes)
    C:\152256f44d3c6559509e12dbc91a\globdata.ini (1 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.3082.dll (989 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1028.dll (1130 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugOpenMP.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.DebugCRT.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1031.dll (1160 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.exe (13918 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.res.1041.dll (1126 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.DebugCRT.cat (9 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\Microsoft.VC90.ATL.cat (155 bytes)
    C:\152256f44d3c6559509e12dbc91a\install.ini (844 bytes)
    C:\152256f44d3c6559509e12dbc91a\Program Files(64)\Microsoft Visual Studio 9.0\Vc7\WinSXS\AMD64 catalogs\policy.9.00.Microsoft.VC90.MFCLOC.cat (9 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\imeshvuzebandoo\dtx.ini (15 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\favicon.ico (1 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\configmgrc3.cfg (45 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetyldr.dll (797 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetynut_ie.dll (18728 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetycrt.dll (6550 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetyldr_u.dll (19 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\Internet Explorer Settings Update.exe (10335 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut.exe (34234 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\Internet Explorer Settings.exe (9519 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut_ie.dll (18290 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll (6296 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\ctlstrm.exe (1500 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\ctlstrm.exe (1137 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetynut.dll (19552 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetynut.dll (19656 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe (30676 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\safetyldr.dll (19 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\Internet Explorer Settings Update.exe (10540 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\Internet Explorer Settings.exe (10257 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\x64\safetyldr_u.dll (22 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\configmgrc3.cfg (36 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2868.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2C28.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E80.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E40.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DC0.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\pack.exe (121063 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\276D.tmp (8020 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\Uninstall.exe (4992 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\272E.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DA0.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\28E6.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2BC9.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsm1C77.tmp (365009 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\217D.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2B7A.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Starter.exe (4992 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\22B6.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2578.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E00.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2315.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2ABD.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\29D1.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsb216C.tmp\mediabar.exe (75669 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2A2F.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2B1B.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\registry.dll (812 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\Helper.dll (66073 bytes)
    %Program Files% (x86)\Movies Toolbar\SafetyNut\Helper.dll (15019 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2DD1.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2BF9.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\nsExec.dll (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\UserInfo.dll (8 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2392.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\249D.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2E50.tmp (8020 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsr1C98.tmp\System.dll (23 bytes)
    %Program Files% (x86)\MyPC Backup\MPCBClient.dll (48 bytes)
    C:\Users\"%CurrentUserName%"\Desktop\Sync Folder.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5 (1624 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_settings.db (1229 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_settings.db-journal (31598 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5 (471 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_7DD744F73D87EE469E5BC583C31249E2 (1624 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_7DD744F73D87EE469E5BC583C31249E2 (471 bytes)
    %Program Files% (x86)\MyPC Backup\log\WAIT_HANDLES.log (540 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VuzeLog.txt (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VuzeInstall\VuzeInstaller.exe (655926 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C90.tmp (2359 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C91.tmp\System.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\Vuze_Installer32[1].exe (615586 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\rpc[1].php (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsl7C91.tmp\inetc.dll (808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\DotNetChecker.dll (1597 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\Uninstall.lnk (858 bytes)
    %Program Files% (x86)\MyPC Backup\syncing.ico (12088 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_file_cache.db (7 bytes)
    %Program Files% (x86)\MyPC Backup\Service Start.exe (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\NSISdl.dll (30 bytes)
    %Program Files% (x86)\MyPC Backup\pt_PT.mo (1856 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.60.x64.dll (6360 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\AccessControl.dll (20 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.52.x86.dll (5064 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk (1 bytes)
    %Program Files% (x86)\MyPC Backup\Crypto64.dll (1856 bytes)
    %Program Files% (x86)\MyPC Backup\diffstack.dll (1552 bytes)
    %Program Files% (x86)\MyPC Backup\Shared Stack.dll (89498 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\mpbtrk.log (8 bytes)
    %Program Files% (x86)\MyPC Backup\ObjectListView.dll (13584 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_queues.db (13 bytes)
    %Program Files% (x86)\MyPC Backup\BackupStack.exe (1552 bytes)
    %Program Files% (x86)\MyPC Backup\GetText.dll (12 bytes)
    %Program Files% (x86)\MyPC Backup\AWSSDK.dll (106386 bytes)
    %Program Files% (x86)\MyPC Backup\Configuration Updater.exe (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsSCM.dll (13 bytes)
    C:\Users\"%CurrentUserName%"\Desktop\MyPC Backup.lnk (1 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.60.x86.dll (5520 bytes)
    %Program Files% (x86)\MyPC Backup\tick.ico (12088 bytes)
    %Program Files% (x86)\MyPC Backup\Updater.exe (31856 bytes)
    %Program Files% (x86)\MyPC Backup\MyPC Backup.exe (93176 bytes)
    %Program Files% (x86)\MyPC Backup\RegisterExtensionDotNet20_x86.exe (784 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_sig_cache.db (6 bytes)
    %Program Files% (x86)\MyPC Backup\mypcbackup.ico (13368 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsExec.dll (14 bytes)
    %Program Files% (x86)\MyPC Backup\LogicNP.EZShellExtensions.dll (8560 bytes)
    %Program Files% (x86)\MyPC Backup\uninst.exe (1546 bytes)
    %Program Files% (x86)\MyPC Backup\x64\System.Data.SQLite.dll (33633 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.52.x64.dll (5520 bytes)
    %Program Files% (x86)\MyPC Backup\MPCBContextMenu.dll (217172 bytes)
    %Program Files% (x86)\MyPC Backup\Database\mpcb_backup_conf.db (16 bytes)
    %Program Files% (x86)\MyPC Backup\syncicon.ico (1856 bytes)
    %Program Files% (x86)\MyPC Backup\MPCBIconOverlays.dll (124204 bytes)
    %Program Files% (x86)\MyPC Backup\de_DE.mo (1856 bytes)
    %Program Files% (x86)\MyPC Backup\it_IT.mo (1856 bytes)
    %Program Files% (x86)\MyPC Backup\es_ES.mo (1856 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\MyPC Backup.lnk (1 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.51.x86.dll (4992 bytes)
    %Program Files% (x86)\MyPC Backup\fr_FR.mo (1856 bytes)
    %Program Files% (x86)\MyPC Backup\RegisterExtensionDotNet20_x64.exe (16 bytes)
    %Program Files% (x86)\MyPC Backup\RestartExplorer.exe (16 bytes)
    %Program Files% (x86)\MyPC Backup\AlphaVSS.Common.dll (2392 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14D9.tmp (604687 bytes)
    %Program Files% (x86)\MyPC Backup\Crypto32.dll (1856 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vcredist_x64.exe (405172 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\System.dll (23 bytes)
    %Program Files% (x86)\MyPC Backup\UnRegisterExtensions.exe (15 bytes)
    %Program Files% (x86)\MyPC Backup\Signup Wizard.exe (33877 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc14DA.tmp\nsRandom.dll (808 bytes)
    %Program Files% (x86)\MyPC Backup\x86\System.Data.SQLite.dll (30464 bytes)
    C:\ProgramData\SafetyNut\coordinator.cfg (7408 bytes)
    C:\ProgramData\SafetyNut\S-1-5-21-2858020935-2156992550-3658131804-1003.cfg (4014 bytes)
    C:\ProgramData\SafetyNut\general.cfg (1 bytes)

  4. Remove the references to the PUP by modifying the following registry value(s) (How to Work with System Registry):

    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "AutoRestartShell" = "1"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.