Gen:Trojan.Heur.mr0@f9rRwLei (B) (Emsisoft), Gen:Trojan.Heur.mr0@f9rRwLei (AdAware), Trojan.Win32.IEDummy.FD, GenericInjector.YR (Lavasoft MAS)Behaviour: Trojan
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 8a0329a76936d9871e55974137bc77fc
SHA1: 2e077324d5d67416eb5e783a382db4886a7a2ddd
SHA256: 85ecbbd0721dc6acd3b9e063bd7b44c21f7b6d416b6d5473060531f76a5a76d6
SSDeep: 12288:6zEJImz7UzblDrFR9J8fA5R/1cOmeREJq4kec4KwGf99MSOeMkeXrnhIcVthDGne:uEqo tr39J8ATtcOm8EJxk6nTSXJI4lw
Size: 1254426 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: PEDiminisherv01, UPolyXv05_v6
Company: no certificate found
Created at: 2016-03-19 08:00:18
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):
%original file name%.exe:272
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:272 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%System%\MSINET.OCX (132 bytes)
%System%\COMCTL32.OCX (3681 bytes)
%System%\COMDLG32.OCX (350 bytes)
%System%\drivers\etc\hosts (1 bytes)
The Trojan deletes the following file(s):
%System%\drivers\etc\hosts (0 bytes)
Registry activity
The process %original file name%.exe:272 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "48 D6 14 B0 A8 DB 03 80 39 B9 94 17 A0 BE CE 7C"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Internet Explorer]
"iexplore.exe" = "Internet Explorer"
Dropped PE files
MD5 | File path |
---|---|
eb5f811c1f78005b3c147599a0cccf51 | c:\WINDOWS\system32\COMCTL32.OCX |
6785b09fc2d286f88944718acee94b52 | c:\WINDOWS\system32\COMDLG32.OCX |
90a39346e9b67f132ef133725c487ff6 | c:\WINDOWS\system32\MSINET.OCX |
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 1132 bytes in size. The following strings are added to the hosts file listed below:
127.0.0.0 | http://www.vista-tigabelas.blogspot.co.id/ |
127.0.0.0 | https://www.vista-tigabelas.blogspot.co.id/ |
127.0.0.0 | https://www.vista-tigabelas.blogspot.com/ |
127.0.0.0 | vista-tigabelas.blogspot.com |
127.0.0.0 | www.vista-tigabelas.blogspot.co.id |
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%System%\MSINET.OCX (132 bytes)
%System%\COMCTL32.OCX (3681 bytes)
%System%\COMDLG32.OCX (350 bytes)
%System%\drivers\etc\hosts (1 bytes) - Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name:
Product Name: ebud
Product Version: 0.00.0023
Legal Copyright:
Legal Trademarks:
Original Filename: pb.exe
Internal Name: pb
File Version: 0.00.0023
File Description:
Comments:
Language: Language Neutral
Company Name: Product Name: ebudProduct Version: 0.00.0023Legal Copyright: Legal Trademarks: Original Filename: pb.exeInternal Name: pbFile Version: 0.00.0023File Description: Comments: Language: Language Neutral
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 538776 | 143360 | 5.54097 | 0c90bb0c5011573cab89d6121aea4319 |
.data | 544768 | 163160 | 4096 | 2.07944 | ec33e72e1061073ab8e84fce664ac3ef |
.rsrc | 708608 | 1098204 | 1101824 | 4.02056 | bda18fd375fc8b28146bfa2ef4b84127 |
.teraphy | 1810432 | 4096 | 1050 | 3.95683 | 31f3521f2667948f5ea8f5652d504f66 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://ghs.l.google.com/ | |
hxxp://bootstrapcdn.jdorfman.netdna-cdn.com/font-awesome/4.3.0/css/font-awesome.min.css | |
hxxp://bootstrapcdn.jdorfman.netdna-cdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.eot? | |
hxxp://googleapis.l.google.com/ajax/libs/jquery/2.1.1/jquery.min.js | |
hxxp://go.pub2srv.com/apu.php?zoneid=487476 | 78.140.191.74 |
hxxp://onclickads.net/apu.php?zoneid=487476 | 206.54.165.193 |
hxxp://scr.kliksaya.com/js-ad.php?zid=185936 | 216.185.100.67 |
hxxp://blogger.l.google.com/img/icon18_wrench_allbkg.png | |
hxxp://scr.kliksaya.com/ba/185936/waw-cheaters.com | 216.185.100.67 |
hxxp://scr.kliksaya.com/js-ad.php?zid=185935 | 216.185.100.67 |
hxxp://ghs.l.google.com/feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 | |
hxxp://scr.kliksaya.com/upload/ban/59/GBR059035.gif | 216.185.100.67 |
hxxp://scr.kliksaya.com/ad/185935/waw-cheaters.com | 216.185.100.67 |
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.4.1/jquery.min.js | |
hxxp://star-mini.c10r.facebook.com/plugins/likebox.php?href=http://www.facebook.com/wawcheater&width&height=62&colorscheme=light&show_faces=false&header=true&stream=false&show_border=false&appId=371524026202784 | |
hxxp://scr.kliksaya.com/js-ad.php?zid=185937 | 216.185.100.67 |
hxxp://photos-ugc.l.googleusercontent.com/-JbKcdfpLIpY/VGPWTO9Us7I/AAAAAAAAA9g/WT3xvYm_J28/s1600/btp.png | |
hxxp://scr.kliksaya.com/ba/185937/waw-cheaters.com | 216.185.100.67 |
hxxp://scr.kliksaya.com/upload/ban/69/GBR069736.gif | 216.185.100.67 |
hxxp://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.eot? | 94.31.29.154 |
hxxp://img1.blogblog.com/img/icon18_wrench_allbkg.png | 173.194.220.191 |
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.4.1/jquery.min.js | 74.125.205.95 |
hxxp://www.facebook.com/plugins/likebox.php?href=http://www.facebook.com/wawcheater&width&height=62&colorscheme=light&show_faces=false&header=true&stream=false&show_border=false&appId=371524026202784 | 31.13.64.35 |
hxxp://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css | 94.31.29.154 |
hxxp://www.waw-cheaters.com/ | 74.125.205.121 |
hxxp://www.waw-cheaters.com/feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 | 74.125.205.121 |
hxxp://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js | 74.125.205.95 |
hxxp://4.bp.blogspot.com/-JbKcdfpLIpY/VGPWTO9Us7I/AAAAAAAAA9g/WT3xvYm_J28/s1600/btp.png | 216.58.214.193 |
1.bp.blogspot.com | 216.58.214.225 |
apis.google.com | 216.58.214.238 |
3.bp.blogspot.com | 216.58.214.193 |
www.blogger.com | 64.233.165.191 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /apu.php?zoneid=487476 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: go.pub2srv.com
Connection: Keep-Alive
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 26 Apr 2016 12:45:18 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: hXXp://onclickads.net/apu.php?zoneid=487476
<html>..<head><title>302 Found</title></head>..<body bgcolor="white">..<center><h1>302 Found</h1></center>..<hr><center>nginx</center>..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Server: nginx..Date: Tue, 26 Apr 2016 12:45:18 GMT..Content-Type: text/html..Content-Length: 154..Connection: keep-alive..Location: hXXp://onclickads.net/apu.php?zoneid=487476..<html>..<head><title>302 Found</title></head>..<body bgcolor="white">..<center><h1>302 Found</h1></center>..<hr><center>nginx</center>..</body>..</html>....
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:21 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1374
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Menurunkan Berat Badan</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Malu Perut Buncit ? Kempes Dalam 3 Hari! Dapatkan Diskon 34% Sekarang!</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Hilangkan Perut Buncit</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Perut anda buncit? hilangkan dengan cara sehat dan menyenangkan!</a></div></td></tr></table>
<<< skipped >>>
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:20 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1374
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Menurunkan Berat Badan</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Malu Perut Buncit ? Kempes Dalam 3 Hari! Dapatkan Diskon 34% Sekarang!</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Hilangkan Perut Buncit</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Perut anda buncit? hilangkan dengan cara sehat dan menyenangkan!</a></div></td></tr></table>
<<< skipped >>>
GET /js-ad.php?zid=185935 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:19 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 235
Connection: close
Content-Type: text/html
document.write('<ifr' 'ame src=' '"hXXp://scr.kliksaya.com/ad/185935/waw-cheaters.com"' ' marginwidth="0" marginheight="0" width=' '"468"' ' height=' '"60"' ' border="0" frameborder="0" style="border:none;" scrolling="no"></iframe>');...
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Tue, 12 Apr 2016 21:07:48 GMT
Expires: Wed, 12 Apr 2017 21:07:48 GMT
Last-Modified: Fri, 16 Oct 2015 18:27:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29497
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1179449
............{..../....CD.....);.;.1..d.N$.........$f.....y.|.[...F..%..{.:q4......z............w...n.l......^.....?3._...Y. VKu..2.R..[...6..y...m~....Z..e.r~....[%.y...h.~..&g.Uv7..../...z..m...(.f..n./w..jn...l(x,&~.,..f....2.?.j.Ym|O.b.....|{............./.`..ww......B..{4.|R,..k....C..w.b..#..o..h4VY.v..!..U.Z..NM.r}...)]P...w.5.....f....nS,...nf........:.......;........eT....&b..,..b.o.j.].2..^......../z...v..b..T.|.=.P....?.........P.......k...x...a...ew.Y.V...Q '\(...ns..V.p...<.K.S.|9........l...j...n...>...3.w..0C...[Q<.].C.....t..q(..a.2...]..T...&4.E...\.....T\B..7....x........[s.....t.6.[...%%....M..*m.}.b...0.....e.....T/.g...*...z=..{..2.mQ...lw.*.o......,r..2.m..; ....w|,g...|...^F.v;.L.#^.t<.GcT..N....~....#...Dm.%....Gm.<ut...E....v".q..i.C.....T.&...D.z...v.,.........V.0.:KV.y./K.9m...hZ.l. .t.u.m..=...K..i...SB-...E..7........r6@E.geG.q.. @..... H..(....3mEQ.....A....b)s.gh8...7:=......i....v.2..)V2.....-...Gf..k.d.4|.*...............t....C}lx...y..f.../. .n..<Ns....aI..T..!...a..r.:.8..Ht...j.v..P.]..M..G..48.#W..&..f...Or2....vL5.]9.P....."m..U.A.....x.._.W1.'..6|.,ES.5......qw....t .)..W.V?..=.n...oU............U..g_-....=c.2p@W....._..S.H.7.;.....x.w..<..F..D@..|......U...z...{J./....3.)..B.2.}^GME..B..MOA..NJ.y7.....j.c...6..kzI...H..wg.........y.'A.....K.D..X.... L.m..4^.s..M3..].V...^.mn..w@..K54.~..xO.g...x..7...<.>i8Oq.a...F=.(.A..hK...RK.........2....2._..x...&Bk.!. .).9.s.k|...../N.%...s.......28...P.!`&P....J...@x..5B..r..~4......5b&X...)U...[w[......HR.
<<< skipped >>>
GET /ajax/libs/jquery/1.4.1/jquery.min.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Sun, 24 Apr 2016 11:10:17 GMT
Expires: Mon, 24 Apr 2017 11:10:17 GMT
Last-Modified: Fri, 16 Oct 2015 18:27:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 24049
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 178503
............i{.8.(.].B..q..-.I.}..f.f.NO..i..# }I..(K..%.#.......(...9..b. v.jCU.....|...s....?D....2[..?f.2..O......g.^/.Ngz.Y..b..T...X./..d.|.=.z...I..9]ec..r....l...4in.$]6.......f.l....._..* ..c.o.>l.X.;..l.M>.m.t...>......(....Ju....../.i.|]@..5t.........^...K....u.G..4.h....0..".._.....{.?yBm5....v!_...6...r?{..V.5g. ...=.....i....zy.]..b......,..x..*f3.....#..h=........l....;..s.,..f....%V...^..6r#/....Z.{.v4....f9.)..V....E.U...D.......4...........O......n....."_CG.5..t....?.v.#........"IOO.7.......d...E.....^.......S.lN..=K..z.....c....a...4...lG....y3....Jr/....'Q3...PCr.....Ivz::=..x.V..bey....i..Z"u#.).F..=.`%.=...!..:[6"....f.b.?..f.0....\n...8.....5.....IkS~....z.1>.#.B.M..6.W......'....6l.h......,.G.[8....a.......\.......o.........O......v..$[y...rD{.}J........z]......Vq............N..~1.BS*....n7mG....FK.?[..{.?z..xzv..,.R.....P}.:................0#......&...`...X.}.K.L.u.6...,.bW`...h.g....;..Q{.Y"...o.. ....3....U0.....<...A.Z....a....To`...m..s..f.B.........}J.1../...b..2..b.)Z..L.l.\$<-[...{........K...eI..AeN`"h|.-...r.x0R|ah.\^*`..'...C..............?98.m..F.......U ../f.0u;W...s....Njb..c.......$..N"...v.[;.?......e.7.[.......F..5..e..D5.....@)..*......E....[...mkn....Q.Ho..`.X..7.8!H..p...^...GB.N......'Q.p......@.R...{c...EQ...c....1...JD...au.^f...q.V....=.,.2 .w.F.sQ,..G\tOO.a{.Y,...=......"..9Y..E.................0]....&..........r1P4...?.....KI...B..........T}z-.vE....J...b.(..N.A.a......o.G....T.(..~j@.?L..%.2H.a..9..r..J....Wn.I.g.]......^...lac.>r...|(......
<<< skipped >>>
GET /plugins/likebox.php?href=http://VVV.facebook.com/wawcheater&width&height=62&colorscheme=light&show_faces=false&header=true&stream=false&show_border=false&appId=371524026202784 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.facebook.com
Connection: Keep-Alive
HTTP/1.1 302 Found
Location: hXXps://VVV.facebook.com/plugins/likebox.php?href=http://VVV.facebook.com/wawcheater&width&height=62&colorscheme=light&show_faces=false&header=true&stream=false&show_border=false&appId=371524026202784
Content-Type: text/html
X-FB-Debug: Cv0dyY9vKiEr4We3uDaBy/H1WO IY/iQpr3djbJlgF7NaPMgds7Ovp/wPpwGlylTSSQH/1n2gEAH9DcrTeWV1A==
Date: Tue, 26 Apr 2016 12:45:20 GMT
Connection: keep-alive
Content-Length: 0
HTTP/1.1 302 Found..Location: hXXps://VVV.facebook.com/plugins/likebox.php?href=http://VVV.facebook.com/wawcheater&width&height=62&colorscheme=light&show_faces=false&header=true&stream=false&show_border=false&appId=371524026202784..Content-Type: text/html..X-FB-Debug: Cv0dyY9vKiEr4We3uDaBy/H1WO IY/iQpr3djbJlgF7NaPMgds7Ovp/wPpwGlylTSSQH/1n2gEAH9DcrTeWV1A==..Date: Tue, 26 Apr 2016 12:45:20 GMT..Connection: keep-alive..Content-Length: 0..
GET /js-ad.php?zid=185937 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:21 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 236
Connection: close
Content-Type: text/html
document.write('<ifr' 'ame src=' '"hXXp://scr.kliksaya.com/ba/185937/waw-cheaters.com"' ' marginwidth="0" marginheight="0" width=' '"300"' ' height=' '"250"' ' border="0" frameborder="0" style="border:none;" scrolling="no"></iframe>');...
GET /img/icon18_wrench_allbkg.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img1.blogblog.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: image/png
Date: Wed, 20 Apr 2016 07:47:52 GMT
Expires: Wed, 27 Apr 2016 07:47:52 GMT
Last-Modified: Tue, 19 Apr 2016 19:57:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 475
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 536247
.PNG........IHDR.............a.~e....PLTE...... J.4e.............u..l..e..c{.........................................................................Y}.T|....`v.`w.............................................................[q.............Eq....__^........bY....tRNS.@..f....IDATx^M.U..1.@...A(33.Cf....qR......"..@....*.v&.g...X.="6.Xz.$/".3.;.R\....Mb.((...J...R...pK.OY.0...Q......q.r3..r.v...b...j ..h.r....<._...l.}lY........o%....b..d,l/. .........N...ig.K.....IEND.B`.HTTP/1.1 200 OK..Content-Type: image/png..Date: Wed, 20 Apr 2016 07:47:52 GMT..Expires: Wed, 27 Apr 2016 07:47:52 GMT..Last-Modified: Tue, 19 Apr 2016 19:57:25 GMT..X-Content-Type-Options: nosniff..Server: sffe..Content-Length: 475..X-XSS-Protection: 1; mode=block..Cache-Control: public, max-age=604800..Age: 536247...PNG........IHDR.............a.~e....PLTE...... J.4e.............u..l..e..c{.........................................................................Y}.T|....`v.`w.............................................................[q.............Eq....__^........bY....tRNS.@..f....IDATx^M.U..1.@...A(33.Cf....qR......"..@....*.v&.g...X.="6.Xz.$/".3.;.R\....Mb.((...J...R...pK.OY.0...Q......q.r3..r.v...b...j ..h.r....<._...l.}lY........o%....b..d,l/. .........N...ig.K.....IEND.B`...
<<< skipped >>>
GET /apu.php?zoneid=487476 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: onclickads.net
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Apr 2016 12:45:18 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEOa2766=4|UA|63|KHARKIV|BROADBAND|PITLINE LTD||15610|25314|?|0; expires=Wed, 27-Apr-2016 12:45:18 GMT; path=/
Set-Cookie: OAID=ae603d697802416f03f07b0941517104; expires=Wed, 26-Apr-2017 12:45:18 GMT; path=/
Set-Cookie: pbk2=7f00e4d0896fee2147c3ada2e04a87ac6277845112402801225; expires=Tue, 26-Apr-2016 12:50:18 GMT
Content-Encoding: gzip
888.............{k_......)..Lj...#..FPj..j....!.H..........3...9{..w^.u..L...~...3..#?........8..".......<../(..0...H......U.4..`-}..-}u....K..>..p..T^o..Vq.D..4._..='..m.<.]M).....[.|6..>Yz..9.VO.*.K.Y......K.R.....o...J. .&...UP2.JsE..6..a Q......M=..J..4....}AQue.(..A!..[.(..).[..d...y..m.4...0bm.f.4..R<FD.T....".....[.&...NJ)G......!1.A..eY.........t..65............#.I...y.n.....@..9....;f.p...ZNQ....@d...w...YT.-m....yGW.i.3.i......o.s....Sw.b7.....(.ZS...B..>. .;..y.....C..#|{.........4kW......X......T..|}....vN....@@..G...ln.p.."..w.Y...........vS:...*..3.,y....r.S..G.2..<R..9.).H....W.M.{. ...?`...E........p7.C..h9..0.&.a......Lfan'.~.wr.^!.Z......q.W.me.).%M..L..I(4wX..<(.5r;.0. ..Y...t)..`......8.....l2be.x.FN...>).s....W..19....?P....X=W(.G.....@...H3rfQ.}z..K....&..uXR/.4%O...,..j...Z..<..F.........;. I...]}.:..........5.5Mz...E}..u.....$((.......\...$o.M. .....zS..1.NK....5.....Fn[...c.........[...r\....W..;.{..Q.....Z_..W.........lJ.....Yi.. .T=RG...t.....ht...pLp.L.9........k....n...e.9....M.......C...V..O._..d..k........F....{.`.;......#..;AS.....D.. .......G..Ti..?...7....Y..g.]SR3M.^..'}.W!lb...@...H7...z...ip.^."....!.......u.y..K.$..5u..x.k.9...!....V[(...g..]2L.......a.p.....M..rP_.Z{...B ..Pq..xrN..0...>..5%....z3tF=.v......P../&..X.n.y.<}e.....(v..w...oRl2....c......M.tE/....Fn...z....w..E......A...{<B....p.'.!(.....8..-.. .......^=9~....=z...Y...G..#..z..x....?....!...#....................A.{...'........]....=.(.2.|f..../.k.i8.....{.r..B8}...g.N....
<<< skipped >>>
GET /upload/ban/69/GBR069736.gif HTTP/1.1
Accept: */*
Referer: hXXp://scr.kliksaya.com/ba/185937/waw-cheaters.com
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:22 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
Last-Modified: Tue, 21 Apr 2015 05:55:02 GMT
ETag: "22c1bd5-4441-51435affdc57b"
Accept-Ranges: bytes
Content-Length: 17473
Connection: close
Content-Type: image/gif
GIF89a,........................................................................................................................................................................................................................................................c...................................c...............c...........c....................~.......|w.....o....4..~............n.....i.....t...xec..^..Z....{\...xd\..Z..4..Z..Y..X..}}}U..X..W..V..V..4..~yqQ~.U~..eMty{.ePT{.zvp.pkMz.sssJw.Pw.Pu..[AWr.Et..c..ZE.c.No.kkk.`PAp..O56l.pe\;l.Hi..]O7i.[bktZl.L53e.Ab.0_.8Y.UTT.I;.c.WSMfOA.9#.c.HQ`.-.^I:OKG.9$.4.,CbR9,444 5R.4..(N&''.'<! .c.c...=.....c..4....c..4..............................................................................................................................!..NETSCAPE2.0.....!.......,....,..........H......*\......#J.H.....3j...... C.l....L(S.\.....0c..I....8s..i.. N@...J....?....!..b..J.J....X.j......`....5..h.,.].....p..-. S..$b!...P......L...... ^......#3>......3k.......x..t.Y,.... .).#J.c..M.....s...........-..0%i..Y.......3...I0...y*&..CA.<9..N......._/...-l.w.O.>}-..w.........[#.0#.B.,..#.4....F(...Vh...f....v.....`..].a.....".th.".Z....*.'..&^GI..|.....Q." .i..H&...LF(.|tt.F.ZLie.X....n.B..^x.. X^...R..F.]........B...c.x....|..B0c....o.Q..g.z& V....^.d. ..ji..........B..)....j*%"Z....Z.j.........B....:..cp..#>*..$..k...&....6....F ...Vk...>.d...................-...qk.1 KI4.:.........../$$@..)..B...W..*.0..&.P.A....0..#.0*......:BoB..k..(........!...K.4...,....*...F....F0...
<<< skipped >>>
GET /-JbKcdfpLIpY/VGPWTO9Us7I/AAAAAAAAA9g/WT3xvYm_J28/s1600/btp.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: 4.bp.blogspot.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
ETag: "v3d9"
Expires: Tue, 26 Apr 2016 12:10:23 GMT
Content-Disposition: inline;filename="btp.png"
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Tue, 26 Apr 2016 12:07:41 GMT
Server: fife
Content-Length: 182
X-XSS-Protection: 1; mode=block
Age: 2261
Cache-Control: public, max-age=86400, no-transform
.PNG........IHDR............. 1.....}IDAT8...... ..aFp.G`.F....Q...E.b...%}#_ =R.....=[.#..d....8...-.G..T.T .........A.{,..Q97R.l.....e.....0.4H.";........./....A?.....O....IEND.B`.HTTP/1.1 200 OK..Access-Control-Allow-Origin: *..ETag: "v3d9"..Expires: Tue, 26 Apr 2016 12:10:23 GMT..Content-Disposition: inline;filename="btp.png"..Content-Type: image/png..X-Content-Type-Options: nosniff..Date: Tue, 26 Apr 2016 12:07:41 GMT..Server: fife..Content-Length: 182..X-XSS-Protection: 1; mode=block..Age: 2261..Cache-Control: public, max-age=86400, no-transform...PNG........IHDR............. 1.....}IDAT8...... ..aFp.G`.F....Q...E.b...%}#_ =R.....=[.#..d....8...-.G..T.T .........A.{,..Q97R.l.....e.....0.4H.";........./....A?.....O....IEND.B`...
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:20 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1374
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Menurunkan Berat Badan</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2852913&zid=185935" target="_blank">Malu Perut Buncit ? Kempes Dalam 3 Hari! Dapatkan Diskon 34% Sekarang!</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Hilangkan Perut Buncit</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2854279&zid=185935" target="_blank">Perut anda buncit? hilangkan dengan cara sehat dan menyenangkan!</a></div></td></tr></table>
<<< skipped >>>
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:20 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1380
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2853208&zid=185935" target="_blank">PERUT KEMPES dalam 3 HARI</a></div><div class="ab"><a href="http://click.kliksaya.com/click.php?aid=2853208&zid=185935" target="_blank">Simpelet3! 100% AMAN &UH! PESAN Sekarang dan dapatkan DISKON</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2851653&zid=185935" target="_blank">TURUN 3-5kg dlm SEMINGGU!</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2851653&zid=185935" target="_blank">1 dari 3 Orang TURUN 4KG dalam SEMINGGU!Herbal Pelangsing Simpelet!</a></div></td></tr></ta
<<< skipped >>>
GET /ba/185936/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:19 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 473
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot {border: #000000 1px solid;font-size:10pt;font-family:Arial;position:relative; width:726px; height:88px; overflow:hidden;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot"><a href="hXXp://click.kliksaya.com/click.php?aid=2853987&zid=185936" target="_blank"><img style="position:absolute; top:-1px; left:-1px;" alt="1 MINGGU TURUN BB /- 4kg" src="hXXp://scr.kliksaya.com/upload/ban/59/GBR059035.gif"></a></div></body>.</html>...
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:19 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1380
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2853208&zid=185935" target="_blank">PERUT KEMPES dalam 3 HARI</a></div><div class="ab"><a href="http://click.kliksaya.com/click.php?aid=2853208&zid=185935" target="_blank">Simpelet3! 100% AMAN &UH! PESAN Sekarang dan dapatkan DISKON</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2851653&zid=185935" target="_blank">TURUN 3-5kg dlm SEMINGGU!</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2851653&zid=185935" target="_blank">1 dari 3 Orang TURUN 4KG dalam SEMINGGU!Herbal Pelangsing Simpelet!</a></div></td></tr></ta
<<< skipped >>>
GET /ba/185937/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:22 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 474
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot {border: #000000 1px solid;font-size:10pt;font-family:Arial;position:relative; width:298px; height:248px; overflow:hidden;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot"><a href="http://click.kliksaya.com/click.php?aid=2850384&zid=185937" target="_blank"><img style="position:absolute; top:-1px; left:-1px;" alt="Dapatkan voucher Rp 5 jt!" src="hXXp://scr.kliksaya.com/upload/ban/69/GBR069736.gif"></a></div></body>.</html>...
GET / HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.waw-cheaters.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 26 Apr 2016 12:45:17 GMT
Date: Tue, 26 Apr 2016 12:45:17 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 26 Apr 2016 07:15:51 GMT
ETag: "fb56345b-bbc9-4f5d-b4f6-3e4a638a335b"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 22161
Server: GSE
............{_...8...W..g7...s.4.'.ZZhi......(...8vj;\.y...$...\h..{.)...:...".FO..}.s..xO..c......G..gh......(.c...w2}.g.7.F].........i..Q.eUk...&c.......,.......G..5.....'[....U..\.4..7\..9.RFq........F.......^....@...z.3.....j.<....A.-.z.X........o..f..f..1.d`...4.>.....&..{%..........l......}.`E..1m_.....j.=.N.JYm(...;.. 2.X.n.t........P/......z......D......K.....Q..BO.@).R.....ZG......m6.. ..<%.L^.@....../.x[y...Xy...^^a......t.)....m....('dL.]........$#.B.;..1.t..\s...Gn.:.}.s.h..B..l12..X)..>......7..p\.!kJ .RiL.5..BA....~.$.. . .s.F.V...%..b....eC.............l..}......(d.....8..t3..z.5..0UZ.R-]......6j.MU.4...t......n...pQ.`...]@|..?t\...m.......6.=.....r.Z/.k..f..Y.,.........Z.W....B._...Z.Q..5...H.Z.1X..M..1...72...IBO......ob..0v.....'.....1.J..........2.>..L..:*..`..B...M.R......}.. ."V...i.z......e.=.t..o.X........L./...p.[ M.v.H.' )..b....1 Sy.L~@'N...VD...t.Y.q.z.?l.a2M{K.L*0...3,.x.b....vBt...[U.;....U....F...Z.z....=`W...B..c...d...[..=..K.3}C....q..T..x....&.Q....h... ..m..v..S...q..9b.f..'k.2. ....Xz..-..k.0.L.i.N@.-......C .s..O,........h..!q..7.}.......O)..k.vm.`S.M@...@\.JY)..._@.W[..n.......C.3,U)2.Q..#l.R.......A..........z.C#E1.F.h ..L...dlZ7[..W'6._.....AG1.mZ.3..[*...&b..{.b..f.&..Z...g.....i;=.3..,/...z....NWA..........2.."j...DOMY.;..,`.......e.8....Y..EaA..@h.....SS..:.o..Ua.E.S..z.`<C....H.....c../@O...l......V..Z~X...1...*.....R-..Y..*...8g....[aZke`w...T.IU1.B.jb.Z...$^pr..1.P..W....V...,.P-.....`5.T........q.5....."...E..c..oXS.....f....18.!f..I..Y.g..=b....4
<<< skipped >>>
GET /feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.waw-cheaters.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Encoding: gzip
ETag: W/"fb56345b-bbc9-4f5d-b4f6-3e4a638a335b"
Date: Tue, 26 Apr 2016 12:45:19 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
Vary: Accept-Encoding
Expires: Tue, 26 Apr 2016 12:45:20 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Last-Modified: Tue, 26 Apr 2016 07:15:51 GMT
Content-Length: 24090
X-Frame-Options: SAMEORIGIN
.............r.L........_Gt..p.......y...'..y....r..\.N....A.e.T.W.[.!aAf>.)s=....<..S.6..k...5.uZ.........5_.&..^..n....Z.....w.....Kb?j.Z..^....h8^..w......f.qo.{2.<#...g9..g....d...Z.y....&......y1m5..g,.g...g.......I.....\4..Qm..L&.aK}..s.....vZ..b.!.~..y|......p.X..^v.....C.%..q...-.W.....5...cO....dm....1\...AY.........P.DY.e*......V.fm..x........<$/..P.&T..@|.j..@.3...y._....5..F....O.Io.|..k..{.......S.......k..|Y{.xHm.[.......b..uj....;......q....j.......JxO.ym..~.hdY..>{0V..'.=.....io....96.k....'.k...j>.....Z...........oA.^...g)?......-.-....iK.8....%u..].t...y.6_=).C...U.....G.....w.z._O.g.X..R~{J{...H.)4gcz.......<.ZO. e..o..m.Z.~.)W....-....k......=.a..Ae..[C....U..u.(..tx.h5.4.c.~46....{{~;......./..|{V^j..<U....b5.....<..h....Vg...]4&..o......._L.....h.{.....$.j[...W.........dmZ.1.T..*..............5St....{........N.j.....Zv's....Q.]...q.i.~S...&.....lZM......R..i..7b.!.y:........k..g.k....F.'h.:..._.y..U...]..2.Ek........-.&......Z..={...9...uW.......{...B.j...N..w..>...tZ...,..r~5..@..........q......}/....-'L......u.......M......?......5Z.[....W.t.]...<^8....V...K..2..d..X.X....ao..u5..}W..j...'|v.SGP../]...... .........z>.*._.....K..KJ....<O.H>.}bCh...%...._z.l..v......Y-'../vy..k|..S....Sp5...%.I.......p.:h.vDoc...q.......'....Q.|.:....3n-z.'.5.7y...O:oVb..U.....)T....'Ootj............*.Et.>..z......yx.)`O$qju.._..^....y..0...!.o...#.N..f.]c:...xf...0..M.g..g......H*...3P4.5.-j..m.9.V7'..$w)...w /...h]..|t.(.....-M..............:...g.g.:."..K..,..
<<< skipped >>>
GET /js-ad.php?zid=185936 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:18 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 235
Connection: close
Content-Type: text/html
document.write('<ifr' 'ame src=' '"hXXp://scr.kliksaya.com/ba/185936/waw-cheaters.com"' ' marginwidth="0" marginheight="0" width=' '"728"' ' height=' '"90"' ' border="0" frameborder="0" style="border:none;" scrolling="no"></iframe>');...
GET /upload/ban/59/GBR059035.gif HTTP/1.1
Accept: */*
Referer: hXXp://scr.kliksaya.com/ba/185936/waw-cheaters.com
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:19 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
Last-Modified: Thu, 24 Apr 2014 15:22:11 GMT
ETag: "22a39af-b8c7-4f7cb69b90ec0"
Accept-Ranges: bytes
Content-Length: 47303
Connection: close
Content-Type: image/gif
GIF89a..Z.......7N.K].Q.....u..1....d.:...c..Z.:......k........s..Z..t.....R.....k...........k....M"....s2.........._..k....0.4."!...)(";<7..........B....IJL.....c......@BG..L........v....~,.Q.lQ......V.O#.....7.................6../RRU..J.....h.wJ.s......}.....Wz[........,w..~..R....t...m.#-\ZZ.....N.m"..e..KQn..|8O9V..^......FK<..i..f.....s..B..,..j.e;.mJ...4. ..B..H..L....cQSt.. ...m..I.....Ra<i..:....5..`..z2..Z....{~ccc.Y5imnst{....35..h..5....%d.....2.......}l.......y..vM..xXQ7...noY..z....F?.VPAa.F<...........(.f{...M.......W:=1G*B~T.......O.{1...-.f.hX........kX.k..P................)&...R[X..1..v....{K..........k).....e.|P....>1........rr|..p......k.n3..........Y5h..go..9.w....L..g^O`....[S.}.-5Y..B....Z....KJr.V.Zcn........>...JRY&:n...m\f.g!....B.bJ..J..........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh" xmpMM:InstanceID="xmp.iid:6A284B8CC3E911E3B356C4DE2D49D218" xmpMM:DocumentID="xmp.did:6A284B8DC3E911E3B356C4DE2D49D218"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6A284B8AC3E911E3B356C4DE2D49D218" stRef:documentID="x
<<< skipped >>>
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: maxcdn.bootstrapcdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:17 GMT
Content-Type: text/css
Content-Length: 23739
Connection: keep-alive
Last-Modified: Thu, 22 Jan 2015 19:53:38 GMT
ETag: "04425bbdc6243fc6e54bf8984fe50330"
Server: NetDNA-cache/2.2
Expires: Fri, 21 Apr 2017 12:45:17 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: You should work for us! Email: jdorfman theheader@maxcdn.com or @MaxCDNDeveloper on Twitter
X-Cache: HIT
Accept-Ranges: bytes
/*!. * Font Awesome 4.3.0 by @davegandy - hXXp://fontawesome.io - @fontawesome. * License - hXXp://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.3.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.3.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.3.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.3.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.3.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.3.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;transform:translate(0, 0)}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14285714em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14285714em;width:2.14285714em;top:.14285714em;text-align:center}.fa-li.fa-lg{left:-1.85714286em}.fa-border{padding:.2em .25em .15em;border:solid .08em #eee;border-radius:.1em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left{margin-right:.3em}.fa.pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s infinite linear;animation:
<<< skipped >>>
GET /font-awesome/4.3.0/fonts/fontawesome-webfont.eot? HTTP/1.1
Accept: */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: maxcdn.bootstrapcdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:17 GMT
Content-Type: application/vnd.ms-fontobject
Content-Length: 60767
Connection: keep-alive
Last-Modified: Thu, 22 Jan 2015 19:53:40 GMT
ETag: "f7c2b4b747b1a225eb8dee034134a1b0"
Server: NetDNA-cache/2.2
Expires: Fri, 21 Apr 2017 12:45:17 GMT
Cache-Control: max-age=31104000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Hello-Human: You should work for us! Email: jdorfman theheader@maxcdn.com or @MaxCDNDeveloper on Twitter
X-Cache: HIT
Accept-Ranges: bytes
_...y.............................LP.........................P......................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .4...3...0. .2.0.1.5...&.F.o.n.t.A.w.e.s.o.m.e. .R.e.g.u.l.a.r.....BSGP...................T..q..u..*.......Y.D.M.F..x...>..........)Y......h..D....pj....f.i..)..U.'.&a..;`.*.../.....V...B.....OV..r.n.:..{$2D....:.&...m..d ..CeH.\../o.......U.M....X.`?....?.A....C...@..'.(g~......%(.Jl.&zw.....W#.mw".].At.....k.......p....E....[..=.gM.................go..W.R.q...`{.ZwUF.........o ..D.p)A8.....$..M.#.>..?....... d.No2..L.......<.t.....B..T..a....<...`.......e.SO.....cI[.p..E1R*.fMd.....>..2V.........z7..&. .....f..V.(8....aR.....x.Z\R.e..$.Vw.......K......gs.......*.... ..dI......6......)...rj..:Z."1.'...<....'.Q/....8..).B..5..tgk.AM.)...|~...."....2.... h...(.&.c..sw...(....h.Dg.k...w..zm%.f....//5.%....}....k.......... ...@....[#.D)..J<..?YAT.......o.s%....Z...G).5....#R'...#...).... R.....Z.z... ._....K&%'5.....(b.....Y..i_......|B.>U.......<q2i.....Q....7.....<2.._.y\n..9..u w.'!.p.5...q..u ...XU@.1OZt.I..g..'d...5.,.Y_.M.i.......D...H...Y.y.@.f....`Oqi...b...5..p......E1....x..............F?.....fS...n.>m"fE...u..n=.y..`LA&C.2].W&o.2pKDRI...3L...px..$.P ...p.P........$..........,a2T..X.!......av.....q.v,KZ...E..r?Z....m."..#&?.>.i]G^....Y....E&.(m>..?.hp..X..G.e^J...9[|...}...b..b..........P|q.......ka<..j$.....t5LG....i..#....h..W.kR..T.2...Of.e......b\~...fAh..L..La.......!...P~e...0.l ...Z.....$...0@.0.....GG.W....e..WE.
<<< skipped >>>
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:21 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1321
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2850662&zid=185935" target="_blank">Modal 50Rb,Hasil 30Jt/Bln</a></div><div class="ab"><a href="http://click.kliksaya.com/click.php?aid=2850662&zid=185935" target="_blank">Hasilkan Rp 1,5Jt /Hari,Garansi 400% Dengan Modal 50 ribu,</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2849205&zid=185935" target="_blank">FEMINIQUE</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2849205&zid=185935" target="_blank">SeHAT & LANGSING TANPA OBAT</a></div></td></tr></table>.</div>.</body>.</html>..
<<< skipped >>>
GET /ad/185935/waw-cheaters.com HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.waw-cheaters.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: scr.kliksaya.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Tue, 26 Apr 2016 12:45:21 GMT
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.4.30
X-Powered-By: PHP/5.4.30
Content-Length: 1321
Connection: close
Content-Type: text/html
<html><head><style type="text/css">..ot{border:#ffffff 1px solid;background-color:#FFFFFF;height:58;width:466;overflow:hidden;}..at,.at A:link,.at A:visited{font-family:Arial;font-size:10pt;overflow:hidden;margin:0 auto;font-weight:bold;color:#000000;text-decoration:underline;}..ab,.ab A:link,.ab A:visited{overflow:hidden;margin:0 auto;text-align:left;font-family:Arial;font-size:10pt;text-decoration:none;color:#555555;}..ab A:hover{text-decoration: underline;}.</style></head><body bgcolor="#FFFFFF">.<div class="ot">.<table width="468" cellspacing="0" cellpadding="2" style="height:60;">.<tr><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2850662&zid=185935" target="_blank">Modal 50Rb,Hasil 30Jt/Bln</a></div><div class="ab"><a href="http://click.kliksaya.com/click.php?aid=2850662&zid=185935" target="_blank">Hasilkan Rp 1,5Jt /Hari,Garansi 400% Dengan Modal 50 ribu,</a></div></td><td width="50%" valign="top" align="left" height="35"><div class="at"><a href="hXXp://click.kliksaya.com/click.php?aid=2849205&zid=185935" target="_blank">FEMINIQUE</a></div><div class="ab"><a href="hXXp://click.kliksaya.com/click.php?aid=2849205&zid=185935" target="_blank">SeHAT & LANGSING TANPA OBAT</a></div></td></tr></table>.</div>.</body>.</html>..
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_272:
.text
.text
.data
.data
.rsrc
.rsrc
@.teraphy
@.teraphy
MSINET.OCX
MSINET.OCX
InetCtlsObjects.Inet
InetCtlsObjects.Inet
COMDLG32.OCX
COMDLG32.OCX
MSComDlg.CommonDialog
MSComDlg.CommonDialog
%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB
%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB
%System%\MSINET.oca
%System%\MSINET.oca
user32.dll
user32.dll
GetAsyncKeyState
GetAsyncKeyState
PSAPI.DLL
PSAPI.DLL
shell32.dll
shell32.dll
ShellExecuteA
ShellExecuteA
VBA6.DLL
VBA6.DLL
KeyDown
KeyDown
KeyUp
KeyUp
%System%\stdole2.tlb
%System%\stdole2.tlb
gdi32.dll
gdi32.dll
olepro32.dll
olepro32.dll
MSIMG32.dll
MSIMG32.dll
KeyPress
KeyPress
Xd?.tF
Xd?.tF
13:131;13
13:131;13
J .Ti
J .Ti
J .yF
J .yF
.yEn]
.yEn]
VVV.pekalongan-kommunity.com
VVV.pekalongan-kommunity.com
strURL
strURL
uMsg
uMsg
KeyCode
KeyCode
KeyAcsii
KeyAcsii
t.Hu`
t.Hu`
MSVBVM60.DLL
MSVBVM60.DLL
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# 102.54.94.97 rhino.acme.com # source server
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# 38.25.63.10 x.acme.com # x client host
# 127.0.0.1 localhost
# 127.0.0.1 localhost
127.0.0.0 hXXp://VVV.vista-tigabelas.blogspot.co.id/
127.0.0.0 hXXp://VVV.vista-tigabelas.blogspot.co.id/
127.0.0.0 hXXps://VVV.vista-tigabelas.blogspot.co.id/
127.0.0.0 hXXps://VVV.vista-tigabelas.blogspot.co.id/
127.0.0.0 hXXps://VVV.vista-tigabelas.blogspot.com/
127.0.0.0 hXXps://VVV.vista-tigabelas.blogspot.com/
127.0.0.0 vista-tigabelas.blogspot.com
127.0.0.0 vista-tigabelas.blogspot.com
127.0.0.0 VVV.vista-tigabelas.blogspot.co.id
127.0.0.0 VVV.vista-tigabelas.blogspot.co.id
127.0.0.0 VVV.vista-tigabelas.blogspot.com
127.0.0.0 VVV.vista-tigabelas.blogspot.com
.reloc
.reloc
CmDialogWndClass
CmDialogWndClass
cmdlg98.chm
cmdlg98.chm
Windows
Windows
%s,%s,%s
%s,%s,%s
%s.drv
%s.drv
WINSPOOL.DRV
WINSPOOL.DRV
Ports
Ports
MbP?hhctrl.ocx
MbP?hhctrl.ocx
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
z!{lX-X-X-XX-XXXXXX}
z!{lX-X-X-XX-XXXXXX}
SSSh`:{!
SSSh`:{!
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
ole32.dll
ole32.dll
ADVAPI32.dll
ADVAPI32.dll
OLEAUT32.dll
OLEAUT32.dll
comdlg32.dll
comdlg32.dll
GDI32.dll
GDI32.dll
GetProcessHeap
GetProcessHeap
GetWindowsDirectoryA
GetWindowsDirectoryA
GetKeyState
GetKeyState
CreateDialogIndirectParamA
CreateDialogIndirectParamA
RegCloseKey
RegCloseKey
RegCreateKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyA
GetViewportExtEx
GetViewportExtEx
SetViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
%s%s.DLL
%s%s.DLL
%u\%s.dll
%u\%s.dll
{lX-X-X-XX-XXXXXX}
{lX-X-X-XX-XXXXXX}
CLSID\%s
CLSID\%s
%s Object
%s Object
%s.%s.%ld
%s.%s.%ld
%s.%s
%s.%s
%s.%s\CurVer
%s.%s\CurVer
%s\InprocServer
%s\InprocServer
VERSION.DLL
VERSION.DLL
%ld - %s
%ld - %s
stdole2.tlbWWW
stdole2.tlbWWW
cdlGetNotSupportedWW
cdlGetNotSupportedWW
0{ cdlSetNotSupportedWW
0{ cdlSetNotSupportedWW
0B.cdlMemAllocFailureWW
0B.cdlMemAllocFailureWW
.cdlNoFontsWW
.cdlNoFontsWW
cdlHelpKeyWW
cdlHelpKeyWW
cdlHelpPartialKeyWWWX
cdlHelpPartialKeyWWWX
cdlPortraitWX
cdlPortraitWX
HelpKeyW
HelpKeyW
pbstrHelpKey
pbstrHelpKey
ComDlg32.OcxWW
ComDlg32.OcxWW
cmdlg98.chmWWW
cmdlg98.chmWWW
Sets or returns state of Collate check box.WWW%
Sets or returns state of Collate check box.WWW%
Prevents a warning message when there is no default printer.WW5
Prevents a warning message when there is no default printer.WW5
Sets or returns the state of the Pages option button.WE
Sets or returns the state of the Pages option button.WE
Returns a device context for the printer selection.WWW
Returns a device context for the printer selection.WWW
Dialog box displays the Help button.WW!
Dialog box displays the Help button.WW!
Sets support for multiple copies.W,
Sets support for multiple copies.W,
Sets initial color value for the dialog box.WWK
Sets initial color value for the dialog box.WWK
Entire dialog box is displayed, including the Define Custom Colors section.WWW
Entire dialog box is displayed, including the Define Custom Colors section.WWW
Disables the Define Custom Colors section of the dialog box.WW"
Disables the Define Custom Colors section of the dialog box.WW"
Generates a message box if the selected file already exists.WW
Generates a message box if the selected file already exists.WW
Allows invalid characters in the returned file name.WW:
Allows invalid characters in the returned file name.WW:
Extension of returned file name is different from the one set by DefaultExt.WW%
Extension of returned file name is different from the one set by DefaultExt.WW%
User can enter only names of existing files.WWF
User can enter only names of existing files.WWF
The returned file will not have the Read Only attribute set.WW
The returned file will not have the Read Only attribute set.WW
Windows 95 Open A File dialog box template.WWW
Windows 95 Open A File dialog box template.WWW
Long filenames.WWW;
Long filenames.WWW;
Dialog box lists only screen fonts supported by the system.WWW5
Dialog box lists only screen fonts supported by the system.WWW5
Dialog box lists only fonts supported by the printer.W4
Dialog box lists only fonts supported by the printer.W4
Dialog box lists available screen and printer fonts.WW7
Dialog box lists available screen and printer fonts.WW7
Dialog enables strikeout, underline, and color effects.WWW$
Dialog enables strikeout, underline, and color effects.WWW$
Dialog box enables the Apply button.WW@
Dialog box enables the Apply button.WW@
Dialog box allows only fonts that use the Windows character set.WW3
Dialog box allows only fonts that use the Windows character set.WW3
Dialog box should not allow vector-font selections.WWWL
Dialog box should not allow vector-font selections.WWWL
Dialog box should not allow graphic device interface (GDI) font simulations.WWH
Dialog box should not allow graphic device interface (GDI) font simulations.WWH
Selects font sizes within the range specified by Min and Max properties.WW0
Selects font sizes within the range specified by Min and Max properties.WW0
Dialog box should select only fixed-pitch fonts.WWL
Dialog box should select only fixed-pitch fonts.WWL
Allows only the selection of fonts available to both the screen and printer.WWG
Allows only the selection of fonts available to both the screen and printer.WWG
Displays an error if a user selects a font or style that doesn't exist.WWW>
Displays an error if a user selects a font or style that doesn't exist.WWW>
No font style selected.WWW
No font style selected.WWW
Couldn't allocate memory for FileName or Filter.WW
Couldn't allocate memory for FileName or Filter.WW
Cancel was selected.WW!
Cancel was selected.WW!
Call to Windows Help failed.WW*
Call to Windows Help failed.WW*
The function failed to load a specified string.WWW1
The function failed to load a specified string.WWW1
The function failed to lock a specified resource.WH
The function failed to lock a specified resource.WH
The function was unable to allocate memory for internal data structures.WWD
The function was unable to allocate memory for internal data structures.WWD
The function was unable to lock the memory associated with a handle.WW
The function was unable to lock the memory associated with a handle.WW
No fonts exist.WWW=
No fonts exist.WWW=
File name is invalid.WC
File name is invalid.WC
An attempt to subclass a listbox failed due to insufficient memory.WWWB
An attempt to subclass a listbox failed due to insufficient memory.WWWB
DevMode and DevNames data structures describe two different printers.WH
DevMode and DevNames data structures describe two different printers.WH
The printer-device driver failed to initialize a DEVMODE data structure.WW3
The printer-device driver failed to initialize a DEVMODE data structure.WW3
The PrintDlg function failed during initialization.WWWK
The PrintDlg function failed during initialization.WWWK
The PrintDlg function failed to load the specified printer's device driver.WWW!
The PrintDlg function failed to load the specified printer's device driver.WWW!
No printer device-drivers were found.WB
No printer device-drivers were found.WB
The Common Dialog function failed to parse the strings in WIN.INI.H
The Common Dialog function failed to parse the strings in WIN.INI.H
The printer device driver failed to initialize a DevMode data structure.WWK
The printer device driver failed to initialize a DevMode data structure.WWK
The [devices] section of WIN.INI does not contain an entry for the printer.WWW:
The [devices] section of WIN.INI does not contain an entry for the printer.WWW:
No template provided by the application.WW/
No template provided by the application.WW/
Application did not provide an instance handle.WWW#
Application did not provide an instance handle.WWW#
Displays Help for a particular topic.WO
Displays Help for a particular topic.WO
Notifies the Help application that the specified Help file is no longer in use.WWW.
Notifies the Help application that the specified Help file is no longer in use.WWW.
Display Help for using the Help application itself.WWW
Display Help for using the Help application itself.WWW
Set the current Index for multi-index Help.WWW2
Set the current Index for multi-index Help.WWW2
Displays a topic identified by a context number.WW8
Displays a topic identified by a context number.WW8
Creates a Help file that displays text in only one font.WW'
Creates a Help file that displays text in only one font.WW'
Displays Help for a particular keyword.WWW'
Displays Help for a particular keyword.WWW'
Displays Help for a particular command.WWW'
Displays Help for a particular command.WWW'
Call the search engine in Windows Help.WWW"
Call the search engine in Windows Help.WWW"
Portrait printer paper orientation#
Portrait printer paper orientation#
Sets the string displayed in the title bar of the dialog box.WQ
Sets the string displayed in the title bar of the dialog box.WQ
Returns/sets the default filename extension for the dialog box.WWW(
Returns/sets the default filename extension for the dialog box.WWW(
Returns/sets the initial file directory.WW
Returns/sets the initial file directory.WW
Returns/sets the selected color.WW"
Returns/sets the selected color.WW"
Specifies the name of the font that appears in each row for the given level.WW
Specifies the name of the font that appears in each row for the given level.WW
Returns/sets italic font styles.WW'
Returns/sets italic font styles.WW'
Returns/sets strikethrough font styles.WWW#
Returns/sets strikethrough font styles.WWW#
Returns/sets underline font styles.WWW8
Returns/sets underline font styles.WWW8
Returns/sets the value for the first page to be printed.WWR
Returns/sets the value for the first page to be printed.WWR
Returns/sets the maximum font size (Font dialog) or print range (Print dialog).WWWH
Returns/sets the maximum font size (Font dialog) or print range (Print dialog).WWWH
Returns/sets a value that determines the number of copies to be printed.WWP
Returns/sets a value that determines the number of copies to be printed.WWP
Indicates whether an error is generated when the user chooses the Cancel button.WWC
Indicates whether an error is generated when the user chooses the Cancel button.WWC
Returns/sets the name of the Help file associated with the project.WWW/
Returns/sets the name of the Help file associated with the project.WWW/
Returns/sets the type of online Help requested.WWWB
Returns/sets the type of online Help requested.WWWB
Returns/sets the keyword that identifies the requested Help topic.f
Returns/sets the keyword that identifies the requested Help topic.f
Returns/sets a default filter for an Open or Save As dialog box.WW8
Returns/sets a default filter for an Open or Save As dialog box.WW8
Returns/sets the context ID of the requested Help topic.WWX
Returns/sets the context ID of the requested Help topic.WWX
Specifies the size (in points) of the font that appears in each row for the given level.WW4
Specifies the size (in points) of the font that appears in each row for the given level.WW4
Returns/sets the type of dialog box to be displayed.WWT
Returns/sets the type of dialog box to be displayed.WWT
Returns/sets the maximum size of the filename opened using the CommonDialog control.WWI
Returns/sets the maximum size of the filename opened using the CommonDialog control.WWI
Returns a handle (from Microsoft Windows) to the object's device context.WQ
Returns a handle (from Microsoft Windows) to the object's device context.WQ
Displays the CommonDialog control's Open dialog box.WW7
Displays the CommonDialog control's Open dialog box.WW7
Displays the CommonDialog control's Save As dialog box.WWW5
Displays the CommonDialog control's Save As dialog box.WWW5
Displays the CommonDialog control's Printer dialog box.WWW8
Displays the CommonDialog control's Printer dialog box.WWW8
Runs Winhelp.EXE and displays the Help file you specify.WW&
Runs Winhelp.EXE and displays the Help file you specify.WW&
5 5*545>5
5 5*545>5
6&6-646;6
6&6-646;6
ocx\ComDlg32.dbg
ocx\ComDlg32.dbg
`.data
`.data
Internet Control URL Property Page
Internet Control URL Property Page
INET98.CHM
INET98.CHM
FTp/L#
FTp/L#
rL#.OL#
rL#.OL#
hhctrl.ocx
hhctrl.ocx
hXXp://
hXXp://
PTF://
PTF://
hXXps://
hXXps://
Microsoft URL Control - 6.01.9782
Microsoft URL Control - 6.01.9782
SSShp&M#
SSShp&M#
WININET.dll
WININET.dll
InternetCreateUrlA
InternetCreateUrlA
InternetCrackUrlA
InternetCrackUrlA
InternetOpenUrlA
InternetOpenUrlA
HttpSendRequestA
HttpSendRequestA
HttpOpenRequestA
HttpOpenRequestA
HttpQueryInfoA
HttpQueryInfoA
FtpFindFirstFileA
FtpFindFirstFileA
FtpRemoveDirectoryA
FtpRemoveDirectoryA
FtpGetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpCreateDirectoryA
FtpCreateDirectoryA
FtpSetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRenameFileA
FtpRenameFileA
FtpPutFileA
FtpPutFileA
FtpGetFileA
FtpGetFileA
FtpDeleteFileA
FtpDeleteFileA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
OL#%s%s.DLL
OL#%s%s.DLL
0?NicFTPWWW
0?NicFTPWWW
icHTTPWW
icHTTPWW
icHTTPSW,
icHTTPSW,
icUrlOpenFailedW
icUrlOpenFailedW
icBadUrl
icBadUrl
0NSicNoExecuteW
0NSicNoExecuteW
`icFtpCommandFailedWW
`icFtpCommandFailedWW
qicUnsupportedTypeWWW
qicUnsupportedTypeWWW
icUnsupportedCommand
icUnsupportedCommand
0-gicInvalidOperationWW
0-gicInvalidOperationWW
icExecutingW
icExecutingW
0jHicInvalidForFtpW
0jHicInvalidForFtpW
hicInvalidURL
hicInvalidURL
icIncorrectPasswordW
icIncorrectPasswordW
icLoginFailureWW
icLoginFailureWW
icInetInvalidOperationWW
icInetInvalidOperationWW
[icOperationCancelled
[icOperationCancelled
00XicSecCertDateInvalid
00XicSecCertDateInvalid
0.(icSecCertCnInvalidWW
0.(icSecCertCnInvalidWW
0WwicHttpToHttpsOnRedir
0WwicHttpToHttpsOnRedir
icHttpsToHttpOnRedir
icHttpsToHttpOnRedir
.icPostIsNonSecureWWW
.icPostIsNonSecureWWW
BicClientAuthCertNeededWW
BicClientAuthCertNeededWW
icHttpsHttpSubmitRedirWW
icHttpsHttpSubmitRedirWW
icFtpTransferInProgressW
icFtpTransferInProgressW
icFtpDropped
icFtpDropped
icFtpNoPassiveModeWW
icFtpNoPassiveModeWW
ficHttpHeaderNotFound
ficHttpHeaderNotFound
icHttpDownlevelServerWWW
icHttpDownlevelServerWWW
icHttpInvalidServerResponseW
icHttpInvalidServerResponseW
icHttpInvalidHeaderW
icHttpInvalidHeaderW
icHttpInvalidQueryRequestWWW
icHttpInvalidQueryRequestWWW
icHttpHeaderAlreadyExistsWWW
icHttpHeaderAlreadyExistsWWW
0`>icHttpRedirectFailed
0`>icHttpRedirectFailed
0~ icHttpCookieNeedsConfirmationWWW
0~ icHttpCookieNeedsConfirmationWWW
7icHttpCookieDeclined
7icHttpCookieDeclined
0DSicHttpRedirectNeedsConfirmationW
0DSicHttpRedirectNeedsConfirmationW
icSecInvalidCert
icSecInvalidCert
icSecCertRevoked
icSecCertRevoked
}|RemotePortWW
}|RemotePortWW
StillExecutingWW
StillExecutingWW
URLW
URLW
Password
Password
OpenURLW
OpenURLW
yOperationWWW
yOperationWWW
~_URLX
~_URLX
MSINet.Ocx
MSINet.Ocx
FTPWWW
FTPWWW
HTTPWW
HTTPWW
Secure HTTPWWW
Secure HTTPWWW
Unable to open URL
Unable to open URL
URL is malformedWW&
URL is malformedWW&
Protocol not supported for this method
Protocol not supported for this method
You must execute an operation before retrieving dataWW
You must execute an operation before retrieving dataWW
FTP command failed
FTP command failed
Not a valid or supported commandWW
Not a valid or supported commandWW
Invalid operation argument
Invalid operation argument
Still executing last requestWW,
Still executing last requestWW,
This call is not valid for an FTP connectionWW
This call is not valid for an FTP connectionWW
Invalid URLWWW
Invalid URLWWW
Incorrect password
Incorrect password
Login failureW
Login failureW
Invalid operationW
Invalid operationW
Operation cancelledWWW
Operation cancelledWWW
Security certificate date invalidW#
Security certificate date invalidW#
Security certificate number invalidWWW
Security certificate number invalidWWW
HTTP to HTTPS on redirectW
HTTP to HTTPS on redirectW
HTTPS to HTTP on redirectW
HTTPS to HTTP on redirectW
Client authorization certificate neededWWW
Client authorization certificate neededWWW
HTTPS HTTP submit redirWWW
HTTPS HTTP submit redirWWW
FTP - Transfer in progress
FTP - Transfer in progress
FTP - Connection droppedWW
FTP - Connection droppedWW
FTP - no passive modeW
FTP - no passive modeW
HTTP - Header not foundWWW
HTTP - Header not foundWWW
HTTP - Downlevel serverWWW
HTTP - Downlevel serverWWW
HTTP - Invalid server response
HTTP - Invalid server response
HTTP - Invalid HeaderW
HTTP - Invalid HeaderW
HTTP - Invalid query requestWW
HTTP - Invalid query requestWW
HTTP - Header already existsWW
HTTP - Header already existsWW
HTTP - Redirect failed
HTTP - Redirect failed
HTTP - cookie needs confirmationWW
HTTP - cookie needs confirmationWW
HTTP - cookie declined"
HTTP - cookie declined"
HTTP - redirect needs confirmation
HTTP - redirect needs confirmation
Invalid certWW
Invalid certWW
Cert revokedWW
Cert revokedWW
Protocol to use for this URLWW
Protocol to use for this URLWW
Returns/Sets the internet port to be used on the remote computerWW5
Returns/Sets the internet port to be used on the remote computerWW5
Returns/Sets the URL used by this controlW*
Returns/Sets the URL used by this controlW*
Password to use for authentication;
Password to use for authentication;
Open a URL&
Open a URL&
Method used to cancel the request currently being executed
Method used to cancel the request currently being executed
2 2>2`2~2
2 2>2`2~2
ocx\msinet.dbg
ocx\msinet.dbg
Thawte Certification1
Thawte Certification1
hXXp://ocsp.verisign.com0
hXXp://ocsp.verisign.com0
0hXXp://crl.verisign.com/ThawteTimestampingCA.crl0
0hXXp://crl.verisign.com/ThawteTimestampingCA.crl0
"hXXp://crl.verisign.com/tss-ca.crl0
"hXXp://crl.verisign.com/tss-ca.crl0
9hXXp://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0
9hXXp://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0
hXXp://msdn.microsoft.com/vbasic0
hXXp://msdn.microsoft.com/vbasic0
Iz!.Iz!
Iz!.Iz!
Ez!&Nz!:Nz!.Pz!BPz!
Ez!&Nz!:Nz!.Pz!BPz!
FTP3z!
FTP3z!
SSSh0:{!
SSSh0:{!
2 2(2,2024282
2 2(2,2024282
6%7S7Y7s7
6%7S7Y7s7
]/ ?- '?-
]/ ?- '?-
#]/ *]/ 1]/
#]/ *]/ 1]/
$ ;$ |$
$ ;$ |$
. ?- '?-
. ?- '?-
9. "9. ,9. 69.
9. "9. ,9. 69.
Button%d
Button%d
ListImage%d
ListImage%d
ColumnHeader(%d)
ColumnHeader(%d)
@- !@- .@-
@- !@- .@-
?- ?- '?-
?- ?- '?-
COMCTL32.DLL
COMCTL32.DLL
!/ :!/ {!/ %!/
!/ :!/ {!/ %!/
%/ ?- '?-
%/ ?- '?-
Panel%d
Panel%d
Tab%d
Tab%d
$. )$. 3$. ?- '?-
$. )$. 3$. ?- '?-
- ?- '?-
- ?- '?-
&, /$, ,
&, /$, ,
- /%, 9%,
- /%, 9%,
- ,8, 68,
- ,8, 68,
SSh
SSh
9FL|$SSh
9FL|$SSh
P8SShG
P8SShG
}2SSh
}2SSh
t&SSh
t&SSh
comctl1.hlp
comctl1.hlp
&- %'- 5
&- %'- 5
/ SHELL32.DLL
/ SHELL32.DLL
COMCTL32.ocx
COMCTL32.ocx
VERSION.dll
VERSION.dll
COMCTL32.dll
COMCTL32.dll
VkKeyScanA
VkKeyScanA
MapVirtualKeyA
MapVirtualKeyA
SetWindowsHookExA
SetWindowsHookExA
UnhookWindowsHookEx
UnhookWindowsHookEx
.IImagesW
.IImagesW
8T.IImage10
8T.IImage10
x}pbFormatSupportedWWW
x}pbFormatSupportedWWW
ccSetNotSupportedAtRuntimeWW
ccSetNotSupportedAtRuntimeWW
0NmccSetNotSupportedWWW
0NmccSetNotSupportedWWW
0UÃŒGetNotSupportedWWW
0UÃŒGetNotSupportedWWW
CccNonUniqueKeyWW
CccNonUniqueKeyWW
OccInvalidKey
OccInvalidKey
.aKeyDownW
.aKeyDownW
KeyCodeW
KeyCodeW
#KeyAscii
#KeyAscii
MKeyUpWWW
MKeyUpWWW
pvKeyWWW
pvKeyWWW
KeyW
KeyW
dzpbstrKey4
dzpbstrKey4
PSubkeyWW
PSubkeyWW
0 %sbrInset
0 %sbrInset
.lvwManualWWW
.lvwManualWWW
0yUlvwReportWWW
0yUlvwReportWWW
SortKeyW
SortKeyW
psKeyWWW
psKeyWWW
.ophImageListW
.ophImageListW
Microsoft Windows Common Controls 5.0 (SP2)WWW
Microsoft Windows Common Controls 5.0 (SP2)WWW
COMCTL32.OCXWW
COMCTL32.OCXWW
comctl1.hlpWWW
comctl1.hlpWWW
Constants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).WWX
Constants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).WWX
Constants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).WWC
Constants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).WWC
State transition constants for the DragOver and OLEDragOver events.WWW
State transition constants for the DragOver and OLEDragOver events.WWW
Clipboard format constants.WWW3
Clipboard format constants.WWW3
Drop effect constants for OLE drag and drop events.WWW
Drop effect constants for OLE drag and drop events.WWW
TabWidthStyle constants.WW
TabWidthStyle constants.WW
TabStyle constants.WWW
TabStyle constants.WWW
Returns a reference to a collection of Tab objects in the TabStrip control.WWWK
Returns a reference to a collection of Tab objects in the TabStrip control.WWWK
An individual object, analogous to a page, contained in a TabStrip control.WWW
An individual object, analogous to a page, contained in a TabStrip control.WWW
Toolbar Button Style constants.WWW
Toolbar Button Style constants.WWW
Toolbar Value constants.WW
Toolbar Value constants.WW
Displays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.WWW
Displays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.WWW
Displays a collection of ListItems such as files or folders.WW%
Displays a collection of ListItems such as files or folders.WW%
An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.W!
An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.W!
Contains a collection of ListImage objects, each of which can be referred to by its index or keyWW&
Contains a collection of ListImage objects, each of which can be referred to by its index or keyWW&
A bitmap or icon of any size that can be used in other controls.WW
A bitmap or icon of any size that can be used in other controls.WW
A calibrated control with a slider for setting or selecting values.WWW"
A calibrated control with a slider for setting or selecting values.WWW"
Clears all data and formats in a DataObject object.WWW>
Clears all data and formats in a DataObject object.WWW>
Determines if a specified clipboard format is supported by the DataObject object.WE
Determines if a specified clipboard format is supported by the DataObject object.WE
Adds a supported format and possibly its data to a DataObject object.W7
Adds a supported format and possibly its data to a DataObject object.W7
A collection of filenames used by the vbCFFiles format.WWWn
A collection of filenames used by the vbCFFiles format.WWWn
Returns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WWWW
Returns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WWWW
Adds a filename to the Files collection of a DataObject object (vbCFFiles format only).WWWc
Adds a filename to the Files collection of a DataObject object (vbCFFiles format only).WWWc
Clears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).WWW\
Clears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).WWW\
Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).WW
Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).WW
Accepts no OLE drag/drop operations.WW9
Accepts no OLE drag/drop operations.WW9
Source control dragged into target.WWW%
Source control dragged into target.WWW%
Text (.txt file).W
Text (.txt file).W
Bitmap (.bmp file).WWW
Bitmap (.bmp file).WWW
Metafile (.wmf file).W
Metafile (.wmf file).W
Enhanced metafile (.emf file).*
Enhanced metafile (.emf file).*
Filename list (Microsoft Windows Explorer)
Filename list (Microsoft Windows Explorer)
Rich Text Format (.rtf file).W
Rich Text Format (.rtf file).W
No OLE drag/drop operation has taken place/would take place.WW@
No OLE drag/drop operation has taken place/would take place.WW@
A mask to indicate that a copy has taken place/would take place.WW@
A mask to indicate that a copy has taken place/would take place.WW@
A mask to indicate that a move has taken place/would take place.WWI
A mask to indicate that a move has taken place/would take place.WWI
Expected at least one argument.WWW1
Expected at least one argument.WWW1
Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.WN
Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.WN
Key is not unique in collectionWWW
Key is not unique in collectionWWW
Invalid keyWWW$
Invalid keyWWW$
Returns/sets a value that determines whether a form or control can respond to user-generated events.WW
Returns/sets a value that determines whether a form or control can respond to user-generated events.WW
Sets a custom mouse icon.WZ
Sets a custom mouse icon.WZ
Returns/sets the style appearance (tab or button) of a TabStrip control.WWd
Returns/sets the style appearance (tab or button) of a TabStrip control.WWd
Returns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.WWK
Returns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.WWK
Returns/sets the width and justification of all tabs in a TabStrip control.WWW?
Returns/sets the width and justification of all tabs in a TabStrip control.WWW?
Returns the top coordinate of the internal area of the control.WWW@
Returns the top coordinate of the internal area of the control.WWW@
Returns the left coordinate of the internal area of the control.WW7
Returns the left coordinate of the internal area of the control.WW7
Returns the height of the internal area of the control.WWW6
Returns the height of the internal area of the control.WWW6
Returns/Sets whether this control can act as an OLE drop target.WW/
Returns/Sets whether this control can act as an OLE drop target.WW/
Forces a complete repaint of a form or control.WWWC
Forces a complete repaint of a form or control.WWWC
Starts an OLE drag/drop event with the given control as the source.WWWM
Starts an OLE drag/drop event with the given control as the source.WWWM
Occurs when the user presses and then releases a mouse button over an object.WA
Occurs when the user presses and then releases a mouse button over an object.WA
Occurs when the user presses a key while an object has the focus.W6
Occurs when the user presses a key while an object has the focus.W6
Occurs when the user presses and releases an ANSI key.B
Occurs when the user presses and releases an ANSI key.B
Occurs when the user releases a key while an object has the focus.L
Occurs when the user releases a key while an object has the focus.L
Occurs when the user presses the mouse button while an object has the focus.WW%
Occurs when the user presses the mouse button while an object has the focus.WW%
Occurs when the user moves the mouse.WM
Occurs when the user moves the mouse.WM
Generated when a Tab object is clicked, or the tab's Value setting has been changed. Used to check parameters before actually generating a Click event.WWW
Generated when a Tab object is clicked, or the tab's Value setting has been changed. Used to check parameters before actually generating a Click event.WWW
Returns a specific member of a Collection object either by position or by key.,
Returns a specific member of a Collection object either by position or by key.,
Removes a specific member from a collection.WW$
Removes a specific member from a collection.WW$
Removes all objects in a collection.WW'
Removes all objects in a collection.WW'
Adds a Tab object to a Tabs collection.WWWS
Adds a Tab object to a Tabs collection.WWWS
Returns/sets the text displayed in an object's title bar or below an object's icon.WWW.
Returns/sets the text displayed in an object's title bar or below an object's icon.WWW.
Returns/sets the index of an object in a collection. Read-only at run time.WWW
Returns/sets the index of an object in a collection. Read-only at run time.WWW
Returns/sets the unique string of an object in a collection.WWF
Returns/sets the unique string of an object in a collection.WWF
Returns/sets the width of an object.WW%
Returns/sets the width of an object.WW%
Returns/sets the height of an object.Wg
Returns/sets the height of an object.Wg
Returns/sets the distance between the internal top edge of an object and the top edge of its container.WWWi
Returns/sets the distance between the internal top edge of an object and the top edge of its container.WWWi
Returns/sets the distance between the internal left edge of an object and the left edge of its container.WO
Returns/sets the distance between the internal left edge of an object and the left edge of its container.WO
Returns/sets a value which determines if a ListItem or Node object is selected.WWW?
Returns/sets a value which determines if a ListItem or Node object is selected.WWW?
Returns/sets the index or key of a ListImage object to be used.WWW
Returns/sets the index or key of a ListImage object to be used.WWW
Returns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.WWWI
Returns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.WWWI
Returns/sets a value which determines if users can customize the Toolbar.WH
Returns/sets a value which determines if users can customize the Toolbar.WH
Returns a reference to a Toolbar control's collection of Button objects.WW
Returns a reference to a Toolbar control's collection of Button objects.WW
Help context of topic to be displayed when inquiring help from Toolbar Customize dialog.WWG
Help context of topic to be displayed when inquiring help from Toolbar Customize dialog.WWG
Help file to be used when inquiring help from Toolbar Customize dialog.WWWZ
Help file to be used when inquiring help from Toolbar Customize dialog.WWWZ
Saves a Toolbar configuration in an initialization (.ini) file.WWWa
Saves a Toolbar configuration in an initialization (.ini) file.WWWa
Restores a toolbar, created with a Toolbar control, to its original state after being customized.WD
Restores a toolbar, created with a Toolbar control, to its original state after being customized.WD
Occurs when the user clicks on a Button object in a Toolbar control.WWn
Occurs when the user clicks on a Button object in a Toolbar control.WWn
Occurs when you press and release a mouse button and then press and release it again over an object.WW[
Occurs when you press and release a mouse button and then press and release it again over an object.WW[
Adds a Button object to a Buttons collection and returns a reference to the created object.WWWL
Adds a Button object to a Buttons collection and returns a reference to the created object.WWWL
Returns/sets a value that determines whether an object is visible or hidden.WW$
Returns/sets a value that determines whether an object is visible or hidden.WW$
Returns/sets the value of an object.WW
Returns/sets the value of an object.WW
Returns/sets the description displayed when the user clicks a Button object during a customization operation.W
Returns/sets the description displayed when the user clicks a Button object during a customization operation.W
Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.WWW
Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.WWW
Similar to the standard Click event, but the PanelClick event occurs when a user presses and then releases a mouse button over any of the StatusBar control's Panel objects.WW
Similar to the standard Click event, but the PanelClick event occurs when a user presses and then releases a mouse button over any of the StatusBar control's Panel objects.WW
Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.WWX
Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.WWX
Adds a Panel object to a Panels collection and returns a reference to the created Panel.WW
Adds a Panel object to a Panels collection and returns a reference to the created Panel.WW
Returns/sets a control's maximum value.WWW'
Returns/sets a control's maximum value.WWW'
Returns/sets a control's minimum value.WWW3
Returns/sets a control's minimum value.WWW3
Returns or sets a control's current Value property.WWW,
Returns or sets a control's current Value property.WWW,
Returns/sets the border style for an object.WW
Returns/sets the border style for an object.WW
Returns a reference to a Node or ListItem object and highlights the object with the system highlight color.WWW[
Returns a reference to a Node or ListItem object and highlights the object with the system highlight color.WWW[
Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.WWW?
Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.WWW?
Returns/sets the style of lines displayed between Node objects.WWW4
Returns/sets the style of lines displayed between Node objects.WWW4
Returns a reference to a collection of Node objects.WWV
Returns a reference to a collection of Node objects.WWV
Indicates whether the elements of a control are automatically sorted alphabetically.WW
Indicates whether the elements of a control are automatically sorted alphabetically.WW
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WWW
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WWW
Returns the number of Node objects that fit in the internal area of a TreeView control.WWW>
Returns the number of Node objects that fit in the internal area of a TreeView control.WWW>
Begins a label editing operation on a ListItem or Node object.`
Begins a label editing operation on a ListItem or Node object.`
Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.WWV
Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.WWV
Occurs when a Node object is clicked.WW
Occurs when a Node object is clicked.WW
Adds a Node object to a Nodes collection and returns a reference to the created object.WWWL
Adds a Node object to a Nodes collection and returns a reference to the created object.WWWL
Returns a specific item of a Collection object either by position or by key.WW8
Returns a specific item of a Collection object either by position or by key.WW8
Returns a reference to the first child of a Node object.WW4
Returns a reference to the first child of a Node object.WW4
Returns the number of child nodes a Node object has.WWB
Returns the number of child nodes a Node object has.WWB
Returns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.WB
Returns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.WB
Returns a reference to the last Node object in a hierarchy level.WA
Returns a reference to the last Node object in a hierarchy level.WA
Returns/sets a reference to the parent of a Node object.WWE
Returns/sets a reference to the parent of a Node object.WWE
Returns a reference to the previous Node object in a hierarchy level.WB
Returns a reference to the previous Node object in a hierarchy level.WB
Returns/sets the Index or Key of an image in an ImageList control which is displayed when a Node object is selected.WW3
Returns/sets the Index or Key of an image in an ImageList control which is displayed when a Node object is selected.WW3
Returns/sets the text to be displayed in a control.WWWY
Returns/sets the text to be displayed in a control.WWWY
Creates a composite image from an icon and a caption for use in drag and drop operations.W^
Creates a composite image from an icon and a caption for use in drag and drop operations.W^
Report
Report
Returns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.WWW
Returns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.WWW
Returns a reference to a collection of ColumnHeader objects.WWZ
Returns a reference to a collection of ColumnHeader objects.WWZ
Returns/sets whether or not a ListView control's column headers are hidden in Report view.[
Returns/sets whether or not a ListView control's column headers are hidden in Report view.[
Returns or sets a value that determines if labels are wrapped when the ListView is in Icon view.WW
Returns or sets a value that determines if labels are wrapped when the ListView is in Icon view.WW
Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.WWF
Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.WWF
Returns/sets the current sort key.Z
Returns/sets the current sort key.Z
Finds an item in the list and returns a reference to that item.WWWC
Finds an item in the list and returns a reference to that item.WWWC
Retrieves a reference of the first item visible in the client area.WWWC
Retrieves a reference of the first item visible in the client area.WWWC
Occurs when a ColumnHeader object in a ListView control is clicked.WWW4
Occurs when a ColumnHeader object in a ListView control is clicked.WWW4
Returns/sets the state of a ListView control Object item.WE
Returns/sets the state of a ListView control Object item.WE
Returns/sets the index of an icon in an associated ImageList control.WK
Returns/sets the index of an icon in an associated ImageList control.WK
Returns/sets the index of an small icon in an associated ImageList control.WWWC
Returns/sets the index of an small icon in an associated ImageList control.WWWC
Returns/sets an array of strings representing the ListIitem's data.WWWZ
Returns/sets an array of strings representing the ListIitem's data.WWWZ
Returns/sets a value that determines where an object is displayed on a form.WW]
Returns/sets a value that determines where an object is displayed on a form.WW]
Returns/sets the width of ListImage objects in an ImageList control.WWd
Returns/sets the width of ListImage objects in an ImageList control.WWd
Returns/sets a value which determines the color to be transparent in ImageList graphical operations.WW_
Returns/sets a value which determines the color to be transparent in ImageList graphical operations.WW_
Returns/sets a value which determines if the ImageList control will use the MaskColor property.WWWQ
Returns/sets a value which determines if the ImageList control will use the MaskColor property.WWWQ
Returns a handle to an ImageList control.Wg
Returns a handle to an ImageList control.Wg
Creates a composite third image out of two ListImage objects and returns a reference to the new object.WWWa
Creates a composite third image out of two ListImage objects and returns a reference to the new object.WWWa
Returns/sets the increment value when the PageDown or PageUp key is pressed.WWM
Returns/sets the increment value when the PageDown or PageUp key is pressed.WWM
Returns/sets the increment value when the left or right arrow key is pressed.W,
Returns/sets the increment value when the left or right arrow key is pressed.W,
Returns/sets the maximum value of a control.WW,
Returns/sets the maximum value of a control.WW,
Returns/sets the minimum value of a control.WWI
Returns/sets the minimum value of a control.WWI
Returns/sets the orientation of a Slider control, horizontal or vertical.WE
Returns/sets the orientation of a Slider control, horizontal or vertical.WE
Returns/sets the value where a selection starts.WW'
Returns/sets the value where a selection starts.WW'
Returns/sets the length of a selection.WWW4
Returns/sets the length of a selection.WWW4
Returns/sets where ticks appear on a Slider control.WWN
Returns/sets where ticks appear on a Slider control.WWN
Sets the SelLength to 0.WW8
Sets the SelLength to 0.WW8
Returns the number of visible ticks on a Slider control.WW
Returns the number of visible ticks on a Slider control.WW
Returns a specific member of a Collection object either by position or by keyW
Returns a specific member of a Collection object either by position or by keyW
4 5$5(5,5054585
4 5$5(5,5054585
7 7$7(7,7074787
7 7$7(7,7074787
3 3$3)434
3 3$3)434
0U0
0U0
5 5$5(5,5054585
5 5$5(5,5054585
comctl32.dbg
comctl32.dbg
=VVV.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)981.0,
=VVV.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)981.0,
'hXXps://VVV.verisign.com/repository/RPA0
'hXXps://VVV.verisign.com/repository/RPA0
=VVV.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)981>0
=VVV.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)981>0
'hXXps://VVV.verisign.com/repository/CPS
'hXXps://VVV.verisign.com/repository/CPS
This certificate incorporates by reference, and its use is strictly
This certificate incorporates by reference, and its use is strictly
subject to, the VeriSign Certification Practice Statement (CPS)
subject to, the VeriSign Certification Practice Statement (CPS)
hXXps://VVV.verisign.com; by E-mail at CPS-requests@verisign.com; or
hXXps://VVV.verisign.com; by E-mail at CPS-requests@verisign.com; or
USA Copyright (c)1996 VeriSign, Inc. All Rights Reserved. CERTAIN
USA Copyright (c)1996 VeriSign, Inc. All Rights Reserved. CERTAIN
WARNING: THE USE OF THIS CERTIFICATE IS STRICTLY SUBJECT TO THE
WARNING: THE USE OF THIS CERTIFICATE IS STRICTLY SUBJECT TO THE
VERISIGN CERTIFICATION PRACTICE STATEMENT. THE ISSUING AUTHORITY
VERISIGN CERTIFICATION PRACTICE STATEMENT. THE ISSUING AUTHORITY
DISCLAIMS CERTAIN IMPLIED AND EXPRESS WARRANTIES, INCLUDING WARRANTIES
DISCLAIMS CERTAIN IMPLIED AND EXPRESS WARRANTIES, INCLUDING WARRANTIES
BE LIABLE FOR CONSEQUENTIAL, PUNITIVE, AND CERTAIN OTHER DAMAGES. SEE
BE LIABLE FOR CONSEQUENTIAL, PUNITIVE, AND CERTAIN OTHER DAMAGES. SEE
4hXXps://VVV.verisign.com/repository/verisignlogo.gif0
4hXXps://VVV.verisign.com/repository/verisignlogo.gif0
This certificate incorporates by reference, and its use is strictly subject to, the VeriSign Certification Practice Statement (CPS), available at: hXXps://VVV.verisign.com/CPS; by E-mail at CPS-requests@verisign.com; or by mail at VeriSign, Inc., 2593 Coast Ave., Mountain View, CA 94043 USA Tel. 1 (415) 961-8830 Copyright (c) 1996 VeriSign, Inc. All Rights Reserved. CERTAIN WARRANTIES DISCLAIMED and LIABILITY LIMITED.
This certificate incorporates by reference, and its use is strictly subject to, the VeriSign Certification Practice Statement (CPS), available at: hXXps://VVV.verisign.com/CPS; by E-mail at CPS-requests@verisign.com; or by mail at VeriSign, Inc., 2593 Coast Ave., Mountain View, CA 94043 USA Tel. 1 (415) 961-8830 Copyright (c) 1996 VeriSign, Inc. All Rights Reserved. CERTAIN WARRANTIES DISCLAIMED and LIABILITY LIMITED.
(hXXps://VVV.verisign.com/repository/CPS 0
(hXXps://VVV.verisign.com/repository/CPS 0
|kernel32.dll
|kernel32.dll
I:\WWWAWWWA
I:\WWWAWWWA
H*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
H*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
78E1BDD1-9941-11cf-9756-00AA00C00908
78E1BDD1-9941-11cf-9756-00AA00C00908
28C4C820-401A-101B-A3C9-08002B2F49FB
28C4C820-401A-101B-A3C9-08002B2F49FB
C:\UpdateLog.txt
C:\UpdateLog.txt
PointBlank.exe
PointBlank.exe
hXXp://pastebin.com/raw.php?i=5QCCehkC
hXXp://pastebin.com/raw.php?i=5QCCehkC
hXXps://sites.google.com/site/hostingindo1/WWeeCt19Weken.dll?attredirects=0&d=1
hXXps://sites.google.com/site/hostingindo1/WWeeCt19Weken.dll?attredirects=0&d=1
\UpdateLog.txt
\UpdateLog.txt
hXXp://VVV.waw-cheaters.com/
hXXp://VVV.waw-cheaters.com/
\PerX.ini
\PerX.ini
Dll Injected...Creating Thread.....
Dll Injected...Creating Thread.....
kernel32.dll
kernel32.dll
Can't find LoadLibrary API from kernel32.dll
Can't find LoadLibrary API from kernel32.dll
c:\Windows\system32\
c:\Windows\system32\
c:\windows\system32\drivers\etc\hosts
c:\windows\system32\drivers\etc\hosts
c:\Windows\system32\COMCTL32.OCX
c:\Windows\system32\COMCTL32.OCX
c:\Windows\system32\COMDLG32.OCX
c:\Windows\system32\COMDLG32.OCX
c:\Windows\system32\MSINET.OCX
c:\Windows\system32\MSINET.OCX
c:\Windows\system32\Comdlg32.ocx
c:\Windows\system32\Comdlg32.ocx
C:\windows..txt
C:\windows..txt
@*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
@*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
0.00.0023
0.00.0023
pb.exe
pb.exe
DB4C0D00-400B-101B-A3C9-08002B2F49FB
DB4C0D00-400B-101B-A3C9-08002B2F49FB
4D553650-6ABE-11cf-8ADB-00AA00C00905
4D553650-6ABE-11cf-8ADB-00AA00C00905
HelpKey
HelpKey
CmDlg
CmDlg
Help&Key:
Help&Key:
CMDialog ActiveX Control DLL
CMDialog ActiveX Control DLL
6.00.8877
6.00.8877
CMDIALOG
CMDIALOG
is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
Printer Dialog Box Constants1Sets or returns state of All Pages option button. Sets or returns state of Collate check box.%Disables the Print to File check box.-The Print to File check box is not displayed.4Sets or returns the state of the Pages option button%Disables the Selection option button.
Printer Dialog Box Constants1Sets or returns state of All Pages option button. Sets or returns state of Collate check box.%Disables the Print to File check box.-The Print to File check box is not displayed.4Sets or returns the state of the Pages option button%Disables the Selection option button.
)Couldn't determine procedure address(es).!Failed to show the common dialog.HThe printer device driver failed to initialize a DevMode data structure.
)Couldn't determine procedure address(es).!Failed to show the common dialog.HThe printer device driver failed to initialize a DevMode data structure.
Printer Orientation Constants$Dialog box displays the Help button.!Sets support for multiple copies.
Printer Orientation Constants$Dialog box displays the Help button.!Sets support for multiple copies.
Color Dialog Box Constants,Sets initial color value for the dialog box.KEntire dialog box is displayed, including the Define Custom Colors section.
Color Dialog Box Constants,Sets initial color value for the dialog box.KEntire dialog box is displayed, including the Define Custom Colors section.
Hides the Read Only check box.JSets the current directory to what it was when the dialog box was invoked.1Causes the dialog box to display the Help button.4Allows invalid characters in the returned file name.:Allows the File Name list box to have multiple selections.LExtension of returned file name is different from the one set by DefaultExt.
Hides the Read Only check box.JSets the current directory to what it was when the dialog box was invoked.1Causes the dialog box to display the Help button.4Allows invalid characters in the returned file name.:Allows the File Name list box to have multiple selections.LExtension of returned file name is different from the one set by DefaultExt.
%User can enter only valid path names.,User can enter only names of existing files.FAsks if the user wants to create a file that does not currently exist.)Sharing violation errors will be ignored.
%User can enter only valid path names.,User can enter only names of existing files.FAsks if the user wants to create a file that does not currently exist.)Sharing violation errors will be ignored.
Fonts Dialog Box Constants;Dialog box lists only screen fonts supported by the system.5Dialog box lists only fonts supported by the printer.4Dialog box lists available screen and printer fonts."Dialog box displays a Help button.7Dialog enables strikeout, underline, and color effects.$Dialog box enables the Apply button.@Dialog box allows only fonts that use the Windows character set.QReturns/sets the name (without the path) of the file to open or save at run time.4Displays the CommonDialog control's Open dialog box.7Displays the CommonDialog control's Save As dialog box.5Displays the CommonDialog control's Color dialog box.3Displays the CommonDialog control's Font dialog box7Displays the CommonDialog control's Printer dialog box.8Runs Winhelp.EXE and displays the Help file you specify.
Fonts Dialog Box Constants;Dialog box lists only screen fonts supported by the system.5Dialog box lists only fonts supported by the printer.4Dialog box lists available screen and printer fonts."Dialog box displays a Help button.7Dialog enables strikeout, underline, and color effects.$Dialog box enables the Apply button.@Dialog box allows only fonts that use the Windows character set.QReturns/sets the name (without the path) of the file to open or save at run time.4Displays the CommonDialog control's Open dialog box.7Displays the CommonDialog control's Save As dialog box.5Displays the CommonDialog control's Color dialog box.3Displays the CommonDialog control's Font dialog box7Displays the CommonDialog control's Printer dialog box.8Runs Winhelp.EXE and displays the Help file you specify.
3Dialog box should not allow vector-font selections.LDialog box should not allow graphic device interface (GDI) font simulations.HSelects font sizes within the range specified by Min and Max properties.0Dialog box should select only fixed-pitch fonts.LAllows only the selection of fonts available to both the screen and printer.GDisplays an error if a user selects a font or style that doesn't exist.>Dialog box should allow only the selection of scaleable fonts.>Dialog box should allow only the selection of True Type fonts.
3Dialog box should not allow vector-font selections.LDialog box should not allow graphic device interface (GDI) font simulations.HSelects font sizes within the range specified by Min and Max properties.0Dialog box should select only fixed-pitch fonts.LAllows only the selection of fonts available to both the screen and printer.GDisplays an error if a user selects a font or style that doesn't exist.>Dialog box should allow only the selection of scaleable fonts.>Dialog box should allow only the selection of True Type fonts.
"Portrait printer paper orientation#Landscape printer paper orientation
"Portrait printer paper orientation#Landscape printer paper orientation
BThe Common Dialog function failed to parse the strings in WIN.INI.
BThe Common Dialog function failed to parse the strings in WIN.INI.
KThe [devices] section of WIN.INI does not contain an entry for the printer.:The PDReturnDefault flag was set, but a field was nonzero./Application did not provide an instance handle.
KThe [devices] section of WIN.INI does not contain an entry for the printer.:The PDReturnDefault flag was set, but a field was nonzero./Application did not provide an instance handle.
Help Constants%Displays Help for a particular topic.ONotifies the Help application that the specified Help file is no longer in use..Displays the index of the specified Help file.5Displays the contents topic in the current Help file.3Display Help for using the Help application itself. Set the current Index for multi-index Help.2Designates a specific topic as the contents topic.0Displays a topic identified by a context number.
Help Constants%Displays Help for a particular topic.ONotifies the Help application that the specified Help file is no longer in use..Displays the index of the specified Help file.5Displays the contents topic in the current Help file.3Display Help for using the Help application itself. Set the current Index for multi-index Help.2Designates a specific topic as the contents topic.0Displays a topic identified by a context number.
8Creates a Help file that displays text in only one font.'Displays Help for a particular keyword.'Displays Help for a particular command.'Call the search engine in Windows Help.6Returns/sets the path and filename of a selected file.=Sets the string displayed in the title bar of the dialog box.QReturns/sets the filters that are displayed in the Type list box of a dialog box.?Returns/sets the default filename extension for the dialog box.(Returns/sets the initial file directory. Returns/sets the selected color."Sets the options for a dialog box.LSpecifies the name of the font that appears in each row for the given level.
8Creates a Help file that displays text in only one font.'Displays Help for a particular keyword.'Displays Help for a particular command.'Call the search engine in Windows Help.6Returns/sets the path and filename of a selected file.=Sets the string displayed in the title bar of the dialog box.QReturns/sets the filters that are displayed in the Type list box of a dialog box.?Returns/sets the default filename extension for the dialog box.(Returns/sets the initial file directory. Returns/sets the selected color."Sets the options for a dialog box.LSpecifies the name of the font that appears in each row for the given level.
Returns/sets bold font styles. Returns/sets italic font styles.'Returns/sets strikethrough font styles.#Returns/sets underline font styles.8Returns/sets the value for the first page to be printed.8Returns/sets the value for the first page to be printed.RSets the smallest allowable font size (Font dialog) or print range (Print dialog).OReturns/sets the maximum font size (Font dialog) or print range (Print dialog).HReturns/sets a value that determines the number of copies to be printed.PIndicates whether an error is generated when the user chooses the Cancel button.CReturns/sets the name of the Help file associated with the project./Returns/sets the type of online Help requested.BReturns/sets the keyword that identifies the requested Help topic.fDetermines if user selections in the Print dialog box are used to change the default printer settings.@Returns/sets a default filter for an Open or Save As dialog box.8Returns/sets the context ID of the requested Help topic.XSpecifies the size (in points) of the font that appears in each row for the given level.4Returns/sets the type of dialog box to be displayed.TReturns/sets the maximum size of the filename opened using the CommonDialog control.IReturns a handle (from Microsoft Windows) to the object's device context.
Returns/sets bold font styles. Returns/sets italic font styles.'Returns/sets strikethrough font styles.#Returns/sets underline font styles.8Returns/sets the value for the first page to be printed.8Returns/sets the value for the first page to be printed.RSets the smallest allowable font size (Font dialog) or print range (Print dialog).OReturns/sets the maximum font size (Font dialog) or print range (Print dialog).HReturns/sets a value that determines the number of copies to be printed.PIndicates whether an error is generated when the user chooses the Cancel button.CReturns/sets the name of the Help file associated with the project./Returns/sets the type of online Help requested.BReturns/sets the keyword that identifies the requested Help topic.fDetermines if user selections in the Print dialog box are used to change the default printer settings.@Returns/sets a default filter for an Open or Save As dialog box.8Returns/sets the context ID of the requested Help topic.XSpecifies the size (in points) of the font that appears in each row for the given level.4Returns/sets the type of dialog box to be displayed.TReturns/sets the maximum size of the filename opened using the CommonDialog control.IReturns a handle (from Microsoft Windows) to the object's device context.
The ENABLEHOOK flag was set in the Flags member of a common-dialog data structure but the application failed to provide a pointer to a corresponding hook function.RThe common dialog function was unable to lock the memory associated with a handle.VThe common dialog function was unable to allocate memory for internal data structures.?The common dialog function failed to lock a specified resource.?The common dialog function failed to load a specified resource.?The common dialog function failed to find a specified resource.=The common dialog function failed to load a specified string.
The ENABLEHOOK flag was set in the Flags member of a common-dialog data structure but the application failed to provide a pointer to a corresponding hook function.RThe common dialog function was unable to lock the memory associated with a handle.VThe common dialog function was unable to allocate memory for internal data structures.?The common dialog function failed to lock a specified resource.?The common dialog function failed to load a specified resource.?The common dialog function failed to find a specified resource.=The common dialog function failed to load a specified string.
The ENABLETEMPLATE flag was set in the Flags member of a common-dialog data structure but the application failed to provide a corresponding template.wThe common dialog function failed during initialization. This error often occurs when insufficient memory is available.TThe lStructSize member of the corresponding common-dialog data structure is invalid.
The ENABLETEMPLATE flag was set in the Flags member of a common-dialog data structure but the application failed to provide a corresponding template.wThe common dialog function failed during initialization. This error often occurs when insufficient memory is available.TThe lStructSize member of the corresponding common-dialog data structure is invalid.
Call to Windows Help failed.*The function failed during initialization.1The function failed to load a specified resource./The function failed to load a specified string.1The function failed to lock a specified resource.HThe function was unable to allocate memory for internal data structures.DThe function was unable to lock the memory associated with a handle.
Call to Windows Help failed.*The function failed during initialization.1The function failed to load a specified resource./The function failed to load a specified string.1The function failed to lock a specified resource.HThe function was unable to allocate memory for internal data structures.DThe function was unable to lock the memory associated with a handle.
BThe PrintDlg function failed when creating an information context.EDevMode and DevNames data structures describe two different printers.HThe printer-device driver failed to initialize a DEVMODE data structure.
BThe PrintDlg function failed when creating an information context.EDevMode and DevNames data structures describe two different printers.HThe printer-device driver failed to initialize a DEVMODE data structure.
]The [devices] section of the file WIN.INI did not contain an entry for the requested printer.PThe PrintDlg function failed when it attempted to create an information context.VThe data in the DEVMODE and DEVNAMES data structures describes two different printers.!A default printer does not exist.%No printer device-drivers were found.3The PrintDlg function failed during initialization.
]The [devices] section of the file WIN.INI did not contain an entry for the requested printer.PThe PrintDlg function failed when it attempted to create an information context.VThe data in the DEVMODE and DEVNAMES data structures describes two different printers.!A default printer does not exist.%No printer device-drivers were found.3The PrintDlg function failed during initialization.
The printer device-driver failed to initialize a DEVMODE data structure. (This error constant only applies to printer drivers written for Windows 3.0 or later versions.)KThe PrintDlg function failed to load the specified printer's device driver.
The printer device-driver failed to initialize a DEVMODE data structure. (This error constant only applies to printer drivers written for Windows 3.0 or later versions.)KThe PrintDlg function failed to load the specified printer's device driver.
The PD_RETURNDEFAULT flag was set in the Flags member of the PRINTDLG data structure but either the hDevMode or hDevNames field were nonzero.dThe common dialog function failed to parse the strings in the [devices] section of the file WIN.INI.
The PD_RETURNDEFAULT flag was set in the Flags member of the PRINTDLG data structure but either the hDevMode or hDevNames field were nonzero.dThe common dialog function failed to parse the strings in the [devices] section of the file WIN.INI.
RemotePort
RemotePort
Pass&word
Pass&word
6.01.9782
6.01.9782
is a registered trademark of Microsoft Corporation. Windows(tm) is a trademark of Microsoft Corporation.
is a registered trademark of Microsoft Corporation. Windows(tm) is a trademark of Microsoft Corporation.
Returns/Sets the remote computer@Returns/Sets the internet port to be used on the remote computer
Returns/Sets the remote computer@Returns/Sets the internet port to be used on the remote computer
5Returns information received from the remote computer9Returns a response code received from the remote computer6Returns the low-level internet handle for this control.Returns whether this control is currently busy)Returns/Sets the URL used by this control5Returns/Sets the Document to be retrieved from server
5Returns information received from the remote computer9Returns a response code received from the remote computer6Returns the low-level internet handle for this control.Returns whether this control is currently busy)Returns/Sets the URL used by this control5Returns/Sets the Document to be retrieved from server
>Returns/Sets the proxy behavior for this control's connections7Event interface for Microsoft Internet Transfer Control#Microsoft Internet Transfer Control&Issue a request to the remote computer:Method used to cancel the request currently being executed
>Returns/Sets the proxy behavior for this control's connections7Event interface for Microsoft Internet Transfer Control#Microsoft Internet Transfer Control&Issue a request to the remote computer:Method used to cancel the request currently being executed
Secure HTTP
Secure HTTP
Protocol to use for this URL#User name to use for authentication"Password to use for authentication
Protocol to use for this URL#User name to use for authentication"Password to use for authentication
Open a URL
Open a URL
URL is malformed&Protocol not supported for this method Unable to connect to remote host
URL is malformed&Protocol not supported for this method Unable to connect to remote host
Unable to complete request4You must execute an operation before retrieving data
Unable to complete request4You must execute an operation before retrieving data
Request timed out Not a valid or supported command
Request timed out Not a valid or supported command
Still executing last request,This call is not valid for an FTP connection
Still executing last request,This call is not valid for an FTP connection
Invalid URL
Invalid URL
Login failure
Login failure
Invalid operation
Invalid operation
Operation cancelled
Operation cancelled
Handle exists!Security certificate date invalid#Security certificate number invalid
Handle exists!Security certificate date invalid#Security certificate number invalid
HTTP to HTTPS on redirect
HTTP to HTTPS on redirect
HTTPS to HTTP on redirect
HTTPS to HTTP on redirect
Post is non-secure'Client authorization certificate needed
Post is non-secure'Client authorization certificate needed
FTP - Connection dropped
FTP - Connection dropped
HTTP - Header not found
HTTP - Header not found
HTTP - Downlevel server
HTTP - Downlevel server
HTTP - Invalid Header
HTTP - Invalid Header
HTTP - Invalid query request
HTTP - Invalid query request
HTTP - Header already exists
HTTP - Header already exists
HTTP - Redirect failed
HTTP - Redirect failed
HTTPS HTTP submit redir
HTTPS HTTP submit redir
FTP - no passive mode HTTP - cookie needs confirmation
FTP - no passive mode HTTP - cookie needs confirmation
HTTP - cookie declined"HTTP - redirect needs confirmation
HTTP - cookie declined"HTTP - redirect needs confirmation
Invalid cert
Invalid cert
Cert revoked
Cert revoked
URL'URL properties for the internet control
URL'URL properties for the internet control
57CBF9E0-6AA7-11cf-8ADB-00AA00C00905
57CBF9E0-6AA7-11cf-8ADB-00AA00C00905
SortKey
SortKey
ImageKey
ImageKey
Windows Common Controls ActiveX Control DLL
Windows Common Controls ActiveX Control DLL
6.00.8105
6.00.8105
COMCTL32.OCX
COMCTL32.OCX
&Key:
&Key:
Sort&Key:
Sort&Key:
Microsoft Windows Common Controls 5.0 (SP2)
Microsoft Windows Common Controls 5.0 (SP2)
3DQA collection whose elements represent each contained control in a parent control.-Returns the number of members in a collectionMReturns a specific member of a Collection object either by position or by key`Contains a collection of ListImage objects, each of which can be referred to by its index or key
3DQA collection whose elements represent each contained control in a parent control.-Returns the number of members in a collectionMReturns a specific member of a Collection object either by position or by key`Contains a collection of ListImage objects, each of which can be referred to by its index or key
FReturns/sets the string displayed when a cursor hovers over an object.XConstants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).BOLE drag/drop will be initialized only under programmatic control.jOLE drag/drop will be initialized when the user drags 'out' of the control, or under programmatic control.XConstants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).$Accepts no OLE drag/drop operations.9Accepts an OLE drag/drop under programmatic control only.CState transition constants for the DragOver and OLEDragOver events.#Source control dragged into target.%Source control dragged out of target.>Source control dragged from one position in target to another.
FReturns/sets the string displayed when a cursor hovers over an object.XConstants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).BOLE drag/drop will be initialized only under programmatic control.jOLE drag/drop will be initialized when the user drags 'out' of the control, or under programmatic control.XConstants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).$Accepts no OLE drag/drop operations.9Accepts an OLE drag/drop under programmatic control only.CState transition constants for the DragOver and OLEDragOver events.#Source control dragged into target.%Source control dragged out of target.>Source control dragged from one position in target to another.
Text (.txt file).
Text (.txt file).
Bitmap (.bmp file).
Bitmap (.bmp file).
Metafile (.wmf file).
Metafile (.wmf file).
Enhanced metafile (.emf file).*Filename list (Microsoft Windows Explorer)
Enhanced metafile (.emf file).*Filename list (Microsoft Windows Explorer)
Rich Text Format (.rtf file).3Drop effect constants for OLE drag and drop events.
Rich Text Format (.rtf file).3Drop effect constants for OLE drag and drop events.
Returns/Sets whether this control can act as an OLE drag/drop source, and whether this process is started automatically or under programmatic control.@Returns/Sets whether this control can act as an OLE drop target.3Clears all data and formats in a DataObject object.>Retrieves data of a specified format from a DataObject object.QDetermines if a specified clipboard format is supported by the DataObject object.EAdds a supported format and possibly its data to a DataObject object.7A collection of filenames used by the vbCFFiles format.nReturns a specific filename by index from the Files collection of a DataObject object (vbCFFiles format only).gReturns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WAdds a filename to the Files collection of a DataObject object (vbCFFiles format only).cClears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).\Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).
Returns/Sets whether this control can act as an OLE drag/drop source, and whether this process is started automatically or under programmatic control.@Returns/Sets whether this control can act as an OLE drop target.3Clears all data and formats in a DataObject object.>Retrieves data of a specified format from a DataObject object.QDetermines if a specified clipboard format is supported by the DataObject object.EAdds a supported format and possibly its data to a DataObject object.7A collection of filenames used by the vbCFFiles format.nReturns a specific filename by index from the Files collection of a DataObject object (vbCFFiles format only).gReturns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WAdds a filename to the Files collection of a DataObject object (vbCFFiles format only).cClears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).\Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).
.Object variable or With block variable not set
.Object variable or With block variable not set
.Object doesn't support this property or method
.Object doesn't support this property or method
Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.NRequested data was not supplied to the DataObject during the OLESetData event.
Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.NRequested data was not supplied to the DataObject during the OLESetData event.
Key is not unique in collection
Key is not unique in collection
Invalid key;The first column in a ListView control must be left aligned$This item's control has been deleted&Control's collection has been modified
Invalid key;The first column in a ListView control must be left aligned$This item's control has been deleted&Control's collection has been modified
Focus.Returns/sets the height of a ListImage object.DReturns/sets the width of ListImage objects in an ImageList control.dReturns/sets a value which determines the color to be transparent in ImageList graphical operations.QReturns a reference to a collection of ListImage objects in an ImageList control.)Returns a handle to an ImageList control.QReturns/sets the background color used to display text and graphics in an object.gCreates a composite third image out of two ListImage objects and returns a reference to the new object.@A bitmap or icon of any size that can be used in other controls..Returns the number of objects in a collection.aAdds a ListImage object to a ListImages collection and returns a reference to the created object.$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.@A bitmap or icon of any size that can be used in other controls.KReturns/sets the index of an object in a collection. Read-only at run time.
Focus.Returns/sets the height of a ListImage object.DReturns/sets the width of ListImage objects in an ImageList control.dReturns/sets a value which determines the color to be transparent in ImageList graphical operations.QReturns a reference to a collection of ListImage objects in an ImageList control.)Returns a handle to an ImageList control.QReturns/sets the background color used to display text and graphics in an object.gCreates a composite third image out of two ListImage objects and returns a reference to the new object.@A bitmap or icon of any size that can be used in other controls..Returns the number of objects in a collection.aAdds a ListImage object to a ListImages collection and returns a reference to the created object.$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.@A bitmap or icon of any size that can be used in other controls.KReturns/sets the index of an object in a collection. Read-only at run time.
Microsoft ProgressBar Control'Returns/sets a control's maximum value.'Returns/sets a control's minimum value.MReturns/sets the type of mouse pointer displayed when over part of an object.
Microsoft ProgressBar Control'Returns/sets a control's maximum value.'Returns/sets a control's minimum value.MReturns/sets the type of mouse pointer displayed when over part of an object.
Sets a custom mouse icon.3Returns or sets a control's current Value property.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.
Sets a custom mouse icon.3Returns or sets a control's current Value property.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.
ButtonsKReturns a reference to a collection of Tab objects in the TabStrip control.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
ButtonsKReturns a reference to a collection of Tab objects in the TabStrip control.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
Sets a custom mouse icon.ZReturns/sets a value indicating whether the control can display more than one row of tabs.HReturns/sets the style appearance (tab or button) of a TabStrip control.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.KReturns/sets the width and justification of all tabs in a TabStrip control.?Returns the top coordinate of the internal area of the control.@Returns the left coordinate of the internal area of the control.7Returns the height of the internal area of the control.6Returns the width of the internal area of the control.MReturns/sets the type of mouse pointer displayed when over part of an object..Returns/sets the ImageList control to be used.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.!Enables/disables the Tooltip text
Sets a custom mouse icon.ZReturns/sets a value indicating whether the control can display more than one row of tabs.HReturns/sets the style appearance (tab or button) of a TabStrip control.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.KReturns/sets the width and justification of all tabs in a TabStrip control.?Returns the top coordinate of the internal area of the control.@Returns the left coordinate of the internal area of the control.7Returns the height of the internal area of the control.6Returns the width of the internal area of the control.MReturns/sets the type of mouse pointer displayed when over part of an object..Returns/sets the ImageList control to be used.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.!Enables/disables the Tooltip text
Returns/sets the selected Tab/Forces a complete repaint of a form or control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.
Returns/sets the selected Tab/Forces a complete repaint of a form or control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.
6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.
6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.
StatusBar Tabs collection.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.'Adds a Tab object to a Tabs collection.KAn individual object, analogous to a page, contained in a TabStrip control.SReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.KReturns/sets the index of an object in a collection. Read-only at run time.
StatusBar Tabs collection.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.'Adds a Tab object to a Tabs collection.KAn individual object, analogous to a page, contained in a TabStrip control.SReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.KReturns/sets the index of an object in a collection. Read-only at run time.
ToolBar Buttons.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.[Adds a Button object to a Buttons collection and returns a reference to the created object.
ToolBar Buttons.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.[Adds a Button object to a Buttons collection and returns a reference to the created object.
ToolBar ButtonSReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.dReturns/sets a value that determines whether a form or control can respond to user-generated events.KReturns/sets the index of an object in a collection. Read-only at run time.
ToolBar ButtonSReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.dReturns/sets a value that determines whether a form or control can respond to user-generated events.KReturns/sets the index of an object in a collection. Read-only at run time.
Returns/sets the button stylemReturns/sets the description displayed when the user clicks a Button object during a customization operation.?Returns/sets the index or key of a ListImage object to be used.?Returns/sets the index or key of a ListImage object to be used.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.IReturns/sets a value which determines if users can customize the Toolbar.HReturns a reference to a Toolbar control's collection of Button objects.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.
Returns/sets the button stylemReturns/sets the description displayed when the user clicks a Button object during a customization operation.?Returns/sets the index or key of a ListImage object to be used.?Returns/sets the index or key of a ListImage object to be used.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.IReturns/sets a value which determines if users can customize the Toolbar.HReturns a reference to a Toolbar control's collection of Button objects.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.
Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.
Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.
.Returns/sets the ImageList control to be used.*Enables/disables ToolTips for tool buttons
.Returns/sets the ImageList control to be used.*Enables/disables ToolTips for tool buttons
ToolBar Controls Collection/Forces a complete repaint of a form or control.ZInvokes the Customize Toolbar dialog box when the user double-clicks on a Toolbar control.?Saves a Toolbar configuration in an initialization (.ini) file.aRestores a toolbar, created with a Toolbar control, to its original state after being customized.DOccurs when the user clicks on a Button object in a Toolbar control.nGenerated after the end user customizes a Toolbar control's appearance using the Customize Toolbar dialog box.MOccurs when the user presses and then releases a mouse button over an object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.dOccurs when you press and release a mouse button and then press and release it again over an object.CA calibrated control with a slider for setting or selecting values.
ToolBar Controls Collection/Forces a complete repaint of a form or control.ZInvokes the Customize Toolbar dialog box when the user double-clicks on a Toolbar control.?Saves a Toolbar configuration in an initialization (.ini) file.aRestores a toolbar, created with a Toolbar control, to its original state after being customized.DOccurs when the user clicks on a Button object in a Toolbar control.nGenerated after the end user customizes a Toolbar control's appearance using the Customize Toolbar dialog box.MOccurs when the user presses and then releases a mouse button over an object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.dOccurs when you press and release a mouse button and then press and release it again over an object.CA calibrated control with a slider for setting or selecting values.
No TicksLReturns/sets the increment value when the PageDown or PageUp key is pressed.MReturns/sets the increment value when the left or right arrow key is pressed.,Returns/sets the maximum value of a control.,Returns/sets the minimum value of a control.IReturns/sets the orientation of a Slider control, horizontal or vertical.
No TicksLReturns/sets the increment value when the PageDown or PageUp key is pressed.MReturns/sets the increment value when the left or right arrow key is pressed.,Returns/sets the maximum value of a control.,Returns/sets the minimum value of a control.IReturns/sets the orientation of a Slider control, horizontal or vertical.
EReturns/sets whether or not a Slider control can have a select range.0Returns/sets the value where a selection starts.'Returns/sets the length of a selection.4Returns/sets where ticks appear on a Slider control.NReturns/sets the ratio of ticks on a Slider control; 1tick every n increments.$Returns/sets the value of an object.
EReturns/sets whether or not a Slider control can have a select range.0Returns/sets the value where a selection starts.'Returns/sets the length of a selection.4Returns/sets where ticks appear on a Slider control.NReturns/sets the ratio of ticks on a Slider control; 1tick every n increments.$Returns/sets the value of an object.
Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.,Returns/sets the border style for an object./Forces a complete repaint of a form or control.
Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.,Returns/sets the border style for an object./Forces a complete repaint of a form or control.
Sets the SelLength to 0.8Hidden method that can be used to invoke the Click event8Returns the number of visible ticks on a Slider control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.
Sets the SelLength to 0.8Hidden method that can be used to invoke the Click event8Returns the number of visible ticks on a Slider control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.
Slider scroll event6Indicates that the contents of a control have changed.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.
Slider scroll event6Indicates that the contents of a control have changed.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.
.Returns/sets the ImageList control to be used.AReturns/sets the width of the indentation for a TreeView control._Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.?Returns/sets the style of lines displayed between Node objects.MReturns/sets the type of mouse pointer displayed when over part of an object.
.Returns/sets the ImageList control to be used.AReturns/sets the width of the indentation for a TreeView control._Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.?Returns/sets the style of lines displayed between Node objects.MReturns/sets the type of mouse pointer displayed when over part of an object.
Sets a custom mouse icon.4Returns a reference to a collection of Node objects.VReturns/sets the delimiter string used for the path returned by the FullPath property.OReturns/sets a value which determines if a ListItem or Node object is selected.TIndicates whether the elements of a control are automatically sorted alphabetically.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
Sets a custom mouse icon.4Returns a reference to a collection of Node objects.VReturns/sets the delimiter string used for the path returned by the FullPath property.OReturns/sets a value which determines if a ListItem or Node object is selected.TIndicates whether the elements of a control are automatically sorted alphabetically.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WReturns the number of Node objects that fit in the internal area of a TreeView control.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.BGenerated when any Node object in a TreeView control is collapsed.jOccurs when a Node object in a TreeView control is expanded; that is, when its child nodes become visible.%Occurs when a Node object is clicked.AOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WReturns the number of Node objects that fit in the internal area of a TreeView control.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.BGenerated when any Node object in a TreeView control is collapsed.jOccurs when a Node object in a TreeView control is expanded; that is, when its child nodes become visible.%Occurs when a Node object is clicked.AOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.
Treeview Nodes collection.Returns the number of objects in a collection.WAdds a Node object to a Nodes collection and returns a reference to the created object.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.AAn object in a TreeView control that can contain images and text.8Returns a reference to the first child of a Node object.4Returns the number of child nodes a Node object has.BReturns/sets a value which specifies if a Node object is expanded.aReturns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.BReturns a reference to the first Node object in a hierarchy level.2Returns the fully qualified name of a Node object.?Returns/sets the index or key of a ListImage object to be used.KReturns/sets the index of an object in a collection. Read-only at run time.
Treeview Nodes collection.Returns the number of objects in a collection.WAdds a Node object to a Nodes collection and returns a reference to the created object.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.AAn object in a TreeView control that can contain images and text.8Returns a reference to the first child of a Node object.4Returns the number of child nodes a Node object has.BReturns/sets a value which specifies if a Node object is expanded.aReturns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.BReturns a reference to the first Node object in a hierarchy level.2Returns the fully qualified name of a Node object.?Returns/sets the index or key of a ListImage object to be used.KReturns/sets the index of an object in a collection. Read-only at run time.
PartialWReturns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.
PartialWReturns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.
Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.FReturns a reference to the currently selected ListItem or Node object.VReturns/sets the images associated with the SmallIcons property of a ListView control.TIndicates whether the elements of a control are automatically sorted alphabetically."Returns/sets the current sort key.ZReturns/sets whether or not the ListItems will be sorted in ascending or descending order.6Returns/sets the current view of the ListView control.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.QReturns/sets the background color used to display text and graphics in an object.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.FReturns a reference to the currently selected ListItem or Node object.VReturns/sets the images associated with the SmallIcons property of a ListView control.TIndicates whether the elements of a control are automatically sorted alphabetically."Returns/sets the current sort key.ZReturns/sets whether or not the ListItems will be sorted in ascending or descending order.6Returns/sets the current view of the ListView control.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.QReturns/sets the background color used to display text and graphics in an object.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.
QReturns/sets the background color used to display text and graphics in an object.&Returns a handle to a form or control.?Finds an item in the list and returns a reference to that item.CRetrieves a reference of the first item visible in the client area.
QReturns/sets the background color used to display text and graphics in an object.&Returns a handle to a form or control.?Finds an item in the list and returns a reference to that item.CRetrieves a reference of the first item visible in the client area.
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.COccurs when a ColumnHeader object in a ListView control is clicked.4Occurs when a ListItem object is clicked or selectedAOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.
Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.COccurs when a ColumnHeader object in a ListView control is clicked.4Occurs when a ListItem object is clicked or selectedAOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.
MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.
MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.
ListView Item collection.Returns the number of objects in a collection.BAdds a ListItem object to a ListItems collection only at run time.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.
ListView Item collection.Returns the number of objects in a collection.BAdds a ListItem object to a ListItems collection only at run time.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.
An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.9Returns/sets the state of a ListView control Object item.%Returns/sets the height of an object.EReturns/sets the index of an icon in an associated ImageList control.KReturns/sets the index of an object in a collection. Read-only at run time.
An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.9Returns/sets the state of a ListView control Object item.%Returns/sets the height of an object.EReturns/sets the index of an icon in an associated ImageList control.KReturns/sets the index of an object in a collection. Read-only at run time.
LReturns/sets a value that determines where an object is displayed on a form.KReturns/sets the index of an object in a collection. Read-only at run time.
LReturns/sets a value that determines where an object is displayed on a form.KReturns/sets the index of an object in a collection. Read-only at run time.
Single panel simple text[Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.
Single panel simple text[Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.
Sets a custom mouse icon.dReturns/sets a value that determines whether a form or control can respond to user-generated events.cReturns/sets a value that determines whether a form or control can respond to user-generated events
Sets a custom mouse icon.dReturns/sets a value that determines whether a form or control can respond to user-generated events.cReturns/sets a value that determines whether a form or control can respond to user-generated events
Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.
Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.
StatusBar Panels collection.Returns the number of objects in a collection.XAdds a Panel object to a Panels collection and returns a reference to the created Panel.
StatusBar Panels collection.Returns the number of objects in a collection.XAdds a Panel object to a Panels collection and returns a reference to the created Panel.
$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.
$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.
2Returns/sets the text to be displayed in a controlKReturns/sets a value that determines whether an object is visible or hidden#Returns/sets the width of an object.Stores any extra data needed for your program.
2Returns/sets the text to be displayed in a controlKReturns/sets a value that determines whether an object is visible or hidden#Returns/sets the width of an object.Stores any extra data needed for your program.
Error #%d
Error #%d
Invalid entry for %s
Invalid entry for %s
}Bitmap and Icon Files (*.bmp, *.ico) |*.bmp;*.ico|Bitmap Files (*.bmp) |*.bmp|Icon Files (*.ico)|*.ico|All Files (*.*)|*.*||
}Bitmap and Icon Files (*.bmp, *.ico) |*.bmp;*.ico|Bitmap Files (*.bmp) |*.bmp|Icon Files (*.ico)|*.ico|All Files (*.*)|*.*||
%original file name%.exe_272_rwx_00401000_00084000:
MSINET.OCX
MSINET.OCX
InetCtlsObjects.Inet
InetCtlsObjects.Inet
COMDLG32.OCX
COMDLG32.OCX
MSComDlg.CommonDialog
MSComDlg.CommonDialog
%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB
%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB
%System%\MSINET.oca
%System%\MSINET.oca
user32.dll
user32.dll
GetAsyncKeyState
GetAsyncKeyState
PSAPI.DLL
PSAPI.DLL
shell32.dll
shell32.dll
ShellExecuteA
ShellExecuteA
VBA6.DLL
VBA6.DLL
KeyDown
KeyDown
KeyUp
KeyUp
%System%\stdole2.tlb
%System%\stdole2.tlb
gdi32.dll
gdi32.dll
olepro32.dll
olepro32.dll
MSIMG32.dll
MSIMG32.dll
KeyPress
KeyPress
Xd?.tF
Xd?.tF
13:131;13
13:131;13
J .Ti
J .Ti
J .yF
J .yF
.yEn]
.yEn]
VVV.pekalongan-kommunity.com
VVV.pekalongan-kommunity.com
strURL
strURL
uMsg
uMsg
KeyCode
KeyCode
KeyAcsii
KeyAcsii
t.Hu`
t.Hu`
MSVBVM60.DLL
MSVBVM60.DLL
I:\WWWAWWWA
I:\WWWAWWWA
H*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
H*\AI:\WWWAWWWA\`aaReal Inject\Project1.vbp
78E1BDD1-9941-11cf-9756-00AA00C00908
78E1BDD1-9941-11cf-9756-00AA00C00908
28C4C820-401A-101B-A3C9-08002B2F49FB
28C4C820-401A-101B-A3C9-08002B2F49FB
C:\UpdateLog.txt
C:\UpdateLog.txt
PointBlank.exe
PointBlank.exe
hXXp://pastebin.com/raw.php?i=5QCCehkC
hXXp://pastebin.com/raw.php?i=5QCCehkC
hXXps://sites.google.com/site/hostingindo1/WWeeCt19Weken.dll?attredirects=0&d=1
hXXps://sites.google.com/site/hostingindo1/WWeeCt19Weken.dll?attredirects=0&d=1
\UpdateLog.txt
\UpdateLog.txt
hXXp://VVV.waw-cheaters.com/
hXXp://VVV.waw-cheaters.com/
\PerX.ini
\PerX.ini
Dll Injected...Creating Thread.....
Dll Injected...Creating Thread.....
kernel32.dll
kernel32.dll
Can't find LoadLibrary API from kernel32.dll
Can't find LoadLibrary API from kernel32.dll
c:\Windows\system32\
c:\Windows\system32\
c:\windows\system32\drivers\etc\hosts
c:\windows\system32\drivers\etc\hosts
c:\Windows\system32\COMCTL32.OCX
c:\Windows\system32\COMCTL32.OCX
c:\Windows\system32\COMDLG32.OCX
c:\Windows\system32\COMDLG32.OCX
c:\Windows\system32\MSINET.OCX
c:\Windows\system32\MSINET.OCX
c:\Windows\system32\Comdlg32.ocx
c:\Windows\system32\Comdlg32.ocx
C:\windows..txt
C:\windows..txt
iexplore.exe_1328:
%?9-*09,*19}*09
%?9-*09,*19}*09
.text
.text
`.data
`.data
.rsrc
.rsrc
msvcrt.dll
msvcrt.dll
KERNEL32.dll
KERNEL32.dll
NTDLL.DLL
NTDLL.DLL
USER32.dll
USER32.dll
SHLWAPI.dll
SHLWAPI.dll
SHDOCVW.dll
SHDOCVW.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
IE-X-X
IE-X-X
rsabase.dll
rsabase.dll
System\CurrentControlSet\Control\Windows
System\CurrentControlSet\Control\Windows
dw15 -x -s %u
dw15 -x -s %u
watson.microsoft.com
watson.microsoft.com
IEWatsonURL
IEWatsonURL
%s -h %u
%s -h %u
iedw.exe
iedw.exe
Iexplore.XPExceptionFilter
Iexplore.XPExceptionFilter
jscript.DLL
jscript.DLL
mshtml.dll
mshtml.dll
mlang.dll
mlang.dll
urlmon.dll
urlmon.dll
wininet.dll
wininet.dll
shdocvw.DLL
shdocvw.DLL
browseui.DLL
browseui.DLL
comctl32.DLL
comctl32.DLL
IEXPLORE.EXE
IEXPLORE.EXE
iexplore.pdb
iexplore.pdb
ADVAPI32.dll
ADVAPI32.dll
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
IExplorer.EXE
IExplorer.EXE
IIIIIB(II<.fg>
IIIIIB(II<.fg>
7?_____ZZSSH%
7?_____ZZSSH%
)z.UUUUUUUU
)z.UUUUUUUU
,....Qym
,....Qym
````2```
````2```
{.QLQIIIKGKGKGKGKGKG
{.QLQIIIKGKGKGKGKGKG
;33;33;0
;33;33;0
8888880
8888880
8887080
8887080
browseui.dll
browseui.dll
shdocvw.dll
shdocvw.dll
6.00.2900.5512 (xpsp.080413-2105)
6.00.2900.5512 (xpsp.080413-2105)
Windows
Windows
Operating System
Operating System
6.00.2900.5512
6.00.2900.5512