Trojan.Win32.Reconyc.dshg (Kaspersky), Gen:Variant.Strictor.20604 (B) (Emsisoft), Gen:Variant.Strictor.20604 (AdAware), GenericAutorunWorm.YR, GenericInjector.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 8301ac295ed00f6e6fc7c23cd72a9993
SHA1: 8d37c1bcd7c9365bed8b77fd43bccc0f79e4a509
SHA256: 78deb1dd72a584fcb687892db0038e97a771ccdbdd98593f24002ab9e8860775
SSDeep: 98304:QHRzpLyMg9/z7DG7R6jTqUoLjBp5MXrPHpWQJy:QXLRw/Xy TiBrKJW8y
Size: 4120576 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: no certificate found
Created at: 2015-02-03 04:54:26
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):
schtasks.exe:1608
schtasks.exe:644
%original file name%.exe:1076
The Trojan injects its code into the following process(es):
Windows Loader.exe:1052
iexplore.exe:500
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:1076 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe (30490 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe:ZONE.identifier (28 bytes)
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe (25429 bytes)
Registry activity
The process schtasks.exe:1608 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A5 DB CF 40 71 56 8F C3 1F DF 4D D5 06 66 60 B1"
The process schtasks.exe:644 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "43 4A 07 B9 B5 62 3A 2E 58 F1 BE A9 2C D5 45 04"
The process Windows Loader.exe:1052 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5B 9A 15 79 7B 29 3A 14 7C BE 61 BC 7F 89 B3 4B"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
The Trojan deletes the following registry key(s):
[HKLM\HARDWARE\DESCRIPTION\System\BIOS]
The process %original file name%.exe:1076 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "33 89 7C D3 44 DF 9E F6 FB 4C 95 14 AE 40 3B E2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"WINDOWS LOADER.EXE" = "Windows Loader"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"svchost.exe" = "svchost"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
"Personal" = "%Documents and Settings%\%current user%\My Documents"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Dropped PE files
MD5 | File path |
---|---|
3976bd5fcbb7cd13f0c12bb69afc2adc | c:\Documents and Settings\"%CurrentUserName%"\Application Data\Windows Loader.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
schtasks.exe:1608
schtasks.exe:644
%original file name%.exe:1076 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe (30490 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe:ZONE.identifier (28 bytes)
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe (25429 bytes) - Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 8192 | 4083940 | 4087808 | 5.54389 | 94e992e81ab9a9eb2155612c1999a21c |
.rsrc | 4096000 | 22874 | 24576 | 3.86525 | 182c5f265e699f7a2205a21a85ebe505 |
.reloc | 4120576 | 12 | 4096 | 0.011373 | 0f784690123c94ddefa30c4572d78116 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
Windows Loader.exe_1052:
`.rsrc
`.rsrc
FtPQW
FtPQW
~.SSW
~.SSW
SPSSSSSSSh
SPSSSSSSSh
PQSSh
PQSSh
u.jhh
u.jhh
mscoree.dll
mscoree.dll
.mixcrt
.mixcrt
KERNEL32.DLL
KERNEL32.DLL
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
kernel32.dll
kernel32.dll
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
..\..\..\..\Common\application.cpp
..\..\..\..\Common\application.cpp
c:\RB\Universal\StringMap.h
c:\RB\Universal\StringMap.h
..\..\..\..\Common\array.cpp
..\..\..\..\Common\array.cpp
..\..\..\..\Common\basicstr.cpp
..\..\..\..\Common\basicstr.cpp
ptr - out.CString() == totalLen
ptr - out.CString() == totalLen
theStr.Encoding() == kEncodingUTF8 or theStr.Encoding() == kEncodingUTF16 or theStr.Encoding() == kEncodingASCII
theStr.Encoding() == kEncodingUTF8 or theStr.Encoding() == kEncodingUTF16 or theStr.Encoding() == kEncodingASCII
..\..\..\..\Common\BlowFish.cpp
..\..\..\..\Common\BlowFish.cpp
ewcKeyDown
ewcKeyDown
KeyDown
KeyDown
..\..\..\..\Common\Canvas.cpp
..\..\..\..\Common\Canvas.cpp
..\..\..\..\Common\CommonListbox.cpp
..\..\..\..\Common\CommonListbox.cpp
MinWidthExpression doesn't support the Asterisk ('*') format.
MinWidthExpression doesn't support the Asterisk ('*') format.
MaxWidthExpression doesn't support the Asterisk ('*') format.
MaxWidthExpression doesn't support the Asterisk ('*') format.
..\..\..\..\Common\commonruntime.cpp
..\..\..\..\Common\commonruntime.cpp
trace.log
trace.log
..\..\..\..\Common\CommonRunView.cpp
..\..\..\..\Common\CommonRunView.cpp
We weren't passed in a control, we got nil.
We weren't passed in a control, we got nil.
..\..\..\..\Universal\CommonWinFunctions.cpp
..\..\..\..\Universal\CommonWinFunctions.cpp
Operator_Convert
Operator_Convert
..\..\..\..\Common\ConsoleApplication.cpp
..\..\..\..\Common\ConsoleApplication.cpp
msvcrt.dll
msvcrt.dll
..\..\..\..\Universal\DataFile.cpp
..\..\..\..\Universal\DataFile.cpp
Operator_Compare
Operator_Compare
dateSQLDateTimeSetter
dateSQLDateTimeSetter
dateSQLDateTimeGetter
dateSQLDateTimeGetter
SQLDateTime
SQLDateTime
dateSQLDateSetter
dateSQLDateSetter
dateSQLDateGetter
dateSQLDateGetter
SQLDate
SQLDate
..\..\..\..\Common\DateCommon.cpp
..\..\..\..\Common\DateCommon.cpp
..\..\..\..\Universal\DateImp\DateImpWin32.cpp
..\..\..\..\Universal\DateImp\DateImpWin32.cpp
Password
Password
SQLSelect
SQLSelect
databaseSQLExecute
databaseSQLExecute
SQLExecute
SQLExecute
sqlString
sqlString
databaseSQLSelect
databaseSQLSelect
..\..\..\..\Common\dbInterface.cpp
..\..\..\..\Common\dbInterface.cpp
00:00:00
00:00:00
00:00:00
00:00:00
Invalid operator
Invalid operator
Quotes expected after LIKE operation
Quotes expected after LIKE operation
Only COUNT(*) supported
Only COUNT(*) supported
Unsupported SELECT function
Unsupported SELECT function
Only single GROUP BY columns currently supported
Only single GROUP BY columns currently supported
Expecting 'KEY'
Expecting 'KEY'
Dropping columns is not supported for this database
Dropping columns is not supported for this database
Dropping tables from this database is not currently supported.
Dropping tables from this database is not currently supported.
..\..\..\..\Common\DebuggerConnection.cpp
..\..\..\..\Common\DebuggerConnection.cpp
0000000000000000
0000000000000000
127.0.0.1
127.0.0.1
c:\RB\Compiler\SmartRef.h
c:\RB\Compiler\SmartRef.h
..\..\..\..\Common\DebuggerSupport.cpp
..\..\..\..\Common\DebuggerSupport.cpp
00000000
00000000
The debug application cannot connect back to the REALbasic IDE. This is mostly likely due to a software firewall or packet filter not allowing localhost network traffic on ports 13897 or 60554. You should reconfigure your software firewall or packet filter to allow the debug application to connect to REALbasic.
The debug application cannot connect back to the REALbasic IDE. This is mostly likely due to a software firewall or packet filter not allowing localhost network traffic on ports 13897 or 60554. You should reconfigure your software firewall or packet filter to allow the debug application to connect to REALbasic.
DebuggerSupport.cpp
DebuggerSupport.cpp
dictionaryHasKey
dictionaryHasKey
HasKey
HasKey
2147483647
2147483647
..\..\..\..\Common\Dictionary.cpp
..\..\..\..\Common\Dictionary.cpp
dictionaryKeys
dictionaryKeys
Keys
Keys
dictionaryKey
dictionaryKey
..\..\..\..\Common\DockItem.cpp
..\..\..\..\Common\DockItem.cpp
..\..\..\..\Common\DragItem.cpp
..\..\..\..\Common\DragItem.cpp
Could not lock the BITMAPINFO structure passsed to the DrawableBitmap constructor
Could not lock the BITMAPINFO structure passsed to the DrawableBitmap constructor
..\..\..\..\Common\drawable.cpp
..\..\..\..\Common\drawable.cpp
..\..\..\..\Common\fileTypes.cpp
..\..\..\..\Common\fileTypes.cpp
..\..\..\..\Common\FolderItemDialog.cpp
..\..\..\..\Common\FolderItemDialog.cpp
Shell32.dll
Shell32.dll
FolderItemDialogInitializer
FolderItemDialogInitializer
OpenDialogInitializer
OpenDialogInitializer
SaveAsDialogInitializer
SaveAsDialogInitializer
SelectFolderDialogInitializer
SelectFolderDialogInitializer
..\..\..\..\Universal\FolderItemImp\FolderItemImpVirtual.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpVirtual.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpWin32.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpWin32.cpp
Kernel32.dll
Kernel32.dll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
in Windows
in Windows
OpenAsPicture doesn't support format
OpenAsPicture doesn't support format
in Windows.
in Windows.
SaveAsPicture doesn't support format
SaveAsPicture doesn't support format
Gdiplus.dll
Gdiplus.dll
not other.IsVirtual()
not other.IsVirtual()
SHFileOperationW
SHFileOperationW
SHFileOperationA
SHFileOperationA
%%.ß
%%.ß
%%.Þ
%%.Þ
..\..\..\..\Common\Graphics.cpp
..\..\..\..\Common\Graphics.cpp
..\..\..\..\Common\GraphicsGDI.cpp
..\..\..\..\Common\GraphicsGDI.cpp
..\..\..\..\Common\GroupBox.cpp
..\..\..\..\Common\GroupBox.cpp
..\..\..\..\Common\intrinsicClass.cpp
..\..\..\..\Common\intrinsicClass.cpp
NULL == defn->initializer.toc
NULL == defn->initializer.toc
NULL == defn->finalizer.toc
NULL == defn->finalizer.toc
OpenURLMovie
OpenURLMovie
PortType
PortType
comparisonKey
comparisonKey
OrdinalKey
OrdinalKey
StringJoin
StringJoin
Join
Join
RuntimeCompleteParamScriptExecute
RuntimeCompleteParamScriptExecute
_CompleteParamScriptExecute
_CompleteParamScriptExecute
RuntimeScriptExecute
RuntimeScriptExecute
_ScriptExecute
_ScriptExecute
getKeyboardObject
getKeyboardObject
Keyboard
Keyboard
GlobalShowURL
GlobalShowURL
ShowURL
ShowURL
getApplicationSupportFolder
getApplicationSupportFolder
ApplicationSupportFolder
ApplicationSupportFolder
VB_RuntimeMsgBox
VB_RuntimeMsgBox
RuntimeMsgBox
RuntimeMsgBox
MsgBox
MsgBox
exportPicture
exportPicture
ExportPicture
ExportPicture
getIndexedObjectDescriptor
getIndexedObjectDescriptor
GetIndexedObjectDescriptor
GetIndexedObjectDescriptor
openURLMovie
openURLMovie
..\..\..\..\Common\intrinsicFunction.cpp
..\..\..\..\Common\intrinsicFunction.cpp
keyboardKeyName
keyboardKeyName
KeyName
KeyName
keyboardAsyncKeyDown
keyboardAsyncKeyDown
AsyncKeyDown
AsyncKeyDown
KeyCode
KeyCode
AsyncAlternateMenuShortcutKey
AsyncAlternateMenuShortcutKey
AsyncMenuShortcutKey
AsyncMenuShortcutKey
AlternateMenuShortcutKey
AlternateMenuShortcutKey
MenuShortcutKey
MenuShortcutKey
AsyncAltKey
AsyncAltKey
AsyncOptionKey
AsyncOptionKey
AsyncControlKey
AsyncControlKey
AsyncOSKey
AsyncOSKey
AsyncCommandKey
AsyncCommandKey
asyncModifierKeyGetter
asyncModifierKeyGetter
AsyncShiftKey
AsyncShiftKey
AltKey
AltKey
OptionKey
OptionKey
ControlKey
ControlKey
OSKey
OSKey
CommandKey
CommandKey
modifierKeyGetter
modifierKeyGetter
ShiftKey
ShiftKey
_Keyboard
_Keyboard
..\..\..\..\Common\LineControl.cpp
..\..\..\..\Common\LineControl.cpp
Windows
Windows
Operator_AddRight
Operator_AddRight
Operator_Add
Operator_Add
' was not exported
' was not exported
..\..\..\..\Common\loaderX86.cpp
..\..\..\..\Common\loaderX86.cpp
import.dat
import.dat
code.dat
code.dat
data.dat
data.dat
rsrc.dat
rsrc.dat
options.dat
options.dat
symbols.dat
symbols.dat
MemoryBlockCompareOperator
MemoryBlockCompareOperator
MemoryBlockAddOperator
MemoryBlockAddOperator
MemoryBlockFromStringOperator
MemoryBlockFromStringOperator
MemoryBlockToStringOperator
MemoryBlockToStringOperator
..\..\..\..\Common\MemoryBlock.cpp
..\..\..\..\Common\MemoryBlock.cpp
..\..\..\..\Universal\MemoryManager.cpp
..\..\..\..\Universal\MemoryManager.cpp
c:\rb\universal\SimpleVector.h
c:\rb\universal\SimpleVector.h
..\..\..\..\Common\Menu.cpp
..\..\..\..\Common\Menu.cpp
..\..\..\..\Common\menubar.cpp
..\..\..\..\Common\menubar.cpp
KeyboardShortcut
KeyboardShortcut
RuntimeMenuItemCommandKeySetter
RuntimeMenuItemCommandKeySetter
RuntimeMenuItemCommandKeyGetter
RuntimeMenuItemCommandKeyGetter
TaskDialogIndirect
TaskDialogIndirect
..\..\..\..\Common\MessageDialog.cpp
..\..\..\..\Common\MessageDialog.cpp
MessageDialogInitializer
MessageDialogInitializer
..\..\..\..\Common\mouseCursor.cpp
..\..\..\..\Common\mouseCursor.cpp
SensApi.dll
SensApi.dll
..\..\..\..\Common\NuListbox.cpp
..\..\..\..\Common\NuListbox.cpp
..\..\..\..\Common\Object Model\ObjectDefinition.cpp
..\..\..\..\Common\Object Model\ObjectDefinition.cpp
..\..\..\..\Common\Object Model\ObjectDefinitionConverter.cpp
..\..\..\..\Common\Object Model\ObjectDefinitionConverter.cpp
propertyCtr properties.count
propertyCtr properties.count
..\..\..\..\Common\objects.cpp
..\..\..\..\Common\objects.cpp
KeyPress
KeyPress
KeyUp
KeyUp
LicenseKey
LicenseKey
PassByref
PassByref
Does not support a collection
Does not support a collection
Invalid/Unsupported OLE Parameter Type
Invalid/Unsupported OLE Parameter Type
ole32.dll
ole32.dll
oleaut32.dll
oleaut32.dll
OLEObjectOperatorNot
OLEObjectOperatorNot
Operator_Not
Operator_Not
Operator_OrRight
Operator_OrRight
OLEObjectOperatorOr
OLEObjectOperatorOr
Operator_Or
Operator_Or
Operator_AndRight
Operator_AndRight
OLEObjectOperatorAnd
OLEObjectOperatorAnd
Operator_And
Operator_And
OLEObjectOperatorNegate
OLEObjectOperatorNegate
Operator_Negate
Operator_Negate
OLEObjectOperatorModuloRight
OLEObjectOperatorModuloRight
Operator_ModuloRight
Operator_ModuloRight
OLEObjectOperatorModulo
OLEObjectOperatorModulo
Operator_Modulo
Operator_Modulo
OLEObjectOperatorIntegerDivideRight
OLEObjectOperatorIntegerDivideRight
Operator_IntegerDivideRight
Operator_IntegerDivideRight
OLEObjectOperatorIntegerDivide
OLEObjectOperatorIntegerDivide
Operator_IntegerDivide
Operator_IntegerDivide
OLEObjectOperatorDivideRight
OLEObjectOperatorDivideRight
Operator_DivideRight
Operator_DivideRight
OLEObjectOperatorDivide
OLEObjectOperatorDivide
Operator_Divide
Operator_Divide
OLEObjectOperatorMultiplyRight
OLEObjectOperatorMultiplyRight
Operator_MultiplyRight
Operator_MultiplyRight
OLEObjectOperatorMultiply
OLEObjectOperatorMultiply
Operator_Multiply
Operator_Multiply
OLEObjectOperatorSubtractRight
OLEObjectOperatorSubtractRight
Operator_SubtractRight
Operator_SubtractRight
OLEObjectOperatorSubtract
OLEObjectOperatorSubtract
Operator_Subtract
Operator_Subtract
OLEObjectOperatorAddRight
OLEObjectOperatorAddRight
OLEObjectOperatorAdd
OLEObjectOperatorAdd
OLEObjectOperatorCompare
OLEObjectOperatorCompare
OLEObjectOperatorConvert
OLEObjectOperatorConvert
OLEObjectOperatorLookupSetterWithParameters
OLEObjectOperatorLookupSetterWithParameters
OLEObjectOperatorLookup
OLEObjectOperatorLookup
OLEObjectNoReturnOperatorLookup
OLEObjectNoReturnOperatorLookup
Operator_Lookup
Operator_Lookup
..\..\..\..\Common\ClassLib\pane.cpp
..\..\..\..\Common\ClassLib\pane.cpp
..\..\..\..\Common\pictutil.cpp
..\..\..\..\Common\pictutil.cpp
Export Image As:
Export Image As:
Bitmap (*.bmp)
Bitmap (*.bmp)
..\..\..\..\Common\Graphics2D\PixMapRotate.cpp
..\..\..\..\Common\Graphics2D\PixMapRotate.cpp
..\..\..\..\Common\plugin.cpp
..\..\..\..\Common\plugin.cpp
iface.super
iface.super
.Events.
.Events.
pluginEntryTable.GetEntry( entrypointName, out )
pluginEntryTable.GetEntry( entrypointName, out )
RasApi32.dll
RasApi32.dll
RasDlg.dll
RasDlg.dll
..\..\..\..\Common\New Socket Code\PPPSocketWin.cpp
..\..\..\..\Common\New Socket Code\PPPSocketWin.cpp
HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\QuickTime
HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\QuickTime
because an unsupported column type was used
because an unsupported column type was used
because an unsupported type was used
because an unsupported type was used
..\..\..\..\Common\rbdbThumb.cpp
..\..\..\..\Common\rbdbThumb.cpp
offset == keyLen
offset == keyLen
Insert failed: primary key violation
Insert failed: primary key violation
KeyChainItemAttributeSetter
KeyChainItemAttributeSetter
KeyChainItemAttributeGetter
KeyChainItemAttributeGetter
KeyChainItemDelete
KeyChainItemDelete
KeyChainFindPassword
KeyChainFindPassword
FindPassword
FindPassword
KeyChainAddPassword
KeyChainAddPassword
AddPassword
AddPassword
KeyChainLock
KeyChainLock
KeyChainUnlock
KeyChainUnlock
KeyChainConstructor
KeyChainConstructor
KeyChain
KeyChain
KeyChainItem
KeyChainItem
KeyChainItemConstructor
KeyChainItemConstructor
KeyChainItemDestructor
KeyChainItemDestructor
..\..\..\..\Common\RBStyledText.cpp
..\..\..\..\Common\RBStyledText.cpp
..\..\..\..\Universal\REALstring.cpp
..\..\..\..\Universal\REALstring.cpp
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_USERS
HKEY_USERS
SHDeleteKeyA
SHDeleteKeyA
RegistryItemKeyCountGetter
RegistryItemKeyCountGetter
KeyCount
KeyCount
..\..\..\..\Common\Win32\RegistryAccessors.cpp
..\..\..\..\Common\Win32\RegistryAccessors.cpp
RegistryItemKeyTypeGetter
RegistryItemKeyTypeGetter
KeyType
KeyType
HKEY_LOCAL_MACHINE\Software\Made With REALbasic\
HKEY_LOCAL_MACHINE\Software\Made With REALbasic\
REALGetDBPassword
REALGetDBPassword
RegisterPluginExports
RegisterPluginExports
systemSetKeyScript
systemSetKeyScript
systemGetKeyScript
systemGetKeyScript
editPasswordSetter
editPasswordSetter
editPasswordGetter
editPasswordGetter
eWindowStringPassThroughGetter
eWindowStringPassThroughGetter
eWindowBoolPassThroughSetter
eWindowBoolPassThroughSetter
eWindowBoolPassThroughGetter
eWindowBoolPassThroughGetter
eWindowIntPassThroughGetter
eWindowIntPassThroughGetter
listColumnPressHeader
listColumnPressHeader
pictureIndexedImage
pictureIndexedImage
systemGetKeyChainCount
systemGetKeyChainCount
systemSetDefaultKeyChain
systemSetDefaultKeyChain
systemGetDefaultKeyChain
systemGetDefaultKeyChain
aeTargetPortTypeGetter
aeTargetPortTypeGetter
SerialPortDestructor
SerialPortDestructor
ServerSocketPortSetter
ServerSocketPortSetter
ServerSocketPortGetter
ServerSocketPortGetter
UDPSocketPacketsLeftToSend
UDPSocketPacketsLeftToSend
UDPSocketGetBroadcast
UDPSocketGetBroadcast
UDPSocketSetLoopback
UDPSocketSetLoopback
UDPSocketRouterHops
UDPSocketRouterHops
UDPReadDatagram
UDPReadDatagram
UDPSocketWriteDatagram
UDPSocketWriteDatagram
UDPSocketWrite
UDPSocketWrite
SocketJoinMulticastGroup
SocketJoinMulticastGroup
RuntimeUDPSocketConstructor
RuntimeUDPSocketConstructor
RuntimeUDPSocketDestructor
RuntimeUDPSocketDestructor
TCPSocketBytesLeftToSend
TCPSocketBytesLeftToSend
TCPSocketFlush
TCPSocketFlush
TCPSocketEof
TCPSocketEof
SocketPortSetter
SocketPortSetter
SocketPortGetter
SocketPortGetter
FileURLGetter
FileURLGetter
FolderItemImpMakeFileExecutable
FolderItemImpMakeFileExecutable
collectionKeyRemove
collectionKeyRemove
getSerialPortCount
getSerialPortCount
getSerialPortByPath
getSerialPortByPath
getSerialPort
getSerialPort
..\..\..\..\Common\relocentry.cpp
..\..\..\..\Common\relocentry.cpp
..\..\..\..\Common\ResourceManagerCommon.cpp
..\..\..\..\Common\ResourceManagerCommon.cpp
Keyword
Keyword
..\..\..\..\Common\runcmm.cpp
..\..\..\..\Common\runcmm.cpp
Key As String
Key As String
..\..\..\..\Common\runctl.cpp
..\..\..\..\Common\runctl.cpp
NULL == target->eventTable[ctr].vector
NULL == target->eventTable[ctr].vector
SQLQuery
SQLQuery
kEncodingUTF8 == s1.Encoding()
kEncodingUTF8 == s1.Encoding()
..\..\..\..\Common\runEditControl.cpp
..\..\..\..\Common\runEditControl.cpp
kEncodingUTF8 == s2.Encoding()
kEncodingUTF8 == s2.Encoding()
..\..\..\..\Common\runFileAccess.cpp
..\..\..\..\Common\runFileAccess.cpp
OthersExecute
OthersExecute
GroupExecute
GroupExecute
OwnerExecute
OwnerExecute
..\..\..\..\Common\runFolderItem.cpp
..\..\..\..\Common\runFolderItem.cpp
Passing non-absolute shell paths is not currently supported
Passing non-absolute shell paths is not currently supported
The path passed into new FolderItem was invalid
The path passed into new FolderItem was invalid
URLPath
URLPath
_MakeFileExecutable
_MakeFileExecutable
..\..\..\..\Common\RunIPCSocket.cpp
..\..\..\..\Common\RunIPCSocket.cpp
..\..\..\..\Common\runListbox.cpp
..\..\..\..\Common\runListbox.cpp
sCondemnedRows.size() > 0
sCondemnedRows.size() > 0
sCondemnedRows.peek_back() == p
sCondemnedRows.peek_back() == p
c:\RB\Universal\SimpleVector.h
c:\RB\Universal\SimpleVector.h
..\..\..\..\Common\runMedia.cpp
..\..\..\..\Common\runMedia.cpp
IndexedImage
IndexedImage
..\..\..\..\Common\runPicture.cpp
..\..\..\..\Common\runPicture.cpp
key as String
key as String
..\..\..\..\Common\runprint.cpp
..\..\..\..\Common\runprint.cpp
SerialPort
SerialPort
Port
Port
..\..\..\..\Common\runSerial.cpp
..\..\..\..\Common\runSerial.cpp
KeyScript
KeyScript
SerialPortCount
SerialPortCount
..\..\..\..\Common\RunSystem.cpp
..\..\..\..\Common\RunSystem.cpp
KeyChainCount
KeyChainCount
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
AdvApi32.dll
AdvApi32.dll
ReportEventW
ReportEventW
VVV.google.com
VVV.google.com
..\..\..\..\Common\RuntimeArrayFoundation.cpp
..\..\..\..\Common\RuntimeArrayFoundation.cpp
as the number of bits is not supported
as the number of bits is not supported
..\..\..\..\Common\RuntimeDebug.cpp
..\..\..\..\Common\RuntimeDebug.cpp
Runtime Error %d: %s
Runtime Error %d: %s
Please report what caused this error
Please report what caused this error
%s: %d
%s: %d
Failure Condition: %s
Failure Condition: %s
..\..\..\..\Common\Object Model\RuntimeExceptionFoundation.cpp
..\..\..\..\Common\Object Model\RuntimeExceptionFoundation.cpp
NoOpenTransportException
NoOpenTransportException
KeyNotFoundException
KeyNotFoundException
UnsupportedFormatException
UnsupportedFormatException
KeyChainException
KeyChainException
row as Integer, column as Integer, key as String
row as Integer, column as Integer, key as String
CellKeyDown
CellKeyDown
..\..\..\..\Common\RuntimeListboxAccessors.cpp
..\..\..\..\Common\RuntimeListboxAccessors.cpp
PressHeader
PressHeader
..\..\..\..\Common\RuntimeMain.cpp
..\..\..\..\Common\RuntimeMain.cpp
MsgPumpWaiter
MsgPumpWaiter
..\..\..\..\Common\Object Model\RuntimeObjectFoundation.cpp
..\..\..\..\Common\Object Model\RuntimeObjectFoundation.cpp
out->methods.count >= base->methods.count
out->methods.count >= base->methods.count
out->events.count >= base->events.count
out->events.count >= base->events.count
out->properties.count >= base->properties.count
out->properties.count >= base->properties.count
..\..\..\..\Common\RunTimer.cpp
..\..\..\..\Common\RunTimer.cpp
JoinMulticastGroup
JoinMulticastGroup
TCPSocket
TCPSocket
UDPSocket
UDPSocket
..\..\..\..\Common\New Socket Code\RuntimeSocketAccessors.cpp
..\..\..\..\Common\New Socket Code\RuntimeSocketAccessors.cpp
..\..\..\..\Common\RuntimeStringFoundation.cpp
..\..\..\..\Common\RuntimeStringFoundation.cpp
..\..\..\..\Common\ClassLib\RuntimeThread.cpp
..\..\..\..\Common\ClassLib\RuntimeThread.cpp
Called Semaphore.Release too many times.
Called Semaphore.Release too many times.
..\..\..\..\Common\ClassLib\RuntimeWindow.cpp
..\..\..\..\Common\ClassLib\RuntimeWindow.cpp
..\..\..\..\Common\Graphics2D\ShapePlotter.cpp
..\..\..\..\Common\Graphics2D\ShapePlotter.cpp
points.size() == 4
points.size() == 4
..\..\..\..\Common\Graphics2D\Shapes2D.cpp
..\..\..\..\Common\Graphics2D\Shapes2D.cpp
wsock32.dll
wsock32.dll
ws2_32.dll
ws2_32.dll
AcceleratorKey
AcceleratorKey
..\..\..\..\Common\StaticText.cpp
..\..\..\..\Common\StaticText.cpp
c:\rb\universal\StringMap.h
c:\rb\universal\StringMap.h
..\..\..\..\Universal\StringUtils.cpp
..\..\..\..\Universal\StringUtils.cpp
..\..\..\..\Common\StyledTextBaseImp.cpp
..\..\..\..\Common\StyledTextBaseImp.cpp
..\..\..\..\Common\SubPane.cpp
..\..\..\..\Common\SubPane.cpp
..\..\..\..\Common\New Socket Code\TCPSocket.cpp
..\..\..\..\Common\New Socket Code\TCPSocket.cpp
Made a new TCPSocketPosix
Made a new TCPSocketPosix
Destroying a TCPSocketPosix
Destroying a TCPSocketPosix
from port
from port
Starting the listening process on port
Starting the listening process on port
Shutting the TCPSocketPosix down
Shutting the TCPSocketPosix down
Resetting the TCPSocketPosix
Resetting the TCPSocketPosix
Making a TCP socket
Making a TCP socket
..\..\..\..\Common\New Socket Code\TCPSocketWin.cpp
..\..\..\..\Common\New Socket Code\TCPSocketWin.cpp
windows-1258
windows-1258
windows-1257
windows-1257
windows-1256
windows-1256
windows-1255
windows-1255
windows-1254
windows-1254
windows-1253
windows-1253
windows-1251
windows-1251
windows-1250
windows-1250
windows-1252
windows-1252
DOSPortugese
DOSPortugese
WindowsKoreanJohab
WindowsKoreanJohab
WindowsVietnamese
WindowsVietnamese
WindowsBalticRim
WindowsBalticRim
WindowsArabic
WindowsArabic
WindowsHebrew
WindowsHebrew
WindowsLatin5
WindowsLatin5
WindowsGreek
WindowsGreek
WindowsCyrillic
WindowsCyrillic
WindowsLatin2
WindowsLatin2
WindowsANSI
WindowsANSI
WindowsLatin1
WindowsLatin1
DOSPortuguese
DOSPortuguese
..\..\..\..\Universal\TextEncodingUtil.cpp
..\..\..\..\Universal\TextEncodingUtil.cpp
..\..\..\..\Common\Toolbar\ToolbarImpWin32.cpp
..\..\..\..\Common\Toolbar\ToolbarImpWin32.cpp
SHQueryRecycleBin requires Windows 95/NT4 with IE greater than 4.0
SHQueryRecycleBin requires Windows 95/NT4 with IE greater than 4.0
Shlwapi.dll
Shlwapi.dll
..\..\..\..\Common\TrayItem.cpp
..\..\..\..\Common\TrayItem.cpp
Making a new UDPSocketPosix
Making a new UDPSocketPosix
Destroying a UDPSocketPosix
Destroying a UDPSocketPosix
Unable to bind the udp socket
Unable to bind the udp socket
Unable to set the broadcast option on the UDP socket
Unable to set the broadcast option on the UDP socket
udp socket is bound and ready
udp socket is bound and ready
Trying to join the multicast group:
Trying to join the multicast group:
Could not join the multicast group
Could not join the multicast group
Joined the multicast group successfully
Joined the multicast group successfully
on port
on port
01234567
01234567
..\..\..\..\Common\variant.cpp
..\..\..\..\Common\variant.cpp
Operator_PowerRight
Operator_PowerRight
Operator_Power
Operator_Power
Operator_Hash
Operator_Hash
Operator_Hash%i4%o
Operator_Hash%i4%o
Operator_Convert%
Operator_Convert%
..\..\..\..\Common\VariantConversions.cpp
..\..\..\..\Common\VariantConversions.cpp
..\..\..\..\Universal\VirtualVolumes\VFSCore.cpp
..\..\..\..\Universal\VirtualVolumes\VFSCore.cpp
finfo->mPosWithinBlock >= kBlockHeaderSize and finfo->mPosWithinBlock mBlockStart finfo->mBlockHeader.mBlockLength - 4
finfo->mPosWithinBlock >= kBlockHeaderSize and finfo->mPosWithinBlock mBlockStart finfo->mBlockHeader.mBlockLength - 4
..\..\..\..\Universal\VirtualVolumes\VHFS.cpp
..\..\..\..\Universal\VirtualVolumes\VHFS.cpp
..\..\..\..\Common\Win32\win32cmm.cpp
..\..\..\..\Common\Win32\win32cmm.cpp
..\..\..\..\Common\Win32\win32Control.cpp
..\..\..\..\Common\Win32\win32Control.cpp
RICHED32.DLL
RICHED32.DLL
RICHED20.DLL
RICHED20.DLL
..\..\..\..\Common\Win32\win32EditControl.cpp
..\..\..\..\Common\Win32\win32EditControl.cpp
Styled text printer passed in to DrawBlock was nil
Styled text printer passed in to DrawBlock was nil
..\..\..\..\Common\Win32\win32Folderitem.cpp
..\..\..\..\Common\Win32\win32Folderitem.cpp
..\..\..\..\Common\Win32\Win32Menu.cpp
..\..\..\..\Common\Win32\Win32Menu.cpp
..\..\..\..\Common\Win32\win32popupmenu.cpp
..\..\..\..\Common\Win32\win32popupmenu.cpp
ComCtl32.dll
ComCtl32.dll
..\..\..\..\Common\Win32\win32progress.cpp
..\..\..\..\Common\Win32\win32progress.cpp
\\.\COM
\\.\COM
..\..\..\..\Common\Win32\win32serial.cpp
..\..\..\..\Common\Win32\win32serial.cpp
..\..\..\..\Common\Win32\win32windows.cpp
..\..\..\..\Common\Win32\win32windows.cpp
..\..\..\..\Common\ClassLib\window.cpp
..\..\..\..\Common\ClassLib\window.cpp
WMPlayer.OCX
WMPlayer.OCX
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
..\..\..\..\Common\Win32\WindowsMediaPlayer.cpp
..\..\..\..\Common\Win32\WindowsMediaPlayer.cpp
Can't load library %s
Can't load library %s
..\..\..\..\Common\Win32\WinPrinter.cpp
..\..\..\..\Common\Win32\WinPrinter.cpp
Could not get the default printer settings because a nil structure was passed in
Could not get the default printer settings because a nil structure was passed in
Someone passed in a bogus value for getting printer information
Someone passed in a bogus value for getting printer information
uxtheme.dll
uxtheme.dll
?#%X.y
?#%X.y
c:\RB\REALbasic\REALbasic Visual Studio\REALbasic\release\X86RunHoudini.pdb
c:\RB\REALbasic\REALbasic Visual Studio\REALbasic\release\X86RunHoudini.pdb
QuickTime.qts
QuickTime.qts
zcÁ
zcÁ
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe
GetProcessHeap
GetProcessHeap
GetWindowsDirectoryW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryInfoKeyA
SetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ShellExecuteA
ShellExecuteA
ShellExecuteW
ShellExecuteW
EnumChildWindows
EnumChildWindows
VkKeyScanA
VkKeyScanA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
GetKeyNameTextA
GetKeyNameTextA
MapVirtualKeyA
MapVirtualKeyA
GetKeyNameTextW
GetKeyNameTextW
EnumWindows
EnumWindows
GetKeyState
GetKeyState
GetAsyncKeyState
GetAsyncKeyState
midiOutShortMsg
midiOutShortMsg
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
|}{yN,--Rw}
|}{yN,--Rw}
../.Sw}}
../.Sw}}
||}wYzyyO**...QQRvww}
||}wYzyyO**...QQRvww}
.ww}}}
.ww}}}
.www}}
.www}}
..RRRRSSSw}w}
..RRRRSSSw}w}
).RQ,,QRv||ww}}}
).RQ,,QRv||ww}}}
|||vv|RRS.RQQQ-'...-&,,,QQR||vR}}|}
|||vv|RRS.RQQQ-'...-&,,,QQR||vR}}|}
version="1.0.0.0"
version="1.0.0.0"
name="Windows Loader.exe"
name="Windows Loader.exe"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
comdlg32.dll
comdlg32.dll
GDI32.dll
GDI32.dll
iphlpapi.dll
iphlpapi.dll
OLEAUT32.dll
OLEAUT32.dll
SHELL32.dll
SHELL32.dll
USER32.dll
USER32.dll
VERSION.dll
VERSION.dll
WINMM.dll
WINMM.dll
2.2.1.0
2.2.1.0
Windows Loader.exe
Windows Loader.exe
Windows Loader.exe_1052_rwx_00401000_00219000:
FtPQW
FtPQW
~.SSW
~.SSW
SPSSSSSSSh
SPSSSSSSSh
PQSSh
PQSSh
u.jhh
u.jhh
mscoree.dll
mscoree.dll
.mixcrt
.mixcrt
KERNEL32.DLL
KERNEL32.DLL
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
kernel32.dll
kernel32.dll
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
..\..\..\..\Common\application.cpp
..\..\..\..\Common\application.cpp
c:\RB\Universal\StringMap.h
c:\RB\Universal\StringMap.h
..\..\..\..\Common\array.cpp
..\..\..\..\Common\array.cpp
..\..\..\..\Common\basicstr.cpp
..\..\..\..\Common\basicstr.cpp
ptr - out.CString() == totalLen
ptr - out.CString() == totalLen
theStr.Encoding() == kEncodingUTF8 or theStr.Encoding() == kEncodingUTF16 or theStr.Encoding() == kEncodingASCII
theStr.Encoding() == kEncodingUTF8 or theStr.Encoding() == kEncodingUTF16 or theStr.Encoding() == kEncodingASCII
..\..\..\..\Common\BlowFish.cpp
..\..\..\..\Common\BlowFish.cpp
ewcKeyDown
ewcKeyDown
KeyDown
KeyDown
..\..\..\..\Common\Canvas.cpp
..\..\..\..\Common\Canvas.cpp
..\..\..\..\Common\CommonListbox.cpp
..\..\..\..\Common\CommonListbox.cpp
MinWidthExpression doesn't support the Asterisk ('*') format.
MinWidthExpression doesn't support the Asterisk ('*') format.
MaxWidthExpression doesn't support the Asterisk ('*') format.
MaxWidthExpression doesn't support the Asterisk ('*') format.
..\..\..\..\Common\commonruntime.cpp
..\..\..\..\Common\commonruntime.cpp
trace.log
trace.log
..\..\..\..\Common\CommonRunView.cpp
..\..\..\..\Common\CommonRunView.cpp
We weren't passed in a control, we got nil.
We weren't passed in a control, we got nil.
..\..\..\..\Universal\CommonWinFunctions.cpp
..\..\..\..\Universal\CommonWinFunctions.cpp
Operator_Convert
Operator_Convert
..\..\..\..\Common\ConsoleApplication.cpp
..\..\..\..\Common\ConsoleApplication.cpp
msvcrt.dll
msvcrt.dll
..\..\..\..\Universal\DataFile.cpp
..\..\..\..\Universal\DataFile.cpp
Operator_Compare
Operator_Compare
dateSQLDateTimeSetter
dateSQLDateTimeSetter
dateSQLDateTimeGetter
dateSQLDateTimeGetter
SQLDateTime
SQLDateTime
dateSQLDateSetter
dateSQLDateSetter
dateSQLDateGetter
dateSQLDateGetter
SQLDate
SQLDate
..\..\..\..\Common\DateCommon.cpp
..\..\..\..\Common\DateCommon.cpp
..\..\..\..\Universal\DateImp\DateImpWin32.cpp
..\..\..\..\Universal\DateImp\DateImpWin32.cpp
Password
Password
SQLSelect
SQLSelect
databaseSQLExecute
databaseSQLExecute
SQLExecute
SQLExecute
sqlString
sqlString
databaseSQLSelect
databaseSQLSelect
..\..\..\..\Common\dbInterface.cpp
..\..\..\..\Common\dbInterface.cpp
00:00:00
00:00:00
00:00:00
00:00:00
Invalid operator
Invalid operator
Quotes expected after LIKE operation
Quotes expected after LIKE operation
Only COUNT(*) supported
Only COUNT(*) supported
Unsupported SELECT function
Unsupported SELECT function
Only single GROUP BY columns currently supported
Only single GROUP BY columns currently supported
Expecting 'KEY'
Expecting 'KEY'
Dropping columns is not supported for this database
Dropping columns is not supported for this database
Dropping tables from this database is not currently supported.
Dropping tables from this database is not currently supported.
..\..\..\..\Common\DebuggerConnection.cpp
..\..\..\..\Common\DebuggerConnection.cpp
0000000000000000
0000000000000000
127.0.0.1
127.0.0.1
c:\RB\Compiler\SmartRef.h
c:\RB\Compiler\SmartRef.h
..\..\..\..\Common\DebuggerSupport.cpp
..\..\..\..\Common\DebuggerSupport.cpp
00000000
00000000
The debug application cannot connect back to the REALbasic IDE. This is mostly likely due to a software firewall or packet filter not allowing localhost network traffic on ports 13897 or 60554. You should reconfigure your software firewall or packet filter to allow the debug application to connect to REALbasic.
The debug application cannot connect back to the REALbasic IDE. This is mostly likely due to a software firewall or packet filter not allowing localhost network traffic on ports 13897 or 60554. You should reconfigure your software firewall or packet filter to allow the debug application to connect to REALbasic.
DebuggerSupport.cpp
DebuggerSupport.cpp
dictionaryHasKey
dictionaryHasKey
HasKey
HasKey
2147483647
2147483647
..\..\..\..\Common\Dictionary.cpp
..\..\..\..\Common\Dictionary.cpp
dictionaryKeys
dictionaryKeys
Keys
Keys
dictionaryKey
dictionaryKey
..\..\..\..\Common\DockItem.cpp
..\..\..\..\Common\DockItem.cpp
..\..\..\..\Common\DragItem.cpp
..\..\..\..\Common\DragItem.cpp
Could not lock the BITMAPINFO structure passsed to the DrawableBitmap constructor
Could not lock the BITMAPINFO structure passsed to the DrawableBitmap constructor
..\..\..\..\Common\drawable.cpp
..\..\..\..\Common\drawable.cpp
..\..\..\..\Common\fileTypes.cpp
..\..\..\..\Common\fileTypes.cpp
..\..\..\..\Common\FolderItemDialog.cpp
..\..\..\..\Common\FolderItemDialog.cpp
Shell32.dll
Shell32.dll
FolderItemDialogInitializer
FolderItemDialogInitializer
OpenDialogInitializer
OpenDialogInitializer
SaveAsDialogInitializer
SaveAsDialogInitializer
SelectFolderDialogInitializer
SelectFolderDialogInitializer
..\..\..\..\Universal\FolderItemImp\FolderItemImpVirtual.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpVirtual.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpWin32.cpp
..\..\..\..\Universal\FolderItemImp\FolderItemImpWin32.cpp
Kernel32.dll
Kernel32.dll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
in Windows
in Windows
OpenAsPicture doesn't support format
OpenAsPicture doesn't support format
in Windows.
in Windows.
SaveAsPicture doesn't support format
SaveAsPicture doesn't support format
Gdiplus.dll
Gdiplus.dll
not other.IsVirtual()
not other.IsVirtual()
SHFileOperationW
SHFileOperationW
SHFileOperationA
SHFileOperationA
%%.ß
%%.ß
%%.Þ
%%.Þ
..\..\..\..\Common\Graphics.cpp
..\..\..\..\Common\Graphics.cpp
..\..\..\..\Common\GraphicsGDI.cpp
..\..\..\..\Common\GraphicsGDI.cpp
..\..\..\..\Common\GroupBox.cpp
..\..\..\..\Common\GroupBox.cpp
..\..\..\..\Common\intrinsicClass.cpp
..\..\..\..\Common\intrinsicClass.cpp
NULL == defn->initializer.toc
NULL == defn->initializer.toc
NULL == defn->finalizer.toc
NULL == defn->finalizer.toc
OpenURLMovie
OpenURLMovie
PortType
PortType
comparisonKey
comparisonKey
OrdinalKey
OrdinalKey
StringJoin
StringJoin
Join
Join
RuntimeCompleteParamScriptExecute
RuntimeCompleteParamScriptExecute
_CompleteParamScriptExecute
_CompleteParamScriptExecute
RuntimeScriptExecute
RuntimeScriptExecute
_ScriptExecute
_ScriptExecute
getKeyboardObject
getKeyboardObject
Keyboard
Keyboard
GlobalShowURL
GlobalShowURL
ShowURL
ShowURL
getApplicationSupportFolder
getApplicationSupportFolder
ApplicationSupportFolder
ApplicationSupportFolder
VB_RuntimeMsgBox
VB_RuntimeMsgBox
RuntimeMsgBox
RuntimeMsgBox
MsgBox
MsgBox
exportPicture
exportPicture
ExportPicture
ExportPicture
getIndexedObjectDescriptor
getIndexedObjectDescriptor
GetIndexedObjectDescriptor
GetIndexedObjectDescriptor
openURLMovie
openURLMovie
..\..\..\..\Common\intrinsicFunction.cpp
..\..\..\..\Common\intrinsicFunction.cpp
keyboardKeyName
keyboardKeyName
KeyName
KeyName
keyboardAsyncKeyDown
keyboardAsyncKeyDown
AsyncKeyDown
AsyncKeyDown
KeyCode
KeyCode
AsyncAlternateMenuShortcutKey
AsyncAlternateMenuShortcutKey
AsyncMenuShortcutKey
AsyncMenuShortcutKey
AlternateMenuShortcutKey
AlternateMenuShortcutKey
MenuShortcutKey
MenuShortcutKey
AsyncAltKey
AsyncAltKey
AsyncOptionKey
AsyncOptionKey
AsyncControlKey
AsyncControlKey
AsyncOSKey
AsyncOSKey
AsyncCommandKey
AsyncCommandKey
asyncModifierKeyGetter
asyncModifierKeyGetter
AsyncShiftKey
AsyncShiftKey
AltKey
AltKey
OptionKey
OptionKey
ControlKey
ControlKey
OSKey
OSKey
CommandKey
CommandKey
modifierKeyGetter
modifierKeyGetter
ShiftKey
ShiftKey
_Keyboard
_Keyboard
..\..\..\..\Common\LineControl.cpp
..\..\..\..\Common\LineControl.cpp
Windows
Windows
Operator_AddRight
Operator_AddRight
Operator_Add
Operator_Add
' was not exported
' was not exported
..\..\..\..\Common\loaderX86.cpp
..\..\..\..\Common\loaderX86.cpp
import.dat
import.dat
code.dat
code.dat
data.dat
data.dat
rsrc.dat
rsrc.dat
options.dat
options.dat
symbols.dat
symbols.dat
MemoryBlockCompareOperator
MemoryBlockCompareOperator
MemoryBlockAddOperator
MemoryBlockAddOperator
MemoryBlockFromStringOperator
MemoryBlockFromStringOperator
MemoryBlockToStringOperator
MemoryBlockToStringOperator
..\..\..\..\Common\MemoryBlock.cpp
..\..\..\..\Common\MemoryBlock.cpp
..\..\..\..\Universal\MemoryManager.cpp
..\..\..\..\Universal\MemoryManager.cpp
c:\rb\universal\SimpleVector.h
c:\rb\universal\SimpleVector.h
..\..\..\..\Common\Menu.cpp
..\..\..\..\Common\Menu.cpp
..\..\..\..\Common\menubar.cpp
..\..\..\..\Common\menubar.cpp
KeyboardShortcut
KeyboardShortcut
RuntimeMenuItemCommandKeySetter
RuntimeMenuItemCommandKeySetter
RuntimeMenuItemCommandKeyGetter
RuntimeMenuItemCommandKeyGetter
TaskDialogIndirect
TaskDialogIndirect
..\..\..\..\Common\MessageDialog.cpp
..\..\..\..\Common\MessageDialog.cpp
MessageDialogInitializer
MessageDialogInitializer
..\..\..\..\Common\mouseCursor.cpp
..\..\..\..\Common\mouseCursor.cpp
SensApi.dll
SensApi.dll
..\..\..\..\Common\NuListbox.cpp
..\..\..\..\Common\NuListbox.cpp
..\..\..\..\Common\Object Model\ObjectDefinition.cpp
..\..\..\..\Common\Object Model\ObjectDefinition.cpp
..\..\..\..\Common\Object Model\ObjectDefinitionConverter.cpp
..\..\..\..\Common\Object Model\ObjectDefinitionConverter.cpp
propertyCtr properties.count
propertyCtr properties.count
..\..\..\..\Common\objects.cpp
..\..\..\..\Common\objects.cpp
KeyPress
KeyPress
KeyUp
KeyUp
LicenseKey
LicenseKey
PassByref
PassByref
Does not support a collection
Does not support a collection
Invalid/Unsupported OLE Parameter Type
Invalid/Unsupported OLE Parameter Type
ole32.dll
ole32.dll
oleaut32.dll
oleaut32.dll
OLEObjectOperatorNot
OLEObjectOperatorNot
Operator_Not
Operator_Not
Operator_OrRight
Operator_OrRight
OLEObjectOperatorOr
OLEObjectOperatorOr
Operator_Or
Operator_Or
Operator_AndRight
Operator_AndRight
OLEObjectOperatorAnd
OLEObjectOperatorAnd
Operator_And
Operator_And
OLEObjectOperatorNegate
OLEObjectOperatorNegate
Operator_Negate
Operator_Negate
OLEObjectOperatorModuloRight
OLEObjectOperatorModuloRight
Operator_ModuloRight
Operator_ModuloRight
OLEObjectOperatorModulo
OLEObjectOperatorModulo
Operator_Modulo
Operator_Modulo
OLEObjectOperatorIntegerDivideRight
OLEObjectOperatorIntegerDivideRight
Operator_IntegerDivideRight
Operator_IntegerDivideRight
OLEObjectOperatorIntegerDivide
OLEObjectOperatorIntegerDivide
Operator_IntegerDivide
Operator_IntegerDivide
OLEObjectOperatorDivideRight
OLEObjectOperatorDivideRight
Operator_DivideRight
Operator_DivideRight
OLEObjectOperatorDivide
OLEObjectOperatorDivide
Operator_Divide
Operator_Divide
OLEObjectOperatorMultiplyRight
OLEObjectOperatorMultiplyRight
Operator_MultiplyRight
Operator_MultiplyRight
OLEObjectOperatorMultiply
OLEObjectOperatorMultiply
Operator_Multiply
Operator_Multiply
OLEObjectOperatorSubtractRight
OLEObjectOperatorSubtractRight
Operator_SubtractRight
Operator_SubtractRight
OLEObjectOperatorSubtract
OLEObjectOperatorSubtract
Operator_Subtract
Operator_Subtract
OLEObjectOperatorAddRight
OLEObjectOperatorAddRight
OLEObjectOperatorAdd
OLEObjectOperatorAdd
OLEObjectOperatorCompare
OLEObjectOperatorCompare
OLEObjectOperatorConvert
OLEObjectOperatorConvert
OLEObjectOperatorLookupSetterWithParameters
OLEObjectOperatorLookupSetterWithParameters
OLEObjectOperatorLookup
OLEObjectOperatorLookup
OLEObjectNoReturnOperatorLookup
OLEObjectNoReturnOperatorLookup
Operator_Lookup
Operator_Lookup
..\..\..\..\Common\ClassLib\pane.cpp
..\..\..\..\Common\ClassLib\pane.cpp
..\..\..\..\Common\pictutil.cpp
..\..\..\..\Common\pictutil.cpp
Export Image As:
Export Image As:
Bitmap (*.bmp)
Bitmap (*.bmp)
..\..\..\..\Common\Graphics2D\PixMapRotate.cpp
..\..\..\..\Common\Graphics2D\PixMapRotate.cpp
..\..\..\..\Common\plugin.cpp
..\..\..\..\Common\plugin.cpp
iface.super
iface.super
.Events.
.Events.
pluginEntryTable.GetEntry( entrypointName, out )
pluginEntryTable.GetEntry( entrypointName, out )
RasApi32.dll
RasApi32.dll
RasDlg.dll
RasDlg.dll
..\..\..\..\Common\New Socket Code\PPPSocketWin.cpp
..\..\..\..\Common\New Socket Code\PPPSocketWin.cpp
HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\QuickTime
HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\QuickTime
because an unsupported column type was used
because an unsupported column type was used
because an unsupported type was used
because an unsupported type was used
..\..\..\..\Common\rbdbThumb.cpp
..\..\..\..\Common\rbdbThumb.cpp
offset == keyLen
offset == keyLen
Insert failed: primary key violation
Insert failed: primary key violation
KeyChainItemAttributeSetter
KeyChainItemAttributeSetter
KeyChainItemAttributeGetter
KeyChainItemAttributeGetter
KeyChainItemDelete
KeyChainItemDelete
KeyChainFindPassword
KeyChainFindPassword
FindPassword
FindPassword
KeyChainAddPassword
KeyChainAddPassword
AddPassword
AddPassword
KeyChainLock
KeyChainLock
KeyChainUnlock
KeyChainUnlock
KeyChainConstructor
KeyChainConstructor
KeyChain
KeyChain
KeyChainItem
KeyChainItem
KeyChainItemConstructor
KeyChainItemConstructor
KeyChainItemDestructor
KeyChainItemDestructor
..\..\..\..\Common\RBStyledText.cpp
..\..\..\..\Common\RBStyledText.cpp
..\..\..\..\Universal\REALstring.cpp
..\..\..\..\Universal\REALstring.cpp
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_USERS
HKEY_USERS
SHDeleteKeyA
SHDeleteKeyA
RegistryItemKeyCountGetter
RegistryItemKeyCountGetter
KeyCount
KeyCount
..\..\..\..\Common\Win32\RegistryAccessors.cpp
..\..\..\..\Common\Win32\RegistryAccessors.cpp
RegistryItemKeyTypeGetter
RegistryItemKeyTypeGetter
KeyType
KeyType
HKEY_LOCAL_MACHINE\Software\Made With REALbasic\
HKEY_LOCAL_MACHINE\Software\Made With REALbasic\
REALGetDBPassword
REALGetDBPassword
RegisterPluginExports
RegisterPluginExports
systemSetKeyScript
systemSetKeyScript
systemGetKeyScript
systemGetKeyScript
editPasswordSetter
editPasswordSetter
editPasswordGetter
editPasswordGetter
eWindowStringPassThroughGetter
eWindowStringPassThroughGetter
eWindowBoolPassThroughSetter
eWindowBoolPassThroughSetter
eWindowBoolPassThroughGetter
eWindowBoolPassThroughGetter
eWindowIntPassThroughGetter
eWindowIntPassThroughGetter
listColumnPressHeader
listColumnPressHeader
pictureIndexedImage
pictureIndexedImage
systemGetKeyChainCount
systemGetKeyChainCount
systemSetDefaultKeyChain
systemSetDefaultKeyChain
systemGetDefaultKeyChain
systemGetDefaultKeyChain
aeTargetPortTypeGetter
aeTargetPortTypeGetter
SerialPortDestructor
SerialPortDestructor
ServerSocketPortSetter
ServerSocketPortSetter
ServerSocketPortGetter
ServerSocketPortGetter
UDPSocketPacketsLeftToSend
UDPSocketPacketsLeftToSend
UDPSocketGetBroadcast
UDPSocketGetBroadcast
UDPSocketSetLoopback
UDPSocketSetLoopback
UDPSocketRouterHops
UDPSocketRouterHops
UDPReadDatagram
UDPReadDatagram
UDPSocketWriteDatagram
UDPSocketWriteDatagram
UDPSocketWrite
UDPSocketWrite
SocketJoinMulticastGroup
SocketJoinMulticastGroup
RuntimeUDPSocketConstructor
RuntimeUDPSocketConstructor
RuntimeUDPSocketDestructor
RuntimeUDPSocketDestructor
TCPSocketBytesLeftToSend
TCPSocketBytesLeftToSend
TCPSocketFlush
TCPSocketFlush
TCPSocketEof
TCPSocketEof
SocketPortSetter
SocketPortSetter
SocketPortGetter
SocketPortGetter
FileURLGetter
FileURLGetter
FolderItemImpMakeFileExecutable
FolderItemImpMakeFileExecutable
collectionKeyRemove
collectionKeyRemove
getSerialPortCount
getSerialPortCount
getSerialPortByPath
getSerialPortByPath
getSerialPort
getSerialPort
..\..\..\..\Common\relocentry.cpp
..\..\..\..\Common\relocentry.cpp
..\..\..\..\Common\ResourceManagerCommon.cpp
..\..\..\..\Common\ResourceManagerCommon.cpp
Keyword
Keyword
..\..\..\..\Common\runcmm.cpp
..\..\..\..\Common\runcmm.cpp
Key As String
Key As String
..\..\..\..\Common\runctl.cpp
..\..\..\..\Common\runctl.cpp
NULL == target->eventTable[ctr].vector
NULL == target->eventTable[ctr].vector
SQLQuery
SQLQuery
kEncodingUTF8 == s1.Encoding()
kEncodingUTF8 == s1.Encoding()
..\..\..\..\Common\runEditControl.cpp
..\..\..\..\Common\runEditControl.cpp
kEncodingUTF8 == s2.Encoding()
kEncodingUTF8 == s2.Encoding()
..\..\..\..\Common\runFileAccess.cpp
..\..\..\..\Common\runFileAccess.cpp
OthersExecute
OthersExecute
GroupExecute
GroupExecute
OwnerExecute
OwnerExecute
..\..\..\..\Common\runFolderItem.cpp
..\..\..\..\Common\runFolderItem.cpp
Passing non-absolute shell paths is not currently supported
Passing non-absolute shell paths is not currently supported
The path passed into new FolderItem was invalid
The path passed into new FolderItem was invalid
URLPath
URLPath
_MakeFileExecutable
_MakeFileExecutable
..\..\..\..\Common\RunIPCSocket.cpp
..\..\..\..\Common\RunIPCSocket.cpp
..\..\..\..\Common\runListbox.cpp
..\..\..\..\Common\runListbox.cpp
sCondemnedRows.size() > 0
sCondemnedRows.size() > 0
sCondemnedRows.peek_back() == p
sCondemnedRows.peek_back() == p
c:\RB\Universal\SimpleVector.h
c:\RB\Universal\SimpleVector.h
..\..\..\..\Common\runMedia.cpp
..\..\..\..\Common\runMedia.cpp
IndexedImage
IndexedImage
..\..\..\..\Common\runPicture.cpp
..\..\..\..\Common\runPicture.cpp
key as String
key as String
..\..\..\..\Common\runprint.cpp
..\..\..\..\Common\runprint.cpp
SerialPort
SerialPort
Port
Port
..\..\..\..\Common\runSerial.cpp
..\..\..\..\Common\runSerial.cpp
KeyScript
KeyScript
SerialPortCount
SerialPortCount
..\..\..\..\Common\RunSystem.cpp
..\..\..\..\Common\RunSystem.cpp
KeyChainCount
KeyChainCount
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
AdvApi32.dll
AdvApi32.dll
ReportEventW
ReportEventW
VVV.google.com
VVV.google.com
..\..\..\..\Common\RuntimeArrayFoundation.cpp
..\..\..\..\Common\RuntimeArrayFoundation.cpp
as the number of bits is not supported
as the number of bits is not supported
..\..\..\..\Common\RuntimeDebug.cpp
..\..\..\..\Common\RuntimeDebug.cpp
Runtime Error %d: %s
Runtime Error %d: %s
Please report what caused this error
Please report what caused this error
%s: %d
%s: %d
Failure Condition: %s
Failure Condition: %s
..\..\..\..\Common\Object Model\RuntimeExceptionFoundation.cpp
..\..\..\..\Common\Object Model\RuntimeExceptionFoundation.cpp
NoOpenTransportException
NoOpenTransportException
KeyNotFoundException
KeyNotFoundException
UnsupportedFormatException
UnsupportedFormatException
KeyChainException
KeyChainException
row as Integer, column as Integer, key as String
row as Integer, column as Integer, key as String
CellKeyDown
CellKeyDown
..\..\..\..\Common\RuntimeListboxAccessors.cpp
..\..\..\..\Common\RuntimeListboxAccessors.cpp
PressHeader
PressHeader
..\..\..\..\Common\RuntimeMain.cpp
..\..\..\..\Common\RuntimeMain.cpp
MsgPumpWaiter
MsgPumpWaiter
..\..\..\..\Common\Object Model\RuntimeObjectFoundation.cpp
..\..\..\..\Common\Object Model\RuntimeObjectFoundation.cpp
out->methods.count >= base->methods.count
out->methods.count >= base->methods.count
out->events.count >= base->events.count
out->events.count >= base->events.count
out->properties.count >= base->properties.count
out->properties.count >= base->properties.count
..\..\..\..\Common\RunTimer.cpp
..\..\..\..\Common\RunTimer.cpp
JoinMulticastGroup
JoinMulticastGroup
TCPSocket
TCPSocket
UDPSocket
UDPSocket
..\..\..\..\Common\New Socket Code\RuntimeSocketAccessors.cpp
..\..\..\..\Common\New Socket Code\RuntimeSocketAccessors.cpp
..\..\..\..\Common\RuntimeStringFoundation.cpp
..\..\..\..\Common\RuntimeStringFoundation.cpp
..\..\..\..\Common\ClassLib\RuntimeThread.cpp
..\..\..\..\Common\ClassLib\RuntimeThread.cpp
Called Semaphore.Release too many times.
Called Semaphore.Release too many times.
..\..\..\..\Common\ClassLib\RuntimeWindow.cpp
..\..\..\..\Common\ClassLib\RuntimeWindow.cpp
..\..\..\..\Common\Graphics2D\ShapePlotter.cpp
..\..\..\..\Common\Graphics2D\ShapePlotter.cpp
points.size() == 4
points.size() == 4
..\..\..\..\Common\Graphics2D\Shapes2D.cpp
..\..\..\..\Common\Graphics2D\Shapes2D.cpp
wsock32.dll
wsock32.dll
ws2_32.dll
ws2_32.dll
AcceleratorKey
AcceleratorKey
..\..\..\..\Common\StaticText.cpp
..\..\..\..\Common\StaticText.cpp
c:\rb\universal\StringMap.h
c:\rb\universal\StringMap.h
..\..\..\..\Universal\StringUtils.cpp
..\..\..\..\Universal\StringUtils.cpp
..\..\..\..\Common\StyledTextBaseImp.cpp
..\..\..\..\Common\StyledTextBaseImp.cpp
..\..\..\..\Common\SubPane.cpp
..\..\..\..\Common\SubPane.cpp
..\..\..\..\Common\New Socket Code\TCPSocket.cpp
..\..\..\..\Common\New Socket Code\TCPSocket.cpp
Made a new TCPSocketPosix
Made a new TCPSocketPosix
Destroying a TCPSocketPosix
Destroying a TCPSocketPosix
from port
from port
Starting the listening process on port
Starting the listening process on port
Shutting the TCPSocketPosix down
Shutting the TCPSocketPosix down
Resetting the TCPSocketPosix
Resetting the TCPSocketPosix
Making a TCP socket
Making a TCP socket
..\..\..\..\Common\New Socket Code\TCPSocketWin.cpp
..\..\..\..\Common\New Socket Code\TCPSocketWin.cpp
windows-1258
windows-1258
windows-1257
windows-1257
windows-1256
windows-1256
windows-1255
windows-1255
windows-1254
windows-1254
windows-1253
windows-1253
windows-1251
windows-1251
windows-1250
windows-1250
windows-1252
windows-1252
DOSPortugese
DOSPortugese
WindowsKoreanJohab
WindowsKoreanJohab
WindowsVietnamese
WindowsVietnamese
WindowsBalticRim
WindowsBalticRim
WindowsArabic
WindowsArabic
WindowsHebrew
WindowsHebrew
WindowsLatin5
WindowsLatin5
WindowsGreek
WindowsGreek
WindowsCyrillic
WindowsCyrillic
WindowsLatin2
WindowsLatin2
WindowsANSI
WindowsANSI
WindowsLatin1
WindowsLatin1
DOSPortuguese
DOSPortuguese
..\..\..\..\Universal\TextEncodingUtil.cpp
..\..\..\..\Universal\TextEncodingUtil.cpp
..\..\..\..\Common\Toolbar\ToolbarImpWin32.cpp
..\..\..\..\Common\Toolbar\ToolbarImpWin32.cpp
SHQueryRecycleBin requires Windows 95/NT4 with IE greater than 4.0
SHQueryRecycleBin requires Windows 95/NT4 with IE greater than 4.0
Shlwapi.dll
Shlwapi.dll
..\..\..\..\Common\TrayItem.cpp
..\..\..\..\Common\TrayItem.cpp
Making a new UDPSocketPosix
Making a new UDPSocketPosix
Destroying a UDPSocketPosix
Destroying a UDPSocketPosix
Unable to bind the udp socket
Unable to bind the udp socket
Unable to set the broadcast option on the UDP socket
Unable to set the broadcast option on the UDP socket
udp socket is bound and ready
udp socket is bound and ready
Trying to join the multicast group:
Trying to join the multicast group:
Could not join the multicast group
Could not join the multicast group
Joined the multicast group successfully
Joined the multicast group successfully
on port
on port
01234567
01234567
..\..\..\..\Common\variant.cpp
..\..\..\..\Common\variant.cpp
Operator_PowerRight
Operator_PowerRight
Operator_Power
Operator_Power
Operator_Hash
Operator_Hash
Operator_Hash%i4%o
Operator_Hash%i4%o
Operator_Convert%
Operator_Convert%
..\..\..\..\Common\VariantConversions.cpp
..\..\..\..\Common\VariantConversions.cpp
..\..\..\..\Universal\VirtualVolumes\VFSCore.cpp
..\..\..\..\Universal\VirtualVolumes\VFSCore.cpp
finfo->mPosWithinBlock >= kBlockHeaderSize and finfo->mPosWithinBlock mBlockStart finfo->mBlockHeader.mBlockLength - 4
finfo->mPosWithinBlock >= kBlockHeaderSize and finfo->mPosWithinBlock mBlockStart finfo->mBlockHeader.mBlockLength - 4
..\..\..\..\Universal\VirtualVolumes\VHFS.cpp
..\..\..\..\Universal\VirtualVolumes\VHFS.cpp
..\..\..\..\Common\Win32\win32cmm.cpp
..\..\..\..\Common\Win32\win32cmm.cpp
..\..\..\..\Common\Win32\win32Control.cpp
..\..\..\..\Common\Win32\win32Control.cpp
RICHED32.DLL
RICHED32.DLL
RICHED20.DLL
RICHED20.DLL
..\..\..\..\Common\Win32\win32EditControl.cpp
..\..\..\..\Common\Win32\win32EditControl.cpp
Styled text printer passed in to DrawBlock was nil
Styled text printer passed in to DrawBlock was nil
..\..\..\..\Common\Win32\win32Folderitem.cpp
..\..\..\..\Common\Win32\win32Folderitem.cpp
..\..\..\..\Common\Win32\Win32Menu.cpp
..\..\..\..\Common\Win32\Win32Menu.cpp
..\..\..\..\Common\Win32\win32popupmenu.cpp
..\..\..\..\Common\Win32\win32popupmenu.cpp
ComCtl32.dll
ComCtl32.dll
..\..\..\..\Common\Win32\win32progress.cpp
..\..\..\..\Common\Win32\win32progress.cpp
\\.\COM
\\.\COM
..\..\..\..\Common\Win32\win32serial.cpp
..\..\..\..\Common\Win32\win32serial.cpp
..\..\..\..\Common\Win32\win32windows.cpp
..\..\..\..\Common\Win32\win32windows.cpp
..\..\..\..\Common\ClassLib\window.cpp
..\..\..\..\Common\ClassLib\window.cpp
WMPlayer.OCX
WMPlayer.OCX
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
..\..\..\..\Common\Win32\WindowsMediaPlayer.cpp
..\..\..\..\Common\Win32\WindowsMediaPlayer.cpp
Can't load library %s
Can't load library %s
..\..\..\..\Common\Win32\WinPrinter.cpp
..\..\..\..\Common\Win32\WinPrinter.cpp
Could not get the default printer settings because a nil structure was passed in
Could not get the default printer settings because a nil structure was passed in
Someone passed in a bogus value for getting printer information
Someone passed in a bogus value for getting printer information
uxtheme.dll
uxtheme.dll
?#%X.y
?#%X.y
c:\RB\REALbasic\REALbasic Visual Studio\REALbasic\release\X86RunHoudini.pdb
c:\RB\REALbasic\REALbasic Visual Studio\REALbasic\release\X86RunHoudini.pdb
QuickTime.qts
QuickTime.qts
zcÁ
zcÁ
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe
%Documents and Settings%\%current user%\Application Data\Windows Loader.exe
GetProcessHeap
GetProcessHeap
GetWindowsDirectoryW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryInfoKeyA
SetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ShellExecuteA
ShellExecuteA
ShellExecuteW
ShellExecuteW
EnumChildWindows
EnumChildWindows
VkKeyScanA
VkKeyScanA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
GetKeyNameTextA
GetKeyNameTextA
MapVirtualKeyA
MapVirtualKeyA
GetKeyNameTextW
GetKeyNameTextW
EnumWindows
EnumWindows
GetKeyState
GetKeyState
GetAsyncKeyState
GetAsyncKeyState
midiOutShortMsg
midiOutShortMsg
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
iexplore.exe_500:
%?9-*09,*19}*09
%?9-*09,*19}*09
.text
.text
`.data
`.data
.rsrc
.rsrc
msvcrt.dll
msvcrt.dll
KERNEL32.dll
KERNEL32.dll
NTDLL.DLL
NTDLL.DLL
USER32.dll
USER32.dll
SHLWAPI.dll
SHLWAPI.dll
SHDOCVW.dll
SHDOCVW.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
IE-X-X
IE-X-X
rsabase.dll
rsabase.dll
System\CurrentControlSet\Control\Windows
System\CurrentControlSet\Control\Windows
dw15 -x -s %u
dw15 -x -s %u
watson.microsoft.com
watson.microsoft.com
IEWatsonURL
IEWatsonURL
%s -h %u
%s -h %u
iedw.exe
iedw.exe
Iexplore.XPExceptionFilter
Iexplore.XPExceptionFilter
jscript.DLL
jscript.DLL
mshtml.dll
mshtml.dll
mlang.dll
mlang.dll
urlmon.dll
urlmon.dll
wininet.dll
wininet.dll
shdocvw.DLL
shdocvw.DLL
browseui.DLL
browseui.DLL
comctl32.DLL
comctl32.DLL
IEXPLORE.EXE
IEXPLORE.EXE
iexplore.pdb
iexplore.pdb
ADVAPI32.dll
ADVAPI32.dll
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
IExplorer.EXE
IExplorer.EXE
IIIIIB(II<.fg>
IIIIIB(II<.fg>
7?_____ZZSSH%
7?_____ZZSSH%
)z.UUUUUUUU
)z.UUUUUUUU
,....Qym
,....Qym
````2```
````2```
{.QLQIIIKGKGKGKGKGKG
{.QLQIIIKGKGKGKGKGKG
;33;33;0
;33;33;0
8888880
8888880
8887080
8887080
browseui.dll
browseui.dll
shdocvw.dll
shdocvw.dll
6.00.2900.5512 (xpsp.080413-2105)
6.00.2900.5512 (xpsp.080413-2105)
Windows
Windows
Operating System
Operating System
6.00.2900.5512
6.00.2900.5512
iexplore.exe_500_rwx_10000000_0004A000:
.idata
.idata
.rdata
.rdata
P.reloc
P.reloc
P.rsrc
P.rsrc
ServerKeyloggerU
ServerKeyloggerU
789:;
789:;
%SERVER%
%SERVER%
URLMON.DLL
URLMON.DLL
shell32.dll
shell32.dll
hXXp://
hXXp://
advapi32.dll
advapi32.dll
kernel32.dll
kernel32.dll
mpr.dll
mpr.dll
version.dll
version.dll
comctl32.dll
comctl32.dll
gdi32.dll
gdi32.dll
opengl32.dll
opengl32.dll
user32.dll
user32.dll
wintrust.dll
wintrust.dll
msimg32.dll
msimg32.dll
GetKeyboardType
GetKeyboardType
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
oleaut32.dll
oleaut32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyW
GetWindowsDirectoryW
GetWindowsDirectoryW
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
MapVirtualKeyW
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
shlwapi.dll
shlwapi.dll
SHDeleteKeyW
SHDeleteKeyW
FindExecutableW
FindExecutableW
URLDownloadToCacheFileW
URLDownloadToCacheFileW
wininet.dll
wininet.dll
FtpPutFileW
FtpPutFileW
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
GetKeyboardState
GetKeyboardState
ShellExecuteW
ShellExecuteW
ntdll.dll
ntdll.dll
1 1$1(1,10141
1 1$1(1,10141
KWindows
KWindows
TServerKeylogger
TServerKeylogger
x.html
x.html
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
[Execute]
[Execute]
KeyDelBackspace
KeyDelBackspace
.html
.html
XtremeKeylogger
XtremeKeylogger
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Run
.functions
.functions
icon=shell32.dll,4
icon=shell32.dll,4
shellexecute=
shellexecute=
autorun.inf
autorun.inf
\Microsoft\Windows\
\Microsoft\Windows\
ÞFAULTBROWSER%
ÞFAULTBROWSER%
svchost.exe
svchost.exe
flexcop.mooo.com
flexcop.mooo.com
{UFE6PD14-TQ36-H08M-J0B8-65HQT3RPJY6B}
{UFE6PD14-TQ36-H08M-J0B8-65HQT3RPJY6B}
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
%svchost%
%svchost%
PTF.ftpserver.com
PTF.ftpserver.com
ÞFA
ÞFA
ftpuser
ftpuser
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe
%Documents and Settings%\%current user%\Local Settings\Temp\svchost.exe
%Program Files%\Internet Explorer\iexplore.exe
%Program Files%\Internet Explorer\iexplore.exe