Trojan.GenericKD.2408548 (B) (Emsisoft), Trojan.GenericKD.2408548 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, PackedMoleBoxVS.YR (Lavasoft MAS)Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm, Packed
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 2afe308ae90cadea9837ee0cc9fca523
SHA1: c096e778016248cfb1e0876b4faac5ff9831fe73
SHA256: 5d7c7dc87b9a118a6946174fd9542841b49c2859d6dff62e172ca4a74bbb6f4f
SSDeep: 24576:ba2I/qJu6sNRr9R7RwLS0ZM5k7hMCWqbqY5:b/I/2HsNRBRVkv3 8
Size: 1453568 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MoleBoxV2X, UPolyXv05_v6
Company: no certificate found
Created at: 2015-04-26 03:51:53
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
EmailWorm | Worm can send e-mails. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):
%original file name%.exe:1332
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:1332 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ip138[1].htm (3745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ic[1].htm (224 bytes)
Registry activity
The process %original file name%.exe:1332 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E9 0F 6E 0D C6 42 86 8A 05 3A B7 5B 3E 6D 53 1D"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ip138[1].htm (3745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ic[1].htm (224 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: Baidu.com, Inc.
Product Name: ting???
Product Version: 1.0.3.0
Legal Copyright: Copyright(C) Baidu.com, Inc. All rights reserved.
Legal Trademarks:
Original Filename: ting_Setup.exe
Internal Name: ting_Setup
File Version: 1.0.3.0
File Description: ting??? ????
Comments: ting Setup Package
Language: Language Neutral
Company Name: Baidu.com, Inc.Product Name: ting???Product Version: 1.0.3.0Legal Copyright: Copyright(C) Baidu.com, Inc. All rights reserved.Legal Trademarks: Original Filename: ting_Setup.exeInternal Name: ting_SetupFile Version: 1.0.3.0File Description: ting??? ????Comments: ting Setup PackageLanguage: Language Neutral
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
0 | 4096 | 2469888 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
1 | 2473984 | 446464 | 441344 | 5.54488 | b038c64b6c3e15d6ce0afb47453c3ece |
2 | 2920448 | 954368 | 951296 | 5.08455 | 2e9096bb8fe34bd3ebdc72881225f9a5 |
3 | 3874816 | 71215 | 46080 | 5.47271 | 5b81d165aebbe0b0935fe6dfe76bd476 |
4 | 3948544 | 3382 | 3584 | 3.06 | d32098c0a07c67c0b3f62a91a3d67c2e |
5 | 3952640 | 29072 | 7168 | 5.52772 | a6a0fe33cd986727de6754d5c7898c31 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://www.ip138.com/ | 203.130.61.92 |
1111.ip138.com | 183.238.101.232 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: VVV.ip138.com
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 05 Jun 2015 08:23:27 GMT
Content-Length: 16659
Content-Type: text/html
Content-Location: hXXp://VVV.ip138.com/index.htm
Last-Modified: Tue, 02 Jun 2015 12:45:55 GMT
Accept-Ranges: bytes
ETag: "3c77811329dd01:bcc0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Age: 75025
X-Via: 1.1 kf48:10 (Cdn Cache Server V2.0)
Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">..<html>..<head>..<meta http-equiv="Content-Type" content="text/html; charset=gb2312">..<meta name="mobile-agent"content="format=html5; url=hXXp://m.ip138.com/">..<title>IP........--.................. | ............ | ............ | ........................</title>..<meta name="Keywords" content="ip,IP....,IP........,ip138">..<meta name="Description" content="ip,IP....,IP........,ip138">..<script language="javascript">..<!--..if(window.top!=window.self)window.top.location.href='hXXp://VVV.ip138.com/';..function checkIP()..{...var ipArray,ip,j;...ip = document.ipform.ip.value;...if (ip.indexOf(" ")>=0){....ip = ip.replace(/ /g,"");....document.ipform.ip.value = ip;...}...if (ip.toLowerCase().indexOf("http://")==0){....ip = ip.slice(7);....document.ipform.ip.value = ip;...}...if (ip.toLowerCase().indexOf("hXXps://")==0){....ip = ip.slice(8);....document.ipform.ip.value = ip;...}...if (ip.slice(ip.length-1)=="/"){....ip = ip.slice(0,ip.length-1);....document.ipform.ip.value = ip;...}...if(/[A-Za-z_-]/.test(ip)){....if(!/^([\w-] \.) ((top)|(com)|(net)|(org)|(gov\.cn)|(info)|(cc)|(com\.cn)|(net\.cn)|(org\.cn)|(name)|(biz)|(tv)|(cn)|(mobi)|(name)|(sh)|(ac)|(io)|(tw)|(com\.tw)|(hk)|(com\.hk)|(ws)|(travel)|(us)|(tm)|(la)|(me\.uk)|(org\.uk)|(ltd\.uk)|(plc\.uk)|(in)|(eu)|(it)|(jp)|(co)|(me)|(mx)|(ca)|(ag)|(com\.co)|(net\.co)|(nom\.co)|(com\.ag)|(net\.ag)|(fr)|(org\.ag)|(am)|(asia)|(at)|(be)|(bz)
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_1332:
t$(SSh
t$(SSh
~%UVW
~%UVW
u$SShe
u$SShe
user32.dll
user32.dll
Kernel32.dll
Kernel32.dll
kernel32.dll
kernel32.dll
wininet.dll
wininet.dll
advapi32.dll
advapi32.dll
shlwapi.dll
shlwapi.dll
EnumWindows
EnumWindows
HttpOpenRequestA
HttpOpenRequestA
HttpSendRequestA
HttpSendRequestA
HttpQueryInfoA
HttpQueryInfoA
1.2.9
1.2.9
bbs.125.la
bbs.125.la
?hXXp://VVV.ip138.com
?hXXp://VVV.ip138.com
https
https
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
http=
http=
HTTP/1.1
HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXps://
hXXps://
hXXp://
hXXp://
0@C:\Windir\wind.dat
0@C:\Windir\wind.dat
C:\Windir\
C:\Windir\
QQ.exe
QQ.exe
99999999
99999999
%Documents and Settings%\
%Documents and Settings%\
D:\My Documents\Tencent Files\
D:\My Documents\Tencent Files\
C:\Users\
C:\Users\
%Documents and Settings%\Administrator\Application Data\Tencent\Users\
%Documents and Settings%\Administrator\Application Data\Tencent\Users\
scripting.FileSystemObject
scripting.FileSystemObject
&QQPassWord=
&QQPassWord=
360tray.exe
360tray.exe
360tray.exe|
360tray.exe|
360sd.exe
360sd.exe
360sd.exe|
360sd.exe|
kxetray.exe
kxetray.exe
kxetray.exe|
kxetray.exe|
QQPCTray.exe
QQPCTray.exe
QQPCTray.exe|
QQPCTray.exe|
RavMonD.exe
RavMonD.exe
RavMonD.exe|
RavMonD.exe|
avp.exe
avp.exe
avp.exe|
avp.exe|
egui.exe
egui.exe
egui.exe|
egui.exe|
knsdtray.exe
knsdtray.exe
knsdtray.exe|
knsdtray.exe|
KvMonXP.exe
KvMonXP.exe
KvMonXP.exe|
KvMonXP.exe|
Mcshield.exe
Mcshield.exe
Mcshield.exe|
Mcshield.exe|
TMBMSRV.exe
TMBMSRV.exe
TMBMSRV.exe|
TMBMSRV.exe|
hXXp://im.qq.com/pcqq/
hXXp://im.qq.com/pcqq/
'77/7&*\
'77/7&*\
(7),01444
(7),01444
'9=82<.342>
'9=82<.342>
~%xkW
~%xkW
F%*.*f
F%*.*f
CNotSupportedException
CNotSupportedException
commctrl_DragListMsg
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Afx:%x:%x
COMCTL32.DLL
COMCTL32.DLL
CCmdTarget
CCmdTarget
ole32.dll
ole32.dll
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
iphlpapi.dll
iphlpapi.dll
SHLWAPI.dll
SHLWAPI.dll
MPR.dll
MPR.dll
VERSION.dll
VERSION.dll
WSOCK32.dll
WSOCK32.dll
.PAVCException@@
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.prn)|*.prn|
(*.*)|*.*||
(*.*)|*.*||
Shell32.dll
Shell32.dll
Mpr.dll
Mpr.dll
Advapi32.dll
Advapi32.dll
User32.dll
User32.dll
Gdi32.dll
Gdi32.dll
(&07-034/)7 '
(&07-034/)7 '
?? / %d]
?? / %d]
%d / %d]
%d / %d]
: %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
(*.CUR)|*.CUR|
%s:%d
%s:%d
windows
windows
out.prn
out.prn
%d.%d
%d.%d
%d / %d
%d / %d
%d/%d
%d/%d
Bogus message code %d
Bogus message code %d
(%d-%d):
(%d-%d):
%ld%c
%ld%c
%s
%s
Reply-To: %s
Reply-To: %s
From: %s
From: %s
To: %s
To: %s
Subject: %s
Subject: %s
Date: %s
Date: %s
Cc: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
%a, %d %b %Y %H:%M:%S
HELO %s
HELO %s
SMTP
SMTP
AUTH LOGIN
AUTH LOGIN
LOGIN
LOGIN
AUTH=LOGIN
AUTH=LOGIN
EHLO %s
EHLO %s
Content-Type: application/octet-stream; name=%s
Content-Type: application/octet-stream; name=%s
Content-Disposition: attachment; filename=%s
Content-Disposition: attachment; filename=%s
MAIL FROM:
MAIL FROM:
RCPT TO:
RCPT TO:
%d%d%d
%d%d%d
rundll32.exe shell32.dll,
rundll32.exe shell32.dll,
(*.htm;*.html)|*.htm;*.html
(*.htm;*.html)|*.htm;*.html
VVV.dywt.com.cn
VVV.dywt.com.cn
.PAVCOleException@@
.PAVCOleException@@
.PAVCObject@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCUserException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
.PAVCArchiveException@@
.PAVCArchiveException@@
zcÃ
zcÃ
cmon.exe
cmon.exe
adea9837ee0cc9fca523.exe
adea9837ee0cc9fca523.exe
X-Powered-By: ASP.NET
X-Powered-By: ASP.NET
c:\%original file name%.exe
c:\%original file name%.exe
`D.tR7
`D.tR7
bE.tR7
bE.tR7
`D~_C|]By[@vY?sW=pT;mR:kQ9jP8iO8hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7`H3`G2`G2`G2`G2`G2`G2`G2`G2`G2`G2`F1`G2`G2`G2`G2`G2`F2`G2`G2`F1`G2`G2aH2aH2aH3ZA,Y@,\C-^D.aF0cH1fJ2gK3iL3iL4jM4jM4jM4jM3jM4jM4jM4jM4jM3jM3jM4jM4jM4jM4jM4jM3jM3z[?
`D~_C|]By[@vY?sW=pT;mR:kQ9jP8iO8hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7`H3`G2`G2`G2`G2`G2`G2`G2`G2`G2`G2`F1`G2`G2`G2`G2`G2`F2`G2`G2`F1`G2`G2aH2aH2aH3ZA,Y@,\C-^D.aF0cH1fJ2gK3iL3iL4jM4jM4jM4jM3jM4jM4jM4jM4jM3jM3jM4jM4jM4jM4jM4jM3jM3z[?
`D~_C{]Ax[@tX>pU
`D~_C{]Ax[@tX>pU
`D|^By[@tX>oS;jP8dL5`I3]F1ZD0XC/XB/WA.WA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.P
`D|^By[@tX>oS;jP8dL5`I3]F1ZD0XC/XB/WA.WA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.P
`D|^Bx[@rV=lQ9fM6`H3[E1XB/U@-S?,R>,R>,Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= L8(K7&K8&K8'L8'K8'K8'K8'K8'K8'L8'K8'K8'K8'K8'K8'K8'K8'L8'K8'K8'K7&K8'K8'K8'L8(K8'D1"F2"H5#K6%P:'T=)ZA,_E.cH0fJ2hL2iL3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4iL3
`D|^Bx[@rV=lQ9fM6`H3[E1XB/U@-S?,R>,R>,Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= L8(K7&K8&K8'L8'K8'K8'K8'K8'K8'L8'K8'K8'K8'K8'K8'K8'K8'L8'K8'K8'K7&K8'K8'K8'L8(K8'D1"F2"H5#K6%P:'T=)ZA,_E.cH0fJ2hL2iL3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4iL3
Cl#Be-?T56:B2ò"H4#L7&Q;(W? \C-aF/eI1gK2iL2kN4jM3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3jM4iL3
Cl#Be-?T56:B2ò"H4#L7&Q;(W? \C-aF/eI1gK2iL2kN4jM3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3jM4iL3
Al27AG3#J6%O9&T=)ZB,_E.dH0gK2iL3jM3kN4jM4jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3iL3
Al27AG3#J6%O9&T=)ZB,_E.dH0gK2iL3jM3kN4jM4jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3iL3
$=ZG6'M8%R
$=ZG6'M8%R
)?XO9'T=*ZA,^D.bG0dI1fJ2hL3hK3hL3iL3iL3jM3jM4jM4jM4jM3jM4jM3jM3
)?XO9'T=*ZA,^D.bG0dI1fJ2hL3hK3hL3iL3iL3jM3jM4jM4jM4jM3jM4jM3jM3
"ChN:(S
"ChN:(S
(B`B0 C0!C0 C0!C1!D2!F3#H4$K7%O:'T=)YA,_E.cH0fJ1hK3iL4iL3
(B`B0 C0!C0 C0!C1!D2!F3#H4$K7%O:'T=)YA,_E.cH0fJ1hK3iL4iL3
2T}GHKV
2T}GHKV
yj`z[=uS/rP rO qO qO qO qO qN qN qN pN qO qN qO qO qO qO qN qN qO qN pN pN pN*pN oN oN*qO*rO tP uQ,uR,wR,vR,wS,wS,wR,wS,wS-wS-wS.xS/wS/rT4rR3pR2nP1lO0fJ-Y@)K6$G3#J6$O9'U=)ZA,_E/cH1gK2iL3iL4
yj`z[=uS/rP rO qO qO qO qO qN qN qN pN qO qN qO qO qO qO qN qN qO qN pN pN pN*pN oN oN*qO*rO tP uQ,uR,wR,vR,wS,wS,wR,wS,wS-wS-wS.xS/wS/rT4rR3pR2nP1lO0fJ-Y@)K6$G3#J6$O9'U=)ZA,_E/cH1gK2iL3iL4
];~]:}\:|[:yY8vW6rU5pR3lO0gJ.U>'H4$L7&R;(X@ ]D.bG0fJ2hL3iL4
];~]:}\:|[:yY8vW6rU5pR3lO0gJ.U>'H4$L7&R;(X@ ]D.bG0fJ2hL3iL4
`
`
_=tU7ZB,`F.dI1gK3hK2
_=tU7ZB,`F.dI1gK3hK2
eBxZ:[B-aF.dI1gK2hK3
eBxZ:[B-aF.dI1gK2hK3
iEyZ;[B-`F.dI0gK2hK3
iEyZ;[B-`F.dI0gK2hK3
iEsW
iEsW
jFz[=[B-`F.dI1gK3hK3
jFz[=[B-`F.dI1gK3hK3
iEqU;T>,V@-WA-XA.YB.YB.YB.YB.YB.YB.YB.YB.YB.YA.XA.WA.V?,U> S= Q10t
iEqU;T>,V@-WA-XA.YB.YB.YB.YB.YB.YB.YB.YB.YB.YA.XA.WA.V?,U> S= Q10t
kF{\=[B,`F.eJ1gK3hK3
kF{\=[B,`F.eJ1gK3hK3
nI}^>[B-`F.eJ1gK3hK3
nI}^>[B-`F.eJ1gK3hK3
oJ}_?[B,`F.dI0hL3hK3
oJ}_?[B,`F.dI0hL3hK3
oJ~_?[B-`F.dI1gK3hK3
oJ~_?[B-`F.dI1gK3hK3
`@]D.bG0eJ1hK3iM3
`@]D.bG0eJ1hK3iM3
GetCPInfo
GetCPInfo
WinExec
WinExec
GetProcessHeap
GetProcessHeap
RegCloseKey
RegCloseKey
RegCreateKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExA
GetViewportOrgEx
GetViewportOrgEx
GetViewportExtEx
GetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
ShellExecuteA
ShellExecuteA
UnregisterHotKey
UnregisterHotKey
RegisterHotKey
RegisterHotKey
SetWindowsHookExA
SetWindowsHookExA
GetKeyState
GetKeyState
CreateDialogIndirectParamA
CreateDialogIndirectParamA
UnhookWindowsHookEx
UnhookWindowsHookEx
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
ÂH]
ÂH]
@^p.WN
@^p.WN
c~k-V}
c~k-V}
*CSC %Fj;
*CSC %Fj;
.LHD/
.LHD/
*6Âk
*6Âk
81Þ
81Þ
nEb.cRw&Dz
nEb.cRw&Dz
$Ã'
$Ã'
:.MjQ
:.MjQ
B:Ã
B:Ã
.Mx&[
.Mx&[
`]T-O}S{E
`]T-O}S{E
1%XJVt
1%XJVt
@.euee
@.euee
0%c
0%c
.ZHh^
.ZHh^
.Pq k
.Pq k
m.pz_
m.pz_
V5.rN
V5.rN
92>>4:::444
92>>4:::444
4$1$%dh`Vp/8
4$1$%dh`Vp/8
%D_RE
%D_RE
]].eX6t0
]].eX6t0
co.KKV-C^
co.KKV-C^
.cEvO:8
.cEvO:8
-EZzj}
-EZzj}
...Fyy9
...Fyy9
.KZb.
.KZb.
;u.oE
;u.oE
VVV"VVV&VVV*VVV,VVV-VVV.VVV-TTT/TTT-VVV*VVV(VVV%VVV$VVV!VVV
VVV"VVV&VVV*VVV,VVV-VVV.VVV-TTT/TTT-VVV*VVV(VVV%VVV$VVV!VVV
!!!|&&&o e222[999S>>>LCCCFGGGBLLL
!!!|&&&o e222[999S>>>LCCCFGGGBLLL
!!!u(((i///_444X
!!!u(((i///_444X
VVV VVV$VVV*VVV.TTT4NNN:CCCF333W"""s
VVV VVV$VVV*VVV.TTT4NNN:CCCF333W"""s
!!!t(((j---a222Y999Q???IDDDDHHH>MMM:QQQ4SSS1TTT.TTT VVV'VVV$VVV!VVV
!!!t(((j---a222Y999Q???IDDDDHHH>MMM:QQQ4SSS1TTT.TTT VVV'VVV$VVV!VVV
VVV$VVV)VVV.VVV4PPP9EEED888Q&&&j
VVV$VVV)VVV.VVV4PPP9EEED888Q&&&j
x&&&l b222Y777R
x&&&l b222Y777R
VVV$VVV)VVV.VVV3QQQ8KKK@;;;N***d
VVV$VVV)VVV.VVV3QQQ8KKK@;;;N***d
!!!u&&&k,,,b333X888Q>>>IBBBDHHH>MMM9QQQ3QQQ1RRR.TTT)VVV&VVV#VVV VVV
!!!u&&&k,,,b333X888Q>>>IBBBDHHH>MMM9QQQ3QQQ1RRR.TTT)VVV&VVV#VVV VVV
!!!t%%%k,,,a111Y777P===HCCCAJJJ:NNN6QQQ1RRR.TTT TTT(VVV#VVV!VVV
!!!t%%%k,,,a111Y777P===HCCCAJJJ:NNN6QQQ1RRR.TTT TTT(VVV#VVV!VVV
u%%%k,,,a444V888O???FDDD@JJJ:NNN5QQQ1RRR.TTT)VVV&VVV#VVV VVV
u%%%k,,,a444V888O???FDDD@JJJ:NNN5QQQ1RRR.TTT)VVV&VVV#VVV VVV
VVV$VVV(VVV.VVV3SSS8NNN?@@@K000]!!!w
VVV$VVV(VVV.VVV3SSS8NNN?@@@K000]!!!w
y$$$n***c000Z777P;;;KBBBBGGG
y$$$n***c000Z777P;;;KBBBBGGG
u%%%k `222W777P>>>HBBBBHHH:LLL7OOO2RRR.TTT*VVV&VVV#VVV VVV
u%%%k `222W777P>>>HBBBBHHH:LLL7OOO2RRR.TTT*VVV&VVV#VVV VVV
!!!t'''i,,,^333U777O
!!!t'''i,,,^333U777O
VVV"VVV(VVV.VVV3TTT7OOO>EEEH444X$$$q
VVV"VVV(VVV.VVV3TTT7OOO>EEEH444X$$$q
!!!r(((h---^444S999L>>>FDDD>JJJ9MMM4QQQ/RRR.TTT)VVV&VVV"VVV
!!!r(((h---^444S999L>>>FDDD>JJJ9MMM4QQQ/RRR.TTT)VVV&VVV"VVV
y$$$n)))c000[555R;;;J@@@CFFF=JJJ8OOO2PPP.RRR,TTT(VVV$VVV!VVV
y$$$n)))c000[555R;;;J@@@CFFF=JJJ8OOO2PPP.RRR,TTT(VVV$VVV!VVV
x$$$n)))c///X555P;;;JAAACFFF
x$$$n)))c///X555P;;;JAAACFFF
~!!!s'''g,,,^333T888M===FCCC?HHH8LLL5PPP.RRR,TTT)VVV$VVV"VVV
~!!!s'''g,,,^333T888M===FCCC?HHH8LLL5PPP.RRR,TTT)VVV$VVV"VVV
{"""q'''f---]444S888K===FDDD=III6LLL3PPP.RRR TTT'VVV$VVV!VVV
{"""q'''f---]444S888K===FDDD=III6LLL3PPP.RRR TTT'VVV$VVV!VVV
z"""n)))d---Z444S999J>>>CDDD=III6OOO1PPP.RRR*TTT'VVV#VVV VVV
z"""n)))d---Z444S999J>>>CDDD=III6OOO1PPP.RRR*TTT'VVV#VVV VVV
VVV"VVV(VVV.VVV2VVV6RRR>>O---b z!!!
VVV"VVV(VVV.VVV2VVV6RRR>>O---b z!!!
z$$$q)))e///^555U;;;N???FDDD>III6LLL,OOO%SSS
z$$$q)))e///^555U;;;N???FDDD>III6LLL,OOO%SSS
VVV"VVV(VVV.VVV3VVV7RRR=LLLD@@@N///b y
VVV"VVV(VVV.VVV3VVV7RRR=LLLD@@@N///b y
$$$y(((n,,,`444N;;;>EEE.NNN!RRR
$$$y(((n,,,`444N;;;>EEE.NNN!RRR
VVV!VVV(VVV.VVV2VVV7SSS
VVV!VVV(VVV.VVV2VVV7SSS
VVV"VVV(VVV.VVV3VVV7SSS>LLLDAAAN222^"""w
VVV"VVV(VVV.VVV3VVV7SSS>LLLDAAAN222^"""w
VVV"VVV(VVV.VVV3VVV8RRR>LLLD???P...c z
VVV"VVV(VVV.VVV3VVV8RRR>LLLD???P...c z
VVV"VVV)VVV.VVV4VVV8RRR>KKKE
VVV"VVV)VVV.VVV4VVV8RRR>KKKE
VVV!VVV(VVV.VVV4UUU:RRR>GGGG999U***h
VVV!VVV(VVV.VVV4UUU:RRR>GGGG999U***h
VVV"VVV(VVV.SSS6KKK>>>>L111^!!!w
VVV"VVV(VVV.SSS6KKK>>>>L111^!!!w
VVV&RRR.JJJ9888M%%%j
VVV&RRR.JJJ9888M%%%j
VVV&VVV2SSSABBBV555g999e@@@ZGGGNQQQ?TTT7VVV.VVV'VVV VVV
VVV&VVV2SSSABBBV555g999e@@@ZGGGNQQQ?TTT7VVV.VVV'VVV VVV
VVV$VVV.SSS8777R&&&
VVV$VVV.SSS8777R&&&
VVV#VVV.VVV6@@@K"""tXYZ
VVV#VVV.VVV6@@@K"""tXYZ
{)))f666QCCCCLLL7TTT.VVV(VVV"VVV
{)))f666QCCCCLLL7TTT.VVV(VVV"VVV
~&&&h222U???DIII7PPP.VVV'VVV!VVV
~&&&h222U???DIII7PPP.VVV'VVV!VVV
VVV$VVV.VVV8LLLD---d>?@
VVV$VVV.VVV8LLLD---d>?@
MR*G.Hd@
MR*G.Hd@
.fA@0
.fA@0
%X#Q;*
%X#Q;*
3cmDU*
3cmDU*
VVV.CCCIHIJ
VVV.CCCIHIJ
...PIII"VVV
...PIII"VVV
%F?WJAikC
%F?WJAikC
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
KERNEL32.DLL
KERNEL32.DLL
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
comdlg32.dll
comdlg32.dll
GDI32.dll
GDI32.dll
OLEAUT32.dll
OLEAUT32.dll
oledlg.dll
oledlg.dll
RASAPI32.dll
RASAPI32.dll
SHELL32.dll
SHELL32.dll
USER32.dll
USER32.dll
WININET.dll
WININET.dll
WINMM.dll
WINMM.dll
WINSPOOL.DRV
WINSPOOL.DRV
WS2_32.dll
WS2_32.dll
.rdata
.rdata
.data
.data
20050518
20050518
346457458.exe.BOX
346457458.exe.BOX
gdi32.dll
gdi32.dll
oleaut32.dll
oleaut32.dll
KERNEL32.dll
KERNEL32.dll
1.1.4
1.1.4
WindowsNT(unknown)
WindowsNT(unknown)
Windows.NET
Windows.NET
WindowsXP
WindowsXP
Windows2000
Windows2000
WindowsNT(4.0)
WindowsNT(4.0)
WindowsNT(3.51)
WindowsNT(3.51)
Windows9x(unknown)
Windows9x(unknown)
WindowsMe
WindowsMe
Windows98
Windows98
Windows95
Windows95
:BOX:ReadCompressedSection: decompresion failed with code %d
:BOX:ReadCompressedSection: decompresion failed with code %d
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\boxmanager.cpp
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\boxmanager.cpp
The dynamic link library '%s' could not be found
The dynamic link library '%s' could not be found
oleaout32.dll
oleaout32.dll
oleoaut32.dll
oleoaut32.dll
imm32.dll
imm32.dll
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\mbx_DLL.cpp
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\mbx_DLL.cpp
MBX@%X@*.###
MBX@%X@*.###
Error at %s:%d
Error at %s:%d
-up1.txt
-up1.txt
-up.txt
-up.txt
windows error %s
windows error %s
at %s(%d)
at %s(%d)
MBX@%X@%X.###
MBX@%X@%X.###
MBX@%X@%X@%X.###
MBX@%X@%X@%X.###
HAS NO ACCESS TO EXECUTABLE
HAS NO ACCESS TO EXECUTABLE
ESI:0xX EDI:0xX
ESI:0xX EDI:0xX
ESP:0xX EBP:0xX EIP:0xX
ESP:0xX EBP:0xX EIP:0xX
EAX:0xX EDX:0xX ECX:0xX
EAX:0xX EDX:0xX ECX:0xX
ES :0xX FS :0xX GS :0xX
ES :0xX FS :0xX GS :0xX
CS :0xX SS :0xX DS :0xX
CS :0xX SS :0xX DS :0xX
__SEH__ 0x%x at 0x%x
__SEH__ 0x%x at 0x%x
{CC7574E4-5E39-4700-B286-269A82DD8E95}
{CC7574E4-5E39-4700-B286-269A82DD8E95}
_splashscreen.bmp
_splashscreen.bmp
!broken!0xx:
!broken!0xx:
0xx:[%s]:(x:x)
0xx:[%s]:(x:x)
0xx:[unknown]:unknown
0xx:[unknown]:unknown
0xx: 0xx 0xx 0xx 0xx
0xx: 0xx 0xx 0xx 0xx
ADVAPI32.DLL
ADVAPI32.DLL
CLSID\{x-x-x-xx-xxxxxx}\InprocServer32
CLSID\{x-x-x-xx-xxxxxx}\InprocServer32
Impor&t or Export...
Impor&t or Export...
Import &Windows XP Mode VM
Import &Windows XP Mode VM
%s Enter
%s Enter
C&apture Screen%s
C&apture Screen%s
%s PrtScn
%s PrtScn
%s Right
%s Right
%s Left
%s Left
&Windows
&Windows
&Guest Operating System Install Guide
&Guest Operating System Install Guide
VMware on the &Web
VMware on the &Web
O&nline Support
O&nline Support
Request &Support
Request &Support
Check for &Updates on the Web
Check for &Updates on the Web
Collect &Support Data...
Collect &Support Data...
cmdBar
cmdBar
Collect Support Data
Collect Support Data
Select the virtual machines you want to collect support data for. When this process finishes (which may take several minutes) you can send the collected data to VMware for troubleshooting.
Select the virtual machines you want to collect support data for. When this process finishes (which may take several minutes) you can send the collected data to VMware for troubleshooting.
Password:
Password:
To access virtual machines on the local computer you are using, select Local host. To access virtual machines on a networked host, select Remote host and enter the host name and a valid user name and password.
To access virtual machines on the local computer you are using, select Local host. To access virtual machines on a networked host, select Remote host and enter the host name and a valid user name and password.
&Password:
&Password:
VMware Web Check
VMware Web Check
View a list of virtual machines available on this server and to select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
View a list of virtual machines available on this server and to select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Display the GSX Server configuration window. From this window you can set all of the server configuration options that affect the operation and performance characteristics of the server.
Display the GSX Server configuration window. From this window you can set all of the server configuration options that affect the operation and performance characteristics of the server.
Create a new virtual machine. Install and run a variety of standard operating systems in the virtual machine.
Create a new virtual machine. Install and run a variety of standard operating systems in the virtual machine.
Browse for virtual machines or teams and select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Browse for virtual machines or teams and select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Select the VMware host that you want to connect to and enter a valid user name and password.
Select the VMware host that you want to connect to and enter a valid user name and password.
If you have forgotten your password, click this button to ask your administrator to reset the password.
If you have forgotten your password, click this button to ask your administrator to reset the password.
&Show AutoProtect snapshots (%u hidden)
&Show AutoProtect snapshots (%u hidden)
Preparing clone operation
Preparing clone operation
Recovery key
Recovery key
You can reset the password for this ACE instance and send the hot fix back to the user.
You can reset the password for this ACE instance and send the hot fix back to the user.
Specify the private portion of the recovery key and the password to access this key.
Specify the private portion of the recovery key and the password to access this key.
&Private recovery key:
&Private recovery key:
&Recovery key password:
&Recovery key password:
Reset password
Reset password
Choose a new password for this ACE instance.
Choose a new password for this ACE instance.
&New password:
&New password:
New password &confirm:
New password &confirm:
This new password is not displayed to the user in the hot fix. You must let the user know the new password.
This new password is not displayed to the user in the hot fix. You must let the user know the new password.
You must enter its password to continue.
You must enter its password to continue.
Enter Password
Enter Password
Login
Login
%1OThe application encountered an error while running this operation
%1OThe application encountered an error while running this operation
Error ID = You do not have permissions to perform this operation
Error ID = You do not have permissions to perform this operation
VMware Workstation allows multiple standard operating systems and their applications to run with high performance in secure and transportable virtual machines. Each virtual machine is equivalent to a PC with a unique network address and full complement of hardware choices.
VMware Workstation allows multiple standard operating systems and their applications to run with high performance in secure and transportable virtual machines. Each virtual machine is equivalent to a PC with a unique network address and full complement of hardware choices.
The VMware Virtual Machine Console lets you connect to virtual machines that run on VMware GSX Server or VMware ESX Server systems. Each virtual machine is equivalent to a physical server with storage, networking, memory and devices. The VMware Virtual Machine Console gives you full control over virtual machines, including keyboard, video and mouse interactivity.
The VMware Virtual Machine Console lets you connect to virtual machines that run on VMware GSX Server or VMware ESX Server systems. Each virtual machine is equivalent to a physical server with storage, networking, memory and devices. The VMware Virtual Machine Console gives you full control over virtual machines, including keyboard, video and mouse interactivity.
Remove from &Favorites Legacy virtual machine for %1 %2!Current virtual machine for %1 &Unable to create a new virtual machine "%1!s!":
Remove from &Favorites Legacy virtual machine for %1 %2!Current virtual machine for %1 &Unable to create a new virtual machine "%1!s!":
úiled to enter serial number:
úiled to enter serial number:
&About %s
&About %s
About %s
About %s
Product: %s
Product: %s
Version: %s
Version: %s
Suspended screenshot for %s
Suspended screenshot for %s
>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
please register on our Web site at "%2".
please register on our Web site at "%2".
- Opportunity to receive 30 days of complimentary Web-based support
- Opportunity to receive 30 days of complimentary Web-based support
choosing "VMware on the Web" > "Register Now!"
choosing "VMware on the Web" > "Register Now!"
or by visiting our Web site at: "%4"
or by visiting our Web site at: "%4"
- Activation of support and subscription services you have purchased
- Activation of support and subscription services you have purchased
choosing the "VMware on the web" > "Register Now!" option,
choosing the "VMware on the web" > "Register Now!" option,
or by visiting our Web site at: "%4"VSorry! Another client is currently submitting changes.
or by visiting our Web site at: "%4"VSorry! Another client is currently submitting changes.
Remove "%s" from the Favorites?
Remove "%s" from the Favorites?
(Port %1!d!)
(Port %1!d!)
DA snapshot operation is already in progress.
DA snapshot operation is already in progress.
Please try again later.;BMP Windows Bitmap Format (*.bmp)|*.bmp|PNG (*.PNG)|*.PNG||
Please try again later.;BMP Windows Bitmap Format (*.bmp)|*.bmp|PNG (*.PNG)|*.PNG||
(%s).
(%s).
9Sorry! Another client has already started this operation.
9Sorry! Another client has already started this operation.
%1 has detected that your host uses a Japanese locale. However, the Japanese language is not supported with the English-only version you are running. %1 will exit now. The next time you run %1, the English language will be used.
%1 has detected that your host uses a Japanese locale. However, the Japanese language is not supported with the English-only version you are running. %1 will exit now. The next time you run %1, the English language will be used.
%1 has detected that you just enabled Japanese language support. %1 will exit now. The next time you run %1, the Japanese language will be used.
%1 has detected that you just enabled Japanese language support. %1 will exit now. The next time you run %1, the Japanese language will be used.
Please request support and include the contents of the log file: "%2".$%s
Please request support and include the contents of the log file: "%2".$%s
DThis virtual machine is locked and has not been assigned a password.AThis virtual machine is locked and requires a password to use it.8Assign a password to this virtual machine and unlock it.4Enter your password and unlock this virtual machine.
DThis virtual machine is locked and has not been assigned a password.AThis virtual machine is locked and requires a password to use it.8Assign a password to this virtual machine and unlock it.4Enter your password and unlock this virtual machine.
Invalid UserOYour administrator has not given you permission to access this virtual machine.GThis virtual machine cannot be opened because it is a member of a team.
Invalid UserOYour administrator has not given you permission to access this virtual machine.GThis virtual machine cannot be opened because it is a member of a team.
AVI Video Format (*.avi)|*.avi||&High (best quality for short captures) Medium (higher quality for longer captures)
AVI Video Format (*.avi)|*.avi||&High (best quality for short captures) Medium (higher quality for longer captures)
1A movie capture operation cannot occur right now.
1A movie capture operation cannot occur right now.
Error resetting password.
Error resetting password.
Approved on %s.
Approved on %s.
Denied on %s.
Denied on %s.
All files (*.*)|*.*||
All files (*.*)|*.*||
8When this dialog box closes, &email hot fix to user (%s)
8When this dialog box closes, &email hot fix to user (%s)
Hot fix sent on %s.
Hot fix sent on %s.
Password reset
Password reset
Using custom policies2Could not find %s. Please browse for this project.[This project does not match the project we need to open this hot fix. Please browse for %s.
Using custom policies2Could not find %s. Please browse for this project.[This project does not match the project we need to open this hot fix. Please browse for %s.
Guest Operating System
Guest Operating System
Please check that you have shut down your guest operating system first before powering off.
Please check that you have shut down your guest operating system first before powering off.
Do you want to revert to "%s"?
Do you want to revert to "%s"?
IP AddressRThe virtual machine %1 (%2) cannot be unregistered because it is still powered on.MThe virtual machine %1 (%2) cannot be deleted because it is still powered on.
IP AddressRThe virtual machine %1 (%2) cannot be unregistered because it is still powered on.MThe virtual machine %1 (%2) cannot be deleted because it is still powered on.
2Please wait while %s checks for available updates.#No new %1!s! updates are available.
2Please wait while %s checks for available updates.#No new %1!s! updates are available.
Check your Web browser configuration settings and your connection hardware.
Check your Web browser configuration settings and your connection hardware.
The virtual machine is configured to run only within your current Windows session. When you log off of the Windows session, the virtual machine will be powered off.
The virtual machine is configured to run only within your current Windows session. When you log off of the Windows session, the virtual machine will be powered off.
If you click OK, the virtual machine will be powered off when you log off of the session.jOther connected users may be affected by this operation.
If you click OK, the virtual machine will be powered off when you log off of the session.jOther connected users may be affected by this operation.
Proceed with this operation?
Proceed with this operation?
*Are you sure you want to close project %s?lYou can have only one project open at a time.
*Are you sure you want to close project %s?lYou can have only one project open at a time.
Are you sure you want to close '%s' and create a new project?[You can have only one project open at a time.
Are you sure you want to close '%s' and create a new project?[You can have only one project open at a time.
Are you sure you want to close project '%s'?
Are you sure you want to close project '%s'?
The password you entered is not correct. Please re-enter your password.
The password you entered is not correct. Please re-enter your password.
\There have been %1!d! invalid attempts to enter the password to unlock this virtual machine.
\There have been %1!d! invalid attempts to enter the password to unlock this virtual machine.
VMware Workstation ACE Edition lets you create, configure, distribute and support managed virtual machines that users in your organization can run at work or at home.
VMware Workstation ACE Edition lets you create, configure, distribute and support managed virtual machines that users in your organization can run at work or at home.
Unable to run %s
Unable to run %s
.The file "%1!s!" is not a valid %2!s! project.6The file "%1!s!" is not a valid %2!s! virtual machine.
.The file "%1!s!" is not a valid %2!s! project.6The file "%1!s!" is not a valid %2!s! virtual machine.
VMware Workstation ACE EditionLVMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|All files (*.*)|*.*||.The file "%1!s!" is not a valid %2!s! hot fix. Unable to open hot fix file "%1!s!":
VMware Workstation ACE EditionLVMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|All files (*.*)|*.*||.The file "%1!s!" is not a valid %2!s! hot fix. Unable to open hot fix file "%1!s!":
private recovery key file
private recovery key file
Created on%new password for this virtual machine
Created on%new password for this virtual machine
password confirmationAThe password and confirmation are not the same. Please try again.KTo apply the hot fix, double-click the hot fix file attached to this email.wTo send the hot fix to the end user, click Send hot fix on the hot fix summary or manually send the hot fix file %1!s!.
password confirmationAThe password and confirmation are not the same. Please try again.KTo apply the hot fix, double-click the hot fix file attached to this email.wTo send the hot fix to the end user, click Send hot fix on the hot fix summary or manually send the hot fix file %1!s!.
Browse for Recovery Key
Browse for Recovery Key
Send Hot Fix7Private Key Files (*.priv)|*.priv|All files (*.*)|*.*||
Send Hot Fix7Private Key Files (*.priv)|*.priv|All files (*.*)|*.*||
Clone Type.How do you want to clone this virtual machine?
Clone Type.How do you want to clone this virtual machine?
Clone Source/Which state do you want to create a clone from?9This virtual machine has no existing cloneable snapshots.eThis virtual machine is a template. To clone it, you must create a snapshot or disable template mode.
Clone Source/Which state do you want to create a clone from?9This virtual machine has no existing cloneable snapshots.eThis virtual machine is a template. To clone it, you must create a snapshot or disable template mode.
Please specify the team name.!Please specify the team location.LThe specified team path already exists. Please specify a different location.
Please specify the team name.!Please specify the team location.LThe specified team path already exists. Please specify a different location.
VMware Workstation Files (*.vmx,*.vmtm)|*.vmx;*.vmtm|VMware Configuration Files (*.vmx)|*.vmx|VMware Team Files (*.vmtm)|*.vmtm|VMware ACE Master Files (*.vmxa)|*.vmxa|VMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|Microsoft Virtual PC/Virtual Server Files (*.vmc)|*.vmc|Symantec Backup Exec Files (*.sv2i)|*.sv2i|StorageCraft ShadowProtect Files (*.spf)|*.spf|Acronis True Image Files (*.tib)|*.tib|Open Virtual Machine Format Images (*.ovf, *.ova)|*.ovf;*.ova|All image files (*.vmx,*.vmtm,*.vmc,*.sv2i,*.spf,*.tib,*.ovf,*.ova)|*.vmx;*.vmtm;*.vmc;*.sv2i;*.spf;*.tib;*.ovf;*.ova|All files (*.*)|*.*||
VMware Workstation Files (*.vmx,*.vmtm)|*.vmx;*.vmtm|VMware Configuration Files (*.vmx)|*.vmx|VMware Team Files (*.vmtm)|*.vmtm|VMware ACE Master Files (*.vmxa)|*.vmxa|VMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|Microsoft Virtual PC/Virtual Server Files (*.vmc)|*.vmc|Symantec Backup Exec Files (*.sv2i)|*.sv2i|StorageCraft ShadowProtect Files (*.spf)|*.spf|Acronis True Image Files (*.tib)|*.tib|Open Virtual Machine Format Images (*.ovf, *.ova)|*.ovf;*.ova|All image files (*.vmx,*.vmtm,*.vmc,*.sv2i,*.spf,*.tib,*.ovf,*.ova)|*.vmx;*.vmtm;*.vmc;*.sv2i;*.spf;*.tib;*.ovf;*.ova|All files (*.*)|*.*||
Add Existing Virtual Machine Add New Clone of Virtual Machine>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
Add Existing Virtual Machine Add New Clone of Virtual Machine>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
SummaryTThe team "%1!s!" is still powered on. You must power off all teams before quitting.jThe virtual machine "%1!s!" is still powered on. You must power off all virtual machines before quitting.%The team "%1!s!" is still powered on.0The virtual machine "%1!s!" is still powered on.
SummaryTThe team "%1!s!" is still powered on. You must power off all teams before quitting.jThe virtual machine "%1!s!" is still powered on. You must power off all virtual machines before quitting.%The team "%1!s!" is still powered on.0The virtual machine "%1!s!" is still powered on.
key combination
key combination
HTTP Proxy=%3
HTTP Proxy=%3
Port=%4
Port=%4
Create New Package
Create New Package
Baidu.com, Inc.
Baidu.com, Inc.
1.0.3.0
1.0.3.0
Copyright(C) Baidu.com, Inc. All rights reserved.
Copyright(C) Baidu.com, Inc. All rights reserved.
ting_Setup.exe
ting_Setup.exe
%original file name%.exe_1332_rwx_00401000_002C8000:
t$(SSh
t$(SSh
~%UVW
~%UVW
u$SShe
u$SShe
user32.dll
user32.dll
Kernel32.dll
Kernel32.dll
kernel32.dll
kernel32.dll
wininet.dll
wininet.dll
advapi32.dll
advapi32.dll
shlwapi.dll
shlwapi.dll
EnumWindows
EnumWindows
HttpOpenRequestA
HttpOpenRequestA
HttpSendRequestA
HttpSendRequestA
HttpQueryInfoA
HttpQueryInfoA
1.2.9
1.2.9
bbs.125.la
bbs.125.la
?hXXp://VVV.ip138.com
?hXXp://VVV.ip138.com
https
https
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
http=
http=
HTTP/1.1
HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXps://
hXXps://
hXXp://
hXXp://
0@C:\Windir\wind.dat
0@C:\Windir\wind.dat
C:\Windir\
C:\Windir\
QQ.exe
QQ.exe
99999999
99999999
%Documents and Settings%\
%Documents and Settings%\
D:\My Documents\Tencent Files\
D:\My Documents\Tencent Files\
C:\Users\
C:\Users\
%Documents and Settings%\Administrator\Application Data\Tencent\Users\
%Documents and Settings%\Administrator\Application Data\Tencent\Users\
scripting.FileSystemObject
scripting.FileSystemObject
&QQPassWord=
&QQPassWord=
360tray.exe
360tray.exe
360tray.exe|
360tray.exe|
360sd.exe
360sd.exe
360sd.exe|
360sd.exe|
kxetray.exe
kxetray.exe
kxetray.exe|
kxetray.exe|
QQPCTray.exe
QQPCTray.exe
QQPCTray.exe|
QQPCTray.exe|
RavMonD.exe
RavMonD.exe
RavMonD.exe|
RavMonD.exe|
avp.exe
avp.exe
avp.exe|
avp.exe|
egui.exe
egui.exe
egui.exe|
egui.exe|
knsdtray.exe
knsdtray.exe
knsdtray.exe|
knsdtray.exe|
KvMonXP.exe
KvMonXP.exe
KvMonXP.exe|
KvMonXP.exe|
Mcshield.exe
Mcshield.exe
Mcshield.exe|
Mcshield.exe|
TMBMSRV.exe
TMBMSRV.exe
TMBMSRV.exe|
TMBMSRV.exe|
hXXp://im.qq.com/pcqq/
hXXp://im.qq.com/pcqq/
'77/7&*\
'77/7&*\
(7),01444
(7),01444
'9=82<.342>
'9=82<.342>
~%xkW
~%xkW
F%*.*f
F%*.*f
CNotSupportedException
CNotSupportedException
commctrl_DragListMsg
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Afx:%x:%x
COMCTL32.DLL
COMCTL32.DLL
CCmdTarget
CCmdTarget
ole32.dll
ole32.dll
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
iphlpapi.dll
iphlpapi.dll
SHLWAPI.dll
SHLWAPI.dll
MPR.dll
MPR.dll
VERSION.dll
VERSION.dll
WSOCK32.dll
WSOCK32.dll
.PAVCException@@
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.prn)|*.prn|
(*.*)|*.*||
(*.*)|*.*||
Shell32.dll
Shell32.dll
Mpr.dll
Mpr.dll
Advapi32.dll
Advapi32.dll
User32.dll
User32.dll
Gdi32.dll
Gdi32.dll
(&07-034/)7 '
(&07-034/)7 '
?? / %d]
?? / %d]
%d / %d]
%d / %d]
: %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
(*.CUR)|*.CUR|
%s:%d
%s:%d
windows
windows
out.prn
out.prn
%d.%d
%d.%d
%d / %d
%d / %d
%d/%d
%d/%d
Bogus message code %d
Bogus message code %d
(%d-%d):
(%d-%d):
%ld%c
%ld%c
%s
%s
Reply-To: %s
Reply-To: %s
From: %s
From: %s
To: %s
To: %s
Subject: %s
Subject: %s
Date: %s
Date: %s
Cc: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
%a, %d %b %Y %H:%M:%S
HELO %s
HELO %s
SMTP
SMTP
AUTH LOGIN
AUTH LOGIN
LOGIN
LOGIN
AUTH=LOGIN
AUTH=LOGIN
EHLO %s
EHLO %s
Content-Type: application/octet-stream; name=%s
Content-Type: application/octet-stream; name=%s
Content-Disposition: attachment; filename=%s
Content-Disposition: attachment; filename=%s
MAIL FROM:
MAIL FROM:
RCPT TO:
RCPT TO:
%d%d%d
%d%d%d
rundll32.exe shell32.dll,
rundll32.exe shell32.dll,
(*.htm;*.html)|*.htm;*.html
(*.htm;*.html)|*.htm;*.html
VVV.dywt.com.cn
VVV.dywt.com.cn
.PAVCOleException@@
.PAVCOleException@@
.PAVCObject@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCUserException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
.PAVCArchiveException@@
.PAVCArchiveException@@
zcÃ
zcÃ
cmon.exe
cmon.exe
adea9837ee0cc9fca523.exe
adea9837ee0cc9fca523.exe
X-Powered-By: ASP.NET
X-Powered-By: ASP.NET
c:\%original file name%.exe
c:\%original file name%.exe
`D.tR7
`D.tR7
bE.tR7
bE.tR7
`D~_C|]By[@vY?sW=pT;mR:kQ9jP8iO8hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7`H3`G2`G2`G2`G2`G2`G2`G2`G2`G2`G2`F1`G2`G2`G2`G2`G2`F2`G2`G2`F1`G2`G2aH2aH2aH3ZA,Y@,\C-^D.aF0cH1fJ2gK3iL3iL4jM4jM4jM4jM3jM4jM4jM4jM4jM3jM3jM4jM4jM4jM4jM4jM3jM3z[?
`D~_C|]By[@vY?sW=pT;mR:kQ9jP8iO8hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7hN7`H3`G2`G2`G2`G2`G2`G2`G2`G2`G2`G2`F1`G2`G2`G2`G2`G2`F2`G2`G2`F1`G2`G2aH2aH2aH3ZA,Y@,\C-^D.aF0cH1fJ2gK3iL3iL4jM4jM4jM4jM3jM4jM4jM4jM4jM3jM3jM4jM4jM4jM4jM4jM3jM3z[?
`D~_C{]Ax[@tX>pU
`D~_C{]Ax[@tX>pU
`D|^By[@tX>oS;jP8dL5`I3]F1ZD0XC/XB/WA.WA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.P
`D|^By[@tX>oS;jP8dL5`I3]F1ZD0XC/XB/WA.WA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.VA.P
`D|^Bx[@rV=lQ9fM6`H3[E1XB/U@-S?,R>,R>,Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= L8(K7&K8&K8'L8'K8'K8'K8'K8'K8'L8'K8'K8'K8'K8'K8'K8'K8'L8'K8'K8'K7&K8'K8'K8'L8(K8'D1"F2"H5#K6%P:'T=)ZA,_E.cH0fJ2hL2iL3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4iL3
`D|^Bx[@rV=lQ9fM6`H3[E1XB/U@-S?,R>,R>,Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= Q= L8(K7&K8&K8'L8'K8'K8'K8'K8'K8'L8'K8'K8'K8'K8'K8'K8'K8'L8'K8'K8'K7&K8'K8'K8'L8(K8'D1"F2"H5#K6%P:'T=)ZA,_E.cH0fJ2hL2iL3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4jM4iL3
Cl#Be-?T56:B2ò"H4#L7&Q;(W? \C-aF/eI1gK2iL2kN4jM3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3jM4iL3
Cl#Be-?T56:B2ò"H4#L7&Q;(W? \C-aF/eI1gK2iL2kN4jM3jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3jM4iL3
Al27AG3#J6%O9&T=)ZB,_E.dH0gK2iL3jM3kN4jM4jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3iL3
Al27AG3#J6%O9&T=)ZB,_E.dH0gK2iL3jM3kN4jM4jM3jM4jM4jM4jM4jM4jM4jM4jM4jM3iL3
$=ZG6'M8%R
$=ZG6'M8%R
)?XO9'T=*ZA,^D.bG0dI1fJ2hL3hK3hL3iL3iL3jM3jM4jM4jM4jM3jM4jM3jM3
)?XO9'T=*ZA,^D.bG0dI1fJ2hL3hK3hL3iL3iL3jM3jM4jM4jM4jM3jM4jM3jM3
"ChN:(S
"ChN:(S
(B`B0 C0!C0 C0!C1!D2!F3#H4$K7%O:'T=)YA,_E.cH0fJ1hK3iL4iL3
(B`B0 C0!C0 C0!C1!D2!F3#H4$K7%O:'T=)YA,_E.cH0fJ1hK3iL4iL3
2T}GHKV
2T}GHKV
yj`z[=uS/rP rO qO qO qO qO qN qN qN pN qO qN qO qO qO qO qN qN qO qN pN pN pN*pN oN oN*qO*rO tP uQ,uR,wR,vR,wS,wS,wR,wS,wS-wS-wS.xS/wS/rT4rR3pR2nP1lO0fJ-Y@)K6$G3#J6$O9'U=)ZA,_E/cH1gK2iL3iL4
yj`z[=uS/rP rO qO qO qO qO qN qN qN pN qO qN qO qO qO qO qN qN qO qN pN pN pN*pN oN oN*qO*rO tP uQ,uR,wR,vR,wS,wS,wR,wS,wS-wS-wS.xS/wS/rT4rR3pR2nP1lO0fJ-Y@)K6$G3#J6$O9'U=)ZA,_E/cH1gK2iL3iL4
];~]:}\:|[:yY8vW6rU5pR3lO0gJ.U>'H4$L7&R;(X@ ]D.bG0fJ2hL3iL4
];~]:}\:|[:yY8vW6rU5pR3lO0gJ.U>'H4$L7&R;(X@ ]D.bG0fJ2hL3iL4
`
`
_=tU7ZB,`F.dI1gK3hK2
_=tU7ZB,`F.dI1gK3hK2
eBxZ:[B-aF.dI1gK2hK3
eBxZ:[B-aF.dI1gK2hK3
iEyZ;[B-`F.dI0gK2hK3
iEyZ;[B-`F.dI0gK2hK3
iEsW
iEsW
jFz[=[B-`F.dI1gK3hK3
jFz[=[B-`F.dI1gK3hK3
iEqU;T>,V@-WA-XA.YB.YB.YB.YB.YB.YB.YB.YB.YB.YA.XA.WA.V?,U> S= Q10t
iEqU;T>,V@-WA-XA.YB.YB.YB.YB.YB.YB.YB.YB.YB.YA.XA.WA.V?,U> S= Q10t
kF{\=[B,`F.eJ1gK3hK3
kF{\=[B,`F.eJ1gK3hK3
nI}^>[B-`F.eJ1gK3hK3
nI}^>[B-`F.eJ1gK3hK3
oJ}_?[B,`F.dI0hL3hK3
oJ}_?[B,`F.dI0hL3hK3
oJ~_?[B-`F.dI1gK3hK3
oJ~_?[B-`F.dI1gK3hK3
`@]D.bG0eJ1hK3iM3
`@]D.bG0eJ1hK3iM3
GetCPInfo
GetCPInfo
WinExec
WinExec
GetProcessHeap
GetProcessHeap
RegCloseKey
RegCloseKey
RegCreateKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExA
GetViewportOrgEx
GetViewportOrgEx
GetViewportExtEx
GetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
ShellExecuteA
ShellExecuteA
UnregisterHotKey
UnregisterHotKey
RegisterHotKey
RegisterHotKey
SetWindowsHookExA
SetWindowsHookExA
GetKeyState
GetKeyState
CreateDialogIndirectParamA
CreateDialogIndirectParamA
UnhookWindowsHookEx
UnhookWindowsHookEx
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
ÂH]
ÂH]
Impor&t or Export...
Impor&t or Export...
Import &Windows XP Mode VM
Import &Windows XP Mode VM
%s Enter
%s Enter
C&apture Screen%s
C&apture Screen%s
%s PrtScn
%s PrtScn
%s Right
%s Right
%s Left
%s Left
&Windows
&Windows
&Guest Operating System Install Guide
&Guest Operating System Install Guide
VMware on the &Web
VMware on the &Web
O&nline Support
O&nline Support
Request &Support
Request &Support
Check for &Updates on the Web
Check for &Updates on the Web
Collect &Support Data...
Collect &Support Data...
cmdBar
cmdBar
Collect Support Data
Collect Support Data
Select the virtual machines you want to collect support data for. When this process finishes (which may take several minutes) you can send the collected data to VMware for troubleshooting.
Select the virtual machines you want to collect support data for. When this process finishes (which may take several minutes) you can send the collected data to VMware for troubleshooting.
Password:
Password:
To access virtual machines on the local computer you are using, select Local host. To access virtual machines on a networked host, select Remote host and enter the host name and a valid user name and password.
To access virtual machines on the local computer you are using, select Local host. To access virtual machines on a networked host, select Remote host and enter the host name and a valid user name and password.
&Password:
&Password:
VMware Web Check
VMware Web Check
View a list of virtual machines available on this server and to select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
View a list of virtual machines available on this server and to select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Display the GSX Server configuration window. From this window you can set all of the server configuration options that affect the operation and performance characteristics of the server.
Display the GSX Server configuration window. From this window you can set all of the server configuration options that affect the operation and performance characteristics of the server.
Create a new virtual machine. Install and run a variety of standard operating systems in the virtual machine.
Create a new virtual machine. Install and run a variety of standard operating systems in the virtual machine.
Browse for virtual machines or teams and select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Browse for virtual machines or teams and select one to display in this panel. Interact with the guest operating system within this display as you would a standard PC.
Select the VMware host that you want to connect to and enter a valid user name and password.
Select the VMware host that you want to connect to and enter a valid user name and password.
If you have forgotten your password, click this button to ask your administrator to reset the password.
If you have forgotten your password, click this button to ask your administrator to reset the password.
&Show AutoProtect snapshots (%u hidden)
&Show AutoProtect snapshots (%u hidden)
Preparing clone operation
Preparing clone operation
Recovery key
Recovery key
You can reset the password for this ACE instance and send the hot fix back to the user.
You can reset the password for this ACE instance and send the hot fix back to the user.
Specify the private portion of the recovery key and the password to access this key.
Specify the private portion of the recovery key and the password to access this key.
&Private recovery key:
&Private recovery key:
&Recovery key password:
&Recovery key password:
Reset password
Reset password
Choose a new password for this ACE instance.
Choose a new password for this ACE instance.
&New password:
&New password:
New password &confirm:
New password &confirm:
This new password is not displayed to the user in the hot fix. You must let the user know the new password.
This new password is not displayed to the user in the hot fix. You must let the user know the new password.
You must enter its password to continue.
You must enter its password to continue.
Enter Password
Enter Password
Login
Login
%1OThe application encountered an error while running this operation
%1OThe application encountered an error while running this operation
Error ID = You do not have permissions to perform this operation
Error ID = You do not have permissions to perform this operation
VMware Workstation allows multiple standard operating systems and their applications to run with high performance in secure and transportable virtual machines. Each virtual machine is equivalent to a PC with a unique network address and full complement of hardware choices.
VMware Workstation allows multiple standard operating systems and their applications to run with high performance in secure and transportable virtual machines. Each virtual machine is equivalent to a PC with a unique network address and full complement of hardware choices.
The VMware Virtual Machine Console lets you connect to virtual machines that run on VMware GSX Server or VMware ESX Server systems. Each virtual machine is equivalent to a physical server with storage, networking, memory and devices. The VMware Virtual Machine Console gives you full control over virtual machines, including keyboard, video and mouse interactivity.
The VMware Virtual Machine Console lets you connect to virtual machines that run on VMware GSX Server or VMware ESX Server systems. Each virtual machine is equivalent to a physical server with storage, networking, memory and devices. The VMware Virtual Machine Console gives you full control over virtual machines, including keyboard, video and mouse interactivity.
Remove from &Favorites Legacy virtual machine for %1 %2!Current virtual machine for %1 &Unable to create a new virtual machine "%1!s!":
Remove from &Favorites Legacy virtual machine for %1 %2!Current virtual machine for %1 &Unable to create a new virtual machine "%1!s!":
úiled to enter serial number:
úiled to enter serial number:
&About %s
&About %s
About %s
About %s
Product: %s
Product: %s
Version: %s
Version: %s
Suspended screenshot for %s
Suspended screenshot for %s
>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
please register on our Web site at "%2".
please register on our Web site at "%2".
- Opportunity to receive 30 days of complimentary Web-based support
- Opportunity to receive 30 days of complimentary Web-based support
choosing "VMware on the Web" > "Register Now!"
choosing "VMware on the Web" > "Register Now!"
or by visiting our Web site at: "%4"
or by visiting our Web site at: "%4"
- Activation of support and subscription services you have purchased
- Activation of support and subscription services you have purchased
choosing the "VMware on the web" > "Register Now!" option,
choosing the "VMware on the web" > "Register Now!" option,
or by visiting our Web site at: "%4"VSorry! Another client is currently submitting changes.
or by visiting our Web site at: "%4"VSorry! Another client is currently submitting changes.
Remove "%s" from the Favorites?
Remove "%s" from the Favorites?
(Port %1!d!)
(Port %1!d!)
DA snapshot operation is already in progress.
DA snapshot operation is already in progress.
Please try again later.;BMP Windows Bitmap Format (*.bmp)|*.bmp|PNG (*.PNG)|*.PNG||
Please try again later.;BMP Windows Bitmap Format (*.bmp)|*.bmp|PNG (*.PNG)|*.PNG||
(%s).
(%s).
9Sorry! Another client has already started this operation.
9Sorry! Another client has already started this operation.
%1 has detected that your host uses a Japanese locale. However, the Japanese language is not supported with the English-only version you are running. %1 will exit now. The next time you run %1, the English language will be used.
%1 has detected that your host uses a Japanese locale. However, the Japanese language is not supported with the English-only version you are running. %1 will exit now. The next time you run %1, the English language will be used.
%1 has detected that you just enabled Japanese language support. %1 will exit now. The next time you run %1, the Japanese language will be used.
%1 has detected that you just enabled Japanese language support. %1 will exit now. The next time you run %1, the Japanese language will be used.
Please request support and include the contents of the log file: "%2".$%s
Please request support and include the contents of the log file: "%2".$%s
DThis virtual machine is locked and has not been assigned a password.AThis virtual machine is locked and requires a password to use it.8Assign a password to this virtual machine and unlock it.4Enter your password and unlock this virtual machine.
DThis virtual machine is locked and has not been assigned a password.AThis virtual machine is locked and requires a password to use it.8Assign a password to this virtual machine and unlock it.4Enter your password and unlock this virtual machine.
Invalid UserOYour administrator has not given you permission to access this virtual machine.GThis virtual machine cannot be opened because it is a member of a team.
Invalid UserOYour administrator has not given you permission to access this virtual machine.GThis virtual machine cannot be opened because it is a member of a team.
AVI Video Format (*.avi)|*.avi||&High (best quality for short captures) Medium (higher quality for longer captures)
AVI Video Format (*.avi)|*.avi||&High (best quality for short captures) Medium (higher quality for longer captures)
1A movie capture operation cannot occur right now.
1A movie capture operation cannot occur right now.
Error resetting password.
Error resetting password.
Approved on %s.
Approved on %s.
Denied on %s.
Denied on %s.
All files (*.*)|*.*||
All files (*.*)|*.*||
8When this dialog box closes, &email hot fix to user (%s)
8When this dialog box closes, &email hot fix to user (%s)
Hot fix sent on %s.
Hot fix sent on %s.
Password reset
Password reset
Using custom policies2Could not find %s. Please browse for this project.[This project does not match the project we need to open this hot fix. Please browse for %s.
Using custom policies2Could not find %s. Please browse for this project.[This project does not match the project we need to open this hot fix. Please browse for %s.
Guest Operating System
Guest Operating System
Please check that you have shut down your guest operating system first before powering off.
Please check that you have shut down your guest operating system first before powering off.
Do you want to revert to "%s"?
Do you want to revert to "%s"?
IP AddressRThe virtual machine %1 (%2) cannot be unregistered because it is still powered on.MThe virtual machine %1 (%2) cannot be deleted because it is still powered on.
IP AddressRThe virtual machine %1 (%2) cannot be unregistered because it is still powered on.MThe virtual machine %1 (%2) cannot be deleted because it is still powered on.
2Please wait while %s checks for available updates.#No new %1!s! updates are available.
2Please wait while %s checks for available updates.#No new %1!s! updates are available.
Check your Web browser configuration settings and your connection hardware.
Check your Web browser configuration settings and your connection hardware.
The virtual machine is configured to run only within your current Windows session. When you log off of the Windows session, the virtual machine will be powered off.
The virtual machine is configured to run only within your current Windows session. When you log off of the Windows session, the virtual machine will be powered off.
If you click OK, the virtual machine will be powered off when you log off of the session.jOther connected users may be affected by this operation.
If you click OK, the virtual machine will be powered off when you log off of the session.jOther connected users may be affected by this operation.
Proceed with this operation?
Proceed with this operation?
*Are you sure you want to close project %s?lYou can have only one project open at a time.
*Are you sure you want to close project %s?lYou can have only one project open at a time.
Are you sure you want to close '%s' and create a new project?[You can have only one project open at a time.
Are you sure you want to close '%s' and create a new project?[You can have only one project open at a time.
Are you sure you want to close project '%s'?
Are you sure you want to close project '%s'?
The password you entered is not correct. Please re-enter your password.
The password you entered is not correct. Please re-enter your password.
\There have been %1!d! invalid attempts to enter the password to unlock this virtual machine.
\There have been %1!d! invalid attempts to enter the password to unlock this virtual machine.
VMware Workstation ACE Edition lets you create, configure, distribute and support managed virtual machines that users in your organization can run at work or at home.
VMware Workstation ACE Edition lets you create, configure, distribute and support managed virtual machines that users in your organization can run at work or at home.
Unable to run %s
Unable to run %s
.The file "%1!s!" is not a valid %2!s! project.6The file "%1!s!" is not a valid %2!s! virtual machine.
.The file "%1!s!" is not a valid %2!s! project.6The file "%1!s!" is not a valid %2!s! virtual machine.
VMware Workstation ACE EditionLVMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|All files (*.*)|*.*||.The file "%1!s!" is not a valid %2!s! hot fix. Unable to open hot fix file "%1!s!":
VMware Workstation ACE EditionLVMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|All files (*.*)|*.*||.The file "%1!s!" is not a valid %2!s! hot fix. Unable to open hot fix file "%1!s!":
private recovery key file
private recovery key file
Created on%new password for this virtual machine
Created on%new password for this virtual machine
password confirmationAThe password and confirmation are not the same. Please try again.KTo apply the hot fix, double-click the hot fix file attached to this email.wTo send the hot fix to the end user, click Send hot fix on the hot fix summary or manually send the hot fix file %1!s!.
password confirmationAThe password and confirmation are not the same. Please try again.KTo apply the hot fix, double-click the hot fix file attached to this email.wTo send the hot fix to the end user, click Send hot fix on the hot fix summary or manually send the hot fix file %1!s!.
Browse for Recovery Key
Browse for Recovery Key
Send Hot Fix7Private Key Files (*.priv)|*.priv|All files (*.*)|*.*||
Send Hot Fix7Private Key Files (*.priv)|*.priv|All files (*.*)|*.*||
Clone Type.How do you want to clone this virtual machine?
Clone Type.How do you want to clone this virtual machine?
Clone Source/Which state do you want to create a clone from?9This virtual machine has no existing cloneable snapshots.eThis virtual machine is a template. To clone it, you must create a snapshot or disable template mode.
Clone Source/Which state do you want to create a clone from?9This virtual machine has no existing cloneable snapshots.eThis virtual machine is a template. To clone it, you must create a snapshot or disable template mode.
Please specify the team name.!Please specify the team location.LThe specified team path already exists. Please specify a different location.
Please specify the team name.!Please specify the team location.LThe specified team path already exists. Please specify a different location.
VMware Workstation Files (*.vmx,*.vmtm)|*.vmx;*.vmtm|VMware Configuration Files (*.vmx)|*.vmx|VMware Team Files (*.vmtm)|*.vmtm|VMware ACE Master Files (*.vmxa)|*.vmxa|VMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|Microsoft Virtual PC/Virtual Server Files (*.vmc)|*.vmc|Symantec Backup Exec Files (*.sv2i)|*.sv2i|StorageCraft ShadowProtect Files (*.spf)|*.spf|Acronis True Image Files (*.tib)|*.tib|Open Virtual Machine Format Images (*.ovf, *.ova)|*.ovf;*.ova|All image files (*.vmx,*.vmtm,*.vmc,*.sv2i,*.spf,*.tib,*.ovf,*.ova)|*.vmx;*.vmtm;*.vmc;*.sv2i;*.spf;*.tib;*.ovf;*.ova|All files (*.*)|*.*||
VMware Workstation Files (*.vmx,*.vmtm)|*.vmx;*.vmtm|VMware Configuration Files (*.vmx)|*.vmx|VMware Team Files (*.vmtm)|*.vmtm|VMware ACE Master Files (*.vmxa)|*.vmxa|VMware ACE Hot Fix Files (*.vmhr,*.vmhf)|*.vmhr;*.vmhf|Microsoft Virtual PC/Virtual Server Files (*.vmc)|*.vmc|Symantec Backup Exec Files (*.sv2i)|*.sv2i|StorageCraft ShadowProtect Files (*.spf)|*.spf|Acronis True Image Files (*.tib)|*.tib|Open Virtual Machine Format Images (*.ovf, *.ova)|*.ovf;*.ova|All image files (*.vmx,*.vmtm,*.vmc,*.sv2i,*.spf,*.tib,*.ovf,*.ova)|*.vmx;*.vmtm;*.vmc;*.sv2i;*.spf;*.tib;*.ovf;*.ova|All files (*.*)|*.*||
Add Existing Virtual Machine Add New Clone of Virtual Machine>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
Add Existing Virtual Machine Add New Clone of Virtual Machine>VMware Configuration Files (*.vmx)|*.vmx|All files (*.*)|*.*||
SummaryTThe team "%1!s!" is still powered on. You must power off all teams before quitting.jThe virtual machine "%1!s!" is still powered on. You must power off all virtual machines before quitting.%The team "%1!s!" is still powered on.0The virtual machine "%1!s!" is still powered on.
SummaryTThe team "%1!s!" is still powered on. You must power off all teams before quitting.jThe virtual machine "%1!s!" is still powered on. You must power off all virtual machines before quitting.%The team "%1!s!" is still powered on.0The virtual machine "%1!s!" is still powered on.
key combination
key combination
HTTP Proxy=%3
HTTP Proxy=%3
Port=%4
Port=%4
Create New Package
Create New Package
%original file name%.exe_1332_rwx_007B0000_00002000:
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
KERNEL32.DLL
KERNEL32.DLL
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
comdlg32.dll
comdlg32.dll
GDI32.dll
GDI32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
oledlg.dll
oledlg.dll
RASAPI32.dll
RASAPI32.dll
SHELL32.dll
SHELL32.dll
USER32.dll
USER32.dll
WININET.dll
WININET.dll
WINMM.dll
WINMM.dll
WINSPOOL.DRV
WINSPOOL.DRV
WS2_32.dll
WS2_32.dll
RegCloseKey
RegCloseKey
Baidu.com, Inc.
Baidu.com, Inc.
1.0.3.0
1.0.3.0
Copyright(C) Baidu.com, Inc. All rights reserved.
Copyright(C) Baidu.com, Inc. All rights reserved.
ting_Setup.exe
ting_Setup.exe
%original file name%.exe_1332_rwx_007B3000_0001A000:
.rsrc
.rsrc
.text
.text
.rdata
.rdata
.data
.data
20050518
20050518
346457458.exe.BOX
346457458.exe.BOX
kernel32.dll
kernel32.dll
gdi32.dll
gdi32.dll
user32.dll
user32.dll
ole32.dll
ole32.dll
advapi32.dll
advapi32.dll
oleaut32.dll
oleaut32.dll
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
1.1.4
1.1.4
WindowsNT(unknown)
WindowsNT(unknown)
Windows.NET
Windows.NET
WindowsXP
WindowsXP
Windows2000
Windows2000
WindowsNT(4.0)
WindowsNT(4.0)
WindowsNT(3.51)
WindowsNT(3.51)
Windows9x(unknown)
Windows9x(unknown)
WindowsMe
WindowsMe
Windows98
Windows98
Windows95
Windows95
EnumWindows
EnumWindows
:BOX:ReadCompressedSection: decompresion failed with code %d
:BOX:ReadCompressedSection: decompresion failed with code %d
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\boxmanager.cpp
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\boxmanager.cpp
The dynamic link library '%s' could not be found
The dynamic link library '%s' could not be found
oleaout32.dll
oleaout32.dll
oleoaut32.dll
oleoaut32.dll
imm32.dll
imm32.dll
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\mbx_DLL.cpp
D:\Projects\My.SRC\Teggo\MoleBox\molebox2\bootup\mbx_DLL.cpp
MBX@%X@*.###
MBX@%X@*.###
Error at %s:%d
Error at %s:%d
-up1.txt
-up1.txt
-up.txt
-up.txt
windows error %s
windows error %s
at %s(%d)
at %s(%d)
MBX@%X@%X.###
MBX@%X@%X.###
MBX@%X@%X@%X.###
MBX@%X@%X@%X.###
HAS NO ACCESS TO EXECUTABLE
HAS NO ACCESS TO EXECUTABLE
ESI:0xX EDI:0xX
ESI:0xX EDI:0xX
ESP:0xX EBP:0xX EIP:0xX
ESP:0xX EBP:0xX EIP:0xX
EAX:0xX EDX:0xX ECX:0xX
EAX:0xX EDX:0xX ECX:0xX
ES :0xX FS :0xX GS :0xX
ES :0xX FS :0xX GS :0xX
CS :0xX SS :0xX DS :0xX
CS :0xX SS :0xX DS :0xX
__SEH__ 0x%x at 0x%x
__SEH__ 0x%x at 0x%x
{CC7574E4-5E39-4700-B286-269A82DD8E95}
{CC7574E4-5E39-4700-B286-269A82DD8E95}
_splashscreen.bmp
_splashscreen.bmp
!broken!0xx:
!broken!0xx:
0xx:[%s]:(x:x)
0xx:[%s]:(x:x)
0xx:[unknown]:unknown
0xx:[unknown]:unknown
0xx: 0xx 0xx 0xx 0xx
0xx: 0xx 0xx 0xx 0xx
ADVAPI32.DLL
ADVAPI32.DLL
CLSID\{x-x-x-xx-xxxxxx}\InprocServer32
CLSID\{x-x-x-xx-xxxxxx}\InprocServer32