Trojan.Win32.Iconomon.FD, GenericEmailWorm.YR, TrojanSwrortProxy.YR (Lavasoft MAS)Behaviour: Trojan, Worm, EmailWorm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 55da6106db73acabd8921518822ba29a
SHA1: 62434c2c8dc3dc35c4e859566b9483c603d8ee8d
SHA256: 00b21a755700cc6906a886c81c83bf58f84afcab6931249041833e9a9f2eaf88
SSDeep: 98304:N3M 4gAay3q1uoW1Qm0oL9Mu8EoByN53ZZzU:hM Q38up6oJMuwByN5JZY
Size: 4147296 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2015-11-02 16:05:30
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
EmailWorm | Worm can send e-mails. |
Process activity
The Trojan creates the following process(es):
%original file name%.exe:2012
DriverPro.exe:1484
drvprosetup.exe:232
drvprosetup.tmp:1832
DPStartScan.exe:1996
The Trojan injects its code into the following process(es):
DriverPro.exe:312
DPTray.exe:1904
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:2012 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\drvprosetup.exe (454607 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT.LOG (5208 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT (3612 bytes)
The process DriverPro.exe:312 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_jLDCvLgEjiD7ShN (1484853 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_MpZWKYVP4aw52Mg (1484745 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers32.db-journal (8674 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Scan.ini (227 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Snapshot.ini (1 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\PCInfo.ini (151 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\current_5_32_cxw.7z (15021 bytes)
%WinDir%\setupapi.log (3760 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\DevicesPlus.ini (3 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers.db (154783 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers32.db (12460873 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Devices.ini (224 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_cu612yBGA7qsgvd (2177340 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\program.log (2355 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Application Data\Driver Pro\current_5_32_cxw.7z (0 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers32.db-journal (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DriverPro.madExcept (0 bytes)
The process DriverPro.exe:1484 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files%\Driver Pro\HomePage.url (121 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\program.log (506 bytes)
The Trojan deletes the following file(s):
%Program Files%\Driver Pro\HomePage.url (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DriverPro.madExcept (0 bytes)
The process drvprosetup.exe:232 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\is-IHCAK.tmp\drvprosetup.tmp (7386 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\is-IHCAK.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-IHCAK.tmp\drvprosetup.tmp (0 bytes)
The process drvprosetup.tmp:1832 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\Driver Pro\is-EKFN1.tmp (4 bytes)
%Program Files%\Driver Pro\is-6PIV0.tmp (13 bytes)
%Program Files%\Driver Pro\is-VHBVB.tmp (6841 bytes)
%Documents and Settings%\%current user%\Desktop\Driver Pro.lnk (701 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Uninstall Driver Pro.lnk (734 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Help.lnk (713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\_isetup\_shfoldr.dll (23 bytes)
%Program Files%\Driver Pro\is-5TF5P.tmp (9605 bytes)
%Program Files%\Driver Pro\unins000.msg (646 bytes)
%Program Files%\Driver Pro\is-K8K84.tmp (4185 bytes)
%Program Files%\Driver Pro\unins000.dat (10580 bytes)
%Program Files%\Driver Pro\is-COEU5.tmp (1425 bytes)
%Program Files%\Driver Pro\is-7KEB1.tmp (14022 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Driver Pro.lnk (713 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Driver Pro on the Web.lnk (708 bytes)
%Program Files%\Driver Pro\is-14QTC.tmp (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\DrvProHelper.dll (7971 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\is-E206L.tmp (61 bytes)
%Program Files%\Driver Pro\is-GO5M7.tmp (26 bytes)
%Program Files%\Driver Pro\is-KLAVF.tmp (7971 bytes)
%Program Files%\Driver Pro\is-C3PED.tmp (31745 bytes)
%Program Files%\Driver Pro\is-JPJNV.tmp (35505 bytes)
%Program Files%\Driver Pro\is-3MTUP.tmp (54 bytes)
%Program Files%\Driver Pro\is-8B5PP.tmp (56 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\_isetup\_shfoldr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\_isetup (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\DrvProHelper.dll (0 bytes)
Registry activity
The process %original file name%.exe:2012 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "01 BD 8C 3F 2B 41 7F EB 98 80 30 D8 4F AC 0C A0"
[HKCU\Software\Driver Pro]
"setupname" = "c:\%original file name%.exe"
The process DriverPro.exe:312 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Driver Pro]
"s_Enable" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Driver Pro]
"UpdateWindowShown" = "0"
"InstallStat" = "0"
"BackupPath" = "%Documents and Settings%\%current user%\My Documents\Driver Pro\Backup\"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
[HKCU\Software\Driver Pro]
"s_SmartScan" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Driver Pro]
"InstallationDate" = "04-23-2016"
"ShowAlertMessages" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKCU\Software\Driver Pro]
"s_SmartMode" = "0"
"ShowUpdateWindow" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Driver Pro]
"QuerryDate" = "37 7D ED 82 68 BE E4 40"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Driver Pro]
"TrayNotification" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Driver Pro]
"s_Time" = "58 9A 46 7E 68 BE E4 40"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Driver Pro]
"LastScan" = "87 B7 E1 82 68 BE E4 40"
"TotalDrivers" = "65"
"DownloadPath" = "%Documents and Settings%\%current user%\My Documents\Driver Pro\Drivers\"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Driver Pro]
"ShowRebootMessage" = "1"
"LastUpdate" = "58 9A 46 7E 68 BE E4 40"
"ForceUpdate" = "0"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\Driver Pro]
"ProxyAddress" = ""
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Driver Pro]
"OutdatedDrivers" = "0"
"nDownloads" = "3"
"LastDatabaseCheck" = "58 9A 46 7E 68 BE E4 40"
"s_SmartDate" = "58 9A 46 7E 48 BE E4 40"
"DatabaseDate" = "58 9A 46 7E 68 BE E4 40"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Driver Pro]
"ShowSRPMessage" = "1"
"ScanExecuted" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Driver Pro]
"s_SmartExec" = "0"
"StartWithWindows" = "0"
"s_Mode" = "0"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "37 29 E3 26 35 15 8B 64 01 9D 3C 6D 19 4E C0 18"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Driver Pro]
"AppStart" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKCU\Software\Driver Pro]
"ProxyPassword" = ""
"ProxyPort" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
[HKCU\Software\Driver Pro]
"UseProxy" = "0"
"ProxyLogin" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process DriverPro.exe:1484 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "31 58 8A BB 4C 09 E5 BC 36 69 EF 63 8E 74 97 CB"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Templates" = "%Documents and Settings%\%current user%\Templates"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
"Personal" = "%Documents and Settings%\%current user%\My Documents"
The process drvprosetup.exe:232 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EC 34 3D A4 C5 1A 66 C9 8C 4B 86 7D B2 AD 96 16"
The process drvprosetup.tmp:1832 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"DisplayVersion" = "3.2.0.2"
"NoRepair" = "1"
"Inno Setup: Language" = "en"
[HKCU\Software\Driver Pro]
"ia" = "%Program Files%\Driver Pro\SafeCheckout.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"MajorVersion" = "3"
"Inno Setup: Deselected Tasks" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"URLUpdateInfo" = "http://www.pcutilitiespro.com"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKCU\Software\Driver Pro]
"Ir" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"Inno Setup: Icon Group" = "Driver Pro"
"Inno Setup: Setup Version" = "5.5.3 (u)"
"Inno Setup: User" = "%CurrentUserName%"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"UninstallString" = "%Program Files%\Driver Pro\unins000.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"DisplayName" = "Driver Pro v3.2.0.2"
"Inno Setup: App Path" = "%Program Files%\Driver Pro"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
[HKCU\Software\Driver Pro]
"SessionID" = "1FBE27EB-6A41-4CC2-89241E1B828D9E10"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"InstallLocation" = "%Program Files%\Driver Pro\"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
[HKCU\Software\Driver Pro]
"CBM" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"URLInfoAbout" = "http://www.pcutilitiespro.com"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"
[HKCU\Software\Driver Pro]
"Language" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"HelpLink" = "http://www.pcutilitiespro.com"
"InstallDate" = "20160423"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"Publisher" = "PC Utilities Software Limited"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B4 AD 20 58 65 7B 25 05 44 1D 68 A0 56 2A E8 A3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"Inno Setup: Selected Tasks" = "desktopicon"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Pro_is1]
"QuietUninstallString" = "%Program Files%\Driver Pro\unins000.exe /SILENT"
"NoModify" = "1"
"MinorVersion" = "2"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Driver Pro" = "%Program Files%\Driver Pro\DPLauncher.exe"
The process DPTray.exe:1904 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "92 4A 15 79 12 20 50 3D D0 C2 73 8C 60 17 F3 FD"
[HKCU\Software\Driver Pro]
"s_Enable" = "0"
"s_Exec" = "0"
"s_SmartMode" = "0"
"s_SmartScan" = "1"
"s_SmartDate" = "C0 DC ED 7D 48 BE E4 40"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Driver Pro]
"TrayNotification" = "1"
"StartWithWindows" = "0"
"s_Mode" = "0"
The process DPStartScan.exe:1996 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\Driver Pro]
"SupportURL" = "http://support.pcutilitiespro.com/"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Driver Pro]
"MachineGuid" = "7CF7C041-4C97-0825-20E8-DA4A22D072AA"
"UninstallURL" = "https://safecart.com/pcutilitiespro/.dp-xsell-special/purchase?sid=121000884-KR-003"
"DelayedStart" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Driver Pro]
"UseAds" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Driver Pro]
"QuerryDate" = "1A 2A 14 7E 68 BE E4 40"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKCU\Software\Driver Pro]
"OS" = "102"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Driver Pro]
"BuyNowURL" = "http://pcup25.pcutilitiespro.revenuewire.net/driverpro/xsell?121000884-KR-003_7CF7C041-4C97-0825-20E8-DA4A22D072AA"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\Driver Pro]
"Querry" = "http://bi.secure-download.net/t/dp?sid=121000884-KR-003&dt=%dt%&gid=%GID%&tz=%tz%&ln=%ln%&lc=%lc%&bis=%bis%&bief=%bief%&biefx=%biefx%&bif=%bif%&os=%os%&f=3539780431"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKCU\Software\Driver Pro]
"sc" = "http://pcup25.pcutilitiespro.revenuewire.net/driverpro/xsell?121000884-KR-003_7CF7C041-4C97-0825-20E8-DA4A22D072AA"
"homepageurl" = "http://www.pcutilitiespro.com/"
"AppStart" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "77 EE 83 20 43 16 97 83 79 07 67 A7 A0 DA 81 2A"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Driver Pro]
"DriverPro.exe" = "Driver Pro"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Driver Pro]
"InstallDate" = "BE 7F 06 7E 68 BE E4 40"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
MD5 | File path |
---|---|
41aee5653b2a810a04d5e24aac3d1f83 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\drvprosetup.exe |
04ad4b80880b32c94be8d0886482c774 | c:\Program Files\Driver Pro\7z.dll |
7e3f6349ad1ed16082386102976e5a0a | c:\Program Files\Driver Pro\DPStartScan.exe |
9d1f25b9934376a04565c131a03675ae | c:\Program Files\Driver Pro\DPTray.exe |
01465648fff147a82247d7da8d4d2809 | c:\Program Files\Driver Pro\DriverPro.exe |
e0964c6bccc62987a6627a1c97eac16c | c:\Program Files\Driver Pro\DrvProHelper.dll |
e768faf7a1cba9637cbfd818b2048cd5 | c:\Program Files\Driver Pro\SafeCheckout.exe |
d8aec01ff14e3e7ad43a4b71e30482e4 | c:\Program Files\Driver Pro\sqlite3.dll |
7dfbdb3c046020639f67f075cde12541 | c:\Program Files\Driver Pro\unins000.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:2012
DriverPro.exe:1484
drvprosetup.exe:232
drvprosetup.tmp:1832
DPStartScan.exe:1996 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temp\drvprosetup.exe (454607 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT.LOG (5208 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_jLDCvLgEjiD7ShN (1484853 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_MpZWKYVP4aw52Mg (1484745 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers32.db-journal (8674 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Scan.ini (227 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Snapshot.ini (1 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\PCInfo.ini (151 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\current_5_32_cxw.7z (15021 bytes)
%WinDir%\setupapi.log (3760 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\DevicesPlus.ini (3 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Drivers.db (154783 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\Devices.ini (224 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_cu612yBGA7qsgvd (2177340 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\program.log (2355 bytes)
%Program Files%\Driver Pro\HomePage.url (121 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-IHCAK.tmp\drvprosetup.tmp (7386 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\is-EKFN1.tmp (4 bytes)
%Program Files%\Driver Pro\is-6PIV0.tmp (13 bytes)
%Program Files%\Driver Pro\is-VHBVB.tmp (6841 bytes)
%Documents and Settings%\%current user%\Desktop\Driver Pro.lnk (701 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Uninstall Driver Pro.lnk (734 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Help.lnk (713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\_isetup\_shfoldr.dll (23 bytes)
%Program Files%\Driver Pro\is-5TF5P.tmp (9605 bytes)
%Program Files%\Driver Pro\unins000.msg (646 bytes)
%Program Files%\Driver Pro\is-K8K84.tmp (4185 bytes)
%Program Files%\Driver Pro\unins000.dat (10580 bytes)
%Program Files%\Driver Pro\is-COEU5.tmp (1425 bytes)
%Program Files%\Driver Pro\is-7KEB1.tmp (14022 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Driver Pro.lnk (713 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Driver Pro\Driver Pro on the Web.lnk (708 bytes)
%Program Files%\Driver Pro\is-14QTC.tmp (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-8B1IU.tmp\DrvProHelper.dll (7971 bytes)
%Documents and Settings%\%current user%\Application Data\Driver Pro\is-E206L.tmp (61 bytes)
%Program Files%\Driver Pro\is-GO5M7.tmp (26 bytes)
%Program Files%\Driver Pro\is-KLAVF.tmp (7971 bytes)
%Program Files%\Driver Pro\is-C3PED.tmp (31745 bytes)
%Program Files%\Driver Pro\is-JPJNV.tmp (35505 bytes)
%Program Files%\Driver Pro\is-3MTUP.tmp (54 bytes)
%Program Files%\Driver Pro\is-8B5PP.tmp (56 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Driver Pro" = "%Program Files%\Driver Pro\DPLauncher.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: PC Utilities Software Limited
Product Name: Driver Pro v3.2
Product Version: 3.2.0.2
Legal Copyright: PC Utilities Software Limited
Legal Trademarks:
Original Filename: Driver Pro
Internal Name: Driver Pro
File Version: 3.2.0.2
File Description: Keep your PC drivers up to date
Comments:
Language: English (United States)
Company Name: PC Utilities Software LimitedProduct Name: Driver Pro v3.2Product Version: 3.2.0.2Legal Copyright: PC Utilities Software LimitedLegal Trademarks: Original Filename: Driver ProInternal Name: Driver ProFile Version: 3.2.0.2File Description: Keep your PC drivers up to dateComments: Language: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 83149 | 83456 | 4.55483 | 153c25a894558c86b486e20495de16f9 |
.rdata | 90112 | 20754 | 20992 | 3.39472 | 5f38eb7c519337a5f17c3010bfc0e341 |
.data | 114688 | 13444 | 5632 | 2.15756 | 2cef89c59f35f4fcafe95749186c0933 |
.rsrc | 131072 | 4013316 | 4013568 | 5.46669 | dcbbf9056648215577ba9569f353882f |
.reloc | 4145152 | 17424 | 17920 | 1.73339 | f70fe10f52920658854ebfc48b5a6ee5 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://idriverpro.com/inst?hid=8151a8f9650e97debee6a573878cc0181172fc7f&sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&tr=121000884-KR-003&a=NA&adm=1&os=5.1&x64=0&sil=1&st=201511022&e=200 | 104.28.20.75 |
hxxp://idriverpro.com/inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&e=210 | 104.28.20.75 |
hxxp://idriverpro.com/inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&du=6187&e=400 | 104.28.20.75 |
hxxp://bi.secure-download.net/t/dp?sid=121000884-KR-003&dt=1461392529&gid=7CF7C041-4C97-0825-20E8-DA4A22D072AA&tz=2&ln=1&lc=0&bis=0&bief=0&biefx=0&bif=0&os=102&f=3539780431 | 107.6.170.117 |
hxxp://service.smartpcupdate.com/rpc/sendinstall?partner=PCUtilitiesPro&build=3.2 | 176.9.2.105 |
hxxp://service.smartpcupdate.com/rpc/getdatabasecxw?arch=32&os=5 | 176.9.2.105 |
hxxp://d2.smartpcupdate.com/dbs/current_5_32_cxw.7z | 173.192.91.180 |
hxxp://d2.smartpcupdate.com/rpc/sendsnapshot | 173.192.91.180 |
hxxp://bi.secure-download.net/t/dp?sid=121000884-KR-003&dt=1461392580&gid=7CF7C041-4C97-0825-20E8-DA4A22D072AA&tz=2&ln=1&lc=0&bis=1&bief=0&biefx=0&bif=0&os=102&f=3539780431 | 107.6.170.117 |
hxxp://Idriverpro.com/inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&du=6187&e=400 | |
hxxp://Idriverpro.com/inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&e=210 | |
hxxp://Idriverpro.com/inst?hid=8151a8f9650e97debee6a573878cc0181172fc7f&sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&tr=121000884-KR-003&a=NA&adm=1&os=5.1&x64=0&sil=1&st=201511022&e=200 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /t/dp?sid=121000884-KR-003&dt=1461392580&gid=7CF7C041-4C97-0825-20E8-DA4A22D072AA&tz=2&ln=1&lc=0&bis=1&bief=0&biefx=0&bif=0&os=102&f=3539780431 HTTP/1.1
Content-Type: text/html; charset=ISO-8859-1
Host: bi.secure-download.net
Accept: text/html, */*
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.6.0
Date: Sat, 23 Apr 2016 03:20:44 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
content-type: text/html
GET /rpc/sendinstall?partner=PCUtilitiesPro&build=3.2 HTTP/1.1
Host: service.smartpcupdate.com
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.0.4
Date: Sat, 23 Apr 2016 03:19:56 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.26
12..{"ok":1,"error":0}..0..
GET /inst?hid=8151a8f9650e97debee6a573878cc0181172fc7f&sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&tr=121000884-KR-003&a=NA&adm=1&os=5.1&x64=0&sil=1&st=201511022&e=200 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: Idriverpro.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Sat, 23 Apr 2016 03:19:48 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: __cfduid=d739adedaafba1a93b6d643be56e535091461381588; expires=Sun, 23-Apr-17 03:19:48 GMT; path=/; domain=.idriverpro.com; HttpOnly
Server: cloudflare-nginx
CF-RAY: 297e2d115bbd2afd-WAW
HTTP/1.1 200 OK..Date: Sat, 23 Apr 2016 03:19:48 GMT..Content-Type: text/plain..Content-Length: 0..Connection: keep-alive..Set-Cookie: __cfduid=d739adedaafba1a93b6d643be56e535091461381588; expires=Sun, 23-Apr-17 03:19:48 GMT; path=/; domain=.idriverpro.com; HttpOnly..Server: cloudflare-nginx..CF-RAY: 297e2d115bbd2afd-WAW......
GET /inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&e=210 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: Idriverpro.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Sat, 23 Apr 2016 03:19:49 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: __cfduid=ddb4aca89d5d0107fd6458ee00104ea8e1461381589; expires=Sun, 23-Apr-17 03:19:49 GMT; path=/; domain=.idriverpro.com; HttpOnly
Server: cloudflare-nginx
CF-RAY: 297e2d139bd22afd-WAW
HTTP/1.1 200 OK..Date: Sat, 23 Apr 2016 03:19:49 GMT..Content-Type: text/plain..Content-Length: 0..Connection: keep-alive..Set-Cookie: __cfduid=ddb4aca89d5d0107fd6458ee00104ea8e1461381589; expires=Sun, 23-Apr-17 03:19:49 GMT; path=/; domain=.idriverpro.com; HttpOnly..Server: cloudflare-nginx..CF-RAY: 297e2d139bd22afd-WAW......
GET /inst?sid=1FBE27EB-6A41-4CC2-89241E1B828D9E10&st=0&du=6187&e=400 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: Idriverpro.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Sat, 23 Apr 2016 03:19:53 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: __cfduid=dcbc24854dfcbceaed0560fcc16ea1edf1461381592; expires=Sun, 23-Apr-17 03:19:52 GMT; path=/; domain=.idriverpro.com; HttpOnly
Server: cloudflare-nginx
CF-RAY: 297e2d2bbc872afd-WAW
HTTP/1.1 200 OK..Date: Sat, 23 Apr 2016 03:19:53 GMT..Content-Type: text/plain..Content-Length: 0..Connection: keep-alive..Set-Cookie: __cfduid=dcbc24854dfcbceaed0560fcc16ea1edf1461381592; expires=Sun, 23-Apr-17 03:19:52 GMT; path=/; domain=.idriverpro.com; HttpOnly..Server: cloudflare-nginx..CF-RAY: 297e2d2bbc872afd-WAW..
GET /t/dp?sid=121000884-KR-003&dt=1461392529&gid=7CF7C041-4C97-0825-20E8-DA4A22D072AA&tz=2&ln=1&lc=0&bis=0&bief=0&biefx=0&bif=0&os=102&f=3539780431 HTTP/1.1
Host: bi.secure-download.net
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.6.0
Date: Sat, 23 Apr 2016 03:19:53 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
content-type: text/html
GET /rpc/getdatabasecxw?arch=32&os=5 HTTP/1.1
Content-Type: text/html; charset=ISO-8859-1
Host: service.smartpcupdate.com
Accept: text/html, */*
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.0.4
Date: Sat, 23 Apr 2016 03:19:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.26
81..{"ok":1,"error":0,"url":"http:\/\/d2.smartpcupdate.com\/dbs\/current_5_32_cxw.7z","file_hash":"ff612b999f2c17b46fcb948e01ad5c2d"}..0..
POST /rpc/sendsnapshot HTTP/1.0
Connection: keep-alive
Content-Type: multipart/form-data; boundary=--------042316062300393
Content-Length: 1846
Host: d2.smartpcupdate.com
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
----------042316062300393
Content-Disposition: form-data; name="snapshot_file"; filename="Snapshot.ini"
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: binary
[Settings]
Version=1
Program=Driver Pro
Base=2016-01-18
Generated=04-23-2016
[1]
request_type=unknown
version_user=12.4.0.6
vendor_user=MICROSOFT
date_user=2009-11-17
os_id=5_32
title=PS/2 Compatible Mouse
group=Other
hardid=ACPI\PNP0F13,*PNP0F13
created=program
[2]
request_type=unknown
version_user=12.4.0.6
vendor_user=VMWARE
date_user=2009-11-17
os_id=5_32
title=VMware Pointing Device
group=Mouse
hardid=ACPI\PNP0F13,*PNP0F13
created=program
[3]
request_type=unknown
version_user=1.2.0.2
vendor_user=VMWARE
date_user=1999-11-14
os_id=5_32
title=VMware SCSI Controller
group=Other
hardid=PCI\VEN_104B&DEV_1040&SUBSYS_1040104B&REV_01,PCI\VEN_104B&DEV_1040&SUBSYS_1040104B,PCI\VEN_104B&DEV_1040&CC_010000,PCI\VEN_104B&DEV_1040&CC_0100
created=program
[4]
request_type=unknown
version_user=11.8.11.0
vendor_user=VMWARE
date_user=2011-07-01
os_id=5_32
title=VMware SVGA II
group=Display
hardid=PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00,PCI\VEN_15AD&DEV_0405&SUBSY
HTTP/1.1 200 OK
Server: nginx/1.5.5
Date: Sat, 23 Apr 2016 03:20:44 GMT
Content-Type: text/html
Connection: close
X-Powered-By: PHP/5.5.20
{"ok":1,"error":0,"date":"2016-04-23 04:20:44","inserted":7}..
HEAD /dbs/current_5_32_cxw.7z HTTP/1.1
Content-Type: text/html; charset=ISO-8859-1
Host: d2.smartpcupdate.com
Accept: text/html, */*
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.5.5
Date: Sat, 23 Apr 2016 03:19:57 GMT
Content-Type: application/x-7z-compressed
Content-Length: 2164030
Last-Modified: Tue, 19 Jan 2016 08:33:03 GMT
Connection: keep-alive
ETag: "569df4bf-21053e"
Accept-Ranges: bytes
....
GET /dbs/current_5_32_cxw.7z HTTP/1.1
Content-Type: text/html; charset=ISO-8859-1
Host: d2.smartpcupdate.com
Accept: text/html, */*
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)
HTTP/1.1 200 OK
Server: nginx/1.5.5
Date: Sat, 23 Apr 2016 03:19:57 GMT
Content-Type: application/x-7z-compressed
Content-Length: 2164030
Last-Modified: Tue, 19 Jan 2016 08:33:03 GMT
Connection: keep-alive
ETag: "569df4bf-21053e"
Accept-Ranges: bytes
7z..'....t....!.....Z.........a..).E.`...&d..&.1...!..m....9......<..Q.6..;.E..:.._g...hS5..$..../*!.Q3..@..AE...f9.4.M{...J...U.xv."Z.Q0..t..} .7...C......Y.....}t.{/... 2d..$.].....c.....q<.%..0U{..z......S...0...A'.k7Zy.Z.kl.=.]w..E_v.u.X..g.w..M.{..E...L.t.8..r/..tsF2P....9..O.J.i...........J........%.....e.... T>...Z.~...E........g3......M.Y.f._E....g.sR...?...{}Kj....w..U..{..YH_......FG.N..C.&.?K.A x6...W.....p..T.3.kB.-X>...E_8Q&ES3.{.d......o.,...rm..V;.....?...g. .w....<u.[UZ......E.%v.8l(.>J....VV..w.mV.W.".RvGS.P.Ah"Q.z..kx.wpM.P.....u....6.@..E5...U..9^...p....b.....D..&...........]...........p"X..Y....^)*........Z7p5nk.t.T.7..)\L.#...kJ...H./.^=.....]......6..V..X..^...K)c.....3..;.i..P...S.t-;..d.....Oyy\..tjr......n.7.~..c...6...!..h...V...4.@.........7.3....I.........?........0.f.,!....D.........-.0......F......_.a....n..1...1.pd!|.w...{V\t..........7 ..D.W.%.........1..Z..Sd........Gp.8..-]e...,.~..L`....h&..bwE....&t~W..B".?!8^.j.....OX...E.....9.a..$..B...GF......9=.#0MO,Maq.z1~..........d...*A...Qj.Uv.k.,..x......./%....9..o;.9q....6C...>fG.=....u..ABQ...X....h~...9....-....QZi..Y.HU|...X..$'.a..Z/.k8....Y.H.. B..... .C...8..2.....l.h.....o\.....w...:.b...*..y..23..VX..6.>......j..a..8..6.....<nDD.<( '..v....K&.C..YkJD.........N.J......'...=.4.3.........toE/!..Axl~.....B..Eg*..u..z..j.}.!.....P..%,|..~Y..j....H.3`........\.(.:zd1.....t.....i..dY..........Z*8KHx.en....5..*....(..<..dm .z"%..,......"..A..M.....V.'..T....!..K.....9......a.i]>.7...$jtp^H...uG
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
DPTray.exe_1904:
.text
.text
`.itext
`.itext
`.data
`.data
.idata
.idata
.didata
.didata
.rdata
.rdata
@.reloc
@.reloc
B.rsrc
B.rsrc
biClrImportant
biClrImportant
tagMSG
tagMSG
Windows
Windows
HKEY
HKEY
etNoMonitorSupportException
etNoMonitorSupportException
TArray
TArray
ENotSupportedException
ENotSupportedException
ENotSupportedException$qA
ENotSupportedException$qA
ENoMonitorSupportException
ENoMonitorSupportException
ENoMonitorSupportException@
ENoMonitorSupportException@
TArray
TArray
TArray
TArray
csshiftjis
csshiftjis
windows-936
windows-936
windows-1250
windows-1250
windows-1251
windows-1251
windows-1252
windows-1252
windows-1253
windows-1253
windows-1254
windows-1254
windows-1255
windows-1255
windows-1256
windows-1256
windows-1257
windows-1257
windows-1258
windows-1258
windows-874
windows-874
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
TArray
TArray
TWMKey
TWMKey
KeyData
KeyData
grfLocksSupported
grfLocksSupported
Operator
Operator
EVariantBadIndexError
EVariantBadIndexError
EVariantBadIndexError0
EVariantBadIndexError0
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
TList.TDirection
TList.TDirection
AOperator
AOperator
TThread.TSynchronizeRecord
TThread.TSynchronizeRecord
TOperation
TOperation
Operation
Operation
FOnExecute
FOnExecute
OnExecute
OnExecute
TArray
TArray
TArray
TArray
TList.Sort$594$0$Intf@
TList.Sort$594$0$Intf@
TList.Sort$594$ActRec
TList.Sort$594$ActRec
TList.Sort$594$ActRec(
TList.Sort$594$ActRec(
Uh.KD
Uh.KD
$TComponent.FindComponent$1217$0$Intf@
$TComponent.FindComponent$1217$0$Intf@
$TComponent.FindComponent$1217$ActRec
$TComponent.FindComponent$1217$ActRec
DeleteKey
DeleteKey
TRegKeyInfo
TRegKeyInfo
NumSubKeys
NumSubKeys
MaxSubKeyLen
MaxSubKeyLen
FCurrentKey
FCurrentKey
FRootKey
FRootKey
FCloseRootKey
FCloseRootKey
CloseKey
CloseKey
CreateKey
CreateKey
GetKeyInfo
GetKeyInfo
GetKeyNames
GetKeyNames
HasSubKeys
HasSubKeys
KeyExists
KeyExists
LoadKey
LoadKey
MoveKey
MoveKey
OpenKey
OpenKey
OpenKeyReadOnly
OpenKeyReadOnly
ReplaceKey
ReplaceKey
RestoreKey
RestoreKey
SaveKey
SaveKey
UnLoadKey
UnLoadKey
CurrentKey\
CurrentKey\
LastErrorMsg
LastErrorMsg
RootKey\
RootKey\
RootKeyName
RootKeyName
EInvalidGraphicOperation
EInvalidGraphicOperation
EInvalidGraphicOperationH^E
EInvalidGraphicOperationH^E
SupportsPartialTransparency
SupportsPartialTransparency
SupportsClipboardFormat
SupportsClipboardFormat
Monochrome,
Monochrome,
IsShortCut
IsShortCut
FHelpKeyword
FHelpKeyword
HelpKeyword|'C
HelpKeyword|'C
igoParentPassthrough
igoParentPassthrough
FAlwaysShowDragImages
FAlwaysShowDragImages
AlwaysShowDragImages
AlwaysShowDragImages
toFlickFallbackKeys
toFlickFallbackKeys
'TCustomGestureEngine.TGestureEngineFlag
'TCustomGestureEngine.TGestureEngineFlag
(TCustomGestureEngine.TGestureEngineFlags
(TCustomGestureEngine.TGestureEngineFlags
Supported
Supported
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeyword\'C
HelpKeyword\'C
FOnKeyDown
FOnKeyDown
FOnKeyPress
FOnKeyPress
FOnKeyUp
FOnKeyUp
IsHintMsg
IsHintMsg
FNativeWheelSupport
FNativeWheelSupport
FWheelSupportMessage
FWheelSupportMessage
Uh.uG
Uh.uG
thHeaderItemLeftPressed
thHeaderItemLeftPressed
tsArrowBtnLeftPressed
tsArrowBtnLeftPressed
ttbThumbLeftPressed
ttbThumbLeftPressed
lrMonoChrome
lrMonoChrome
FAutoHotkeys
FAutoHotkeys
RethinkHotkeys
RethinkHotkeys
AutoHotkeys`II
AutoHotkeys`II
AutoHotkeys
AutoHotkeys
HelpKeyword
HelpKeyword
UnderstandsKeyword
UnderstandsKeyword
poPortrait
poPortrait
APort
APort
Port
Port
OnKeyDown
OnKeyDown
OnKeyPress|
OnKeyPress|
OnKeyUpX
OnKeyUpX
FProportional
FProportional
Proportional
Proportional
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
fsShowing
fsShowing
FWindowState
FWindowState
FKeyPreview
FKeyPreview
WantChildKey
WantChildKey
KeyPreview
KeyPreview
WindowState
WindowState
KeyPreview,
KeyPreview,
FBiDiKeyboard
FBiDiKeyboard
FNonBiDiKeyboard
FNonBiDiKeyboard
FEnumAllWindowsOnActivateHint
FEnumAllWindowsOnActivateHint
FOnActionExecute
FOnActionExecute
Keyword
Keyword
EnumAllWindowsOnActivateHint\
EnumAllWindowsOnActivateHint\
BiDiKeyboard\
BiDiKeyboard\
NonBiDiKeyboard
NonBiDiKeyboard
OnActionExecute
OnActionExecute
fKeyword
fKeyword
AMsg
AMsg
CheckIPVersionSupport
CheckIPVersionSupport
VPort
VPort
WSGetServByPort
WSGetServByPort
APortNumber
APortNumber
AddServByPortToList
AddServByPortToList
TIdSocketListWindows4
TIdSocketListWindows4
TIdSocketListWindows
TIdSocketListWindows
IdStackWindows
IdStackWindows
TIdStackWindowsg
TIdStackWindowsg
ReceiveMsg
ReceiveMsg
WSTranslateSocketErrorMsg
WSTranslateSocketErrorMsg
SupportsIPv6
SupportsIPv6
TIdStackWindows
TIdStackWindows
EIdIPVersionUnsupported@
EIdIPVersionUnsupported@
EIdIPVersionUnsupported
EIdIPVersionUnsupported
FSourcePort
FSourcePort
FDestPort
FDestPort
SourcePort
SourcePort
DestPort
DestPort
Generics.Defaults
Generics.Defaults
Generics.Collections
Generics.Collections
UrlMon
UrlMon
1.2.3
1.2.3
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
oleaut32.dll
oleaut32.dll
advapi32.dll
advapi32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
user32.dll
user32.dll
kernel32.dll
kernel32.dll
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
MapVirtualKeyW
MapVirtualKeyW
LoadKeyboardLayoutW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextW
GetKeyNameTextW
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
EnumChildWindows
EnumChildWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
msimg32.dll
msimg32.dll
gdi32.dll
gdi32.dll
SetViewportOrgEx
SetViewportOrgEx
version.dll
version.dll
GetCPInfoExW
GetCPInfoExW
GetCPInfo
GetCPInfo
RegUnLoadKeyW
RegUnLoadKeyW
RegSaveKeyW
RegSaveKeyW
RegRestoreKeyW
RegRestoreKeyW
RegReplaceKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegLoadKeyW
RegFlushKey
RegFlushKey
RegEnumKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyExW
SHFolder.dll
SHFolder.dll
ole32.dll
ole32.dll
comctl32.dll
comctl32.dll
winspool.drv
winspool.drv
shell32.dll
shell32.dll
ShellExecuteW
ShellExecuteW
windowscodecs.dll
windowscodecs.dll
uxtheme.dll
uxtheme.dll
DWMAPI.DLL
DWMAPI.DLL
1$1$0,0004080
1$1$0,0004080
;%;
;%;
;*;.;2;6;:;
;*;.;2;6;:;
7-7L7}7
7-7L7}7
7 7$7(7,7074787
7 7$7(7,7074787
9"9&9*9.9>9
9"9&9*9.9>9
9â€9C9p9
9â€9C9p9
,0004080
,0004080
7%7 74787
7%7 74787
363U3c3q3
363U3c3q3
11D1^1y1
11D1^1y1
?!?%?)?-?1?
?!?%?)?-?1?
7"7&7*7.72767:7>7
7"7&7*7.72767:7>7
8 9Ÿ9
8 9Ÿ9
2&2U2f2
2&2U2f2
6 6$656_6
6 6$656_6
? ?(?0?8?
? ?(?0?8?
8 8$8(8,8084888
8 8$8(8,8084888
7 7$7(7,7074787
7 7$7(7,7074787
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
3333333
3333333
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
@000///1111*$&
@000///1111*$&
Paint.NET v3.5.100
Paint.NET v3.5.100
paint.net 4.0;
paint.net 4.0;
KWindows
KWindows
CGenerics.Defaults
CGenerics.Defaults
%sTray
%sTray
Font.Charset
Font.Charset
Font.Color
Font.Color
Font.Height
Font.Height
Font.Name
Font.Name
Font.Style
Font.Style
(%s found NN outdated drivers on your PC.
(%s found NN outdated drivers on your PC.
-%s detected a new device attached to your PC.
-%s detected a new device attached to your PC.
name="SmartDriverUpdater.exe"
name="SmartDriverUpdater.exe"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
PSAPI.dll
PSAPI.dll
NTDLL.DLL
NTDLL.DLL
%s-%s
%s-%s
%s[%d]
%s[%d]
%s_%d
%s_%d
.Owner
.Owner
\\?\UNC\
\\?\UNC\
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_DYN_DATA
%s (*.%s)|*.%1:s
%s (*.%s)|*.%1:s
%s (%s)|%1:s|
%s (%s)|%1:s|
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
crSQLWait
crSQLWait
%s (%s)
%s (%s)
imm32.dll
imm32.dll
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
clWebSnow
clWebSnow
clWebFloralWhite
clWebFloralWhite
clWebLavenderBlush
clWebLavenderBlush
clWebOldLace
clWebOldLace
clWebIvory
clWebIvory
clWebCornSilk
clWebCornSilk
clWebBeige
clWebBeige
clWebAntiqueWhite
clWebAntiqueWhite
clWebWheat
clWebWheat
clWebAliceBlue
clWebAliceBlue
clWebGhostWhite
clWebGhostWhite
clWebLavender
clWebLavender
clWebSeashell
clWebSeashell
clWebLightYellow
clWebLightYellow
clWebPapayaWhip
clWebPapayaWhip
clWebNavajoWhite
clWebNavajoWhite
clWebMoccasin
clWebMoccasin
clWebBurlywood
clWebBurlywood
clWebAzure
clWebAzure
clWebMintcream
clWebMintcream
clWebHoneydew
clWebHoneydew
clWebLinen
clWebLinen
clWebLemonChiffon
clWebLemonChiffon
clWebBlanchedAlmond
clWebBlanchedAlmond
clWebBisque
clWebBisque
clWebPeachPuff
clWebPeachPuff
clWebTan
clWebTan
clWebYellow
clWebYellow
clWebDarkOrange
clWebDarkOrange
clWebRed
clWebRed
clWebDarkRed
clWebDarkRed
clWebMaroon
clWebMaroon
clWebIndianRed
clWebIndianRed
clWebSalmon
clWebSalmon
clWebCoral
clWebCoral
clWebGold
clWebGold
clWebTomato
clWebTomato
clWebCrimson
clWebCrimson
clWebBrown
clWebBrown
clWebChocolate
clWebChocolate
clWebSandyBrown
clWebSandyBrown
clWebLightSalmon
clWebLightSalmon
clWebLightCoral
clWebLightCoral
clWebOrange
clWebOrange
clWebOrangeRed
clWebOrangeRed
clWebFirebrick
clWebFirebrick
clWebSaddleBrown
clWebSaddleBrown
clWebSienna
clWebSienna
clWebPeru
clWebPeru
clWebDarkSalmon
clWebDarkSalmon
clWebRosyBrown
clWebRosyBrown
clWebPaleGoldenrod
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebLightGoldenrodYellow
clWebOlive
clWebOlive
clWebForestGreen
clWebForestGreen
clWebGreenYellow
clWebGreenYellow
clWebChartreuse
clWebChartreuse
clWebLightGreen
clWebLightGreen
clWebAquamarine
clWebAquamarine
clWebSeaGreen
clWebSeaGreen
clWebGoldenRod
clWebGoldenRod
clWebKhaki
clWebKhaki
clWebOliveDrab
clWebOliveDrab
clWebGreen
clWebGreen
clWebYellowGreen
clWebYellowGreen
clWebLawnGreen
clWebLawnGreen
clWebPaleGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumAquamarine
clWebMediumSeaGreen
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkOliveGreen
clWebDarkgreen
clWebDarkgreen
clWebLimeGreen
clWebLimeGreen
clWebLime
clWebLime
clWebSpringGreen
clWebSpringGreen
clWebMediumSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebPaleTurquoise
clWebLightCyan
clWebLightCyan
clWebLightBlue
clWebLightBlue
clWebLightSkyBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebDarkBlue
clWebIndigo
clWebIndigo
clWebMediumTurquoise
clWebMediumTurquoise
clWebTurquoise
clWebTurquoise
clWebCyan
clWebCyan
clWebPowderBlue
clWebPowderBlue
clWebSkyBlue
clWebSkyBlue
clWebRoyalBlue
clWebRoyalBlue
clWebMediumBlue
clWebMediumBlue
clWebMidnightBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebDarkTurquoise
clWebCadetBlue
clWebCadetBlue
clWebDarkCyan
clWebDarkCyan
clWebTeal
clWebTeal
clWebDeepskyBlue
clWebDeepskyBlue
clWebDodgerBlue
clWebDodgerBlue
clWebBlue
clWebBlue
clWebNavy
clWebNavy
clWebDarkViolet
clWebDarkViolet
clWebDarkOrchid
clWebDarkOrchid
clWebMagenta
clWebMagenta
clWebDarkMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebMediumVioletRed
clWebPaleVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebBlueViolet
clWebMediumOrchid
clWebMediumOrchid
clWebMediumPurple
clWebMediumPurple
clWebPurple
clWebPurple
clWebDeepPink
clWebDeepPink
clWebLightPink
clWebLightPink
clWebViolet
clWebViolet
clWebOrchid
clWebOrchid
clWebPlum
clWebPlum
clWebThistle
clWebThistle
clWebHotPink
clWebHotPink
clWebPink
clWebPink
clWebLightSteelBlue
clWebLightSteelBlue
clWebMediumSlateBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebLightSlateGray
clWebWhite
clWebWhite
clWebLightgrey
clWebLightgrey
clWebGray
clWebGray
clWebSteelBlue
clWebSteelBlue
clWebSlateBlue
clWebSlateBlue
clWebSlateGray
clWebSlateGray
clWebWhiteSmoke
clWebWhiteSmoke
clWebSilver
clWebSilver
clWebDimGray
clWebDimGray
clWebMistyRose
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlateBlue
clWebDarkSlategray
clWebDarkSlategray
clWebGainsboro
clWebGainsboro
clWebDarkGray
clWebDarkGray
clWebBlack
clWebBlack
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
hXXp://VVV.pcutilitiespro.com
hXXp://VVV.pcutilitiespro.com
HomePageURL
HomePageURL
AfterInstallURL
AfterInstallURL
AfterInstallURLHidden
AfterInstallURLHidden
SupportURL
SupportURL
UninstallURL
UninstallURL
BuyNowURL
BuyNowURL
AdsDownloadURL
AdsDownloadURL
AdsBuyNowURL
AdsBuyNowURL
AdsDownloadURL2
AdsDownloadURL2
AdsBuyNowURL2
AdsBuyNowURL2
hXXps://safecart.com/pcutilitiespro/.driverpro
hXXps://safecart.com/pcutilitiespro/.driverpro
hXXp://support.pcutilitiespro.com
hXXp://support.pcutilitiespro.com
hXXp://dejebel.pcutilitiespro.revenuewire.net/optimizerpro/xsell
hXXp://dejebel.pcutilitiespro.revenuewire.net/optimizerpro/xsell
hXXp://filecdn.avanquest.com/rw/xsell/pcutilitiespro/dejebel/OptimizerPro.exe
hXXp://filecdn.avanquest.com/rw/xsell/pcutilitiespro/dejebel/OptimizerPro.exe
*.status
*.status
%s detected a new device attached to your PC.
%s detected a new device attached to your PC.
English.ini
English.ini
French.ini
French.ini
German.ini
German.ini
Spanish.ini
Spanish.ini
Italian.ini
Italian.ini
Portuguese.ini
Portuguese.ini
Danish.ini
Danish.ini
Dutch.ini
Dutch.ini
Swedish.ini
Swedish.ini
Polish.ini
Polish.ini
Russian.ini
Russian.ini
Brazilian.ini
Brazilian.ini
Finnish.ini
Finnish.ini
Norwegian.ini
Norwegian.ini
Japanese.ini
Japanese.ini
Chinese.ini
Chinese.ini
Czech.ini
Czech.ini
Arabic.ini
Arabic.ini
StartWithWindows
StartWithWindows
s_Exec
s_Exec
D:\Projects\Components XE\Indy\Lib\System\IdGlobal.pas
D:\Projects\Components XE\Indy\Lib\System\IdGlobal.pas
ISO_646.irv:1991
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.basic:1983
ISO_646.irv:1983
ISO_646.irv:1983
csISO16Portuguese
csISO16Portuguese
csISO84Portuguese2
csISO84Portuguese2
csShiftJIS
csShiftJIS
ISO-8859-1-Windows-3.0-Latin-1
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csWindows31Latin5
csMicrosoftPublishing
csMicrosoftPublishing
Windows-31J
Windows-31J
csWindows31J
csWindows31J
PTCP154
PTCP154
csPTCP154
csPTCP154
WS2_32.DLL
WS2_32.DLL
getservbyport
getservbyport
WSAAsyncGetServByPort
WSAAsyncGetServByPort
WSAJoinLeaf
WSAJoinLeaf
MSWSOCK.DLL
MSWSOCK.DLL
WSARecvMsg
WSARecvMsg
WSASendMsg
WSASendMsg
Wship6.dll
Wship6.dll
Fwpuclnt.dll
Fwpuclnt.dll
IdnDL.dll
IdnDL.dll
Normaliz.dll
Normaliz.dll
iphlpapi.dll
iphlpapi.dll
0.0.0.0
0.0.0.0
127.0.0.1
127.0.0.1
D:\Projects\Components XE\Indy\Lib\System\IdStack.pas
D:\Projects\Components XE\Indy\Lib\System\IdStack.pas
HTTP-EQUIV
HTTP-EQUIV
()@,;:\"./
()@,;:\"./
()@,;:\"/[]?=
()@,;:\"/[]?=
()@,;:\"/[]?={}
()@,;:\"/[]?={}
*#%"{}|\^[]`
*#%"{}|\^[]`
Backup\*.*
Backup\*.*
Drivers\*.*
Drivers\*.*
\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Portable Network Graphics
Portable Network Graphics
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
optimizerpro.exe
optimizerpro.exe
Optimizer Pro\OptimizerPro.exe
Optimizer Pro\OptimizerPro.exe
Kernel32.dll
Kernel32.dll
%s is not a valid service.
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation now in progress.
Operation now in progress.
Operation already in progress.
Operation already in progress.
Socket operation on non-socket.
Socket operation on non-socket.
Protocol not supported.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Protocol family not supported.0Address family not supported by protocol family.
7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.
7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.
Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Socket Error # %d
Socket Error # %d
Operation would block.yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
Operation would block.yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
Description: BThe "Portable Network Graphics" image contains an invalid palette.
Description: BThe "Portable Network Graphics" image contains an invalid palette.
The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.
The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.
This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.
This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.
All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form
All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.jThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.jThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
Enhanced Metafiles Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
Enhanced Metafiles Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex
Invalid image!Cannot change the size of an iconÊnnot change the size of a WIC Image$Unknown picture file extension (.%s)
Invalid image!Cannot change the size of an iconÊnnot change the size of a WIC Image$Unknown picture file extension (.%s)
Unsupported clipboard format
Unsupported clipboard format
Invalid Timeout value: %s
Invalid Timeout value: %s
''%s'' is not a valid date#''%s'' is not a valid date and time#''%s'' is not a valid integer value
''%s'' is not a valid date#''%s'' is not a valid date and time#''%s'' is not a valid integer value
''%s'' is not a valid time
''%s'' is not a valid time
No help found for context %d
No help found for context %d
No help found for %s
No help found for %s
Thread creation error: %s
Thread creation error: %s
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d
The specified path is too long The specified path was not found The path format is not supported The specified file was not found$No help viewer that supports filters2Length of Strings and Objects arrays must be equal
The specified path is too long The specified path was not found The path format is not supported The specified file was not found$No help viewer that supports filters2Length of Strings and Objects arrays must be equal
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Failed to create key %s
Failed to create key %s
Failed to get data for '%s'
Failed to get data for '%s'
Failed to set data for '%s'
Failed to set data for '%s'
Resource %s not found
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Cannot open file "%s". %s
Cannot open file "%s". %s
Unable to write to %s
Unable to write to %s
Invalid file name - %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Ancestor for '%s' not found
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
External exception %x
External exception %x
Interface not supported
Interface not supported
Object lock not owned(Monitor support function not initialized
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
Invalid variant operation
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Operation not supported
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
No argument for format '%s'"Variant method calls not supported
Write$Error creating variant or safe array('%s' is not a valid floating point value '%d.%d' is not a valid timestamp
Write$Error creating variant or safe array('%s' is not a valid floating point value '%d.%d' is not a valid timestamp
I/O error %d
I/O error %d
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
3.1.0.5
3.1.0.5
DPTray.exe
DPTray.exe
DriverPro.exe_312:
.text
.text
`.itext
`.itext
`.data
`.data
.idata
.idata
.didata
.didata
.edata
.edata
@.tls
@.tls
.rdata
.rdata
@.reloc
@.reloc
B.rsrc
B.rsrc
biClrImportant
biClrImportant
tagMSG
tagMSG
Windows
Windows
HKEY
HKEY
TWMKey
TWMKey
KeyData
KeyData
etNoMonitorSupportException
etNoMonitorSupportException
TArray
TArray
ENotSupportedException
ENotSupportedException
ENotSupportedException(
ENotSupportedException(
ENoMonitorSupportException
ENoMonitorSupportException
ENoMonitorSupportExceptionD
ENoMonitorSupportExceptionD
TArray
TArray
TArray
TArray
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
TArray
TArray
grfLocksSupported
grfLocksSupported
tdPortNameOffset
tdPortNameOffset
Operator
Operator
EVariantBadIndexError
EVariantBadIndexError
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
TList.TDirection
TList.TDirection
AOperator
AOperator
TThread.TSynchronizeRecord
TThread.TSynchronizeRecord
TOperation
TOperation
Operation
Operation
FOnExecute
FOnExecute
OnExecute
OnExecute
TArray
TArray
TArray
TArray
TList.Sort$594$0$Intfh
TList.Sort$594$0$Intfh
TList.Sort$594$ActRec
TList.Sort$594$ActRec
TList.Sort$594$ActRecp
TList.Sort$594$ActRecp
$TComponent.FindComponent$1217$0$Intfh
$TComponent.FindComponent$1217$0$Intfh
$TComponent.FindComponent$1217$ActRec
$TComponent.FindComponent$1217$ActRec
$TComponent.FindComponent$1217$ActRec
$TComponent.FindComponent$1217$ActRec
Generics.Collections
Generics.Collections
TRegKeyInfo
TRegKeyInfo
NumSubKeys
NumSubKeys
MaxSubKeyLen
MaxSubKeyLen
FCurrentKey
FCurrentKey
FRootKey
FRootKey
FCloseRootKey
FCloseRootKey
CloseKey
CloseKey
CreateKey
CreateKey
DeleteKey
DeleteKey
GetKeyInfo
GetKeyInfo
GetKeyNames
GetKeyNames
HasSubKeys
HasSubKeys
KeyExists
KeyExists
LoadKey
LoadKey
MoveKey
MoveKey
OpenKey
OpenKey
OpenKeyReadOnly
OpenKeyReadOnly
ReplaceKey
ReplaceKey
RestoreKey
RestoreKey
SaveKey
SaveKey
UnLoadKey
UnLoadKey
CurrentKey\
CurrentKey\
LastErrorMsg
LastErrorMsg
RootKey\
RootKey\
RootKeyName
RootKeyName
EInvalidGraphicOperation
EInvalidGraphicOperation
SupportsPartialTransparency
SupportsPartialTransparency
SupportsClipboardFormat
SupportsClipboardFormat
MonochromeT
MonochromeT
IsShortCut
IsShortCut
FHelpKeyword
FHelpKeyword
HelpKeyword
HelpKeyword
igoParentPassthrough
igoParentPassthrough
FAlwaysShowDragImages
FAlwaysShowDragImages
AlwaysShowDragImages
AlwaysShowDragImages
toFlickFallbackKeys
toFlickFallbackKeys
'TCustomGestureEngine.TGestureEngineFlag
'TCustomGestureEngine.TGestureEngineFlag
(TCustomGestureEngine.TGestureEngineFlags
(TCustomGestureEngine.TGestureEngineFlags
Supported
Supported
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeywordt$C
HelpKeywordt$C
FOnKeyDown
FOnKeyDown
FOnKeyPress
FOnKeyPress
FOnKeyUp
FOnKeyUp
IsHintMsg
IsHintMsg
FNativeWheelSupport
FNativeWheelSupport
FWheelSupportMessage
FWheelSupportMessage
Uh.eG
Uh.eG
thHeaderItemLeftPressed
thHeaderItemLeftPressed
tsArrowBtnLeftPressed
tsArrowBtnLeftPressed
ttbThumbLeftPressed
ttbThumbLeftPressed
lrMonoChrome
lrMonoChrome
FAutoHotkeys
FAutoHotkeys
RethinkHotkeys
RethinkHotkeys
AutoHotkeys
AutoHotkeys
AutoHotkeys("I
AutoHotkeys("I
UnderstandsKeyword
UnderstandsKeyword
FPasswordChar
FPasswordChar
PasswordChar
PasswordChar
OnKeyDown
OnKeyDown
OnKeyPress|
OnKeyPress|
OnKeyUpX
OnKeyUpX
ssHorizontal
ssHorizontal
OnKeyUp
OnKeyUp
TCustomButton.TButtonStyle
TCustomButton.TButtonStyle
FProportional
FProportional
Proportional
Proportional
FOldKeyDown
FOldKeyDown
cdsShowKeyboardCues
cdsShowKeyboardCues
vsReport
vsReport
FURL
FURL
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
fsShowing
fsShowing
FWindowState
FWindowState
FKeyPreview
FKeyPreview
WantChildKey
WantChildKey
KeyPreview$
KeyPreview$
WindowStateD
WindowStateD
KeyPreview
KeyPreview
WindowState
WindowState
FBiDiKeyboard
FBiDiKeyboard
FNonBiDiKeyboard
FNonBiDiKeyboard
FEnumAllWindowsOnActivateHint
FEnumAllWindowsOnActivateHint
FOnActionExecute
FOnActionExecute
Keyword
Keyword
EnumAllWindowsOnActivateHint\
EnumAllWindowsOnActivateHint\
BiDiKeyboard\
BiDiKeyboard\
NonBiDiKeyboard
NonBiDiKeyboard
OnActionExecuteD
OnActionExecuteD
Uh%CN
Uh%CN
fKeyword
fKeyword
IFontAccessh
IFontAccessh
IPictureAccessh
IPictureAccessh
TCommonShellExecuteThread0
TCommonShellExecuteThread0
TCommonShellExecuteThread
TCommonShellExecuteThread
shell32.dll
shell32.dll
shlwapi.dll
shlwapi.dll
Mpr.dll
Mpr.dll
THKeyArray
THKeyArray
TCommonKeyState
TCommonKeyState
cksShift
cksShift
TCommonKeyStates
TCommonKeyStates
Userenv.dll
Userenv.dll
NETAPI32.DLL
NETAPI32.DLL
SVRAPI.DLL
SVRAPI.DLL
elsReport
elsReport
elsReportThumb
elsReportThumb
TAutoGroupGetKeyEvent
TAutoGroupGetKeyEvent
TColumnGetImageIndexEvent
TColumnGetImageIndexEvent
TColumnSetImageIndexEvent
TColumnSetImageIndexEvent
KeyState
KeyState
KeyStates
KeyStates
TGroupGetImageIndexEvent
TGroupGetImageIndexEvent
TGroupSetImageIndexEvent
TGroupSetImageIndexEvent
HintWindowShown
HintWindowShown
TItemGetGroupKeyEvent
TItemGetGroupKeyEvent
GroupKey
GroupKey
TItemGetImageIndexEvent
TItemGetImageIndexEvent
TItemSetGroupKeyEvent
TItemSetGroupKeyEvent
TItemSetImageIndexEvent
TItemSetImageIndexEvent
MouseMsg
MouseMsg
TEasyKeyActionEvent
TEasyKeyActionEvent
EscapeKeyPressed
EscapeKeyPressed
TEasyViewReportItem
TEasyViewReportItem
TEasyViewReportThumbItem
TEasyViewReportThumbItem
TEasyViewReportThumbItemX
TEasyViewReportThumbItemX
TEasyGridReportGroup
TEasyGridReportGroup
TEasyGridReportGroupd
TEasyGridReportGroupd
TEasyGridReportThumbGroup
TEasyGridReportThumbGroup
TEasyGridReportThumbGroupP
TEasyGridReportThumbGroupP
TEasyCellSizeReport8
TEasyCellSizeReport8
TEasyCellSizeReport
TEasyCellSizeReport
TEasyCellSizeReportThumb
TEasyCellSizeReportThumb
TEasyCellSizeReportThumb0
TEasyCellSizeReportThumb0
ReportThumb
ReportThumb
Report
Report
AlwaysShow
AlwaysShow
OnAutoGroupGetKey
OnAutoGroupGetKey
OnItemGetGroupKey
OnItemGetGroupKey
OnItemSetGroupKey
OnItemSetGroupKey
OnKeyAction
OnKeyAction
UhE%U
UhE%U
EIdCanNotBindPortInRange
EIdCanNotBindPortInRange
EIdCanNotBindPortInRange
EIdCanNotBindPortInRange
EIdInvalidPortRange
EIdInvalidPortRange
TIdSocketListWindows
TIdSocketListWindows
IdStackWindows
IdStackWindows
TIdStackWindows`SX
TIdStackWindows`SX
TIdStackWindowslRX
TIdStackWindowslRX
EIdIPVersionUnsupportedx
EIdIPVersionUnsupportedx
EIdIPVersionUnsupportedP
EIdIPVersionUnsupportedP
TIdStackLocalAddressh
TIdStackLocalAddressh
LicenseKey
LicenseKey
ESQLiteException
ESQLiteException
SQLiteTable3
SQLiteTable3
TSQLiteDatabaseT
TSQLiteDatabaseT
TSQLiteDatabase@
TSQLiteDatabase@
TSQLiteTable
TSQLiteTable
ftpTransfer
ftpTransfer
ftpReady
ftpReady
ftpAborted
ftpAborted
EIdPortRequired
EIdPortRequired
EIdTCPConnectionError
EIdTCPConnectionError
EIdTCPConnectionError(
EIdTCPConnectionError(
EIdObjectTypeNotSupported
EIdObjectTypeNotSupported
Port
Port
ClientPortMin
ClientPortMin
ClientPortMax\
ClientPortMax\
"EIdTransparentProxyUDPNotSupported
"EIdTransparentProxyUDPNotSupported
"EIdTransparentProxyUDPNotSupportedd
"EIdTransparentProxyUDPNotSupportedd
TIdTCPClientCustom
TIdTCPClientCustom
TIdTCPClientCustomd
TIdTCPClientCustomd
IdTCPClient
IdTCPClient
TIdTCPClient
TIdTCPClient
BoundPort
BoundPort
%EIdSocksUDPNotSupportedBySOCKSVersion
%EIdSocksUDPNotSupportedBySOCKSVersion
%EIdSocksUDPNotSupportedBySOCKSVersion`
%EIdSocksUDPNotSupportedBySOCKSVersion`
saUsernamePassword
saUsernamePassword
Password
Password
DefaultPort
DefaultPort
TIdTCPConnection
TIdTCPConnection
IdTCPConnection
IdTCPConnection
IdHTTPHeaderInfo
IdHTTPHeaderInfo
ProxyPassword
ProxyPassword
ProxyPort\
ProxyPort\
Password\
Password\
TIdMetaHTTPEquiv
TIdMetaHTTPEquiv
EIdUnsupportedOperation
EIdUnsupportedOperation
sslvrfFailIfNoPeerCert
sslvrfFailIfNoPeerCert
AMsg
AMsg
TCallbackExEvent
TCallbackExEvent
TPasswordEvent
TPasswordEvent
TPasswordEventEx
TPasswordEventEx
VPassword
VPassword
Certificate
Certificate
RootCertFile\
RootCertFile\
CertFile\
CertFile\
KeyFile\
KeyFile\
OnGetPassword
OnGetPassword
OnGetPasswordEx\
OnGetPasswordEx\
EIdOSSLLoadingRootCertErrorl
EIdOSSLLoadingRootCertErrorl
EIdOSSLLoadingRootCertError@
EIdOSSLLoadingRootCertError@
EIdOSSLLoadingCertError(
EIdOSSLLoadingCertError(
EIdOSSLLoadingCertError
EIdOSSLLoadingCertError
EIdOSSLLoadingKeyError
EIdOSSLLoadingKeyError
TIdHTTPOption
TIdHTTPOption
hoNoParseMetaHTTPEquiv
hoNoParseMetaHTTPEquiv
IdHTTP
IdHTTP
TIdHTTPOptions
TIdHTTPOptions
TIdHTTPProtocolVersion
TIdHTTPProtocolVersion
TIdHTTPOnRedirectEvent
TIdHTTPOnRedirectEvent
TIdHTTPOnHeadersAvailable
TIdHTTPOnHeadersAvailable
TIdHTTPResponse
TIdHTTPResponse
TIdHTTPRequest
TIdHTTPRequest
TIdHTTPProtocol
TIdHTTPProtocol
TIdCustomHTTP
TIdCustomHTTP
TIdHTTP4
TIdHTTP4
TIdHTTPl
TIdHTTPl
HTTPOptionst
HTTPOptionst
EIdHTTPProtocolException
EIdHTTPProtocolException
TMonochromeLookup
TMonochromeLookup
SetupDiOpenClassRegKey
SetupDiOpenClassRegKey
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExW
SetupDiOpenClassRegKeyExW
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInterfaceRegKey
SetupDiDeleteDeviceInterfaceRegKey
SetupDiDeleteDeviceInterfaceRegKey
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDevRegKeyW
SetupDiOpenDevRegKey
SetupDiOpenDevRegKey
SetupDiDeleteDevRegKey
SetupDiDeleteDevRegKey
CM_Delete_Class_Key
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_DevNode_Key_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_Key_Name_ExW
CM_Open_Class_KeyA
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Open_DevNode_Key_Ex
IProgressh
IProgressh
ICryptoGetTextPasswordh
ICryptoGetTextPasswordh
ICryptoGetTextPassword2h
ICryptoGetTextPassword2h
Common.LoggerWindow
Common.LoggerWindow
Common.Logger
Common.Logger
Common.LoggerH
Common.LoggerH
Driver.CoreSnapshot
Driver.CoreSnapshot
Driver.CoreResult
Driver.CoreResult
Common.RestorePoint\
Common.RestorePoint\
Driver.CoreInstall
Driver.CoreInstall
UhD%c
UhD%c
'TPair
'TPair
BTArray>
BTArray>
GTEnumerator>(
GTEnumerator>(
GTEnumerator>TCc
GTEnumerator>TCc
GTEnumerable>-
GTEnumerable>-
GTEnumerable>
GTEnumerable>
3TDictionary.TItem
3TDictionary.TItem
8TDictionary.TItemArray
8TDictionary.TItemArray
"IEqualityComparerh
"IEqualityComparerh
Generics.Defaults
Generics.Defaults
'TCollectionNotifyEvent
'TCollectionNotifyEvent
(TCollectionNotifyEvent
(TCollectionNotifyEvent
TArray
TArray
TEnumerator(
TEnumerator(
TEnumerator
TEnumerator
TEnumerable-
TEnumerable-
TEnumerable`Jc
TEnumerable`Jc
.TKeyEnumerator;
.TKeyEnumerator;
.TKeyEnumerator
.TKeyEnumerator
.TKeyCollection;
.TKeyCollection;
.TKeyCollectionpMc
.TKeyCollectionpMc
TArray
TArray
TEnumerator(
TEnumerator(
TEnumerator
TEnumerator
TEnumerable-
TEnumerable-
TEnumerable
TEnumerable
>TDictionary.TValueEnumerator;
>TDictionary.TValueEnumerator;
>TDictionary.TValueEnumerator
>TDictionary.TValueEnumerator
>TDictionary.TValueCollection;
>TDictionary.TValueCollection;
>TDictionary.TValueCollection
>TDictionary.TValueCollection
=TDictionary.TPairEnumerator;
=TDictionary.TPairEnumerator;
=TDictionary.TPairEnumerator
=TDictionary.TPairEnumerator
FOnKeyNotify
FOnKeyNotify
FKeyCollection
FKeyCollection
-TDictionary9
-TDictionary9
ContainsKey
ContainsKey
-TDictionary
-TDictionary
Keys
Keys
OnKeyNotify
OnKeyNotify
[:{Generics.Collections}TList>.:1
[:{Generics.Collections}TList>.:1
Driver.CoreInstall8Bc
Driver.CoreInstall8Bc
EIComparer>h
EIComparer>h
RTCollectionNotifyEvent>
RTCollectionNotifyEvent>
Item'TPair
Item'TPair
GIEnumerable>
GIEnumerable>
MTList>.TEnumerator5
MTList>.TEnumerator5
MTList>.TEnumerator`*d
MTList>.TEnumerator`*d
ATList>&
ATList>&
ATList>P,d
ATList>P,d
0:{Generics.Collections}TList.:1
0:{Generics.Collections}TList.:1
IComparerh
IComparerh
IEnumerable
IEnumerable
"TList.TEnumerator5
"TList.TEnumerator5
"TList.TEnumerator
"TList.TEnumerator
TList&
TList&
TList
TList
1:{Generics.Collections}TList.:1
1:{Generics.Collections}TList.:1
IComparerh
IComparerh
IEnumerable
IEnumerable
#TList.TEnumerator5
#TList.TEnumerator5
#TList.TEnumerator
#TList.TEnumerator
TList&
TList&
TList
TList
GTComparison>h
GTComparison>h
ETComparer>2
ETComparer>2
ETComparer>
ETComparer>
[:{Generics.Collections}TList>.:3
[:{Generics.Collections}TList>.:3
TComparisonh
TComparisonh
TComparer2
TComparer2
TComparer
TComparer
0:{Generics.Collections}TList.:3
0:{Generics.Collections}TList.:3
TComparisonh
TComparisonh
TComparer2
TComparer2
TComparer
TComparer
1:{Generics.Collections}TList.:3
1:{Generics.Collections}TList.:3
Driver.Core
Driver.Core
EInvalidGridOperation
EInvalidGridOperation
EInvalidGridOperation$
EInvalidGridOperation$
goAlwaysShowEditor
goAlwaysShowEditor
doKeyColFixed
doKeyColFixed
TKeyOption
TKeyOption
keyEdit
keyEdit
keyAdd
keyAdd
keyDelete
keyDelete
keyUnique
keyUnique
TKeyOptions
TKeyOptions
KeyName
KeyName
KeyValue
KeyValue
FKeyOptions
FKeyOptions
FDupKeySave
FDupKeySave
KeyOptions
KeyOptions
KeyIsValid
KeyIsValid
FKeyDesc
FKeyDesc
KeyDesc
KeyDesc
;!199{199
;!199{199
;0!8&2{199
;0!8&2{199
"
"
Windows 95
Windows 95
Windows 95 OSR-2
Windows 95 OSR-2
Windows 98
Windows 98
Windows 98 SE
Windows 98 SE
Windows ME
Windows ME
Windows 9x New
Windows 9x New
Windows NT 3
Windows NT 3
Windows NT 4
Windows NT 4
Windows 2000
Windows 2000
Windows XP
Windows XP
Windows 2003
Windows 2003
Windows Vista
Windows Vista
Windows 2008
Windows 2008
Windows 7
Windows 7
Windows 2008 R2
Windows 2008 R2
Windows 8
Windows 8
Windows 2012
Windows 2012
Windows 8.1
Windows 8.1
Windows 2012 R2
Windows 2012 R2
Windows 10
Windows 10
Windows NT New
Windows NT New
TMsgHandler
TMsgHandler
TMsgHandlerOO
TMsgHandlerOO
user.exe
user.exe
TMsgHandlers
TMsgHandlers
madToolsMsgHandlerWindow
madToolsMsgHandlerWindow
>0';0974&0{199
>0';0974&0{199
Export
Export
MapFileNameVVV.madshi.net
MapFileNameVVV.madshi.net
dbghelp.dll
dbghelp.dll
4.0.12
4.0.12
bSendBugReport
bSendBugReport
bSaveBugReport
bSaveBugReport
bPrintBugReport
bPrintBugReport
bShowBugReport
bShowBugReport
esSysUtilsShowException
esSysUtilsShowException
esHttpExtension
esHttpExtension
esIntraweb
esIntraweb
esTThreadExecute
esTThreadExecute
epCompleteReport
epCompleteReport
TBugReportCallback
TBugReportCallback
bugReport
bugReport
TBugReportCallbackOO
TBugReportCallbackOO
eaSendBugReport
eaSendBugReport
eaSaveBugReport
eaSaveBugReport
eaPrintBugReport
eaPrintBugReport
eaSendBugReport2
eaSendBugReport2
eaSaveBugReport2
eaSaveBugReport2
eaPrintBugReport2
eaPrintBugReport2
eaSendBugReport3
eaSendBugReport3
eaSaveBugReport3
eaSaveBugReport3
eaPrintBugReport3
eaPrintBugReport3
eaShowBugReport
eaShowBugReport
TBugReportPluginA
TBugReportPluginA
TBugReportPluginW
TBugReportPluginW
TBugReportPluginExA
TBugReportPluginExA
TBugReportPluginExW
TBugReportPluginExW
advapi32.dll
advapi32.dll
The import table is invalid.
The import table is invalid.
WindowsLogo
WindowsLogo
ReportLeaks
ReportLeaks
UploadViaHttp
UploadViaHttp
HttpServer
HttpServer
HttpSsl
HttpSsl
HttpPort
HttpPort
HttpAccount
HttpAccount
HttpPassword
HttpPassword
BugTrPassword
BugTrPassword
MailAsSmtpServer
MailAsSmtpServer
MailAsSmtpClient
MailAsSmtpClient
SmtpServer
SmtpServer
SmtpSsl
SmtpSsl
SmtpTls
SmtpTls
SmtpPort
SmtpPort
SmtpAccount
SmtpAccount
SmtpPassword
SmtpPassword
bugreport.mbr
bugreport.mbr
screenshot.png
screenshot.png
ExceptMsg
ExceptMsg
FrozenMsg
FrozenMsg
BitFaultMsg
BitFaultMsg
send bug report
send bug report
save bug report
save bug report
print bug report
print bug report
show bug report
show bug report
%appname%, %exceptMsg%
%appname%, %exceptMsg%
bug report
bug report
please find the bug report attached
please find the bug report attached
Sending bug report...
Sending bug report...
PrepAttMsg
PrepAttMsg
MxLookMsg
MxLookMsg
ConnMsg
ConnMsg
SendMailMsg
SendMailMsg
FieldMsg
FieldMsg
SendAttMsg
SendAttMsg
SendFinalMsg
SendFinalMsg
SendFailMsg
SendFailMsg
Sorry, sending the bug report didn't work.
Sorry, sending the bug report didn't work.
GetWindowsLogo
GetWindowsLogo
SetWindowsLogo
SetWindowsLogo
GetFilter1NoBugReport
GetFilter1NoBugReport
GetFilter2NoBugReport
GetFilter2NoBugReport
GetGeneralNoBugReport
GetGeneralNoBugReport
SetFilter1NoBugReport
SetFilter1NoBugReport
SetFilter2NoBugReport
SetFilter2NoBugReport
SetGeneralNoBugReport
SetGeneralNoBugReport
GetAutoShowBugReport
GetAutoShowBugReport
SetAutoShowBugReport
SetAutoShowBugReport
GetHttpServer
GetHttpServer
SetHttpServer
SetHttpServer
GetHttpSsl
GetHttpSsl
SetHttpSsl
SetHttpSsl
GetHttpPort
GetHttpPort
SetHttpPort
SetHttpPort
GetHttpAccount
GetHttpAccount
SetHttpAccount
SetHttpAccount
GetHttpPassword
GetHttpPassword
SetHttpPassword
SetHttpPassword
GetBugTrackerPassword
GetBugTrackerPassword
SetBugTrackerPassword
SetBugTrackerPassword
GetMailAsSmtpServer
GetMailAsSmtpServer
SetMailAsSmtpServer
SetMailAsSmtpServer
GetMailAsSmtpClient
GetMailAsSmtpClient
SetMailAsSmtpClient
SetMailAsSmtpClient
GetSmtpServer
GetSmtpServer
SetSmtpServer
SetSmtpServer
GetSmtpSsl
GetSmtpSsl
SetSmtpSsl
SetSmtpSsl
GetSmtpTls
GetSmtpTls
SetSmtpTls
SetSmtpTls
GetSmtpPort
GetSmtpPort
SetSmtpPort
SetSmtpPort
GetSmtpAccount
GetSmtpAccount
SetSmtpAccount
SetSmtpAccount
GetSmtpPassword
GetSmtpPassword
SetSmtpPassword
SetSmtpPassword
GetAttachBugReport
GetAttachBugReport
SetAttachBugReport
SetAttachBugReport
GetAttachBugReportFile
GetAttachBugReportFile
SetAttachBugReportFile
SetAttachBugReportFile
GetDeleteBugReportFile
GetDeleteBugReportFile
SetDeleteBugReportFile
SetDeleteBugReportFile
GetBugReportSendAs
GetBugReportSendAs
SetBugReportSendAs
SetBugReportSendAs
GetBugReportZip
GetBugReportZip
SetBugReportZip
SetBugReportZip
GetBugReportFile
GetBugReportFile
SetBugReportFile
SetBugReportFile
GetAppendBugReports
GetAppendBugReports
SetAppendBugReports
SetAppendBugReports
GetBugReportFileSize
GetBugReportFileSize
SetBugReportFileSize
SetBugReportFileSize
GetExceptMsg
GetExceptMsg
SetExceptMsg
SetExceptMsg
GetFrozenMsg
GetFrozenMsg
SetFrozenMsg
SetFrozenMsg
GetBitFaultMsg
GetBitFaultMsg
SetBitFaultMsg
SetBitFaultMsg
GetPrepareAttachMsg
GetPrepareAttachMsg
SetPrepareAttachMsg
SetPrepareAttachMsg
GetMxLookupMsg
GetMxLookupMsg
SetMxLookupMsg
SetMxLookupMsg
GetConnectMsg
GetConnectMsg
SetConnectMsg
SetConnectMsg
GetSendMailMsg
GetSendMailMsg
SetSendMailMsg
SetSendMailMsg
GetFieldsMsg
GetFieldsMsg
SetFieldsMsg
SetFieldsMsg
GetSendAttachMsg
GetSendAttachMsg
SetSendAttachMsg
SetSendAttachMsg
GetSendFinalizeMsg
GetSendFinalizeMsg
SetSendFinalizeMsg
SetSendFinalizeMsg
GetSendFailureMsg
GetSendFailureMsg
SetSendFailureMsg
SetSendFailureMsg
TDABugReportCallback
TDABugReportCallback
TDABugReportCallbackOO
TDABugReportCallbackOO
FBugReportHeader
FBugReportHeader
FBugReportSections
FBugReportSections
FBugReport
FBugReport
FBugReportCallbacks
FBugReportCallbacks
FBugReportCallbacksOO
FBugReportCallbacksOO
FCreateBugReport
FCreateBugReport
FCorrectBugReportNo
FCorrectBugReportNo
GetBugReportHeader
GetBugReportHeader
GetBugReportSections
GetBugReportSections
GetBugReport_
GetBugReport_
SetBugReport
SetBugReport
GetBugReport
GetBugReport
RegisterBugReportCallback
RegisterBugReportCallback
bugReportCallback
bugReportCallback
UnregisterBugReportCallback
UnregisterBugReportCallback
GetCreateBugReport
GetCreateBugReport
SetCreateBugReport
SetCreateBugReport
ShowBugReport
ShowBugReport
SendBugReport
SendBugReport
SaveBugReport
SaveBugReport
PrintBugReport
PrintBugReport
CompleteBugReport
CompleteBugReport
CriticalBugReportCallbackExists
CriticalBugReportCallbackExists
VVV.google.com
VVV.google.com
SMTP:
SMTP:
A.ROOT-SERVERS.NET
A.ROOT-SERVERS.NET
K.ROOT-SERVERS.NET
K.ROOT-SERVERS.NET
VVV.madshi.net_multipart_boundary
VVV.madshi.net_multipart_boundary
sbtPassResponse
sbtPassResponse
cSupportedAlgs
cSupportedAlgs
palgSupportedAlgs
palgSupportedAlgs
FTlsSupported
FTlsSupported
TSmtp
TSmtp
port
port
password
password
LOGIN
LOGIN
AUTH LOGIN
AUTH LOGIN
TWinHttpProxyInfo
TWinHttpProxyInfo
lpszProxyBypass
lpszProxyBypass
FUrl
FUrl
FPort
FPort
FBugTrackerPassword
FBugTrackerPassword
FHttpAuthUser
FHttpAuthUser
FHttpAuthPassword
FHttpAuthPassword
FProxyPassword
FProxyPassword
TWinHttp
TWinHttp
httpAuthUser
httpAuthUser
httpAuthPassword
httpAuthPassword
bugTrackerPassword
bugTrackerPassword
proxyBypass
proxyBypass
proxyPassword
proxyPassword
TWinHttp
TWinHttp
/api.xml
/api.xml
?cmd=
?cmd=
/xmlrpc.cgi
/xmlrpc.cgi
Bugzilla.version
Bugzilla.version
Product.get_enterable_products
Product.get_enterable_products
Product.get
Product.get
Bug.fields
Bug.fields
Bugzilla_login
Bugzilla_login
Bugzilla_password
Bugzilla_password
Bug.create
Bug.create
Bug.add_attachment
Bug.add_attachment
/api/soap/mantisconnect.php
/api/soap/mantisconnect.php
*.txt
*.txt
TSendBugReportExRec
TSendBugReportExRec
FDefaultMsgBox
FDefaultMsgBox
defaultMsgBox
defaultMsgBox
BugReportChanged
BugReportChanged
Uh.dk
Uh.dk
ServerSupportFunctionNext
ServerSupportFunctionNext
kernel32.dll
kernel32.dll
user32.dll
user32.dll
coreide150.bpl
coreide150.bpl
FaultRep.dll
FaultRep.dll
internal error. please notify bug@madshi.net
internal error. please notify bug@madshi.net
IWebBrowser
IWebBrowser
IWebBrowserApp
IWebBrowserApp
IWebBrowser2T'l
IWebBrowser2T'l
TWebBrowserStatusTextChange
TWebBrowserStatusTextChange
TWebBrowserProgressChange
TWebBrowserProgressChange
TWebBrowserCommandStateChange
TWebBrowserCommandStateChange
TWebBrowserTitleChange
TWebBrowserTitleChange
TWebBrowserPropertyChange
TWebBrowserPropertyChange
TWebBrowserBeforeNavigate2
TWebBrowserBeforeNavigate2
TWebBrowserNewWindow2
TWebBrowserNewWindow2
TWebBrowserNavigateComplete2
TWebBrowserNavigateComplete2
TWebBrowserDocumentComplete
TWebBrowserDocumentComplete
TWebBrowserOnVisible
TWebBrowserOnVisible
TWebBrowserOnToolBar
TWebBrowserOnToolBar
TWebBrowserOnMenuBar
TWebBrowserOnMenuBar
TWebBrowserOnStatusBar
TWebBrowserOnStatusBar
TWebBrowserOnFullScreen
TWebBrowserOnFullScreen
TWebBrowserOnTheaterMode
TWebBrowserOnTheaterMode
TWebBrowserWindowSetResizable
TWebBrowserWindowSetResizable
TWebBrowserWindowSetLeft
TWebBrowserWindowSetLeft
TWebBrowserWindowSetTop
TWebBrowserWindowSetTop
TWebBrowserWindowSetWidth
TWebBrowserWindowSetWidth
TWebBrowserWindowSetHeight
TWebBrowserWindowSetHeight
TWebBrowserWindowClosing
TWebBrowserWindowClosing
TWebBrowserClientToHostWindow
TWebBrowserClientToHostWindow
TWebBrowserSetSecureLockIcon
TWebBrowserSetSecureLockIcon
TWebBrowserFileDownload
TWebBrowserFileDownload
TWebBrowserNavigateError
TWebBrowserNavigateError
%TWebBrowserPrintTemplateInstantiation
%TWebBrowserPrintTemplateInstantiation
TWebBrowserPrintTemplateTeardown
TWebBrowserPrintTemplateTeardown
TWebBrowserUpdatePageStatus
TWebBrowserUpdatePageStatus
%TWebBrowserPrivacyImpactedStateChange
%TWebBrowserPrivacyImpactedStateChange
TWebBrowserNewWindow3
TWebBrowserNewWindow3
bstrUrlContext
bstrUrlContext
bstrUrl
bstrUrl
"TWebBrowserSetPhishingFilterStatus
"TWebBrowserSetPhishingFilterStatus
TWebBrowserWindowStateChanged
TWebBrowserWindowStateChanged
dwWindowStateFlags
dwWindowStateFlags
TWebBrowserNewProcess
TWebBrowserNewProcess
TWebBrowserThirdPartyUrlBlocked
TWebBrowserThirdPartyUrlBlocked
!TWebBrowserRedirectXDomainBlocked
!TWebBrowserRedirectXDomainBlocked
StartURL
StartURL
RedirectURL
RedirectURL
TWebBrowserBeforeScriptExecute
TWebBrowserBeforeScriptExecute
TWebBrowserWebWorkerStarted
TWebBrowserWebWorkerStarted
TWebBrowserWebWorkerFinsihed
TWebBrowserWebWorkerFinsihed
TWebBrowser
TWebBrowser
OnWindowSetResizable
OnWindowSetResizable
OnWindowSetLeftp1l
OnWindowSetLeftp1l
OnWindowSetTop
OnWindowSetTop
OnWindowSetWidthT2l
OnWindowSetWidthT2l
OnWindowSetHeight
OnWindowSetHeight
OnWindowStateChanged
OnWindowStateChanged
OnThirdPartyUrlBlocked\
OnThirdPartyUrlBlocked\
OnBeforeScriptExecute
OnBeforeScriptExecute
OnWebWorkerStarted
OnWebWorkerStarted
OnWebWorkerFinsihed
OnWebWorkerFinsihed
FormKeyDown
FormKeyDown
IdHTTP1
IdHTTP1
HTTPWorkBegin
HTTPWorkBegin
HTTPWork
HTTPWork
HTTPWorkEnd
HTTPWorkEnd
TIdTCPStream
TIdTCPStream
IdTCPStream
IdTCPStream
utNoTLSSupport
utNoTLSSupport
EIdTLSClientTLSNegCmdFailed
EIdTLSClientTLSNegCmdFailed
EIdSASLNotSupported
EIdSASLNotSupported
TIdSMTPEnhancedCode
TIdSMTPEnhancedCode
TIdSMTPEnhancedCode`
TIdSMTPEnhancedCode`
IdReplySMTP
IdReplySMTP
TIdReplySMTP
TIdReplySMTP
EIdSMTPReplyError
EIdSMTPReplyError
EIdSMTPReply
EIdSMTPReply
EIdSMTPReply|
EIdSMTPReply|
EIdSMTPReplyInvalidReplyString
EIdSMTPReplyInvalidReplyString
EIdSMTPReplyInvalidReplyString
EIdSMTPReplyInvalidReplyString
EIdSMTPReplyInvalidClass
EIdSMTPReplyInvalidClass
TIdSMTPFailedRecipient
TIdSMTPFailedRecipient
TIdSMTPBase
TIdSMTPBase
TIdSMTPBasel
TIdSMTPBasel
IdSMTPBase
IdSMTPBase
PipeLine
PipeLine
TIdSMTPAuthenticationType
TIdSMTPAuthenticationType
IdSMTP
IdSMTP
TIdSMTP
TIdSMTP
ValidateAuthLoginCapability
ValidateAuthLoginCapability
IdSMTP1
IdSMTP1
Driver.CoreDriverList
Driver.CoreDriverList
*TArray
*TArray
/TEnumerator(
/TEnumerator(
/TEnumerator
/TEnumerator
/TEnumerable-
/TEnumerable-
/TEnumerable
/TEnumerable
C:{Generics.Collections}TList.:1
C:{Generics.Collections}TList.:1
Driver.CoreDriverList(
Driver.CoreDriverList(
-IComparerh
-IComparerh
:TCollectionNotifyEvent
:TCollectionNotifyEvent
/IEnumerable
/IEnumerable
5TList.TEnumerator5
5TList.TEnumerator5
5TList.TEnumeratorT&o
5TList.TEnumeratorT&o
)TList&
)TList&
)TList
)TList
/TObjectList
/TObjectList
/TObjectList
/TObjectList
1TArray
1TArray
6TEnumerator(
6TEnumerator(
6TEnumerator
6TEnumerator
6TEnumerable-
6TEnumerable-
6TEnumerablet5o
6TEnumerablet5o
J:{Generics.Collections}TList.:1
J:{Generics.Collections}TList.:1
Driver.CoreDriverList o
Driver.CoreDriverList o
4IComparerh
4IComparerh
ATCollectionNotifyEvent
ATCollectionNotifyEvent
6IEnumerable
6IEnumerable
.TEnumerator5
.TEnumerator5
.TEnumerator
.TEnumerator
0TList&
0TList&
0TList
0TList
6TObjectList
6TObjectList
6TObjectListXDo
6TObjectListXDo
6TComparisonh
6TComparisonh
4TComparer2
4TComparer2
4TComparer
4TComparer
8TPair
8TPair
dTPair>
dTPair>
TArray>>
TArray>>
TEnumerator>>(
TEnumerator>>(
TEnumerator>>
TEnumerator>>
TEnumerable>>-
TEnumerable>>-
TEnumerable>>
TEnumerable>>
oTDictionary>.TItem
oTDictionary>.TItem
tTDictionary>.TItemArray
tTDictionary>.TItemArray
!IEqualityComparerh
!IEqualityComparerh
&TCollectionNotifyEvent
&TCollectionNotifyEvent
fTCollectionNotifyEvent>
fTCollectionNotifyEvent>
Item8TPair
Item8TPair
TArray
TArray
TEnumerator(
TEnumerator(
TEnumerator
TEnumerator
TEnumerable-
TEnumerable-
TEnumerable
TEnumerable
xTDictionary>.TKeyEnumerator;
xTDictionary>.TKeyEnumerator;
xTDictionary>.TKeyEnumerator8
xTDictionary>.TKeyEnumerator8
xTDictionary>.TKeyCollection;
xTDictionary>.TKeyCollection;
xTDictionary>.TKeyCollection
xTDictionary>.TKeyCollection
VTArray>
VTArray>
[TEnumerator>(
[TEnumerator>(
[TEnumerator>
[TEnumerator>
[TEnumerable>-
[TEnumerable>-
[TEnumerable>
[TEnumerable>
zTDictionary>.TValueEnumerator;
zTDictionary>.TValueEnumerator;
zTDictionary>.TValueEnumerator
zTDictionary>.TValueEnumerator
zTDictionary>.TValueCollection;
zTDictionary>.TValueCollection;
zTDictionary>.TValueCollection,
zTDictionary>.TValueCollection,
yTDictionary>.TPairEnumerator;
yTDictionary>.TPairEnumerator;
yTDictionary>.TPairEnumerator
yTDictionary>.TPairEnumerator
iTDictionary>9
iTDictionary>9
iTDictionary>
iTDictionary>
OnKeyNotify,
OnKeyNotify,
/TComparisonh
/TComparisonh
-TComparer2
-TComparer2
-TComparerH
-TComparerH
C:{Generics.Collections}TList.:3
C:{Generics.Collections}TList.:3
J:{Generics.Collections}TList.:3
J:{Generics.Collections}TList.:3
=TDelegatedComparer8
=TDelegatedComparer8
=TDelegatedComparer
=TDelegatedComparer
:{Generics.Collections}TList>>.:1
:{Generics.Collections}TList>>.:1
Driver.CoreDriverList|yo
Driver.CoreDriverList|yo
IComparer>>h
IComparer>>h
TCollectionNotifyEvent>>
TCollectionNotifyEvent>>
ItemdTPair>
ItemdTPair>
IEnumerable>>
IEnumerable>>
TList>>.TEnumerator5
TList>>.TEnumerator5
TList>>.TEnumeratorh
TList>>.TEnumeratorh
TList>>&
TList>>&
TList>>
TList>>
/:{Generics.Collections}TList.:1
/:{Generics.Collections}TList.:1
IComparerh
IComparerh
IEnumerable
IEnumerable
!TList.TEnumerator5
!TList.TEnumerator5
!TList.TEnumerator
!TList.TEnumerator
TList&
TList&
TList
TList
o:{Generics.Collections}TList>.:1
o:{Generics.Collections}TList>.:1
YIComparer>h
YIComparer>h
[IEnumerable>
[IEnumerable>
aTList>.TEnumerator5
aTList>.TEnumerator5
aTList>.TEnumerator
aTList>.TEnumerator
UTList>&
UTList>&
UTList>
UTList>
TComparison>>h
TComparison>>h
TComparer>>2
TComparer>>2
TComparer>>
TComparer>>
:{Generics.Collections}TList>>.:3
:{Generics.Collections}TList>>.:3
TComparisonh
TComparisonh
TComparer2
TComparer2
TComparer
TComparer
/:{Generics.Collections}TList.:3
/:{Generics.Collections}TList.:3
[TComparison>h
[TComparison>h
YTComparer>2
YTComparer>2
YTComparer>
YTComparer>
o:{Generics.Collections}TList>.:3
o:{Generics.Collections}TList>.:3
Common.Internet
Common.Internet
TfrmCheckURL
TfrmCheckURL
URLChecker
URLChecker
IdHTTP0x
IdHTTP0x
IdHTTP11|
IdHTTP11|
btnCheckURL
btnCheckURL
HTTP0Work
HTTP0Work
HTTP0Work2
HTTP0Work2
HTTP1Start
HTTP1Start
HTTP2Start
HTTP2Start
HTTP3Start
HTTP3Start
HTTP4Start
HTTP4Start
HTTP5Start
HTTP5Start
HTTP1Work
HTTP1Work
HTTP2Work
HTTP2Work
HTTP3Work
HTTP3Work
HTTP4Work
HTTP4Work
HTTP5Work
HTTP5Work
InstallExeDriver
InstallExeDriver
actDebugExecute
actDebugExecute
btnCheckURLClick
btnCheckURLClick
UrlMon
UrlMon
Common.Params
Common.Params
Driver.Utils
Driver.Utils
Common.Utils
Common.Utils
Driver.CoreDevices
Driver.CoreDevices
Driver.CoreDevicesHelpers
Driver.CoreDevicesHelpers
SQLite3
SQLite3
IdTCPServer
IdTCPServer
IdCustomTCPServer
IdCustomTCPServer
Common.RestorePoint
Common.RestorePoint
JwaWS2tcpip
JwaWS2tcpip
JwaIpExport
JwaIpExport
IdCmdTCPServer
IdCmdTCPServer
1.2.3
1.2.3
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%
P%S%V%Y%\%
P%S%V%Y%\%
6666666666666666
6666666666666666
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
0123456
0123456
!"#$%&'()* ,-./0123456789:;?
!"#$%&'()* ,-./0123456789:;?
&'()* ,-./0123456789:;?
&'()* ,-./0123456789:;?
oleaut32.dll
oleaut32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
SetKeyboardState
SetKeyboardState
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
MapVirtualKeyW
MapVirtualKeyW
LoadKeyboardLayoutW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextW
GetKeyNameTextW
GetAsyncKeyState
GetAsyncKeyState
ExitWindowsEx
ExitWindowsEx
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
EnumChildWindows
EnumChildWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
msimg32.dll
msimg32.dll
gdi32.dll
gdi32.dll
SetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
version.dll
version.dll
WinExec
WinExec
GetWindowsDirectoryA
GetWindowsDirectoryA
GetWindowsDirectoryW
GetWindowsDirectoryW
GetCPInfoExW
GetCPInfoExW
GetCPInfo
GetCPInfo
CreatePipe
CreatePipe
RegQueryInfoKeyW
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyExA
RegFlushKey
RegFlushKey
RegEnumKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyExW
SHFolder.dll
SHFolder.dll
ole32.dll
ole32.dll
comctl32.dll
comctl32.dll
SHFileOperationA
SHFileOperationA
SHFileOperationW
SHFileOperationW
ShellExecuteExA
ShellExecuteExA
ShellExecuteExW
ShellExecuteExW
ShellExecuteA
ShellExecuteA
ShellExecuteW
ShellExecuteW
wininet.dll
wininet.dll
HttpSendRequestW
HttpSendRequestW
HttpQueryInfoW
HttpQueryInfoW
HttpOpenRequestW
HttpOpenRequestW
comdlg32.dll
comdlg32.dll
oleacc.dll
oleacc.dll
sqlite3.dll
sqlite3.dll
sqlite3_finalize
sqlite3_finalize
sqlite3_column_type
sqlite3_column_type
sqlite3_column_text
sqlite3_column_text
sqlite3_column_int
sqlite3_column_int
sqlite3_column_double
sqlite3_column_double
sqlite3_column_bytes
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_column_blob
sqlite3_step
sqlite3_step
sqlite3_column_decltype
sqlite3_column_decltype
sqlite3_column_name
sqlite3_column_name
sqlite3_column_count
sqlite3_column_count
sqlite3_prepare
sqlite3_prepare
sqlite3_free
sqlite3_free
sqlite3_errcode
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg
sqlite3_close
sqlite3_close
sqlite3_open
sqlite3_open
winmm.dll
winmm.dll
ntdll.dll
ntdll.dll
wsock32.dll
wsock32.dll
windowscodecs.dll
windowscodecs.dll
uxtheme.dll
uxtheme.dll
DWMAPI.DLL
DWMAPI.DLL
MainProgram.exe
MainProgram.exe
1$1$0,0004080
1$1$0,0004080
7#7'7 7/73777
7#7'7 7/73777
5S5F5c5q5
5S5F5c5q5
3
0#0*01090\0
11n1x1
4M4]4{4
6l6K6O6c6k6o6
> >$>(>,>??
5 55595_5
:":):0:7:@:\:
4L4O4i4
6-6S6Z6a6h6o6v6}6
969>9\9|9
6$6 626:6\6~6
8#8'8 8/838
!0%0)0-01050G0U0a0p0}0
89:&11D1]1l1>!>&> >0>5>;>3%4U4z4"0&0*0.02060:0263C39"9*9/99900C0T0c0p09Å“9a9979:&: :0:?:}:333F3`3w37.73787@70 0$0(0.03L4R4h42#3(3-3U3}39!9)919991>1 2)2]23#3-353:3?32!2-242921!2 252\2{37$70777;&;2;9;>;_;0 1:1?1\16 6$6(6,60670949896 7$747873333333333333333333333383333333393333333333333338:*"*"$333833333333333333333333333333333333333333833338?383333333333333:*3:"$3338333333333333333@000///1111*$&paint.net 4.0;!.WE/4.IDAThC.pIDIPaint.NET v3.5.100.DFFrPaint.NET v3.5.11GxyT%U5F.VR=UN.EN.Wj.zY}0(*.pwpm%C\rlRt%DMMPegg.UjF|jFbZzbj%cPn:7:5221>8=gOÃe%XzVSoMxh.FGt.ESZH'pK.kf]Q.Xpegr%SKIH.uuu.nl#]cS-4IP%u5;1% >)#6!-*6%{:%9.;Q.tHJJ\nmr.M2.Mb67-'7-&5.$5,&|^}eeA%u4/%7.&5,%w.WMlWG,.gr@70".0*>2)#&9;6)'130,*6>52-)"'>4#2)!%1&%)1.!!$KU%uM52214652x~~avv.tU.vqI18k...ii)KWindowsCGenerics.Defaults#IdSMTPIdSMTPBaseIdTCPServerfJwaIpExporteCommon.LoggerWindow}Common.ParamsoDriver.UtilsCCommon.UtilsbDriver.CoreSnapshot]Driver.CoreDevices0IdHTTPHeaderInfo?1)19%)%%d;%%%Ccg.BrFont.CharsetFont.ColorFont.HeightFont.NameFont.StyleAll windowsCheck URL%Select the drivers you wish to backupEditManager.Font.CharsetEditManager.Font.ColorEditManager.Font.HeightEditManager.Font.NameEditManager.Font.StyleGroupFont.CharsetGroupFont.ColorGroupFont.HeightGroupFont.NameGroupFont.StyleHeader.Columns.ItemsHeader.Font.CharsetHeader.Font.ColorHeader.Font.HeightHeader.Font.NameHeader.Font.StyleHeader.HeightImageList1)PaintInfoGroup.MarginBottom.CaptionIndentSelection.FullRowSelect%Driver backup successfully completed!%Select name, location and backup typeItems.StringsGroups.Items$Product information and support linkSupportSupport:Register %sVersion: %sHeader.ShowInAllViewsHeader.VisiblePaintInfoGroup.Expandable)PaintInfoGroup.MarginBottom.CaptionIndent%Save downloded drivers to this folderLoginWelcome to %sWebcam driversWindows system driversKeyboard driversPicture.Data%s foundTIdHTTPIdHTTP11ProxyParams.BasicAuthenticationProxyParams.ProxyPortRequest.CharSetRequest.ContentLengthRequest.ContentRangeEndRequest.ContentRangeStart"Request.ContentRangeInstanceLengthRequest.ContentTypeRequest.AcceptRequest.BasicAuthenticationRequest.UserAgent&Mozilla/3.0 (compatible; Indy Library)Request.Ranges.UnitsRequest.RangesHTTPOptionsIdHTTP0.NN outdated drivers have been found on your PC"Would you like to register %s now?FTo immediately download and fix these drivers you need to register %s.Do you have a License Key?License key]If you already have a License Key, please enter it in the form below and click "Activate Now"Do you need a License Key?.To purchase %s and obtain a license key clickYCheck the email you received after you purchased the product for the correct license key.&Your license key will look like this:'The license key you entered is for %s.>%s is a separate product and requires a different license key.to purchase %s.BWe NOT reccomend your use this driver for current Windows version.Current Windows version:Backuped driver Windows version:"Report a problem with a new driverThank you for trying %s!xYour feedback is very valuable and will help us create better products. Please let us know why you did not register %s:,%s did not find the driver I was looking forfrmCheckURL.Would you like to renew your subscription now?UTo immediately download and fix these drivers you need to renew your %s subscription.,Your %s subscription will expire in NN days.name="program.exe"name="Microsoft.Windows.Common-Controls"version="6.0.0.0"publicKeyToken="6595b64144ccf1df"MSWHEEL_ROLLMSGMSH_WHEELSUPPORT_MSGMSH_SCROLL_LINES_MSGPSAPI.dllNTDLL.DLL%s-%s%s[%d]%s_%d.Owner\\?\UNC\HKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINEHKEY_USERSHKEY_PERFORMANCE_DATAHKEY_CURRENT_CONFIGHKEY_DYN_DATASOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutesTaskDialogIndirectcrSQLWait%s (%s)imm32.dll\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\clWebSnowclWebFloralWhiteclWebLavenderBlushclWebOldLaceclWebIvoryclWebCornSilkclWebBeigeclWebAntiqueWhiteclWebWheatclWebAliceBlueclWebGhostWhiteclWebLavenderclWebSeashellclWebLightYellowclWebPapayaWhipclWebNavajoWhiteclWebMoccasinclWebBurlywoodclWebAzureclWebMintcreamclWebHoneydewclWebLinenclWebLemonChiffonclWebBlanchedAlmondclWebBisqueclWebPeachPuffclWebTanclWebYellowclWebDarkOrangeclWebRedclWebDarkRedclWebMaroonclWebIndianRedclWebSalmonclWebCoralclWebGoldclWebTomatoclWebCrimsonclWebBrownclWebChocolateclWebSandyBrownclWebLightSalmonclWebLightCoralclWebOrangeclWebOrangeRedclWebFirebrickclWebSaddleBrownclWebSiennaclWebPeruclWebDarkSalmonclWebRosyBrownclWebPaleGoldenrodclWebLightGoldenrodYellowclWebOliveclWebForestGreenclWebGreenYellowclWebChartreuseclWebLightGreenclWebAquamarineclWebSeaGreenclWebGoldenRodclWebKhakiclWebOliveDrabclWebGreenclWebYellowGreenclWebLawnGreenclWebPaleGreenclWebMediumAquamarineclWebMediumSeaGreenclWebDarkGoldenRodclWebDarkKhakiclWebDarkOliveGreenclWebDarkgreenclWebLimeGreenclWebLimeclWebSpringGreenclWebMediumSpringGreenclWebDarkSeaGreenclWebLightSeaGreenclWebPaleTurquoiseclWebLightCyanclWebLightBlueclWebLightSkyBlueclWebCornFlowerBlueclWebDarkBlueclWebIndigoclWebMediumTurquoiseclWebTurquoiseclWebCyanclWebPowderBlueclWebSkyBlueclWebRoyalBlueclWebMediumBlueclWebMidnightBlueclWebDarkTurquoiseclWebCadetBlueclWebDarkCyanclWebTealclWebDeepskyBlueclWebDodgerBlueclWebBlueclWebNavyclWebDarkVioletclWebDarkOrchidclWebMagentaclWebDarkMagentaclWebMediumVioletRedclWebPaleVioletRedclWebBlueVioletclWebMediumOrchidclWebMediumPurpleclWebPurpleclWebDeepPinkclWebLightPinkclWebVioletclWebOrchidclWebPlumclWebThistleclWebHotPinkclWebPinkclWebLightSteelBlueclWebMediumSlateBlueclWebLightSlateGrayclWebWhiteclWebLightgreyclWebGrayclWebSteelBlueclWebSlateBlueclWebSlateGrayclWebWhiteSmokeclWebSilverclWebDimGrayclWebMistyRoseclWebDarkSlateBlueclWebDarkSlategrayclWebGainsboroclWebDarkGrayclWebBlackItems.ItemData%s%s%s%s%s%s%s%s%s%sSystem\CurrentControlSet\Control\Keyboard Layouts\%.8x%s, ClassID: %s%s, ProgID: "%s"WNNC_NET_FTP_NFSPIDLs to operate on are not siblings of the Namespace doing the operation.olepro32.dll\\.\vwin32Unable to find RegSvr32.exe executable.RegSvr32.exeRegOpenKeyW%s, %.2d %s %.4d %s %s%s, %.2d%s%s%s%.4d %s %s%s, %d %s %d %s %sISO_646.irv:1991ISO_646.basic:1983ISO_646.irv:1983csISO16PortuguesecsISO84Portuguese2windows-936csShiftJISwindows-874ISO-8859-1-Windows-3.0-Latin-1csWindows30Latin1ISO-8859-1-Windows-3.1-Latin-1csWindows31Latin1ISO-8859-2-Windows-Latin-2csWindows31Latin2ISO-8859-9-Windows-Latin-5csWindows31Latin5csMicrosoftPublishingWindows-31JcsWindows31JPTCP154csPTCP154windows-1250windows-1251windows-1252windows-1253windows-1254windows-1255windows-1256windows-1257windows-1258WS2_32.DLLgetservbyportWSAAsyncGetServByPortWSAJoinLeafMSWSOCK.DLLWSARecvMsgWSASendMsgWship6.dllFwpuclnt.dllIdnDL.dllNormaliz.dlliphlpapi.dll0.0.0.0127.0.0.10123456789!"#$%&'()* ,-./;?@[\]^_`{|}~.nml=animation/narrative.aac=audio/mp4.aif=audio/x-aiff.aifc=audio/x-aiff.aiff=audio/x-aiff.au=audio/basic.gsm=audio/x-gsm.kar=audio/midi.m3u=audio/mpegurl.mid=audio/midi.midi=audio/midi.mpega=audio/x-mpg.mp2=audio/x-mpg.mp3=audio/x-mpg.mpga=audio/x-mpg.m3u=audio/x-mpegurl.pls=audio/x-scpls.qcp=audio/vnd.qcelp.ra=audio/x-realaudio.ram=audio/x-pn-realaudio.rm=audio/x-pn-realaudio.sd2=audio/x-sd2.sid=audio/prs.sid.snd=audio/basic.wav=audio/x-wav.wax=audio/x-ms-wax.wma=audio/x-ms-wma.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile.art=image/x-jg.bmp=image/bmp.cdr=image/x-coreldraw.cdt=image/x-coreldrawtemplate.cpt=image/x-corelphotopaint.djv=image/vnd.djvu.djvu=image/vnd.djvu.gif=image/gif.ief=image/ief.ico=image/x-icon.jng=image/x-jng.jpg=image/jpeg.jpeg=image/jpeg.jpe=image/jpeg.pat=image/x-coreldrawpattern.pcx=image/pcx.pbm=image/x-portable-bitmap.pgm=image/x-portable-graymap.pict=image/x-pict.png=image/x-png.pnm=image/x-portable-anymap.pntg=image/x-macpaint.ppm=image/x-portable-pixmap.psd=image/x-psd.qtif=image/x-quicktime.ras=image/x-cmu-raster.rf=image/vnd.rn-realflash.rgb=image/x-rgb.rp=image/vnd.rn-realpix.sgi=image/x-sgi.svg=image/svg xml.svgz=image/svg xml.targa=image/x-targa.tif=image/x-tiff.wbmp=image/vnd.wap.wbmp.webp=image/webp.xbm=image/xbm.xbm=image/x-xbitmap.xpm=image/x-xpixmap.xwd=image/x-xwindowdump.xml=text/xml.uls=text/iuls.txt=text/plain.rtx=text/richtext.wsc=text/scriptlet.rt=text/vnd.rn-realtext.htt=text/webviewhtml.htc=text/x-component.vcf=text/x-vcard.asf=video/x-ms-asf.asx=video/x-ms-asf.avi=video/x-msvideo.dl=video/dl.dv=video/dv.flc=video/flc.fli=video/fli.gl=video/gl.lsf=video/x-la-asf.lsx=video/x-la-asf.mng=video/x-mng.mp2=video/mpeg.mp3=video/mpeg.mp4=video/mpeg.mpeg=video/x-mpeg2a.mpa=video/mpeg.mpe=video/mpeg.mpg=video/mpeg.ogv=video/ogg.moov=video/quicktime.mov=video/quicktime.mxu=video/vnd.mpegurl.qt=video/quicktime.qtc=video/x-qtc.rv=video/vnd.rn-realvideo.ivf=video/x-ivf.webm=video/webm.wm=video/x-ms-wm.wmp=video/x-ms-wmp.wmv=video/x-ms-wmv.wmx=video/x-ms-wmx.wvx=video/x-ms-wvx.rms=video/vnd.rn-realvideo-secure.asx=video/x-ms-asf-plugin.movie=video/x-sgi-movie.aab=application/x-authorware-bin.aam=application/x-authorware-map.aas=application/x-authorware-seg.abw=application/x-abiword.ace=application/x-ace-compressed.ai=application/postscript.alz=application/x-alz-compressed.ani=application/x-navi-animation.arj=application/x-arj.asf=application/vnd.ms-asf.bat=application/x-msdos-program.bcpio=application/x-bcpio.boz=application/x-bzip2.bz=application/x-bzip.bz2=application/x-bzip2.cab=application/vnd.ms-cab-compressed.cat=application/vnd.ms-pki.seccat.ccn=application/x-cnc.cco=application/x-cocoa.cdf=application/x-cdf.cer=application/x-x509-ca-cert.chm=application/vnd.ms-htmlhelp.chrt=application/vnd.kde.kchart.cil=application/vnd.ms-artgalry.class=application/java-vm.com=application/x-msdos-program.clp=application/x-msclip.cpio=application/x-cpio.cpt=application/mac-compactpro.cqk=application/x-calquick.crd=application/x-mscardfile.crl=application/pkix-crl.csh=application/x-csh.dar=application/x-dar.dbf=application/x-dbase.dcr=application/x-director.deb=application/x-debian-package.dir=application/x-director.dist=vnd.apple.installer xml.distz=vnd.apple.installer xml.dll=application/x-msdos-program.dmg=application/x-apple-diskimage.doc=application/msword.dot=application/msword.dvi=application/x-dvi.dxr=application/x-director.ebk=application/x-expandedbook.eps=application/postscript.evy=application/envoy.exe=application/x-msdos-program.fdf=application/vnd.fdf.fif=application/fractals.flm=application/vnd.kde.kivio.fml=application/x-file-mirror-list.gzip=application/x-gzip.gnumeric=application/x-gnumeric.gtar=application/x-gtar.gz=application/x-gzip.hdf=application/x-hdf.hlp=application/winhlp.hpf=application/x-icq-hpf.hqx=application/mac-binhex40.hta=application/hta.ims=application/vnd.ms-ims.ins=application/x-internet-signup.iii=application/x-iphone.iso=application/x-iso9660-image.jar=application/java-archive.karbon=application/vnd.kde.karbon.kfo=application/vnd.kde.kformula.kon=application/vnd.kde.kontour.kpr=application/vnd.kde.kpresenter.kpt=application/vnd.kde.kpresenter.kwd=application/vnd.kde.kword.kwt=application/vnd.kde.kword.latex=application/x-latex.lha=application/x-lzh.lcc=application/fastman.lrm=application/vnd.ms-lrm.lz=application/x-lzip.lzh=application/x-lzh.lzma=application/x-lzma.lzo=application/x-lzop.lzx=application/x-lzx.mpp=application/vnd.ms-project.mvb=application/x-msmediaview.man=application/x-troff-man.mdb=application/x-msaccess.me=application/x-troff-me.ms=application/x-troff-ms.msi=application/x-msi.mpkg=vnd.apple.installer xml.mny=application/x-msmoney.nix=application/x-mix-transfer.oda=application/oda.odb=application/vnd.oasis.opendocument.database.odc=application/vnd.oasis.opendocument.chart.odf=application/vnd.oasis.opendocument.formula.odg=application/vnd.oasis.opendocument.graphics.odi=application/vnd.oasis.opendocument.image.odm=application/vnd.oasis.opendocument.text-master.odp=application/vnd.oasis.opendocument.presentation.ods=application/vnd.oasis.opendocument.spreadsheet.ogg=application/ogg.odt=application/vnd.oasis.opendocument.text.otg=application/vnd.oasis.opendocument.graphics-template.oth=application/vnd.oasis.opendocument.text-web.otp=application/vnd.oasis.opendocument.presentation-template.ots=application/vnd.oasis.opendocument.spreadsheet-template.ott=application/vnd.oasis.opendocument.text-template.p7b=application/x-pkcs7-certificates.p7r=application/x-pkcs7-certreqresp.package=application/vnd.autopackage.pfr=application/font-tdpfr.pkg=vnd.apple.installer xml.pdf=application/pdf.pko=application/vnd.ms-pki.pko.pl=application/x-perl.pnq=application/x-icq-pnq.pot=application/mspowerpoint.pps=application/mspowerpoint.ppt=application/mspowerpoint.ppz=application/mspowerpoint.ps=application/postscript.pub=application/x-mspublisher.qpw=application/x-quattropro.qtl=application/x-quicktimeplayer.rar=application/rar.rdf=application/rdf xml.rjs=application/vnd.rn-realsystem-rjs.rm=application/vnd.rn-realmedia.rmf=application/vnd.rmf.rmp=application/vnd.rn-rn_music_package.rmx=application/vnd.rn-realsystem-rmx.rnx=application/vnd.rn-realplayer.rpm=application/x-redhat-package-manager.rsml=application/vnd.rn-rsml.rtsp=application/x-rtsp.rss=application/rss xml.scm=application/x-icq-scm.ser=application/java-serialized-object.scd=application/x-msschedule.sda=application/vnd.stardivision.draw.sdc=application/vnd.stardivision.calc.sdd=application/vnd.stardivision.impress.sdp=application/x-sdp.setpay=application/set-payment-initiation.setreg=application/set-registration-initiation.sh=application/x-sh.shar=application/x-shar.shw=application/presentations.sit=application/x-stuffit.sitx=application/x-stuffitx.skd=application/x-koan.skm=application/x-koan.skp=application/x-koan.skt=application/x-koan.smf=application/vnd.stardivision.math.smi=application/smil.smil=application/smil.spl=application/futuresplash.ssm=application/streamingmedia.sst=application/vnd.ms-pki.certstore.stc=application/vnd.sun.xml.calc.template.std=application/vnd.sun.xml.draw.template.sti=application/vnd.sun.xml.impress.template.stl=application/vnd.ms-pki.stl.stw=application/vnd.sun.xml.writer.template.svi=application/softvision.sv4cpio=application/x-sv4cpio.sv4crc=application/x-sv4crc.swf=application/x-shockwave-flash.swf1=application/x-shockwave-flash.sxc=application/vnd.sun.xml.calc.sxi=application/vnd.sun.xml.impress.sxm=application/vnd.sun.xml.math.sxw=application/vnd.sun.xml.writer.sxg=application/vnd.sun.xml.writer.global.tar=application/x-tar.tcl=application/x-tcl.tex=application/x-tex.texi=application/x-texinfo.texinfo=application/x-texinfo.tbz=application/x-bzip-compressed-tar.tbz2=application/x-bzip-compressed-tar.tgz=application/x-compressed-tar.tlz=application/x-lzma-compressed-tar.tr=application/x-troff.trm=application/x-msterminal.troff=application/x-troff.tsp=application/dsptype.torrent=application/x-bittorrent.ttz=application/t-time.txz=application/x-xz-compressed-tar.udeb=application/x-debian-package.uin=application/x-icq.urls=application/x-url-list.ustar=application/x-ustar.vcd=application/x-cdlink.vor=application/vnd.stardivision.writer.vsl=application/x-cnet-vsl.wcm=application/vnd.ms-works.wb1=application/x-quattropro.wb2=application/x-quattropro.wb3=application/x-quattropro.wdb=application/vnd.ms-works.wks=application/vnd.ms-works.wmd=application/x-ms-wmd.wms=application/x-ms-wms.wmz=application/x-ms-wmz.wp5=application/wordperfect5.1.wpd=application/wordperfect.wpl=application/vnd.ms-wpl.wps=application/vnd.ms-works.wri=application/x-mswrite.xfdf=application/vnd.adobe.xfdf.xls=application/x-msexcel.xlb=application/x-msexcel.xpi=application/x-xpinstall.xps=application/vnd.ms-xpsdocument.xsd=application/vnd.sun.xml.draw.xul=application/vnd.mozilla.xul xml.zoo=application/x-zoo.zip=application/x-zip-compressed.wml=text/vnd.wap.wml.wmlc=application/vnd.wap.wmlc.wmls=text/vnd.wap.wmlscript.wmlsc=application/vnd.wap.wmlscriptc.asm=text/x-asm.pas=text/x-pascal.cs=text/x-csharp.cpp=text/x-c src.cxx=text/x-c src.cc=text/x-c src.hpp=text/x-c hdr.hxx=text/x-c hdr.hh=text/x-c hdr.java=text/x-java.css=text/css.js=text/javascript.htm=text/html.html=text/html.xhtml=application/xhtml xml.xht=application/xhtml xml.ls=text/javascript.mocha=text/javascript.shtml=server-parsed-html.sgm=text/sgml.sgml=text/sgml.mht=message/rfc822HTTP-EQUIV()@,;:\"./()@,;:\"/[]?=()@,;:\"/[]?={}*#%"{}|\^[]`*#%"{}|\^[]`HTTPSFailed to open database "%s" : %sFailed to open database "%s" : unknown error"%s" : %sError executing SQLCould not prepare SQL statementError executing SQL statementselect [sql] from sqlite_master where [type] = 'table' and lower(name) = 'SQLite is Busyinvalid zipfileShell.Applicationinvalid sourceinvalid target folder%s (%d/%d)A Port is required0.0.0.1Mozilla/3.0 (compatible; Indy Library)X-HTTP-Method-Override%d-%dhttpsHttpOnlyHTTPONLY=HTTPONLYWINDOWS()[]:;.,@\"%sContent-Disposition: form-data; name="%s"; filename="%s"Content-Type: %s; charset="%s"Content-Transfer-Encoding: %slibeay32.dllssleay32.dlllibssl32.dllSSL_CTX_use_PrivateKey_fileSSL_CTX_use_PrivateKeySSL_CTX_use_certificateSSL_CTX_use_certificate_fileSSL_CTX_use_certificate_chain_fileSSL_get_peer_certificateSSL_CTX_set_default_passwd_cbSSL_CTX_set_default_passwd_cb_userdataSSL_CTX_check_private_keyX509_STORE_add_certX509_STORE_CTX_get_current_certi2d_DSAPrivateKeyd2i_DSAPrivateKeyd2i_PrivateKeyd2i_PrivateKey_bioDES_set_key_ossl_old_des_set_keyRSA_generate_key_exRSA_generate_keyRSA_check_keyi2d_PrivateKey_bioi2d_RSAPrivateKeyd2i_RSAPrivateKeyi2d_RSAPublicKeyd2i_RSAPublicKeyi2d_PrivateKeyi2d_NETSCAPE_CERT_SEQUENCEX509_get_default_cert_fileX509_get_default_cert_file_envX509_set_pubkeyX509_REQ_set_pubkeyX509_PUBKEY_getPEM_read_bio_RSAPrivateKeyPEM_read_bio_RSAPublicKeyPEM_read_bio_DSAPrivateKeyPEM_read_bio_PrivateKeyPEM_read_bio_NETSCAPE_CERT_SEQUENCEPEM_write_bio_RSAPrivateKeyPEM_write_bio_RSAPublicKeyPEM_write_bio_DSAPrivateKeyPEM_write_bio_PrivateKeyPEM_write_bio_NETSCAPE_CERT_SEQUENCEPEM_write_bio_PKCS8PrivateKeyEVP_CIPHER_CTX_set_key_lengthEVP_CIPHER_CTX_rand_keyEVP_PKEY_typeEVP_PKEY_newEVP_PKEY_freeEVP_PKEY_assignEVP_CIPHER_key_lengthEVP_CIPHER_CTX_key_lengthEVP_PKEY_decrypt_oldEVP_PKEY_encrypt_oldEVP_PKEY_idEVP_PKEY_base_idEVP_PKEY_bitsEVP_PKEY_sizeEVP_PKEY_set_typeEVP_PKEY_set_type_strEVP_PKEY_get0EVP_PKEY_set1_RSAEVP_PKEY_get1_RSAEVP_PKEY_set1_DSAEVP_PKEY_get1_DSAEVP_PKEY_set1_DHEVP_PKEY_get1_DHEVP_PKEY_set1_EC_KEYEVP_PKEY_get1_EC_KEYd2i_PublicKeyi2d_PublicKeyd2i_AutoPrivateKeyEVP_PKEY_copy_parametersEVP_PKEY_missing_parametersEVP_PKEY_save_parametersEVP_PKEY_cmp_parametersEVP_PKEY_cmpEVP_PKEY_print_publicEVP_PKEY_print_privateEVP_PKEY_print_paramsEVP_PKEY_get_default_digest_nidPKCS5_PBE_keyivgenPKCS5_v2_PBE_keyivgenEVP_PKEY_asn1_get_countEVP_PKEY_asn1_get0EVP_PKEY_asn1_findEVP_PKEY_asn1_find_strEVP_PKEY_asn1_add0EVP_PKEY_asn1_add_aliasEVP_PKEY_asn1_get0_infoEVP_PKEY_get0_asn1EVP_PKEY_asn1_newEVP_PKEY_asn1_copyEVP_PKEY_asn1_freeEVP_PKEY_asn1_set_publicEVP_PKEY_asn1_set_privateEVP_PKEY_asn1_set_paramEVP_PKEY_asn1_set_freeEVP_PKEY_asn1_set_ctrlEVP_PKEY_meth_findEVP_PKEY_meth_newEVP_PKEY_meth_get0_infoEVP_PKEY_meth_copyEVP_PKEY_meth_freeEVP_PKEY_meth_add0EVP_PKEY_CTX_newEVP_PKEY_CTX_new_idEVP_PKEY_CTX_dupEVP_PKEY_CTX_freeEVP_PKEY_CTX_ctrlEVP_PKEY_CTX_ctrl_strEVP_PKEY_CTX_get_operationEVP_PKEY_CTX_set0_keygen_infoEVP_PKEY_new_mac_keyEVP_PKEY_CTX_set_dataEVP_PKEY_CTX_get_dataEVP_PKEY_CTX_get0_pkeyEVP_PKEY_CTX_get0_peerkeyEVP_PKEY_CTX_set_app_dataEVP_PKEY_CTX_get_app_dataEVP_PKEY_sign_initEVP_PKEY_signEVP_PKEY_verify_initEVP_PKEY_verifyEVP_PKEY_verify_recover_initEVP_PKEY_verify_recoverEVP_PKEY_encrypt_initEVP_PKEY_encryptEVP_PKEY_decrypt_initEVP_PKEY_decryptEVP_PKEY_derive_initEVP_PKEY_derive_set_peerEVP_PKEY_deriveEVP_PKEY_paramgen_initEVP_PKEY_paramgenEVP_PKEY_keygen_initEVP_PKEY_keygenEVP_PKEY_CTX_set_cbEVP_PKEY_CTX_get_cbEVP_PKEY_CTX_get_keygen_infoEVP_PKEY_meth_set_initEVP_PKEY_meth_set_copyEVP_PKEY_meth_set_cleanupEVP_PKEY_meth_set_paramgenEVP_PKEY_meth_set_keygenEVP_PKEY_meth_set_signEVP_PKEY_meth_set_verifyEVP_PKEY_meth_set_verify_recoverEVP_PKEY_meth_set_signctxEVP_PKEY_meth_set_verifyctxEVP_PKEY_meth_set_encryptEVP_PKEY_meth_set_decryptEVP_PKEY_meth_set_deriveEVP_PKEY_meth_set_ctrlsecur32.dllsecurity.dllHTTP/1.0 200 OKHTTP/SetupApi.dllcfgmgr32.dll7z.dllError loading library %s%s is not a 7z library%s is not a Format libraryXWindow.GetWindowPlacementEvgXSettings.GetDebugPrivilegeXProcess.IsWow64ProcessXFile.LogicalDriveStringsInitXFile.ExpandRawPathPsapi.dllXProcess.GetProcessStartTimeXFile.DeleteFolderSHFileOperation fail:XFile.AssignFileWXFile.WriteLnW_prev.logDriverUpdater.dprc:\debug.log.pcERROR (%s): %sMESS: %sPARAMS: %sLAST_ERR (%d -> %s): %sLAST_ERR (%d, %s): %s%s%s%s%s%s: %s%s: %s PARAMS: %sprogram.logprogram_error.logMultiple errors: %s Count: %dMultiple logs: %s Count: %d%s %sXLog.Executec:\debug.pcCERTANCE%d.%d.%d.%dSetupapi.dllCM_PROB_DRIVER_SERVICE_KEY_INVALIDCM_DEVCAP_LOCKSUPPORTEDCM_DEVCAP_EJECTSUPPORTEDFILE_CHARACTERISTIC_WEBDAV_DEVICEDNF_INDEXED_DRIVERSOFTWARE\Microsoft\Windows\CurrentVersion\DriverSettings\DriverKey=OpenKey failSnapshot.inihXXp://d2.smartpcupdate.com/rpc/sendsnapshot*.statusIni.UpdateFile failIni.UpdateFile fail 2Scan.iniDevicesPlus.ini.status5.2.3790.5.1.2600.6.0.6000.6.0.6001.6.0.6002.6.1.6002.6.1.7100.6.1.7600.6.1.7601.6.2.8400.6.2.9200.6.3.9600.6.3.9431.10.0.10240.EnumKey=SetupDiEnumDriverInfoW fail, EnumKey=SELECT * FROM hardids JOIN drivers ON hardids.id = drivers.hardid_full_index JOIN files ON files.id = drivers.file_id JOIN vendors ON vendors.id = drivers.vendor_id JOIN versions ON versions.id = drivers.version_id LEFT JOIN installers ON installers.id = drivers.installer_id JOIN devices_descriptions ON devices_descriptions.id = drivers.device_id WHERE hardids.hardid = "%s"SELECT * FROM hardids JOIN drivers ON hardids.id = drivers.hardid_index JOIN files ON files.id = drivers.file_id JOIN vendors ON vendors.id = drivers.vendor_id JOIN versions ON versions.id = drivers.version_id LEFT JOIN installers ON installers.id = drivers.installer_id JOIN devices_descriptions ON devices_descriptions.id = drivers.device_id WHERE hardids.hardid = "%s"AND os=%sDrivers64.dbDrivers32.dbDevices.iniCannot delete and rename DevicesPlus.ini fileCannot delete and rename Scan.ini fileEnumKeyClassKeySOFTWARE\Microsoft\Windows\CurrentVersionDevWebSiteOpenKeyReadOnly 3 failOpenKeyReadOnly 3 failOpenKeyReadOnly 2 failOpenKeyReadOnly 2 fail{8ECC055D-047F-11D1-A537-0000F8753ED1}TSWbemLocator.Create failEOleException %s %xwmiLocator.ConnectServer failwmiLocator.ConnectServer 2 fail%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%sTSchedulerStartupRegularItem.ItemReadSrClient.dllhXXp://service.smartpcupdate.com/rpc/senddriverstatsTUploadThread.ExecuteIni.UpdateFile fail 1Ini.UpdateFile fail 1.2Ini.UpdateFile fail 2.2Ini.UpdateFile fail 3Ini.UpdateFile fail 3.2*.dulDriverKey emptyGetCurrentSnapshot.OnFailEnumKey emptyGetCurrentSnapshot.FindDevice fail:Temp.iniGetCurrentSnapshot.GetDriverParameters fail:Device.Scan emptySaveInstallLogs.AddSetupAPIlogsWindows=Devices.Count = 0setupapi.logInf\setupapi.app.logInf\setupapi.dev.logC:\Intel\Logs\IntelChipset.logexplorer.exefirefox.exechrome.exeiexplore.exeopera.exeraptr.exemsiexec.exedrvinst.exerundll32.exesetup.exeIsThereVisibleWindows.EnumWindowsProcIsThereVisibleWindowsNo visible windows for 30 secondsNo visible windowsThere are visible windows:ShellExecuteAndWait: begin: Path=ShellExecuteAndWait: GetProcessId fail:ShellExecuteAndWait: lpExecInfo.hProcess = 0:ShellExecuteAndWait: ShellExecuteEx fail:readme.txtinstallmanagerapp.exeInstallExeOrMsiDriver: begin: FName=InstallExeOrMsiDriver: File not found:InstallExeOrMsiDriver: Install disabled:autorun.exeInstallExeOrMsiDriver: CreateProcessAndWait failedInstallExeOrMsiDriver: ShellExecuteAndWait failedstub64.exenewdev.dlladvpack.dllIncompatibleWindowsLogoErrorNonSupportedMethodadvpack.dll,LaunchINFSectionEx "InstallInfDriver: Direct install advpack.dll,LaunchINFSectionEx success, forInstallInfDriver: Direct install advpack.dll,LaunchINFSectionEx success but nothing changed, forInfDefaultInstall.exeCoreInstall.UnzipCallbacksetupapi.log failInstallDriverLL.PrepareSystemLogsIntelChipset.log failisInstalling exe/msi from zip: CancelledisInstalling exe/msi: Cancelledempty EnumKey field.restartRestart of Windows detected*.prestub64.exe was not foundDriver.CoreInitCreateBaseIndexesPCInfo.iniprogram_prev.logprogram_error_prev.logTGenerateThread.ExecuteTInstallThread.ExecutehXXp://VVV.pcutilitiespro.comHomePageURLAfterInstallURLAfterInstallURLHiddenSupportURLUninstallURLBuyNowURLAdsDownloadURLAdsBuyNowURLAdsDownloadURL2AdsBuyNowURL2hXXps://safecart.com/pcutilitiespro/.driverprohXXp://support.pcutilitiespro.comhXXp://dejebel.pcutilitiespro.revenuewire.net/optimizerpro/xsellhXXp://filecdn.avanquest.com/rw/xsell/pcutilitiespro/dejebel/OptimizerPro.exe%s=%smsvcrt.dll.jdbgmadExcept.HandleContactFormmadExcept.HandleScreenshotForm.madExcept%exceptMsg%%bugReport%Úte%Útetime%%computerName%Þsktop%%userappdata%%commonappdata%cc32110mt.dllcc32110.dllscreenShot.bmpmadExceptIde_.bplmapi32.dllTcpip\ParametersVxD\MSTCPIpHlpApi.dll.jpegwinhttp.dllWinHttpOpenWinHttpConnectWinHttpOpenRequestWinHttpAddRequestHeadersWinHttpSendRequestWinHttpGetIEProxyConfigForCurrentUserWinHttpGetProxyForUrlWinHttpSetOptionWinHttpWriteDataWinHttpReceiveResponseWinHttpQueryHeadersWinHttpQueryAuthSchemesWinHttpSetCredentialsWinHttpQueryDataAvailableWinHttpReadDataWinHttpCloseHandlehXXps://hXXp://%userappdata%\BugReportscreenShot.pngoperating system Â<pre>wtsapi32.dll</pre><pre>Software\Microsoft\Windows</pre><pre>idapi32.dll</pre><pre>GetThreadReport</pre><pre>GetCpuRegisters</pre><pre>kernelbase.dll</pre><pre>madExcept32.dll</pre><pre>c:\sources\madshi\madExcept32.dll</pre><pre>\madExcept\Dlls\madExcept32.dll</pre><pre>ReportLeaksNow</pre><pre>GetLeakReport</pre><pre>ShowLeakReport</pre><pre>madExcept32.dll has the wrong version.</pre><pre>ReportFault</pre><pre>@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule</pre><pre>%Program Files% (x86)\Mozilla Firefox\firefox.exe</pre><pre>%Program Files%\Mozilla Firefox\firefox.exe</pre><pre>SOFTWARE\Mozilla\Mozilla Firefox</pre><pre>SOFTWARE\Mozilla\Mozilla Firefox\</pre><pre>PathToExe</pre><pre>%Program Files% (x86)\Google\Chrome\Application\chrome.exe</pre><pre>%Program Files%\Google\Chrome\Application\chrome.exe</pre><pre>C:\Users\</pre><pre>\AppData\Local\Google\Chrome\Application\chrome.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome</pre><pre>%Program Files% (x86)\Internet Explorer\iexplore.exe</pre><pre>%Program Files%\Internet Explorer\iexplore.exe</pre><pre>Software\Opera Software</pre><pre>\opera.exe</pre><pre>\launcher.exe</pre><pre>%Program Files% (x86)\Opera\Opera.exe</pre><pre>%Program Files%\Opera\Opera.exe</pre><pre>%Program Files% (x86)\Opera\launcher.exe</pre><pre>%Program Files%\Opera\launcher.exe</pre><pre>BrowserExe</pre><pre>%Program Files% (x86)\Safari\Safari.exe</pre><pre>%Program Files%\Safari\Safari.exe</pre><pre>http\shell\open\command</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Settings\Driver Pro</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendinstall?partner=</pre><pre>URLParams</pre><pre>hXXps://gen.securedshopgate.com/?b=11</pre><pre>Tray.exe</pre><pre>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation</pre><pre>\oeminfo.ini</pre><pre>Check the email you received after you purchased the product for the correct license key.</pre><pre>Your license key will look like this:</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendspmpurchase</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendpurchase</pre><pre>&key=</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendspminstall</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendspmuninstall</pre><pre>hXXp://service.smartpcupdate.com/rpc/sendinstall</pre><pre>hXXp://service.smartpcupdate.com/rpc/senduninstall</pre><pre>%s is a separate product and requires a different license key.</pre><pre>Enter License Key</pre><pre>Please enter your %s license key below. You would have received the license key in your purchase confirmation email. Please note, your license key is formatted as %d sets of %d characters (i.e., %s).</pre><pre>If you already have a License Key, please enter it in the form below and click "Activate Now".</pre><pre>We recommend that you upgrade to the full version of %s</pre><pre>To purchase %s and obtain a license key click</pre><pre>The license key you entered is for %s.</pre><pre>This key was already used! Please enter another key!</pre><pre>UsedKey</pre><pre>Licensing key has reached its usage limit!</pre><pre>Thank you for registering %s!</pre><pre>Register %s now to download and install new drivers.</pre><pre>Would you like to register %s?</pre><pre>Current Windows version</pre><pre>Backuped driver Windows version</pre><pre>We NOT reccomend your use this driver for current Windows version.</pre><pre>5 (Windows XP)</pre><pre>6 (Windows Vista)</pre><pre>7 (Windows 7)</pre><pre>8 (Windows 8)</pre><pre>CreateBaseIndexesOld</pre><pre>ProxyPort</pre><pre>ProxyLogin</pre><pre>hXXp://service.smartpcupdate.com/rpc/getdatabasecxw?arch=%d&os=%d</pre><pre>hXXp://service.smartpcupdate.com/rpc/getdatabasezxw?arch=%d&os=%d</pre><pre>hXXp://service.smartpcupdate.com/rpc/getdatabasex%d_wd</pre><pre>TForm4a.Button2Click</pre><pre>IdHTTP1.Get 1 fail</pre><pre>IdHTTP1.Head fail</pre><pre>IdHTTP1.Get 2 fail</pre><pre>Drivers32prev.db</pre><pre>Drivers64prev.db</pre><pre>Drivers.db</pre><pre>CreateBaseIndexes success</pre><pre>SetupFiles.txt</pre><pre>IdRead() method of TIdTCPStream class does not support seeking</pre><pre>Block passed to TIdDecoderBinHex4.Decode is missing a starting colon :</pre><pre>Block passed to TIdDecoderBinHex4.Decode is missing a terminating colon :</pre><pre>Data passed to TIdEncoderBinHex4.Encode is missing a filename</pre><pre>\/:*?"|</pre><pre>Importance</pre><pre>PIPELINING</pre><pre>LOGIN</pre><pre>smtp</pre><pre>Report a problem with a new driver!</pre><pre>mail.smartpctools.com</pre><pre>apps@smartpctools.com</pre><pre>13-10-2015 14-03</pre><pre>support@smartpctools.com</pre><pre>support@pcutilitiespro.com</pre><pre>report.zip</pre><pre>Your feedback is very valuable and will help us create better products. Please let us know why you did not register %s:</pre><pre>%s did not find the driver I was looking for</pre><pre>hXXp://service.smartpcupdate.com/rpc/feedback?reason=</pre><pre>TDeviceEntry.GetIcon</pre><pre>TDriversList.Scan</pre><pre>TDriversList.ScanPreFiles</pre><pre>Keyboard</pre><pre>Ports</pre><pre>MultiPortSerial</pre><pre>XInternet.LoadInternetData</pre><pre>HttpOpenRequest timeout:</pre><pre>HttpOpenRequest fail</pre><pre>HttpSendRequest fail:</pre><pre>HttpSendRequest timeout:</pre><pre>HttpQueryInfo HTTP_QUERY_STATUS_CODE fail:</pre><pre>HttpQueryInfo HTTP_QUERY_CONTENT_LENGTH fail:</pre><pre>Mozilla/5.0</pre><pre>XInternet.CloseInternet</pre><pre>XInternet.ConnectToInternet</pre><pre>URL is empty</pre><pre>URL is not trimmed</pre><pre>Cannot open the URL</pre><pre>To immediately download and fix these drivers you need to renew your %s subscription.</pre><pre>Your %s subscription will expire in NN days.</pre><pre>hXXp://service.smartpcupdate.com/rpc/candownloadfiles?partner=</pre><pre>English.ini</pre><pre>French.ini</pre><pre>German.ini</pre><pre>Spanish.ini</pre><pre>Italian.ini</pre><pre>Portuguese.ini</pre><pre>Danish.ini</pre><pre>Dutch.ini</pre><pre>Swedish.ini</pre><pre>Polish.ini</pre><pre>Russian.ini</pre><pre>Brazilian.ini</pre><pre>Finnish.ini</pre><pre>Norwegian.ini</pre><pre>Japanese.ini</pre><pre>Chinese.ini</pre><pre>Czech.ini</pre><pre>Arabic.ini</pre><pre>Product information and support link</pre><pre>InstallLog.ini</pre><pre>UpdateWindowShown</pre><pre>StartWithWindows</pre><pre>s_SmartExec</pre><pre>Software\Microsoft\Windows\CurrentVersion\Settings\</pre><pre>UserKey</pre><pre>TForm1a.WMQueryEndSession</pre><pre>Vendors.txt</pre><pre>ScanExecuted</pre><pre>Scan.gif</pre><pre>TForm1a.Callback: incorrect Status</pre><pre>drivers.db</pre><pre>Exclusions.txt</pre><pre>1.0.0.0</pre><pre>%d new drivers in %d driver packages found for your computer</pre><pre>hXXp://update1.smartpcupdate.com/rpc/getlastupdate</pre><pre>hXXp://service.smartpcupdate.com/rpc/getstatus?exedate=</pre><pre>hXXp://update1.smartpcupdate.com/rpc/sendinstall?partner=</pre><pre>hXXp://update1.smartpcupdate.com/rpc/sendreport?filename=</pre><pre>hXXp://update1.smartpcupdate.com/rpc/sendstats?partner=</pre><pre>This version is no longer supported!</pre><pre>UpdateList.txt</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore</pre><pre>hXXp://VVV.google.com/search?hl=en&q=</pre><pre>.SYS.DLL.INF.CAT.NFO.EXE.REG.AX.DRV.CPL</pre><pre>RUNDLL32.EXE</pre><pre>LAYOUT.INF</pre><pre>regedit.exe</pre><pre>Backups.ini</pre><pre>\Enum.reg" "HKEY_LOCAL_MACHINE\</pre><pre>\Classes.reg" "HKEY_LOCAL_MACHINE\</pre><pre>\*.inf</pre><pre>\Log.txt</pre><pre>/s zipfldr.dll</pre><pre>regsvr32.exe</pre><pre>\.zip\CompressedFolder\ShellNew</pre><pre>\Classes.reg</pre><pre>\Classes.reg"</pre><pre>\Enum.reg</pre><pre>\Enum.reg"</pre><pre>*.exe</pre><pre>AUTORUN.EXE</pre><pre>32.EXE</pre><pre>64.EXE</pre><pre>*.inf</pre><pre>01-01-2012</pre><pre>TForm1a.InstallCallback</pre><pre>RunExe</pre><pre>TForm1a.HTTP1Start</pre><pre>hXXp://service.smartpcupdate.com/downloads/</pre><pre>Form1a.HTTP1Start</pre><pre>TForm1a.HTTP2Start</pre><pre>Form1a.HTTP2Start</pre><pre>TForm1a.HTTP3Start</pre><pre>Form1a.HTTP3Start</pre><pre>TForm1a.HTTP4Start</pre><pre>Form1a.HTTP4Start</pre><pre>TForm1a.HTTP5Start</pre><pre>Form1a.HTTP5Start</pre><pre>TForm1a.HTTP1Work</pre><pre>TForm1a.HTTP2Work</pre><pre>TForm1a.HTTP3Work</pre><pre>TForm1a.HTTP4Work</pre><pre>TForm1a.HTTP5Work</pre><pre>s_Exec</pre><pre>Backup\*.*</pre><pre>Drivers\*.*</pre><pre>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</pre><pre>HomePage.url</pre><pre>Portable Network Graphics</pre><pre>::{26EE0668-A00A-44D7-9371-BEB064C98683}</pre><pre>EasyListview.Header</pre><pre>Kernel32.dll</pre><pre>Open SSL Support DLL Delphi and C Builder interface</pre><pre>hXXp://VVV.indyproject.org/</pre><pre>1993 - 2014</pre><pre>%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s</pre><pre>%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s</pre><pre>%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s</pre><pre>%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s</pre><pre>optimizerpro.exe</pre><pre>Optimizer Pro\OptimizerPro.exe</pre><pre>CreateBaseIndexes fail</pre><pre>66006666</pre><pre>TFRMCHECKURL</pre><pre>,Unsupported Application Extension block size</pre><pre>Unknown GIF block type'Object type not supported for operation</pre><pre>Unsupported PixelFormat</pre><pre>Invalid stream operation</pre><pre>!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported</pre><pre>Unsupported GIF version</pre><pre>Invalid extension introducerúiled to allocate memory for GIF DIB</pre><pre>The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.IA signature operation must be performed before the user can authenticate.AOne or more of the parameters passed to the function was invalid.DClient policy does not allow credential delegation to target server.bClient policy does not allow credential delegation to target server with NLTM only authentication.1The recipient rejected the renegotiation request.-The required security context does not exist.`The PKU2U protocol encountered an error while attempting to utilize the associated certificates.:The identity of the server computer could not be verified.</pre><pre>Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly</pre><pre>The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.7Client's supplied SSPI channel bindings were incorrect.9The received certificate was mapped to multiple accounts.</pre><pre>SEC_E_NO_KERB_KEY5The certificate is not valid for the requested usage.</pre><pre>The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.</pre><pre>An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.</pre><pre>The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.lThe smartcard certificate used for authentication was not trusted. Please contact your system administrator.hThe smartcard certificate used for authentication has expired. Please contact your system administrator.</pre><pre>The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.</pre><pre>An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.</pre><pre>The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.</pre><pre>An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.</pre><pre>The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.</pre><pre>mThe client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.aUnable to accomplish the requested task because the local machine does not have any IP addresses.bThe supplied credential handle does not match the credential associated with the security context.]The crypto system or checksum function is invalid because a required function is unavailable.9The number of maximum ticket referrals has been exceeded.KThe local machine must be a Kerberos KDC (domain controller) and it is not.qThe other end of the security negotiation is requires strong crypto but it is not supported on the local machine.5The KDC reply contained more than one principal name.OExpected to find PA data for a hint of what etype to use, but it was not found.</pre><pre>The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.-Smartcard logon is required and was not used.!A system shutdown is in progress.'An invalid request was sent to the KDC.DThe KDC was unable to generate a referral for the service requested.:The encryption type requested is not supported by the KDC.QAn unsupported preauthentication mechanism was presented to the Kerberos package.</pre><pre>The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.</pre><pre>The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).dA security context was deleted before the context was completed. This is considered a logon failure.^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client</pre><pre>The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.DThe supplied message is incomplete. The signature was not verified.</pre><pre>The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed-The token supplied to the function is invalid</pre><pre>OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s</pre><pre>Failed to load %s.</pre><pre>SSL status: "%s"</pre><pre>%s Alert</pre><pre>%s Read Alert</pre><pre>%s Write Alert</pre><pre>Host field is empty*SSL IOHandler is required for this setting8This value can not be set while the client is connected.$SSL is not available on this server.%Start SSL negotiation command failed.</pre><pre>Unsupported operation./Could not encode header data using charset "%s"</pre><pre>Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.<tidmessagepart can not be created. use descendant classes.><pre>Attachment %s is blocked.$Error accepting connection with SSL.</pre><pre>Error creating SSL context. Could not load root certificate.</pre><pre>Could not load certificate.#Could not load key, check password.</pre><pre>Reply Code is not valid: %s</pre><pre>Reply Code already exists: %s</pre><pre>IOHandler value is not valid'Algorithm %s not permitted in FIPS mode The specified SASL handlers are not ready!!5Doesn't support AUTH or the specified SASL handlers!!'Need SASL mechanisms to login with it!!</pre><pre>File "%s" not found</pre><pre>Object type not supported.</pre><pre>Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.</pre><pre>QRequest rejected because the client program and identd report different user-ids.</pre><pre>Command not supported.</pre><pre>Address type not supported."%s: Circular links are not allowed"Not enough data in buffer. (%d/%d)</pre><pre>1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)</pre><pre>Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.</pre><pre>Invalid Port Range (%d - %d)</pre><pre>%s is not a valid service.</pre><pre>%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.</pre><pre>End of stream: Class %s at %d)UDP is not support in this SOCKS version.</pre><pre>Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.</pre><pre>Socket operation on non-socket.</pre><pre>Protocol not supported.</pre><pre>Socket type not supported."Operation not supported on socket.</pre><pre>Protocol family not supported.0Address family not supported by protocol family.</pre><pre>Resolving hostname %s.</pre><pre>Connecting to %s.</pre><pre>Socket Error # %d</pre><pre>Operation would block.</pre><pre>Operation now in progress.</pre><pre>Operation already in progress.</pre><pre>OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.</pre><pre>OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters</pre><pre>Invalid destination array"Character index out of bounds (%d)</pre><pre>Invalid count (%d)</pre><pre>Invalid destination index (%d)</pre><pre>Invalid codepage (%d)4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)BThe "Portable Network Graphics" image contains an invalid palette.</pre><pre>The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.</pre><pre>This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.</pre><pre>There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.</pre><pre>Button%d</pre><pre>RadioButton%d</pre><pre>Invalid owner=This control requires version 4.70 or greater of COMCTL32.DLL</pre><pre>Date exceeds maximum of %s</pre><pre>Date is less than minimum of %s4You must be in ShowCheckbox mode to set to this date#Failed to set calendar date or timeúiled to set maximum selection range$Failed to set calendar min/max rangeúiled to set calendar selected rangejThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.</pre><pre>- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.</pre><pre>Value*A key with the name of "%s" already exists</pre><pre>Key "%s" not found%goColMoving is not a supported option%Key may not contain equals sign ("=")</pre><pre>Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count#No OnGetItem event handler assigned"%s requires Windows Vista or later %s requires themes to be enabled</pre><pre>Value must be between %d and %d</pre><pre>Invalid clipboard format Clipboard does not support Icons</pre><pre>Cannot open clipboard: %s</pre><pre>Text exceeds memo capacity/Menu '%s' is already being used by another form</pre><pre>Grid too large for operation Too many rows or columns deleted</pre><pre>Invalid input value7Invalid input value. Use escape key to abandon changes</pre><pre>Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'</pre><pre>%s property out of range</pre><pre>Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic</pre><pre>Unsupported clipboard format</pre><pre>#''%s'' is not a valid integer value</pre><pre>''%s'' is not a valid time</pre><pre>No help found for context %d</pre><pre>No help found for %s</pre><pre>Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread</pre><pre>The specified path is too long The specified path was not found The path format is not supported The specified file was not found</pre><pre>?$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and <pre>''%s'' is not a valid date#''%s'' is not a valid date and time</pre><pre>List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class</pre><pre>Error reading %s%s%s: %s</pre><pre>Failed to create key %s</pre><pre>Failed to get data for '%s'</pre><pre>Failed to set data for '%s'</pre><pre>Resource %s not found</pre><pre>%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group</pre><pre>Property %s does not exist</pre><pre>Thread creation error: %s</pre><pre>A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates</pre><pre>Cannot create file "%s". %s</pre><pre>Cannot open file "%s". %s</pre><pre>Unable to write to %s</pre><pre>Invalid file name - %s</pre><pre>Invalid stream format$''%s'' is not a valid component name</pre><pre>Invalid data type for '%s' List capacity out of bounds (%d)</pre><pre>List count out of bounds (%d)</pre><pre>Start index out of bounds (%d)</pre><pre>Ancestor for '%s' not found</pre><pre>Cannot assign a %s to a %s</pre><pre>Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread</pre><pre>Class %s not found</pre><pre>External exception %x</pre><pre>Interface not supported</pre><pre>Object lock not owned(Monitor support function not initialized</pre><pre>%s (%s, line %d)</pre><pre>Abstract Error?Access violation at address %p in module '%s'. %s of address %p</pre><pre>System Error. Code: %d.</pre><pre>Invalid variant operation</pre><pre>Invalid NULL variant operation%Invalid variant operation (%s%.8x)</pre><pre>%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)</pre><pre>Operation not supported</pre><pre>Invalid pointer operation</pre><pre>Invalid class typecast0Access violation at address %p. %s of address %p</pre><pre>Operation aborted(Exception %s in module %s at %p.</pre><pre>Application Error1Format '%s' invalid or incompatible with argument</pre><pre>No argument for format '%s'"Variant method calls not supported('%s' is not a valid floating point value!'%s' is not a valid date and time '%d.%d' is not a valid timestamp</pre><pre>'%s' is not a valid GUID value</pre><pre>I/O error %d</pre><pre>Integer overflow Invalid floating point operation</pre><pre>3.1.0.5</pre>3U3> </pre></tidmessagepart></pre>