Worm.Win32.Ainslot_VariantOfZeus_a9997e117c

by malwarelabrobot on July 11th, 2014 in Malware Descriptions.

Trojan.Win32.Jorik.Shakblades.giq (Kaspersky), Gen:Variant.Kazy.73253 (B) (Emsisoft), Gen:Variant.Kazy.73253 (AdAware), Trojan.Win32.Swrort.3.FD, Worm.Win32.Ainslot.VB.FD, mzpefinder_pcap_file.YR, GenericAutorunWorm.YR, WormAinslot_VariantOfZeus.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: a9997e117cc7bce02d494b82501ecd43
SHA1: 84c846e8accab0fc0044f4551a654fbd8ba7c406
SHA256: ee093983a238538765e23737bdd82e8296fa895f27dbc532150accee74534c8b
SSDeep: 24576:8Cnbl fkMONMxFLESjJC448lowwI5Eg5LlwHcs37R8lwrqPysrQcUC2RKfmYUrGa:aZTVmzww4lrwrqKW/UC2wNa
Size: 2613248 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: PMW1ExecutableImageusingDOSExtender, MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: no certificate found
Created at: 2012-05-24 14:18:47
Analyzed on: WindowsXP SP3 32-bit


Summary:

Worm. A program that is primarily replicating on networks or removable drives.

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Worm's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Worm creates the following process(es):

%original file name%.exe:1152
cvtres.exe:1240
vbc.exe:1760
vbc.exe:624

The Worm injects its code into the following process(es):

jxpiinstall.exe:1228
WLIDSCV.exe:1980
svrhost.exe:656
vbc.exe:1380

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:1152 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.out (347 bytes)
%Documents and Settings%\%current user%\Application Data\fp.txt (57 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.0.vb (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jxpiinstall.exe (6333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.cmdline (280 bytes)

The Worm deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.out (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.0.vb (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.err (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.cmdline (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.tmp (0 bytes)

The process cvtres.exe:1240 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RES2.tmp (2868 bytes)

The process jxpiinstall.exe:1228 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04\java_sp.dll (150816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\fx-runtime.exe (2402442 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OJQJS12R\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E1Q9MNSX\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PZV6S7VV\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3CSAPV0K\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jinstall.cfg (1 bytes)
%Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04\jre1.7.0_04-c.msi (5211219 bytes)

The process vbc.exe:1760 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\svrhost.exe (14815 bytes)

The process vbc.exe:1380 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\VichatterX (33 bytes)
%Documents and Settings%\%current user%\Application Data\svshost.exe (3860 bytes)

The process vbc.exe:624 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.out (786 bytes)
%Documents and Settings%\%current user%\Application Data\WLIDSCV.exe (3672 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\vbc1.tmp (644 bytes)

The Worm deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RES2.tmp (0 bytes)
%Documents and Settings%\%current user%\Application Data\WLIDSCV.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\vbc1.tmp (0 bytes)

Registry activity

The process %original file name%.exe:1152 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "74 7A 90 CB 7C AD 64 89 A2 B2 4B F5 90 75 DB E9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"jxpiinstall.exe" = "Java(TM) Platform SE binary"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"WLIDSCV.exe" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Worm modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Worm modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Worm modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process cvtres.exe:1240 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B1 B2 63 F9 18 5A CF 72 16 4C 0F 42 08 C9 7C CE"

The process jxpiinstall.exe:1228 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "85 57 A1 ED 78 2C F4 3D 4A E3 88 FF 92 91 8B C8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Worm modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Worm modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Worm modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Worm deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKLM\SOFTWARE\JavaSoft]
"InstallStatus"

The process WLIDSCV.exe:1980 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "17 17 C4 77 9D 53 91 91 9A 5C 84 7B 8F 54 3E A5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"svrhost.exe" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Worm modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Worm modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Worm modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process svrhost.exe:656 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "97 57 D4 76 F5 93 C0 F8 71 E1 C6 45 FF 2F C8 A5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

The process vbc.exe:1760 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "51 EA D8 69 6B A4 E8 9F 1D BE CD 33 98 2A A3 F3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"audiokc" = "%Documents and Settings%\%current user%\Application Data\svrhost.exe"

The process vbc.exe:1380 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "41 A1 73 3F 18 04 B6 08 5C 65 51 03 98 C7 E7 E4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\VB and VBA Program Settings\INSTALL\DATE]
"HCXQSOIGAC" = "July 10, 2014"

[HKCU\Software\VB and VBA Program Settings\SrvID\ID]
"HCXQSOIGAC" = "VichatterX"

The process vbc.exe:624 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D4 AA 97 02 0A E0 6D A1 5F 1B 77 15 A7 E2 1D 3C"

Dropped PE files

MD5 File path
ea1bdcd807157abedbf13697245429e2 c:\Documents and Settings\"%CurrentUserName%"\Application Data\WLIDSCV.exe
67f5238229333c061092f5a32e8c2ee1 c:\Documents and Settings\"%CurrentUserName%"\Application Data\svshost.exe
0239f87a99cc286d8f867a8e8ec17bbb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\fx-runtime.exe
f6167efc4d1ef0d0e2739a521f6c87d0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\jxpiinstall.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Worm's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

Company Name:
Product Name:
Product Version: 1.0.0.0
Legal Copyright:
Legal Trademarks:
Original Filename: uyp.exe
Internal Name: uyp.exe
File Version: 1.0.0.0
File Description:
Comments:
Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 8192 2431140 2431488 3.95188 f238ac24ac7ba86d21fac267211166cd
.rsrc 2441216 180696 180736 3.09134 939d3bf79e8c4c46ce3894433b17403c
.reloc 2629632 12 512 0.070639 7c33f76ec3f5facd381e53d88398a19e

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://a1799.d.akamai.net/update/1.7.0/1.7.0_04-b22.xml
hxxp://vp-javadl.oracle.com/webapps/download/GetFile/1.7.0_04-b22/windows-i586/Java3BillDevices_en.jpg
hxxp://a1799.d.akamai.net/update/1.7.0/sp-1.7.0_04-b22/java_sp.dll
hxxp://vp-javadl.oracle.com/webapps/download/GetFile/fx-2.1.0-b21/windows-i586/fx-runtime.exe
hxxp://vp-javadl.oracle.com/webapps/download/AutoDL?BundleId=62858
hxxp://a952.g.akamai.net/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994868_79792252bfe2bb47c7b074e793a8e8e9&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com
hxxp://a952.g.akamai.net/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994869_1acf6109cc62ff91658d387b69fa536b&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com
hxxp://vp-javadl.oracle.com/webapps/download/GetFile/1.7.0_04-b22/windows-i586/jre1.7.0_04-c.msi
hxxp://vp-javadl.oracle.com/webapps/download/AutoDL?BundleId=63693
hxxp://a952.g.akamai.net/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994888_047130706ab52e1ad05735b15ebde6b8&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com
hxxp://a952.g.akamai.net/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994889_b677fab484fc9368ec9b85b282bda9b2&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com
hxxp://javadl.sun.com/webapps/download/GetFile/1.7.0_04-b22/windows-i586/Java3BillDevices_en.jpg 137.254.120.23
hxxp://javadl.sun.com/webapps/download/GetFile/1.7.0_04-b22/windows-i586/jre1.7.0_04-c.msi 137.254.120.23
hxxp://javadl.sun.com/webapps/download/GetFile/fx-2.1.0-b21/windows-i586/fx-runtime.exe 137.254.120.23
hxxp://sdlc-esd.sun.com/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994868_79792252bfe2bb47c7b074e793a8e8e9&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com 205.237.69.88
hxxp://javadl.sun.com/webapps/download/AutoDL?BundleId=63693 137.254.120.23
hxxp://sdlc-esd.sun.com/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994889_b677fab484fc9368ec9b85b282bda9b2&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com 205.237.69.88
hxxp://javadl.sun.com/webapps/download/AutoDL?BundleId=62858 137.254.120.23
hxxp://javadl-esd.sun.com/update/1.7.0/1.7.0_04-b22.xml 205.237.69.82
hxxp://javadl-esd.sun.com/update/1.7.0/sp-1.7.0_04-b22/java_sp.dll 205.237.69.82
hxxp://sdlc-esd.sun.com/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994888_047130706ab52e1ad05735b15ebde6b8&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com 205.237.69.88
hxxp://sdlc-esd.sun.com/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994869_1acf6109cc62ff91658d387b69fa536b&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com 205.237.69.88
pertenemene.zapto.org 91.219.238.124


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile

Traffic

HEAD /webapps/download/AutoDL?BundleId=63693 HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:28 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://sdlc-esd.sun.com/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994888_047130706ab52e1ad05735b15ebde6b8&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com
Connection: close


HEAD /ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994868_79792252bfe2bb47c7b074e793a8e8e9&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com HTTP/1.1
User-Agent: JAVACLIENT
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache
Host: sdlc-esd.sun.com


HTTP/1.1 200 OK
Server: Apache
ETag: "0239f87a99cc286d8f867a8e8ec17bbb:1333731065"
Last-Modified: Fri, 06 Apr 2012 16:11:59 GMT
Accept-Ranges: bytes
Content-Length: 7732144
Expires: Thu, 10 Jul 2014 12:19:08 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:08 GMT
Connection: keep-alive
Content-Type: application/x-sdlc


GET /update/1.7.0/sp-1.7.0_04-b22/java_sp.dll HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl-esd.sun.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
ETag: "fdedf94790f8dd4c726fdab2b8db0d39:1336071669"
Last-Modified: Thu, 03 May 2012 18:43:51 GMT
Accept-Ranges: bytes
Content-Length: 433753
Content-Type: application/octet-stream
Expires: Thu, 10 Jul 2014 12:19:05 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:05 GMT
Connection: keep-alive
]......*......&..p.........../D.|...!.6.uc..L..BW..........*....~..4. 
mW.....#.{*...u..Z.t.'.r.....lg.n.......nI.l ....y.N.|9.0t.e..........
.W...jq0.W......H@......#@b..^.G`aU.o.......a.....w$..o0..%.........!.
P......g....z.:.d..X.w.^.G.lF.'.m/...1B"Yv.H.]..A..O)...ODN.J.$..(.5,|
1a...L......G..c..s.J._....Q..S ........L..$...eD.{.*.O..B...z..>-.
....k3o..;BY.g...d{.e.0u...MA....p.......V.:.`.}r..S..V......E....$...
..|.. f.....#aI.U...............(N............m.......N.:HIm.m........
..T...V..h.VJ|}P(=...}<'.......AU.........C.O......b%%@i6..J\..t...
...7|.E....!..@j.4? .....=.#)7.s7..B2.............%K.V#........v.".o.&
gt;..=).pv.1.\p(......of;..C.C.....g....q...6=.|.d.X.h..o.o...._......
....B]...U.T.Ui...8(Q...m.........<...Q>.=R.^D...=....q.W.u...T.
.....d...1...P$..Ls9;. ....|:...a......`..3..........#2...s.:Y...o=..
.p..U....=BB.,.>.=...2M#XL!.{Zp..0......?]...y.l)O.g..^0x...w...!.C
u65......q. .h~}...........J.....X7.J......M.... ...&$..h.ur...a... ..
.q....I../W....m.B.j_D1`m.......J......TEm&.4.j4rj.(0...d:.J*yP...wM..
...[k........S.Os.tS6..)......=RV y...`.I..)./...!..(.J.$.....`...Aa..
............ct?........A....L...Z....s....xC.Z..3?....5 .....y....Jp..
...Z.g....1..../q.9.)rG.....JNo.....&...l].I.:.D...$...P.h.9.....Z.h&.
kX....I.5z..L..2..>.b).e3..,E..._3..Q..(.S..C..l.N....`....s....gzw
.... W1[...Tc.8..2.t..a..5W3....Z..h....k.H.).2L..T"....Z--$3 ...N...l
X.g.49(aF..v~.sl..8.[x`'.5..V.z.>*.nS..)..R......Dim..O...-.......a
B@s.l...5.o.NH|..UJ...x....5......'....P.H.e..W.n.@..>..qW .%v.

<<< skipped >>>

HEAD /webapps/download/AutoDL?BundleId=62858 HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:06 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://sdlc-esd.sun.com/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994868_79792252bfe2bb47c7b074e793a8e8e9&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com
Connection: close


HEAD /update/1.7.0/1.7.0_04-b22.xml HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl-esd.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "ffe33fb4de10d8aa923628edc20e2f72:1372455334"
Last-Modified: Fri, 28 Jun 2013 21:32:04 GMT
Accept-Ranges: bytes
Content-Length: 1310
Content-Type: application/xml
Expires: Thu, 10 Jul 2014 12:19:04 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:04 GMT
Connection: keep-alive


GET /update/1.7.0/1.7.0_04-b22.xml HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl-esd.sun.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
ETag: "ffe33fb4de10d8aa923628edc20e2f72:1372455334"
Last-Modified: Fri, 28 Jun 2013 21:32:04 GMT
Accept-Ranges: bytes
Content-Length: 1310
Content-Type: application/xml
Expires: Thu, 10 Jul 2014 12:19:04 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:04 GMT
Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<!--
XML file to be staged here: hXXp://javadl-esd.sun.com/update/1.7.0/1.
7.0_04-b22.xml -->..<java-update>.. <information version=
"1.0" xml:lang="en">.. <msi-url>hXXp://javadl.sun.com/weba
pps/download/GetFile/1.7.0_04-b22/windows-i586</msi-url>.. &l
t;sponsor-info>5fd5b6bbbf6e25bf40eaf9616dba4b383aab8ea5</sponsor
-info>.. <jfx-url>hXXp://javadl.sun.com/webapps/download/G
etFile/fx-2.1.0-b21/windows-i586</jfx-url>.. <jfx-info>
a3444653a5a0c58232b3e45e5b93d3acab644f62</jfx-info> .. <
;installaux-name></installaux-name>.. <preload-url>&
lt;/preload-url>.. <run-url></run-url>.. <min-
os></min-os>.. <min-processor-speed></min-process
or-speed>.. <min-memory></min-memory>.. <allow
able-locales></allowable-locales>.. <allowable-geos>
</allowable-geos>.. <ignore-nbi>1</ignore-nbi>
.. <sponsor-preference>;</sponsor-preference>..
<post-status>hXXps://sjremetrics.java.com/b/ss//6</post-statu
s>.. <cntry-lookup>hXXp://rps-svcs.sun.com/services/countr
ylookup</cntry-lookup>.. <online-options>SPWEB=hXXp://j
avadl-esd.sun.com/update/1.7.0/sp-1.7.0_04-b22</online-options>.
. <offline-options>SPWEB=hXXp://javadl-esd.sun.com/update/1.7
.0/sp-1.7.0_04-b22</offline-options>.. </information>

<<< skipped >>>

HEAD /update/1.7.0/sp-1.7.0_04-b22/java_sp.dll HTTP/1.1

User-Agent: JAVACLIENT
Host: javadl-esd.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "fdedf94790f8dd4c726fdab2b8db0d39:1336071669"
Last-Modified: Thu, 03 May 2012 18:43:51 GMT
Accept-Ranges: bytes
Content-Length: 433753
Content-Type: application/octet-stream
Expires: Thu, 10 Jul 2014 12:19:05 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:05 GMT
Connection: keep-alive


GET /webapps/download/GetFile/1.7.0_04-b22/windows-i586/Java3BillDevices_en.jpg HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: javadl.sun.com
Connection: Keep-Alive


HTTP/1.1 404 Not found
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:03 GMT
Content-length: 292
Content-type: text/html
Connection: close
<HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;char
set=ISO-8859-1"><TITLE>Not Found</TITLE></HEAD>.&
lt;H1>Not Found</H1> The requested object does not exist on t
his server. The link you followed is either outdated, inaccurate, or t
he server has been instructed not to let you have it. ..


GET /webapps/download/GetFile/1.7.0_04-b22/windows-i586/jre1.7.0_04-c.msi HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:26 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://javadl.sun.com/webapps/download/AutoDL?BundleId=63693
Connection: close


HEAD /webapps/download/GetFile/fx-2.1.0-b21/windows-i586/fx-runtime.exe HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:05 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://javadl.sun.com/webapps/download/AutoDL?BundleId=62858
Connection: close


GET /webapps/download/AutoDL?BundleId=62858 HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:02:35 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://sdlc-esd.sun.com/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994869_1acf6109cc62ff91658d387b69fa536b&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com
Connection: close


GET /ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe?AuthParam=1404994869_1acf6109cc62ff91658d387b69fa536b&GroupName=JSC&FilePath=/ESD6/JSCDL/javafx/2.1.0-b21/fx-runtime.exe&File=fx-runtime.exe&BHost=javadl.sun.com HTTP/1.1
User-Agent: JAVACLIENT
Connection: Keep-Alive
Host: sdlc-esd.sun.com


HTTP/1.1 200 OK
Server: Apache
ETag: "0239f87a99cc286d8f867a8e8ec17bbb:1333731065"
Last-Modified: Fri, 06 Apr 2012 16:11:59 GMT
Accept-Ranges: bytes
Content-Length: 7732144
Expires: Thu, 10 Jul 2014 12:19:09 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:09 GMT
Connection: keep-alive
Content-Type: application/x-sdlc
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......)fy.m...m...
m....I..l....q..s....q......d...l...d...~...m...e....q..-....q..l....q
..l...Richm...........PE..L.....|O.................`u......pQ.`.....Q.
......@..........................p........v...........................
...........k..4.....................u.................................
................H...........................................UPX0.....p
Q.............................UPX1.....`u...Q..Tu.................@...
.rsrc................Xu.............@.................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.......3.01.UPX!....A$......_...YGu..f..&........[._..n.....PQv{f.y.&g
t;C.....kIH.j5.... .[0^.&G...w.i....b Y......w...,.g.....u....'[.....$
.s.w."&a.. .....1.."..K%..Sh.]..u.......jP.WRd..eC...I..j.e7......aq&l
t;.~"...s4....P.m..q.U-...XI.a.......5... ...}...>:.kjp.m........ B
.sZ..~...A.T.s....G.E.YdG2.8.{~......4.....z.=.....}.@.....t,.........
.M.....z.1..Wt.h..nm.G].{..j.T...|.........\yM...N....1{3 ...8B.x.k.Wh
3.....g.....rk$Rq4%.x.........f.*..lMd.A....o....E..t...?.X.&..y..D>
;..:...w1G&J1...G.f..Z^A.~.y. ....(...........w._$.{..j.Pq........

<<< skipped >>>

HEAD /ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994888_047130706ab52e1ad05735b15ebde6b8&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com HTTP/1.1

User-Agent: JAVACLIENT
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache
Host: sdlc-esd.sun.com


HTTP/1.1 200 OK
Server: Apache
ETag: "b8d60981b9a6e17f3c4709abca6f361f:1336072535"
Last-Modified: Thu, 03 May 2012 08:19:20 GMT
Accept-Ranges: bytes
Content-Length: 16761944
Content-Type: text/plain
Expires: Thu, 10 Jul 2014 12:19:27 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:27 GMT
Connection: keep-alive


GET /ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994889_b677fab484fc9368ec9b85b282bda9b2&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com HTTP/1.1
User-Agent: JAVACLIENT
Connection: Keep-Alive
Host: sdlc-esd.sun.com


HTTP/1.1 200 OK
Server: Apache
ETag: "b8d60981b9a6e17f3c4709abca6f361f:1336072535"
Last-Modified: Thu, 03 May 2012 08:19:20 GMT
Accept-Ranges: bytes
Content-Length: 16761944
Content-Type: text/plain
Expires: Thu, 10 Jul 2014 12:19:28 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 10 Jul 2014 12:19:28 GMT
Connection: keep-alive
].....2.......h3...0w`...*@..v'.......<B*.C..q...O.g.<...w...GnA
..........fX.... .V.2.UQD..9.m...a{A.Nd..f7.....t.w..r....T.<..sl#d
.d.-z.K.\..A./|..d..l-.S...b.............Lo.l....(..... Y....{<.$L%
.n....u.!..f..2..u.k.....0i^..AcO....5C3.]......$V..7../w....{.;.Z.^..
.n.B....g .,...'."n.X.....%T.X#*.J.l..;.9...%.KH)z.,.Q." ..........E.E
...?..k-.y._T...^v...~O..-d.)YG...e....)*yE........#..........H.....9.
B........}...CQ..7Fb..O.....|..9c..oe.F .Y...>.}C0...%......$.@....
......>..n.^f.......e...`..Q#.*7eD.I!..........Y..b...0.m...FYw..=
p.\...d....[...y......MX..\....x.% ..n...\....!...Yz.S....A..H.K..57mj
a.r.^.=.q..4R...6..^...&.%.d.o..9..hH{w..6^8A .CY....*.7..W....N<3,
..q._...7d6D........P..[.....*....eq.a.........<8..;...m.~.M..,....
.qBP....k...n...$....*gN....8.|@j....HGK.C./M.V..n..(}. o..A....U..=..
r...^d..*.z6...VW.....y..V .....R......)Wy#<. ..~F....L6.....O..8.b
@.....Z)..'.g.,|.=4.*...,WT(a.....u.\.`.J.U......Ab..Ae)FV.r.i..A...
..W q....>XA.......6..n..R.).....w..GIQ..?K....K...L....N...G.s.u.
5...cR.!..P...3..6ILC...?.....jB:*.a....G..?e.WS!..... ..}H@.....yF.B.
..L`.].nc.. .CA.....Rm$....A...|3....,.........!L...q..'.R[0oc$.....[.
K...h..?!....."F;.U.W...2.....(....wy.@@.m.Wq.....D.S>....i....B./}
).:..;x....J.O...:...H.}JR,.p..P.....{....2P.(W..""....I.B....e.......
h@.....{....v...1'\<.|..$...'=9.2.....]..v......l.....Z.....!2.....
....x.................D......?;x.2a...6P%....f[. .dg...... ,..-.....OF
7....}z.f.>..-].Ry......9R.U.3;....bu..o-.q....l.D.........^...

<<< skipped >>>

HEAD /webapps/download/GetFile/1.7.0_04-b22/windows-i586/jre1.7.0_04-c.msi HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:25 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://javadl.sun.com/webapps/download/AutoDL?BundleId=63693
Connection: close


GET /webapps/download/AutoDL?BundleId=63693 HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:27 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://sdlc-esd.sun.com/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi?AuthParam=1404994889_b677fab484fc9368ec9b85b282bda9b2&GroupName=JSC&FilePath=/ESD6/JSCDL/jdk/7u4-b22/jre/jre1.7.0_04-c.msi&File=jre1.7.0_04-c.msi&BHost=javadl.sun.com
Connection: close


GET /webapps/download/GetFile/fx-2.1.0-b21/windows-i586/fx-runtime.exe HTTP/1.1
User-Agent: JAVACLIENT
Host: javadl.sun.com
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: Sun Java System Web Server 6.1
Date: Thu, 10 Jul 2014 12:19:06 GMT
Content-length: 0
Content-type: text/html
Location: hXXp://javadl.sun.com/webapps/download/AutoDL?BundleId=62858
Connection: close


HEAD /update/1.7.0/1.7.0_04-b22.xml HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32; jinstall)
Host: javadl-esd.sun.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "ffe33fb4de10d8aa923628edc20e2f72:1372455334"
Last-Modified: Fri, 28 Jun 2013 21:32:04 GMT
Accept-Ranges: bytes
Content-Length: 1310
Content-Type: application/xml
Date: Thu, 10 Jul 2014 12:19:03 GMT
Connection: close
Cache-Control: private


The Worm connects to the servers at the folowing location(s):

jxpiinstall.exe_1228:

`.rsrc
;%u#S
PVSSSSShp
SSSSSSShp
tFSSSSSSShp
SSSSShp
SSSSh
SSShh
PSSSSSSh
jfx-url
msi-url
SPWEB=
http://java.com
%s\Sun\Java\%s
jinstall.cfg
%s/%s.msi
%s\Sun\Java\jre%s\%s.jpg
1.7.0_04
%s/%s_%s.jpg
RegOpenKeyTransactedA
Advapi32.dll
Selected Folder: %s
%s\Java\jre%s\
SOFTWARE\Microsoft\Windows\CurrentVersion
jre1.7.0_04-c.msi
jre1.7.0_04-s.msi
jre1028.MST
jre1031.MST
jre1034.MST
jre1036.MST
jre1040.MST
jre1041.MST
jre1042.MST
jre1046.MST
jre1053.MST
jre2052.MST
%s\%s.msi
%s%s%s
%s%s%s_x64
%sJava\
%s\Sun\
Downloaded File %s is corrupt.
File %s does not exist.
PostStatusUrl
%s\%s
JRERunOnce.exe
Software\MicroSoft\Windows\CurrentVersion\RunOnce
/x {26A24AE4-039D-4CA4-87B4-2F83216010FF} /qb
%s\Sun\Java\jre1.6.0_10.tmpsv\
%s\Sun\Java\jre1.6.0_10\
jre%d.MST
java_sp.dll
fx-runtime.exe
Executed: %s. Return Code: %d
"%s" /bs
"%s" /s
%s wasn't set, but VERSION=%s is installed as consumer.
There should only be one consumer version installed. %s=%s, VERSION=%s
Read MODE for version=%s
Couldn't read MODE for version=%s
%s=%s has an inconsistent MODE=%s.
Read MODE for %s=%s
Couldn't read MODE for %s=%s
VERSION=%s
_installed_consumer_version=%s
Java%sFamilyVersion
%s\Sun\Java\%s%s\%s
%s\Sun\Java\%s%s_x64\%s
lzma.dll
RegCreateKeyTransactedA
RegDeleteKeyTransactedA
FRegDeleteKeyExA
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
The Firefox browser restart flag is set
FIREFOXRESTART
The reinstall error number is: %d
ClearMSIStatus() failed. Return Code: %d, ErrorCode: %d
The install error number is: %d
%s %s
%s PROG=0 ENDDIALOG=0 SKIPLICENSE=1
"%s" %s
"%s" /i "%s" TRANSFORMS="%s" %s
"%s" /i "%s" %s
Second call to java_sp.dll returned: %d
Parsed SPWEB as: %s
"%s\Java\Java Update\jaureg.exe" -r jre %s
install au.msi "%s
AU Install Return Code: %d
%sau.cab
%sau.msi
%s\Sun\Java\AU\
ClearMSIStatus() after get failed. Return Code: %d, ErrorCode: %d
GetMSIStatus() failed. Return Code: %d, ErrorCode: %d
initial ClearMSIStatus() failed. Return Code: %d, ErrorCode: %d
First call to java_sp.dll returned: %d
Exited install ChangeFolder dialog: dlgStatus=%d, return=%d
INSTALLDIR="%s"
2.1.6.0
Msi file from URL=%s/%s.msi, downloaded to=%s
Download failed: from=%s/%s.msi, to=%s
Download Cancelled by User: from=%s/%s.msi, to=%s
what_is_installed.IsNewerConsumerVersionInstalled
jre%s-c
what_is_installed.IsSameVersionConsumerInstalled (2)
what_is_installed.IsSameVersionConsumerInstalled (1)
jre%s-pfrom%s
what_is_installed.IsPatchable
what_is_installed.IsUpdateable
what_is_installed.IsConsumerInstalled
1.7.0_04-b22
jre%s-s
/installurl=
http://javadl-esd.sun.com/update/1.7.0/1.7.0_04-b22.xml
InstallerXmlURL
CryptAcquireContext failed: %d
Error opening file %s
Error: %d
https://
Save Country Code %s after GetCountry()
HTTP/1.1
UrlInfo
UpdateMoreInfoUrl
%s-sp%d
%d.%d
.java.com:
.sun.com:
.java.com/
.sun.com/
http://java.com/
.oracle.com/
http://www.java.com/
http://java.sun.com/
jusched.log
jdk_inst.log
jupdate_%x
Could not open HKEY_LOCAL_MACHINE, SOFTWARE\JavaSoft registry key.
Could not find HKEY_LOCAL_MACHINE, SOFTWARE\JavaSoft registry key.
Could not open the registry key.
RegQueryValueEx(%s): Error:%d, ErrorCode:%d
GetJreMetrics() - RegQueryValueEx(%s): Error:%d, ErrorCode:%d
GetJreMetrics() - RegOpenKeyEx(%s): Error:%d, ErrorCode:%d
GetUpdatedJreMetrics() - RegSetValueEx failed for NewJreVersion: %l Error Code: %d
GetUpdatedJreMetrics() - RegSetValueEx failed for InstallAttempts: %l Error Code: %d
GetUpdatedJreMetrics() - MachineCounted: %s, InstallAttempts: %s, UpdateCount: %s
GetUpdatedJreMetrics() - RegSetValueEx failed for UpdateCount: %l Error Code: %d
GetUpdatedJreMetrics() - RegSetValueEx failed for JreVersion: %l Error Code: %d
GetUpdatedJreMetrics() - RegQueryValueEx for MachineCount failed: %l Error Code: %d
GetUpdatedJreMetrics() - MachineCount registry value does not exist and will not be created because install was not successful. Error: %d
GetUpdatedJreMetrics() - RegSetValue for MachineCount failed: %l Error Code: %d
GetUpdatedJreMetrics() - RegCreateKeyEx failed: %l Error Code: %d
IE.HTTP
FirefoxURL
Firefox
http\shell\open\ddeexec\Application
chrome.exe
http\shell\open\command
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
VersionXmlURL
;jfx|%d
;jre|%d
nonhttpspasswd
nonprodpasswd
https://sjremetrics.java.com
reportsuiteid
Export Denied
Windows
Mozilla/4.0 (compatible; Win32; jinstall)
\msi.dll
\msiexec.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer
%s\msi.tmp
%s failed with error %d: %s
Installer : Wrapper.WriteFile (In small chunks)
Installer : Wrapper.CloseHandle
Installer : Wrapper.CreateFile
/x {4A03706F-666A-4037-7777-5F2748764D10} /qn
\WinInit.Ini
-- Start in MoveFileOnReboot: %s to %s --
%s%s\%s
firefox.exe
iexplore.exe
http://java.com/verify
SOFTWARE\JavaSoft\Java Runtime Environment\1.7.0_04\MSI
mozilla.org
Mozilla Firefox
Mozilla
"%s\firefox.exe" -new-window http://java.com/verify
jp2ssv_patch.dll
jp2ssv.dll
ssv_patch.dll
ssv.dll
The Firefox browser will be restarted
The Firefox browser will be closed
GetSystemDirectory failed. Return Code: %d, ErrorCode: %d
LoadLibrary(%s) failed. ErrorCode: %d
_snprintf failed. ErrorCode: %d
SetDllDirectory() failed. ErrorCode: %d
shell32.dll
gdiplus.dll
operator
GetProcessWindowStation
GdiplusShutdown
zcÁ
%Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04
http://rps-svcs.sun.com/services/countrylookup
https://sjremetrics.java.com/b/ss//6
%Documents and Settings%\%current user%\Local Settings\Temp\jxpiinstall.exe
...YYY
Y%DnP
Additional Font and Media Support
{4ADD1C35-72F4-4AB8-9FF4
NameTableTypeActionTextActionDescriptionTemplateCostInitializeComputing space requirementsAppSearchSearching for installed applicationsProperty: [1], Signature: [2]BindImageBinding executablesFile: [1]CCPSearchSearching for qualifying productsCostFinalizeFileCostInstallAdminPackageCopying files to the networkFile: [1], Directory: [9], Size: [6]InstallFilesCopying new filesFile: [1], Directory: [9], Size: [6]InstallValidateValidating installCreateShortcutsCreating shortcutsShortcut: [1]PublishComponentsPublishing qualified componentsComponent ID: [1], Qualifier: [2]PublishFeaturesPublishing product featuresFeature: [1]PublishProductPublishing product informationRegisterClassInfoRegistering class serversClass ID: [1]RegisterExtensionInfoRegistering extension serversExtension: [1]RegisterMIMEInfoRegistering MIME infoMIME Content Type: [1], Extension: [2]RegisterProgIdInfoRegistering program identifiersProgID: [1]AllocateRegistrySpaceAllocating registry spaceFree space: [1]CreateFoldersCreating foldersFolder: [1]DeleteServicesDeleting servicesService: [1]DuplicateFilesCreating duplicate filesFindRelatedProductsSearching for related applicationsFound application: [1]InstallODBCInstalling ODBC componentsInstallServicesInstalling new servicesService: [2]LaunchConditionsEvaluating launch conditionsMigrateFeatureStatesMigrating feature states from related applicationsApplication: [1]MoveFilesMoving filesPatchFilesPatching filesFile: [1], Directory: [2], Size: [3]ProcessComponentsUpdating component registrationRegisterComPlusRegistering COM  Applications and ComponentsAppId: [1]{{, AppType: [2], Users: [3], RSN: [4]}}RegisterProductRegistering product[1]RegisterTypeLibrariesRegistering type librariesLibID: [1]RegisterUserRegistering userRemoveDuplicateFilesRemoving duplicated filesFile: [1], Directory: [9]RemoveEnvironmentStringsUpdating environment stringsName: [1], Value: [2], Action [3]RemoveExistingProductsRemoving applicationsApplication: [1], Command line: [2]RemoveFilesRemoving filesRemoveFoldersRemoving folders
RemoveIniValuesRemoving INI file entriesFile: [1], Section: [2], Key: [3], Value: [4]RemoveODBCRemoving ODBC componentsRemoveRegistryValuesRemoving system registry valuesKey: [1], Name: [2]RemoveShortcutsRemoving shortcutsRMCCPSearchSelfRegModulesRegistering modulesFile: [1], Folder: [2]SelfUnregModulesUnregistering modulesSetODBCFoldersInitializing ODBC directoriesStartServicesStarting servicesStopServicesStopping servicesUnpublishComponentsUnpublishing Qualified ComponentsUnpublishFeaturesUnpublishing product featuresUnregisterClassInfoUnregister class serversUnregisterComPlusUnregistering COM  Applications and ComponentsAppId: [1]{{, AppType: [2]}}UnregisterExtensionInfoUnregistering extension serversUnregisterMIMEInfoUnregistering MIME infoUnregisterProgIdInfoUnregistering program identifiersUnregisterTypeLibrariesUnregistering type librariesWriteEnvironmentStringsWriteIniValuesWriting INI file valuesWriteRegistryValuesWriting system registry valuesKey: [1], Name: [2], Value: [3]AdvertiseAdvertising applicationcaCreateVRootsCreating IIS Virtual Roots...caRemoveVRootsRemoving IIS Virtual Roots...GenerateScriptGenerating script operations for action:InstallSFPCatalogFileInstalling system catalogFile: [1], Dependencies: [2]RegisterFontsRegistering fontsFont: [1]RollbackRolling back action:RollbackCleanupRemoving backup filesUnmoveFilesRemoving moved filesUnpublishProductUnpublishing product informationUnregisterFontsUnregistering fontsDirectoryDirectory_ParentDefaultDirALLUSERSPROFILETARGETDIR.:ALLUSE~1|All UsersAdminToolsFolder.:Admint~1|AdminToolsAppDataFolder.:APPLIC~1|Application DataCommonAppDataFolder.:Common~1|CommonAppDataCommonFiles64Folder.:Common64ISUpdateServiceFolderISCommonFilesFolderUPDATE~1|UpdateServiceCommonFilesFolderInstal~1|InstallShieldINSTALLDIRaufolder.JavaJavaUp~1|Java Update.:CommonDesktopFolder.:DesktopFavoritesFolder.:FAVORI~1|FavoritesFontsFolder.:FontsGlobalAssemblyCache.:Global~1|GlobalAssemblyCacheISYourProductDirISYourCompanyDirYOURPR~1|Your Product NameProgramFilesFolderYOURCO~1|Your Company Name.:PROGRA~1|program filesLocalAppDataFolder.:LocalA~1|LocalAppDataMyPicturesFolder.:MyPict~1|MyPicturesPersonalFolder.:PersonalPrimaryVolumePath.:Primar~1|PrimaryVolumePathProgramFiles64Folder.:Prog64~1|Program Files 64ProgramMenuFolder.:ProgramsSendToFolder.:SendToStartMenuFolder.:STARTM~1|Start MenuStartupFolder.:StartUpSystem16Folder.:SystemSystem64Folder.:System64SystemFolder.:System32TempFolder.:TempTemplateFolder.:ShellNewUSERPROFILE.:USERPR~1|UserProfileWindowsFolder.:WindowsWindowsVolume.:WinRootSourceDirFileComponent_FileNameFileSizeVersionLanguageAttributesSequenceaucheckaucheckcomponentjaucheck.exe2.1.6.01033jauregjauregcomponentjaureg.exejucheckjucheckcomponentjucheck.exejuschedjuschedcomponentjusched.exe0task.xmloemupdate32task64.xmloemupdate64RemoveFileFileKeyDirPropertyInstallModeTypeLibLibIDDirectory_Feature_CostLockPermissionsLockObjectDomainUserPermissionUpgradeUpgradeCodeVersionMinVersionMaxRemoveActionPropertyISSelfRegOrderCmdLineRegLocatorSignature_RootKeyAdvtUISequenceConditionMoveFileSourceNameDestNameSourceFolderDestFolderOptionsInstallExecuteSequenceREMOVEEXISTINGRemoveRegKeysREMOVEunregautaskVersionNT>=600 And REMOVESignalJuschedInstallInitializeAddRegKeysNOT REMOVEregautask64OEMUPDATE=1 And VersionNT>=600 And Not Installed And Msix64<>""setAllUsersProfile2KVersionNT >= 500setUserProfileNTVersionNTregautaskOEMUPDATE=1 And VersionNT>=600 And Not Installed And Not Msix64<>""SetAllUsersProfileNTVersionNT = 400InstallFinalizeValidateProductIDModuleComponentsComponentModuleIDAppIdRemoteServerNameLocalServiceServiceParametersDllSurrogateActivateAtStorageRunAsInteractiveUserBillboardOrderingErrorMessage{{Fatal error: }}Error [1].Warning [1].Info [1].Internal Error [1]. [2]{, [3]}{, [4]}{{Disk full: }}Action [Time]: [1]. [2][ProductName]{[2]}{, [3]}{, [4]}Message type: [1], Argument: [2]=== Logging started: [Date] [Time] ====== Logging stopped: [Date] [Time] ===Action start [Time]: [1].Action ended [Time]: [1]. Return value [2].Time remaining: {[1] minutes }{[2] seconds}Out of memory. Shut down other applications before retrying.Installer is no longer responding.Installer terminated prematurely.Please wait while Windows configures Java AutoUpdateGathering required information...Removing older versions of this applicationPreparing to remove older versions of this application{[ProductName] }Setup completed successfully.{[ProductName] }Setup failed.Error reading from file: [2]. {{ System error [3].}} Verify that the file exists and that you can access it.Cannot create the file [3]. A directory with this name already exists. Cancel the installation and try installing to a different location.Please insert the disk: [2]The installer has insufficient privileges to access this directory: [2]. The installation cannot continue. Log on as an administrator or contact your system administrator.Error writing to file [2]. Verify that you have access to that directory.Error reading from file [2]. Verify that the file exists and that you can access it.Another application has exclusive access to the file [2]. Please shut down all other applications, then click Retry.There is not enough disk space to install thi file [2]. Free some disk space and click Retry, or click Cancel to exit.Source file not found: [2]. Verify that the file exists and that you can access it.Error reading from file: [3]. {{ System error [2].}} Verify that the file exists and that you can access it.Error writing to file: [3]. {{ System error [2].}} Verify that you have access to that directory.Source file not found{{(cabinet)}}: [2]. Verify that the file exists and that you can access it.Cannot create the directory [2]. A file with this name already exists. Please rename or remove the file and click Retry, or click Cancel to exit.The volume [2] is currently unavailable. Please select another.The specified path [2] is unavailable.Unable to write to the specified folder [2].A network error occurred while attempting to read from the file [2]An error occurred while attempting to create the directory [2]A network error occurred while attempting to create the directory [2]A network error occurred while attempting to open the source file cabinet [2].The specified path is too long [2].The Installer has insufficient privileges to modify the file [2].A portion of the path [2] exceeds the length allowed by the system.The path [2] contains words that are not valid in folders.The path [2] contains an invalid character.[2] is not a valid short file name.Error getting file security: [3] GetLastError: [2]Invalid Drive: [2]Error applying patch to file [2]. It has probably been updated by other means, and can no longer be modified by this patch. For more information contact your patch vendor. {{System Error: [3]}}Could not create key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not open key: [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not delete value [2] from key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not delete key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not read value [2] from key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not write value [2] to key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not get value names for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not get sub key names for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not read security information for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not increase the available r@H?;
-F91E258B4EC2}
Windows Installer XML v2.0.5805.0 (candle/light)
egistry space. [2] KB of free registry space is required for the installation of this application.Another installation is in progress. You must complete that installation before continuing this one.Error accessing secured data. Please make sure the Windows Installer is configured properly and try the installation again.User [2] has previously initiated an installation for product [3]. That user will need to run that installation again before using that product. Your current installation will now continue.User [2] has previously initiated an installation for product [3]. That user will need to run that installation again before using that product.Out of disk space -- Volume: '[2]'; required space: [3] KB; available space: [4] KB. Free some disk space and retry.Are you sure you want to cancel?The file [2][3] is being held in use{ by the following process: Name: [4], ID: [5], Window Title: [6]}. Close that application and retry.The product [2] is already installed, preventing the installation of this product. The two products are incompatible.Out of disk space -- Volume: [2]; required space: [3] KB; available space: [4] KB. If rollback is disabled, enough space is available. Click Cancel to quit, Retry to check available disk space again, or Ignore to continue without rollback.Could not access network location [2].The following applications should be closed before continuing the installation:Could not find any previously installed compliant products on the machine for installing this product.The key [2] is not valid. Verify that you entered the correct key.The installer must restart your system before configuration of [2] can continue. Click Yes to restart now or No if you plan to restart later.You must restart your system for the configuration changes made to [2] to take effect. Click Yes to restart now or No if you plan to restart later.An installation for [2] is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?A previous installation for this product is in progress. You must undo the changes made by that installation to continue. Do you want to undo those changes?No valid source could be found for product [2]. The Windows Installer cannot continue.Installation operation completed successfully.Installation operation failed.Product: [2] -- [3]You may either restore your computer to its previous state or continue the installation later. Would you like to restore?An error occurred while writing installation information to disk. Check to make sure enough disk space is available, and click Retry, or Cancel to end the installation.One or more of the files required to restore your computer to its previous state could not be found. Restoration will not be possible.[2] cannot install one of its required products. Contact your technical support group. {{System Error: [3].}}The older version of [2] cannot be removed. Contact your technical support group. {{System Error [3].}}The path [2] is not valid. Please specify a valid path.There is no disk in drive [2]. Please insert one and click Retry, or click Cancel to go back to the previously selected volume.There is no disk in drive [2]. Please insert one and click Retry, or click Cancel to return to the browse dialog and select a different volume.The folder [2] does not exist. Please enter a path to an existing folder.You have insufficient privileges to read this folder.A valid destination folder for the installation could not be determined.Error attempting to read from the source installation database: [2].Scheduling reboot operation: Renaming file [2] to [3]. Must reboot to complete operation.Scheduling reboot operation: Deleting file [2]. Must reboot to complete operation.Module [2] failed to register. HRESULT [3]. Contact your support personnel.Module [2] failed to unregister. HRESULT [3]. Contact your support personnel.Failed to cache package [2]. Error: [3]. Contact your support personnel.Could not register font [2]. Verify that you have sufficient permissions to install fonts, and that the system supports this font.Could not unregister font [2]. Verify that you have sufficient permissions to remove fonts.Could not create shortcut [2]. Verify that the destination folder exists and that you can access it.Could not remove shortcut [2]. Verify that the shortcut file exists and that you can access it.Could not register type library for file [2]. Contact your support personnel.Could not unregister type library for file [2]. Contact your support personnel.Could not update the INI file [2][3]. Verify that the file exists and that you can access it.Could not schedule file [2] to replace file [3] on reboot. Verify that you have write permissions to file [3].Error removing ODBC driver manager, ODBC error [2]: [3]. Contact your support personnel.Error installing ODBC driver manager, ODBC error [2]: [3]. Contact your support personnel.Error removing ODBC driver [4], ODBC error [2]: [3]. Verify that you have sufficient privileges to remove ODBC drivers.Error installing ODBC driver [4], ODBC error [2]: [3]. Verify that the file [4] exists and that you can access it.Error configuring ODBC data source [4], ODBC error [2]: [3]. Verify that the file [4] exists and that you can access it.Service [2] ([3]) failed to start. Verify that you have sufficient privileges to start system services.Service [2] ([3]) could not be stopped. Verify that you have sufficient privileges to stop system services.Service [2] ([3]) could not be deleted. Verify that you have sufficient privileges to remove system services.Service [2] ([3]) could not be installed. Verify that you have sufficient privileges to install system services.Could not update environment variable [2]. Verify that you have sufficient privileges to modify environment variables.You do not have sufficient privileges to complete this installation for all users of the machine. Log on as an administrator and then retry this installation.Could not set file security for file [3]. Error: [2]. Verify that you have sufficient privileges to modify the security permissions for this file.Component Services (COM  1.0) are not installed on this computer. This installation requires Component Services in order to complete successfully. Component Services are available on Windows 2000.Error registering COM  application. Contact your support personnel for more information.Error unregistering COM  application. Contact your support personnel for more information.The description for service '[2]' ([3]) could not be changed.The Windows Installer service cannot update the system file [2] because the file is protected by Windows. You may need to update your operating system for this program to work correctly. {{Package version: [3], OS Protected version: [4]}}The Windows Installer service cannot update the protected Windows file [2]. {{Package version: [3], OS Protected version: [4], SFP Error: [5]}}This setup requires Internet Information Server 4.0 or higher for configuring IIS Virtual Roots. Please make sure that you have IIS 4.0 or higher.This setup requires Administrator privileges for configuring IIS Virtual Roots.MIMEContentTypeExtension_CLSIDServiceInstallDisplayNameServiceTypeStartTypeErrorControlLoadOrderGroupDependenciesStartNamePasswordArgumentsClassContextProgId_DefaultAppId_FileTypeMaskIcon_IconIndexDefInprocHandlerArgumentIniLocatorSectionFieldCompLocatorComponentIdBBControlBillboard_XYWidthHeightTextProgIdProgId_ParentClass_ControlDialog_PropertyControl_NextHelpSetupProgressCancelPushButtonBack< &BackNext&Next >DlgDescThe program features you selected are being installed.DlgDesc2The program features you selected are being uninstalled.DlgTextPlease wait while the Install Wizard installs [ProductName]. This may take several minutes.DlgText2Please wait while the Wizard uninstalls [ProductName]. This may take several minutes.DlgTitle{&MSSansBold8}Installing Java Auto Update SoftwareDlgTitle2{&MSSansBold8}UninstallingActionProgress95ProgressBarProgress doneBannerLineLineDlgLineLbSec(Hidden for now)Sec.LbStatusStatus:SetupIconIconNewBinary9ShowTime(Hidden for now)TextTime)Hidden for now)Estimated time remaining:SetupCompleteErrorBaseimageBitmapImageFinishText2Click Finish to exit the wizard.RestContText2Text1TextLine1TextLine2The wizard was interrupted before [ProductName] could be completely installed.SetupCompleteSuccessOKSetupInterruptedSetupErrorErrorText&YesN&NoA&AbortC&CancelI&IgnoreO&OKR&RetryCancelSetupNoYesAre you sure you want to cancel [ProductName] installation?FilesInUseRetryIgnoreExit&ExitListListBoxFileInUseProcessSome files that need to be updated are currently in use.The following applications are using files that need to be updated by this setup. Close these applications and click Retry to continue.{&MSSansBold8}Files in UseDialogHCenteringVCenteringTitleControl_FirstControl_DefaultControl_Cancel[ProductName] - ProgressJava SetupDuplicateFileFile_SignatureMinVersionMaxVersionMinSizeMaxSizeMinDateMaxDateLanguagesRadioButtonValueSFPCatalogCatalogDependencyShortcutTargetHotkeyShowCmdWkDirDisplayResourceDLLDisplayResourceIdDescriptionResourceDLLDescriptionResourceIdDrLocatorParentPathDepthIsolatedComponentComponent_SharedComponent_ApplicationAdminExecuteSequenceTextStyleFaceNameSizeColorStyleBitsTahoma8TahomaArial8ArialArial9ArialBlue10ArialBlueStrike10CourierNew8Courier NewCourierNew9MSGothic9MS GothicMSSansBold8MSSansSerif8MS Sans SerifMSSansSerif9MSSGreySerif8MSSWhiteSerif8Tahoma10Tahoma9TahomaBold10TahomaBold8Times8Times New RomanTimes9TimesItalic12TimesItalicBlue10TimesRed16MsiPatchCertificatePatchCertificateDigitalCertificate_CustomActionSource[%ALLUSERSPROFILE][%SystemRoot]\Profiles\All Users[%USERPROFILE]auutilsDLLRegToTaskUnregToTaskRegToTask64bitInstallAUpdateUninstallAUpdateShutdownJuschedMediaDiskIdLastSequenceDiskPromptCabinetVolumeLabel1DISK1MsiFileHashHashPart1HashPart2HashPart3HashPart4FeatureFeature_ParentDisplayLevelauAU2.0ODBCTranslatorTranslatorFile_SetupEventMappingGBbytesUITextIniFileSetProgressAdminInstallFinalizeProgressAttributeEventControl_KBMBAbsentPathMenuAbsentThis feature will not be available.MenuAdvertiseDon't install this feature now.MenuAllCDThis feature, and all subfeatures, will be installed to run from the CD.MenuAllLocalThis feature, and all subfeatures, will be installed on local hard drive.MenuAllNetworkThis feature, and all subfeatures, will be installed to run from the network.MenuCDThis feature will be installed to run from CD.MenuLocalThis feature will be installed on local hard drive.MenuNetworkThis feature will be installed to run from network.NewFolderFldr|New FolderSelAbsentAbsentThis feature will remain uninstalled.SelAbsentAdvertiseThis feature will be set to be installed when required.SelAbsentCDSelAbsentLocalThis feature will be installed on the local hard drive.SelAbsentNetworkThis feature will be installed to run from the network.SelAdvertiseAbsentThis feature will become unavailable.SelAdvertiseAdvertiseWill be installed when required.SelAdvertiseCDThis feature will be available to run from CD.SelAdvertiseLocalThis feature will be installed on your local hard drive.SelAdvertiseNetworkThis feature will be available to run from the network.SelCDAbsentThis feature will be uninstalled completely, and you won't be able to run it from CD.SelCDAdvertiseThis feature was run from the CD but will be set to be installed when required.SelCDCDThis feature will continue to be run from the CDSelCDLocalThis feature was run from the CD but will be installed on the local hard drive.SelChildCostNegThis feature frees up [1] on your hard drive.SelChildCostPosThis feature requires [1] on your hard drive.SelCostPendingCompiling cost for this feature...SelLocalAbsentThis feature will be completely removed.SelLocalAdvertiseThis feature will be removed from your local hard drive but will be set to be installed when required.SelLocalCDThis feature will be removed from your local hard drive but will still be available to run from CD.SelLocalLocalThis feature will remain on your local hard drive.SelLocalNetworkThis feature will be removed from your local hard drive, but will be still available to run from the network.SelNetworkAbsentThis feature will be uninstalled completely, and you won't be able to run it from the network.SelNetworkAdvertiseThis feature was run from the network but will be installed when required.SelNetworkLocalThis feature was run from the network but will be installed on the local hard drive.SelNetworkNetworkThis feature will continue to be run from the networkSelParentCostNegNegThis feature frees up [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures free up [4] on your hard drive.SelParentCostNegPosThis feature frees up [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures require [4] on your hard drive.SelParentCostPosNegThis feature requires [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures free up [4] on your hard drive.SelParentCostPosPosThis feature requires [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures require [4] on your hard drive.TimeRemainingTime remaining: {[1] min }[2] secVolumeCostAvailableAvailableVolumeCostDifferenceDifferencesVolumeCostRequiredRequiredVolumeCostSizeDisk SizeVolumeCostVolumeVolumeAdvtExecuteSequenceComplusExpTypeDataPublishComponentQualifierAppDataRegistryRegistry1SOFTWARE\Microsoft\Windows\CurrentVersion\RunSunJavaUpdateSched"[INSTALLDIR]jusched.exe"setrunkeyRegistry3SOFTWARE\JavaSoft\Auto UpdateAUVersionRemoveIniFileMsiAssemblyFile_ManifestFile_ApplicationCheckBoxKeyPath{96DFAA25-C456-4470-9638-DA1A52F67C9A}OEMUPDATE=0 AND DISABLE=0{4D5CF522-0BDC-475C-987E-5F111CD11028}{4D5AF522-0BDC-475C-987E-5F111CD11028}{4D5CF522-0BDA-475C-987E-5F111CD11028}{4D5CF522-0BDB-475C-987E-5F111CD11028}{F51BB9DA-7CA1-4D67-B967-E8FDA5208B69}{4CC5121E-C213-4A85-8A9F-6D0311F54B75}InstallUISequenceResolveSourceNot Installed And Not PATCHIsolateComponentsSDKSILENT=0 And ENDDIALOG=1SDKSILENT=0ExecuteAction(Not Installed) And (Installed)ODBCSourceAttributeDataSource_ControlEventSpawnDialogEndDialogErrorYesErrorNoErrorAbortErrorCancelErrorIgnoreErrorOkErrorRetryReturnServiceControlWaitLaunchConditionODBCAttributeDriver_MsiAssemblyNameReserveCostReserveKeyReserveFolderReserveLocalReserveSourceFeatureComponentsFileSFPCatalogSFPCatalog_CreateFolderExtensionProgId_MIME_PatchPatchSizeHeaderStreamRef_ISDFLInfoLongIdSelfRegODBCDriverDriverAdminUISequenceVerbCommandPatchPackagePatchIdMedia_ManufacturerSun Microsystems, Inc.ProductCode{4A03706F-666A-4037-7777-5F2748764D10}ProductLanguageProductNameJava Auto UpdaterProductVersion{4CAACC5A-B5F0-4B96-7777-CA8F526664C7}DefaultUIFontErrorDialogProgressType0installDialogCaptionInstallShield for Windows InstallerISVROOT_PORT_NOARPNOREMOVEDisplayNameMinimalMinimalARPNOMODIFYRebootYesNoApplicationUsersAllUsersDWUSINTERVAL30ProductIDnoneISCHECKFORPRODUCTUPDATESReinstallModeTextomus_IsMaintenanceChange_IsSetupTypeMinTypicalARPNOREPAIRDisplayNameCustomCustomProgressType2installedProgressType3installsARPSYSTEMCOMPONENTISSCRIPT_VERSION_OLDThe InstallScript engine on this machine is older than the version required to run this setup. If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.ISSCRIPT_VERSION_MISSINGThe InstallScript engine is missing from this machine. If available, please run ISScript.msi, or contact your support personnel for further assistance.DisplayNameTypicalDisplay_IsBitmapDlgOEMUPDATEDISABLEAgreeToLicensePIDTemplate12345<###-%%%%%%%>@@@@@INSTALLLEVEL100InstallChoiceARSetupTypeProgressType1InstallingMsiDigitalCertificateDigitalCertificateCertDataBinaryControlConditionShowProgressType2="installed"ProgressType2="uninstalled"ProgressType3="installs"ProgressType3="uninstalls"ProgressType1="Installing"ProgressType1="Uninstalling"RemoveRegistryODBCDataSourceDataSourceDriverDescriptionRegistrationMsiDigitalSignatureSignObjectHashListViewBinary_ComboBoxEnvironmentFontFontTitle_ValidationColumnNullableMinValueMaxValueKeyTableKeyColumnCategorySetIdentifierName of action to be described.Localized description displayed in progress dialog and log when action is executing.Optional localized format template used to format action data records for display during action execution.Unique identifier for directory entry, primary key. If a property by this name is defined, it contains the full path to the directory.Reference to the entry in this table specifying the default parent directory. A record parented to itself or with a Null parent represents a root of the install tree.The default sub-path under parent's path.Primary key, non-localized token, must match identifier in cabinet. For uncompressed files, this field is ignored.Foreign key referencing Component that controls the file.FilenameFile name used for installation, may be localized. This may contain a "short name|long name" pair.Size of file in bytes (long integer).Version string for versioned files; Blank for unversioned files.List of decimal language Ids, comma-separated if more than one.Integer containing bit flags representing file attributes (with the decimal value of each bit position in parentheses)Sequence with respect to the media images; order must track cabinet order.Primary key used to identify a particular file entryForeign key referencing Component that controls the file to be removed.WildCardFilenameName of the file to be removed.Name of a property whose value is assumed to resolve to the full pathname to the folder of the file to be removed.1;2;3Installation option, one of iimEnum.GuidThe GUID that represents the library.The language of the library.Required foreign key into the Component Table, specifying the component for which to return a path when called through LocateComponent.The version of the library. The minor version is in the lower 8 bits of the integer. The major version is in the next 16 bits. Optional. The foreign key into the Directory table denoting the path to the help file for the type library.Required foreign key into the Feature Table, specifying the feature to validate or install in order for the type library to be operational.The cost associated with the registration of the typelib. This column is currently optional.Foreign key into Registry or File tableDirectory;File;RegistryReference to another table nameFormattedDomain name for user whose permissions are being set. (usually a property)User for permissions to be set. (usually a property)Permission Access mask. Full Control = 268435456 (GENERIC_ALL = 0x10000000)The UpgradeCode GUID belonging to the products in this set.The minimum ProductVersion of the products in this set. The set may or may not include products with this particular version.The maximum ProductVersion of the products in this set. The set may or may not include products with this particular version.A comma-separated list of languages for either products in this set or products not in this set.The attributes of this product set.The list of features to remove when uninstalling a product from this set. The default is "ALL".UpperCaseThe property to set when a product in this set is found.The table key. The Signature_ represents a unique file signature and is also the foreign key in the Signature table. If the type is 0, the registry values refers a directory, and _Signature is not a foreign key.The predefined root key for the registry value, one of rrkEnum.RegPathThe key for the registry value.The registry value name.An integer value that determines if the registry value is a filename or a directory location or to be used as is w/o interpretation.Name of action to invoke, either in the engine or the handler DLL.Optional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.Number that determines the sort order in which the actions are to be executed. Leave blank to suppress action.Primary key that uniquely identifies a particular MoveFile recordIf this component is not "selected" for installation or removal, no action will be taken on the associated MoveFile entryName of the source file(s) to be moved or copied. Can contain the '*' or '?' wildcards.Name to be given to the original file after it is moved or copied. If blank, the destination file will be given the same name as the source fileName of a property whose value is assumed to resolve to the full path to the source directoryName of a property whose value is assumed to resolve to the full path to the destination directoryInteger value specifying the MoveFile operating mode, one of imfoEnumSignature;RegLocator;IniLocator;DrLocator;CompLocatorThe Signature_ represents a unique file signature and is also the foreign key in the Signature, RegLocator, IniLocator, CompLocator and the DrLocator tables.Component contained in the module.ModuleSignatureModule containing the component.Default language ID for module (may be changed by transform).Name of the billboard.An external key to the Feature Table. The billboard is shown only if this feature is being installed.The name of an action. The billboard is displayed during the progress messages received from this action.A positive integer. If there is more than one billboard corresponding to an action they will be shown in the order defined by this column.Integer error number, obtained from header file IError(...) macros.Error formatting template, obtained from user ed. or localizers.Primary key. Context identifier, typically "type/format".Optional associated extension (without dot)Optional associated CLSID.Primary key, non-localized token.Internal Name of the ServiceExternal Name of the ServiceType of the serviceSeverity of error if service fails to startOther services this depends on to start. Separate by [~], and end with [~][~]User or object name to run service aspassword to run service with. (with StartName)Arguments to include in every start of the service, passed to WinMainRequired foreign key into the Component Table that controls the startup of the serviceDescription of service.The CLSID of an OLE factory.The numeric server context for this server. CLSCTX_xxxxOptional ProgId associated with this CLSID.Localized description for the Class.Optional AppID containing DCOM information for associated application (string GUID).Optional string containing information for the HKCRthis CLSID) key. If multiple patterns exist, they must be delimited by a semicolon, and numeric subkeys will be generated: 0,1,2...Optional foreign key into the Icon Table, specifying the icon file associated with this CLSID. Will be written under the DefaultIcon key.Optional icon index.Optional default inproc handler. Only optionally provided if Context=CLSCTX_LOCAL_SERVER. Typically "ole32.dll" or "mapi32.dll"optional argument for LocalServers.Required foreign key into the Feature Table, specifying the feature to validate or install in order for the CLSID factory to be operational.Class registration attributes.The table key. The Signature_ represents a unique file signature and is also the foreign key in the Signature table.The .INI file name.Section name within in file (within square brackets in INI file).Key value (followed by an equals sign in INI file).The field in the .INI line. If Field is null or 0 the entire line is read.An integer value that determines if the .INI value read is a filename or a directory location or to be used as is w/o interpretation.A string GUID unique to this component, version, and language.A boolean value that determines if the registry value is a filename or a directory location.External key to the Billboard table, name of the billboard.Name of the control. This name must be unique within a billboard, but can repeat on different billboard.The type of the control.Horizontal coordinate of the upper left corner of the bounding rectangle of the control.Vertical coordinate of the upper left corner of the bounding rectangle of the control.Width of the bounding rectangle of the control.Height of the bounding rectangle of the control.A 32-bit word that specifies the attribute flags to be applied to this control.A string used to set the initial text contained within a control (if appropriate).The Program Identifier. Primary key.The Parent Program Identifier. If specified, the ProgId column becomes a version independent prog id.The CLSID of an OLE factory corresponding to the ProgId.Localized description for the Program identifier.Optional foreign key into the Icon Table, specifying the icon file associated with this ProgId. Will be written under the DefaultIcon key.External key to the Dialog table, name of the dialog.Name of the control. This name must be unique within a dialog, but can repeat on different dialogs. The name of a defined property to be linked to this control. The name of an other control on the same dialog. This link defines the tab order of the controls. The links have to form one or more cycles!The help strings used with the button. The text is optional. Name of the dialog.Horizontal position of the dialog on a 0-100 scale. 0 means left end, 100 means right end of the screen, 50 center.Vertical position of the dialog on a 0-100 scale. 0 means top end, 100 means bottom end of the screen, 50 center.Width of the bounding rectangle of the dialog.Height of the bounding rectangle of the dialog.A 32-bit word that specifies the attribute flags to be applied to this dialog.A text string specifying the title to be displayed in the title bar of the dialog's window.Defines the control that has the focus when the dialog is created.Defines the default control. Hitting return is equivalent to pushing this button.Defines the cancel control. Hitting escape or clicking on the close icon on the dialog is equivalent to pushing this button.Foreign key referencing Component that controls the duplicate file.Foreign key referencing the source file to be duplicated.Filename to be given to the duplicate file.Name of a property whose value is assumed to resolve to the full pathname to a destination folder.The table key. The Signature represents a unique file signature.The name of the file. This may contain a "short name|long name" pair.The minimum version of the file.The maximum version of the file.The minimum size of the file.The maximum size of the file. The minimum creation date of the file.The maximum creation date of the file.The languages supported by the file.A named property to be tied to this radio button. All the buttons tied to the same property become part of the same group.A positive integer used to determine the ordering of the items within one list..The integers do not have to be consecutive.The value string associated with this button. Selecting the button will set the associated property to this value.The horizontal coordinate of the upper left corner of the bounding rectangle of the radio button.The vertical coordinate of the upper left corner of the bounding rectangle of the radio button.The width of the button.The height of the button.The visible title to be assigned to the radio button.The help strings used with the button. The text is optional.File name for the catalog.SFP CatalogParent catalog - only used by SFPForeign key into the Directory table denoting the directory where the shortcut file is created.The name of the shortcut to be created.Foreign key into the Component table denoting the component whose selection gates the the shortcut creation/deletion.The shortcut target. This is usually a property that is expanded to a file or a folder that the shortcut points to.The command-line arguments for the shortcut.The description for the shortcut.The hotkey for the shortcut. It has the virtual-key code for the key in the low-order byte, and the modifier flags in the high-order byte. Foreign key into the File table denoting the external icon file for the shortcut.The icon index for the shortcut.1;3;7The show command for the application window.The following values may be used.Name of property defining location of working directory.The Formatted string providing the full path to the language neutral file containing the MUI Manifest.The display name index for the shortcut. This must be a non-negative number.The description name index for the shortcut. This must be a non-negative number.The Signature_ represents a unique file signature and is also the foreign key in the Signature table.The parent file signature. It is also a foreign key in the Signature table. If null and the Path column does not expand to a full path, then all the fixed drives of the user system are searched using the Path.AnyPathThe path on the user system. This is a either a subpath below the value of the Parent or a full path. The path may contain properties enclosed within [ ] that will be expanded.The depth below the path to which the Signature_ is recursively searched. If absent, the depth is assumed to be 0.Key to Component table item to be isolatedKey to Component table item for applicationName of the style. The primary key of this table. This name is embedded in the texts to indicate a style change.A string indicating the name of the font used. Required. The string must be at most 31 characters long.The size of the font used. This size is given in our units (1/12 of the system font height). Assuming that the system font is set to 12 point size, this is equivalent to the point size.A long integer indicating the color of the string in the RGB format (Red, Green, Blue each 0-255, RGB = R   256*G   256^2*B).A combination of style bits.Primary key, name of action, normally appears in sequence table unless private use.The numeric custom action type, consisting of source location, code type, entry, option flags.CustomSourceThe table reference of the source of the code.Excecution parameter, depends on the type of custom actionPrimary key, integer to determine sort order for table.File sequence number for the last file for this media.Disk name: the visible text actually printed on the disk. This will be used to prompt the user when this disk needs to be inserted.If some or all of the files stored on the media are compressed in a cabinet, the name of that cabinet.The label attributed to the volume.The property defining the location of the cabinet file.Primary key, foreign key into File table referencing file with this hashVarious options and attributes for this hash.Primary key used to identify a particular feature record.Optional key of a parent record in the same table. If the parent is not selected, then the record will not be installed. Null indicates a root item.Short text identifying a visible feature item.Longer descriptive text describing a visible feature item.Numeric sort order, used to force a specific display ordering.The install level at which record will be initially selected. An install level of 0 will disable an item and prevent its display.The name of the Directory that can be configured by the UI. A non-null value will enable the browse button.0;1;2;4;5;6;8;9;10;16;17;18;20;21;22;24;25;26;32;33;34;36;37;38;48;49;50;52;53;54Feature attributesPrimary key, non-localized.internal token for translatorReference to associated componentText used as registered name for translatorReference to key translator fileOptional reference to key translator setup DLL_SummaryInformationPropertyIdA foreign key to the Dialog table, name of the Dialog.A foreign key to the Control table, name of the control.An identifier that specifies the type of the event that the control subscribes to.The name of the control attribute, that is set when this event is received.The .INI file name in which to write the informationForeign key into the Directory table denoting the directory where the .INI file is.The .INI file Section.The .INI file key below Section.The value to be written.0;1;3The type of modification to be made, one of iifEnumForeign key into the Component table referencing component that controls the installing of the .INI value.A named property to be tied to this item. All the items tied to the same property become part of the same listbox.The value string associated with this item. Selecting the line will set the associated property to this value.The visible text to be assigned to the item. Optional. If this entry or the entire column is missing, the text is the same as the value.A unique key that identifies the particular string.The localized version of the string.Foreign key referencing Component that controls the ComPlus component.ComPlus component attributes.Primary key. Name of the icon file.Binary stream. The binary icon data in PE (.DLL or .EXE) or icon (.ICO) format.A string GUID that represents the component id that will be requested by the alien product.This is defined only when the ComponentId column is an Qualified Component Id. This is the Qualifier for ProvideComponentIndirect.Foreign key into the Component table.This is localisable Application specific data that can be associated with a Qualified Component.Foreign key into the Feature table.The registry value.Foreign key into the Component table referencing component that controls the installing of the registry value.The .INI file name in which to delete the informationThe value to be deleted. The value is required when Action is iifIniRemoveTag2;4The type of modification to be made, one of iifEnum.Foreign key into the Component table referencing component that controls the deletion of the .INI value.Foreign key into Component table.Foreign key into Feature table.Foreign key into the File table denoting the manifest file for the assembly.Foreign key into File table, denoting the application context for private assemblies. Null for global assemblies.Assembly attributesA named property to be tied to the item.The value string associated with the item.Primary key used to identify a particular component record.Required key of a Directory table record. This is actually a property name whose value contains the actual path, set either by the AppSearch action or with the default setting obtained from the Directory table.Remote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.File;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract path is stored when the component is installed, and is used to detect the presence of the component and to return the path to it.Reference to ODBC data source in ODBCDataSource tableName of ODBC data source attributeValue for ODBC data source attributeA foreign key to the Dialog table, name of the dialog.A foreign key to the Control table, name of the controlAn identifier that specifies the type of the event that should take place when the user interacts with control specified by the first two entries.A value to be used as a modifier when triggering a particular event.A standard conditional statement that specifies under which conditions an event should be triggered.An integer used to order several events tied to the same control. Can be left blank.Reference to a Feature entry in Feature table.New selection Level to set in Feature table if Condition evaluates to TRUE.Expression evaluated to determine if Level in the Feature table is to change.Name of a service. /, \, comma and space are invalidBit field: Install: 0x1 = Start, 0x2 = Stop, 0x8 = Delete, Uninstall: 0x10 = Start, 0x20 = Stop, 0x80 = DeleteArguments for the service. Separate by [~].Boolean for whether to wait for the service to fully startExpression which must evaluate to TRUE in order for install to commence.Localizable text to display when condition fails and install must abort.Reference to ODBC driver in ODBCDriver tableName of ODBC driver attributeValue for ODBC driver attributeThe name part of the name-value pairs for the assembly name.The value part of the name-value pairs for the assembly name.Primary key that uniquely identifies a particular ReserveCost recordReserve a specified amount of space if this component is to be installed.Disk space to reserve if linked component is installed locally.Disk space to reserve if linked component is installed to run from the source location.File associated with the catalogCatalog associated with the filePrimary key, could be foreign key into the Directory table.The extension associated with the table row.Optional ProgId associated with this extension.Optional Context identifier, typically "type/format" associated with the extensionPrimary key, non-localized token, foreign key to File table, must match identifier in cabinet.Primary key, sequence with respect to the media images; order must track cabinet order.Size of patch in bytes (long integer).Integer containing bit flags representing patch attributesBinary stream. The patch header, used for patch validation.Identifier. Foreign key to the StreamRef column of the MsiPatchHeaders table.Foreign key into the File table denoting the module that needs to be registered.The cost of registering the module.Primary key, non-localized.internal token for driverText used as registered name for driver, non-localizedReference to key driver fileOptional reference to key driver setup DLLThe verb for the command.Order within the verbs for a particular extension. Also used simply to specify the default verb.The command text.Optional value for the command arguments.The property associated with a SignatureA unique string GUID representing this patch.Foreign key to DiskId column of Media table. Indicates the disk containing the patch package.Name of property, uppercase if settable by launcher or loader.String value for property. Never null or empty.A unique identifier for the rowA certificate context blob for a signer certificateUnique key identifying the binary data.The unformatted binary data.Default;Disable;Enable;Hide;ShowThe desired action to be taken on the specified control.A standard conditional statement that specifies under which conditions the action should be triggered.The predefined root key for the registry value, one of rrkEnumForeign key into the Component table referencing component that controls the deletion of the registry value.Primary key, non-localized.internal token for data sourceText used as registered name for data sourceReference to driver description, may be existing driverRegistration option: 0=machine, 1=user, others t.b.d.Reference to another table name (only Media table is supported)Foreign key to Media tableForeign key to MsiDigitalCertificate table identifying the signer certificateThe encoded hash blob from the digital signatureA named property to be tied to this item. All the items tied to the same property become part of the same listview.The name of the icon to be displayed with the icon. The binary information is looked up from the Binary Table.A named property to be tied to this item. All the items tied to the same property become part of the same combobox.A positive integer used to determine the ordering of the items within one list. The integers do not have to be consecutive.Unique identifier for the environmental variable settingThe name of the environmental value.The value to set in the environmental settings.Foreign key into the Component table referencing component that controls the installing of the environmental value.Primary key, foreign key into F
ile table referencing font file.Font name.The index into the File table. This must be an executable file.PathsA list of ; delimited paths that represent the paths to be searched for the import DLLS. The list is usually a list of properties each enclosed within square brackets [] .Name of tableName of columnY;NWhether the column is nullableMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;KeyFormatted;CustomSource;Property;Cabinet;Shortcut;URLString categorySet of values that are permittedDescription of columnpatchCertDgtlCert0au.cabd.Filename to be given to the duplicate file.Name of a property whose value is assumed to resolve to the full pathname to a destination folder.The table key. The Signature represents a unique file signature.The name of the file. This may contain a "short n
event that the control subscribes to.The name of the control attribute, that is set when this event is received.The .INI file name in which to write the informationForeign key into the Directo
RSSj%S
.text
`.rdata
@.data
.rsrc
@.reloc
PSSj%S
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
"%s\schtasks.exe" /delete /tn JavaUpdateSched /f
"%s\schtasks.exe" /create /xml "%s\Java\Java Update\task64.xml" /tn JavaUpdateSched /f
"%s\schtasks.exe" /create /xml "%s\Java\Java Update\task.xml" /tn JavaUpdateSched
Crypt32.dll
1.6.0_18
C:\HUDSON\workspace\Autoupdate2.1-update\obj\auutils\Release\auutils.pdb
msi.dll
KERNEL32.dll
USER32.dll
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
ADVAPI32.dll
SHELL32.dll
GetCPInfo
auutils.dll
?EXEInstallAUpdate@@YAXXZ
?EXERegToTask@@YAXXZ
?EXEUninstallAUpdate@@YAXXZ
2*3034383<3
?!?&?,?=?
2Terms of use at https://www.verisign.com/rpa (c)09100.
3http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0?
3http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer0
.Class 3 Public Primary Certification Authority0
https://www.verisign.com/cps0*
#http://logo.verisign.com/vslogo.gif0
http://ocsp.verisign.com01
http://crl.verisign.com/pca3.crl0)
http://ocsp.verisign.com0
"http://crl.verisign.com/tss-ca.crl0
Thawte Certification1
0http://crl.verisign.com/ThawteTimestampingCA.crl0
task.xml
task64.xml
%FyMq
.pVxh1c
vnU%d
.TJMcg`
.vzLn6
AV.LI
jE%U-
OTcP
.xnGb
M/"%x
.zF^]
.r6.Ot
95%ui"
Y.eEf8
%X>!m
^rUeo.HD=^
n7.css
_.WL5
%s%^3
?`cH`%cs
a,w.lm
Œ*N:-
%cQ~G.
I1.eR
FW.hS
B;.VhGc
IUdP
l%U R9@Y
vR%x/
mtB.fo
0.lR"
.cemO
OkEy
$%xZ]
W%Ckv
Z.ua[
.qdPZ{
!p-.QO
Em.Sr:v
%for\
JoÚ
'o%X[
.jP\ 
.lEy]my
.reloc
RAM %s
MB, # %s =
kernel32.dll
Error: %s
Unsupported base types. Edit Common/Types.h and recompile
Error: can not open input file %s
Error: can not open output file %s
Encoder error = %d
Encoder error = %X
: :$:(:|;
GetWindowsDirectoryA
GetProcessHeap
RegQueryInfoKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryInfoKeyW
SetViewportOrgEx
ShellExecuteA
URLDownloadToFileA
IsValidURL
CreateDialogIndirectParamA
EnumWindows
MsgWaitForMultipleObjectsEx
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
Ú3]s9
3333333333330
333333333307
PP%d(jjjjj
name="jxpiinstall-7u4-fcs-bin-b22-windows-i586-02_may_2012"
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
ole32.dll
OLEAUT32.dll
urlmon.dll
VERSION.dll
WININET.dll
WINTRUST.dll
ekernel32.dll
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
java.com
http://java.com/ja/download/help
http://java.com/zh_CN/download/help
http://java.com/ko/download/help
http://java.com/zh_TW/download/help
Besuchen Sie unsere Webseite unter:
http://java.com/de/download/help
Um das Java(TM)-Installationsprogramm neu zu starten, aktualisieren Sie die Webseite.
http://java.com/es/download/help
gina web.
Consulte las instrucciones si desea modificar este comportamiento.
phones portables, ordinateurs de bureau, lecteurs Blu-ray, Set Top Box), et m
http://java.com/fr/download/help
marrer le programme d'installation de Java(TM), actualisez la page Web.
e car certains fichiers Java
Si vous souhaitez modifier ce comportement, consultez les instructions.
Visitare il sito Web all'indirizzo
http://java.com/it/download/help
Per riavviare l'Installer Java(TM), aggiornare la pagina Web.
Quando sono disponibili nuovi aggiornamenti Java, viene richiesto di procedere allo scaricamento e all'installazione. Si consiglia di effettuare sempre queste operazioni per garantire al sistema i miglioramenti di prestazioni e sicurezza pi
http://java.com/sv/download/help
rnya webbsidan.
Starta om webbl
http://java.com/pt_BR/download/help
gina Web.
es caso deseje alterar esse comportamento.
http://java.com/en/download/help
To restart the Java(TM) installer, please refresh the web page.
lPassword Data
au.ms
au.ca
HTTP Error 403
http://java.com/error403
: %s {[/h]|[/installurl=
URL] [/lang=language id]} [/s] [msi
cmdline
http://java.sun.com/javase
Windows Installer
*http://java.com/ja/download/help/index.xml
http://java.com/license/
http://java.com/data/
!Java(TM) %s
http://java.com/autoupdate,Java
http://java.com/error403"
: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
Windows
http://java.sun.com/javase
Windows Installer
-http://java.com/zh_CN/download/help/index.xml
Java(TM) %s
http://java.com/autoupdate
: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
. Windows
http://java.sun.com/javase
Windows Installer
*http://java.com/ko/download/help/index.xml
Java(tm) %s
http://java.com/error403
URL] [/lang=
cmdline
Windows
-http://java.com/zh_TW/download/help/index.xml
ltigen Syntax nicht vom Server verarbeitet werden.OF
glicherweise hat ein Proxy, eine Firewall oder ein anderes Netzwerkproblem einen HTTP-Fehler 403 verursacht.
Informationen finden Sie unter http://java.com//error403eServer konnte keine
ssig.EEs wurden keine Antworten gefunden, die f
ssig sind.$Proxyauthentifizierung erforderlich..Servertimeout beim Warten auf die Anforderung.
gen und die Anforderung erneut weiterleiten.sDie angeforderte Ressource ist nicht mehr auf dem Server verf
gbar, und es ist keine Weiterleitungsadresse bekannt.BServer lehnt die Anforderung ohne eine definierte Contentl
nge ab.uAuswertung der in einem oder mehreren Anforderungs-Header-Feldern angegebenen Bedingung auf dem Server ergab "false".
hrung der Anforderung verhindert hat.WDie f
llung der Anforderung zugegriffen hat.%Service ist vor
berlastet.LBeim Warten auf ein Gateway ist ein Timeout f
tzt die in der Anforderungsmeldung verwendete Version des HTTP-Protokolls nicht, bzw. er verweigert die Unterst
Sie befinden sich in einem Land, das einem Embargo unterliegt.VServer kann Java(TM) gegenw
HTTP-Statuscode=%d
0Exportkontrolle - Java(TM)-Installationsprogramm3Server ausgelastet - Java(TM)-Installationsprogramm.Serverproblem - Java(TM)-Installationsprogramm3Unbekannter Fehler - Java(TM)-Installationsprogramm
Verbindung wird hergestellt...!HTTP-Anforderung wird ge
ffnet...!HTTP-Anforderung wird gesendet...?Server ist derzeit ausgelastet. Wiederholung in %ld Sekunden...
Verwendung: %s {[/h]|[/installurl=URL der Konfigurations- oder MSI-Datei] [/lang=Sprach-ID]} [/s] [Befehlszeilenoptionen f
r MSI-Installationsprogramm] 'Fehler - Java(TM)-Installationsprogramm:%s kann f
r die Installation nicht heruntergeladen werden.(Warnung - Java(TM)-Installationsprogramm8Voraussichtliche Restdauer: %d Stunden %d Min. %.0f Sek.7Voraussichtliche Restdauer: %d Stunde %d Min. %.0f Sek.-Voraussichtliche Restdauer: %d Min. %.0f Sek.%Voraussichtliche Restdauer: %.0f Sek.'Ung
fen Sie die Einstellungen und Proxyangaben in der Windows-Systemsteuerung unter "Internetoptionen" -> "Verbindungen".
Installationsprogramm kann mit den aktuellen Internetverbindungseinstellungen nicht fortgesetzt werden. Weitere Informationen dazu finden Sie auf der folgenden Website.
ltere Version zu installieren, informieren Sie sich unter http://java.sun.com/javase, ob die Version noch unterst
Installationsprogramm kann mit dem derzeit auf dem System installierten Windows-Installationsprogramm nicht fortfahren. Weitere Informationen dazu finden Sie auf der folgenden Website.
*http://java.com/de/download/help/index.xml
chten Sie die Installation von Java(tm) %s wirklich abbrechen?
&Sie haben Java erfolgreich installiert8Sie haben Java und Bing Toolbar erfolgreich installiert.:Sie haben Java und Yahoo! Toolbar erfolgreich installiert.RSie haben Java erfolgreich installiert
http://java.com/autoupdateOSie haben Java erfolgreich installiert
Es posible que un problema con el proxy, el firewall o la red haya causado un Error de HTTP 403.
Consulte http://java.com/error403jEl servidor no ha encontrado nada que coincida con el URI (Identificador de Recursos Uniforme) solicitado.&El m
n.cEl recurso solicitado ya no est
o.XEl servidor rechaza la solicitud porque no consta de una longitud de contenido definida.
en un formato no soportado por el recurso solicitado para el m
n inesperada que ha impedido que cumpla la solicitud.LEl servidor no soporta la funcionalidad necesaria para cumplir la solicitud.
temporalmente sobrecargado.@La solicitud ha sufrido un timeout mientras esperaba al gateway.wEl servidor no soporta, o rechaza por configuraci
n de protocolo HTTP utilizada en el mensaje de solicitud.
s bajo embargo.VEl servidor no puede suministrar Java(TM) en este momento.
digo de estado HTTP=%d
/Control de Exportaci
Abriendo solicitud HTTP...
Enviando solicitud HTTP...@El servidor est
Sintaxis: %s {[/h]|[/installurl=URL de archivo de configuraci
Error - Instalador de Java(TM)1No se ha podido descargar %s para la instalaci
n.$Advertencia - Instalador de Java(TM)2Tiempo restante estimado: %d horas %d min %.0f seg2Tiempo restante estimado: %d horas %d min %.0f seg)Tiempo restante estimado: %d min %.0f seg"Tiempo restante estimado: %.0f seg5La sintaxis del archivo de configuraci
n a Internet. Examine Opciones de Internet -> Conexiones en el Panel de control de Windows para asegurarse de que la informaci
gina web para obtener m
n beta o anterior, consulte http://java.sun.com/javase para determinar si est
soportada. Si lo est
El instalador no puede continuar con el actual instalador de Windows presente en su sistema. Visite la siguiente p
*http://java.com/es/download/help/index.xml
n de Java(tm) %s?
"Java se ha instalado correctamenteJava y la barra Yahoo! Toolbar se han instalado correctamente.SHa instalado Java correctamente
en un momento.RHa instalado Java correctamente.
OLe serveur n'a pas pu traiter cette demande en raison d'une syntaxe non valide.DLa ressource demand
nent une erreur HTTP 403.
Reportez-vous
la page http://java.com/error403.Le serveur n'a trouv
nouveau avec plus d'informations.jLa ressource demand
dition n'est connue.WLe serveur refuse d'accepter la demande en l'absence d'une longueur d
celles que le serveur est en mesure de traiter.yLe serveur refuse de traiter la demande car l'URI de la demande est plus long que ceux qu'il est en mesure d'interpr
lors de sa tentative de traitement de la demande alors qu'il agissait en tant que passerelle ou proxy.(Le service est temporairement surcharg
.?Temporisation de la demande lors de l'attente d'une passerelle.
Le serveur ne prend pas en charge ou refuse de prendre en charge la version du protocole HTTP utilis
sidez dans un pays sous embargo.XLe serveur n'est, pour le moment, pas en mesure de fournir Java.
code statut HTTP=%d
le de l'export - Programme d'installation de Java(TM)5Serveur occup
Ouverture de la demande HTTP...
Envoi de la demande HTTP...5Le serveur est occup
Syntaxe : %s {[/h]|[/installurl=URL du fichier de configuration ou du fichier msi] [/lang=ID de langue]} [/s] [options de ligne de commande du programme d'installation msi] -Erreur - Programme d'installation de Java(TM).Impossible de t
charger %s pour l'installer.4Avertissement - Programme d'installation de Java(TM);Temps restant estim
: %d heures, %d minutes, %.0f secondes:Temps restant estim
: %d heure, %d minutes, %.0f secondes0Temps restant estim
: %d minutes, %.0f secondes$Temps restant estim
: %.0f secondes.Syntaxe non valide du fichier de configuration
me. Dans le Panneau de configuration de Windows, cliquez sur Options
tres de connexion Internet en cours. Pour plus d'informations, visitez le site Web suivant.
rifiez que leur prise en charge est toujours valide sur la page Web http://java.sun.com/javase. Si tel est le cas, lancez l'installation ult
Le programme d'installation ne peut pas continuer avec le programme d'installation de Windows actuellement install
me. Pour plus d'informations, visitez le site Web suivant.
*http://java.com/fr/download/help/index.xml
3Voulez-vous annuler l'installation de Java(tm) %s ?
s.OJava est maintenant install
valida.CPer la risorsa richiesta
possibile che un problema a livello di proxy, firewall o di un altro componente di rete determini l'errore 'HTTP Error 403'.
Visitare il sito Web all'indirizzo http://java.com/error403.dIl server non ha trovato alcuna voce corrispondente all'URI (Uniform Resource Identifier) richiesto.&Il metodo utilizzato non
supportato dalla risorsa richiesta per il metodo richiesto.
[Il server ha rilevato una condizione imprevista che ha impedito di soddisfare la richiesta.NIl server non supporta la funzionalit
temporaneamente sovraccarico.0Timeout della richiesta in attesa di un gateway.`Versione del protocollo HTTP utilizzata nel messaggio della richiesta non supportata dal server.
L'utente si trova in un paese sottoposto a embargo.SIl server non
Codice stato HTTP=%d
 Controllo esportazione - Installer Java(TM)$Server occupato - Installer Java(TM)(Problema sul server - Installer Java(TM)'Errore sconosciuto - Installer Java(TM)
Connessione in corso...#Apertura richiesta HTTP in corso... Invio richiesta HTTP in corso...-Server occupato, riprovare tra %ld secondi...
Utilizzo: %s {[/h]|[/installurl=URL del file di configurazione o file msi] [/lang=id lingua]} [/s] [opzioni della riga di comando per l'Installer msi]
Errore - Installer Java(TM)-Impossibile scaricare %s per l'installazione.
Avvertenza - Installer Java(TM)/Tempo restante previsto: %d ore %d min %.0f sec/Tempo restante previsto: %d ora %d min %.0f sec(Tempo restante previsto: %d min %.0f sec!Tempo restante previsto: %.0f sec*Sintassi file di configurazione non valida
procedere con le impostazioni correnti di connessione a Internet del sistema. Nel pannello di controllo di Windows, selezionare Opzioni Internet, quindi Connessioni e verificare che le impostazioni e le informazioni del proxy siano corrette.
procedere con le impostazioni correnti di connessione a Internet. Per ulteriori informazioni, visitare il sito Web seguente.
Impossibile procedere con l'installazione in quanto i file richiesti per l'installazione non sono disponibili. Se si sta installando una versione beta o una versione precedente, visitare il sito Web all'indirizzo http://java.sun.com/javase per determinare se tale versione
ancora supportata. In caso affermativo, provare a eseguire l'installazione in un secondo momento. La mancata disponibilit
procedere con la versione corrente di Windows Installer installata nel sistema. Per ulteriori informazioni, visitare il sito Web seguente.
*http://java.com/it/download/help/index.xml
)Annullare l'installazione di Java(tm) %s?
stata completata.VImpostazione Java completata.
tra pochi secondi.SImpostazione Java completata.
tverksproblem som orsakar ett HTTP-fel 403.
Se http://java.com/error403OServern hittade ingenting som matchar beg
rd URI (Uniform Resource Identifier).Þn anv
ten..Inga svar som accepteras av klienten hittades.
ran igen med mer information.eDen beg
ngd.qDen f
ran.BServern st
tsluss.nServern st
dja, den version av HTTP-protokollet som anv
Du befinner dig i ett land med handelsembargo.FJava(TM) kan inte erbjudas fr
ka igen?.Ett ov
HTTP-statuskod=%d
#Exportkontroll - Java(TM) Installer(Servern
ppnar HTTP-beg
Skickar HTTP-beg
ran...CServern
Syntax: %s {[/h]|[/installurl=URL f
Fel - Java(TM) Installer'Kan inte ladda ned %s f
ende tid: %d tim %d min %.0f sek0Ber
ende tid: %d tim %d min %.0f sek)Ber
ende tid: %d min %.0f sek"Ber
ljande webbplats f
http://java.sun.com/javase om det fortfarande finns st
nda den aktuella versionen av Windows Installer som finns i systemet. Se f
*http://java.com/sv/download/help/index.xml
8Vill du verkligen avbryta installationen av Java(tm) %s?
Java har installerats..Java och verktygsf
ltet Bing har installerats..Java och Yahoo! Verktygsf
Carbonite-installationen startas inom kort.Java och Google Verktygsf
lt har installerats."Java Setup - starta om webbl
Om du inte startar om webbl
r att starta om webbl
Pode haver problemas com proxy, firewall ou outros problemas de rede que estejam causando o erro HTTP 403.
Consulte http://java.com/error403`O servidor n
es.kO recurso solicitado n
o de encaminhamento conhecido.UO servidor recusa-se a aceitar a solicita
o.VO servidor n
o oferece suporte
o oferece suporte, ou se recusa a oferecer suporte,
o do protocolo HTTP usada na mensagem de solicita
s embargado.OO servidor n
digo do status HTTP=%d
,Controle de Exporta
o HTTP ...
o HTTP ...GO servidor est
Uso: %s {[/h]|[/installurl=URL do arquivo de configura
es cmdline para o instalador msi]
vel fazer download de %s para a instala
ncia - Instalador Java(TM)/Tempo restante estimado: %d horas %d min %.0f s.Tempo restante estimado: %d hora %d min %.0f s&Tempo restante estimado: %d min %.0f s
Internet do seu sistema. No Painel de Controle do Windows, verifique Op
es para se certificar de que as defini
o beta ou mais antiga, consulte http://java.sun.com/javase para determinar se tal vers
o pode prosseguir com o Instalador Windows atual instalado no sistema. Visite o site a seguir para obter mais informa
-http://java.com/pt_BR/download/help/index.xml
?Tem certeza de que deseja cancelar a instala
o do Java(tm) %s?
There may be proxy, firewall, or other network issues causing an HTTP Error 403.
Please refer to http://java.com/error403[The server has not found anything matching the requested URI (Uniform Resource Identifier).
The request could not be completed due to a conflict with the current state of the resource. The user should resubmit with more information.`The requested resource is no longer available at the server, and no forwarding address is known.JThe server refuses to accept the request without a defined content length.wThe precondition given in one or more of the request header fields evaluated to false when it was tested on the server.
The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method.
]The server encountered an unexpected condition that prevented it from fulfilling the request.NThe server does not support the functionality required to fulfill the request.
The server, while acting as a gateway or proxy, received an invalid response from the upstream server it accessed in attempting to fulfill the request.&The service is temporarily overloaded.0The request was timed out waiting for a gateway.sThe server does not support, or refuses to support, the HTTP protocol version that was used in the request message.
You are located in an embargoed country.TThe server is unable to provide the Java(TM) at this time.
HTTP status code=%d
#Export Control - Java(TM) Installer Server Busy - Java(TM) Installer#Server Problem - Java(TM) Installer"Unknown Error - Java(TM) Installer
Opening HTTP request ...
Sending HTTP request ...2Server is currently busy, retry in %ld seconds ...
Usage: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
Error - Java(TM) Installer'Unable to download %s for installation.
Warning - Java(TM) Installer-Estimated time left: %d hours %d min %.0f sec,Estimated time left: %d hour %d min %.0f sec$Estimated time left: %d min %.0f sec
Java(TM) Installer cannot proceed with the current Internet Connection settings of your system. In your Windows Control Panel, please check Internet Options -> Connections to make sure the settings and proxy information are correct.
The installer cannot proceed with the current Internet Connection settings. Please visit the following web site for more information.
This installer cannot continue because the files necessary for installation are unavailable. If trying to install a beta or older version, please check http://java.sun.com/javase to determine if it is still supported. If so, please try installing at a later time, as these files might be only temporarily unavailable.
The installer cannot proceed with the current Windows Installer installed on the system. Please visit the following web site for more information.
*http://java.com/en/download/help/index.xml
%s installation?
$You have successfully installed Java6You have successfully installed Java and Bing Toolbar.8You have successfully installed Java and Yahoo! Toolbar.RYou have successfully installed Java
7.0.40.22
jinstall.exe

jxpiinstall.exe_1228_rwx_00401000_001AE000:

;%u#S
PVSSSSShp
SSSSSSShp
tFSSSSSSShp
SSSSShp
SSSSh
SSShh
PSSSSSSh
jfx-url
msi-url
SPWEB=
http://java.com
%s\Sun\Java\%s
jinstall.cfg
%s/%s.msi
%s\Sun\Java\jre%s\%s.jpg
1.7.0_04
%s/%s_%s.jpg
RegOpenKeyTransactedA
Advapi32.dll
Selected Folder: %s
%s\Java\jre%s\
SOFTWARE\Microsoft\Windows\CurrentVersion
jre1.7.0_04-c.msi
jre1.7.0_04-s.msi
jre1028.MST
jre1031.MST
jre1034.MST
jre1036.MST
jre1040.MST
jre1041.MST
jre1042.MST
jre1046.MST
jre1053.MST
jre2052.MST
%s\%s.msi
%s%s%s
%s%s%s_x64
%sJava\
%s\Sun\
Downloaded File %s is corrupt.
File %s does not exist.
PostStatusUrl
%s\%s
JRERunOnce.exe
Software\MicroSoft\Windows\CurrentVersion\RunOnce
/x {26A24AE4-039D-4CA4-87B4-2F83216010FF} /qb
%s\Sun\Java\jre1.6.0_10.tmpsv\
%s\Sun\Java\jre1.6.0_10\
jre%d.MST
java_sp.dll
fx-runtime.exe
Executed: %s. Return Code: %d
"%s" /bs
"%s" /s
%s wasn't set, but VERSION=%s is installed as consumer.
There should only be one consumer version installed. %s=%s, VERSION=%s
Read MODE for version=%s
Couldn't read MODE for version=%s
%s=%s has an inconsistent MODE=%s.
Read MODE for %s=%s
Couldn't read MODE for %s=%s
VERSION=%s
_installed_consumer_version=%s
Java%sFamilyVersion
%s\Sun\Java\%s%s\%s
%s\Sun\Java\%s%s_x64\%s
lzma.dll
RegCreateKeyTransactedA
RegDeleteKeyTransactedA
FRegDeleteKeyExA
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
The Firefox browser restart flag is set
FIREFOXRESTART
The reinstall error number is: %d
ClearMSIStatus() failed. Return Code: %d, ErrorCode: %d
The install error number is: %d
%s %s
%s PROG=0 ENDDIALOG=0 SKIPLICENSE=1
"%s" %s
"%s" /i "%s" TRANSFORMS="%s" %s
"%s" /i "%s" %s
Second call to java_sp.dll returned: %d
Parsed SPWEB as: %s
"%s\Java\Java Update\jaureg.exe" -r jre %s
install au.msi "%s
AU Install Return Code: %d
%sau.cab
%sau.msi
%s\Sun\Java\AU\
ClearMSIStatus() after get failed. Return Code: %d, ErrorCode: %d
GetMSIStatus() failed. Return Code: %d, ErrorCode: %d
initial ClearMSIStatus() failed. Return Code: %d, ErrorCode: %d
First call to java_sp.dll returned: %d
Exited install ChangeFolder dialog: dlgStatus=%d, return=%d
INSTALLDIR="%s"
2.1.6.0
Msi file from URL=%s/%s.msi, downloaded to=%s
Download failed: from=%s/%s.msi, to=%s
Download Cancelled by User: from=%s/%s.msi, to=%s
what_is_installed.IsNewerConsumerVersionInstalled
jre%s-c
what_is_installed.IsSameVersionConsumerInstalled (2)
what_is_installed.IsSameVersionConsumerInstalled (1)
jre%s-pfrom%s
what_is_installed.IsPatchable
what_is_installed.IsUpdateable
what_is_installed.IsConsumerInstalled
1.7.0_04-b22
jre%s-s
/installurl=
http://javadl-esd.sun.com/update/1.7.0/1.7.0_04-b22.xml
InstallerXmlURL
CryptAcquireContext failed: %d
Error opening file %s
Error: %d
https://
Save Country Code %s after GetCountry()
HTTP/1.1
UrlInfo
UpdateMoreInfoUrl
%s-sp%d
%d.%d
.java.com:
.sun.com:
.java.com/
.sun.com/
http://java.com/
.oracle.com/
http://www.java.com/
http://java.sun.com/
jusched.log
jdk_inst.log
jupdate_%x
Could not open HKEY_LOCAL_MACHINE, SOFTWARE\JavaSoft registry key.
Could not find HKEY_LOCAL_MACHINE, SOFTWARE\JavaSoft registry key.
Could not open the registry key.
RegQueryValueEx(%s): Error:%d, ErrorCode:%d
GetJreMetrics() - RegQueryValueEx(%s): Error:%d, ErrorCode:%d
GetJreMetrics() - RegOpenKeyEx(%s): Error:%d, ErrorCode:%d
GetUpdatedJreMetrics() - RegSetValueEx failed for NewJreVersion: %l Error Code: %d
GetUpdatedJreMetrics() - RegSetValueEx failed for InstallAttempts: %l Error Code: %d
GetUpdatedJreMetrics() - MachineCounted: %s, InstallAttempts: %s, UpdateCount: %s
GetUpdatedJreMetrics() - RegSetValueEx failed for UpdateCount: %l Error Code: %d
GetUpdatedJreMetrics() - RegSetValueEx failed for JreVersion: %l Error Code: %d
GetUpdatedJreMetrics() - RegQueryValueEx for MachineCount failed: %l Error Code: %d
GetUpdatedJreMetrics() - MachineCount registry value does not exist and will not be created because install was not successful. Error: %d
GetUpdatedJreMetrics() - RegSetValue for MachineCount failed: %l Error Code: %d
GetUpdatedJreMetrics() - RegCreateKeyEx failed: %l Error Code: %d
IE.HTTP
FirefoxURL
Firefox
http\shell\open\ddeexec\Application
chrome.exe
http\shell\open\command
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
VersionXmlURL
;jfx|%d
;jre|%d
nonhttpspasswd
nonprodpasswd
https://sjremetrics.java.com
reportsuiteid
Export Denied
Windows
Mozilla/4.0 (compatible; Win32; jinstall)
\msi.dll
\msiexec.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer
%s\msi.tmp
%s failed with error %d: %s
Installer : Wrapper.WriteFile (In small chunks)
Installer : Wrapper.CloseHandle
Installer : Wrapper.CreateFile
/x {4A03706F-666A-4037-7777-5F2748764D10} /qn
\WinInit.Ini
-- Start in MoveFileOnReboot: %s to %s --
%s%s\%s
firefox.exe
iexplore.exe
http://java.com/verify
SOFTWARE\JavaSoft\Java Runtime Environment\1.7.0_04\MSI
mozilla.org
Mozilla Firefox
Mozilla
"%s\firefox.exe" -new-window http://java.com/verify
jp2ssv_patch.dll
jp2ssv.dll
ssv_patch.dll
ssv.dll
The Firefox browser will be restarted
The Firefox browser will be closed
GetSystemDirectory failed. Return Code: %d, ErrorCode: %d
LoadLibrary(%s) failed. ErrorCode: %d
_snprintf failed. ErrorCode: %d
SetDllDirectory() failed. ErrorCode: %d
shell32.dll
gdiplus.dll
operator
GetProcessWindowStation
GdiplusShutdown
zcÁ
%Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04
http://rps-svcs.sun.com/services/countrylookup
https://sjremetrics.java.com/b/ss//6
%Documents and Settings%\%current user%\Local Settings\Temp\jxpiinstall.exe
...YYY
Y%DnP
Additional Font and Media Support
{4ADD1C35-72F4-4AB8-9FF4
NameTableTypeActionTextActionDescriptionTemplateCostInitializeComputing space requirementsAppSearchSearching for installed applicationsProperty: [1], Signature: [2]BindImageBinding executablesFile: [1]CCPSearchSearching for qualifying productsCostFinalizeFileCostInstallAdminPackageCopying files to the networkFile: [1], Directory: [9], Size: [6]InstallFilesCopying new filesFile: [1], Directory: [9], Size: [6]InstallValidateValidating installCreateShortcutsCreating shortcutsShortcut: [1]PublishComponentsPublishing qualified componentsComponent ID: [1], Qualifier: [2]PublishFeaturesPublishing product featuresFeature: [1]PublishProductPublishing product informationRegisterClassInfoRegistering class serversClass ID: [1]RegisterExtensionInfoRegistering extension serversExtension: [1]RegisterMIMEInfoRegistering MIME infoMIME Content Type: [1], Extension: [2]RegisterProgIdInfoRegistering program identifiersProgID: [1]AllocateRegistrySpaceAllocating registry spaceFree space: [1]CreateFoldersCreating foldersFolder: [1]DeleteServicesDeleting servicesService: [1]DuplicateFilesCreating duplicate filesFindRelatedProductsSearching for related applicationsFound application: [1]InstallODBCInstalling ODBC componentsInstallServicesInstalling new servicesService: [2]LaunchConditionsEvaluating launch conditionsMigrateFeatureStatesMigrating feature states from related applicationsApplication: [1]MoveFilesMoving filesPatchFilesPatching filesFile: [1], Directory: [2], Size: [3]ProcessComponentsUpdating component registrationRegisterComPlusRegistering COM  Applications and ComponentsAppId: [1]{{, AppType: [2], Users: [3], RSN: [4]}}RegisterProductRegistering product[1]RegisterTypeLibrariesRegistering type librariesLibID: [1]RegisterUserRegistering userRemoveDuplicateFilesRemoving duplicated filesFile: [1], Directory: [9]RemoveEnvironmentStringsUpdating environment stringsName: [1], Value: [2], Action [3]RemoveExistingProductsRemoving applicationsApplication: [1], Command line: [2]RemoveFilesRemoving filesRemoveFoldersRemoving folders
RemoveIniValuesRemoving INI file entriesFile: [1], Section: [2], Key: [3], Value: [4]RemoveODBCRemoving ODBC componentsRemoveRegistryValuesRemoving system registry valuesKey: [1], Name: [2]RemoveShortcutsRemoving shortcutsRMCCPSearchSelfRegModulesRegistering modulesFile: [1], Folder: [2]SelfUnregModulesUnregistering modulesSetODBCFoldersInitializing ODBC directoriesStartServicesStarting servicesStopServicesStopping servicesUnpublishComponentsUnpublishing Qualified ComponentsUnpublishFeaturesUnpublishing product featuresUnregisterClassInfoUnregister class serversUnregisterComPlusUnregistering COM  Applications and ComponentsAppId: [1]{{, AppType: [2]}}UnregisterExtensionInfoUnregistering extension serversUnregisterMIMEInfoUnregistering MIME infoUnregisterProgIdInfoUnregistering program identifiersUnregisterTypeLibrariesUnregistering type librariesWriteEnvironmentStringsWriteIniValuesWriting INI file valuesWriteRegistryValuesWriting system registry valuesKey: [1], Name: [2], Value: [3]AdvertiseAdvertising applicationcaCreateVRootsCreating IIS Virtual Roots...caRemoveVRootsRemoving IIS Virtual Roots...GenerateScriptGenerating script operations for action:InstallSFPCatalogFileInstalling system catalogFile: [1], Dependencies: [2]RegisterFontsRegistering fontsFont: [1]RollbackRolling back action:RollbackCleanupRemoving backup filesUnmoveFilesRemoving moved filesUnpublishProductUnpublishing product informationUnregisterFontsUnregistering fontsDirectoryDirectory_ParentDefaultDirALLUSERSPROFILETARGETDIR.:ALLUSE~1|All UsersAdminToolsFolder.:Admint~1|AdminToolsAppDataFolder.:APPLIC~1|Application DataCommonAppDataFolder.:Common~1|CommonAppDataCommonFiles64Folder.:Common64ISUpdateServiceFolderISCommonFilesFolderUPDATE~1|UpdateServiceCommonFilesFolderInstal~1|InstallShieldINSTALLDIRaufolder.JavaJavaUp~1|Java Update.:CommonDesktopFolder.:DesktopFavoritesFolder.:FAVORI~1|FavoritesFontsFolder.:FontsGlobalAssemblyCache.:Global~1|GlobalAssemblyCacheISYourProductDirISYourCompanyDirYOURPR~1|Your Product NameProgramFilesFolderYOURCO~1|Your Company Name.:PROGRA~1|program filesLocalAppDataFolder.:LocalA~1|LocalAppDataMyPicturesFolder.:MyPict~1|MyPicturesPersonalFolder.:PersonalPrimaryVolumePath.:Primar~1|PrimaryVolumePathProgramFiles64Folder.:Prog64~1|Program Files 64ProgramMenuFolder.:ProgramsSendToFolder.:SendToStartMenuFolder.:STARTM~1|Start MenuStartupFolder.:StartUpSystem16Folder.:SystemSystem64Folder.:System64SystemFolder.:System32TempFolder.:TempTemplateFolder.:ShellNewUSERPROFILE.:USERPR~1|UserProfileWindowsFolder.:WindowsWindowsVolume.:WinRootSourceDirFileComponent_FileNameFileSizeVersionLanguageAttributesSequenceaucheckaucheckcomponentjaucheck.exe2.1.6.01033jauregjauregcomponentjaureg.exejucheckjucheckcomponentjucheck.exejuschedjuschedcomponentjusched.exe0task.xmloemupdate32task64.xmloemupdate64RemoveFileFileKeyDirPropertyInstallModeTypeLibLibIDDirectory_Feature_CostLockPermissionsLockObjectDomainUserPermissionUpgradeUpgradeCodeVersionMinVersionMaxRemoveActionPropertyISSelfRegOrderCmdLineRegLocatorSignature_RootKeyAdvtUISequenceConditionMoveFileSourceNameDestNameSourceFolderDestFolderOptionsInstallExecuteSequenceREMOVEEXISTINGRemoveRegKeysREMOVEunregautaskVersionNT>=600 And REMOVESignalJuschedInstallInitializeAddRegKeysNOT REMOVEregautask64OEMUPDATE=1 And VersionNT>=600 And Not Installed And Msix64<>""setAllUsersProfile2KVersionNT >= 500setUserProfileNTVersionNTregautaskOEMUPDATE=1 And VersionNT>=600 And Not Installed And Not Msix64<>""SetAllUsersProfileNTVersionNT = 400InstallFinalizeValidateProductIDModuleComponentsComponentModuleIDAppIdRemoteServerNameLocalServiceServiceParametersDllSurrogateActivateAtStorageRunAsInteractiveUserBillboardOrderingErrorMessage{{Fatal error: }}Error [1].Warning [1].Info [1].Internal Error [1]. [2]{, [3]}{, [4]}{{Disk full: }}Action [Time]: [1]. [2][ProductName]{[2]}{, [3]}{, [4]}Message type: [1], Argument: [2]=== Logging started: [Date] [Time] ====== Logging stopped: [Date] [Time] ===Action start [Time]: [1].Action ended [Time]: [1]. Return value [2].Time remaining: {[1] minutes }{[2] seconds}Out of memory. Shut down other applications before retrying.Installer is no longer responding.Installer terminated prematurely.Please wait while Windows configures Java AutoUpdateGathering required information...Removing older versions of this applicationPreparing to remove older versions of this application{[ProductName] }Setup completed successfully.{[ProductName] }Setup failed.Error reading from file: [2]. {{ System error [3].}} Verify that the file exists and that you can access it.Cannot create the file [3]. A directory with this name already exists. Cancel the installation and try installing to a different location.Please insert the disk: [2]The installer has insufficient privileges to access this directory: [2]. The installation cannot continue. Log on as an administrator or contact your system administrator.Error writing to file [2]. Verify that you have access to that directory.Error reading from file [2]. Verify that the file exists and that you can access it.Another application has exclusive access to the file [2]. Please shut down all other applications, then click Retry.There is not enough disk space to install thi file [2]. Free some disk space and click Retry, or click Cancel to exit.Source file not found: [2]. Verify that the file exists and that you can access it.Error reading from file: [3]. {{ System error [2].}} Verify that the file exists and that you can access it.Error writing to file: [3]. {{ System error [2].}} Verify that you have access to that directory.Source file not found{{(cabinet)}}: [2]. Verify that the file exists and that you can access it.Cannot create the directory [2]. A file with this name already exists. Please rename or remove the file and click Retry, or click Cancel to exit.The volume [2] is currently unavailable. Please select another.The specified path [2] is unavailable.Unable to write to the specified folder [2].A network error occurred while attempting to read from the file [2]An error occurred while attempting to create the directory [2]A network error occurred while attempting to create the directory [2]A network error occurred while attempting to open the source file cabinet [2].The specified path is too long [2].The Installer has insufficient privileges to modify the file [2].A portion of the path [2] exceeds the length allowed by the system.The path [2] contains words that are not valid in folders.The path [2] contains an invalid character.[2] is not a valid short file name.Error getting file security: [3] GetLastError: [2]Invalid Drive: [2]Error applying patch to file [2]. It has probably been updated by other means, and can no longer be modified by this patch. For more information contact your patch vendor. {{System Error: [3]}}Could not create key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not open key: [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not delete value [2] from key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not delete key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not read value [2] from key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not write value [2] to key [3]. {{ System error [4].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not get value names for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not get sub key names for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not read security information for key [2]. {{ System error [3].}} Verify that you have sufficient access to that key, or contact your support personnel.Could not increase the available r@H?;
-F91E258B4EC2}
Windows Installer XML v2.0.5805.0 (candle/light)
egistry space. [2] KB of free registry space is required for the installation of this application.Another installation is in progress. You must complete that installation before continuing this one.Error accessing secured data. Please make sure the Windows Installer is configured properly and try the installation again.User [2] has previously initiated an installation for product [3]. That user will need to run that installation again before using that product. Your current installation will now continue.User [2] has previously initiated an installation for product [3]. That user will need to run that installation again before using that product.Out of disk space -- Volume: '[2]'; required space: [3] KB; available space: [4] KB. Free some disk space and retry.Are you sure you want to cancel?The file [2][3] is being held in use{ by the following process: Name: [4], ID: [5], Window Title: [6]}. Close that application and retry.The product [2] is already installed, preventing the installation of this product. The two products are incompatible.Out of disk space -- Volume: [2]; required space: [3] KB; available space: [4] KB. If rollback is disabled, enough space is available. Click Cancel to quit, Retry to check available disk space again, or Ignore to continue without rollback.Could not access network location [2].The following applications should be closed before continuing the installation:Could not find any previously installed compliant products on the machine for installing this product.The key [2] is not valid. Verify that you entered the correct key.The installer must restart your system before configuration of [2] can continue. Click Yes to restart now or No if you plan to restart later.You must restart your system for the configuration changes made to [2] to take effect. Click Yes to restart now or No if you plan to restart later.An installation for [2] is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?A previous installation for this product is in progress. You must undo the changes made by that installation to continue. Do you want to undo those changes?No valid source could be found for product [2]. The Windows Installer cannot continue.Installation operation completed successfully.Installation operation failed.Product: [2] -- [3]You may either restore your computer to its previous state or continue the installation later. Would you like to restore?An error occurred while writing installation information to disk. Check to make sure enough disk space is available, and click Retry, or Cancel to end the installation.One or more of the files required to restore your computer to its previous state could not be found. Restoration will not be possible.[2] cannot install one of its required products. Contact your technical support group. {{System Error: [3].}}The older version of [2] cannot be removed. Contact your technical support group. {{System Error [3].}}The path [2] is not valid. Please specify a valid path.There is no disk in drive [2]. Please insert one and click Retry, or click Cancel to go back to the previously selected volume.There is no disk in drive [2]. Please insert one and click Retry, or click Cancel to return to the browse dialog and select a different volume.The folder [2] does not exist. Please enter a path to an existing folder.You have insufficient privileges to read this folder.A valid destination folder for the installation could not be determined.Error attempting to read from the source installation database: [2].Scheduling reboot operation: Renaming file [2] to [3]. Must reboot to complete operation.Scheduling reboot operation: Deleting file [2]. Must reboot to complete operation.Module [2] failed to register. HRESULT [3]. Contact your support personnel.Module [2] failed to unregister. HRESULT [3]. Contact your support personnel.Failed to cache package [2]. Error: [3]. Contact your support personnel.Could not register font [2]. Verify that you have sufficient permissions to install fonts, and that the system supports this font.Could not unregister font [2]. Verify that you have sufficient permissions to remove fonts.Could not create shortcut [2]. Verify that the destination folder exists and that you can access it.Could not remove shortcut [2]. Verify that the shortcut file exists and that you can access it.Could not register type library for file [2]. Contact your support personnel.Could not unregister type library for file [2]. Contact your support personnel.Could not update the INI file [2][3]. Verify that the file exists and that you can access it.Could not schedule file [2] to replace file [3] on reboot. Verify that you have write permissions to file [3].Error removing ODBC driver manager, ODBC error [2]: [3]. Contact your support personnel.Error installing ODBC driver manager, ODBC error [2]: [3]. Contact your support personnel.Error removing ODBC driver [4], ODBC error [2]: [3]. Verify that you have sufficient privileges to remove ODBC drivers.Error installing ODBC driver [4], ODBC error [2]: [3]. Verify that the file [4] exists and that you can access it.Error configuring ODBC data source [4], ODBC error [2]: [3]. Verify that the file [4] exists and that you can access it.Service [2] ([3]) failed to start. Verify that you have sufficient privileges to start system services.Service [2] ([3]) could not be stopped. Verify that you have sufficient privileges to stop system services.Service [2] ([3]) could not be deleted. Verify that you have sufficient privileges to remove system services.Service [2] ([3]) could not be installed. Verify that you have sufficient privileges to install system services.Could not update environment variable [2]. Verify that you have sufficient privileges to modify environment variables.You do not have sufficient privileges to complete this installation for all users of the machine. Log on as an administrator and then retry this installation.Could not set file security for file [3]. Error: [2]. Verify that you have sufficient privileges to modify the security permissions for this file.Component Services (COM  1.0) are not installed on this computer. This installation requires Component Services in order to complete successfully. Component Services are available on Windows 2000.Error registering COM  application. Contact your support personnel for more information.Error unregistering COM  application. Contact your support personnel for more information.The description for service '[2]' ([3]) could not be changed.The Windows Installer service cannot update the system file [2] because the file is protected by Windows. You may need to update your operating system for this program to work correctly. {{Package version: [3], OS Protected version: [4]}}The Windows Installer service cannot update the protected Windows file [2]. {{Package version: [3], OS Protected version: [4], SFP Error: [5]}}This setup requires Internet Information Server 4.0 or higher for configuring IIS Virtual Roots. Please make sure that you have IIS 4.0 or higher.This setup requires Administrator privileges for configuring IIS Virtual Roots.MIMEContentTypeExtension_CLSIDServiceInstallDisplayNameServiceTypeStartTypeErrorControlLoadOrderGroupDependenciesStartNamePasswordArgumentsClassContextProgId_DefaultAppId_FileTypeMaskIcon_IconIndexDefInprocHandlerArgumentIniLocatorSectionFieldCompLocatorComponentIdBBControlBillboard_XYWidthHeightTextProgIdProgId_ParentClass_ControlDialog_PropertyControl_NextHelpSetupProgressCancelPushButtonBack< &BackNext&Next >DlgDescThe program features you selected are being installed.DlgDesc2The program features you selected are being uninstalled.DlgTextPlease wait while the Install Wizard installs [ProductName]. This may take several minutes.DlgText2Please wait while the Wizard uninstalls [ProductName]. This may take several minutes.DlgTitle{&MSSansBold8}Installing Java Auto Update SoftwareDlgTitle2{&MSSansBold8}UninstallingActionProgress95ProgressBarProgress doneBannerLineLineDlgLineLbSec(Hidden for now)Sec.LbStatusStatus:SetupIconIconNewBinary9ShowTime(Hidden for now)TextTime)Hidden for now)Estimated time remaining:SetupCompleteErrorBaseimageBitmapImageFinishText2Click Finish to exit the wizard.RestContText2Text1TextLine1TextLine2The wizard was interrupted before [ProductName] could be completely installed.SetupCompleteSuccessOKSetupInterruptedSetupErrorErrorText&YesN&NoA&AbortC&CancelI&IgnoreO&OKR&RetryCancelSetupNoYesAre you sure you want to cancel [ProductName] installation?FilesInUseRetryIgnoreExit&ExitListListBoxFileInUseProcessSome files that need to be updated are currently in use.The following applications are using files that need to be updated by this setup. Close these applications and click Retry to continue.{&MSSansBold8}Files in UseDialogHCenteringVCenteringTitleControl_FirstControl_DefaultControl_Cancel[ProductName] - ProgressJava SetupDuplicateFileFile_SignatureMinVersionMaxVersionMinSizeMaxSizeMinDateMaxDateLanguagesRadioButtonValueSFPCatalogCatalogDependencyShortcutTargetHotkeyShowCmdWkDirDisplayResourceDLLDisplayResourceIdDescriptionResourceDLLDescriptionResourceIdDrLocatorParentPathDepthIsolatedComponentComponent_SharedComponent_ApplicationAdminExecuteSequenceTextStyleFaceNameSizeColorStyleBitsTahoma8TahomaArial8ArialArial9ArialBlue10ArialBlueStrike10CourierNew8Courier NewCourierNew9MSGothic9MS GothicMSSansBold8MSSansSerif8MS Sans SerifMSSansSerif9MSSGreySerif8MSSWhiteSerif8Tahoma10Tahoma9TahomaBold10TahomaBold8Times8Times New RomanTimes9TimesItalic12TimesItalicBlue10TimesRed16MsiPatchCertificatePatchCertificateDigitalCertificate_CustomActionSource[%ALLUSERSPROFILE][%SystemRoot]\Profiles\All Users[%USERPROFILE]auutilsDLLRegToTaskUnregToTaskRegToTask64bitInstallAUpdateUninstallAUpdateShutdownJuschedMediaDiskIdLastSequenceDiskPromptCabinetVolumeLabel1DISK1MsiFileHashHashPart1HashPart2HashPart3HashPart4FeatureFeature_ParentDisplayLevelauAU2.0ODBCTranslatorTranslatorFile_SetupEventMappingGBbytesUITextIniFileSetProgressAdminInstallFinalizeProgressAttributeEventControl_KBMBAbsentPathMenuAbsentThis feature will not be available.MenuAdvertiseDon't install this feature now.MenuAllCDThis feature, and all subfeatures, will be installed to run from the CD.MenuAllLocalThis feature, and all subfeatures, will be installed on local hard drive.MenuAllNetworkThis feature, and all subfeatures, will be installed to run from the network.MenuCDThis feature will be installed to run from CD.MenuLocalThis feature will be installed on local hard drive.MenuNetworkThis feature will be installed to run from network.NewFolderFldr|New FolderSelAbsentAbsentThis feature will remain uninstalled.SelAbsentAdvertiseThis feature will be set to be installed when required.SelAbsentCDSelAbsentLocalThis feature will be installed on the local hard drive.SelAbsentNetworkThis feature will be installed to run from the network.SelAdvertiseAbsentThis feature will become unavailable.SelAdvertiseAdvertiseWill be installed when required.SelAdvertiseCDThis feature will be available to run from CD.SelAdvertiseLocalThis feature will be installed on your local hard drive.SelAdvertiseNetworkThis feature will be available to run from the network.SelCDAbsentThis feature will be uninstalled completely, and you won't be able to run it from CD.SelCDAdvertiseThis feature was run from the CD but will be set to be installed when required.SelCDCDThis feature will continue to be run from the CDSelCDLocalThis feature was run from the CD but will be installed on the local hard drive.SelChildCostNegThis feature frees up [1] on your hard drive.SelChildCostPosThis feature requires [1] on your hard drive.SelCostPendingCompiling cost for this feature...SelLocalAbsentThis feature will be completely removed.SelLocalAdvertiseThis feature will be removed from your local hard drive but will be set to be installed when required.SelLocalCDThis feature will be removed from your local hard drive but will still be available to run from CD.SelLocalLocalThis feature will remain on your local hard drive.SelLocalNetworkThis feature will be removed from your local hard drive, but will be still available to run from the network.SelNetworkAbsentThis feature will be uninstalled completely, and you won't be able to run it from the network.SelNetworkAdvertiseThis feature was run from the network but will be installed when required.SelNetworkLocalThis feature was run from the network but will be installed on the local hard drive.SelNetworkNetworkThis feature will continue to be run from the networkSelParentCostNegNegThis feature frees up [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures free up [4] on your hard drive.SelParentCostNegPosThis feature frees up [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures require [4] on your hard drive.SelParentCostPosNegThis feature requires [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures free up [4] on your hard drive.SelParentCostPosPosThis feature requires [1] on your hard drive. It has [2] of [3] subfeatures selected. The subfeatures require [4] on your hard drive.TimeRemainingTime remaining: {[1] min }[2] secVolumeCostAvailableAvailableVolumeCostDifferenceDifferencesVolumeCostRequiredRequiredVolumeCostSizeDisk SizeVolumeCostVolumeVolumeAdvtExecuteSequenceComplusExpTypeDataPublishComponentQualifierAppDataRegistryRegistry1SOFTWARE\Microsoft\Windows\CurrentVersion\RunSunJavaUpdateSched"[INSTALLDIR]jusched.exe"setrunkeyRegistry3SOFTWARE\JavaSoft\Auto UpdateAUVersionRemoveIniFileMsiAssemblyFile_ManifestFile_ApplicationCheckBoxKeyPath{96DFAA25-C456-4470-9638-DA1A52F67C9A}OEMUPDATE=0 AND DISABLE=0{4D5CF522-0BDC-475C-987E-5F111CD11028}{4D5AF522-0BDC-475C-987E-5F111CD11028}{4D5CF522-0BDA-475C-987E-5F111CD11028}{4D5CF522-0BDB-475C-987E-5F111CD11028}{F51BB9DA-7CA1-4D67-B967-E8FDA5208B69}{4CC5121E-C213-4A85-8A9F-6D0311F54B75}InstallUISequenceResolveSourceNot Installed And Not PATCHIsolateComponentsSDKSILENT=0 And ENDDIALOG=1SDKSILENT=0ExecuteAction(Not Installed) And (Installed)ODBCSourceAttributeDataSource_ControlEventSpawnDialogEndDialogErrorYesErrorNoErrorAbortErrorCancelErrorIgnoreErrorOkErrorRetryReturnServiceControlWaitLaunchConditionODBCAttributeDriver_MsiAssemblyNameReserveCostReserveKeyReserveFolderReserveLocalReserveSourceFeatureComponentsFileSFPCatalogSFPCatalog_CreateFolderExtensionProgId_MIME_PatchPatchSizeHeaderStreamRef_ISDFLInfoLongIdSelfRegODBCDriverDriverAdminUISequenceVerbCommandPatchPackagePatchIdMedia_ManufacturerSun Microsystems, Inc.ProductCode{4A03706F-666A-4037-7777-5F2748764D10}ProductLanguageProductNameJava Auto UpdaterProductVersion{4CAACC5A-B5F0-4B96-7777-CA8F526664C7}DefaultUIFontErrorDialogProgressType0installDialogCaptionInstallShield for Windows InstallerISVROOT_PORT_NOARPNOREMOVEDisplayNameMinimalMinimalARPNOMODIFYRebootYesNoApplicationUsersAllUsersDWUSINTERVAL30ProductIDnoneISCHECKFORPRODUCTUPDATESReinstallModeTextomus_IsMaintenanceChange_IsSetupTypeMinTypicalARPNOREPAIRDisplayNameCustomCustomProgressType2installedProgressType3installsARPSYSTEMCOMPONENTISSCRIPT_VERSION_OLDThe InstallScript engine on this machine is older than the version required to run this setup. If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.ISSCRIPT_VERSION_MISSINGThe InstallScript engine is missing from this machine. If available, please run ISScript.msi, or contact your support personnel for further assistance.DisplayNameTypicalDisplay_IsBitmapDlgOEMUPDATEDISABLEAgreeToLicensePIDTemplate12345<###-%%%%%%%>@@@@@INSTALLLEVEL100InstallChoiceARSetupTypeProgressType1InstallingMsiDigitalCertificateDigitalCertificateCertDataBinaryControlConditionShowProgressType2="installed"ProgressType2="uninstalled"ProgressType3="installs"ProgressType3="uninstalls"ProgressType1="Installing"ProgressType1="Uninstalling"RemoveRegistryODBCDataSourceDataSourceDriverDescriptionRegistrationMsiDigitalSignatureSignObjectHashListViewBinary_ComboBoxEnvironmentFontFontTitle_ValidationColumnNullableMinValueMaxValueKeyTableKeyColumnCategorySetIdentifierName of action to be described.Localized description displayed in progress dialog and log when action is executing.Optional localized format template used to format action data records for display during action execution.Unique identifier for directory entry, primary key. If a property by this name is defined, it contains the full path to the directory.Reference to the entry in this table specifying the default parent directory. A record parented to itself or with a Null parent represents a root of the install tree.The default sub-path under parent's path.Primary key, non-localized token, must match identifier in cabinet. For uncompressed files, this field is ignored.Foreign key referencing Component that controls the file.FilenameFile name used for installation, may be localized. This may contain a "short name|long name" pair.Size of file in bytes (long integer).Version string for versioned files; Blank for unversioned files.List of decimal language Ids, comma-separated if more than one.Integer containing bit flags representing file attributes (with the decimal value of each bit position in parentheses)Sequence with respect to the media images; order must track cabinet order.Primary key used to identify a particular file entryForeign key referencing Component that controls the file to be removed.WildCardFilenameName of the file to be removed.Name of a property whose value is assumed to resolve to the full pathname to the folder of the file to be removed.1;2;3Installation option, one of iimEnum.GuidThe GUID that represents the library.The language of the library.Required foreign key into the Component Table, specifying the component for which to return a path when called through LocateComponent.The version of the library. The minor version is in the lower 8 bits of the integer. The major version is in the next 16 bits. Optional. The foreign key into the Directory table denoting the path to the help file for the type library.Required foreign key into the Feature Table, specifying the feature to validate or install in order for the type library to be operational.The cost associated with the registration of the typelib. This column is currently optional.Foreign key into Registry or File tableDirectory;File;RegistryReference to another table nameFormattedDomain name for user whose permissions are being set. (usually a property)User for permissions to be set. (usually a property)Permission Access mask. Full Control = 268435456 (GENERIC_ALL = 0x10000000)The UpgradeCode GUID belonging to the products in this set.The minimum ProductVersion of the products in this set. The set may or may not include products with this particular version.The maximum ProductVersion of the products in this set. The set may or may not include products with this particular version.A comma-separated list of languages for either products in this set or products not in this set.The attributes of this product set.The list of features to remove when uninstalling a product from this set. The default is "ALL".UpperCaseThe property to set when a product in this set is found.The table key. The Signature_ represents a unique file signature and is also the foreign key in the Signature table. If the type is 0, the registry values refers a directory, and _Signature is not a foreign key.The predefined root key for the registry value, one of rrkEnum.RegPathThe key for the registry value.The registry value name.An integer value that determines if the registry value is a filename or a directory location or to be used as is w/o interpretation.Name of action to invoke, either in the engine or the handler DLL.Optional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.Number that determines the sort order in which the actions are to be executed. Leave blank to suppress action.Primary key that uniquely identifies a particular MoveFile recordIf this component is not "selected" for installation or removal, no action will be taken on the associated MoveFile entryName of the source file(s) to be moved or copied. Can contain the '*' or '?' wildcards.Name to be given to the original file after it is moved or copied. If blank, the destination file will be given the same name as the source fileName of a property whose value is assumed to resolve to the full path to the source directoryName of a property whose value is assumed to resolve to the full path to the destination directoryInteger value specifying the MoveFile operating mode, one of imfoEnumSignature;RegLocator;IniLocator;DrLocator;CompLocatorThe Signature_ represents a unique file signature and is also the foreign key in the Signature, RegLocator, IniLocator, CompLocator and the DrLocator tables.Component contained in the module.ModuleSignatureModule containing the component.Default language ID for module (may be changed by transform).Name of the billboard.An external key to the Feature Table. The billboard is shown only if this feature is being installed.The name of an action. The billboard is displayed during the progress messages received from this action.A positive integer. If there is more than one billboard corresponding to an action they will be shown in the order defined by this column.Integer error number, obtained from header file IError(...) macros.Error formatting template, obtained from user ed. or localizers.Primary key. Context identifier, typically "type/format".Optional associated extension (without dot)Optional associated CLSID.Primary key, non-localized token.Internal Name of the ServiceExternal Name of the ServiceType of the serviceSeverity of error if service fails to startOther services this depends on to start. Separate by [~], and end with [~][~]User or object name to run service aspassword to run service with. (with StartName)Arguments to include in every start of the service, passed to WinMainRequired foreign key into the Component Table that controls the startup of the serviceDescription of service.The CLSID of an OLE factory.The numeric server context for this server. CLSCTX_xxxxOptional ProgId associated with this CLSID.Localized description for the Class.Optional AppID containing DCOM information for associated application (string GUID).Optional string containing information for the HKCRthis CLSID) key. If multiple patterns exist, they must be delimited by a semicolon, and numeric subkeys will be generated: 0,1,2...Optional foreign key into the Icon Table, specifying the icon file associated with this CLSID. Will be written under the DefaultIcon key.Optional icon index.Optional default inproc handler. Only optionally provided if Context=CLSCTX_LOCAL_SERVER. Typically "ole32.dll" or "mapi32.dll"optional argument for LocalServers.Required foreign key into the Feature Table, specifying the feature to validate or install in order for the CLSID factory to be operational.Class registration attributes.The table key. The Signature_ represents a unique file signature and is also the foreign key in the Signature table.The .INI file name.Section name within in file (within square brackets in INI file).Key value (followed by an equals sign in INI file).The field in the .INI line. If Field is null or 0 the entire line is read.An integer value that determines if the .INI value read is a filename or a directory location or to be used as is w/o interpretation.A string GUID unique to this component, version, and language.A boolean value that determines if the registry value is a filename or a directory location.External key to the Billboard table, name of the billboard.Name of the control. This name must be unique within a billboard, but can repeat on different billboard.The type of the control.Horizontal coordinate of the upper left corner of the bounding rectangle of the control.Vertical coordinate of the upper left corner of the bounding rectangle of the control.Width of the bounding rectangle of the control.Height of the bounding rectangle of the control.A 32-bit word that specifies the attribute flags to be applied to this control.A string used to set the initial text contained within a control (if appropriate).The Program Identifier. Primary key.The Parent Program Identifier. If specified, the ProgId column becomes a version independent prog id.The CLSID of an OLE factory corresponding to the ProgId.Localized description for the Program identifier.Optional foreign key into the Icon Table, specifying the icon file associated with this ProgId. Will be written under the DefaultIcon key.External key to the Dialog table, name of the dialog.Name of the control. This name must be unique within a dialog, but can repeat on different dialogs. The name of a defined property to be linked to this control. The name of an other control on the same dialog. This link defines the tab order of the controls. The links have to form one or more cycles!The help strings used with the button. The text is optional. Name of the dialog.Horizontal position of the dialog on a 0-100 scale. 0 means left end, 100 means right end of the screen, 50 center.Vertical position of the dialog on a 0-100 scale. 0 means top end, 100 means bottom end of the screen, 50 center.Width of the bounding rectangle of the dialog.Height of the bounding rectangle of the dialog.A 32-bit word that specifies the attribute flags to be applied to this dialog.A text string specifying the title to be displayed in the title bar of the dialog's window.Defines the control that has the focus when the dialog is created.Defines the default control. Hitting return is equivalent to pushing this button.Defines the cancel control. Hitting escape or clicking on the close icon on the dialog is equivalent to pushing this button.Foreign key referencing Component that controls the duplicate file.Foreign key referencing the source file to be duplicated.Filename to be given to the duplicate file.Name of a property whose value is assumed to resolve to the full pathname to a destination folder.The table key. The Signature represents a unique file signature.The name of the file. This may contain a "short name|long name" pair.The minimum version of the file.The maximum version of the file.The minimum size of the file.The maximum size of the file. The minimum creation date of the file.The maximum creation date of the file.The languages supported by the file.A named property to be tied to this radio button. All the buttons tied to the same property become part of the same group.A positive integer used to determine the ordering of the items within one list..The integers do not have to be consecutive.The value string associated with this button. Selecting the button will set the associated property to this value.The horizontal coordinate of the upper left corner of the bounding rectangle of the radio button.The vertical coordinate of the upper left corner of the bounding rectangle of the radio button.The width of the button.The height of the button.The visible title to be assigned to the radio button.The help strings used with the button. The text is optional.File name for the catalog.SFP CatalogParent catalog - only used by SFPForeign key into the Directory table denoting the directory where the shortcut file is created.The name of the shortcut to be created.Foreign key into the Component table denoting the component whose selection gates the the shortcut creation/deletion.The shortcut target. This is usually a property that is expanded to a file or a folder that the shortcut points to.The command-line arguments for the shortcut.The description for the shortcut.The hotkey for the shortcut. It has the virtual-key code for the key in the low-order byte, and the modifier flags in the high-order byte. Foreign key into the File table denoting the external icon file for the shortcut.The icon index for the shortcut.1;3;7The show command for the application window.The following values may be used.Name of property defining location of working directory.The Formatted string providing the full path to the language neutral file containing the MUI Manifest.The display name index for the shortcut. This must be a non-negative number.The description name index for the shortcut. This must be a non-negative number.The Signature_ represents a unique file signature and is also the foreign key in the Signature table.The parent file signature. It is also a foreign key in the Signature table. If null and the Path column does not expand to a full path, then all the fixed drives of the user system are searched using the Path.AnyPathThe path on the user system. This is a either a subpath below the value of the Parent or a full path. The path may contain properties enclosed within [ ] that will be expanded.The depth below the path to which the Signature_ is recursively searched. If absent, the depth is assumed to be 0.Key to Component table item to be isolatedKey to Component table item for applicationName of the style. The primary key of this table. This name is embedded in the texts to indicate a style change.A string indicating the name of the font used. Required. The string must be at most 31 characters long.The size of the font used. This size is given in our units (1/12 of the system font height). Assuming that the system font is set to 12 point size, this is equivalent to the point size.A long integer indicating the color of the string in the RGB format (Red, Green, Blue each 0-255, RGB = R   256*G   256^2*B).A combination of style bits.Primary key, name of action, normally appears in sequence table unless private use.The numeric custom action type, consisting of source location, code type, entry, option flags.CustomSourceThe table reference of the source of the code.Excecution parameter, depends on the type of custom actionPrimary key, integer to determine sort order for table.File sequence number for the last file for this media.Disk name: the visible text actually printed on the disk. This will be used to prompt the user when this disk needs to be inserted.If some or all of the files stored on the media are compressed in a cabinet, the name of that cabinet.The label attributed to the volume.The property defining the location of the cabinet file.Primary key, foreign key into File table referencing file with this hashVarious options and attributes for this hash.Primary key used to identify a particular feature record.Optional key of a parent record in the same table. If the parent is not selected, then the record will not be installed. Null indicates a root item.Short text identifying a visible feature item.Longer descriptive text describing a visible feature item.Numeric sort order, used to force a specific display ordering.The install level at which record will be initially selected. An install level of 0 will disable an item and prevent its display.The name of the Directory that can be configured by the UI. A non-null value will enable the browse button.0;1;2;4;5;6;8;9;10;16;17;18;20;21;22;24;25;26;32;33;34;36;37;38;48;49;50;52;53;54Feature attributesPrimary key, non-localized.internal token for translatorReference to associated componentText used as registered name for translatorReference to key translator fileOptional reference to key translator setup DLL_SummaryInformationPropertyIdA foreign key to the Dialog table, name of the Dialog.A foreign key to the Control table, name of the control.An identifier that specifies the type of the event that the control subscribes to.The name of the control attribute, that is set when this event is received.The .INI file name in which to write the informationForeign key into the Directory table denoting the directory where the .INI file is.The .INI file Section.The .INI file key below Section.The value to be written.0;1;3The type of modification to be made, one of iifEnumForeign key into the Component table referencing component that controls the installing of the .INI value.A named property to be tied to this item. All the items tied to the same property become part of the same listbox.The value string associated with this item. Selecting the line will set the associated property to this value.The visible text to be assigned to the item. Optional. If this entry or the entire column is missing, the text is the same as the value.A unique key that identifies the particular string.The localized version of the string.Foreign key referencing Component that controls the ComPlus component.ComPlus component attributes.Primary key. Name of the icon file.Binary stream. The binary icon data in PE (.DLL or .EXE) or icon (.ICO) format.A string GUID that represents the component id that will be requested by the alien product.This is defined only when the ComponentId column is an Qualified Component Id. This is the Qualifier for ProvideComponentIndirect.Foreign key into the Component table.This is localisable Application specific data that can be associated with a Qualified Component.Foreign key into the Feature table.The registry value.Foreign key into the Component table referencing component that controls the installing of the registry value.The .INI file name in which to delete the informationThe value to be deleted. The value is required when Action is iifIniRemoveTag2;4The type of modification to be made, one of iifEnum.Foreign key into the Component table referencing component that controls the deletion of the .INI value.Foreign key into Component table.Foreign key into Feature table.Foreign key into the File table denoting the manifest file for the assembly.Foreign key into File table, denoting the application context for private assemblies. Null for global assemblies.Assembly attributesA named property to be tied to the item.The value string associated with the item.Primary key used to identify a particular component record.Required key of a Directory table record. This is actually a property name whose value contains the actual path, set either by the AppSearch action or with the default setting obtained from the Directory table.Remote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.File;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract path is stored when the component is installed, and is used to detect the presence of the component and to return the path to it.Reference to ODBC data source in ODBCDataSource tableName of ODBC data source attributeValue for ODBC data source attributeA foreign key to the Dialog table, name of the dialog.A foreign key to the Control table, name of the controlAn identifier that specifies the type of the event that should take place when the user interacts with control specified by the first two entries.A value to be used as a modifier when triggering a particular event.A standard conditional statement that specifies under which conditions an event should be triggered.An integer used to order several events tied to the same control. Can be left blank.Reference to a Feature entry in Feature table.New selection Level to set in Feature table if Condition evaluates to TRUE.Expression evaluated to determine if Level in the Feature table is to change.Name of a service. /, \, comma and space are invalidBit field: Install: 0x1 = Start, 0x2 = Stop, 0x8 = Delete, Uninstall: 0x10 = Start, 0x20 = Stop, 0x80 = DeleteArguments for the service. Separate by [~].Boolean for whether to wait for the service to fully startExpression which must evaluate to TRUE in order for install to commence.Localizable text to display when condition fails and install must abort.Reference to ODBC driver in ODBCDriver tableName of ODBC driver attributeValue for ODBC driver attributeThe name part of the name-value pairs for the assembly name.The value part of the name-value pairs for the assembly name.Primary key that uniquely identifies a particular ReserveCost recordReserve a specified amount of space if this component is to be installed.Disk space to reserve if linked component is installed locally.Disk space to reserve if linked component is installed to run from the source location.File associated with the catalogCatalog associated with the filePrimary key, could be foreign key into the Directory table.The extension associated with the table row.Optional ProgId associated with this extension.Optional Context identifier, typically "type/format" associated with the extensionPrimary key, non-localized token, foreign key to File table, must match identifier in cabinet.Primary key, sequence with respect to the media images; order must track cabinet order.Size of patch in bytes (long integer).Integer containing bit flags representing patch attributesBinary stream. The patch header, used for patch validation.Identifier. Foreign key to the StreamRef column of the MsiPatchHeaders table.Foreign key into the File table denoting the module that needs to be registered.The cost of registering the module.Primary key, non-localized.internal token for driverText used as registered name for driver, non-localizedReference to key driver fileOptional reference to key driver setup DLLThe verb for the command.Order within the verbs for a particular extension. Also used simply to specify the default verb.The command text.Optional value for the command arguments.The property associated with a SignatureA unique string GUID representing this patch.Foreign key to DiskId column of Media table. Indicates the disk containing the patch package.Name of property, uppercase if settable by launcher or loader.String value for property. Never null or empty.A unique identifier for the rowA certificate context blob for a signer certificateUnique key identifying the binary data.The unformatted binary data.Default;Disable;Enable;Hide;ShowThe desired action to be taken on the specified control.A standard conditional statement that specifies under which conditions the action should be triggered.The predefined root key for the registry value, one of rrkEnumForeign key into the Component table referencing component that controls the deletion of the registry value.Primary key, non-localized.internal token for data sourceText used as registered name for data sourceReference to driver description, may be existing driverRegistration option: 0=machine, 1=user, others t.b.d.Reference to another table name (only Media table is supported)Foreign key to Media tableForeign key to MsiDigitalCertificate table identifying the signer certificateThe encoded hash blob from the digital signatureA named property to be tied to this item. All the items tied to the same property become part of the same listview.The name of the icon to be displayed with the icon. The binary information is looked up from the Binary Table.A named property to be tied to this item. All the items tied to the same property become part of the same combobox.A positive integer used to determine the ordering of the items within one list. The integers do not have to be consecutive.Unique identifier for the environmental variable settingThe name of the environmental value.The value to set in the environmental settings.Foreign key into the Component table referencing component that controls the installing of the environmental value.Primary key, foreign key into F
ile table referencing font file.Font name.The index into the File table. This must be an executable file.PathsA list of ; delimited paths that represent the paths to be searched for the import DLLS. The list is usually a list of properties each enclosed within square brackets [] .Name of tableName of columnY;NWhether the column is nullableMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;KeyFormatted;CustomSource;Property;Cabinet;Shortcut;URLString categorySet of values that are permittedDescription of columnpatchCertDgtlCert0au.cabd.Filename to be given to the duplicate file.Name of a property whose value is assumed to resolve to the full pathname to a destination folder.The table key. The Signature represents a unique file signature.The name of the file. This may contain a "short n
event that the control subscribes to.The name of the control attribute, that is set when this event is received.The .INI file name in which to write the informationForeign key into the Directo
RSSj%S
.text
`.rdata
@.data
.rsrc
@.reloc
PSSj%S
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
"%s\schtasks.exe" /delete /tn JavaUpdateSched /f
"%s\schtasks.exe" /create /xml "%s\Java\Java Update\task64.xml" /tn JavaUpdateSched /f
"%s\schtasks.exe" /create /xml "%s\Java\Java Update\task.xml" /tn JavaUpdateSched
Crypt32.dll
1.6.0_18
C:\HUDSON\workspace\Autoupdate2.1-update\obj\auutils\Release\auutils.pdb
msi.dll
KERNEL32.dll
USER32.dll
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
ADVAPI32.dll
SHELL32.dll
GetCPInfo
auutils.dll
?EXEInstallAUpdate@@YAXXZ
?EXERegToTask@@YAXXZ
?EXEUninstallAUpdate@@YAXXZ
2*3034383<3
?!?&?,?=?
2Terms of use at https://www.verisign.com/rpa (c)09100.
3http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0?
3http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer0
.Class 3 Public Primary Certification Authority0
https://www.verisign.com/cps0*
#http://logo.verisign.com/vslogo.gif0
http://ocsp.verisign.com01
http://crl.verisign.com/pca3.crl0)
http://ocsp.verisign.com0
"http://crl.verisign.com/tss-ca.crl0
Thawte Certification1
0http://crl.verisign.com/ThawteTimestampingCA.crl0
task.xml
task64.xml
%FyMq
.pVxh1c
vnU%d
.TJMcg`
.vzLn6
AV.LI
jE%U-
OTcP
.xnGb
M/"%x
.zF^]
.r6.Ot
95%ui"
Y.eEf8
%X>!m
^rUeo.HD=^
n7.css
_.WL5
%s%^3
?`cH`%cs
a,w.lm
Œ*N:-
%cQ~G.
I1.eR
FW.hS
B;.VhGc
IUdP
l%U R9@Y
vR%x/
mtB.fo
0.lR"
.cemO
OkEy
$%xZ]
W%Ckv
Z.ua[
.qdPZ{
!p-.QO
Em.Sr:v
%for\
JoÚ
'o%X[
.jP\ 
.lEy]my
.reloc
RAM %s
MB, # %s =
kernel32.dll
Error: %s
Unsupported base types. Edit Common/Types.h and recompile
Error: can not open input file %s
Error: can not open output file %s
Encoder error = %d
Encoder error = %X
: :$:(:|;
GetWindowsDirectoryA
GetProcessHeap
RegQueryInfoKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryInfoKeyW
SetViewportOrgEx
ShellExecuteA
URLDownloadToFileA
IsValidURL
CreateDialogIndirectParamA
EnumWindows
MsgWaitForMultipleObjectsEx
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
ekernel32.dll
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
KERNEL32.DLL
WUSER32.DLL
java.com
http://java.com/ja/download/help
http://java.com/zh_CN/download/help
http://java.com/ko/download/help
http://java.com/zh_TW/download/help
Besuchen Sie unsere Webseite unter:
http://java.com/de/download/help
Um das Java(TM)-Installationsprogramm neu zu starten, aktualisieren Sie die Webseite.
http://java.com/es/download/help
gina web.
Consulte las instrucciones si desea modificar este comportamiento.
phones portables, ordinateurs de bureau, lecteurs Blu-ray, Set Top Box), et m
http://java.com/fr/download/help
marrer le programme d'installation de Java(TM), actualisez la page Web.
e car certains fichiers Java
Si vous souhaitez modifier ce comportement, consultez les instructions.
Visitare il sito Web all'indirizzo
http://java.com/it/download/help
Per riavviare l'Installer Java(TM), aggiornare la pagina Web.
Quando sono disponibili nuovi aggiornamenti Java, viene richiesto di procedere allo scaricamento e all'installazione. Si consiglia di effettuare sempre queste operazioni per garantire al sistema i miglioramenti di prestazioni e sicurezza pi
http://java.com/sv/download/help
rnya webbsidan.
Starta om webbl
http://java.com/pt_BR/download/help
gina Web.
es caso deseje alterar esse comportamento.
http://java.com/en/download/help
To restart the Java(TM) installer, please refresh the web page.
lPassword Data
au.ms
au.ca
HTTP Error 403
http://java.com/error403
: %s {[/h]|[/installurl=
URL] [/lang=language id]} [/s] [msi
cmdline
http://java.sun.com/javase
Windows Installer
*http://java.com/ja/download/help/index.xml
http://java.com/license/
http://java.com/data/
!Java(TM) %s
http://java.com/autoupdate,Java
http://java.com/error403"
: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
Windows
http://java.sun.com/javase
Windows Installer
-http://java.com/zh_CN/download/help/index.xml
Java(TM) %s
http://java.com/autoupdate
: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
. Windows
http://java.sun.com/javase
Windows Installer
*http://java.com/ko/download/help/index.xml
Java(tm) %s
http://java.com/error403
URL] [/lang=
cmdline
Windows
-http://java.com/zh_TW/download/help/index.xml
ltigen Syntax nicht vom Server verarbeitet werden.OF
glicherweise hat ein Proxy, eine Firewall oder ein anderes Netzwerkproblem einen HTTP-Fehler 403 verursacht.
Informationen finden Sie unter http://java.com//error403eServer konnte keine
ssig.EEs wurden keine Antworten gefunden, die f
ssig sind.$Proxyauthentifizierung erforderlich..Servertimeout beim Warten auf die Anforderung.
gen und die Anforderung erneut weiterleiten.sDie angeforderte Ressource ist nicht mehr auf dem Server verf
gbar, und es ist keine Weiterleitungsadresse bekannt.BServer lehnt die Anforderung ohne eine definierte Contentl
nge ab.uAuswertung der in einem oder mehreren Anforderungs-Header-Feldern angegebenen Bedingung auf dem Server ergab "false".
hrung der Anforderung verhindert hat.WDie f
llung der Anforderung zugegriffen hat.%Service ist vor
berlastet.LBeim Warten auf ein Gateway ist ein Timeout f
tzt die in der Anforderungsmeldung verwendete Version des HTTP-Protokolls nicht, bzw. er verweigert die Unterst
Sie befinden sich in einem Land, das einem Embargo unterliegt.VServer kann Java(TM) gegenw
HTTP-Statuscode=%d
0Exportkontrolle - Java(TM)-Installationsprogramm3Server ausgelastet - Java(TM)-Installationsprogramm.Serverproblem - Java(TM)-Installationsprogramm3Unbekannter Fehler - Java(TM)-Installationsprogramm
Verbindung wird hergestellt...!HTTP-Anforderung wird ge
ffnet...!HTTP-Anforderung wird gesendet...?Server ist derzeit ausgelastet. Wiederholung in %ld Sekunden...
Verwendung: %s {[/h]|[/installurl=URL der Konfigurations- oder MSI-Datei] [/lang=Sprach-ID]} [/s] [Befehlszeilenoptionen f
r MSI-Installationsprogramm] 'Fehler - Java(TM)-Installationsprogramm:%s kann f
r die Installation nicht heruntergeladen werden.(Warnung - Java(TM)-Installationsprogramm8Voraussichtliche Restdauer: %d Stunden %d Min. %.0f Sek.7Voraussichtliche Restdauer: %d Stunde %d Min. %.0f Sek.-Voraussichtliche Restdauer: %d Min. %.0f Sek.%Voraussichtliche Restdauer: %.0f Sek.'Ung
fen Sie die Einstellungen und Proxyangaben in der Windows-Systemsteuerung unter "Internetoptionen" -> "Verbindungen".
Installationsprogramm kann mit den aktuellen Internetverbindungseinstellungen nicht fortgesetzt werden. Weitere Informationen dazu finden Sie auf der folgenden Website.
ltere Version zu installieren, informieren Sie sich unter http://java.sun.com/javase, ob die Version noch unterst
Installationsprogramm kann mit dem derzeit auf dem System installierten Windows-Installationsprogramm nicht fortfahren. Weitere Informationen dazu finden Sie auf der folgenden Website.
*http://java.com/de/download/help/index.xml
chten Sie die Installation von Java(tm) %s wirklich abbrechen?
&Sie haben Java erfolgreich installiert8Sie haben Java und Bing Toolbar erfolgreich installiert.:Sie haben Java und Yahoo! Toolbar erfolgreich installiert.RSie haben Java erfolgreich installiert
http://java.com/autoupdateOSie haben Java erfolgreich installiert
Es posible que un problema con el proxy, el firewall o la red haya causado un Error de HTTP 403.
Consulte http://java.com/error403jEl servidor no ha encontrado nada que coincida con el URI (Identificador de Recursos Uniforme) solicitado.&El m
n.cEl recurso solicitado ya no est
o.XEl servidor rechaza la solicitud porque no consta de una longitud de contenido definida.
en un formato no soportado por el recurso solicitado para el m
n inesperada que ha impedido que cumpla la solicitud.LEl servidor no soporta la funcionalidad necesaria para cumplir la solicitud.
temporalmente sobrecargado.@La solicitud ha sufrido un timeout mientras esperaba al gateway.wEl servidor no soporta, o rechaza por configuraci
n de protocolo HTTP utilizada en el mensaje de solicitud.
s bajo embargo.VEl servidor no puede suministrar Java(TM) en este momento.
digo de estado HTTP=%d
/Control de Exportaci
Abriendo solicitud HTTP...
Enviando solicitud HTTP...@El servidor est
Sintaxis: %s {[/h]|[/installurl=URL de archivo de configuraci
Error - Instalador de Java(TM)1No se ha podido descargar %s para la instalaci
n.$Advertencia - Instalador de Java(TM)2Tiempo restante estimado: %d horas %d min %.0f seg2Tiempo restante estimado: %d horas %d min %.0f seg)Tiempo restante estimado: %d min %.0f seg"Tiempo restante estimado: %.0f seg5La sintaxis del archivo de configuraci
n a Internet. Examine Opciones de Internet -> Conexiones en el Panel de control de Windows para asegurarse de que la informaci
gina web para obtener m
n beta o anterior, consulte http://java.sun.com/javase para determinar si est
soportada. Si lo est
El instalador no puede continuar con el actual instalador de Windows presente en su sistema. Visite la siguiente p
*http://java.com/es/download/help/index.xml
n de Java(tm) %s?
"Java se ha instalado correctamenteJava y la barra Yahoo! Toolbar se han instalado correctamente.SHa instalado Java correctamente
en un momento.RHa instalado Java correctamente.
OLe serveur n'a pas pu traiter cette demande en raison d'une syntaxe non valide.DLa ressource demand
nent une erreur HTTP 403.
Reportez-vous
la page http://java.com/error403.Le serveur n'a trouv
nouveau avec plus d'informations.jLa ressource demand
dition n'est connue.WLe serveur refuse d'accepter la demande en l'absence d'une longueur d
celles que le serveur est en mesure de traiter.yLe serveur refuse de traiter la demande car l'URI de la demande est plus long que ceux qu'il est en mesure d'interpr
lors de sa tentative de traitement de la demande alors qu'il agissait en tant que passerelle ou proxy.(Le service est temporairement surcharg
.?Temporisation de la demande lors de l'attente d'une passerelle.
Le serveur ne prend pas en charge ou refuse de prendre en charge la version du protocole HTTP utilis
sidez dans un pays sous embargo.XLe serveur n'est, pour le moment, pas en mesure de fournir Java.
code statut HTTP=%d
le de l'export - Programme d'installation de Java(TM)5Serveur occup
Ouverture de la demande HTTP...
Envoi de la demande HTTP...5Le serveur est occup
Syntaxe : %s {[/h]|[/installurl=URL du fichier de configuration ou du fichier msi] [/lang=ID de langue]} [/s] [options de ligne de commande du programme d'installation msi] -Erreur - Programme d'installation de Java(TM).Impossible de t
charger %s pour l'installer.4Avertissement - Programme d'installation de Java(TM);Temps restant estim
: %d heures, %d minutes, %.0f secondes:Temps restant estim
: %d heure, %d minutes, %.0f secondes0Temps restant estim
: %d minutes, %.0f secondes$Temps restant estim
: %.0f secondes.Syntaxe non valide du fichier de configuration
me. Dans le Panneau de configuration de Windows, cliquez sur Options
tres de connexion Internet en cours. Pour plus d'informations, visitez le site Web suivant.
rifiez que leur prise en charge est toujours valide sur la page Web http://java.sun.com/javase. Si tel est le cas, lancez l'installation ult
Le programme d'installation ne peut pas continuer avec le programme d'installation de Windows actuellement install
me. Pour plus d'informations, visitez le site Web suivant.
*http://java.com/fr/download/help/index.xml
3Voulez-vous annuler l'installation de Java(tm) %s ?
s.OJava est maintenant install
valida.CPer la risorsa richiesta
possibile che un problema a livello di proxy, firewall o di un altro componente di rete determini l'errore 'HTTP Error 403'.
Visitare il sito Web all'indirizzo http://java.com/error403.dIl server non ha trovato alcuna voce corrispondente all'URI (Uniform Resource Identifier) richiesto.&Il metodo utilizzato non
supportato dalla risorsa richiesta per il metodo richiesto.
[Il server ha rilevato una condizione imprevista che ha impedito di soddisfare la richiesta.NIl server non supporta la funzionalit
temporaneamente sovraccarico.0Timeout della richiesta in attesa di un gateway.`Versione del protocollo HTTP utilizzata nel messaggio della richiesta non supportata dal server.
L'utente si trova in un paese sottoposto a embargo.SIl server non
Codice stato HTTP=%d
 Controllo esportazione - Installer Java(TM)$Server occupato - Installer Java(TM)(Problema sul server - Installer Java(TM)'Errore sconosciuto - Installer Java(TM)
Connessione in corso...#Apertura richiesta HTTP in corso... Invio richiesta HTTP in corso...-Server occupato, riprovare tra %ld secondi...
Utilizzo: %s {[/h]|[/installurl=URL del file di configurazione o file msi] [/lang=id lingua]} [/s] [opzioni della riga di comando per l'Installer msi]
Errore - Installer Java(TM)-Impossibile scaricare %s per l'installazione.
Avvertenza - Installer Java(TM)/Tempo restante previsto: %d ore %d min %.0f sec/Tempo restante previsto: %d ora %d min %.0f sec(Tempo restante previsto: %d min %.0f sec!Tempo restante previsto: %.0f sec*Sintassi file di configurazione non valida
procedere con le impostazioni correnti di connessione a Internet del sistema. Nel pannello di controllo di Windows, selezionare Opzioni Internet, quindi Connessioni e verificare che le impostazioni e le informazioni del proxy siano corrette.
procedere con le impostazioni correnti di connessione a Internet. Per ulteriori informazioni, visitare il sito Web seguente.
Impossibile procedere con l'installazione in quanto i file richiesti per l'installazione non sono disponibili. Se si sta installando una versione beta o una versione precedente, visitare il sito Web all'indirizzo http://java.sun.com/javase per determinare se tale versione
ancora supportata. In caso affermativo, provare a eseguire l'installazione in un secondo momento. La mancata disponibilit
procedere con la versione corrente di Windows Installer installata nel sistema. Per ulteriori informazioni, visitare il sito Web seguente.
*http://java.com/it/download/help/index.xml
)Annullare l'installazione di Java(tm) %s?
stata completata.VImpostazione Java completata.
tra pochi secondi.SImpostazione Java completata.
tverksproblem som orsakar ett HTTP-fel 403.
Se http://java.com/error403OServern hittade ingenting som matchar beg
rd URI (Uniform Resource Identifier).Þn anv
ten..Inga svar som accepteras av klienten hittades.
ran igen med mer information.eDen beg
ngd.qDen f
ran.BServern st
tsluss.nServern st
dja, den version av HTTP-protokollet som anv
Du befinner dig i ett land med handelsembargo.FJava(TM) kan inte erbjudas fr
ka igen?.Ett ov
HTTP-statuskod=%d
#Exportkontroll - Java(TM) Installer(Servern
ppnar HTTP-beg
Skickar HTTP-beg
ran...CServern
Syntax: %s {[/h]|[/installurl=URL f
Fel - Java(TM) Installer'Kan inte ladda ned %s f
ende tid: %d tim %d min %.0f sek0Ber
ende tid: %d tim %d min %.0f sek)Ber
ende tid: %d min %.0f sek"Ber
ljande webbplats f
http://java.sun.com/javase om det fortfarande finns st
nda den aktuella versionen av Windows Installer som finns i systemet. Se f
*http://java.com/sv/download/help/index.xml
8Vill du verkligen avbryta installationen av Java(tm) %s?
Java har installerats..Java och verktygsf
ltet Bing har installerats..Java och Yahoo! Verktygsf
Carbonite-installationen startas inom kort.Java och Google Verktygsf
lt har installerats."Java Setup - starta om webbl
Om du inte startar om webbl
r att starta om webbl
Pode haver problemas com proxy, firewall ou outros problemas de rede que estejam causando o erro HTTP 403.
Consulte http://java.com/error403`O servidor n
es.kO recurso solicitado n
o de encaminhamento conhecido.UO servidor recusa-se a aceitar a solicita
o.VO servidor n
o oferece suporte
o oferece suporte, ou se recusa a oferecer suporte,
o do protocolo HTTP usada na mensagem de solicita
s embargado.OO servidor n
digo do status HTTP=%d
,Controle de Exporta
o HTTP ...
o HTTP ...GO servidor est
Uso: %s {[/h]|[/installurl=URL do arquivo de configura
es cmdline para o instalador msi]
vel fazer download de %s para a instala
ncia - Instalador Java(TM)/Tempo restante estimado: %d horas %d min %.0f s.Tempo restante estimado: %d hora %d min %.0f s&Tempo restante estimado: %d min %.0f s
Internet do seu sistema. No Painel de Controle do Windows, verifique Op
es para se certificar de que as defini
o beta ou mais antiga, consulte http://java.sun.com/javase para determinar se tal vers
o pode prosseguir com o Instalador Windows atual instalado no sistema. Visite o site a seguir para obter mais informa
-http://java.com/pt_BR/download/help/index.xml
?Tem certeza de que deseja cancelar a instala
o do Java(tm) %s?
There may be proxy, firewall, or other network issues causing an HTTP Error 403.
Please refer to http://java.com/error403[The server has not found anything matching the requested URI (Uniform Resource Identifier).
The request could not be completed due to a conflict with the current state of the resource. The user should resubmit with more information.`The requested resource is no longer available at the server, and no forwarding address is known.JThe server refuses to accept the request without a defined content length.wThe precondition given in one or more of the request header fields evaluated to false when it was tested on the server.
The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method.
]The server encountered an unexpected condition that prevented it from fulfilling the request.NThe server does not support the functionality required to fulfill the request.
The server, while acting as a gateway or proxy, received an invalid response from the upstream server it accessed in attempting to fulfill the request.&The service is temporarily overloaded.0The request was timed out waiting for a gateway.sThe server does not support, or refuses to support, the HTTP protocol version that was used in the request message.
You are located in an embargoed country.TThe server is unable to provide the Java(TM) at this time.
HTTP status code=%d
#Export Control - Java(TM) Installer Server Busy - Java(TM) Installer#Server Problem - Java(TM) Installer"Unknown Error - Java(TM) Installer
Opening HTTP request ...
Sending HTTP request ...2Server is currently busy, retry in %ld seconds ...
Usage: %s {[/h]|[/installurl=URL of configuration file or msi file] [/lang=language id]} [/s] [cmdline options for msi installer]
Error - Java(TM) Installer'Unable to download %s for installation.
Warning - Java(TM) Installer-Estimated time left: %d hours %d min %.0f sec,Estimated time left: %d hour %d min %.0f sec$Estimated time left: %d min %.0f sec
Java(TM) Installer cannot proceed with the current Internet Connection settings of your system. In your Windows Control Panel, please check Internet Options -> Connections to make sure the settings and proxy information are correct.
The installer cannot proceed with the current Internet Connection settings. Please visit the following web site for more information.
This installer cannot continue because the files necessary for installation are unavailable. If trying to install a beta or older version, please check http://java.sun.com/javase to determine if it is still supported. If so, please try installing at a later time, as these files might be only temporarily unavailable.
The installer cannot proceed with the current Windows Installer installed on the system. Please visit the following web site for more information.
*http://java.com/en/download/help/index.xml
%s installation?
$You have successfully installed Java6You have successfully installed Java and Bing Toolbar.8You have successfully installed Java and Yahoo! Toolbar.RYou have successfully installed Java

vbc.exe_1380:

`.rsrc
Webt
bss_server.usrReverseRelay
tmrWebHide
bss_server.Socket
bss_server.usrRelay
mswinsck.ocx
MSWinsockLib.Winsock
ieframe.dll
SHDocVwCtl.WebBrowser
WebBrowser
modLaunchWeb
%Program Files% (x86)\Microsoft Visual Studio\VB98\VB6.OLB
C:\Windows\SysWOW64\ieframe.dll
winmm.dll
user32.dll
advapi32.dll
shell32.dll
kernel32.dll
avicap32.dll
advpack.dll
GetAsyncKeyState
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyboardLayout
GetKeyboardState
GetKeyState
SHFileOperationA
CreatePipe
PSAPI.DLL
GetTcpTable
ExitWindowsEx
EnumWindows
WinInet.dll
DeleteUrlCacheEntryA
urlmon
URLDownloadToFileA
ShellExecuteA
keybd_event
AddMsg
CHAT_ADDMSG
VBA6.DLL
C:\Windows\SysWow64\msvbvm60.dll\3
ws2_32.dll
olepro32.dll
GdiplusShutdown
RemotePort
LocalPort
WSOCK32.DLL
RegCloseKey
RegOpenKeyExA
ntdll.dll
C:\Windows\SysWOW64\ieframe.oca
6tmrTCP
%Program Files% (x86)\Microsoft Visual Studio\VB98\mswinsck.oca
tmrUDP
UDPSocket
UDPFlood
ole32.dll
crypt32.dll
oleaut32.dll
RegOpenKeyA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
txtPassword
imgLoginPressed
imgLogin
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyExA
gdi32.dll
FtpDownload
InternetOpenUrlA
FtpUpload
FtpGetFileA
FtpPutFileA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpGetFileSize
FtpDeleteFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpRenameFileA
FtpGetDirectory
Http_DownloadFile
cmdShowfiles
msvbvm60.dll
tmrTCP
?8??8??8??8??8?
2>e%Xdq
uMsg
strMsg
MsgNum
AllMsgs
lngPort
URL_TARGET
Port
Password
WebURL
Returns/Sets the port to be connected to on the remote computer
Returns/Sets the port used on the local computer
Binds socket to specific port and adapter
Occurs after a send operation has completed
.text
`.data
.rsrc
KERNEL32.DLL
MSVBVM60.DLL
*\AD:\Blackshades Project\Blackshades NET\server\server.vbp
2c49f800-c2dd-11cf-9ad6-0080c7e7b78d
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1) Gecko/20090612 Firefox/3.5
{00020404-0000-0000-C000-000000000046}
\nir_cmd.bss speak text
\nir_cmd.bss setsysvolume 65535
\nir_cmd.bss mutesysvolume 1
\nir_cmd.bss mutesysvolume 0
\nir_cmd.bss screensaver
\nir_cmd.bss monitor off
\nir_cmd.bss monitor on
PORT
TRANSFERPORT
\rsout.tmp
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\
Keylog
Wscript.Shell
HKEY_CLASSES_ROOT\HTTP\shell\open\command\
\winlogon.exe
iexplore.exe
ADVAPI32.dll
http://www.facebook.com/?ref=home
http://www.facebook.com
Windows Firewall/Internet Connection Sharing (ICS)
WebCamCapture
\Vuze\Azureus.exe
\LimeWire\LimeWire.exe
\uTorrent\uTorrent.exe
\uTorrent\uTorrent.exe /HIDE
\BitTorrent\bittorrent.exe
\MSWINSCK.OCX
\cmd.exe
\data.dat
\steam\steam.exe
nkey
dkey
regsvr32.exe
\pws_mail.bss
\pws_mess.bss
\pws_cdk.bss
\pws_ff.bss
\pws_chro.bss
\nir_cmd.bss
cmd /c REG ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile /v "DoNotAllowExceptions" /t REG_DWORD /d "0" /f
cmd /c REG ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List /v "
:*:Enabled:Windows Messanger" /f
winmgmts:{impersonationLevel=Impersonate}!\\.\root\cimv2
00000000
winmgmts:\\.\root\cimv2
Select * from Win32_Keyboard
api.ipinfodb.com
GET /v2/ip_query.php?key=
&timezone=off HTTP/1.1
Host: api.ipinfodb.com
GET /v2/ip_query_country.php?key=
Portable
WScript.Shell
winmgmts:\\.\root\SecurityCenter
\wallpaper.bmp
\wallpaper.jpg
WinServer 2003, Web Edition
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName
__oxFrame.class__
Scripting.FileSystemObject
Autorun.ini
{557CF401-1A04-11D3-9A73-0000F81EF32E}
{1D5BE4B5-FA4A-452D-9CDD-5DB35105E7EB}
Address family not supported by protocol family.
Operation already in progress.
Operation now in progress.
Socket operation on nonsocket.
Operation not supported.
Protocol family not supported.
Protocol not supported.
Socket type not supported.
Winsock.dll version out of range.
CSocketMaster.SocketExists
CSocketMaster.PostSocket
CSocketMaster.ConnectToIP
CSocketMaster.ResolveIfHostname
CSocketMaster.SendBufferedDataUDP
CSocketMaster.SendBufferedData
abe2869f-9b47-4cd9-a358-c22904dba7f7
/stext mess.dat
\mess.dat
/stext mail.dat
\mail.dat
/stext ffpw.dat
\ffpw.dat
Web Site
Password
/stext chro.dat
\chro.dat
Action URL
SOFTWARE\MICROSOFT\Windows NT\CurrentVersion
Windows
SOFTWARE\Classes\Applications\iexplore.exe\shell\open\command
http\shell\open\command
127.0.0.1
\dump.txt
\uTorrent\uTorrent.exe /DIRECTORY
255.255.255.255
finalizarprocessoportas
CONNECT %s:%i HTTP/1.0
SOFTWARE\Classes\http\shell\open\command
Software\Classes\http\shell\open\command
Software\Microsoft\Windows NT\CurrentVersion\SystemRestore
code.is.a.winner
Software\Microsoft\Windows\CurrentVersion\Uninstall\eMule
SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\DigitalProductId
bps1.exe
bhookpl.dll
bnfa.exe
drvloadn.dll
drvloadx.dll
VNCHooks.dll
xr4tdwa.exe
shutdown.exe
TCnRawKeyBoard
HuntHTTPDownload
autorun.inf
https://onlineeast#.bankofamerica.com
winlogon.exe
moz_logins
WEBCAMLIVE
explorer.exe
\system32\userinit.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
\system32\userinit.exe,
notepad.exe
steam.exe
hl.exe
\rspad.dat
@*\AD:\Blackshades Project\Blackshades NET\server\server.vbp

vbc.exe_1380_rwx_00400000_0007B000:

`.rsrc
Webt
bss_server.usrReverseRelay
tmrWebHide
bss_server.Socket
bss_server.usrRelay
mswinsck.ocx
MSWinsockLib.Winsock
ieframe.dll
SHDocVwCtl.WebBrowser
WebBrowser
modLaunchWeb
%Program Files% (x86)\Microsoft Visual Studio\VB98\VB6.OLB
C:\Windows\SysWOW64\ieframe.dll
winmm.dll
user32.dll
advapi32.dll
shell32.dll
kernel32.dll
avicap32.dll
advpack.dll
GetAsyncKeyState
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyboardLayout
GetKeyboardState
GetKeyState
SHFileOperationA
CreatePipe
PSAPI.DLL
GetTcpTable
ExitWindowsEx
EnumWindows
WinInet.dll
DeleteUrlCacheEntryA
urlmon
URLDownloadToFileA
ShellExecuteA
keybd_event
AddMsg
CHAT_ADDMSG
VBA6.DLL
C:\Windows\SysWow64\msvbvm60.dll\3
ws2_32.dll
olepro32.dll
GdiplusShutdown
RemotePort
LocalPort
WSOCK32.DLL
RegCloseKey
RegOpenKeyExA
ntdll.dll
C:\Windows\SysWOW64\ieframe.oca
6tmrTCP
%Program Files% (x86)\Microsoft Visual Studio\VB98\mswinsck.oca
tmrUDP
UDPSocket
UDPFlood
ole32.dll
crypt32.dll
oleaut32.dll
RegOpenKeyA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
txtPassword
imgLoginPressed
imgLogin
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyExA
gdi32.dll
FtpDownload
InternetOpenUrlA
FtpUpload
FtpGetFileA
FtpPutFileA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpGetFileSize
FtpDeleteFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpRenameFileA
FtpGetDirectory
Http_DownloadFile
cmdShowfiles
msvbvm60.dll
tmrTCP
?8??8??8??8??8?
2>e%Xdq
uMsg
strMsg
MsgNum
AllMsgs
lngPort
URL_TARGET
Port
Password
WebURL
Returns/Sets the port to be connected to on the remote computer
Returns/Sets the port used on the local computer
Binds socket to specific port and adapter
Occurs after a send operation has completed
.text
`.data
.rsrc
KERNEL32.DLL
MSVBVM60.DLL
*\AD:\Blackshades Project\Blackshades NET\server\server.vbp
2c49f800-c2dd-11cf-9ad6-0080c7e7b78d
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1) Gecko/20090612 Firefox/3.5
{00020404-0000-0000-C000-000000000046}
\nir_cmd.bss speak text
\nir_cmd.bss setsysvolume 65535
\nir_cmd.bss mutesysvolume 1
\nir_cmd.bss mutesysvolume 0
\nir_cmd.bss screensaver
\nir_cmd.bss monitor off
\nir_cmd.bss monitor on
PORT
TRANSFERPORT
\rsout.tmp
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\
Keylog
Wscript.Shell
HKEY_CLASSES_ROOT\HTTP\shell\open\command\
\winlogon.exe
iexplore.exe
ADVAPI32.dll
http://www.facebook.com/?ref=home
http://www.facebook.com
Windows Firewall/Internet Connection Sharing (ICS)
WebCamCapture
\Vuze\Azureus.exe
\LimeWire\LimeWire.exe
\uTorrent\uTorrent.exe
\uTorrent\uTorrent.exe /HIDE
\BitTorrent\bittorrent.exe
\MSWINSCK.OCX
\cmd.exe
\data.dat
\steam\steam.exe
nkey
dkey
regsvr32.exe
\pws_mail.bss
\pws_mess.bss
\pws_cdk.bss
\pws_ff.bss
\pws_chro.bss
\nir_cmd.bss
cmd /c REG ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile /v "DoNotAllowExceptions" /t REG_DWORD /d "0" /f
cmd /c REG ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List /v "
:*:Enabled:Windows Messanger" /f
winmgmts:{impersonationLevel=Impersonate}!\\.\root\cimv2
00000000
winmgmts:\\.\root\cimv2
Select * from Win32_Keyboard
api.ipinfodb.com
GET /v2/ip_query.php?key=
&timezone=off HTTP/1.1
Host: api.ipinfodb.com
GET /v2/ip_query_country.php?key=
Portable
WScript.Shell
winmgmts:\\.\root\SecurityCenter
\wallpaper.bmp
\wallpaper.jpg
WinServer 2003, Web Edition
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName
__oxFrame.class__
Scripting.FileSystemObject
Autorun.ini
{557CF401-1A04-11D3-9A73-0000F81EF32E}
{1D5BE4B5-FA4A-452D-9CDD-5DB35105E7EB}
Address family not supported by protocol family.
Operation already in progress.
Operation now in progress.
Socket operation on nonsocket.
Operation not supported.
Protocol family not supported.
Protocol not supported.
Socket type not supported.
Winsock.dll version out of range.
CSocketMaster.SocketExists
CSocketMaster.PostSocket
CSocketMaster.ConnectToIP
CSocketMaster.ResolveIfHostname
CSocketMaster.SendBufferedDataUDP
CSocketMaster.SendBufferedData
abe2869f-9b47-4cd9-a358-c22904dba7f7
/stext mess.dat
\mess.dat
/stext mail.dat
\mail.dat
/stext ffpw.dat
\ffpw.dat
Web Site
Password
/stext chro.dat
\chro.dat
Action URL
SOFTWARE\MICROSOFT\Windows NT\CurrentVersion
Windows
SOFTWARE\Classes\Applications\iexplore.exe\shell\open\command
http\shell\open\command
127.0.0.1
\dump.txt
\uTorrent\uTorrent.exe /DIRECTORY
255.255.255.255
finalizarprocessoportas
CONNECT %s:%i HTTP/1.0
SOFTWARE\Classes\http\shell\open\command
Software\Classes\http\shell\open\command
Software\Microsoft\Windows NT\CurrentVersion\SystemRestore
code.is.a.winner
Software\Microsoft\Windows\CurrentVersion\Uninstall\eMule
SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\DigitalProductId
bps1.exe
bhookpl.dll
bnfa.exe
drvloadn.dll
drvloadx.dll
VNCHooks.dll
xr4tdwa.exe
shutdown.exe
TCnRawKeyBoard
HuntHTTPDownload
autorun.inf
https://onlineeast#.bankofamerica.com
winlogon.exe
moz_logins
WEBCAMLIVE
explorer.exe
\system32\userinit.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
\system32\userinit.exe,
notepad.exe
steam.exe
hl.exe
\rspad.dat
@*\AD:\Blackshades Project\Blackshades NET\server\server.vbp


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    %original file name%.exe:1152
    cvtres.exe:1240
    vbc.exe:1760
    vbc.exe:624

  2. Delete the original Worm file.
  3. Delete or disinfect the following files created/modified by the Worm:

    %Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.out (347 bytes)
    %Documents and Settings%\%current user%\Application Data\fp.txt (57 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.0.vb (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\jxpiinstall.exe (6333 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\wspmlnmo.cmdline (280 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RES2.tmp (2868 bytes)
    %Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04\java_sp.dll (150816 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\fx-runtime.exe (2402442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OJQJS12R\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E1Q9MNSX\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PZV6S7VV\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3CSAPV0K\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\jinstall.cfg (1 bytes)
    %Documents and Settings%\%current user%\Application Data\Sun\Java\jre1.7.0_04\jre1.7.0_04-c.msi (5211219 bytes)
    %Documents and Settings%\%current user%\Application Data\svrhost.exe (14815 bytes)
    %Documents and Settings%\%current user%\Application Data\VichatterX (33 bytes)
    %Documents and Settings%\%current user%\Application Data\svshost.exe (3860 bytes)
    %Documents and Settings%\%current user%\Application Data\WLIDSCV.exe (3672 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\vbc1.tmp (644 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "audiokc" = "%Documents and Settings%\%current user%\Application Data\svrhost.exe"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  7. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.