not-a-virus:AdWare.Win32.OutBrowse.f (Kaspersky), MemScan:Adware.OutBrowse.A (B) (Emsisoft), MemScan:Adware.OutBrowse.A (AdAware), mzpefinder_pcap_file.YR, TrojanDropperVtimrun.YR (Lavasoft MAS)Behaviour: Trojan-Dropper, Trojan, Adware
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: e2736cb075fd5e028200de9a4d33aeda
SHA1: f7a7671d1e81a93462556823faddde6ab6889cf6
SHA256: e8be34c1eb03809cdf78202f421ed82dd21660c20b0325b51e1e541ed9c468b2
SSDeep: 24576:pCk Bd3ksSVACXBUtNXT Xqkk9qrKjuip:Z Bd3kscACXStNXpRaKy
Size: 999688 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: PC Utilities Software Limited
Created at: 2009-12-06 00:50:52
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan-Dropper. Trojan program, intended for stealth installation of other malware into user's system.
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The MemScan creates the following process(es):
6_Offer_7.exe:160
wmic.exe:272
dxwsetup.exe:244
%original file name%.exe:944
The MemScan injects its code into the following process(es):
f.exe:660
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process 6_Offer_7.exe:160 makes changes in the file system.
The MemScan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.inf (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dsetup32.dll (25519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.exe (8906 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.cif (1111 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dsetup.dll (2104 bytes)
The process f.exe:660 makes changes in the file system.
The MemScan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\Setup_product_6416[1].exe (31604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\dc[1].js (3110 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\bodyImg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\ui-bg_inset-hard_100_fcfdfd_1x100[1].png (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\DynamicOfferScreen[1].htm (850 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\6_Offer_7.exe (10434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\ui-bg_gloss-wave_75_2191c0_500x100[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\jquery.min[1].js (1197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\jquery-ui[1].css (33 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\OperaChecker25-6[1].exe (7966 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\button[1].png (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\PreExe_ID_10700.exe (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\jquery-ui-1.8.19.custom[1].css (5521 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\DynamicOfferScreen[1].htm (1140 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\button_over[1].png (921 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\jquery-ui.min[1].js (7947 bytes)
The MemScan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\PreExe_ID_10700.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\obhhelper.txt (0 bytes)
The process wmic.exe:272 makes changes in the file system.
The MemScan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\obhhelper.txt (238 bytes)
The MemScan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\obhhelper.txt (0 bytes)
The process dxwsetup.exe:244 makes changes in the file system.
The MemScan creates and/or writes to the following file(s):
%WinDir%\DirectX.log (1635 bytes)
%System%\DirectX\websetup\SET6.tmp (10815 bytes)
%System%\DirectX\websetup\SET5.tmp (601 bytes)
%WinDir%\setupapi.log (5088 bytes)
The MemScan deletes the following file(s):
%System%\DirectX\websetup\SET6.tmp (0 bytes)
%System%\DirectX\websetup\SET5.tmp (0 bytes)
%WinDir%\inf\oem10.inf (0 bytes)
The process %original file name%.exe:944 makes changes in the file system.
The MemScan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\instructionsMad.dat (24860 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp\Convert.dll (3005 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\f.exe (149252 bytes)
The MemScan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\instructionsMad.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (0 bytes)
Registry activity
The process 6_Offer_7.exe:160 makes changes in the system registry.
The MemScan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3D FD 0A 4B EA 01 43 E3 0C 57 52 04 F7 2F ED AA"
To automatically run itself each time Windows is booted, the MemScan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe %System%\advpack.dll,DelNodeRunDLL32 C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\"
The process f.exe:660 makes changes in the system registry.
The MemScan creates and/or sets the following values in system registry:
[HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}\TypeLib]
"(Default)" = "{03771AEF-400D-4A13-B712-25878EC4A3F5}"
[HKCR\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}\1.0\0\win32]
"(Default)" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"
[HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."
[HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}\TypeLib]
"Version" = "1.0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCR\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}]
"(Default)" = "CBrowserExternal Class"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015011420150115]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015011420150115\"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCR\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}\Version]
"(Default)" = "1.0"
[HKCR\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}\1.0\HELPDIR]
"(Default)" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp"
[HKCR\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}\TypeLib]
"(Default)" = "{03771AEF-400D-4A13-B712-25878EC4A3F5}"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015011420150115]
"CacheLimit" = "8192"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCR\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}\1.0]
"(Default)" = "SmartInstallerLib"
[HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}]
"(Default)" = "IBrowserExternals"
[HKCR\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}\LocalServer32]
"(Default)" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015011420150115]
"CacheOptions" = "11"
[HKCR\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}\LocalServer32]
"ServerExecutable" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "96 F6 0F BF BC 1F 89 2F A8 17 AA 2F 3F 15 C2 44"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Internet Explorer]
"iexplore.exe" = "Internet Explorer"
[HKCR\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}\1.0\FLAGS]
"(Default)" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015011420150115]
"CachePrefix" = ":2015011420150115:"
"CacheRepair" = "0"
The MemScan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The MemScan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The MemScan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The MemScan deletes the following registry key(s):
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014031720140318]
The MemScan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process wmic.exe:272 makes changes in the system registry.
The MemScan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BC F3 86 E8 84 34 04 75 55 26 C1 B1 C0 BB 8A 30"
The process dxwsetup.exe:244 makes changes in the system registry.
The MemScan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "61 DC 1D 11 D1 CB 83 02 FE D9 67 F3 A0 7A CB 9F"
[HKLM\SYSTEM\LastKnownGoodRecovery\LastGood]
"INF/oem10.inf" = "1"
"INF/oem10.PNF" = "1"
The process %original file name%.exe:944 makes changes in the system registry.
The MemScan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CC 62 1E E5 F8 ED 46 DB 56 49 C5 19 BC D9 34 1A"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
Dropped PE files
MD5 | File path |
---|---|
8bbb35f59be1f16ca639c8621771f397 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\6_Offer_7.exe |
10711c112b8b6b910df358b8d723fdbc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\IXP000.TMP\dsetup.dll |
d89abac89ff70bb6de7e287b7200aa91 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\IXP000.TMP\dsetup32.dll |
8b40e232719c34324eee465976a5cb16 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\IXP000.TMP\dxwsetup.exe |
ff745d855bc0ade231860517b7413bf4 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\f.exe |
00321d477f76e401373c1fc71c7c4502 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsj2.tmp\Convert.dll |
10ffabc748d68c40b68f883058c9b932 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\OperaChecker25-6[1].exe |
8bbb35f59be1f16ca639c8621771f397 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\Setup_product_6416[1].exe |
10711c112b8b6b910df358b8d723fdbc | c:\WINDOWS\system32\DirectX\websetup\dsetup.dll |
d89abac89ff70bb6de7e287b7200aa91 | c:\WINDOWS\system32\DirectX\websetup\dsetup32.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
6_Offer_7.exe:160
wmic.exe:272
dxwsetup.exe:244
%original file name%.exe:944 - Delete the original MemScan file.
- Delete or disinfect the following files created/modified by the MemScan:
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.inf (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dsetup32.dll (25519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.exe (8906 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dxwsetup.cif (1111 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\IXP000.TMP\dsetup.dll (2104 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\Setup_product_6416[1].exe (31604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\dc[1].js (3110 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\bodyImg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\ui-bg_inset-hard_100_fcfdfd_1x100[1].png (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\DynamicOfferScreen[1].htm (850 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\6_Offer_7.exe (10434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\ui-bg_gloss-wave_75_2191c0_500x100[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\jquery.min[1].js (1197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KNGZ0DUX\jquery-ui[1].css (33 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\OperaChecker25-6[1].exe (7966 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\button[1].png (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\PreExe_ID_10700.exe (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C16Z6ZOV\jquery-ui-1.8.19.custom[1].css (5521 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\DynamicOfferScreen[1].htm (1140 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\UX0HSN8Z\button_over[1].png (921 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\ST6FOZCJ\jquery-ui.min[1].js (7947 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\obhhelper.txt (238 bytes)
%WinDir%\DirectX.log (1635 bytes)
%System%\DirectX\websetup\SET6.tmp (10815 bytes)
%System%\DirectX\websetup\SET5.tmp (601 bytes)
%WinDir%\setupapi.log (5088 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\instructionsMad.dat (24860 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp\Convert.dll (3005 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\f.exe (149252 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe %System%\advpack.dll,DelNodeRunDLL32 C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name:
Product Name: DirectX
Product Version: 3.0
Legal Copyright: DirectX
Legal Trademarks: DirectX
Original Filename:
Internal Name:
File Version:
File Description: DirectX
Comments: setup Installer
Language: English (United States)
Company Name: Product Name: DirectXProduct Version: 3.0Legal Copyright: DirectXLegal Trademarks: DirectXOriginal Filename: Internal Name: File Version: File Description: DirectXComments: setup InstallerLanguage: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 23628 | 24064 | 4.46394 | 856b32eb77dfd6fb67f21d6543272da5 |
.rdata | 28672 | 4764 | 5120 | 3.4982 | dc77f8a1e6985a4361c55642680ddb4f |
.data | 36864 | 154712 | 1024 | 3.3278 | 7922d4ce117d7d5b3ac2cffe4b0b5e4f |
.ndata | 192512 | 65536 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.rsrc | 258048 | 3176 | 3584 | 2.76239 | 23c6fdcfafaa85328556c2a67b7fa90c |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 70
4802e2dc15d27c987792504e09af1c7c
883ec1cf14bb646813df89a72c02964a
29712ab816bae93e32b9ee4b84f99676
87757b23da5aeabbd23a89392f78efe7
d3a9632b6d00aae007a23d449fabf6aa
405239c5af3b8b1d94f481ccbf6f5a7a
9259d8b4b270a1077624191752fe1075
2a08f470eab68d0c1df934d6fb930360
145e93a0762d1601be7bf622efcc12a8
91abdefded146999db4fe1a6819e4de1
fbbec612a190ffa2234d9306190f0d9a
6dfda597b9af365a7de82a6223f3ab4f
1f392f50126fa7d9321934cd3f1793e6
14a4fbd502d6a8e2d41c4d5c4177ff4c
f720066388972c6f4f6f933f27ec3f81
4696b62f912496bf56214383008d837c
22170cfee2bbdfc491ceaf10beb7dc23
f196a2eb920c0f2257144462db039dd1
2504e51edace88506e0c19a54885ba2d
bc575ac5260c15ff8cc54f7c5a7ddd83
e4c641363ad2727f97f8878f5df0a163
44402a4cc2aa34d88afcd678af1f4483
dfe55d802b5d07bdc4f36d4136520759
d962952f284dcf17c45f4ca21d24bb29
a62b3c50d50c7b7e881ae57e338e0d76
Network Activity
URLs
URL | IP |
---|---|
hxxp://smartinstaller.elasticbeanstalk.com/Installer/Flow?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&version=4.1 | |
hxxp://cdn-ppdownload.outbrowse.netdna-cdn.com/Installer/OperaBrowser/OperaChecker25-6.exe | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/Files//Setup_product_6416.exe | |
hxxp://smartinstaller.elasticbeanstalk.com//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/ui/css/start/jquery-ui-1.8.19.custom.css | |
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.5/jquery.min.js | |
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.8/themes/start/jquery-ui.css | |
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/topLine.jpg | |
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_inset-hard_100_fcfdfd_1x100.png | |
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_gloss-wave_75_2191c0_500x100.png | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/topComp.png | |
hxxp://smartinstaller.elasticbeanstalk.com/Installer/Track?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&reqid=195722780&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&status=0&installedid=6416&offerscreenid=&offerorder=7&downloadduration=1563&installduration=31 | |
hxxp://stats.l.doubleclick.net/dc.js | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/bgImg.jpg | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/bottomLine.jpg | |
hxxp://smartinstaller.elasticbeanstalk.com/Installer/TrackFinish?reqid=195722780&x=y&clickid=437b72cefb1c772554380efe6747bb00 | |
hxxp://smartinstaller.elasticbeanstalk.com//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& | |
hxxp://smartinstaller.elasticbeanstalk.com/installer/thankyou?productid=6416&pubid=1184&distid=7623&countryid=262&reqid=195722780&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0 | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/bodyImg.png | |
hxxp://smartinstaller.elasticbeanstalk.com/installer/ThankYouInner?productid=6416&productname=DirectX | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/nextCase.jpg | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/button_over.png | |
hxxp://dlrevenyou.outbrowse.netdna-cdn.com/offers/images/Theme8/button.png | |
hxxp://n20.adshostnet.com/js/show_ads.js | 206.54.177.214 |
hxxp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846 | 206.54.177.214 |
hxxp://n20.adshostnet.com/impression.gif?b=16&p=11&ch=&ap=&cps=&c=16&l=UA&h=601aaa7c277e8dfa44e431f41e9b18d8&t=1421244957252&s=2b225baf5a9da70613cf9d825ec2c6dc | 206.54.177.214 |
hxxp://pool.cast-prod-dlv-pull.ironsrc.netdna-cdn.com/scripts/1/adnl.min.js | |
hxxp://cast-prod-cs-delivery2.cloudapp.net/api/v/1/949,1/?callback=cb_1421244957706&ts=1421244957706&connectionType=0&sessionId=uKNze | |
hxxp://pool.cast-prod-dlv-pull.ironsrc.netdna-cdn.com/images/efd2b565-aa0b-40fe-b784-ca7bade0ca3a.gif | |
hxxp://cast-prod-cs-delivery2.cloudapp.net/api/vp/1?clk=EJA7HpxP7_Irl1TlS65iISz14gwkgUUkkAV1tVNoX6jD9NlJI7_vmKEWLfNlMyVGDtV4I420V290Gy0s8625Si1tyo81j110Vo6lAae29upv3RRMvI52DQKl3wssdZajA0aADPb-JOOxWxTww6W75yieXLqnqSjzfvqrBzPHM6M5Ye-zuyffFt0exBwQd9TS3ANinTEuW9gN1Ja-cvB_MM_HS83Vx4mDnoKTxmTuOMSKD8fqiBRVV5oZf8QYNuoKp23oE6nR96hKLxSPlPgCN2qdtgXH4bnjBu75nHXNhZIfoQb_RjWO2CTMarNhe1-oJMq8AXEcKhZH2u8kINTR32pQb3L7B_zs1iW4a3s_GqYwW-4uyzejpw7BXZZixXl33lmlyeNwVM1Oj7gbMVRYDA | |
hxxp://d.castplatform.com/api/v/1/949,1/?callback=cb_1421244957706&ts=1421244957706&connectionType=0&sessionId=uKNze | |
hxxp://static.revenyou.com/offers/images/Theme8/button.png | 198.232.124.224 |
hxxp://cdn.castplatform.com/images/efd2b565-aa0b-40fe-b784-ca7bade0ca3a.gif | 198.232.125.79 |
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_gloss-wave_75_2191c0_500x100.png | 64.233.165.95 |
hxxp://installer.apps-track.com/installer/thankyou?productid=6416&pubid=1184&distid=7623&countryid=262&reqid=195722780&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0 | 107.20.214.49 |
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/start/jquery-ui.css | 64.233.165.95 |
hxxp://static.revenyou.com/offers/ui/css/start/jquery-ui-1.8.19.custom.css | 198.232.124.224 |
hxxp://dl.revenyou.com/Files//Setup_product_6416.exe | 198.232.124.224 |
hxxp://cdn.castplatform.com/scripts/1/adnl.min.js | 198.232.125.79 |
hxxp://static.revenyou.com/offers/images/Theme8/button_over.png | 198.232.124.224 |
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.5/jquery.min.js | 64.233.165.95 |
hxxp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& | 107.20.214.49 |
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js | 64.233.165.95 |
hxxp://static.revenyou.com/offers/images/Theme8/bgImg.jpg | 198.232.124.224 |
hxxp://installer.apps-track.com/Installer/Flow?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&version=4.1 | 107.20.214.49 |
hxxp://stats.g.doubleclick.net/dc.js | 173.194.71.157 |
hxxp://static.revenyou.com/offers/images/Theme8/topLine.jpg | 198.232.124.224 |
hxxp://static.revenyou.com/offers/images/Theme8/bottomLine.jpg | 198.232.124.224 |
hxxp://installer.apps-track.com/Installer/TrackFinish?reqid=195722780&x=y&clickid=437b72cefb1c772554380efe6747bb00 | 107.20.214.49 |
hxxp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& | 107.20.214.49 |
hxxp://cdn.download4desktop.com/Installer/OperaBrowser/OperaChecker25-6.exe | 198.232.124.192 |
hxxp://installer.apps-track.com/installer/ThankYouInner?productid=6416&productname=DirectX | 107.20.214.49 |
hxxp://d.castplatform.com/api/vp/1?clk=EJA7HpxP7_Irl1TlS65iISz14gwkgUUkkAV1tVNoX6jD9NlJI7_vmKEWLfNlMyVGDtV4I420V290Gy0s8625Si1tyo81j110Vo6lAae29upv3RRMvI52DQKl3wssdZajA0aADPb-JOOxWxTww6W75yieXLqnqSjzfvqrBzPHM6M5Ye-zuyffFt0exBwQd9TS3ANinTEuW9gN1Ja-cvB_MM_HS83Vx4mDnoKTxmTuOMSKD8fqiBRVV5oZf8QYNuoKp23oE6nR96hKLxSPlPgCN2qdtgXH4bnjBu75nHXNhZIfoQb_RjWO2CTMarNhe1-oJMq8AXEcKhZH2u8kINTR32pQb3L7B_zs1iW4a3s_GqYwW-4uyzejpw7BXZZixXl33lmlyeNwVM1Oj7gbMVRYDA | |
hxxp://static.revenyou.com/offers/images/Theme8/bodyImg.png | 198.232.124.224 |
hxxp://static.revenyou.com/offers/images/Theme8/topComp.png | 198.232.124.224 |
hxxp://installer.apps-track.com/Installer/Track?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&reqid=195722780&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&status=0&installedid=6416&offerscreenid=&offerorder=7&downloadduration=1563&installduration=31 | 107.20.214.49 |
hxxp://static.revenyou.com/offers/images/Theme8/nextCase.jpg | 198.232.124.224 |
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_inset-hard_100_fcfdfd_1x100.png | 64.233.165.95 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /Installer/Flow?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&version=4.1 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
Host: installer.apps-track.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:08 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 16037
Connection: keep-alive
..Sv.NlmsAxc.2..*.JqaEv`.5. ).Bkmnjf`grQsoa"8 $.Fmkcsez_oajgRvjdo"8.)0.*.LdcKct.5.FH?X[LM>9GXK>=GENC.KJ?RT;QA\Z\YmmcjcrOodoo\kcYV`]rr`edlfmv.x FF=TXJL=@H_K<;CBLB.RKFRR9M>ZY[vasmh]ciQl`ssap`TWZubmniefk`ku.y.GGEWZDJ<?IYL=CFDF@.QL@SSAP@TWlub_s)p_b]Nhdqq`neZWkr^cq'o]gcchw.z.BJAY]GG>:J\G@?HGI=.LMCNV=RCWTlhlb2RkfrrYm^ZYknje6chw.z.BJAY]GG>:J\G@?HGI=.LMCNV=RCWTr^`pmd]rac]nLmcnv]rcWTr^`pmd]rac]nany.{.HI@QZEM@;K[M?>@DGC.MNBTU<J@UZlghca kdplQl`ssap`TWhkfa`)pjpkciz.v.DKCTWGHA>F^IAACAI>.PIEPW?M=WUgpn`ntqpjaLmcnv]rcWTdlr^lsoupa`ku.y.GGEWZDJ<?IYL=CFDF@.QL@SSAP@TWbqq[qp10.Kj_rt[qa\ZdkoZpq 1/hnw.w.FH?X[LM>9GXK>=GENC.KJ?RT;QA\Zhqnm_onraap^`Nhdqq`neZWetlr^lsoe_m[cany.{.HI@QZEM@;K[M?>@DGC.MNBTU<J@UZsc,ricrKj_rt[qa\Zqa(ogbqgl"*.J``Ibs50"8.@F>W\FN?AJZE<<FFHD.SMALR:PBV[]apo]hbqPiepw_m]WU_^lsamgn`ku.y.GGEWZDJ<?IYL=CFDF@.QL@SSAP@TWZubmniefkKj_rt[qa\Z\o`lmj_glhnw.w.FH?X[LM>9GXK>=GENC.KJ?RT;QA\Zno`^r*j`ceQj^op_o_[Xsu`]o&n^addpz.t.AIBS^HOA<DZF?@BHJE.NGAMU>LDX\ojf`1Ql`ssap`TWjmk_7dpz.t.AIBS^HOA<DZF?@BHJE.NGAMU>LDX\u`Znlc^lbdeqNgamu^ldX\u`Znlc^lbdeqchw.z.BJAY]GG>:J\G@?HGI=.LMCNV=RCWTjfgd[,llsnKj_rt[qa\Zjed`_*jkqsfkt.u.EEDU_JJ;<E]J;BDIL@.NHDQQ@NEZWanm_onrqrdNgamu^ldX\gnl\krpoqbhnw.w.FH?X[LM>9GXK>=GENC.KJ?RT;QA\ZdkoZpq 1/SmalrZpbV[esr\jo*00box z.@F>W\FN?AJZE<<FFHD.SMALR:PBV[iyqoYmmqb[q_hQj^op_o_[Xmwnl\krp_`ncfchw.z.BJAY]GG>:J\G@?HGI=.LMCNV=RCWTqb scdsSmalrZpbV[ri qa`pfm. .RckgmmL^gd.: R]]lqb[q_hcn.'.NoicqcrD<
<<< skipped >>>
GET /Installer/Track?pubid=1184&distid=7623&productid=6416&subpubid=0&campaignid=0&networkid=1&reqid=195722780&dfb=0&os=5.1&iev=6.0&ffv=&chromev=&macaddress=00:0C:29:02:CD:FB&netv=&d1=-1&d2=-1&d3=-1&d4=-1&d5=-1&ds1=&hb=2&systembit=32&vm=1&machineguid=75ed9567-aa58-4c8e-a8ea-3cad7c47ab03&diskserial=-1465484763&status=0&installedid=6416&offerscreenid=&offerorder=7&downloadduration=1563&installduration=31 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
Host: installer.apps-track.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:11 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 8
Connection: keep-alive
..OK......
GET /Installer/TrackFinish?reqid=195722780&x=y&clickid=437b72cefb1c772554380efe6747bb00 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
Host: installer.apps-track.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:12 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 8
Connection: keep-alive
..OK..HTTP/1.1 200 OK..Cache-Control: private..Content-Type: text/html; charset=utf-8..Date: Wed, 14 Jan 2015 14:16:12 GMT..Server: Microsoft-IIS/8.0..X-AspNet-Version: 4.0.30319..X-AspNetMvc-Version: 4.0..X-Powered-By: ASP.NET..Content-Length: 8..Connection: keep-alive....OK....
GET /scripts/1/adnl.min.js HTTP/1.1
Accept: */*
Referer: hXXp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.castplatform.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:16 GMT
Content-Type: text/javascript
Content-Length: 254739
Connection: keep-alive
Content-MD5: kS5 HMdYmW7NhbpEZpZsog==
Last-Modified: Fri, 09 Jan 2015 14:33:05 GMT
ETag: 0x8D1FA3050818E1A
x-ms-request-id: 17eaa073-0001-0016-3e13-1d767f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Server: NetDNA-cache/2.2
Expires: Thu, 15 Jan 2015 14:16:16 GMT
Cache-Control: max-age=86400
X-Cache: HIT
// CAST Delivery Agent v3.0.97.!function(e,i){Array.prototype.indexOf||(Array.prototype.indexOf=function(e,t){if(this===i||null===this)throw new TypeError('"this" is null or not defined');var n=this.length>>>0;for(t= t||0,1/0===Math.abs(t)&&(t=0),0>t&&(t =n,0>t&&(t=0));n>t;t )if(this[t]===e)return t;return-1});var t=function(){var t=function(e){return this instanceof t?function(){return this._wrapped=e,this}.call(this):new t(e)};t.once=function(e){var i=null,t=!1;return function(){return t?i:function(n){return t=!0,i=e.apply(this,n)}(Array.prototype.slice.call(arguments))}},t.delay=function(e,i,t,n){return setTimeout(function(){e.apply(t||this,n||[])},i||0)},t.execute=function(e,i){return"function"==typeof e[i]?e[i].call(e):e[i]},t.extend=function(){var e=t.argsToArray(arguments),i=e.shift();return t.map(e,function(e){for(var t in e)e.hasOwnProperty(t)&&(i[t]=e[t])}),i},t.noop=function(){return null},t.sa=function(e,i){for(var t in i)i.hasOwnProperty(t)&&e.setAttribute(t,i[t]);return e},t.attachEvent=function(e,i,t){var n=!1;(e.addEventListener||function(){return n=!0,{call:function(e,i,t){e.attachEvent(i,t)}}}()).call(e,[n?"on":"",i].join(""),t,!1)},t.detachEvent=function(e,i,t){var n=!1;(e.removeEventListener||function(){return n=!0,{call:function(e,i,t){e.detachEvent(i,t)}}}()).call(e,[n?"on":"",i].join(""),t,!1)},t.isEmpty=function(e){return({string:function(){return 0===e.length},object:function(){for(var i in e)return!1;return!0}}[typeof e]||function(){return!e})()},t.map=function(e,i){
<<< skipped >>>
GET /images/efd2b565-aa0b-40fe-b784-ca7bade0ca3a.gif HTTP/1.1
Accept: */*
Referer: hXXp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.castplatform.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:17 GMT
Content-Type: image/gif
Content-Length: 22346
Connection: keep-alive
Content-MD5: Ip8vx2HNFOTGMag0H22wGQ==
Last-Modified: Thu, 28 Aug 2014 09:31:04 GMT
ETag: 0x8D190B9EC7098CD
x-ms-request-id: 9f0aaf4e-0001-001c-0d83-517202000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Server: NetDNA-cache/2.2
Expires: Thu, 15 Jan 2015 14:16:17 GMT
Cache-Control: max-age=86400
X-Cache: HIT
GIF89a,......*H*.........ECA.r2.,....T6$......WR7,...kv.........H............WK..0.KW..l.....<......................)9|||....:HkkkVWV.vl.......|......'.............. .[g......\GG......%&%....................................................................................$6$....:..J...,.....DLnT4*$.......f.FTF.N.4^<..4..$dfdDb<...4#.4RT..l|....4464.R$.N4....F,..Dd*...TL*..n,46,lJ4.V$LnlD^T..L.jLl........D^d.vll....4,64dvdt6,..<..\..L..L,>L...\.llRL...\z.tj,..l.J...D..4.24....nT.....L..l.2..%...T..T..l..L.f..rL.ZD.R,.6$.NL...lbT..l...\...rll.......T....6$.....$..Ll..t~t.....,..ltvt..T...TJ..B..j4..d..t........,..\.J..........dvt......<.4........L..T....z...t...\b....tv|..$lF...........lgl...........|vt..|..........n.......lj.....r4t....$.....L..,|rd......\.................!..NETSCAPE2.0.....!.......,....,..........H......*\......#J.H.....3j...... C..I....(S.......0c..I....8s.....O.N..-.I..MY..Y....,P.d......'........]...K..! 9........p....Rh..a4i.3....`R\......pP..z...>b C^........]K.....C...$...|..^..0b8...a..K....k...rW..7..M.....I.a..Oj......g.lVg.h.......{w...v8......I..#..4...:.j.R.[.cb.........i..V..G.z.6.`rv!....<..}..5.Tc..G.a.......H.(.8..).....=(..4.E....qT)..7.TY|XJ.<.9$..l..=.83..PF..$.T9e. :3..0.T..`.).i.....n\.I.l.@d....f.@...)....3.D...S..J,......P...}t....Q!...Vj...B..P......Xp.&.......7X.l.../.@.R%$.,:h,... ...k.......a:..T..F........[..v.....0.H..e..}.hr./....'........ m..o.|. .h...H...".... .... .r.....~0.Fk.B.Z.k..H%.7..(.d..$.....m.....Lb...A...........J...<.]z
<<< skipped >>>
GET /offers/images/Theme8/topComp.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:10 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/bottomLine.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:10 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>..HTTP/1.1 404 Not Found..Date: Wed, 14 Jan 2015 14:16:10 GMT..Content-Type: text/html..Content-Length: 1245..Connection: keep-aliv
<<< skipped >>>
GET /offers/images/Theme8/topLine.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/bgImg.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/nextCase.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:15 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>..HTTP/1.1 404 Not Found..Date: Wed, 14 Jan 2015 14:16:15 GMT..Content-Type: text/html..Content-Length: 1245..Connection: keep-aliv
<<< skipped >>>
GET /offers/images/Theme8/topComp.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/bodyImg.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: image/png
Content-Length: 1914
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Mon, 05 Aug 2013 10:27:32 GMT
ETag: "36dd864c691ce1:0"
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
Expires: Wed, 21 Jan 2015 14:16:14 GMT
X-Cache: HIT
Accept-Ranges: bytes
.PNG........IHDR.......:.....j.......sRGB.........gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...0PLTE................................................{.......IDATx......:..`..p..J.4.ty.:......)v..\....,.fwv..U...!.....b.f.....Cy(..OW......w......]R..l..2My}<..]..8hn{*..X.).m..4w.U.J.....u..l.J...<...>uJ.....i.>o.%......I.\..S......U.D.}OK..J`......sJ`.}..M.9%..A....u.T.%........K....OQ..._..d.>..L....]I. U.].c.Je...|.W.U?..E.}...*.vZ...K...M....).W...^V..>).e(.].Z.}dg%@....S.*/...........Y.W.]}...|.SgO........rrj...4UY../..r.~.....Z.ep.wui.sP^..X.g%$(.......C........Ze....4yn}....U.({.V..{o..}O...w.G.Q.^..r..p....0y............8......6.v....zz~....-...F*..f.F]...R..*. -......e{mO.s.i.9.U....zz.6.f.T>.f.DQ%.. ...l.q\N."eA({_W7..Q.....d........>...Y.."e.\....s,.. .Li)%....R.o.....C.9wQ....8........KNY..t..)...k...v)P*.....I...4&../.{)..qe..R.'...2..*..d.z&.T;y..)Q*....)R..2..)Tj.B..)V..b..)W......QB!rj.B.J)..N)b*...R)q..<S...z%.LPr..%.LQ2.4e.....q&*c.De,..J.x& ig...g..b.(.g..p.)Qf..uf*1g..af .Y...... .;(.....s......r.v. ...s'...K.0wS.....sG%.......-.R..}......4S.....W.....=.9eN(..OS..Jt(...<...P.(..DJ;_)..Y. ..7.>.@.Bi....HS)eM.qi;...........$.z%.[..P...SJzT*E]......2zT.t..L%6.TJ..Y.a...}.V..J...,.....H... ....;..2_._/[.^/[.\.W.\.!..%oT*y.Z....#Q.Bw.FI.7...H..2Jt.*..../........2.F..X.....gqJ.q:.U.q.. V...B..s.(.J2.x..()#1@.'d4.Hh.h.J.I.i.G.#.;.J....*Q$Z..?.........sR..D.<...| ......2.1b.A3...v.....X.y{..R....{h..pzJ.I.).Y..Kn.z;%Jn..c.W...bL........t..!...A..(..*
<<< skipped >>>
GET /offers/images/Theme8/bottomLine.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/button_over.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: image/png
Content-Length: 921
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Mon, 05 Aug 2013 17:21:05 GMT
ETag: "f072da2a092ce1:0"
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
Expires: Wed, 21 Jan 2015 14:16:14 GMT
X-Cache: HIT
Accept-Ranges: bytes
.PNG........IHDR...Y............m....tEXtSoftware.Adobe ImageReadyq.e<...;IDATx..Z;o.1..Y.D...W."$=D..*=BPR@..5..........DHi...M.i...e.r............;..N.h..=.|..x6..f..pf...n...yX...>z......`87.3...t.e:.sh..e..z.A....G.p..IZ.z...?Ra8........Y......O.......[........sL..?@.o....y..-.....Lc.0......O..|z.O/...k.....e...n..!......G.p...9....3. .'?7 ..GD@..{.<....C$....N.........Q...<.,@...].;Q.'<.(.X.r.,.6.......QrB..h..d&r....6....G..Shr.... .....4r..= ..f.....B.qP..l.K........YB.Z....H....../:.l.(.S.D...nM7..P.%R........&_uR.H6A..(raP.H9...[\D. .(....d...`.8.A......r5Q..........:v.e....u.....-&.1.....&.........Z.|....).L...$....)K%a-....b..a*{<(W..P<..w7_Z.....h.%6.N........*\FB...A...#..f.N...C..(.p...........K.|..5d..3u-........(.k. 7..6..tsvP!.U0.q.......9z.e ..0.ALt..@l..2iR.2............. .>=...{WVim....f.c6.:...|.....0X.yk...../z..!.SHW.d......o.s........a..8..g.|zvg...o6......@..........n.^......IEND.B`.....
GET /offers/images/Theme8/button.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:14 GMT
Content-Type: image/png
Content-Length: 458
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Mon, 05 Aug 2013 17:21:12 GMT
ETag: "1b5642f092ce1:0"
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
Expires: Wed, 21 Jan 2015 14:16:14 GMT
X-Cache: HIT
Accept-Ranges: bytes
.PNG........IHDR...Y............m....tEXtSoftware.Adobe ImageReadyq.e<...lIDATx...1..p....at.`...[_)...&.........~...C..V$z.J.w.Wi........../..<........R.H)s..i....t.....}2M...9i.&..(..c.....l.&.0`.&a..f...p...R.Jr....bA....$.....cr....u....sq..x....?..> ..pu`.h..C.......$w$..gY. .....%9MS...V.....IF'..0].;..HF..]b..Hr..pW...k..{..EQD.....-L.....#..H.u.. ..lF....j".,<........<. ......18....\.....oI...^.....:..._......rU.<Z`..d..E.|.0.......B.....IEND.B`.HTTP/1.1 200 OK..Date: Wed, 14 Jan 2015 14:16:14 GMT..Content-Type: image/png..Content-Length: 458..Connection: keep-alive..Cache-Control: max-age=604800..Last-Modified: Mon, 05 Aug 2013 17:21:12 GMT..ETag: "1b5642f092ce1:0"..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..Expires: Wed, 21 Jan 2015 14:16:14 GMT..X-Cache: HIT..Accept-Ranges: bytes...PNG........IHDR...Y............m....tEXtSoftware.Adobe ImageReadyq.e<...lIDATx...1..p....at.`...[_)...&.........~...C..V$z.J.w.Wi........../..<........R.H)s..i....t.....}2M...9i.&..(..c.....l.&.0`.&a..f...p...R.Jr....bA....$.....cr....u....sq..x....?..> ..pu`.h..C.......$w$..gY. .....%9MS...V.....IF'..0].;..HF..]b..Hr..pW...k..{..EQD.....-L.....#..H.u.. ..lF....j".,<........<. ......18....\.....oI...^.....:..._......rU.<Z`..d..E.|.0.......B.....IEND.B`...
<<< skipped >>>
GET /dc.js HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: stats.g.doubleclick.net
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 12:48:59 GMT
Expires: Wed, 14 Jan 2015 14:48:59 GMT
Last-Modified: Thu, 13 Nov 2014 21:10:00 GMT
X-Content-Type-Options: nosniff
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 15853
Cache-Control: public, max-age=7200
Age: 5231
Alternate-Protocol: 80:quic,p=0.02
...........={_.:...)....'.$..&.......-..Ms..e9..'...B.g.3#..........3z?F........z....n.h..@&b.....v.W.A"...<8H.^.....A*......3....~..X?8....<..t..)d.......Hf.Q...._. .,`.....a....>...?...v.Aq.G.........p.........a$y&.....sX7p........ ..M.d..l.K.....t...8..i6....C..XO.....@....!.....RG.l .}....b$c..B|8..C}!.8..=.e.K....{..K.9..a..nx......%..;..F...J...v..n!.L.....g.C@...~..|...=....q.9n_...P.....Tw.o...........k.....^:.....O!..b......=...B..,..j8......k.b./.Y..JE...({k.........(.L..@. ...b;...s.f...k../--..\..A.M..he.q..u.u.$..<.....$......eBf....,...r{.[.....h....Tup..$?F?2.... .qk...x..;.......}.Y.[)jL.........}.4.'..Z_...bms.._..I4.r=...f....U}...|......].FG..\.[9...hp......"..L..J...a..l.=.C..c.............i..2&.......{....T*w..%#ey....A..`.T..Q.w.....f2...,....J...y.qqA.........BTo....5.W..9]...]b$K%Z.V..b..x1t....]..&.P.Qo.A?..W.R..l.........'".. ..D. ..EA.......$US.t...w?.u*rn.:......?...a,.(..0....`.GL....Z...j[8.[.2k8N...4(.x..4j&..V..p.N)0.;k.......C..= .].;M.|..&..;........M'....Vy.6*..[J.7`n*...Q..O.%4T ...;.....'J.........xKK.&..^A...;...........a<.783[X......p...c...3j$.....Z....c.D.....BW................*.1]KQ].zb.... .?~....V>&."..Q$.....&.sS..Kq........).....{y.V....T...L.09.-.KK:..yH.....4./..Ni.oaM..X..X.R...l...[...n2.....6.v.Q.......v.C.0........55..z]__.a.j...fJh.....r.6a.6v3..!.}^0...,...I.w........i.......Q..q ..c;2.p2 .%..:0..14....z....b.*Z..*..>...v].....H...V...kVT.]....I ...._..}.f.....^U..a.V]..wd.N.....9....n1-0..`...B..Q.MB...7...%.!.L~.."H..xNV`?||.H.........
<<< skipped >>>
GET /installer/thankyou?productid=6416&pubid=1184&distid=7623&countryid=262&reqid=195722780&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0 HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: installer.apps-track.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:11 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 1288
Connection: keep-alive
..<html>.. <head>.. <title>Thank you for installing DirectX</title>.. <script type="text/javascript"> var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-37348037-1']);_gaq.push(['_setDomainName', 'ppdownload.com']);_gaq.push(['_setAllowLinker', true]);.. _gaq.push(['_trackPageview']);.. (function() {.. var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;.. ga.src = ('https:' == document.location.protocol ? 'hXXps://' : 'hXXp://') 'stats.g.doubleclick.net/dc.js';.. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);.. })(); </script> .. </head>.. <body>.. <div style="position:relative;left:0px;top:0px;color:white; height: 1px; visibility: hidden;"></div>.. <iframe src="hXXp://installer.apps-track.com/installer/ThankYouInner?productid=6416&productname=DirectX" width=100% height=100% frameborder=0 scrolling=no marginheight=0 marginwidth=0 > </iframe> .. .. </body>..</html>......
<<< skipped >>>
GET /installer/ThankYouInner?productid=6416&productname=DirectX HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://installer.apps-track.com/installer/thankyou?productid=6416&pubid=1184&distid=7623&countryid=262&reqid=195722780&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: installer.apps-track.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:15 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 907
Connection: keep-alive
..<html>.. <head>.. <script type="text/javascript"> </script>.. .. </head>.. <body>.. .. .. <center>.. <!-- BEGIN TAG - DO NOT MODIFY -->.. <script type="text/javascript">.. //<![CDATA[.. epom_key = "6c2c19aff050b202bf7c7970cb59cde3";.. epom_channel = "";.. epom_code_format = "ads";.. epom_ads_host = "//n20.adshostnet.com";.. epom_click = "";.. epom_custom_params = {};.. epom_width = "1200";.. epom_height = "1400";.. document.write("<script type='text\/javascript' src='" (location.protocol == 'https:' ? 'https:' : 'http:') "//n20.adshostnet.com\/js/show_ads.js'><\/script>");.. //]]>.. </script>.. <!-- END TAG -->.. </center>.. </body>..</html>HTTP/1.1 200 OK..Cache-Control: private..Content-Type: text/html; charset=utf-8..Date: Wed, 14 Jan 2015 14:16:15 GMT..Server: Microsoft-IIS/8.0..X-AspNet-Version: 4.0.30319..X-AspNetMvc-Version: 4.0..X-Powered-By: ASP.NET..Content-Length: 907..Connection: keep-alive....<html>.. <head>.. <script type="text/javascript"> </script>.. .. </head>.. <body>.. .. .. <center>.. <!-- BEGIN TAG - DO NOT MODIFY -->.. <script type=
<<< skipped >>>
GET //offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: serv.the-app-data.info
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:10 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 8301
Connection: keep-alive
.<html>. <head>. . <style type="text/css">. .ui-progressbar-value { background-image: url(images/pbar-ani.gif); }. </style>. . <link type="text/css" href="hXXp://static.revenyou.com/offers/ui/css/start/jquery-ui-1.8.19.custom.css" rel="stylesheet" />. <link href="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/start/jquery-ui.css" rel="stylesheet" type="text/css" />. <script type="text/javascript" src="hXXp://ajax.googleapis.com/ajax/libs/jquery/1.5/jquery.min.js"></script>. <script type="text/javascript" src="hXXp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script>.. <title>2 - NonProduct (DirectX)</title><script type='text/javascript'>var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-37348037-1']);_gaq.push(['_setDomainName', 'ppdownload.com']);_gaq.push(['_setAllowLinker', true]);.. _gaq.push(['_trackPageview']);.. (function() {.. var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;.. ga.src = ('https:' == document.location.protocol ? 'hXXps://' : 'hXXp://') 'stats.g.doubleclick.net/dc.js';.. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga
<<< skipped >>>
GET //offers/DynamicOfferScreen?offerid=4&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0& HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: serv.the-app-data.info
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2015 14:16:12 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 4.0
X-Powered-By: ASP.NET
Content-Length: 7014
Connection: keep-alive
<html>. <head>. <title>4 - NonProduct (DirectX)</title><script type='text/javascript'>var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-37348037-1']);_gaq.push(['_setDomainName', 'ppdownload.com']);_gaq.push(['_setAllowLinker', true]);.. _gaq.push(['_trackPageview']);.. (function() {.. var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;.. ga.src = ('https:' == document.location.protocol ? 'hXXps://' : 'hXXp://') 'stats.g.doubleclick.net/dc.js';.. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);.. })();</script><style type='text/css'>body { width:100%; height:100%; margin:0px; padding:0px; font-size:font-family:helvetica; font-size:12px;} .divLeadpName { border-bottom-style:groove;border-bottom-width: thin; padding-left:61px; padding-top:9px; font-size:font-family:helvetica; font-style:italic; font-size:25px; font-weight:bold; color:black; position:absolute; width: 100%; background-color: #fff; ba} #divTop {display: none} #divMiddle {background-color: #efecec; height: 100%;} #middle {background-color: #fff;} .divOnNext { position:absolute; width:89p
<<< skipped >>>
GET /ajax/libs/jquery/1.5/jquery.min.js HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Wed, 14 Jan 2015 13:38:33 GMT
Expires: Wed, 14 Jan 2015 14:38:33 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29947
X-XSS-Protection: 1; mode=block
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
Age: 2257
Alternate-Protocol: 80:quic,p=0.02
...............F....>..R..1.d...j0!^Y....l..jW....@..w.Le.I............@0.....$..}9[.......O....f.O.......6......6...W.?..!.t............C...r....'.}.Y..J5.....?g.|...n.Ec...j.....Q.m..Y..w...m..?}...l.....3.o.>mp..t.g..w.tq;.v...o.-..l...q.lg:z..w..W....zM.....d.9[d.IOU....T#^....;..1..,..o.o.m.......g...}.m5.._u........*ES~.....5.....m......v..%_..w......Z..w.6Y.E.....l......gw.C....l...a..X.:F...o&...a...z.D#...Zq.{...x..V.wk.K..O^..(i.......f.SR/io...c..=.,.^x..*...~..4...:.{=n(J.z(..t(.q..i.p...Y.N.tD..J.=........vXn.K..e.-xH..i..F.1..f.....e.o?..\ew....>~...c2........z..............Gj.zB.;:....2..M.sF.s../..*8..o....x.;....>& n.... .....y......4Ui.@......b.m/.h...?U.....=T.EE.N.i..DMU.e.E....j..Q6...B-.J....>M....:.MZ-.4.Z..._..i.%..m..]..........o.........~.......3...HN..t.................E/[....-..vq..y....-....j......0.xO..U4W..&Jx.ktt.<..u.6oNK..x..h....p.Oh.......P...6...R.C..\.n..m..?..W....6..G.....hn..h.o......!.ep6...T..N..$.......5.)P...3.V......_.O...5..gl.5........c......6.m...^..b...c.y.r..$.....L..p...o.................(,uB..T.2_28....d..us.f1.L..=..&..bV..m<..=........3D..\.Y..r3....A_.Y.G.%.....7|.$t.Z.k..C..\.8?.h...q....naF.i-.......B..`6t.._..h12n....v..".pq..C.h.......x...N.L...p..............f`E@.ha.....m..zj.] h........v..(i....|mv....7.......t......j..j...c.K2...;.4.$;Ve...-o4.~.;..h.M...(*N....m0T.G]5.......K`#.&..Z.V...3......m2.Z.hJ;..F...`Q.QM.?.,..E........@......=.b.........._.Fi.h6........l....2.}$...>.=.N.M)....$eP..]..p%M....|.e......&jJ...x.u...:..
<<< skipped >>>
GET /ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT
Date: Wed, 14 Jan 2015 14:09:07 GMT
Expires: Wed, 14 Jan 2015 15:09:07 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 88
X-XSS-Protection: 1; mode=block
Age: 423
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR.......d.....G,Z`....IDAT..c.....&.....G0..ed.......w...........IEND.B`.HTTP/1.1 200 OK..Content-Type: image/png..Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT..Date: Wed, 14 Jan 2015 14:09:07 GMT..Expires: Wed, 14 Jan 2015 15:09:07 GMT..Access-Control-Allow-Origin: *..Timing-Allow-Origin: *..X-Content-Type-Options: nosniff..Server: sffe..Content-Length: 88..X-XSS-Protection: 1; mode=block..Age: 423..Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600..Alternate-Protocol: 80:quic,p=0.02...PNG........IHDR.......d.....G,Z`....IDAT..c.....&.....G0..ed.......w...........IEND.B`...
GET /js/show_ads.js HTTP/1.1
Accept: */*
Referer: hXXp://installer.apps-track.com/installer/ThankYouInner?productid=6416&productname=DirectX
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: n20.adshostnet.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"7033-1419944556000"
Last-Modified: Tue, 30 Dec 2014 13:02:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 14 Jan 2015 14:16:15 GMT
a..............200...Yms.6.. 2...#M;w3.@...n2q...qr.....$$.......I.../$A.v........>....|.Wl...?.zP..J..~....2.,.!...:g.~..R..a-$.Y..X.Cz ........n...a..T.sU.qS.w@.e.p..@}S]b~.y.~l6.m.....N... 3zV.....0..pM..|Za6..9.I...y...VxJ(.P....[..x-....P.0..go.W.....!.p....(.........9...].Q.b.....,..|a.'*....d k..X...... .. .......'.B2....73Le".9{....8....z...hJ8..G.....<.eA..Db..eO.#.....'...[.C..%'t....0....<.w.U.......(..^.H...h|..^...&............'Og..>S...&.E.~..'./.=>..E.sY.2^[c[........S.....8[...X\...YOZ...p.......{...........x....200..[.E.?.s.=.$..4{.3.{]][%.vy.Q..@...0.....t....q...<...Q$..u............1B)....[Fh...q.......K,..K.......H..Bb...T`P..1.d"...'......'4. =..........@.F7.W......gpt*... .4B.. .0,A.~HN....2r..fd..\V...\ ......b.I...}.....6..V...$........d..P.....Z..R.;......S.15WRjb\.,Y1A.1..k}.B....>8^..=..k....... h.(.A].V.$A..[C.o......E..........|0SW..<:l9o... .7.46.QQK.Z. .\.qr....*.....R ..Y..n.F...u#.x...._V.....S.-7n....phxj.3...V..^.k:.jq....=.....W...ni......Z0dD1.5...po...M.l....[\J....E...2.\.'ek.J.~$T...8..YI..T 7....200........D.... ........r.....Le...........,PG.2_..vK!.A..'..8.HL.HuB...v.R...D7......JU...&....s.x....f..l.v...PE...........t.J....L..x.8.._P......N.....H. ........g$...c..:.....U}..Q..........N..i.6....l.r.J.........%..myyF....%f........_.gz...f...Sg&n.<\e.9.<..t....]....f.g.L5..9...........liC<v.hK.A...v...n...{D.....Nz..t...{....63=....s...IC..t......].n../....4.b>.ck...sp...~....K..L2.#k0.dJ..',..V^.z..........E6....(-...[.x ..&F.&....K.
<<< skipped >>>
GET /ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://installer.apps-track.com/installer/ThankYouInner?productid=6416&productname=DirectX
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: n20.adshostnet.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="CAO PSA OUR"
Set-Cookie: epomUUID=e71c3390-9bf7-11e4-8ac9-f8bc12538c80; Domain=.adshostnet.com; Expires=Tue, 09-Jan-2035 14:16:16 GMT; Path=/
Content-Type: text/html;charset=UTF-8
Content-Length: 1006
Date: Wed, 14 Jan 2015 14:16:15 GMT
<html><head><!--16:11--></head><body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'><center><div class="adnl_zone id_949"></div>..<script type="text/javascript">...var ADNL = [];...ADNL.push(["setConstant", "SCAN_ZONE_CLASS", "adnl_zone"]);...ADNL.push(["setConstant", "CDN_URL", "//cdn.castplatform.com"]);....ADNL.push(["setConstant", "PLATFORM", "Web"]);...ADNL.push(["scanZones"]);...ADNL.push(["initialize", "1"]);...(function (d) {....var s = d.createElement('script');....s.src = "//cdn.castplatform.com/scripts/1/adnl.min.js";....s.type = "text/javascript";....d.getElementsByTagName('head')[0].appendChild(s);...})(document);..</script> </center><script type="text/javascript">new Image().src = "hXXp://n20.adshostnet.com" "/im" "pressi" "on.gif?b=16" "&p=11&ch=&ap=&cps=&c" "=16&l=UA" "&h=601aaa7c277e8dfa44e431f41e9b18d8&t=" new Date().getTime() "&s=2b225baf5a9da70613cf9d825ec2c6dc";</script></body></html>....
GET /impression.gif?b=16&p=11&ch=&ap=&cps=&c=16&l=UA&h=601aaa7c277e8dfa44e431f41e9b18d8&t=1421244957252&s=2b225baf5a9da70613cf9d825ec2c6dc HTTP/1.1
Accept: */*
Referer: hXXp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: n20.adshostnet.com
Connection: Keep-Alive
Cookie: epomUUID=e71c3390-9bf7-11e4-8ac9-f8bc12538c80
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="CAO PSA OUR"
Set-Cookie: ucv=16-UA-1421331376627--; Domain=.adshostnet.com; Expires=Thu, 14-Jan-2016 14:16:16 GMT; Path=/
Accept-Ranges: bytes
ETag: W/"49-1395933738000"
Last-Modified: Thu, 27 Mar 2014 15:22:18 GMT
Content-Type: image/gif
Content-Length: 49
Date: Wed, 14 Jan 2015 14:16:15 GMT
GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Server: Apache-Coyote/1.1..Cache-Control: no-cache..Pragma: no-cache..Expires: Thu, 01 Jan 1970 00:00:00 GMT..P3P: CP="CAO PSA OUR"..Set-Cookie: ucv=16-UA-1421331376627--; Domain=.adshostnet.com; Expires=Thu, 14-Jan-2016 14:16:16 GMT; Path=/..Accept-Ranges: bytes..ETag: W/"49-1395933738000"..Last-Modified: Thu, 27 Mar 2014 15:22:18 GMT..Content-Type: image/gif..Content-Length: 49..Date: Wed, 14 Jan 2015 14:16:15 GMT..GIF89a...................!.......,...........T..;..
GET /Files//Setup_product_6416.exe HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: dl.revenyou.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:08 GMT
Content-Type: application/octet-stream
Content-Length: 287592
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Wed, 12 Feb 2014 12:24:01 GMT
Accept-Ranges: bytes
ETag: "e895af4fed27cf1:0"
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
Expires: Wed, 21 Jan 2015 14:16:08 GMT
X-Cache: MISS
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......->..i_..i_..i_...|..d_..i_..._...|..h_...|..q_...|..h_..Richi_..........PE..L...!.};............................^Z.......................................p.......p...............................................................>..h%...........................................................................................text............................... ..`.data...............................@....rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................L...V...r...~.......................................@...............^.......................................*...6...F...T...j...v...........................................:...L...`...|.......p...................................,...8...D...V...d...~...................................&...>...N...d...z...........................................,...>.......................b.......................................,...>...R...n...~...........................................6...D...T...........x....
<<< skipped >>>
GET /offers/ui/css/start/jquery-ui-1.8.19.custom.css HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:09 GMT
Content-Type: text/css
Content-Length: 20706
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Thu, 26 Apr 2012 17:23:56 GMT
ETag: "ca38195cd123cd1:0"
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
Expires: Wed, 21 Jan 2015 14:16:09 GMT
X-Cache: HIT
Accept-Ranges: bytes
/*!. * jQuery UI CSS Framework 1.8.19. *. * Copyright 2012, AUTHORS.txt (hXXp://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * hXXp://jquery.org/license. *. * hXXp://docs.jquery.com/UI/Theming/API. */../* Layout helpers.----------------------------------*/..ui-helper-hidden { display: none; }..ui-helper-hidden-accessible { position: absolute !important; clip: rect(1px 1px 1px 1px); clip: rect(1px,1px,1px,1px); }..ui-helper-reset { margin: 0; padding: 0; border: 0; outline: 0; line-height: 1.3; text-decoration: none; font-size: 100%; list-style: none; }..ui-helper-clearfix:before, .ui-helper-clearfix:after { content: ""; display: table; }..ui-helper-clearfix:after { clear: both; }..ui-helper-clearfix { zoom: 1; }..ui-helper-zfix { width: 100%; height: 100%; top: 0; left: 0; position: absolute; opacity: 0; filter:Alpha(Opacity=0); }.../* Interaction Cues.----------------------------------*/..ui-state-disabled { cursor: default !important; }.../* Icons.----------------------------------*/../* states and images */..ui-icon { display: block; text-indent: -99999px; overflow: hidden; background-repeat: no-repeat; }.../* Misc visuals.----------------------------------*/../* Overlays */..ui-widget-overlay { position: absolute; top: 0; left: 0; width: 100%; height: 100%; }.../*!. * jQuery UI CSS Framework 1.8.19. *. * Copyright 2012, AUTHORS.txt (hXXp://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * hXXp://jquery.org/license. *. * hXXp://docs.jquery.com/
<<< skipped >>>
GET /offers/images/Theme8/topLine.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:10 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>......
<<< skipped >>>
GET /offers/images/Theme8/bgImg.jpg HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: static.revenyou.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Date: Wed, 14 Jan 2015 14:16:10 GMT
Content-Type: text/html
Content-Length: 1245
Connection: keep-alive
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-container"><fieldset>.. <h2>404 - File or directory not found.</h2>.. <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>.. </fieldset></div>..</div>..</body>..</html>..HTTP/1.1 404 Not Found..Date: Wed, 14 Jan 2015 14:16:10 GMT..Content-Type: text/html..Content-Length: 1245..Connection: keep-aliv
<<< skipped >>>
GET /api/v/1/949,1/?callback=cb_1421244957706&ts=1421244957706&connectionType=0&sessionId=uKNze HTTP/1.1
Accept: */*
Referer: hXXp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: d.castplatform.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Length: 793
Content-Type: text/javascript; charset=utf-8
Server: Microsoft-HTTPAPI/2.0
X-Country: UA
Date: Wed, 14 Jan 2015 14:16:16 GMT
cb_1421244957706 && cb_1421244957706({"zones":[{"id":949,"status":200,"enabled":true,"template":"Free_Creative_300X250","data":[{"img":"//cdn.castplatform.com/images/efd2b565-aa0b-40fe-b784-ca7bade0ca3a.gif","flash":"","clickTag":"","clk":"EJA7HpxP7_Irl1TlS65iISz14gwkgUUkkAV1tVNoX6jD9NlJI7_vmKEWLfNlMyVGDtV4I420V290Gy0s8625Si1tyo81j110Vo6lAae29upv3RRMvI52DQKl3wssdZajA0aADPb-JOOxWxTww6W75yieXLqnqSjzfvqrBzPHM6M5Ye-zuyffFt0exBwQd9TS3ANinTEuW9gN1Ja-cvB_MM_HS83Vx4mDnoKTxmTuOMSKD8fqiBRVV5oZf8QYNuoKp23oE6nR96hKLxSPlPgCN2qdtgXH4bnjBu75nHXNhZIfoQb_RjWO2CTMarNhe1-oJMq8AXEcKhZH2u8kINTR32pQb3L7B_zs1iW4a3s_GqYwW-4uyzejpw7BXZZixXl33lmlyeNwVM1Oj7gbMVRYDA","width":300,"height":250,"cUrl":"hXXp://d.castplatform.com/api/c/1?clk=%clk%","vUrl":"hXXp://d.castplatform.com/api/vp/1?clk=%clk%"}]}],"ts":0});....
GET /api/vp/1?clk=EJA7HpxP7_Irl1TlS65iISz14gwkgUUkkAV1tVNoX6jD9NlJI7_vmKEWLfNlMyVGDtV4I420V290Gy0s8625Si1tyo81j110Vo6lAae29upv3RRMvI52DQKl3wssdZajA0aADPb-JOOxWxTww6W75yieXLqnqSjzfvqrBzPHM6M5Ye-zuyffFt0exBwQd9TS3ANinTEuW9gN1Ja-cvB_MM_HS83Vx4mDnoKTxmTuOMSKD8fqiBRVV5oZf8QYNuoKp23oE6nR96hKLxSPlPgCN2qdtgXH4bnjBu75nHXNhZIfoQb_RjWO2CTMarNhe1-oJMq8AXEcKhZH2u8kINTR32pQb3L7B_zs1iW4a3s_GqYwW-4uyzejpw7BXZZixXl33lmlyeNwVM1Oj7gbMVRYDA HTTP/1.1
Accept: */*
Referer: hXXp://n20.adshostnet.com/ads?v=1&key=6c2c19aff050b202bf7c7970cb59cde3&ch=&click=&tz=2&t=1421244957081&epom_width=1200&epom_height=1400&scrWidth=1276&scrHeight=846
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: d.castplatform.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Length: 43
Content-Type: image/gif
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 14 Jan 2015 14:16:16 GMT
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Cache-Control: no-cache..Content-Length: 43..Content-Type: image/gif..Server: Microsoft-HTTPAPI/2.0..Date: Wed, 14 Jan 2015 14:16:16 GMT..GIF89a.............!.......,...........L..;..
GET /Installer/OperaBrowser/OperaChecker25-6.exe HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.download4desktop.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 14 Jan 2015 14:16:09 GMT
Content-Type: application/octet-stream
Content-Length: 50225
Connection: keep-alive
x-amz-id-2: A5tmKMJgFsMbvyGNuo2/PCVkE0UiU8S/RoemrtiibIkm6wzCybB84LvbrUbvNqac
x-amz-request-id: FAE7B2F816690B5D
Last-Modified: Wed, 25 Jun 2014 14:41:23 GMT
ETag: "10ffabc748d68c40b68f883058c9b932"
Server: NetDNA-cache/2.2
Content-Disposition: attachment
X-Cache: HIT
Accept-Ranges: bytes
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..iu..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i........................PE..L......K.................^...........0.......p....@..........................................................................t..........PC...........................................................................p...............................text...L\.......^.................. ..`.rdata.......p.......b..............@..@.data...X\...........v..............@....ndata...................................rsrc...PC.......D...z..............@..@........................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H....h.B..H.P.u..u..u...Hr@..B...SV.5p.B..E.WP.u...Lr@..e...E..E.P.u...Pr@..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....NU..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h`.B.W..Xr@..u.W...u....E.P.u...\r@._^3.[.....L$....B...Si.....VW.T.....tO.q.3.;5..B.sB..i......D.......t.G.....t...O..t .....u...3....3...F.....;5..B.r._^[...U..QQ.U.SV..i....
<<< skipped >>>
GET /ajax/libs/jqueryui/1.8/themes/start/jquery-ui.css HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/css; charset=UTF-8
Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT
Date: Wed, 14 Jan 2015 13:34:34 GMT
Expires: Wed, 14 Jan 2015 14:34:34 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 6091
X-XSS-Protection: 1; mode=block
Age: 2496
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
Alternate-Protocol: 80:quic,p=0.02
...........=k.....3...E...yl.=.=.....7@..6..~...e.#K.$.#A..=.!%J|iz...;@Z.:...y..}..........X.H~{G...O~......-.M^M....@o..c.....Og.s............!/.Ms.\\...'t.&qy..........hN.,fE..r*.V.f..O.>.."...G._.... s.WO8f....v...dJ>O...H ..o..>..! v.o~y...gg.....#.D.,?BwgQ...&.,B.h.%. .'.d.1...R...&.M...1..l.3.?.u..t.B.u...F....e....&q..7.bq.bv| ........... V..z;.j.A_.kr.I.J...e.z..A.yV0........0..5i.C.%,. .L..iY4Q.}...t......y..U.q.h.f..-K.....3.6...H..Y..|..u.....\d[T.........>......|...Y...T.*...<..X..F.S.:.4..G.<.r`k.&?........0.p.w gEcN..=.'8a...E......~...$OXJOy.s)...ud..\tQ.Z$$;..|.}g@G..m^...S2.gn.h......;V.yy.!...{4..U%D>x....{...2.SV....!Y<....3..e...cMTb.5.,f...r..$Or..%X...78.I.>..Y.99@.........U......4....5.......2.......UY.<.W EY.h.<.U.l2c.....V.J..T.^...owo.....(...|...Sh..~x..l..ovyY.7...M... ..v2.%.j....Np1_....4...M...9.~.,y.V..b.-...i.&i.q...W7......*1.QP.k:C..^.k6..T.\.u,..LW.(S<)5.............X...ZW...#.UC*.:nT;.....\<._.. J.YK.:9.H}3....U.B..$..W..f$l]^m....@..c..........0.h...l.q.,(."......l.%........:.A..y.'n.. ..j:.q2.]r..M...j.JSQ....i.8...J...".iZ.V.....5..'S:.*..C..V.Y.!S.k*.:FT.tv...1.P.A.e..r.h......-..uGZ6.(.....l..!5....z....2M!.?.G.........'....U>..-aH/ .E.D.T{J..C!...tK.!.a.v..~......$....5 ..xj.u...P...x.@ F{..S..R.O.<d#.E%PS.//......5fV.4...1..S.......mw..#..o Q. .....p_yI..ox.....UM.uP....b.v0GE.....A....X.!pX4.......Y-o..f9.....L.p$.........;..P...Q.b........mZe..$s..].8..t...M...o......X...S".>..1A*.....2h......D.j8Y..wL..^.| ....1...`C
<<< skipped >>>
GET /ajax/libs/jqueryui/1.8/jquery-ui.min.js HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT
Date: Wed, 14 Jan 2015 13:42:49 GMT
Expires: Wed, 14 Jan 2015 14:42:49 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 51558
X-XSS-Protection: 1; mode=block
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
Age: 2001
Alternate-Protocol: 80:quic,p=0.02
............iw...0....d...-.@......."...x{,y.<....n.M....ZB...w...AP...9.L,.k_n..n.{.......V..G..<........}......n.........l..Y....z3..................E1.-.uz..........ZXI..rZm....../X...4.......@..Z......yUlB..U#..L...1p.>...2...].....M(...J.....e..I......5...9...e.....&.........W..y...f./..j..}^....r...n.._7.j.o..v.i./a.7uq......r.%.,......j9..Y.s......@..$...... \...H...=....?....y...}W..b].G..|-....wG.N.O<.H.Q...'w......H.....*.....?..Uo..n..Z=..U...I...*..,....J.@.b.....l.[@E1.....jq<..V.d.=.n......,..o... .gY.G....N%$f..u..."J.....xvrR..$.q..i....l..m7....p...]./!.......JF0..^.. ...Q.....H..q...._wr"9..S].I/_.....~M...Z..U5..^q.z..U...k..........Q.........v...[.v..`:UJvIo^-...........n.;..{o....p.CliS-J..w27...F.....v .{...t..........g._._...~z......wz.......gP.K.....W....w/.ym......B.cH....?~..~/.~..../...._.........4..s........x..z|...^|.../.._..?.z..............?.......?=......N......_<...3.n..I/..../ e.Rd../U...|...O.....Pi.~.....=.5..%~z...oh..?.._~J.?.?.....0....g.. ....0....W...x....W.k|)....h....n...7Y....c..l.Y..._...3.D.f.,n..G?.'h...*.l...ZN...R...q..F.;.*/f6T.q-3........Z.n..y\&.].......*.C..p..I.U.Z/....`..W..k<.Pn]....OtJR...P...j.n...z]W''..z.o.b.....m...K...u.)..%.v{.8p9..T....4U......X..U.o'...T.....D...G.tc.3o....8./.a.NK^...........q?I.0.....)-..m.\..m...@.0......\..{.>........D..n..Gp..)R:...>.D ....d.nV.......C....pWe.?Xl.B.....6} .Q.4...j....^.6q..3..>5w\.....'.@....&6...?ok..$.;....[...!Vo........vx}{s.L.dA...6......8.r......bt.>"a........0...I~;....
<<< skipped >>>
GET /ajax/libs/jqueryui/1.8/themes/start/images/ui-bg_gloss-wave_75_2191c0_500x100.png HTTP/1.1
Accept: */*
Referer: hXXp://serv.the-app-data.info//offers/DynamicOfferScreen?offerid=2&distid=7623&leadp=6416&countryid=262&sysbit=32&dfb=0&hb=2&isagg=0&version=4.1&external=0&external=0&
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT
Date: Wed, 14 Jan 2015 14:02:55 GMT
Expires: Wed, 14 Jan 2015 15:02:55 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 3457
X-XSS-Protection: 1; mode=block
Age: 795
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR.......d.....p..}...HIDATx...K..N................q..B....6...._.d.c.......*...V......|U.......w-...p..>Z..........`............`............`............`............`............`............`............`.......@.....:n.K>.u.....X..V..G........l.9......j6.x..xu..y...I... gZ.D.L...........4[OG.8.|d.....;.N[O..lz.M....{..ne.Z1..VlO...e..k.g.........k.6.r..........be'`t#..zu39.|[..6=9....4..H."...-Cd.D.z.3c.g...S.,..D7.h.H=O.F6.{7.....H6G...S.......U.9.%w....`C.....y.G^@......O..........0.l.....0.Z.4..H..[.k..Z..Z..zm].v.......J.$ZMZ..yK.....Z.4.Z.Z.Z.Gr..M..j.b..Z^.1c.E........,....6&.9....3)....[W.vH...a...k~....,.........1..k.R..........iWd....M.V..O)..?y.....W...._<....p.p....`............`..b.......:............:.............Xj)...w.....-?M.bE|[...I.eki......&.U.6.........l4.[..N.F.....|...qc.Zj.7.....;.f/..w..=......}L[...k.E.S/.x....3-...^.R....."Z.........[........:.;...n.Z..~.....;.....%w....P7...'R^....E[?.C...X.$.^Y.Yj...}...iS.O.....m........r%..4yy.r..I.....Io...'i..;..._....K.7.%.Q../.\......X....3;_........[...[..ti.........._.-..Z.l;j)e.L.lyf"Dm..^4...-.|G.E VdRD..M....S[.{.i6G...~/7V.h....M..;^.1~.}.;......=9.]S2....y.w|Y.#s(..X..;....:=....Y_#.\r......RkY.$.e.mk..n.E|..m|....kk...O.......'......-..n.z..XZ}m\H.._e.....V.x9........!.../.xs......f.......5.Zl .......x.....].?/..9r......h...]^}M....<....;..........p.p....`........}.....n..~....4............. ^=..kc...|j..4{u[.......H.2...Y1......R..|x.5M......j..4.%..x......!ij....bXcT..^[$=V.4<m^.=~..Yo.E..s..>....
<<< skipped >>>
Map
The MemScan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_944:
.text
.text
`.rdata
`.rdata
@.data
@.data
.ndata
.ndata
.rsrc
.rsrc
uDSSh
uDSSh
.DEFAULT\Control Panel\International
.DEFAULT\Control Panel\International
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
ExitWindowsEx
ExitWindowsEx
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
SHFileOperationA
SHFileOperationA
ShellExecuteA
ShellExecuteA
SHELL32.dll
SHELL32.dll
RegEnumKeyA
RegEnumKeyA
RegCreateKeyExA
RegCreateKeyExA
RegCloseKey
RegCloseKey
RegDeleteKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
ole32.dll
ole32.dll
VERSION.dll
VERSION.dll
verifying installer: %d%%
verifying installer: %d%%
hXXp://nsis.sf.net/NSIS_Error
hXXp://nsis.sf.net/NSIS_Error
... %d%%
... %d%%
~nsu.tmp
~nsu.tmp
%u.%u%s%s
%u.%u%s%s
RegDeleteKeyExA
RegDeleteKeyExA
%s=%s
%s=%s
*?|/":
*?|/":
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe /PID=1184 /SUBPID=0 /DISTID=7623 /NETWORKID=1 /CID=0 /PRODUCT_ID=6416 /SERVER_URL=hXXp://installer.apps-track.com /CLICKID=437b72cefb1c772554380efe6747bb00 /D1=-1 /D2=-1 /D3=-1 /D4=-1 /D5=-1 /PRODUCT_NAME= /PRODUCT_EULA= /PRODUCT_PRIVACY= /EXE_URL= /EXE_CMDLINE= /HOST_BROWSER=2 /IS_RUNTIME=true /THANKYOU_URL= /RETURNING_USER_DAYS=2 /VM=2
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe /PID=1184 /SUBPID=0 /DISTID=7623 /NETWORKID=1 /CID=0 /PRODUCT_ID=6416 /SERVER_URL=hXXp://installer.apps-track.com /CLICKID=437b72cefb1c772554380efe6747bb00 /D1=-1 /D2=-1 /D3=-1 /D4=-1 /D5=-1 /PRODUCT_NAME= /PRODUCT_EULA= /PRODUCT_PRIVACY= /EXE_URL= /EXE_CMDLINE= /HOST_BROWSER=2 /IS_RUNTIME=true /THANKYOU_URL= /RETURNING_USER_DAYS=2 /VM=2
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp\Convert.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp\Convert.dll
GetCPInfo
GetCPInfo
GetProcessHeap
GetProcessHeap
Convert.dll
Convert.dll
> >$>(>,>
> >$>(>,>
2 2$2(2,2
2 2$2(2,2
1,2024282
1,2024282
? ?$?(?0?4?@?`?
? ?$?(?0?4?@?`?
operator
operator
GetProcessWindowStation
GetProcessWindowStation
portuguese-brazilian
portuguese-brazilian
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
9#gyI%S
9#gyI%S
.MGV1'
.MGV1'
zDs.DhLA
zDs.DhLA
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\instructionsMad.dat
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\instructionsMad.dat
instructionsMad.dat
instructionsMad.dat
INSTRU~1.DAT
INSTRU~1.DAT
:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp
:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp
c:\%original file name%.exe
c:\%original file name%.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp
%original file name%.exe
%original file name%.exe
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsy1.tmp
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsy1.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsj2.tmp
hXXp://installer.apps-track.com
hXXp://installer.apps-track.com
/PID=1184 /SUBPID=0 /DISTID=7623 /NETWORKID=1 /CID=0 /PRODUCT_ID=6416 /SERVER_URL=hXXp://installer.apps-track.com /CLICKID=437b72cefb1c772554380efe6747bb00 /D1=-1 /D2=-1 /D3=-1 /D4=-1 /D5=-1 /PRODUCT_NAME= /PRODUCT_EULA= /PRODUCT_PRIVACY= /EXE_URL= /EXE_CMDLINE= /HOST_BROWSER=2 /IS_RUNTIME=true /THANKYOU_URL= /RETURNING_USER_DAYS=2 /VM=2
/PID=1184 /SUBPID=0 /DISTID=7623 /NETWORKID=1 /CID=0 /PRODUCT_ID=6416 /SERVER_URL=hXXp://installer.apps-track.com /CLICKID=437b72cefb1c772554380efe6747bb00 /D1=-1 /D2=-1 /D3=-1 /D4=-1 /D5=-1 /PRODUCT_NAME= /PRODUCT_EULA= /PRODUCT_PRIVACY= /EXE_URL= /EXE_CMDLINE= /HOST_BROWSER=2 /IS_RUNTIME=true /THANKYOU_URL= /RETURNING_USER_DAYS=2 /VM=2
Nullsoft Install System v2.46
Nullsoft Install System v2.46
1.0.0.1
1.0.0.1
convert.dll
convert.dll
1.0.0.2
1.0.0.2
WUSER32.DLL
WUSER32.DLL
- floating point support not loaded
- floating point support not loaded
f.exe_660:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
spKey
spKey
szKey
szKey
keyCur
keyCur
hKey
hKey
cSubKeys
cSubKeys
cmdline
cmdline
urlStr
urlStr
wurl
wurl
bstrLicKey
bstrLicKey
cchLicKey
cchLicKey
nMsg
nMsg
vurl
vurl
bstrURLOut
bstrURLOut
rtExecmd
rtExecmd
rtExeurl
rtExeurl
reportURL
reportURL
zErrMsg
zErrMsg
compiledSql
compiledSql
sqliteCookieFiles
sqliteCookieFiles
htmlDecodedUrlValue
htmlDecodedUrlValue
endParamKeys
endParamKeys
dynamicProductKeys
dynamicProductKeys
wUrlQS
wUrlQS
wUrl
wUrl
sqliteHistoryFiles
sqliteHistoryFiles
readDownloadUrl
readDownloadUrl
searchUrl
searchUrl
finishUrlForOuterInstaller
finishUrlForOuterInstaller
reportUrl
reportUrl
httpResponse
httpResponse
fullCmd
fullCmd
subkey
subkey
hostBrwCmd
hostBrwCmd
tyUrl
tyUrl
baseKeys
baseKeys
cmdLineW
cmdLineW
cmdW
cmdW
exeUrlW
exeUrlW
urlW
urlW
cmdLine
cmdLine
exeUrl
exeUrl
cbMaxSubKey
cbMaxSubKey
achKey
achKey
offersMainUrl
offersMainUrl
antivirusesRegKeys64Arr
antivirusesRegKeys64Arr
antivirusesRegKeys32Arr
antivirusesRegKeys32Arr
reg64Key
reg64Key
postExe
postExe
preExe
preExe
regKey
regKey
offerUrl
offerUrl
regKey64
regKey64
cbSubKeys
cbSubKeys
zMsg
zMsg
nCellKey
nCellKey
nMaxKey
nMaxKey
nMinKey
nMinKey
nKey
nKey
zErrmsg
zErrmsg
keyInfo
keyInfo
errMsg
errMsg
t.hx3S
t.hx3S
osCmd
osCmd
finalExePath
finalExePath
urlComp
urlComp
szURLPath
szURLPath
xSSSh
xSSSh
FTPjKS
FTPjKS
FtPj;S
FtPj;S
C.PjRV
C.PjRV
RegDeleteKeyExW
RegDeleteKeyExW
RegDeleteKeyTransactedW
RegDeleteKeyTransactedW
RegCreateKeyTransactedW
RegCreateKeyTransactedW
RegOpenKeyTransactedW
RegOpenKeyTransactedW
.vector too long
.vector too long
X:X:X:X:X:X
X:X:X:X:X:X
\Google\Chrome\Application\chrome.exe
\Google\Chrome\Application\chrome.exe
%d/%d/%d %d:%d:%d
%d/%d/%d %d:%d:%d
3.7.16.2
3.7.16.2
SQLite format 3
SQLite format 3
CREATE TABLE sqlite_master(
CREATE TABLE sqlite_master(
sql text
sql text
CREATE TEMP TABLE sqlite_temp_master(
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
\obhhelper.txt
\obhhelper.txt
Error %u in WinHttpQueryDataAvailable.
Error %u in WinHttpQueryDataAvailable.
Error %u in WinHttpReadData.
Error %u in WinHttpReadData.
Error %d has occurred.
Error %d has occurred.
F%D,3
F%D,3
Run-Time Check Failure #%d - %s
Run-Time Check Failure #%d - %s
%s%s%s%s
%s%s%s%s
%s%s%p%s%ld%s%d%s
%s%s%p%s%ld%s%d%s
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
RegCloseKey
RegCloseKey
RegOpenKeyExW
RegOpenKeyExW
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
portuguese-brazilian
portuguese-brazilian
operator
operator
GetProcessWindowStation
GetProcessWindowStation
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpReadData
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSendRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpConnect
WinHttpCrackUrl
WinHttpCrackUrl
WinHttpSetTimeouts
WinHttpSetTimeouts
WinHttpOpen
WinHttpOpen
WinHttpQueryHeaders
WinHttpQueryHeaders
WINHTTP.dll
WINHTTP.dll
PSAPI.DLL
PSAPI.DLL
GetProcessHeap
GetProcessHeap
KERNEL32.dll
KERNEL32.dll
EnumChildWindows
EnumChildWindows
CreateDialogIndirectParamW
CreateDialogIndirectParamW
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
RegDeleteKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryInfoKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
URLDownloadToFileW
URLDownloadToFileW
urlmon.dll
urlmon.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
GetCPInfo
GetCPInfo
.?AV?$CAtlExeModuleT@VCSmartInstallerModule@@@ATL@@
.?AV?$CAtlExeModuleT@VCSmartInstallerModule@@@ATL@@
SQLITE_
SQLITE_
d-d-d d:d:d
d-d-d d:d:d
d:d:d
d:d:d
d-d-d
d-d-d
failed to allocate %u bytes of memory
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
failed memory resize %u to %u bytes
922337203685477580
922337203685477580
API call with %s database connection pointer
API call with %s database connection pointer
RowKey
RowKey
OsError 0x%x (%u)
OsError 0x%x (%u)
os_win.c:%d: (%d) %s(%s) - %s
os_win.c:%d: (%d) %s(%s) - %s
delayed %dms for lock/sharing conflict
delayed %dms for lock/sharing conflict
%s-shm
%s-shm
%s\etilqs_
%s\etilqs_
%s\%s
%s\%s
Recovered %d frames from WAL file %s
Recovered %d frames from WAL file %s
cannot limit WAL size: %s
cannot limit WAL size: %s
invalid page number %d
invalid page number %d
2nd reference to page %d
2nd reference to page %d
Failed to read ptrmap key=%d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
%d of %d pages missing from overflow list starting at %d
failed to get page %d
failed to get page %d
freelist leaf count too big on page %d
freelist leaf count too big on page %d
Page %d:
Page %d:
unable to get the page. error code=%d
unable to get the page. error code=%d
btreeInitPage() returns error code %d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On tree page %d cell %d:
On page %d at right child:
On page %d at right child:
Corruption detected in cell %d on page %d
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Page %d is never used
Pointer map page %d is referenced
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
Outstanding page count goes from %d to %d during this analysis
unknown database %s
unknown database %s
keyinfo(%d
keyinfo(%d
%s(%d)
%s(%d)
%s-mjXXXXXX9XXz
%s-mjXXXXXX9XXz
MJ delete: %s
MJ delete: %s
MJ collide: %s
MJ collide: %s
-mjX9X
-mjX9X
foreign key constraint failed
foreign key constraint failed
unable to use function %s in the requested context
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
bind on a busy prepared statement: [%s]
zeroblob(%d)
zeroblob(%d)
abort at %d in [%s]: %s
abort at %d in [%s]: %s
constraint failed at %d in [%s]
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
cannot open savepoint - SQL statements in progress
no such savepoint: %s
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_temp_master
sqlite_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
cannot change %s wal mode from within a transaction
database table is locked: %s
database table is locked: %s
statement aborts at %d: [%s] %s
statement aborts at %d: [%s] %s
cannot open value of type %s
cannot open value of type %s
cannot open virtual table: %s
cannot open virtual table: %s
cannot open view: %s
cannot open view: %s
no such column: "%s"
no such column: "%s"
foreign key
foreign key
indexed
indexed
cannot open %s column for writing
cannot open %s column for writing
misuse of aliased aggregate %s
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s.%s
%s: %s.%s
%s: %s.%s
%s: %s
%s: %s
not authorized to use function: %s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
variable number must be between ?1 and ?%d
too many SQL variables
too many SQL variables
too many columns in %s
too many columns in %s
EXECUTE %s%s SUBQUERY %d
EXECUTE %s%s SUBQUERY %d
misuse of aggregate: %s()
misuse of aggregate: %s()
%.*s"%w"%s
%.*s"%w"%s
%s%.*s"%w"
%s%.*s"%w"
sqlite_rename_table
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_trigger
sqlite_rename_parent
sqlite_rename_parent
%s OR name=%Q
%s OR name=%Q
type='trigger' AND (%s)
type='trigger' AND (%s)
sqlite_
sqlite_
table %s may not be altered
table %s may not be altered
there is already another table or index with this name: %s
there is already another table or index with this name: %s
view %s may not be altered
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
sqlite_sequence
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
sqlite_altertab_%s
sqlite_stat1
sqlite_stat1
CREATE TABLE %Q.%s(%s)
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
DELETE FROM %Q.%s WHERE %s=%Q
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
invalid name: "%s"
invalid name: "%s"
too many attached databases - max %d
too many attached databases - max %d
database %s is already in use
database %s is already in use
unable to open database: %s
unable to open database: %s
no such database: %s
no such database: %s
cannot detach database %s
cannot detach database %s
database %s is locked
database %s is locked
sqlite_detach
sqlite_detach
sqlite_attach
sqlite_attach
%s %T cannot reference objects in database %s
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
object name reserved for internal use: %s
there is already an index named %s
there is already an index named %s
too many columns on %s
too many columns on %s
duplicate column name: %s
duplicate column name: %s
default value of column [%s] is not constant
default value of column [%s] is not constant
table "%s" has more than one primary key
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE %s %.*s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
sqlite_stat
table %s may not be dropped
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
unknown column "%s" in foreign key definition
indexed columns are not unique
indexed columns are not unique
table %s may not be indexed
table %s may not be indexed
views may not be indexed
views may not be indexed
virtual tables may not be indexed
virtual tables may not be indexed
there is already a table named %s
there is already a table named %s
index %s already exists
index %s already exists
sqlite_autoindex_%s_%d
sqlite_autoindex_%s_%d
table %s has no column named %s
table %s has no column named %s
CREATE%s INDEX %.*s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
a JOIN clause is required before %s
unable to identify the object to be reindexed
unable to identify the object to be reindexed
no such collation sequence: %s
no such collation sequence: %s
table %s may not be modified
table %s may not be modified
cannot modify %s because it is a view
cannot modify %s because it is a view
sqlite_version
sqlite_version
sqlite_source_id
sqlite_source_id
sqlite_log
sqlite_log
sqlite_compileoption_used
sqlite_compileoption_used
sqlite_compileoption_get
sqlite_compileoption_get
foreign key mismatch - "%w" referencing "%w"
foreign key mismatch - "%w" referencing "%w"
table %S has %d columns but %d values were supplied
table %S has %d columns but %d values were supplied
%d values for %d columns
%d values for %d columns
table %S has no column named %s
table %S has no column named %s
%s.%s may not be NULL
%s.%s may not be NULL
constraint %s failed
constraint %s failed
PRIMARY KEY must be unique
PRIMARY KEY must be unique
sqlite3_extension_init
sqlite3_extension_init
unable to open shared library [%s]
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
error during initialization: %s
automatic extension loading failed: %s
automatic extension loading failed: %s
foreign_keys
foreign_keys
foreign_key_list
foreign_key_list
foreign_key_check
foreign_key_check
*** in database %s ***
*** in database %s ***
unsupported encoding: %s
unsupported encoding: %s
malformed database schema (%s)
malformed database schema (%s)
%s - %s
%s - %s
unsupported file format
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
cannot join using column %s - column not present in both tables
USE TEMP B-TREE FOR %s
USE TEMP B-TREE FOR %s
COMPOUND SUBQUERIES %d AND %d %s(%s)
COMPOUND SUBQUERIES %d AND %d %s(%s)
%s.%s
%s.%s
%s:%d
%s:%d
ORDER BY clause should come after %s not before
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
no such index: %s
sqlite_subquery_%p_
sqlite_subquery_%p_
too many references to "%s": max 65535
too many references to "%s": max 65535
%s.%s.%s
%s.%s.%s
no such table: %s
no such table: %s
SCAN TABLE %s %s%s(~%d rows)
SCAN TABLE %s %s%s(~%d rows)
sqlite3_get_table() called with two or more incompatible queries
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
no such trigger: %S
-- TRIGGER %s
-- TRIGGER %s
no such column: %s
no such column: %s
cannot VACUUM - SQL statements in progress
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
vtable constructor did not declare schema: %s
no such module: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
table %s: xBestIndex returned an invalid plan
%s SUBQUERY %d
%s SUBQUERY %d
%s TABLE %s
%s TABLE %s
%s AS %s
%s AS %s
%s USING %s%sINDEX%s%s%s
%s USING %s%sINDEX%s%s%s
%s USING INTEGER PRIMARY KEY
%s USING INTEGER PRIMARY KEY
%s (rowid=?)
%s (rowid=?)
%s (rowid>? AND rowid)
%s (rowid>? AND rowid)
%s (rowid>?)
%s (rowid>?)
%s (rowid)
%s (rowid)
%s VIRTUAL TABLE INDEX %d:%s
%s VIRTUAL TABLE INDEX %d:%s
%s (~%lld rows)
%s (~%lld rows)
at most %d tables in a join
at most %d tables in a join
cannot use index: %s
cannot use index: %s
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
SQL logic error or missing database
SQL logic error or missing database
unknown operation
unknown operation
large file support is disabled
large file support is disabled
unknown database: %s
unknown database: %s
no such %s mode: %s
no such %s mode: %s
%s mode not allowed: %s
%s mode not allowed: %s
no such vfs: %s
no such vfs: %s
database corruption at line %d of [%.10s]
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
cannot open file at line %d of [%.10s]
.?AVCWebPage@@
.?AVCWebPage@@
zcÃ
zcÃ
{A0386B19-B7E7-4BE7-B567-ABF77CBB6E60} = s `ATLExeServer'
{A0386B19-B7E7-4BE7-B567-ABF77CBB6E60} = s `ATLExeServer'
`ATLExeServer.EXE'
`ATLExeServer.EXE'
val AppID = s {A0386B19-B7E7-4BE7-B567-ABF77CBB6E60}
val AppID = s {A0386B19-B7E7-4BE7-B567-ABF77CBB6E60}
ForceRemove {FA20B59B-21AA-44FC-8A68-450979B7CC90} = s 'CBrowserExternals Class'
ForceRemove {FA20B59B-21AA-44FC-8A68-450979B7CC90} = s 'CBrowserExternals Class'
val ServerExecutable = s '%MODULE_RAW%'
val ServerExecutable = s '%MODULE_RAW%'
TypeLib = s '{03771AEF-400D-4A13-B712-25878EC4A3F5}'
TypeLib = s '{03771AEF-400D-4A13-B712-25878EC4A3F5}'
ForceRemove {622D38AD-B4A9-4170-8192-5B865C6A5DCE} = s 'CBrowserExternalImp Class'
ForceRemove {622D38AD-B4A9-4170-8192-5B865C6A5DCE} = s 'CBrowserExternalImp Class'
ForceRemove {6D4506CE-F855-4657-AA38-DB6B1F733982} = s 'CBrowserExternal Class'
ForceRemove {6D4506CE-F855-4657-AA38-DB6B1F733982} = s 'CBrowserExternal Class'
stdole2.tlbWWW
stdole2.tlbWWW
~cmdWd
~cmdWd
OpenUrlW
OpenUrlW
urlWd
urlWd
method OpenUrl
method OpenUrl
Created by MIDL version 7.00.0555 at Thu Mar 13 16:11:05 2014
Created by MIDL version 7.00.0555 at Thu Mar 13 16:11:05 2014
Red
Red
Green
Green
Blue
Blue
3%3u3
3%3u3
=0>4>8>
=0>4>8>
9%9 9;9]9
9%9 9;9]9
6i6C6t9
6i6C6t9
7$8(8,808
7$8(8,808
5$8(8,80848
5$8(8,80848
4"4&4*4.42464:4
4"4&4*4.42464:4
:?
:?
5 5
5 5
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
WAdvapi32.dll
WAdvapi32.dll
SERVER_URL
SERVER_URL
EXE_URL
EXE_URL
EXE_CMDLINE
EXE_CMDLINE
THANKYOU_URL
THANKYOU_URL
exeurl
exeurl
execmdline
execmdline
Exception opening/reading chrome cookies
Exception opening/reading chrome cookies
Exception opening/reading opera cookies
Exception opening/reading opera cookies
a\Microsoft\Windows\Cookies
a\Microsoft\Windows\Cookies
a\Mozilla\Firefox\Profiles
a\Mozilla\Firefox\Profiles
\Mozilla\Firefox\Profiles
\Mozilla\Firefox\Profiles
sqlite
sqlite
cookies.sqlite
cookies.sqlite
Chrome_WidgetWin_1
Chrome_WidgetWin_1
a\Opera\Opera\
a\Opera\Opera\
\..\Local\Google\Chrome\User Data\Default\
\..\Local\Google\Chrome\User Data\Default\
\..\Local Settings\Application Data\Google\Chrome\User Data\Default\
\..\Local Settings\Application Data\Google\Chrome\User Data\Default\
cookies4.dat
cookies4.dat
SELECT value,last_access_utc FROM cookies WHERE host_key LIKE '%
SELECT value,last_access_utc FROM cookies WHERE host_key LIKE '%
Found cookie in Chrome!
Found cookie in Chrome!
\..\..\Local Settings\Application Data\Opera\Opera\
\..\..\Local Settings\Application Data\Opera\Opera\
Found cookie in Opera!
Found cookie in Opera!
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
OLEACC.DLL
OLEACC.DLL
places.sqlite
places.sqlite
SELECT url FROM moz_places WHERE url LIKE '%
SELECT url FROM moz_places WHERE url LIKE '%
Found history in Chrome!
Found history in Chrome!
SELECT urls.url FROM urls WHERE urls.url LIKE '%
SELECT urls.url FROM urls WHERE urls.url LIKE '%
\PreExe_ID_
\PreExe_ID_
\default.html
\default.html
CHROMEVERSION
CHROMEVERSION
&chromev=
&chromev=
SOFTWARE\Microsoft\.NETFramework\policy
SOFTWARE\Microsoft\.NETFramework\policy
firefox
firefox
chrome
chrome
opera
opera
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice
ChromeHTML
ChromeHTML
FirefoxHTML
FirefoxHTML
IE.AssocFile.HTM
IE.AssocFile.HTM
Opera.HTML
Opera.HTML
http\shell\open\command
http\shell\open\command
Opera.exe
Opera.exe
Safari.exe
Safari.exe
\PostCheck.exe
\PostCheck.exe
SOFTWARE\Mozilla\Mozilla FireFox
SOFTWARE\Mozilla\Mozilla FireFox
Software\Mozilla\Mozilla FireFox
Software\Mozilla\Mozilla FireFox
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
aSoftware\Mozilla\Mozilla Firefox
aSoftware\Mozilla\Mozilla Firefox
*.txt
*.txt
@@exeurl
@@exeurl
OfferURL
OfferURL
ExeURL
ExeURL
RegKey
RegKey
ReportName
ReportName
PreExe
PreExe
PostExe
PostExe
RegKey64
RegKey64
AntivirusesRegKeys
AntivirusesRegKeys
RegKey32
RegKey32
Mscoree.dll
Mscoree.dll
OLEAUT32.DLL
OLEAUT32.DLL
{A33DE4AA-9646-4E33-9E44-E472C6312E2F}
{A33DE4AA-9646-4E33-9E44-E472C6312E2F}
888816666554443
888816666554443
6666554443
6666554443
!6666554443
!6666554443
VirtualOfferCmd:
VirtualOfferCmd:
VirtualOfferCmd
VirtualOfferCmd
/REPORTURL=
/REPORTURL=
\obhhelper.txt
\obhhelper.txt
NMozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
NMozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.142 Safari/535.19
user32.dll
user32.dll
mscoree.dll
mscoree.dll
SKERNEL32.DLL
SKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
MSPDB100.DLL
MSPDB100.DLL
ADVAPI32.DLL
ADVAPI32.DLL
WUSER32.DLL
WUSER32.DLL
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\f.exe
{8856F961-340A-11D0-A96B-00C04FD705A2}
{8856F961-340A-11D0-A96B-00C04FD705A2}
4.0.0.3
4.0.0.3
setup.exe
setup.exe
4.0.0.1
4.0.0.1
6_Offer_7.exe_160:
.text
.text
`.data
`.data
.rsrc
.rsrc
advapi32.dll
advapi32.dll
advpack.dll
advpack.dll
wininit.ini
wininit.ini
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\CurrentVersion\App Paths
setupapi.dll
setupapi.dll
setupx.dll
setupx.dll
IXPd.TMP
IXPd.TMP
TMP4351$.TMP
TMP4351$.TMP
FINISHMSG
FINISHMSG
USRQCMD
USRQCMD
ADMQCMD
ADMQCMD
msdownld.tmp
msdownld.tmp
wextract.pdb
wextract.pdb
PSSSSSSh
PSSSSSSh
t8SShs7
t8SShs7
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyA
ADVAPI32.dll
ADVAPI32.dll
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
GDI32.dll
GDI32.dll
ExitWindowsEx
ExitWindowsEx
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
USER32.dll
USER32.dll
COMCTL32.dll
COMCTL32.dll
VERSION.dll
VERSION.dll
rundll32.exe %s,InstallHinfSection %s 128 %s
rundll32.exe %s,InstallHinfSection %s 128 %s
SHELL32.DLL
SHELL32.DLL
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\RunOnce
PendingFileRenameOperations
PendingFileRenameOperations
System\CurrentControlSet\Control\Session Manager\FileRenameOperations
System\CurrentControlSet\Control\Session Manager\FileRenameOperations
wextract_cleanup%d
wextract_cleanup%d
%s /D:%s
%s /D:%s
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"
Command.com /c %s
Command.com /c %s
DirectX 9.0 Web setup
DirectX 9.0 Web setup
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\
33333330
33333330
3333333
3333333
33333333
33333333
PA"dxwsetup.exe" /windowsupdate
PA"dxwsetup.exe" /windowsupdate
dsetup.dll
dsetup.dll
dsetup32.dll
dsetup32.dll
dxwsetup.exe
dxwsetup.exe
dxwsetup.cif
dxwsetup.cif
dxwsetup.inf
dxwsetup.inf
.qF'I
.qF'I
w5U.zz
w5U.zz
y\2(u%C
y\2(u%C
hÚF4-
hÚF4-
WV.Dmz
WV.Dmz
)s%S[
)s%S[
O]%D^
O]%D^
r=.bb
r=.bb
t.CTKV
t.CTKV
.lDz{
.lDz{
Q:.eHno
Q:.eHno
ub.AZ
ub.AZ
Q%%F|
Q%%F|
8A.}%D
8A.}%D
.sEn?
.sEn?
%ul'^
%ul'^
j.Ypf
j.Ypf
'%xmD
'%xmD
KV.JR
KV.JR
"dxwsetup.exe"
"dxwsetup.exe"
P"dxwsetup.exe" /windowsupdate
P"dxwsetup.exe" /windowsupdate
Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement.
Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement.
CFailed to get disk space information from: %s.
CFailed to get disk space information from: %s.
System Message: %s.&A required resource cannot be located. Are you sure you want to cancel?
System Message: %s.&A required resource cannot be located. Are you sure you want to cancel?
8Unable to retrieve operating system version information.!Memory allocation request failed.
8Unable to retrieve operating system version information.!Memory allocation request failed.
Filetable full.Ên not change to destination folder.
Filetable full.Ên not change to destination folder.
Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.KThat folder is invalid. Please make sure the folder exists and is writable.IYou must specify a folder with fully qualified pathname or choose Cancel.!Could not update folder edit box.5Could not load functions required for browser dialog.7Could not load Shell32.dll required for browser dialog.
Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.KThat folder is invalid. Please make sure the folder exists and is writable.IYou must specify a folder with fully qualified pathname or choose Cancel.!Could not update folder edit box.5Could not load functions required for browser dialog.7Could not load Shell32.dll required for browser dialog.
(Error creating process . Reason: %s1The cluster size in this system is not supported.,A required resource appears to be corrupted.QWindows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
(Error creating process . Reason: %s1The cluster size in this system is not supported.,A required resource appears to be corrupted.QWindows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
Error loading %shGetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used./Windows 95 or Windows NT is required to install
Error loading %shGetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used./Windows 95 or Windows NT is required to install
Could not create folder '%s'
Could not create folder '%s'
To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue.
To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue.
Error retrieving Windows folder
Error retrieving Windows folder
$NT Shutdown: OpenProcessToken error.)NT Shutdown: AdjustTokenPrivileges error.!NT Shutdown: ExitWindowsEx error.}Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.aThe setup program could not retrieve the volume information for drive (%s) .
$NT Shutdown: OpenProcessToken error.)NT Shutdown: AdjustTokenPrivileges error.!NT Shutdown: ExitWindowsEx error.}Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.aThe setup program could not retrieve the volume information for drive (%s) .
System message: %s.xSetup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.eThe installation program appears to be damaged or corrupted. Contact the vendor of this application.
System message: %s.xSetup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.eThe installation program appears to be damaged or corrupted. Contact the vendor of this application.
/C: -- Override Install Command defined by author.
/C: -- Override Install Command defined by author.
eAnother copy of the '%s' package is already running on your system. Do you want to run another copy?
eAnother copy of the '%s' package is already running on your system. Do you want to run another copy?
Could not find the file: %s.
Could not find the file: %s.
:The folder '%s' does not exist. Do you want to create it?hAnother copy of the '%s' package is already running on your system. You can only run one copy at a time.OThe '%s' package is not compatible with the version of Windows you are running.SThe '%s' package is not compatible with the version of the file: %s on your system.
:The folder '%s' does not exist. Do you want to create it?hAnother copy of the '%s' package is already running on your system. You can only run one copy at a time.OThe '%s' package is not compatible with the version of Windows you are running.SThe '%s' package is not compatible with the version of the file: %s on your system.
4.09.00.0904
4.09.00.0904
DXWebSetup
DXWebSetup
dxwebsetup.exe
dxwebsetup.exe
Microsoft(R) DirectX for Windows(R)
Microsoft(R) DirectX for Windows(R)
dxwsetup.exe_244:
.text
.text
`.data
`.data
.rsrc
.rsrc
%s %s: %s: (null)
%s %s: %s: (null)
%s %s: %s: %s
%s %s: %s: %s
%s%s%s
%s%s%s
DirectX.log
DirectX.log
DXSETUP_DPF(): GetWindowsDirectory() failed.
DXSETUP_DPF(): GetWindowsDirectory() failed.
DXError.log
DXError.log
%s(): %s
%s(): %s
DXSError(): FormatMessage() failed, error = %d.
DXSError(): FormatMessage() failed, error = %d.
(0x%x)
(0x%x)
%s(): %s failed.
%s(): %s failed.
%s(): %s failed, error = %d.
%s(): %s failed, error = %d.
%s(): %s failed, error = 0x%x.
%s(): %s failed, error = 0x%x.
module: %s(%s), file: %s, line: %d, function: %s
module: %s(%s), file: %s, line: %d, function: %s
[%s %s]
[%s %s]
Unable to load %s.
Unable to load %s.
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dsetup\inc\dsinline.h
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dsetup\inc\dsinline.h
Module: %s, Function: %s
Module: %s, Function: %s
advpack.dll
advpack.dll
GetFileVersionInfoBlock(): %s does not have version information.
GetFileVersionInfoBlock(): %s does not have version information.
GetFileVersionInfoBlock(): Unable to get FileVersionInfoSize, file: %s, reason: %d.
GetFileVersionInfoBlock(): Unable to get FileVersionInfoSize, file: %s, reason: %d.
ntdll.dll
ntdll.dll
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxwsetup.cpp
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxwsetup.cpp
DSetupCallback(): Phase = %d, Steps = %d
DSetupCallback(): Phase = %d, Steps = %d
Unable to remove %s.
Unable to remove %s.
Unable to create path string, %s%s.
Unable to create path string, %s%s.
Unable to create path string, %s\*.*.
Unable to create path string, %s\*.*.
Unable to remove: %s which is locked, reason = %d.
Unable to remove: %s which is locked, reason = %d.
DeleteFile("%s") return 0, reason = %d.
DeleteFile("%s") return 0, reason = %d.
Unable to create path string, %s\%s.
Unable to create path string, %s\%s.
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\inline.h
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\inline.h
RegOpenKeyEx()
RegOpenKeyEx()
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\RunOnce
rundll32.exe %s\advpack.dll,DelNodeRunDLL32 "%s\"
rundll32.exe %s\advpack.dll,DelNodeRunDLL32 "%s\"
GetFileAttributes() returned -1, reason = %d.
GetFileAttributes() returned -1, reason = %d.
kernel32.dll
kernel32.dll
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxwsetup.h
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxwsetup.h
IsIA64(): Windows 2000 or Windows 9x
IsIA64(): Windows 2000 or Windows 9x
CDSetup(): try to load dsetup.dll from current dir.
CDSetup(): try to load dsetup.dll from current dir.
\DirectX\WebSetup
\DirectX\WebSetup
\dsetup.dll
\dsetup.dll
\ntkrnlpa.exe
\ntkrnlpa.exe
This platform is not supported.
This platform is not supported.
Unable to create path string, %s\dxupdate.cab.
Unable to create path string, %s\dxupdate.cab.
DXRemoveFile() failed. Unable to remove dxupdate.cab. (Not fatal...)
DXRemoveFile() failed. Unable to remove dxupdate.cab. (Not fatal...)
\dxupdate.cab
\dxupdate.cab
%s will be removed at reboot.
%s will be removed at reboot.
Version in CIF: %d.%d.%d.%d
Version in CIF: %d.%d.%d.%d
Install Section: [%s]
Install Section: [%s]
%s_%s
%s_%s
\system32\drivers\gm.dls
\system32\drivers\gm.dls
GetWindowsDirectory()
GetWindowsDirectory()
DXVersion: %d.d.d.d
DXVersion: %d.d.d.d
dxwsetup.cif
dxwsetup.cif
SetBaseUrl()
SetBaseUrl()
hXXp://download.microsoft.com/download/8/0/D/80D7E79D-C0E4-415A-BCCA-E229EAFE2679
hXXp://download.microsoft.com/download/8/0/D/80D7E79D-C0E4-415A-BCCA-E229EAFE2679
IsSupportedPlatform
IsSupportedPlatform
end of DirectX WindowsUpdate
end of DirectX WindowsUpdate
end of DirectX WindowsUpdate, need to reboot
end of DirectX WindowsUpdate, need to reboot
CreatePropertySheet() returns %d.
CreatePropertySheet() returns %d.
dxwsetup.inf
dxwsetup.inf
comctl32.dll version: %d.d.d.d
comctl32.dll version: %d.d.d.d
\comctl32.dll
\comctl32.dll
/windowsupdate
/windowsupdate
OnEngineStatusChange(): EngineStatus = 0x%X, SubStatus = 0x%X
OnEngineStatusChange(): EngineStatus = 0x%X, SubStatus = 0x%X
OnStartInstall(): DLSize = %d, InstallSize = %d
OnStartInstall(): DLSize = %d, InstallSize = %d
OnStartComponent(): ID = %s, DLSize = %d, InstallSize = %d, str = %s
OnStartComponent(): ID = %s, DLSize = %d, InstallSize = %d, str = %s
OnComponentProgress(): Phase = %d, Progress = %d
OnComponentProgress(): Phase = %d, Progress = %d
OnStopComponent(): ID = %s, hr = 0x%X, Phase = %d, str = %s, status = 0x%X
OnStopComponent(): ID = %s, hr = 0x%X, Phase = %d, str = %s, status = 0x%X
OnStopInstall(): hr = 0x%X, str = %s, status = 0x%X
OnStopInstall(): hr = 0x%X, str = %s, status = 0x%X
OnEngineProblem(): problem = 0x%X
OnEngineProblem(): problem = 0x%X
PlugIn size: %d
PlugIn size: %d
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\psheets.cpp
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\psheets.cpp
Setup Version: %d.d.d.d.d
Setup Version: %d.d.d.d.d
DirectX Version: %d.d.d.d.d
DirectX Version: %d.d.d.d.d
dxupdate.dll
dxupdate.dll
wintrust.dll
wintrust.dll
setupapi.dll
setupapi.dll
RemoveDXUpdateCab(): %s is removed.
RemoveDXUpdateCab(): %s is removed.
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxupdate.cpp
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\dxupdate.cpp
Unable to remove %s, need to remove this file.
Unable to remove %s, need to remove this file.
dxupdate.cab
dxupdate.cab
%s is not trusted due to certificate problem. Please check valid certificate is installed and Cryptographic Services are enabled.
%s is not trusted due to certificate problem. Please check valid certificate is installed and Cryptographic Services are enabled.
%s is not trusted. The file may be damaged. Please check valid certificate is installed and Cryptographic Services are enabled.
%s is not trusted. The file may be damaged. Please check valid certificate is installed and Cryptographic Services are enabled.
%s is not trusted. The file is not signed properly.
%s is not trusted. The file is not signed properly.
DXCheckTrust(): %s is trusted.
DXCheckTrust(): %s is trusted.
Unable to find dxupdate.dll.
Unable to find dxupdate.dll.
GetCDXUpdate(): Loading %s in %s.
GetCDXUpdate(): Loading %s in %s.
Unable to iterate through %s. The file may be damaged.
Unable to iterate through %s. The file may be damaged.
GetCDXUpdate(): Extracting %s from %s.
GetCDXUpdate(): Extracting %s from %s.
hXXp://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C
hXXp://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\utils.cpp
e:\dxsdk\wggt_aug07\private\multimedia\directx\setup\dxwsetup\utils.cpp
Currently %s is newer than the one being installed
Currently %s is newer than the one being installed
Target file: '%s'
Target file: '%s'
Target file is Version %d.%d.%d.%d
Target file is Version %d.%d.%d.%d
Source file is Version %d.%d.%d.%d
Source file is Version %d.%d.%d.%d
Unable to get Version on source file %s
Unable to get Version on source file %s
Unable to get Version on target file %s
Unable to get Version on target file %s
\user.exe
\user.exe
RegCloseKey()
RegCloseKey()
StringToVersionInfo() failed, version = %s.
StringToVersionInfo() failed, version = %s.
GetDXVersion(): This may be a older DirectX which does not have the directx key in the registry.
GetDXVersion(): This may be a older DirectX which does not have the directx key in the registry.
Unable to create path string, %s\directx.log.
Unable to create path string, %s\directx.log.
\directx.log
\directx.log
SPFILENOTIFY_DELETEERROR: Unable to delete %s.
SPFILENOTIFY_DELETEERROR: Unable to delete %s.
Deleted file %s.
Deleted file %s.
Deleted file %s with DELAY_UNTIL_REBOOT.
Deleted file %s with DELAY_UNTIL_REBOOT.
SPFILENOTIFY_COPYERROR: Unable to copy %s.
SPFILENOTIFY_COPYERROR: Unable to copy %s.
Installed file %s
Installed file %s
Unable to open %s.
Unable to open %s.
Extracted file %s from cab
Extracted file %s from cab
SPFILENOTIFY_FILEEXTRACTED: error = %d
SPFILENOTIFY_FILEEXTRACTED: error = %d
Unable to proceed %s:[%s]. The file may be damaged.
Unable to proceed %s:[%s]. The file may be damaged.
Unable to copy %s to %s.
Unable to copy %s to %s.
[Strings.eng]
[Strings.eng]
Use string section : [Strings.%s]
Use string section : [Strings.%s]
[Strings.%s]
[Strings.%s]
mscoree.dll
mscoree.dll
- CRT not initialized
- CRT not initialized
Please contact the application's support team for more information.
Please contact the application's support team for more information.
GetProcessWindowStation
GetProcessWindowStation
user32.dll
user32.dll
dxwsetup.pdb
dxwsetup.pdb
SShp!
SShp!
SSh %
SSh %
SShH'
SShH'
SShl-
SShl-
P@SShk
P@SShk
9X(t&SShp
9X(t&SShp
u.Sj0ha
u.Sj0ha
SShL;
SShL;
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
ADVAPI32.dll
ADVAPI32.dll
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
GDI32.dll
GDI32.dll
USER32.dll
USER32.dll
COMCTL32.dll
COMCTL32.dll
SHFileOperationA
SHFileOperationA
SHELL32.dll
SHELL32.dll
VERSION.dll
VERSION.dll
ole32.dll
ole32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
%WinDir%\DirectX.log
%WinDir%\DirectX.log
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\dxwsetup.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\IXP000.TMP\dxwsetup.exe
k2v_.mX0q[,hT9
k2v_.mX0q[,hT9
|/oZ/nY-kV.mX0q[/oZ0r\2u_2v_5}e6
|/oZ/nY-kV.mX0q[/oZ0r\2u_2v_5}e6
)`N*dQ,gS/nY/nY/oZ/oZ/nY0q[-jV-kV.mXO
)`N*dQ,gS/nY/nY/oZ/oZ/nY0q[-jV-kV.mXO
?3&YH0q[0q[0q[/nY/nY.mX.mX.mX-jV-jV-kV-kV*dQI
?3&YH0q[0q[0q[/nY/nY.mX.mX.mX-jV-jV-kV-kV*dQI
s3xa.mX*cP)`N&YH$UE"O@
s3xa.mX*cP)`N&YH$UE"O@
H:!N?#RB%VF&ZI(^L*dQ-jV.mX2u_7
H:!N?#RB%VF&ZI(^L*dQ-jV.mX2u_7
l2v_.mX*dQ']K$UE!N?
l2v_.mX*dQ']K$UE!N?
i4{c1t^.mX eR)aN']K%WF#SC!N?
i4{c1t^.mX eR)aN']K%WF#SC!N?
H:"O@$UE&YH)`N eR.mX1t^3yb7
H:"O@$UE&YH)`N eR.mX1t^3yb7
H:"O@%VF']K*dQ.mX1t^4|d8
H:"O@%VF']K*dQ.mX1t^4|d8
E8!N?%WF*cP.mX3xa5}e9
E8!N?%WF*cP.mX3xa5}e9
o1t^.mX*dQ(^L%WF$UE#RB"PA#RB"PA#RB#RB#RB#RB%VF']K*dQ-kV1t^7
o1t^.mX*dQ(^L%WF$UE#RB"PA#RB"PA#RB#RB#RB#RB%VF']K*dQ-kV1t^7
k3xa0q[/nY.mX-kV-kV-kV-kV-kV-kV-kV-kV-kV-kV-kV.mX.mX/oZ2u_6
k3xa0q[/nY.mX-kV-kV-kV-kV-kV-kV-kV-kV-kV-kV-kV.mX.mX/oZ2u_6
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.DirectX.WebSetup"
name="Microsoft.DirectX.WebSetup"
DirectX Web Setup
DirectX Web Setup
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
The DirectX setup wizard guides you through installation of DirectX Runtime Components. Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement. You must accept the agreement to continue the setup.
The DirectX setup wizard guides you through installation of DirectX Runtime Components. Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement. You must accept the agreement to continue the setup.
o dos componentes de tempo de execu
o dos componentes de tempo de execu
Sla uw werk op en sluit alle toepassingen voordat u doorgaat.
Sla uw werk op en sluit alle toepassingen voordat u doorgaat.
mto operacn
mto operacn
Instalace byla ukoncena.dInstalacn
Instalace byla ukoncena.dInstalacn
.QInstalacn
.QInstalacn
fen Sie die Netzwerkverbindung.DDie Datei konnte nicht gedownloadet werden, da sie nicht g
fen Sie die Netzwerkverbindung.DDie Datei konnte nicht gedownloadet werden, da sie nicht g
Komponenten werden installiertSDirectX-Laufzeitkomponenten werden gedownloadet. Dies kann einige Minuten dauern...jVer
Komponenten werden installiertSDirectX-Laufzeitkomponenten werden gedownloadet. Dies kann einige Minuten dauern...jVer
Do you want to continue?ZDirectX is not completely installed on your computer. Are you sure you want to quit setup?7This package is not supported on this Operating System.
Do you want to continue?ZDirectX is not completely installed on your computer. Are you sure you want to quit setup?7This package is not supported on this Operating System.
Setup is canceled.RSetup could not download the file. Please retry later or check network connection.OSetup could not download the file since the file to be downloaded is not valid.
Setup is canceled.RSetup could not download the file. Please retry later or check network connection.OSetup could not download the file since the file to be downloaded is not valid.
Installing ComponentsFDownloading DirectX Runtime Components. This may take a few minutes...jSearching for updated DirectX Runtime Components and updating as necessary. This may take a few minutes...
Installing ComponentsFDownloading DirectX Runtime Components. This may take a few minutes...jSearching for updated DirectX Runtime Components and updating as necessary. This may take a few minutes...
n?9Este paquete no es compatible con este sistema operativo.&Se cancel
n?9Este paquete no es compatible con este sistema operativo.&Se cancel
n.vEl programa de instalaci
n.vEl programa de instalaci
n de red.QEl programa de instalaci
n de red.QEl programa de instalaci
n sea necesario. Esta operaci
n sea necesario. Esta operaci
e.xLe programme d'installation n'a pas pu t
e.xLe programme d'installation n'a pas pu t
seau.VLe programme d'installation n'a pas pu t
seau.VLe programme d'installation n'a pas pu t
cution DirectX. Ceci peut prendre quelques minutes...nRecherche des pilotes DirectX modifi
cution DirectX. Ceci peut prendre quelques minutes...nRecherche des pilotes DirectX modifi
Continuare?FInstallazione di DirectX non completata. Interrompere l'installazione?6Pacchetto non supportato nel sistema operativo in uso.
Continuare?FInstallazione di DirectX non completata. Interrompere l'installazione?6Pacchetto non supportato nel sistema operativo in uso.
Installazione annullata.iImpossibile scaricare il file. Riprovare in un secondo momento oppure controllare la connessione di rete.GImpossibile scaricare il file poich
Installazione annullata.iImpossibile scaricare il file. Riprovare in un secondo momento oppure controllare la connessione di rete.GImpossibile scaricare il file poich
StatoPAttendere. Il programma di installazione sta completando le seguenti operazioni.
StatoPAttendere. Il programma di installazione sta completando le seguenti operazioni.
in corso il download dei componenti DirectX. L'operazione potrebbe richiedere alcuni minuti...
in corso il download dei componenti DirectX. L'operazione potrebbe richiedere alcuni minuti...
in corso la ricerca dei componenti di run-time di DirectX. Se necessario, i componenti verranno aggiornati. L'operazione potrebbe richiedere alcuni minuti...
in corso la ricerca dei componenti di run-time di DirectX. Se necessario, i componenti verranno aggiornati. L'operazione potrebbe richiedere alcuni minuti...
Setup is geannuleerd.dSetup kan het bestand niet downloaden. Probeer het later opnieuw of controleer de netwerkverbinding.DSetup kan het bestand niet downloaden omdat het bestand ongeldig is.
Setup is geannuleerd.dSetup kan het bestand niet downloaden. Probeer het later opnieuw of controleer de netwerkverbinding.DSetup kan het bestand niet downloaden omdat het bestand ongeldig is.
DirectX Setup.Het runtime-onderdeel voor DirectX installeren
DirectX Setup.Het runtime-onderdeel voor DirectX installeren
VoortgangRSetup is bezig met het voltooien van de volgende handelingen. Een ogenblik geduld.'Bezig met het downloaden van onderdelen(Bezig met het installeren van onderdelenWBezig met het downloaden van DirectX-runtimeonderdelen. Dit kan enkele minuten duren...qBezig met zoeken naar ge
VoortgangRSetup is bezig met het voltooien van de volgende handelingen. Een ogenblik geduld.'Bezig met het downloaden van onderdelen(Bezig met het installeren van onderdelenWBezig met het downloaden van DirectX-runtimeonderdelen. Dit kan enkele minuten duren...qBezig met zoeken naar ge
Czy chcesz kontynuowac?pProgram DirectX nie zostal calkowicie zainstalowany na tym komputerze. Czy na pewno chcesz zakonczyc instalacje?;Ten pakiet nie jest obslugiwany w tym systemie operacyjnym.
Czy chcesz kontynuowac?pProgram DirectX nie zostal calkowicie zainstalowany na tym komputerze. Czy na pewno chcesz zakonczyc instalacje?;Ten pakiet nie jest obslugiwany w tym systemie operacyjnym.
zniej lub sprawdz polaczenie sieciowe.NInstalator nie moze pobrac pliku, poniewaz pobierany plik nie jest prawidlowy.
zniej lub sprawdz polaczenie sieciowe.NInstalator nie moze pobrac pliku, poniewaz pobierany plik nie jest prawidlowy.
o do DirectXWEste programa instala os componentes de tempo de execu
o do DirectXWEste programa instala os componentes de tempo de execu
completamente instalado neste computador. Tem certeza de que deseja sair da instala
completamente instalado neste computador. Tem certeza de que deseja sair da instala
suporte a este pacote neste Sistema Operacional.
suporte a este pacote neste Sistema Operacional.
o foi cancelada.mA instala
o foi cancelada.mA instala
o de rede.QA instala
o de rede.QA instala
o do DirectX4Instalar componentes de tempo de execu
o do DirectX4Instalar componentes de tempo de execu
Instalando componentesqFazendo o download de componentes de tempo de execu
Instalando componentesqFazendo o download de componentes de tempo de execu
Procurando por componentes de tempo de execu
Procurando por componentes de tempo de execu
r operativsystemet.
r operativsystemet.
ts.YDet gick inte att h
ts.YDet gick inte att h
gra minuter...hS
gra minuter...hS
%s ...
%s ...
: %d.%d MB
: %d.%d MB
: %d KB
: %d KB
: d:d:d
: d:d:d
hXXp://VVV.microsoft.com/directx
hXXp://VVV.microsoft.com/directx
hXXp://Microsoft.com/DirectX
hXXp://Microsoft.com/DirectX
hXXp://VVV.betaplace.com
hXXp://VVV.betaplace.com
hXXp://VVV.BetaPlace.com
hXXp://VVV.BetaPlace.com
Windows(R)!
Windows(R)!
%s...
%s...
: %d kB2Odhadovan
: %d kB2Odhadovan
DirectX z webov
DirectX z webov
nky hXXp://VVV.microsoft.com/directx. Instalaci ukonc
nky hXXp://VVV.microsoft.com/directx. Instalaci ukonc
te na webov
te na webov
m serveru hXXp://Microsoft.com/DirectX. Aktualizovanou predprodejn
m serveru hXXp://Microsoft.com/DirectX. Aktualizovanou predprodejn
m serveru hXXp://VVV.betaplace.com.DInstalacn
m serveru hXXp://VVV.betaplace.com.DInstalacn
DirectX: %s
DirectX: %s
stup k webov
stup k webov
mu serveru hXXp://VVV.BetaPlace.com, budete muset syst
mu serveru hXXp://VVV.BetaPlace.com, budete muset syst
m Windows(R) znovu nainstalovat.GChcete pokracovat v instalaci t
m Windows(R) znovu nainstalovat.GChcete pokracovat v instalaci t
Downloaden von %s...
Downloaden von %s...
e: %d.%d MB
e: %d.%d MB
e: %d KB4Gesch
e: %d KB4Gesch
tzte verbleibende Downloadzeit: d:d:d
tzte verbleibende Downloadzeit: d:d:d
Das DirectX-Laufzeitpaket ist nicht mit der installierten Version von Internet Explorer kompatibel. Downloaden und installieren Sie das wiederverteilbare DirectX-Paket von hXXp://VVV.microsoft.com/directx. Klicken Sie auf OK, um den Vorgang zu beenden.
Das DirectX-Laufzeitpaket ist nicht mit der installierten Version von Internet Explorer kompatibel. Downloaden und installieren Sie das wiederverteilbare DirectX-Paket von hXXp://VVV.microsoft.com/directx. Klicken Sie auf OK, um den Vorgang zu beenden.
Diese Vorabversion von DirectX ist bereits abgelaufen. Besuchen Sie hXXp://Microsoft.com/DirectX, um die neueste ver
Diese Vorabversion von DirectX ist bereits abgelaufen. Besuchen Sie hXXp://Microsoft.com/DirectX, um die neueste ver
ffentlichte DirectX-Version zu downloaden, oder besuchen Sie hXXp://VVV.betaplace.com, um die aktuelle Vorabversion zu downloaden.&DirectX-Setup - VORABVERSIONWARNUNG!!!.Diese Vorabversion von DirectX L
ffentlichte DirectX-Version zu downloaden, oder besuchen Sie hXXp://VVV.betaplace.com, um die aktuelle Vorabversion zu downloaden.&DirectX-Setup - VORABVERSIONWARNUNG!!!.Diese Vorabversion von DirectX L
UFT am %s AB!
UFT am %s AB!
ssen Windows(R) erneut installieren, wenn Sie
ssen Windows(R) erneut installieren, wenn Sie
gen, und auf die Website hXXp://VVV.BetaPlace.com zugreifen, wenn die Kennung abl
gen, und auf die Website hXXp://VVV.BetaPlace.com zugreifen, wenn die Kennung abl
Downloading %s ...
Downloading %s ...
Download size: %d.%d MB
Download size: %d.%d MB
Download size: %d KB/Estimated downloading time left: d:d:d
Download size: %d KB/Estimated downloading time left: d:d:d
This DirectX runtime package is not compatible with the version of Internet Explorer currently installed. Please download and install DirectX Redistributable package from hXXp://VVV.microsoft.com/directx. Press OK to exit.
This DirectX runtime package is not compatible with the version of Internet Explorer currently installed. Please download and install DirectX Redistributable package from hXXp://VVV.microsoft.com/directx. Press OK to exit.
This pre-release version of DirectX has already expired. Please goto hXXp://Microsoft.com/DirectX to get the latest released version DirectX., or to hXXp://VVV.betaplace.com to get an updated pre-release version.&DirectX setup - pre-release WARNING!!!2This pre-release version of DirectX EXPIRES on %s!
This pre-release version of DirectX has already expired. Please goto hXXp://Microsoft.com/DirectX to get the latest released version DirectX., or to hXXp://VVV.betaplace.com to get an updated pre-release version.&DirectX setup - pre-release WARNING!!!2This pre-release version of DirectX EXPIRES on %s!
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!XWould you like to continue with the installation of this pre-release version of DirectX?
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!XWould you like to continue with the installation of this pre-release version of DirectX?
Descargando %s ...
Descargando %s ...
o de descarga: %d.%d MB
o de descarga: %d.%d MB
o de descarga: %d KB4Tiempo de descarga restante estimado: d:d:d
o de descarga: %d KB4Tiempo de descarga restante estimado: d:d:d
n de Internet Explorer instalada actualmente. Descargue e instale el paquete redistribuible de DirectX desde hXXp://VVV.microsoft.com/directx. Presione Aceptar para salir.
n de Internet Explorer instalada actualmente. Descargue e instale el paquete redistribuible de DirectX desde hXXp://VVV.microsoft.com/directx. Presione Aceptar para salir.
n preliminar ya ha caducado. Vaya a hXXp://Microsoft.com/DirectX para obtener la versi
n preliminar ya ha caducado. Vaya a hXXp://Microsoft.com/DirectX para obtener la versi
s reciente disponible de DirectX o a hXXp://VVV.betaplace.com para obtener una versi
s reciente disponible de DirectX o a hXXp://VVV.betaplace.com para obtener una versi
n preliminar de DirectX CADUCA el %s.
n preliminar de DirectX CADUCA el %s.
que volver a instalar Windows(R) si no tiene un Id. v
que volver a instalar Windows(R) si no tiene un Id. v
n beta de DirectX y accede al sitio web hXXp://VVV.BetaPlace.com cuando el Id. haya caducadoJ
n beta de DirectX y accede al sitio web hXXp://VVV.BetaPlace.com cuando el Id. haya caducadoJ
chargement de %s en cours...#Taille de t
chargement de %s en cours...#Taille de t
: %d.%d Mo Taille de t
: %d.%d Mo Taille de t
: %d Ko7Temps restant estim
: %d Ko7Temps restant estim
chargez et installez le package DirectX redistribuable depuis le site hXXp://VVV.microsoft.com/directx. Appuyez sur OK pour quitter.
chargez et installez le package DirectX redistribuable depuis le site hXXp://VVV.microsoft.com/directx. Appuyez sur OK pour quitter.
. Visitez le site hXXp://Microsoft.com/DirectX (site en anglais) pour obtenir la derni
. Visitez le site hXXp://Microsoft.com/DirectX (site en anglais) pour obtenir la derni
e de DirectX, ou le site hXXp://VVV.betaplace.com (site en anglais) pour obtenir une version pr
e de DirectX, ou le site hXXp://VVV.betaplace.com (site en anglais) pour obtenir une version pr
jour.JAvertissement - Programme d'installation de DirectX version pr
jour.JAvertissement - Programme d'installation de DirectX version pr
commerciale de DirectX expirera le %s.
commerciale de DirectX expirera le %s.
installer Windows(R) si vous ne disposez pas d'un identificateur valide de B
installer Windows(R) si vous ne disposez pas d'un identificateur valide de B
hXXp://VVV.BetaPlace.com [site en anglais] lorsque l'identificateur expirera.RVoulez-vous poursuivre l'installation de cette version pr
hXXp://VVV.BetaPlace.com [site en anglais] lorsque l'identificateur expirera.RVoulez-vous poursuivre l'installation de cette version pr
Download di %s in corso...
Download di %s in corso...
Dimensione download: %d.%d MB
Dimensione download: %d.%d MB
Dimensione download: %d KB2Tempo restante di download stimato: d.d.d
Dimensione download: %d KB2Tempo restante di download stimato: d.d.d
compatibile con la versione di Internet Explorer attualmente installata. Scaricare e installare il pacchetto DirectX Redistributable da hXXp://VVV.microsoft.com/directx (informazioni in lingua inglese). Premere OK per uscire.
compatibile con la versione di Internet Explorer attualmente installata. Scaricare e installare il pacchetto DirectX Redistributable da hXXp://VVV.microsoft.com/directx (informazioni in lingua inglese). Premere OK per uscire.
scaduta. Visitare il sito Web hXXp://Microsoft.com/DirectX per ottenere l'ultima versione completa di DirectX o la pagina hXXp://VVV.betaplace.com per ottenere una versione preliminare aggiornata.6Installazione di DirectX - Avviso versione preliminare3Questa versione preliminare di DirectX SCADE il %s.
scaduta. Visitare il sito Web hXXp://Microsoft.com/DirectX per ottenere l'ultima versione completa di DirectX o la pagina hXXp://VVV.betaplace.com per ottenere una versione preliminare aggiornata.6Installazione di DirectX - Avviso versione preliminare3Questa versione preliminare di DirectX SCADE il %s.
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.comEContinuare l'installazione di questa versione preliminare di DirectX?
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.comEContinuare l'installazione di questa versione preliminare di DirectX?
hXXp://Microsoft.com/DirectX
hXXp://Microsoft.com/DirectX
hXXp://VVV.betaplace.com
hXXp://VVV.betaplace.com
hXXp://VVV.BetaPlace.com Web
hXXp://VVV.BetaPlace.com Web
Windows
Windows
. hXXp://VVV.microsoft.com/directx
. hXXp://VVV.microsoft.com/directx
. hXXp://Microsoft.com/DirectX
. hXXp://Microsoft.com/DirectX
, hXXp://VVV.betaplace.com
, hXXp://VVV.betaplace.com
Windows(R)
Windows(R)
Dialoogvenster van MS Shell#Bezig met het downloaden van %s ...
Dialoogvenster van MS Shell#Bezig met het downloaden van %s ...
Downloadgrootte: %d.%d MB
Downloadgrootte: %d.%d MB
Downloadgrootte: %d kB1Geschatte resterende downloadtijd: d:d:d
Downloadgrootte: %d kB1Geschatte resterende downloadtijd: d:d:d
nstalleerd. Download en installeer het DirectX Redistributable-pakket van hXXp://VVV.microsoft.com/directx. Klik op OK om de wizard af te sluiten.
nstalleerd. Download en installeer het DirectX Redistributable-pakket van hXXp://VVV.microsoft.com/directx. Klik op OK om de wizard af te sluiten.
Deze evaluatieversie is reeds verlopen. Ga naar hXXp://Microsoft.com/DirectX voor de meest recente releaseversie van DirectX of ga naar hXXp://VVV.betaplace.com voor een bijgewerkte evaluatieversie.-DirectX Setup. Waarschuwing: evaluatieversie.0Deze evaluatieversie van DirectX verloopt op %s!
Deze evaluatieversie is reeds verlopen. Ga naar hXXp://Microsoft.com/DirectX voor de meest recente releaseversie van DirectX of ga naar hXXp://VVV.betaplace.com voor een bijgewerkte evaluatieversie.-DirectX Setup. Waarschuwing: evaluatieversie.0Deze evaluatieversie van DirectX verloopt op %s!
U dient Windows(r) opnieuw te installeren als u geen geldige b
U dient Windows(r) opnieuw te installeren als u geen geldige b
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.HWilt u doorgaan met de installatie van deze evaluatieversie van DirectX?
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.HWilt u doorgaan met de installatie van deze evaluatieversie van DirectX?
Trwa pobieranie %s ...#Rozmiar pobieranego pliku: %d.%d MB Rozmiar pobieranego pliku: %d KB3Szacowany pozostaly czas pobierania: d:d:d
Trwa pobieranie %s ...#Rozmiar pobieranego pliku: %d.%d MB Rozmiar pobieranego pliku: %d KB3Szacowany pozostaly czas pobierania: d:d:d
w wykonawczych programu DirectX nie jest zgodny z zainstalowana obecnie wersja programu Internet Explorer. Pobierz i zainstaluj pakiet redystrybucyjny programu DirectX z witryny hXXp://VVV.microsoft.com/directx. Nacisnij przycisk OK, aby zakonczyc.
w wykonawczych programu DirectX nie jest zgodny z zainstalowana obecnie wersja programu Internet Explorer. Pobierz i zainstaluj pakiet redystrybucyjny programu DirectX z witryny hXXp://VVV.microsoft.com/directx. Nacisnij przycisk OK, aby zakonczyc.
Waznosc tej wersji wstepnej juz wygasla. Przejdz do witryny hXXp://Microsoft.com/DirectX, aby uzyskac najnowsza z wydanych wersji programu DirectX, lub do witryny hXXp://VVV.betaplace.com, aby uzyskac zaktualizowana wersje wstepna.
Waznosc tej wersji wstepnej juz wygasla. Przejdz do witryny hXXp://Microsoft.com/DirectX, aby uzyskac najnowsza z wydanych wersji programu DirectX, lub do witryny hXXp://VVV.betaplace.com, aby uzyskac zaktualizowana wersje wstepna.
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci web!ICzy chcesz kontynuowac instalowanie tej wersji wstepnej programu DirectX?
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci web!ICzy chcesz kontynuowac instalowanie tej wersji wstepnej programu DirectX?
Fazendo o download de %s ...
Fazendo o download de %s ...
Tamanho do download: %d.%d MB
Tamanho do download: %d.%d MB
Tamanho do download: %d KB3Tempo de download estimado restante: d:d:d
Tamanho do download: %d KB3Tempo de download estimado restante: d:d:d
Este pacote de Tempo de Execu
Este pacote de Tempo de Execu
vel em hXXp://VVV.microsoft.com/directx. Pressione OK para sair.
vel em hXXp://VVV.microsoft.com/directx. Pressione OK para sair.
expirou. Visite hXXp://Microsoft.com/DirectX para obter a vers
expirou. Visite hXXp://Microsoft.com/DirectX para obter a vers
o mais recente do DirectX, ou hXXp://VVV.betaplace.com para obter uma vers
o mais recente do DirectX, ou hXXp://VVV.betaplace.com para obter uma vers
amento do DirectX EXPIRA em %s!
amento do DirectX EXPIRA em %s!
de reinstalar o Windows(R) se n
de reinstalar o Windows(R) se n
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!HDeseja continuar a instala
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!HDeseja continuar a instala
%s ...&
%s ...&
: %d.%d
: %d.%d
hXXp://VVV.microsoft.com/directx.
hXXp://VVV.microsoft.com/directx.
hXXp://Microsoft.com/DirectX,
hXXp://Microsoft.com/DirectX,
hXXp://VVV.betaplace.com,
hXXp://VVV.betaplace.com,
Windows(R)
Windows(R)
hXXp://VVV.BetaPlace.com.?
hXXp://VVV.BetaPlace.com.?
mtar %s...
mtar %s...
mtningsstorlek: %d.%d MB
mtningsstorlek: %d.%d MB
mtningsstorlek: %d kB,
mtningsstorlek: %d kB,
mtning: d:d:d
mtning: d:d:d
n hXXp://VVV.microsoft.com/directx. Klicka p
n hXXp://VVV.microsoft.com/directx. Klicka p
till webbplatsen hXXp://Microsoft.com/DirectX f
till webbplatsen hXXp://Microsoft.com/DirectX f
mta den senaste officiella versionen av DirectX eller till hXXp://VVV.betaplace.com om du vill h
mta den senaste officiella versionen av DirectX eller till hXXp://VVV.betaplace.com om du vill h
lla den %s.
lla den %s.
ste installera om Windows(R) om du inte har ett giltigt DirectX BetaID och
ste installera om Windows(R) om du inte har ett giltigt DirectX BetaID och
tkomst till webbplatsen hXXp://VVV.BetaPlace.com n
tkomst till webbplatsen hXXp://VVV.BetaPlace.com n
%Optionale DirectX-LaufzeitkomponentennDie optionalen DirectX-Laufzeitkomponenten werden gesucht und gedownloadet. Dies kann einige Minuten dauern...rEine neuere oder gleichwertige Version von DirectX ist bereits installiert. Eine Installation ist nicht notwendig.
%Optionale DirectX-LaufzeitkomponentennDie optionalen DirectX-Laufzeitkomponenten werden gesucht und gedownloadet. Dies kann einige Minuten dauern...rEine neuere oder gleichwertige Version von DirectX ist bereits installiert. Eine Installation ist nicht notwendig.
in corso la ricerca e il download dei componenti facoltativi DirectX Runtime. L'operazione potrebbe richiedere alcuni minuti...
in corso la ricerca e il download dei componenti facoltativi DirectX Runtime. L'operazione potrebbe richiedere alcuni minuti...
...WDirectX
...WDirectX
(Optionele onderdelen van DirectX Runtime^Optionele onderdelen van DirectX Runtime zoeken en downloaden. Dit kan enkele minuten duren...dEr is al een nieuwere of gelijkwaardige versie van DirectX ge
(Optionele onderdelen van DirectX Runtime^Optionele onderdelen van DirectX Runtime zoeken en downloaden. Dit kan enkele minuten duren...dEr is al een nieuwere of gelijkwaardige versie van DirectX ge
5Componentes Opcionais de Tempo de Execu
5Componentes Opcionais de Tempo de Execu
o do DirectXyProcurando e fazendo download de Componentes Opcionais de Tempo de Execu
o do DirectXyProcurando e fazendo download de Componentes Opcionais de Tempo de Execu
Windows
Windows
mu WIndows.
mu WIndows.
pro instalaci..Zdrojov
pro instalaci..Zdrojov
..Zdrojov
..Zdrojov
ne %d MB. M
ne %d MB. M
ch souboru.GInstalacn
ch souboru.GInstalacn
r die Installation von DirectX neu starten. Klicken Sie auf "OK", um den Computer jetzt neu zu starten..DirectX-Setup wurde erfolgreich abgeschlossen.YDiese DirectX-Version ist mit der zurzeit installierten Windows-Version nicht kompatibel.GEine f
r die Installation von DirectX neu starten. Klicken Sie auf "OK", um den Computer jetzt neu zu starten..DirectX-Setup wurde erfolgreich abgeschlossen.YDiese DirectX-Version ist mit der zurzeit installierten Windows-Version nicht kompatibel.GEine f
hr %d MB ben
hr %d MB ben
EDirectX setup needs to restart your machine, press OK to restart now.)DirectX setup has completed successfully.ZThis version of DirectX is not compatible with the version of Windows currently installed.9DirectX could not find a file necessary for installation.!DirectX source file is incorrect.!DirectX source file is incorrect.%DirectX did not copy a required file.
EDirectX setup needs to restart your machine, press OK to restart now.)DirectX setup has completed successfully.ZThis version of DirectX is not compatible with the version of Windows currently installed.9DirectX could not find a file necessary for installation.!DirectX source file is incorrect.!DirectX source file is incorrect.%DirectX did not copy a required file.
DirectX needs approximately %dMB. You can increase available disk space by uninstalling applications or by deleting unneeded files.1DirectX setup could not find a required inf file.
DirectX needs approximately %dMB. You can increase available disk space by uninstalling applications or by deleting unneeded files.1DirectX setup could not find a required inf file.
correctamente.YEsta versi
correctamente.YEsta versi
n de Windows instalada actualmente.CDirectX no pudo encontrar un archivo necesario para la instalaci
n de Windows instalada actualmente.CDirectX no pudo encontrar un archivo necesario para la instalaci
DirectX necesita aproximadamente %dMB. Puede aumentar el espacio disponible en disco desinstalando aplicaciones o eliminando archivos innecesarios.@La instalaci
DirectX necesita aproximadamente %dMB. Puede aumentar el espacio disponible en disco desinstalando aplicaciones o eliminando archivos innecesarios.@La instalaci
un archivo .inf necesario.
un archivo .inf necesario.
e.`Cette version de DirectX n'est pas compatible avec la version de Windows actuellement install
e.`Cette version de DirectX n'est pas compatible avec la version de Windows actuellement install
e.BDirectX n'a pas pu trouver un fichier n
e.BDirectX n'a pas pu trouver un fichier n
%d Mo environ sont n
%d Mo environ sont n
sinstallant des applications ou en supprimant des fichiers inutiles.ULe programme d'installation de DirectX n'a pas pu trouver un fichier .inf n
sinstallant des applications ou en supprimant des fichiers inutiles.ULe programme d'installation de DirectX n'a pas pu trouver un fichier .inf n
compatibile con la versione di Windows attualmente installata.;Impossibile trovare un file necessario per l'installazione.%File origine di DirectX non corretto.%File origine di DirectX non corretto.'Impossibile copiare un file necessario.
compatibile con la versione di Windows attualmente installata.;Impossibile trovare un file necessario per l'installazione.%File origine di DirectX non corretto.%File origine di DirectX non corretto.'Impossibile copiare un file necessario.
DirectX richiede circa %d MB. Per liberare spazio su disco, disinstallare alcune applicazioni o eliminare i file non necessari.'Impossibile trovare un file necessario.
DirectX richiede circa %d MB. Per liberare spazio su disco, disinstallare alcune applicazioni o eliminare i file non necessari.'Impossibile trovare un file necessario.
nstalleerd nadat het systeem opnieuw is opgestart. Klik op OK om opnieuw op te starten.'De installatie van DirectX is voltooid.VDe huidige DirectX-versie is niet compatibel met de ge
nstalleerd nadat het systeem opnieuw is opgestart. Klik op OK om opnieuw op te starten.'De installatie van DirectX is voltooid.VDe huidige DirectX-versie is niet compatibel met de ge
nstalleerde versie van Windows.>DirectX kan een voor installatie benodigd bestand niet vinden."DirectX-bronbestand is niet juist."DirectX-bronbestand is niet juist.2DirectX heeft een vereist bestand niet gekopieerd.
nstalleerde versie van Windows.>DirectX kan een voor installatie benodigd bestand niet vinden."DirectX-bronbestand is niet juist."DirectX-bronbestand is niet juist.2DirectX heeft een vereist bestand niet gekopieerd.
DirectX vereist ongeveer %dMB vrije schijfruimte. U kunt schijfruimte vrijmaken door toepassingen of overbodige bestanden te verwijderen.6DirectX Setup kan een vereist INF-bestand niet vinden.
DirectX vereist ongeveer %dMB vrije schijfruimte. U kunt schijfruimte vrijmaken door toepassingen of overbodige bestanden te verwijderen.6DirectX Setup kan een vereist INF-bestand niet vinden.
hInstalator programu DirectX musi zrestartowac komputer. Aby zrestartowac go teraz, nacisnij przycisk OK.8Instalacja programu DirectX zostala ukonczona pomyslnie.^Ta wersja programu DirectX nie jest zgodna z wersja aktualnie zainstalowanego systemu Windows.AProgram DirectX nie moze znalezc pliku potrzebnego do instalacji.'Plik zr
hInstalator programu DirectX musi zrestartowac komputer. Aby zrestartowac go teraz, nacisnij przycisk OK.8Instalacja programu DirectX zostala ukonczona pomyslnie.^Ta wersja programu DirectX nie jest zgodna z wersja aktualnie zainstalowanego systemu Windows.AProgram DirectX nie moze znalezc pliku potrzebnego do instalacji.'Plik zr
Interfejs DirectX wymaga okolo %d MB. Mozesz zwiekszyc dostepne miejsce na dysku odinstalowujac aplikacje lub usuwajac niepotrzebne pliki.BInstalator programu DirectX nie moze znalezc wymaganego pliku inf.
Interfejs DirectX wymaga okolo %d MB. Mozesz zwiekszyc dostepne miejsce na dysku odinstalowujac aplikacje lub usuwajac niepotrzebne pliki.BInstalator programu DirectX nie moze znalezc wymaganego pliku inf.
xito.aEsta vers
xito.aEsta vers
o do sistema operacional atualmente instalado.EO DirectX n
o do sistema operacional atualmente instalado.EO DirectX n
O DirectX precisa de aproximadamente %dMB. Voc
O DirectX precisa de aproximadamente %dMB. Voc
rios.QO Programa de Instala
rios.QO Programa de Instala
Windows.8DirectX:
Windows.8DirectX:
rdig.XDen h
rdig.XDen h
r inte kompatibel med den Windows-version som
r inte kompatibel med den Windows-version som
r installerad.DDet gick inte att hitta en n
r installerad.DDet gick inte att hitta en n
r %d MB. Du kan
r %d MB. Du kan
vs.JInstallationsprogrammet f
vs.JInstallationsprogrammet f
DXError.log
DXError.log
DirectX.log
DirectX.log
(ManagedDX.CAB)
(ManagedDX.CAB)
.NET Framework RC2
.NET Framework RC2
.NET Framework
.NET Framework
to chybe naleznete v souborech DXError.log a DirectX.log ve slo
to chybe naleznete v souborech DXError.log a DirectX.log ve slo
ce Windows.DRozhran
ce Windows.DRozhran
mu Windows NT podporov
mu Windows NT podporov
operacn
operacn
tko Storno.HRozhran
tko Storno.HRozhran
mu Windows NT predinstalov
mu Windows NT predinstalov
treba znovu instalovat.wAktu
treba znovu instalovat.wAktu
mu.qTyp procesoru nen
mu.qTyp procesoru nen
DirectX (ManagedDX.CAB) v distribucn
DirectX (ManagedDX.CAB) v distribucn
.NET Framework verze RC2 nebo novej
.NET Framework verze RC2 nebo novej
.NET Framework a spustte instalaci rozhran
.NET Framework a spustte instalaci rozhran
DirectX znovu.ZStahov
DirectX znovu.ZStahov
ba, a zda je certifik
ba, a zda je certifik
Weitere Informationen zum Ermitteln des Problem finden Sie in den Dateien "dxerror.log" und "directx.log" im Ordner "Windows".7DirectX3D wird von dieser NT-Version nicht unterst
Weitere Informationen zum Ermitteln des Problem finden Sie in den Dateien "dxerror.log" und "directx.log" im Ordner "Windows".7DirectX3D wird von dieser NT-Version nicht unterst
her.yDie Kabinettdatei f
her.yDie Kabinettdatei f
r die Managed DirectX-Komponente (ManagedDX.CAB) ist im DirectX-Verzeichnis "redist" nicht vorhanden.
r die Managed DirectX-Komponente (ManagedDX.CAB) ist im DirectX-Verzeichnis "redist" nicht vorhanden.
r die Managed DirectX-Komponente muss .NET Framework RC2 oder h
r die Managed DirectX-Komponente muss .NET Framework RC2 oder h
her installiert werden, bevor DirectX installiert wird. Installieren Sie das aktuelle .NET Framework, und f
her installiert werden, bevor DirectX installiert wird. Installieren Sie das aktuelle .NET Framework, und f
hren Sie dann DirectX-Setup erneut aus.dFehler beim Downloaden einer f
hren Sie dann DirectX-Setup erneut aus.dFehler beim Downloaden einer f
Please refer to DXError.log and DirectX.log in your Windows folder to determine problem..This version on NT does not support DirectX3D.&An unknown operating system was found.
Please refer to DXError.log and DirectX.log in your Windows folder to determine problem..This version on NT does not support DirectX3D.&An unknown operating system was found.
User hit the cancel key.3DirectX was not preinstalled on this version on NT.rDirectX setup has determined that a newer version of DirectX is already installed.
User hit the cancel key.3DirectX was not preinstalled on this version on NT.rDirectX setup has determined that a newer version of DirectX is already installed.
Please logon again as an Administrator or contact your PC Administrator.qProcessor type is unsupported by DirectX.
Please logon again as an Administrator or contact your PC Administrator.qProcessor type is unsupported by DirectX.
DirectX supports Pentium-compatible and K6 class processors or higher.dThe Managed DirectX component cab file (ManagedDX.CAB) is missing from the DirectX redist directory.
DirectX supports Pentium-compatible and K6 class processors or higher.dThe Managed DirectX component cab file (ManagedDX.CAB) is missing from the DirectX redist directory.
The Managed DirectX component requires the .NET Framework RC2 or newer version to be installed before DirectX. Please install the latest .NET Framework and then run DirectX setup again.MDownloading a file necessary for installation failed. Please run setup again.
The Managed DirectX component requires the .NET Framework RC2 or newer version to be installed before DirectX. Please install the latest .NET Framework and then run DirectX setup again.MDownloading a file necessary for installation failed. Please run setup again.
A cabinet file necessary for installation cannot be trusted. Please verify the Cryptographic Services are enabled and the cabinet file certificate is valid.
A cabinet file necessary for installation cannot be trusted. Please verify the Cryptographic Services are enabled and the cabinet file certificate is valid.
n de DirectX no pudo encontrar un directorio necesario.fError interno.
n de DirectX no pudo encontrar un directorio necesario.fError interno.
Consulte DXError.log y DirectX.log en la carpeta Windows para identificar el problema.'Esta versi
Consulte DXError.log y DirectX.log en la carpeta Windows para identificar el problema.'Esta versi
un sistema operativo desconocido.&El usuario presion
un sistema operativo desconocido.&El usuario presion
DirectX es compatible con procesadores compatibles con Pentium y con procesadores de clase K6 o superior.|No se encuentra el archivo CAB de componentes Managed DirectX (ManagedDX.CAB) en el directorio de redistribuci
DirectX es compatible con procesadores compatibles con Pentium y con procesadores de clase K6 o superior.|No se encuentra el archivo CAB de componentes Managed DirectX (ManagedDX.CAB) en el directorio de redistribuci
El componente Managed DirectX necesita .NET Framework RC2 o una versi
El componente Managed DirectX necesita .NET Framework RC2 o una versi
s reciente de .NET Framework y vuelva a ejecutar el programa de instalaci
s reciente de .NET Framework y vuelva a ejecutar el programa de instalaci
n de DirectX.jError al descargar un archivo necesario para la instalaci
n de DirectX.jError al descargar un archivo necesario para la instalaci
Un archivo .CAB necesario para la instalaci
Un archivo .CAB necesario para la instalaci
lido el certificado del archivo .CAB.
lido el certificado del archivo .CAB.
Consultez les fichiers DXError.log et DirectX.log situ
Consultez les fichiers DXError.log et DirectX.log situ
s dans le dossier Windows pour d
s dans le dossier Windows pour d
DirectX prend en charge les processeurs compatibles Pentium et K6 ou plus.sLe fichier CAB des composants Managed DirectX (ManagedDX.CAB) est introuvable dans le r
DirectX prend en charge les processeurs compatibles Pentium et K6 ou plus.sLe fichier CAB des composants Managed DirectX (ManagedDX.CAB) est introuvable dans le r
cessite l'installation de .NET Framework RC2 ou une version plus r
cessite l'installation de .NET Framework RC2 ou une version plus r
re version de .NET Framework, puis r
re version de .NET Framework, puis r
cutez le programme d'installation de DirectX.jUn fichier n
cutez le programme d'installation de DirectX.jUn fichier n
s, et que le certificat du fichier CAB est valide.
s, et que le certificat du fichier CAB est valide.
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.1La versione su Windows NT non supporta DirectX3D.*Rilevato un sistema operativo sconosciuto.!Operazione annullata dall'utente.CDirectX non
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.1La versione su Windows NT non supporta DirectX3D.*Rilevato un sistema operativo sconosciuto.!Operazione annullata dall'utente.CDirectX non
stato preinstallato su questa versione di Windows NT.
stato preinstallato su questa versione di Windows NT.
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.cFile cab del componente DirectX gestito (ManagedDX.CAB) mancante dalla directory redist di DirectX.
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.cFile cab del componente DirectX gestito (ManagedDX.CAB) mancante dalla directory redist di DirectX.
Il componente gestito DirectX richiede .NET Framework RC2 o una versione pi
Il componente gestito DirectX richiede .NET Framework RC2 o una versione pi
recente disponibile di .NET Framework e ripetere l'installazione di DirectX.pImpossibile scaricare un file necessario per l'installazione. Eseguire nuovamente il programma di installazione.
recente disponibile di .NET Framework e ripetere l'installazione di DirectX.pImpossibile scaricare un file necessario per l'installazione. Eseguire nuovamente il programma di installazione.
Un file CAB necessario per l'installazione risulta non attendibile. Verificare che i servizi di crittografia siano abilitati e che il certificato relativo al file CAB sia valido.
Un file CAB necessario per l'installazione risulta non attendibile. Verificare che i servizi di crittografia siano abilitati e che il certificato relativo al file CAB sia valido.
(ManagedDX.CAB)
(ManagedDX.CAB)
DirectX.log
DirectX.log
Windows NT
Windows NT
.GManaged DirectX
.GManaged DirectX
(ManagedDX.CAB)
(ManagedDX.CAB)
.NET Framework
.NET Framework
Raadpleeg DXError.log en DirectX.log in de map Windows om vast te stellen wat het probleem is..Deze versie van NT ondersteunt DirectX3D niet.2Er is een onbekend besturingssysteem aangetroffen.
Raadpleeg DXError.log en DirectX.log in de map Windows om vast te stellen wat het probleem is..Deze versie van NT ondersteunt DirectX3D niet.2Er is een onbekend besturingssysteem aangetroffen.
nstalleerd op deze versie van NT.sDirectX Setup heeft ontdekt dat er al een nieuwere versie van DirectX is ge
nstalleerd op deze versie van NT.sDirectX Setup heeft ontdekt dat er al een nieuwere versie van DirectX is ge
DirectX ondersteunt Pentium-compatibele en klasse K6-processors of hoger.dHet cab-bestand voor het DirectX-beheeronderdeel (ManagedDX.CAB) ontbreekt in de DirectX redist-map.
DirectX ondersteunt Pentium-compatibele en klasse K6-processors of hoger.dHet cab-bestand voor het DirectX-beheeronderdeel (ManagedDX.CAB) ontbreekt in de DirectX redist-map.
.NET Framework RC2 of een latere versie moet zijn ge
.NET Framework RC2 of een latere versie moet zijn ge
nstalleerd voordat u het onderdeel Managed DirectX kunt installeren. Installeer de nieuwste versie van .NET Framework en voer vervolgens Setup voor DirectX opnieuw uit.fHet downloaden van een bestand dat voor de installatie vereist is, is mislukt. Voer Setup opnieuw uit.
nstalleerd voordat u het onderdeel Managed DirectX kunt installeren. Installeer de nieuwste versie van .NET Framework en voer vervolgens Setup voor DirectX opnieuw uit.fHet downloaden van een bestand dat voor de installatie vereist is, is mislukt. Voer Setup opnieuw uit.
n of meerdere bestanden door een toepassing zijn geopend. Sluit alle toepassingen af voordat u de installatie van DirectX opnieuw uitvoert.
n of meerdere bestanden door een toepassing zijn geopend. Sluit alle toepassingen af voordat u de installatie van DirectX opnieuw uitvoert.
Een CAB-bestand dat nodig is voor de installatie wordt niet vertrouwd. Controleer of de service Cryptographic Services ingeschakeld is en of het certificaat van het CAB-bestand geldig is.
Een CAB-bestand dat nodig is voor de installatie wordt niet vertrouwd. Controleer of de service Cryptographic Services ingeschakeld is en of het certificaat van het CAB-bestand geldig is.
FInstalator programu DirectX nie moze zlokalizowac wymaganego katalogu.tWystapil wewnetrzny blad systemu.
FInstalator programu DirectX nie moze zlokalizowac wymaganego katalogu.tWystapil wewnetrzny blad systemu.
Sprawdz plik DXError.log i DirectX.log w folderze Windows, aby rozpoznac problem.-Ta wersja systemu NT nie obsluguje DirectX3D.&Znaleziono nieznany system operacyjny.$Uzytkownik nacisnal przycisk Anuluj.JProgram DirectX nie zostal wstepnie zainstalowany w tej wersji systemu NT.|Instalator programu DirectX wykryl, ze jest juz zainstalowana nowsza wersja programu DirectX.
Sprawdz plik DXError.log i DirectX.log w folderze Windows, aby rozpoznac problem.-Ta wersja systemu NT nie obsluguje DirectX3D.&Znaleziono nieznany system operacyjny.$Uzytkownik nacisnal przycisk Anuluj.JProgram DirectX nie zostal wstepnie zainstalowany w tej wersji systemu NT.|Instalator programu DirectX wykryl, ze jest juz zainstalowana nowsza wersja programu DirectX.
Program DirectX obsluguje procesory zgodne z Pentium oraz procesory klasy K6 lub nowsze.\Brak pliku cab skladnika Managed DirectX (ManagedDX.CAB) w katalogu redist programu DirectX.
Program DirectX obsluguje procesory zgodne z Pentium oraz procesory klasy K6 lub nowsze.\Brak pliku cab skladnika Managed DirectX (ManagedDX.CAB) w katalogu redist programu DirectX.
Skladnik Managed DirectX wymaga zainstalowania struktury .NET Framework RC2 lub nowszej przed programem DirectX. Zainstaluj najnowsza architekture .NET Framework, a nastepnie uruchom ponownie Instalatora programu DirectX.YPobieranie pliku wymaganego do instalacji nie powiodlo sie. Uruchom ponownie instalatora.
Skladnik Managed DirectX wymaga zainstalowania struktury .NET Framework RC2 lub nowszej przed programem DirectX. Zainstaluj najnowsza architekture .NET Framework, a nastepnie uruchom ponownie Instalatora programu DirectX.YPobieranie pliku wymaganego do instalacji nie powiodlo sie. Uruchom ponownie instalatora.
Nie mozna zaufac plikowi cabinet wymaganemu dla instalacji. Sprawdz, czy uslugi kryptograficzne sa wlaczone i czy certyfikat pliku cabinet jest prawidlowy.
Nie mozna zaufac plikowi cabinet wymaganemu dla instalacji. Sprawdz, czy uslugi kryptograficzne sa wlaczone i czy certyfikat pliku cabinet jest prawidlowy.
ria.xErro interno de sistema.
ria.xErro interno de sistema.
Consulte os arquivos DXError.log e DirectX.log na pasta do Windows para determinar o problema..Esta vers
Consulte os arquivos DXError.log e DirectX.log na pasta do Windows para determinar o problema..Esta vers
suporte ao DirectX3D.,Sistema operacional desconhecido encontrado.(Usu
suporte ao DirectX3D.,Sistema operacional desconhecido encontrado.(Usu
o oferece suporte a este tipo de processador. O
o oferece suporte a este tipo de processador. O
DirectX oferece suporte a processadores compat
DirectX oferece suporte a processadores compat
veis com Pentium ou da classe K6 ou superiores.nO arquivo de instala
veis com Pentium ou da classe K6 ou superiores.nO arquivo de instala
o do componente Managed DirectX (ManagedDX.CAB) est
o do componente Managed DirectX (ManagedDX.CAB) est
Para ser instalado antes do DirectX, o componente Managed DirectX requer o.NET Framework RC2 ou vers
Para ser instalado antes do DirectX, o componente Managed DirectX requer o.NET Framework RC2 ou vers
o mais recente do .NET Framework e execute a instala
o mais recente do .NET Framework e execute a instala
o do DirectX novamente.lFalha ao fazer o download de um arquivo necess
o do DirectX novamente.lFalha ao fazer o download de um arquivo necess
o. Execute o programa de instala
o. Execute o programa de instala
o em uso por um aplicativo. Feche todos os aplicativos antes de executar a instala
o em uso por um aplicativo. Feche todos os aplicativos antes de executar a instala
o habilitados e que o certificado do arquivo de gabinete
o habilitados e que o certificado do arquivo de gabinete
Windows.
Windows.
.BDirectX:
.BDirectX:
ndig katalog.kEtt internt fel uppstod.
ndig katalog.kEtt internt fel uppstod.
Information om felet finns i filen DXError.log och DirectX.log i Windows-mappen..Den h
Information om felet finns i filen DXError.log och DirectX.log i Windows-mappen..Den h
nt operativsystem hittades.&Anv
nt operativsystem hittades.&Anv
r.jProcessortypen st
r.jProcessortypen st
gre.ZCAB-filen med DirectX-komponenten f
gre.ZCAB-filen med DirectX-komponenten f
r hanterad kod (ManagedDX.CAB) saknas i redist-mappen.
r hanterad kod (ManagedDX.CAB) saknas i redist-mappen.
ver .NET Framework RC2 eller senare innan du installerar DirectX. Installera den senaste versionen av .NET Framework och f
ver .NET Framework RC2 eller senare innan du installerar DirectX. Installera den senaste versionen av .NET Framework och f
r aktiverad och att kabinettfilens certifikat
r aktiverad och att kabinettfilens certifikat
Directx.log
Directx.log
4.9.0.0904
4.9.0.0904
dxwsetup.exe
dxwsetup.exe
Microsoft(R) DirectX for Windows(R)
Microsoft(R) DirectX for Windows(R)
DirectX for Windows
DirectX for Windows
r Windows
r Windows
DirectX para Windows
DirectX para Windows
DirectX pour Windows
DirectX pour Windows
DirectX per Windows
DirectX per Windows
Microsoft(R) DirectX voor Windows(R)
Microsoft(R) DirectX voor Windows(R)
DirectX dla systemu Windows
DirectX dla systemu Windows
Windows
Windows
iexplore.exe_1208:
%?9-*09,*19}*09
%?9-*09,*19}*09
.text
.text
`.data
`.data
.rsrc
.rsrc
msvcrt.dll
msvcrt.dll
KERNEL32.dll
KERNEL32.dll
NTDLL.DLL
NTDLL.DLL
USER32.dll
USER32.dll
SHLWAPI.dll
SHLWAPI.dll
SHDOCVW.dll
SHDOCVW.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
IE-X-X
IE-X-X
rsabase.dll
rsabase.dll
System\CurrentControlSet\Control\Windows
System\CurrentControlSet\Control\Windows
dw15 -x -s %u
dw15 -x -s %u
watson.microsoft.com
watson.microsoft.com
IEWatsonURL
IEWatsonURL
%s -h %u
%s -h %u
iedw.exe
iedw.exe
Iexplore.XPExceptionFilter
Iexplore.XPExceptionFilter
jscript.DLL
jscript.DLL
mshtml.dll
mshtml.dll
mlang.dll
mlang.dll
urlmon.dll
urlmon.dll
wininet.dll
wininet.dll
shdocvw.DLL
shdocvw.DLL
browseui.DLL
browseui.DLL
comctl32.DLL
comctl32.DLL
IEXPLORE.EXE
IEXPLORE.EXE
iexplore.pdb
iexplore.pdb
ADVAPI32.dll
ADVAPI32.dll
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
IExplorer.EXE
IExplorer.EXE
IIIIIB(II<.fg>
IIIIIB(II<.fg>
7?_____ZZSSH%
7?_____ZZSSH%
)z.UUUUUUUU
)z.UUUUUUUU
,....Qym
,....Qym
````2```
````2```
{.QLQIIIKGKGKGKGKGKG
{.QLQIIIKGKGKGKGKGKG
;33;33;0
;33;33;0
8888880
8888880
8887080
8887080
browseui.dll
browseui.dll
shdocvw.dll
shdocvw.dll
6.00.2900.5512 (xpsp.080413-2105)
6.00.2900.5512 (xpsp.080413-2105)
Windows
Windows
Operating System
Operating System
6.00.2900.5512
6.00.2900.5512