Skip to main content

SpyTool.Win32.Ardamax_02b553f352


Adware.Agent.QDB (BitDefender), Trojan.Win32.Generic!BT (VIPRE), Trojan.InstallMonster.1286 (DrWeb), Adware.Agent.QDB (B) (Emsisoft), Suspicious.Cloud.2 (Symantec), Adware.Agent.QDB (FSecure), Agent.AL (AVG), Win32:OutBrowse-BN [PUP] (Avast), SpyTool.Win32.Ardamax.FD, mzpefinder_pcap_file.YR, BankerGeneric.YR (Lavasoft MAS)Behaviour: Banker, Trojan, PUP, SpyTool, Adware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 02b553f35255318ca02f2d7bab534573

SHA1: 99f09988bda569f5314c54819cfa1ebf63b6518e

SHA256: 26bc2e0b14f2e9159dd8894b5a74748226b54c66ca38c0dbe1f8054b7d8d2784

SSDeep: 98304:whdN5ohSvG2TE6nrJ8NakTQVd5Oj8hIRTGFLsrmNq0stAQmF6:Y75oh65O5GVsrmNq0stAQmF6

Size: 4273912 bytes

File type: EXE

Platform: WIN32

Entropy: Not Packed

PEID: UPolyXv05_v6, BorlandDelphi30, BorlandDelphiv30, ACProtect141

Company: no certificate found

Created at: 1992-06-20 01:22:17

Analyzed on: WindowsXP SP3 32-bit

Summary: SpyTool. A program used to apply passive protection methods to spyware, such as obfuscation, encryption or polymorphism. The original malicious program is usually encrypted/compressed and stored inside the wrapper.

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The SpyTool creates the following process(es):

UnityWebPlayer.exe:2412
amigo.exe:2052
mailruhomesearchvbm.exe:332
AmigoDistrib.exe:336
setup.exe:1496
MailRuUpdater.exe:296
MailRuUpdater.exe:2516
MailRuUpdater.exe:2400
MailRuUpdater.exe:1324
MailRuUpdater.exe:1952

The SpyTool injects its code into the following process(es):

%original file name%.exe:668

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process %original file name%.exe:668 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\3B77D0B2-6243-4AC7-B7D6-BE705686338B\mailruhomesearchvbm.exe (31790 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\6A31DB7E-AB0C-4D92-B239-E311EA0B97C9\AmigoDistrib.exe (370096 bytes)

The process UnityWebPlayer.exe:2412 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (32784 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\info.plist (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe (6078 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityWebPlayerUpdate.exe (19592 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UserInfo.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp (67936 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityBugReporter.exe (25112 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPlayerNP.map (12536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\System.dll (11 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsk2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\System.dll (0 bytes)

The process amigo.exe:2052 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\User Data\1.tmp (935 bytes)

The process mailruhomesearchvbm.exe:332 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\gpt.ini (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\GoMailRu.ico (14076 bytes)
%Documents and Settings%\All Users\Favorites\Mail.Ru.url (152 bytes)
%Documents and Settings%\%current user%\Desktop\Искать в Интернете.url (209 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\Sputnik\MailRu.ico (14076 bytes)
%Documents and Settings%\All Users\Favorites\Mail.Ru Агент - используй для общения!.url (210 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\Sputnik\Report\3DD21 (528 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\MailRuUpdater.exe (749560 bytes)
%Documents and Settings%\All Users\Application Data\Mail.Ru\Id (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Mail.Ru.lnk (1 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\0C4DCB3F77D74E488A98D316CF63255D.html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Mail.Ru.lnk (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\14C89C4D71AE4119AC645B2AC8D19C6C.html (0 bytes)

The process AmigoDistrib.exe:336 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\SETUP.EX_ (1659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\setup.exe (17080 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\CHROME.PACKED.7Z (366388 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\SETUP.EX_ (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\setup.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\CHROME.PACKED.7Z (0 bytes)

The process setup.exe:1496 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\wow_helper.exe (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\mr.pak (1801 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ru.pak (1675 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libegl.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\am.pak (1639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\UnityWebPlayer.exe (7433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sk.pak (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (17629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl64.exe (12289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\MailRuUpdater.exe (39945 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\zh-TW.pak (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\te.pak (1863 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\de.pak (256 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ta.pak (3682 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\amigo_resources.pak (28502 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\el.pak (1747 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fr.pak (276 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\kn.pak (3669 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ml.pak (3735 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\cs.pak (258 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\secondarytile.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\id.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ca.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ja.pak (308 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\bn.pak (1830 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\bg.pak (1705 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\nb.pak (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ro.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\vk.exe (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_watcher.dll (1636 bytes)
%Documents and Settings%\%current user%\Desktop\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\PepperFlash\pepflashplayer.dll (122658 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\ok.exe (142 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\es-419.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fil.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\uk.pak (1689 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_elf.dll (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\snapshot_blob.bin (1717 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ar.pak (1629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pt-BR.pak (249 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mailruupdater.exe (38588 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\et.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\th.pak (1789 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mm.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe (7345 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\it.pak (252 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libexif.dll (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\en-GB.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mm.exe (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\tr.pak (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\zh-CN.pak (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ms.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\gu.pak (1796 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\en-US.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hu.pak (272 bytes)
%Documents and Settings%\%current user%\Desktop\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\8FKVI5SX\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome.dll (237340 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sv.pak (235 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pl.pak (253 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\natives_blob.bin (1677 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fi.pak (242 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\es.pak (263 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\chrome.7z (1266233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hr.pak (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_child.dll (307964 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\unitywebplayer.exe (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\he.pak (296 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sl.pak (241 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\logo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sw.pak (236 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\vi.pak (287 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fa.pak (1648 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mg.exe (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ko.pak (263 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\delegate_execute.exe (3707 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (4545 bytes)
%Documents and Settings%\%current user%\Desktop\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\nl.pak (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1VNK98MP\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sr.pak (1670 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\amigo_cr.exe (1615 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hi.pak (1810 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mg.exe (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\vk.exe (167 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E3PF06QF\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\xinput1_3.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\lv.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\metro_driver.dll (1763 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\lt.pak (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\da.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\resources.pak (142877 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\VisualElementsManifest.xml (396 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\ok.exe (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libglesv2.dll (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CH67GTEF\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\icudtl.dat (75554 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\amigo.exe (3765 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pt-PT.pak (254 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1VNK98MP\callback[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\amigo.exe (0 bytes)

The process MailRuUpdater.exe:296 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\gpt.ini (62 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\FAACEB761337413FBC8CBB975A59EF79.html (0 bytes)

The process MailRuUpdater.exe:2516 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\MailProducts\Id (38 bytes)

The process MailRuUpdater.exe:2400 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (39945 bytes)

The process MailRuUpdater.exe:1324 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (43956 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (43956 bytes)

The process MailRuUpdater.exe:1952 makes changes in the file system.


The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\User\Registry.pol (8 bytes)
%System%\GroupPolicy\gpt.ini (105 bytes)
%System%\GroupPolicy\Machine\Registry.pol (8 bytes)

Registry activity

The process %original file name%.exe:668 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\02b553f35255318ca02f2d7bab534573\DEBUG]
"Trace Level" = ""

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\6A31DB7E-AB0C-4D92-B239-E311EA0B97C9]
"AmigoDistrib.exe" = "Amigo Installer"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 62 E3 64 E4 5B 7D E9 A5 C3 BB 0A 8C 35 43 0E"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\3B77D0B2-6243-4AC7-B7D6-BE705686338B]
"mailruhomesearchvbm.exe" = "MailRuSputnik"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The SpyTool deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\02b553f35255318ca02f2d7bab534573\DEBUG]
"Trace Level"

The process UnityWebPlayer.exe:2412 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Version" = "5.0.3f2"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CurVer]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayName" = "Unity Web Player"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\Suffixes]
"unity3d" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Classes\AppID\{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}]
"(Default)" = "UnityWebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayVersion" = "5.0.3f2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerDevelopment" = "no"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\0\win32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\TypeLib]
"(Default)" = "{75A564FE-95D1-41a9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Description" = "Unity Player 5.0.3f2"

[HKCU\Software\Unity\WebPlayer]
"un.Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus\1]
"(Default)" = "131473"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"vendor" = "Unity Technologies ApS"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"NoRepair" = "1"
"HelpLink" = "http://unity3d.com/"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}]
"(Default)" = "_DUnityWebPlayerAX"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"ProductName" = "Unity Web Player"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Description" = "Unity Player datafile"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = ""

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}]
"(Default)" = "_DUnityWebPlayerAXEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"QuietUninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /S /CurrentUser"
"EstimatedSize" = "12288"

[HKCU\Software\Unity\WebPlayer]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Suffixes" = "unity3d"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\HELPDIR]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerReleaseChannel" = "Stable"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7F 6A 26 CA E8 01 06 50 C8 5F 6E 5B E1 89 78 C3"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /CurrentUser"
"NoModify" = "1"
"URLInfoAbout" = "http://unity3d.com/unitywebplayer.html"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\AppID\UnityWebPluginAX.ocx]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\VersionIndependentProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0]
"(Default)" = "UnityWebPlayerAXLib"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}\iexplore\AllowedDomains\*]
"(Default)" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ToolboxBitmap32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, 102"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"Publisher" = "Unity Technologies ApS"

The process amigo.exe:2052 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Classes\ftp\shell\open\ddeexec]
"(Default)" = ""

[HKCU\Software\Amigo\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "1"

[HKCU\Software\Classes\https]
"URL Protocol" = ""

[HKCU\Software\Classes\.html]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\ftp\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Classes\https\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"BitNames" = " WLANHC_AUTOCONFIG WLANHC_RNWFMSM WLANHC_FATMSM WLANHC_DLLMAIN WLANHC_TEST"

[HKCU\Software\Amigo]
"metricsid" = "23A9CFFD-E7E6-4218-A3AA-714BE4DABAA0"

[HKCU\Software\Classes\ftp\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"BitNames" = " DOT11_AUTOCONF DOT11_AUTOCONF_CLIENT DOT11_AUTOCONF_UI DOT11_FATMSM DOT11_COMMON DOT11_WLANGPA DOT11_CLASS_COINSTALLER"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"Guid" = "2e8d9ec5-a712-48c4-8ce0-631eb0c1cd65"

[HKCU\Software\Amigo]
"metricsid_installdate" = "0"

[HKCU\Software\Classes\.shtml]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Classes\http\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"BitNames" = " DOT11_ASSOCIATE DOT11_ROAMING DOT11_1X DOT11_PNP DOT11_SCAN DOT11_RECEIVE DOT11_SEND DOT11_IOCTL DOT11_OID DOT11_MISC DOT11_UPCALL DOT11_KEYMGR DOT11_PEER DOT11_SOFTAP DOT11_PAM DOT11_REPEATER DOT11_APROUTER DOT11_WME DOT11_CONFIG DOT11_MSM DOT11_MSM_ADAPT DOT11_MSM_SCAN DOT11_MSM_CONNECT DOT11_MSM_SECURITY_PKT DOT11_NOTIFY_OBJECT"

[HKCU\Software\Classes\http\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Classes\http]
"URL Protocol" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"Guid" = "d905ac1c-65e7-4242-99ea-fe66a8355df8"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"BitNames" = " SECHC_LOG_FLAG_ASSERT SECHC_LOG_FLAG_INIT SECHC_LOG_FLAG_DIAG SECHC_LOG_FLAG_ONEX_DIAG SECHC_LOG_FLAG_REPAIR SECHC_LOG_FLAG_STATE SECHC_LOG_FLAG_EXT SECHC_LOG_FLAG_EVENT_LOG SECHC_LOG_FLAG_FUNCTION SECHC_LOG_FLAG_MEMORY SECHC_LOG_FLAG_LOCKS"

[HKCU\Software\Classes\ftp\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCU\Software\Classes\https\shell\open\ddeexec]
"(Default)" = ""

[HKCU\Software\Classes\.xhtml]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\http\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"Active" = "1"

[HKCU\Software\Amigo]
"metricsid_enableddate" = "1450345871"

[HKCU\Software\Classes\.htm]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B7 60 98 5A E4 91 86 F8 E6 23 1E 0D 81 41 BF 57"

[HKCU\Software\Amigo]
"usagestats" = "1"

[HKCU\Software\Classes\http\shell\open\ddeexec]
"(Default)" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"Guid" = "0c5a3172-2248-44fd-b9a6-8389cb1dc56a"

[HKCU\Software\Classes\ftp]
"URL Protocol" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"BitNames" = " WD_LOG_FLAG_INIT WD_LOG_FLAG_RPC WD_LOG_FLAG_EVENT WD_LOG_FLAG_INTERFACE WD_LOG_FLAG_CONNECTION WD_LOG_FLAG_CONTROL WD_LOG_FLAG_LOCKS WD_LOG_FLAG_MEMORY WD_LOG_FLAG_REFERENCES WD_LOG_FLAG_FUNCTION_TRACE WD_LOG_FLAG_ASSERT"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"ControlFlags" = "1"

[HKCU\Software\Classes\https\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Clients\StartmenuInternet]
"(Default)" = "Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\https\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCU\Software\Classes\.xht]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"Guid" = "6da4ddca-0901-4bae-9ad4-7e6030bab531"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"Guid" = "637a0f36-dff5-4b2f-83dd-b106c1c725e2"

The process mailruhomesearchvbm.exe:332 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Favorites" = "%Documents and Settings%\All Users\Favorites"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Mail.Ru\Tech\PartnerLog\Components\Vbm]
"Installed" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Mail.Ru\IE_Bar\Settings]
"Guid" = "{406E11F4-A2B2-4F24-8791-F73BBB70095A}"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"MailRuUpdater.exe" = "Mail.Ru updater"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "mailruhomesearchvbm.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKCU\Software\Mail.Ru\Tech]
"UserId" = "{94BEB72B-A4D3-4E99-96AD-D6CACF548C98}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\Mail.Ru\IE_Bar]
"DefBrowser" = "ie"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "60 83 00 3C 95 9E 34 6A AA 8D 6E A6 E6 C2 DB 9F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\PartnerLog\Components\Homepage]
"Installed" = "0"

[HKCU\Software\Mail.Ru\Tech\PartnerLog\Components\Dse]
"Installed" = "0"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{59CE6805-773F-463B-A930-086C47DCED4C}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{F9AB8834-45F0-4E8F-AF26-9E63A35B0B0A}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{DE61ECD3-0FC4-4CE2-8C5E-04007169618F}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{DE61ECD3-0FC4-4CE2-8C5E-04007169618F}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E41C9B67-BC88-410C-BF59-0692341C9531}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E41C9B67-BC88-410C-BF59-0692341C9531}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{501066AC-0161-4396-8C40-7CEC8E6B162F}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{501066AC-0161-4396-8C40-7CEC8E6B162F}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{59CE6805-773F-463B-A930-086C47DCED4C}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{F9AB8834-45F0-4E8F-AF26-9E63A35B0B0A}User]

The process AmigoDistrib.exe:336 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "32 E3 1B E7 52 E1 AA 70 4F 91 C6 FB B4 41 52 73"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"RFR" = "789104"
"newrfr" = "789104"

The process setup.exe:1496 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Amigo]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"https" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCR\.shtml\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mailruupdater.exe,"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"tel" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo\Commands\on-os-upgrade]
"CommandLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKCR\.webp\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Amigo]
"FirstNotDefault" = "Type: REG_QWORD, Length: 8"

"ap" = "-stage:refreshing_policy"

[HKCU\Software\Amigo\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"AgentInstall" = "0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161}]
"(Default)" = "CommandExecuteImpl Class"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".webp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo]
"pv" = "44.4.2403.3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mailto" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Amigo]
"Name" = "Интернет"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"urn" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"VersionMajor" = "2403"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".htm" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\.html\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\amigo.exe]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"PrevDefault" = "%Program Files%\Internet Explorer\iexplore.exe -nohome"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"ftp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo]
"UninstallArguments" = " --uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"sms" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ShowIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --show-icons"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"FirstInstall" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"news" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "HTML Document"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"smsto" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".html" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationDescription" = "Amigo is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Amigo."

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ReinstallCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --make-default-browser"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayVersion" = "44.4.2403.3"
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCR\.xht\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xht" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\.htm\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "Интернет"

[HKCU\Software\Amigo]
"InstallerSuccessLaunchCmdLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".shtml" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"http" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe --uninstall"

[HKCU\Software\Amigo]
"InstallerError" = "0"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "55 BD 89 35 51 26 7A 31 19 2B 5C F7 28 12 47 1A"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"InstallDate" = "20151217"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"nntp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe"
"ServerExecutable" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Amigo]
"oopcrashes" = "1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"amigoext" = "eeecheimdlkopnpajfcdmacgkjlkcmji;diciddlabejpoaofdnmoamebeohoiobg;egohihcbmlmdokfdoecjpdiadnkjgmdd;kgkggmpkealihpbjpdmcblcplljamohl;hlnkhcccfccipjdgeddoifmlognfajdp;mbipmajmbfjakbcfnjdldckninlnmhoe;hfpahoblpjopcfnlokmndooidiinhiie;nhhefclnfbjmnbbkhjplpnciolbbbdkd"
"stage" = "1"

[HKCR\.xhtml\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"webcal" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"Publisher" = "Mail.Ru"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"Guid" = "{B16F9E60-A637-4458-9AD6-6ED6E648695B}"

[HKCU\Software\Amigo]
"InstallerExtraCode1" = "9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\amigo.exe]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"NoModify" = "1"

[HKCU\Software\Amigo]
"InstallerResult" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mms" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayName" = "Интернет"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xhtml" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"NoRepair" = "1"
"Version" = "44.4.2403.3"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"HideIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --hide-icons"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\Startmenu]
"StartMenuInternet" = "Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationName" = "Интернет"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"ua" = "CHANNEL_789104"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Amigo]
"lang" = "en"

[HKLM\SOFTWARE\RegisteredApplications]
"Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = "Software\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"VersionMinor" = "3"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"irc" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"IconsVisible" = "1"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"amigo" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --no-startup-window"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application]
"amigo.exe" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe:*:Enabled:Интернет"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Amigo]
"ap"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"first_bookmark_bar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"InstallResult"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Amigo]
"InstallerExtraCode1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"first_nosidebar"

The process MailRuUpdater.exe:296 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DC EC 6C 1C 7B 45 E9 88 C5 C7 C2 B6 B3 02 13 92"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Mail.Ru\Tech\ptls\{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{3CE4F0C3-2143-491F-8F20-27792166C41F}]
"RUNID" = "10"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}]
"RUNID" = "10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Mail.Ru]
"SicSettings" = "22 serialization::archive 11 0 0 1 0 0 0 0 0 20 0 0 1 0 0 0 0 24 0 0 0"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{BA4B515F-F903-4947-9DD3-D15F65C37DCB}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{BA4B515F-F903-4947-9DD3-D15F65C37DCB}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]

The process MailRuUpdater.exe:2516 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B0 14 94 57 F1 A4 7C DA 6B 15 00 53 30 3D 21 CF"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"CH" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ff" = "1"
"ie" = "1"

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsNYjJa8dlIQwLm497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsNYjJa8dlIQwLmo97RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{603A8599-628C-4F00-A940-A09F1583A23E}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}]
"RUNID" = "12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsNYjJa8dlIQwLm497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{66CD85E0-6D8E-444E-9D71-AED8BA171A26}]
"RUNID" = "16"

[HKCU\Software\Mail.Ru\Tech\ptls\{66CD85E0-6D8E-444E-9D71-AED8BA171A26}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsNYjJa8dlIQwLm497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsNYjJa8dlIQwLmo97RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ch"
"ff"
"ie"

The process MailRuUpdater.exe:2400 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BF A1 8F 62 A4 A6 53 8B D6 29 5F E5 2E 37 27 64"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process MailRuUpdater.exe:1324 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"Publisher" = "Mail.Ru"
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"DisplayName" = "Служба автоматического обновления программ"

[HKCU\Software\Mail.Ru\IE_Bar\Settings]
"Guid" = "{406E11F4-A2B2-4F24-8791-F73BBB70095A}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Mail.Ru\Updater]
"Guid" = "{406E11F4-A2B2-4F24-8791-F73BBB70095A}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMinor" = "23"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMajor" = "1"
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru]
"MailRuUpdater.exe" = "Mail.Ru updater"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A1 2D 46 AC 09 B4 DA 56 D9 62 D7 D7 35 74 DA 82"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]

The SpyTool deletes the following value(s) in system registry:


The SpyTool disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater"

The process MailRuUpdater.exe:1952 makes changes in the system registry.


The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "29 41 B2 C3 A3 8B B3 2A 24 AD B1 48 0E 86 5E 6F"

[HKCU\Software\Mail.Ru\Tech\ptls\{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = ""

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKU\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "MailRuUpdater.exe"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"

The SpyTool deletes the following registry key(s):

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{5B0FC69F-A586-49DA-8595-E5290900FAF6}Machine]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{5B0FC69F-A586-49DA-8595-E5290900FAF6}User]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E6F7544D-9878-44AD-8BB2-4F5762E1808A}Machine]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E6F7544D-9878-44AD-8BB2-4F5762E1808A}User]

Dropped PE files

MD5 File path
26ee0c5bbffdc2ae3a9b491ae21dc4d7c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\amigo.exe
84d70cad87642c0de290e087b61a00f5c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mailruupdater.exe
a5226901eda4b475188cf073588628e4c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mg.exe
7f03cf74eade19379fc5de0bdf1f4b69c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mm.exe
bcbcaecce31d6488abab0572286cb662c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\ok.exe
4246b1662ddee1df479b99161c46f4fcc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\unitywebplayer.exe
1a6574daa3e84274b915ef6c710046dac:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\vk.exe
0ac4b1bf7f246565319062eb4c97091bc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\wow_helper.exe
480506d758753f627d536de351b330efc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\3B77D0B2-6243-4AC7-B7D6-BE705686338B\mailruhomesearchvbm.exe
7a2e7f4486802e08f05c2b2d040dccf8c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\6A31DB7E-AB0C-4D92-B239-E311EA0B97C9\AmigoDistrib.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    UnityWebPlayer.exe:2412
    amigo.exe:2052
    mailruhomesearchvbm.exe:332
    AmigoDistrib.exe:336
    setup.exe:1496
    MailRuUpdater.exe:296
    MailRuUpdater.exe:2516
    MailRuUpdater.exe:2400
    MailRuUpdater.exe:1324
    MailRuUpdater.exe:1952

  2. Delete the original SpyTool file.
  3. Delete or disinfect the following files created/modified by the SpyTool:

    %Documents and Settings%\%current user%\Local Settings\Temp\3B77D0B2-6243-4AC7-B7D6-BE705686338B\mailruhomesearchvbm.exe (31790 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\6A31DB7E-AB0C-4D92-B239-E311EA0B97C9\AmigoDistrib.exe (370096 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (6360 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (32784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\info.plist (192 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe (6078 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityWebPlayerUpdate.exe (19592 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UserInfo.dll (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\UAC.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp (67936 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityBugReporter.exe (25112 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPlayerNP.map (12536 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\User Data\1.tmp (935 bytes)
    %System%\GroupPolicy\gpt.ini (180 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\GoMailRu.ico (14076 bytes)
    %Documents and Settings%\All Users\Favorites\Mail.Ru.url (152 bytes)
    %Documents and Settings%\%current user%\Desktop\Искать в Интернете.url (209 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\Sputnik\MailRu.ico (14076 bytes)
    %Documents and Settings%\All Users\Favorites\Mail.Ru Агент - используй для общения!.url (210 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\Sputnik\Report\3DD21 (528 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\MailRuUpdater.exe (749560 bytes)
    %Documents and Settings%\All Users\Application Data\Mail.Ru\Id (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\Mail.Ru.lnk (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\SETUP.EX_ (1659 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\setup.exe (17080 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_EF0B0.tmp\CHROME.PACKED.7Z (366388 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\wow_helper.exe (73 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\mr.pak (1801 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Вконтакте.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ru.pak (1675 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libegl.dll (81 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\am.pak (1639 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\UnityWebPlayer.exe (7433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sk.pak (266 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (17629 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl64.exe (12289 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\MailRuUpdater.exe (39945 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Одноклассники.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\zh-TW.pak (214 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\te.pak (1863 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\de.pak (256 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ta.pak (3682 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\amigo_resources.pak (28502 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\el.pak (1747 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fr.pak (276 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\kn.pak (3669 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ml.pak (3735 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\Одноклассники.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\cs.pak (258 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\secondarytile.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\id.pak (228 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ca.pak (259 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ja.pak (308 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\bn.pak (1830 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\bg.pak (1705 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\nb.pak (233 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ro.pak (262 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\vk.exe (673 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_watcher.dll (1636 bytes)
    %Documents and Settings%\%current user%\Desktop\Вконтакте.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\PepperFlash\pepflashplayer.dll (122658 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\ok.exe (142 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\es-419.pak (259 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (972 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fil.pak (262 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\uk.pak (1689 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_elf.dll (132 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\snapshot_blob.bin (1717 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ar.pak (1629 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pt-BR.pak (249 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\Вконтакте.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mailruupdater.exe (38588 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\et.pak (228 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\th.pak (1789 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mm.exe (601 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe (7345 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\it.pak (252 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libexif.dll (310 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\en-GB.pak (212 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mm.exe (130 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\tr.pak (254 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\zh-CN.pak (211 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ms.pak (234 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\gu.pak (1796 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\en-US.pak (212 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hu.pak (272 bytes)
    %Documents and Settings%\%current user%\Desktop\Интернет.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\8FKVI5SX\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome.dll (237340 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (7972 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sv.pak (235 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pl.pak (253 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\natives_blob.bin (1677 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fi.pak (242 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\es.pak (263 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\chrome.7z (1266233 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hr.pak (244 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_child.dll (307964 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\unitywebplayer.exe (5442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (5442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\he.pak (296 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sl.pak (241 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\VisualElements\logo.png (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sw.pak (236 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\vi.pak (287 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\fa.pak (1648 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\mg.exe (196 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\ko.pak (263 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Интернет.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\delegate_execute.exe (3707 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (4545 bytes)
    %Documents and Settings%\%current user%\Desktop\Одноклассники.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\nl.pak (247 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1VNK98MP\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\sr.pak (1670 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\Интернет.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\amigo_cr.exe (1615 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\hi.pak (1810 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mg.exe (1281 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\vk.exe (167 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E3PF06QF\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\xinput1_3.dll (81 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\lv.pak (262 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\metro_driver.dll (1763 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\lt.pak (257 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\da.pak (234 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\resources.pak (142877 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\VisualElementsManifest.xml (396 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\ok.exe (673 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\libglesv2.dll (7972 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CH67GTEF\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (22433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\icudtl.dat (75554 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\amigo.exe (3765 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (22433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1496_16307\Chrome-bin\44.4.2403.3\Locales\pt-PT.pak (254 bytes)
    %Documents and Settings%\%current user%\Application Data\MailProducts\Id (38 bytes)
    %Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (39945 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (43956 bytes)
    %System%\GroupPolicy\User\Registry.pol (8 bytes)
    %System%\GroupPolicy\Machine\Registry.pol (8 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "amigo" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --no-startup-window"

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "MailRuUpdater" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
CODE4096231532023157764.5263249e1beffae1dbf3a92491c953736b14d
DATA232243282808829444.07344511fcb6f7e9abe69e13925ce76e66404
BSS24084483112500d41d8cd98f00b204e9800998ecf8427e
.idata244121611118112643.409711aae32d8d8266bf393e4551b9e436bfe
.tls245350446800d41d8cd98f00b204e9800998ecf8427e
.rdata2457600245120.146134d5c346e252b52c98eaacac21d6005063
.reloc24616961308841310724.63935219161c985a6751e72461ce37ed4ffe2
.rsrc2592768172201517223684.71572f96888bc9b62ed4e5980c7c8cc858e92

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:


Total found: 431
081500c4436595b5306a89ef2344ced3
77c6cb6a3055257de727571393158e49
0a1daed8f4a5144569e2e99821d1da75
f350514d3e6181291e55fcfe394f4630
2a0eae42b9697b4ce5163e93196df290
6cef0e30bcb70b6df0acfa864e09bc2f
f5d6736d2dbbcc84f3d3e6e074dd1e78
15f3e67e9e961359e243bd324599ce76
590082e0df2d44f8cb0e01e65977f339
6000cc44dc81026b3f7dfdd86b9ff3da
37476bbf6346a41d96d592200d9160a4
000143c046833c7e1f051c74dac56902
b51a6c9ebbf9ab48e33aa8cffc741518
637455dfd2114c0cb5209e1547326a62
7b81127e4575f69b848e0547bbd7c70d
393653210e0a971a07573a8d7b3494e8
2641c25493c08cf553e6833e03ee9966
3b67f2148c8bbf215c987dab1a65bbc2
3e18621f6b0df9468c62696ddf87a11c
fb13aaaf52edfcd97cb1517f849cc5c3
dcdb334fdfd3106a09d33f2862b64b27
7f20d2119f61a54dcf78b29b7bc7ee02
c60742b460a00b07bdc54b8f5e8b1017
dc07ca54f3682551e1a0d00368401663
58afebbb6f4ac33a018bb8903a1758d0
3f61a508ff401552057d391b04d95f70

Network Activity

URLs

URL IP
hxxp://cuidu.sevential.ru/api
hxxp://moscow.cdnmail.ru/AmigoDistrib.exe
hxxp://moscow.cdnmail.ru/mailruhomesearchvbm.exe
hxxp://moscow.cdnmail.ru/MailRuUpdater.exe
hxxp://mrds.mail.ru/update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&bgn=1&standalone=1&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=0&comp_mem=511&tool_mem=4&elapsed_time=0&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0217.69.133.170
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&ovr=0&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0217.69.133.170
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/updater/version.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0217.69.134.56
hxxp://binupdate.mail.ru/chrome/version2.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/amigo/version2.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0217.69.134.56
hxxp://binupdate.mail.ru/cache_policy.mrdj217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1217.69.133.170
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=prog_install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&prog=mrupdater&event=done&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=5&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/audit_config.mrdj217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&uacpass=1&standalone=1&uacenabled=0&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=5&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0217.69.133.170
hxxp://mrds.mail.ru/update/2/version.txt?type=mruinfo&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&amigo_conv=1&ovr_amigo=0&ovr_internet=0&ovr_chrome=0&ie_ver=6.0.2900.5512&iedse=&iehp=&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=1&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1217.69.134.56
hxxp://cuidu.sevential.ru/mailru/callback?type=mailru_amigo&zone=ua&guid={B16F9E60-A637-4458-9AD6-6ED6E648695B}&ovr=0&aux=6450
hxxp://bs.amigo.mail.ru/update/2/version.txt?ver=44.4.2403.3&kind=amigo&ds=m&BID={B16F9E60-A637-4458-9AD6-6ED6E648695B}&rfr=789104&type=install217.69.133.171
hxxp://mrds.mail.ru/update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&success=1&ieovr=0&ffvbm=0&br=ie&brver=6.00&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=7&elapsed_time=7&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0217.69.134.56
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&rfr=&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1217.69.133.170
hxxp://binupdate.mail.ru/updater/version.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&rfr=&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=1&mr_service=0217.69.133.170
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=9&elapsed_time=12&mr_service=0217.69.134.56
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=6&mr_service=1217.69.134.56
hxxp://binupdate.mail.ru/tasks/ext_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=6&mr_service=1217.69.134.56
hxxp://binupdate.mail.ru/tasks/sg_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=7&mr_service=1217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=9&elapsed_time=12&mr_service=0217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=7&mr_service=1217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0217.69.134.56
hxxp://amigobin.cdnmail.ru/AmigoDistrib.exe217.69.139.110
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1217.69.134.56
hxxp://mailruupdater.cdnmail.ru/MailRuUpdater.exe217.69.139.110
hxxp://sputnikmailru.cdnmail.ru/mailruhomesearchvbm.exe217.69.139.110
hxxp://xml.binupdate.mail.ru/cache_policy.mrdj217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1217.69.134.56
hxxp://xml.binupdate.mail.ru/audit_config.mrdj217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=6&mr_service=1217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=6&mr_service=1217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0217.69.134.56

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /AmigoDistrib.exe HTTP/1.1

Host: amigobin.cdnmail.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:50:38 GMT

Content-Type: application/octet-stream

Content-Length: 48920808

Connection: keep-alive

Last-Modified: Wed, 25 Nov 2015 10:35:20 GMT

ETag: "56558ee8-2ea78e8"

Accept-Ranges: bytes

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........D.^.*E^.*E^.*E...E_.*ES..EI.*ES..EP.*ES..E>.*E.C.EY.*E^. E9.*E#..EY.*ES..E_.*E^..E].*E#..E_.*ERich^.*E........PE..L...>EKV.............................Z............@.................................7.......................................X1..P....@..X>...........V..."..........@...8............................N..@............0..X............................text............................... ..`.data...............................@....idata.......0......................@..@.rsrc...X>...@...@..................@..@.reloc...............J..............@..B.............................................................................................................................................................................................................................................................................................................................................................m@.ku@...@.*.@..........~@...@...@.....................>EKV........^...0O..0C......>EKV.............O...C..{.8.A.6.9.D.3.4.5.-.D.5.6.4.-.4.6.3.c.-.A.F.F.1.-.A.6.9.D.9.E.5.3.0.F.9.6.}.....{.4.e.a.1.6.a.c.7.-.f.d.5.a.-.4.7.c.3.-.8.7.5.b.-.d.b.f.4.a.2.0.0.8.c.2.0.}.....{.8.B.A.9.8.6.D.A.-.5.1.0.0.-.4.0.5.E.-.A.A.3.5.-.8.6.F.3.4.A.0.2.A.C.B.F.}.....{.4.D.C.8.B.4.C.A.-.1.B.D.A.-.4.8.3.e.-.B.5.F.A.-.D.3.C.1.2.E.1.5.B.6.2.D.}.....-.-.c.h.r.o.m.e.-.s.x.s.....-.-.c.h.r.o.m.e.....-.-.c.

<<< skipped >>>

GET /tasks/sg_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=7&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:28 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 40819

d.=<;:;[.dzyv0 0t.-, *)('&'Wd@ma\UqUHN...m?.............EGGEAW.I182~wPyxwvutsrqpono?</,<j6$#&l"/.\Qv[ZYXWVUTSRQPM......F...J...B...............................................................................................................................~kqh6i|yeu}:}we2#.-, *)('&%$#"#y^SYYC.W]C..>.............B@HWC.H038/u965uz_tsrqponmlkjij='7%!-5!..P.....Y...Q^{PONMLKJIHGFEF..O................................................................................................................................?<usot|ode;ff0=./.-, *)('&%$!ldtXWY.U_M..<.............[SGWP.VHC11s?47{t]vutsrqponmlkh=!$(*j -,bSt]\[ZYXWVUTSRS....B.......J..CL...............................................................................................................................lj|noi|yeu}:p}|2#.-, *)('&%$#"#gP.JYY[ULV.GA..;.............PV@R p*99;5,6x'!q~[ponmlkjihgfef4'#!...R..[T}VUTSRQPONMLKH[...K...CL...............................................................................................................................?>=<;:9874cqaf~}!|x.'.)('&%$#"! ...[ZW\....FF..:..............JA1?1r4(>z{\utsrqponmlkjk;3'70,4*!Q..^WpYXWVUTSRQPONO..[\F...FOhA@...............................................................................................................................?>=<;8oyd~8p|z~t!`hx)&.('&%$#"! ....WOZSNEPUAQYU\.NCF..".........~}|y-0639"'>32~=;o`Ajihgfedcba`_\.............^..O@aJIHGFEDCBA@.................................................................................................

<<< skipped >>>

GET /tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 7714

d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0<~az-*"3y^Z[Xr=;#%/hshvwiNJKHb....Y@YZ.......RCddebH.......=.................................................................................................................................~wqnn4z|y{t}.<ce ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}uy.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC................................................................................................................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,5745.N@HR....BTBFAIEH.."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.Z.}zP.4, ]R( E&$SUNVY&.............................................................................................................................../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.FcanD.T&&SS...............................................................................................................................=]hooutHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.nbey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............................................................................................................................?/-0....5epfe{ruP~.edx`|~$?$wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9HHE.XCX.||}zP...LWL.....JomjkC...........................................................................................................

<<< skipped >>>

GET /tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:21 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 7714

d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0<~az-*"3y^Z[Xr=;#%/hshvwiNJKHb....Y@YZ.......RCddebH.......=.................................................................................................................................~wqnn4z|y{t}.<ce ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}uy.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC................................................................................................................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,5745.N@HR....BTBFAIEH.."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.Z.}zP.4, ]R( E&$SUNVY&.............................................................................................................................../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.FcanD.T&&SS...............................................................................................................................=]hooutHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.nbey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............................................................................................................................?/-0....5epfe{ruP~.edx`|~$?$wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9HHE.XCX.||}zP...LWL.....JomjkC...........................................................................................................

<<< skipped >>>

GET /update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&bgn=1&standalone=1&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=0&comp_mem=511&tool_mem=4&elapsed_time=0&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:12 GMT

Connection: close

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 157

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.-.

.1E......4...iS.T.....n ..>...)1P.].A.K.^b.&d.J....qk.;<..0..6.........~lm..Kf...\{rY...O.y.Y<.k6cT...D.Q....,..#\......&.S.B. .I.TA.B(m,.....Nc5.

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:50:59 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17

7...x......@...^.`QD....k....3.*....l.7..:S.*].X.f]..R.<CA...r....

GET /update/2/version.txt?type=mru_online_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&rfr=&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:22 GMT

Connection: close

GET /update/2/version.txt?type=mru_install_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&rfr=&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=1&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:22 GMT

Connection: close

GET /update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&success=1&ieovr=0&ffvbm=0&br=ie&brver=6.00&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=7&elapsed_time=7&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:19 GMT

Connection: close

GET /audit_config.mrdj HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 43

d.=<;:;[.sv.`Fx}jGcxnx.iku'$9"Z3........j<H..

GET /update/2/version.txt?type=mruinfo&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&amigo_conv=1&ovr_amigo=0&ovr_internet=0&ovr_chrome=0&ie_ver=6.0.2900.5512&iedse=&iehp=&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=1&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:17 GMT

Connection: close

GET /MailRuUpdater.exe HTTP/1.1

User-Agent: SputnikInstaller

Host: mailruupdater.cdnmail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:12 GMT

Content-Type: application/octet-stream

Content-Length: 5888728

Connection: close

Last-Modified: Fri, 27 Nov 2015 16:27:50 GMT

ETag: "56588486-59dad8"

Accept-Ranges: bytes

MZ......................@...................................8...........!..L.!This program cannot be run in DOS mode....$......... ...E...E...E.......E.(O....E..q....E.......E.......E.......E.......E.......E...E...E.....\.E.......E...D.D.E.(O..i.E.(O....E.......E.......E.(O....E.Rich..E.........................PE..L.....WV..................D..X......=.0.......E...@...........................Z.....G.Y...@.........................P.R.....h.S.h.....V.hi............Y...... W.L]...,E.8...................8.L.......L.@.............E.@............................text.....D.......D................. ..`.rdata........E.......D.............@..@.data.........S..N....S.............@....tls..........V.......U.............@....rsrc...hi....V..j....U.............@..@.reloc..L]... W..^...bV.............@..B.................................................................................................................................................................................................................................`.....C0.V.t$p..u.......D$.P..........u.^..`..L$l.T$hQR.D$.P......L$.QV.c....T$.j`R..........^..`..............V.t$.jpj.V.q>0...........F...|6.F...p0.F.9Y...F.1....F...Xh.F....d.F..O...Fl.........^..........V.t$.jpj.V..>0......g..j.F...g..F.r.n<.F.:.O..F..R.Q.F..h...F......F....[.Fl ........^...........T$.UW.|$...........V.t$..F ...;.s..F$......F$.FhS.N ..tj.n(..@s"..8..@s.WR..U.]*0.....~h[^_.....]..@... .SR..(R.;*0.j.UV.R....D$0j@...j.U.L$< ..Fh.....$=0..l$<..$.......v.SUV............. ...t

<<< skipped >>>

GET /tasks.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=6&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:28 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 7714

d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0<~az-*"3y^Z[Xr=;#%/hshvwiNJKHb....Y@YZ.......RCddebH.......=.................................................................................................................................~wqnn4z|y{t}.<ce ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}uy.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC................................................................................................................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,5745.N@HR....BTBFAIEH.."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.Z.}zP.4, ]R( E&$SUNVY&.............................................................................................................................../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.FcanD.T&&SS...............................................................................................................................=]hooutHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.nbey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............................................................................................................................?/-0....5epfe{ruP~.edx`|~$?$wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9HHE.XCX.||}zP...LWL.....JomjkC...........................................................................................................

<<< skipped >>>

GET /tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:17 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10105

d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0<>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%................................................................................................................................v{?0.:9876543210/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.>; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L...............................................................................................................................l<'<@.9876543210/.-, *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgfedcba`_\4...5.......!.......KRG=oDCBA@.....................................j....d1...a/....z.....t........n....S....d...........................................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]hW..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONMLKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x................................................'C...#t...<l....7X....1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;....!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......................Y=...U....n>....i.....c.......{....w ...q.............................................."D...<i...9g....2_BlFy..DDK8wOr..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@.....................................................................................

<<< skipped >>>

GET /update/2/version.txt?type=mru_online_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Connection: close

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 877

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T.n.8...BO)j..D......,....(...F1.J...l.......(...4g83<s..,.4)h.LY....)-iS.4Ki......y....

.......G.....C.J..lP.a.T.F!.C.

zG~...J.!a........dE^0...g%.>.=X...g...N`..=...'P.R........r.yq..`

ea.....2^.&....<Q.f.@.z.,.."P..9r..G7zg.x..........).:X~.(..qI../w7..E0.]..`.....?Y..?...U.&m...cE-h..M^.*Mx.'.....z...k..5..r#.....I...-..........s.x.m..s,e.%.g..~F.D.....[.7..?..|..d....v.Hv.Z....z........v ......n...t>....=&..#..b'{._.\w...d.G1..t!.b...E.......s;*u..aP.......{Y.mu..J......}..2Z...N5..... .x...s....!wFt.....L...ld%.7.>.....wl........C#..V|...[%.{............c.I.%..%....P...g.SZ.!N.3....5..}.......e....k''X.Q..e.....J.2..\.tN.\.N.Y...;%....8 [....'<..o.!.d..#.n..?n......&..|*..............B.o...Z.cJ.......,.L....O...!.....'........{,..;...Go..qY..O|3..Uy\.~..C..a.BVp.'y.......(3..,.9...Q.......m.s.....r(.

e..L.H[.U...

*RV....@5...f~UR........D..

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:50:07 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17

....x..T...6...A(.i.........h..R.M^.@ ..%X..J.K..{.......I......gF3'..c?.....a...r.E.b..Y.BYeA.Y...'....]...;5%^0x..T...WsH.........%CGQU ....8..w....6.0....N........l.J.}..l.V..fI......`M....h.zr"....y3..a....UM.=.....Br(.Z..b36...*....>...:t.*."(x.F....L..Jpr.`...L...Q/j.I.......m'......<.CI\rq.....H.q..P.......=.gfi.5.4Pd |....T...j..8q....1k..9.."....Dfe.X5$VU|...,....SK.rr..!..Dx.Y...^=v-q.t....3oX....Y9........k.O.N..dk.%....n....J.=..;..j.Gg6....l..1..-.|....7?.*....aV..N..c......d..m.k....qs'o...o...j..r.GF..G5......g.......0<..(~y...........3:...8...b9rjAWSB......j....FA.k.c...5....R.:@.c.Qz...{B~..xK%...5!A.-.C........Y....t..w.@.Dq...t.*.H..$I.].5 q...t....JE.@%.oX......k.. ..B.G...m.?......Z..?.....YB..Z..t...^|.../.../9..AO.n.=....qD.V...#6J..........n.)...#.8...V.V.....5......T....F.%..r...0..I...i.y......?....f.y%V.\.n....@...!......*......3......

GET /update/2/version.txt?type=prog_install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&prog=mrupdater&event=done&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=5&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Connection: close

GET /tasks/ext_settings.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=6&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:28 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 85104

d.=<;:;Yz.r{1(1k..-, *)('$@|w@ma\UqUHN...m?.............EBHNBEEC/5;,>88910U<27$"(%! "'ejOdcba`_^]\[ZYZ.......................................................................................................................................................}}rlpjuppwpp{p}.jkgdckgca$).#"! .........WTURSY\IOE@OD@DNBBJOKJD<5?:>21;6ty^srqponmlkjihe'$%"#'%.........................DInCBA@...............................................................................................................................~uwx}.p{sw78.210/.-, *)('$debc`dX[MVP^_^_\W_UXV^AHKBMIONEA..)....~}|{zyxwt452308"")&'%('*,' -2..........WXyRQPONMLKJIHGD.....................................................................................................................................?>=<;:98767urspygfcjehgxenuedlloORM_QX\\^[Y..8.............EBC@I667223)4=00329?=-%#)*'''&,!foHa`_^]\[ZYXWVW....................................................................................................................................................vqmr}.zr.ss}pxrziigihlnlodhg!.. ............RSPQF^H@GGJOOIJANFDK=61;:5092449q~[ponmlkjihgfef"# !............................ANk@...............................................................................................................................qw~wt|.~|rydq0=./.-, *)('&%$!c`a^T[XVPXPGTQ[V]\@MH@KCD@GLNCNJ..*.~}|{zyxwvutq301.$*.,-*##$)!"/ ,.............P]zONMLKJIHGFEDA...................................................................................................................

<<< skipped >>>

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 867

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T[o.8.. .O.M@6.[...T.KWQ..T..*....`.6....}....H................8eI^..n.R.I..bm.....(.?.9X.,X.........9H..J..l...."c

A...T08..`.

.C/.f.......;..R...F.M5I........t.y.5......*po#..x.........4[...]....@........{.......|vl.K.......Rz..4..rs..Xa...k.....C.dsd.@5.Wi..I......q.7y%.4.i.D

(&..B.}s...v..iE..Y.b/.`.^..uT..Y..?'......l) ..|t...d@4`..Z..CS..G;.\`If...`..dG...Oh.;m.....u..0/.w.2.N.g...S.......x[.{9(.t.u.....Np.S......sc...C.._......k;m\=9.1....d-.......6........h.cz/.iT....j.%..s.d.s@..j.....1...6/.G.l.U$.Q....t....c./v..HF.......##.\ .7......e. w.~.2J"...{i'.....$..@A.:gd59?z$$.E.z4Jh...g.GpY;9..."..Y.. ...e4..&......^.2.8o....(...2F.~..}....|.C.;.. ..\.e.3..Ev..Tt.c.Q...z=.A.;..4^..7........8.*.QYF.@.......MlG.e.

...4....,.]:...gj...v../@...My8...lC..a.BVp.'y.......(3..,.9^..Q..Y..{.5^9x..{...U..u.R.[.%.

.u.....x.{.PMO....... ......P..

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:50:07 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17

S...x..Tmo.0.. ....I0..Q.V..:m..M..yB6.../.1m.....i..k.}9|o..pw.r..~.....K?.s..T.X...O...~.S.V...l%Y.rB.2..:/....,..%..,F.....r..mQ...z. t.W.w..e.)^U .(..f.].ik...V.:....Qj.bs6.u.nE.....yY.d...ZxYvJ.b...nEYA.k..........K..*... x.....c....u.)M....N.f. G..$...!.....GG4.g^.*.W....G'.......9#l~....<_....i.....{..C#Kb.Aa..........].ZcJG....MaT..@8..|...."..\X5,...G ..9.;..FB...8ttf&bv... >...b..$XX9.1.U*..! '...6n.a.......o.%.)........q....#.i.GX9..,d.F1u.dz.j......... ....9.a_.........i.w).Qr............5......e...g..z..Q...O~..$......a...O.........V.....&..G..T.......d_.)-.fOV?....f.<.F...'A.z.{..6..q..Q...>].0..-....../..E....#}.._...;......8. ...7,.r.U....^......FaD.0.... ...K....

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:28 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

GET /update/2/version.txt?type=mru_install_service&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Connection: close

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

GET /mailru/callback?type=mailru_amigo&zone=ua&guid={B16F9E60-A637-4458-9AD6-6ED6E648695B}&ovr=0&aux=6450 HTTP/1.1

User-Agent: Amigo Setup

Host: cuidu.sevential.ru

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:51:17 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.4.17

0..HTTP/1.1 200 OK..Server: nginx/1.4.2..Date: Thu, 17 Dec 2015 09:51:17 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.4.17..0..

GET /update/2/version.txt?type=mru_online&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Connection: close

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 182

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x...Kn.A.D...X...=....N,'..c..|.0Y.JzUT

E.o.g..`..h.Yd.>p....oz.-a.H..j.O\.r...W.E..

...R.c=...|....H......J.....<.TI..P.[.......]}j....O.H....f...).-,.T$......xx...aFN.?<.@.

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:50:08 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17

7...x......0...^. AD.rB.......k.6..."K..xH...Z.}[,`.|...%E........

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

GET /chrome/version2.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0 HTTP/1.1

User-Agent: MailRuUpdater

Host: binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

GET /update/2/version.txt?type=mru_install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=mrupdater&ovr=0&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:15 GMT

Connection: close

GET /tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=5&mr_service=0 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:21 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10105

d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0<>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%................................................................................................................................v{?0.:9876543210/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.>; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L...............................................................................................................................l<'<@.9876543210/.-, *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgfedcba`_\4...5.......!.......KRG=oDCBA@.....................................j....d1...a/....z.....t........n....S....d...........................................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]hW..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONMLKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x................................................'C...#t...<l....7X....1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;....!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......................Y=...U....n>....i.....c.......{....w ...q.............................................."D...<i...9g....2_BlFy..DDK8wOr..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@.....................................................................................

<<< skipped >>>

GET /updater/version.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0 HTTP/1.1

User-Agent: MailRuUpdater

Host: binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 157

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.-.

.1D..g.M.6..M.faQQt.D.w[.4o`xC.P..e..^.Y7...j..{e..h..;<.. ..6...G..v..?.>...U_.Z..8g.Dp...].....LI.r.....4...@.y..u.?..i".P...R.B.E.

..7..>_v.6.

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 17 Dec 2015 09:51:11 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17

7...x.313310.0..260O23N4MK32.H61H13IL..0J57L..XXU .....)Y))....q....

GET /update/2/version.txt?type=install&GUID={406E11F4-A2B2-4F24-8791-F73BBB70095A}&tool=sputnik&uacpass=1&standalone=1&uacenabled=0&masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=2.22.1.129&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=5&rfr=789119&rfr_dse=789119&rfr_hp=789119&rfr_vbm=789119&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:17 GMT

Connection: close

GET /update/2/version.txt?ver=44.4.2403.3&kind=amigo&ds=m&BID={B16F9E60-A637-4458-9AD6-6ED6E648695B}&rfr=789104&type=install HTTP/1.1

User-Agent: Amigo Setup

Host: bs.amigo.mail.ru

Cache-Control: no-cache

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 17 Dec 2015 09:51:17 GMT

Connection: keep-alive

HTTP/1.1 204 No Content..Server: nginx..Date: Thu, 17 Dec 2015 09:51:17 GMT..Connection: keep-alive..

GET /mailruhomesearchvbm.exe HTTP/1.1

Host: sputnikmailru.cdnmail.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:07 GMT

Content-Type: application/octet-stream

Content-Length: 4575448

Connection: keep-alive

Last-Modified: Tue, 15 Dec 2015 08:09:13 GMT

ETag: "566fcaa9-45d0d8"

Accept-Ranges: bytes

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......f.q."}.."}.."}..//...}..//...}..//..$|..d,..%}.."}.. }.. ....|......#}.. ....}.."}...|.......}..//..#}.."}..#}......#}..Rich"}..................PE..L.....LV..................1..|.......(&.......1...@..........................pF......KF...@.................................h3;.h.....=..M............E.......C.(...@.1.8...................0.6.......6.@.............1..............................text.....1.......1................. ..`.rdata..".....1.......1.............@..@.data........`;......L;.............@....tls..........=.......<.............@....rsrc....M....=..N....<.............@..@.reloc..(.....C......(C.............@..B.........................................................................................................................................................................................................................................................................`.....8&.V.t$p..u....|..D$.P..........u.^..`..L$l.T$hQR.D$.P......L$.QV.c....T$.j`R..........^..`..............V.t$.jpj.V..8&...........F...|6.F...p0.F.9Y...F.1....F...Xh.F....d.F..O...Fl.........^..........V.t$.jpj.V.!8&......g..j.F...g..F.r.n<.F.:.O..F..R.Q.F..h...F......F....[.Fl ........^...........T$.UW.|$...........V.t$..F ...;.s..F$......F$.FhS.N ..tj.n(..@s"..8..@s.WR..U.]-&.....~h[^_.....]..@... .SR..(R.;-&.j.UV......D$0j@...j.U.L$< ..Fh.....47&..l$<..$.......v.SUV.\........... ...t

<<< skipped >>>

GET /updater/version.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 17 Dec 2015 09:51:22 GMT

Content-Type: text/html

Content-Length: 206

Connection: close

<html>..<head><title>503 Service Temporarily Unavailable</title></head>..<body bgcolor="white">..<center><h1>503 Service Temporarily Unavailable</h1></center>..<hr><center>nginx</center>..</body>..</html>....

GET /tasks/shortcuts.mrdj?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=9&elapsed_time=12&mr_service=0 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:28 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10105

d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0<>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%................................................................................................................................v{?0.:9876543210/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.>; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L...............................................................................................................................l<'<@.9876543210/.-, *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgfedcba`_\4...5.......!.......KRG=oDCBA@.....................................j....d1...a/....z.....t........n....S....d...........................................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]hW..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONMLKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x................................................'C...#t...<l....7X....1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;....!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......................Y=...U....n>....i.....c.......{....w ...q.............................................."D...<i...9g....2_BlFy..DDK8wOr..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@.....................................................................................

<<< skipped >>>

GET /amigo/version2.xml?masterid={DC0F7857-8F37-4EBA-968C-3CDAEEDB3EAB}&user_id={94BEB72B-A4D3-4E99-96AD-D6CACF548C98}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.23.0.220&tool=mrupdater&guid={406E11F4-A2B2-4F24-8791-F73BBB70095A}&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0 HTTP/1.1

User-Agent: MailRuUpdater

Host: binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 17 Dec 2015 09:51:16 GMT

Content-Type: text/xml; charset=utf-8

Connection: close

Content-Length: 282

<?xml version="1.0" encoding="utf-8" ?>.<xml>.<product_name>Amigo</product_name>.<version>32.0.1725.115</version>.<fetch_url>hXXp://amigo.cdnmail.ru/amigo_setup.exe</fetch_url>.<md5>116046f0563f48b6e6cf012b6cff3d75</md5>.<cmd_line>.--silent --launch --tray-launch.</cmd_line>.</xml>..

Map

The SpyTool connects to the servers at the folowing location(s):

Strings from Dumps

MailRuUpdater.exe_296:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

SHA256 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

.EKSWU

.EKSWU

DlSHA512 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

FtPS

FtPS

FTPG

FTPG

FTPj

FTPj

6-9'6-9'

6-9'6-9'

$6.:$6.:

$6.:$6.:

*?#1*?#1

*?#1*?#1

>8$4,8$4,

>8$4,8$4,

AES for x86, CRYPTOGAMS by

AES for x86, CRYPTOGAMS by

|$@3|$

|$@3|$

Camellia for x86 by

Camellia for x86 by

RC4 for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

j.hpb

j.hpb

w%s(

w%s(

Wh@%S

Wh@%S

8%u(j

8%u(j

gj.hD

gj.hD

FTPj

FTPj

F\ FTP

F\ FTP

>

>

t.Jx

t.Jx

;*u%C

;*u%C

j.Yf;

j.Yf;

_tcPVj@

_tcPVj@

.PjRW

.PjRW

f;F.se

f;F.se

?sqliu

?sqliu

2 34 567

2 34 567

?%Y-%u

?%Y-%u

m-%du

m-%du

?%H:%u

?%H:%u

M:%Su

M:%Su

C:\Build\desktop_apps\SputnikLib/log_ng.h

C:\Build\desktop_apps\SputnikLib/log_ng.h

..\CommonFiles\antivirus\antivirus_core.cpp

..\CommonFiles\antivirus\antivirus_core.cpp

C:\Build\desktop_apps\CommonFiles/url_params_common.hpp

C:\Build\desktop_apps\CommonFiles/url_params_common.hpp

mailru::url_params::formalize_common_params

mailru::url_params::formalize_common_params

mailru::url_params::AddWinVerInfo

mailru::url_params::AddWinVerInfo

mailru::url_params::AddToolVer

mailru::url_params::AddToolVer

mailru::url_params::AddOtherProcessInfo

mailru::url_params::AddOtherProcessInfo

..\CommonFiles\audit\audit.cpp

..\CommonFiles\audit\audit.cpp

..\CommonFiles\audit\audit_browsers_manager.cpp

..\CommonFiles\audit\audit_browsers_manager.cpp

c:\build\desktop_apps\commonfiles\audit\audit_browsers_manager.h

c:\build\desktop_apps\commonfiles\audit\audit_browsers_manager.h

ReportTime

ReportTime

..\CommonFiles\audit\audit_browser_settings.cpp

..\CommonFiles\audit\audit_browser_settings.cpp

mailru::AuditBrowserSettings::MakeReport

mailru::AuditBrowserSettings::MakeReport

) report successfully done

) report successfully done

Make report failed

Make report failed

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CheckReport

mailru::AuditBrowserSettings::CheckReport

error report structer

error report structer

..\CommonFiles\audit\audit_google_chrome.cpp

..\CommonFiles\audit\audit_google_chrome.cpp

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

:Incorrect key length

:Incorrect key length

RegCreateKeyTransactedW

RegCreateKeyTransactedW

C:\Build\desktop_apps\SputnikLib/reg_key.hpp

C:\Build\desktop_apps\SputnikLib/reg_key.hpp

..\CommonFiles\chrome_safe_browsing.cpp

..\CommonFiles\chrome_safe_browsing.cpp

mailru::chromium::ChromeSafeBrowsing::CleanUpExtensionDataBase

mailru::chromium::ChromeSafeBrowsing::CleanUpExtensionDataBase

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

Unable to read chrome blocklist

Unable to read chrome blocklist

Chrome blocklist file is not valid

Chrome blocklist file is not valid

chrome blocklist contains unsupported elements

chrome blocklist contains unsupported elements

shard_header.add_prefix_count > kMaxAddSubChunksCount

shard_header.add_prefix_count > kMaxAddSubChunksCount

mailru::chromium::ChromeSafeBrowsing::WriteSafeBrowsingFile

mailru::chromium::ChromeSafeBrowsing::WriteSafeBrowsingFile

startup_urls

startup_urls

urls_to_restore_on_startup

urls_to_restore_on_startup

..\commonfiles\chromiums.cpp

..\commonfiles\chromiums.cpp

Chrome

Chrome

C:\Build\desktop_apps\CommonFiles/sql_lite_bind.hpp

C:\Build\desktop_apps\CommonFiles/sql_lite_bind.hpp

mailru::sqlite_bind::column_blob

mailru::sqlite_bind::column_blob

mailru::sqlite_bind::column_byte_length

mailru::sqlite_bind::column_byte_length

RegOpenKeyTransactedW

RegOpenKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyTransactedW

KERNEL32.DLL

KERNEL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

%%%%-%%%%-%%%%-%%%%

%%%%-%%%%-%%%%-%%%%

mailru::sqlite_bind::column_string

mailru::sqlite_bind::column_string

..\CommonFiles\chromium_settings.cpp

..\CommonFiles\chromium_settings.cpp

hXXp://mail.ru

hXXp://mail.ru

hXXp://VVV.mail.ru

hXXp://VVV.mail.ru

browser.show_home_button

browser.show_home_button

session.restore_on_startup

session.restore_on_startup

yandex\.ru. clid

yandex\.ru. clid

mailru::chromium::settings::search_url

mailru::chromium::settings::search_url

chrome_settings_overrides

chrome_settings_overrides

search_url

search_url

template_url_data

template_url_data

mailru::chromium::settings::search_url_without_extensions

mailru::chromium::settings::search_url_without_extensions

suggestions_url

suggestions_url

suggestions_url_post_params

suggestions_url_post_params

windows-1251

windows-1251

keyword

keyword

mail.ru

mail.ru

D15371FE-C188-4E99-9841-A91F3BCBCCC3

D15371FE-C188-4E99-9841-A91F3BCBCCC3

search_terms_replacement_key

search_terms_replacement_key

search_url_post_params

search_url_post_params

favicon_url

favicon_url

hXXp://go.mail.ru/favicon.ico

hXXp://go.mail.ru/favicon.ico

image_url

image_url

image_url_post_params

image_url_post_params

instant_url

instant_url

instant_url_post_params

instant_url_post_params

originating_url

originating_url

alternate_urls

alternate_urls

default_search_provider_data.template_url_data

default_search_provider_data.template_url_data

suggest_url

suggest_url

default_search_provider.name

default_search_provider.name

default_search_provider.search_url

default_search_provider.search_url

go.mail.ru

go.mail.ru

keystore_encryption_bootstrap_token

keystore_encryption_bootstrap_token

chrome_url_overrides

chrome_url_overrides

chrome-extension://

chrome-extension://

extensions.settings.

extensions.settings.

hXXp://mail.ru/cnt/9824

hXXp://mail.ru/cnt/9824

mail.ru

mail.ru

mailru::chromium::settings::url_from_ext_id

mailru::chromium::settings::url_from_ext_id

extensions.known_disabled

extensions.known_disabled

update_url

update_url

runtime.onStartup

runtime.onStartup

.enabled

.enabled

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg?

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg?

check_policy.amg not loaded

check_policy.amg not loaded

check_policy.amg NOT decoded

check_policy.amg NOT decoded

check_policy.amg NOT parsed

check_policy.amg NOT parsed

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

hXXp://VVV.mail.ru/cnt/7861

hXXp://VVV.mail.ru/cnt/7861

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://mail.ru/cnt/10445

hXXp://mail.ru/cnt/10445

hXXp://VVV.mail.ru/

hXXp://VVV.mail.ru/

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://VVV.mail.ru/cnt/5090

hXXp://VVV.mail.ru/cnt/5090

hXXp://go.mail.ru/search?q=%s&fr=ntg

hXXp://go.mail.ru/search?q=%s&fr=ntg

@mail.ru

@mail.ru

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_video.ico

hXXp://go.mail.ru/favicon_video.ico

hXXp://VVV.mail.ru/cnt/5091

hXXp://VVV.mail.ru/cnt/5091

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg

hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://mail.ru/cnt/10226

hXXp://mail.ru/cnt/10226

hXXp://go.mail.ru/?pin=1

hXXp://go.mail.ru/?pin=1

mailru::default_browser::find_executable

mailru::default_browser::find_executable

..\CommonFiles\default_browser.cpp

..\CommonFiles\default_browser.cpp

C:\Build\desktop_apps\SputnikLib/com_scope.h

C:\Build\desktop_apps\SputnikLib/com_scope.h

..\CommonFiles\enemy_soft_checker.cpp

..\CommonFiles\enemy_soft_checker.cpp

..\commonfiles\file_util.cpp

..\commonfiles\file_util.cpp

..\CommonFiles\firefox_extension_patcher.cpp

..\CommonFiles\firefox_extension_patcher.cpp

mailru::FirefoxExtensionPatcher::Install

mailru::FirefoxExtensionPatcher::Install

mailru::FirefoxExtensionPatcher::PatchExtensionJson

mailru::FirefoxExtensionPatcher::PatchExtensionJson

updateURL

updateURL

iconURL

iconURL

mailru::FirefoxExtensionPatcher::Enable

mailru::FirefoxExtensionPatcher::Enable

mailru::FirefoxExtensionPatcher::PatchFileTime

mailru::FirefoxExtensionPatcher::PatchFileTime

mailru::FirefoxExtensionPatcher::InstallFromUrl

mailru::FirefoxExtensionPatcher::InstallFromUrl

C:\Build\desktop_apps\3party\ticpp/ticpp.h

C:\Build\desktop_apps\3party\ticpp/ticpp.h

..\CommonFiles\firefox_settings.cpp

..\CommonFiles\firefox_settings.cpp

mailru::firefox::settings::~settings

mailru::firefox::settings::~settings

browser.startup.page

browser.startup.page

browser.startup.homepage

browser.startup.homepage

Profile%d

Profile%d

hXXp://go.mail.ru

hXXp://go.mail.ru

@Mail.Ru

@Mail.Ru

browser.search.selectedEngine

browser.search.selectedEngine

browser.search.defaultenginename

browser.search.defaultenginename

browser.search.defaulturl

browser.search.defaulturl

keyword.URL

keyword.URL

extensions.enabledAddons

extensions.enabledAddons

mailru::firefox::settings::is_yandex_elements_intsalled

mailru::firefox::settings::is_yandex_elements_intsalled

yasearch@yandex.ru

yasearch@yandex.ru

browser.search.suggest.enabled

browser.search.suggest.enabled

browser.search.useDBForOrder

browser.search.useDBForOrder

Firefox

Firefox

..\CommonFiles\gpo_manager.cpp

..\CommonFiles\gpo_manager.cpp

GetRegistryKey for machine failed

GetRegistryKey for machine failed

GetRegistryKey for user failed

GetRegistryKey for user failed

?mailru::sqlite_bind::column_int64

?mailru::sqlite_bind::column_int64

..\CommonFiles\ie_extension_patcher.cpp

..\CommonFiles\ie_extension_patcher.cpp

mailru::IEExtensionPatcher::InstallFromUrl

mailru::IEExtensionPatcher::InstallFromUrl

..\CommonFiles\ie_settings.cpp

..\CommonFiles\ie_settings.cpp

..\CommonFiles\Install_stat.cpp

..\CommonFiles\Install_stat.cpp

..\CommonFiles\product_installation_manager.cpp

..\CommonFiles\product_installation_manager.cpp

..\CommonFiles\shortcut_check.cpp

..\CommonFiles\shortcut_check.cpp

c:\build\desktop_apps\commonfiles\tasks\TaskShortcuts.h

c:\build\desktop_apps\commonfiles\tasks\TaskShortcuts.h

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

mailru::RemoteTasksExecuter::Stop

mailru::RemoteTasksExecuter::Stop

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::FetchTasks

mailru::RemoteTasksExecuter::FetchTasks

..\CommonFiles\Tasks\TaskChromiumRoutinePatcher.cpp

..\CommonFiles\Tasks\TaskChromiumRoutinePatcher.cpp

google chrome sync_enabled

google chrome sync_enabled

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruExtensions.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruExtensions.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedVisualBookmarks.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedVisualBookmarks.cpp

ChromeVbmId

ChromeVbmId

ChromeVbmArchive

ChromeVbmArchive

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

cmd_line =

cmd_line =

14000000000000000

14000000000000000

..\CommonFiles\Tasks\TaskPreventSRT.cpp

..\CommonFiles\Tasks\TaskPreventSRT.cpp

mailru::TaskPreventSRT::SendReporterMetric

mailru::TaskPreventSRT::SendReporterMetric

software_reporter

software_reporter

ReporterLogPattern

ReporterLogPattern

..\CommonFiles\Tasks\TaskPeriodicRestoreMailExtensions.cpp

..\CommonFiles\Tasks\TaskPeriodicRestoreMailExtensions.cpp

..\CommonFiles\Tasks\TaskPropUpMailExtensions.cpp

..\CommonFiles\Tasks\TaskPropUpMailExtensions.cpp

ERROR: chrome_value is empty

ERROR: chrome_value is empty

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRestoreMailVisualBookmarks.cpp

..\CommonFiles\Tasks\TaskRestoreMailVisualBookmarks.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

ProceedGoogleChrome patch prepared

ProceedGoogleChrome patch prepared

ProceedGoogleChrome start patching

ProceedGoogleChrome start patching

google_chrome object constructed

google_chrome object constructed

Google Chrome settings are synced

Google Chrome settings are synced

Google Chrome extensions are synced

Google Chrome extensions are synced

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

ProceedGoogleChrome patch_util.set_was_patch(true);

ProceedGoogleChrome patch_util.set_was_patch(true);

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::ProceedFirefox

mailru::TaskStartGroupBlackList::ProceedFirefox

ProceedFirefox is running

ProceedFirefox is running

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed

TaskStartGroupBlackList::ProceedGoogleChrome failed

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

..\CommonFiles\Tasks\TaskYandexHomepageDistribRemove.cpp

..\CommonFiles\Tasks\TaskYandexHomepageDistribRemove.cpp

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\Tasks\task_checksum_verify.cpp

..\CommonFiles\Tasks\task_checksum_verify.cpp

..\CommonFiles\Tasks\task_monitor_user_process.cpp

..\CommonFiles\Tasks\task_monitor_user_process.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

mailru::TaskUserPreferences::AnalyzeFirefox

mailru::TaskUserPreferences::AnalyzeFirefox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

..\CommonFiles\yandex_elements.cpp

..\CommonFiles\yandex_elements.cpp

mailru::YandexElements::IsSmartBarBlockingSearch

mailru::YandexElements::IsSmartBarBlockingSearch

mailru::YandexElements::DisableSmartBar

mailru::YandexElements::DisableSmartBar

mailru::YandexElements::ReadStateConfig

mailru::YandexElements::ReadStateConfig

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &) const

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &) const

mailru::YandexElements::FindSettingInStateConfig

mailru::YandexElements::FindSettingInStateConfig

browser.uiCustomization.state

browser.uiCustomization.state

mailru::YandexElements::RestoreOriginalSearchBox

mailru::YandexElements::RestoreOriginalSearchBox

guid_manager.cpp

guid_manager.cpp

installer.cpp

installer.cpp

mailru::reg_keyT::check

mailru::reg_keyT::check

mailru::reg_keyT::throw_on_error

mailru::reg_keyT::throw_on_error

main.cpp

main.cpp

Started with cmd line

Started with cmd line

c:\build\desktop_apps\mailruupdater\concrete_update_task.hpp

c:\build\desktop_apps\mailruupdater\concrete_update_task.hpp

self_update_task.cpp

self_update_task.cpp

SendBrowsersStatistic.cpp

SendBrowsersStatistic.cpp

c:\build\desktop_apps\mailruupdater\SendBrowsersStatistic.h

c:\build\desktop_apps\mailruupdater\SendBrowsersStatistic.h

updater::SendBrowsersStastic::BrowserData::getDSEurl

updater::SendBrowsersStastic::BrowserData::getDSEurl

updater::SendBrowsersStastic::BrowserData::getDSEurl

updater::SendBrowsersStastic::BrowserData::getDSEurl

updater::SendBrowsersStastic::BrowserData::getDSEurl

updater::SendBrowsersStastic::BrowserData::getDSEurl

service.cpp

service.cpp

asio.misc

asio.misc

asio.misc error

asio.misc error

C:\Build\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

C:\Build\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

update_info.cpp

update_info.cpp

fetch_url

fetch_url

Program fetch url

Program fetch url

md5 fetch url

md5 fetch url

cmd_line

cmd_line

util.cpp

util.cpp

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

ssl_sess_cert

ssl_sess_cert

ssl_cert

ssl_cert

evp_pkey

evp_pkey

x509_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

RSA part of OpenSSL 1.0.0g 18 Jan 2012

RSA part of OpenSSL 1.0.0g 18 Jan 2012

supportedAlgorithms

supportedAlgorithms

crossCertificatePair

crossCertificatePair

certificateRevocationList

certificateRevocationList

cACertificate

cACertificate

userCertificate

userCertificate

userPassword

userPassword

supportedApplicationContext

supportedApplicationContext

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines

error:lX:%s:%s:%s

error:lX:%s:%s:%s

Stack part of OpenSSL 1.0.0g 18 Jan 2012

Stack part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

lhash part of OpenSSL 1.0.0g 18 Jan 2012

lhash part of OpenSSL 1.0.0g 18 Jan 2012

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

hexkey

hexkey

rsa_keygen_pubexp

rsa_keygen_pubexp

rsa_keygen_bits

rsa_keygen_bits

RAND part of OpenSSL 1.0.0g 18 Jan 2012

RAND part of OpenSSL 1.0.0g 18 Jan 2012

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

keylen

keylen

EVP_CIPHER_key_length(cipher)

EVP_CIPHER_key_length(cipher)

%d.%d.%d.%d

%d.%d.%d.%d

EC part of OpenSSL 1.0.0g 18 Jan 2012

EC part of OpenSSL 1.0.0g 18 Jan 2012

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0g 18 Jan 2012

DSA part of OpenSSL 1.0.0g 18 Jan 2012

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

value.single

value.single

value.set

value.set

USER32.DLL

USER32.DLL

NETAPI32.DLL

NETAPI32.DLL

ADVAPI32.DLL

ADVAPI32.DLL

keylength

keylength

keyfunc

keyfunc

EVP part of OpenSSL 1.0.0g 18 Jan 2012

EVP part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\pkcs12\p12_key.c

.\crypto\pkcs12\p12_key.c

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

priv_key

priv_key

pub_key

pub_key

%'%1$=%C%K%O%s%

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

C%C'C3C7C9COCWCiC

%s: (%d bit)

%s: (%d bit)

Public-Key

Public-Key

Private-Key

Private-Key

recommended-private-length: %d bits

recommended-private-length: %d bits

public-key:

public-key:

private-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Public-Key: (%d bit)

Private-Key: (%d bit)

Private-Key: (%d bit)

IP Address:%d.%d.%d.%d

IP Address:%d.%d.%d.%d

URI:%s

URI:%s

DNS:%s

DNS:%s

email:%s

email:%s

EdiPartyName:

EdiPartyName:

X400Name:

X400Name:

othername:

othername:

/usr/local/ssl/certs

/usr/local/ssl/certs

/usr/local/ssl/cert.pem

/usr/local/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_DIR

SSL_CERT_FILE

SSL_CERT_FILE

CONF part of OpenSSL 1.0.0g 18 Jan 2012

CONF part of OpenSSL 1.0.0g 18 Jan 2012

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

name.relativename

name.relativename

name.fullname

name.fullname

certificateHold

certificateHold

Certificate Hold

Certificate Hold

cessationOfOperation

cessationOfOperation

Cessation Of Operation

Cessation Of Operation

keyCompromise

keyCompromise

Key Compromise

Key Compromise

%*s%s:

%*s%s:

%*sOnly Attribute Certificates

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%*sOnly User Certificates

%d.%d.%d.%d/%d.%d.%d.%d

%d.%d.%d.%d/%d.%d.%d.%d

%*sPolicy Text: %s

%*sPolicy Text: %s

%*scrlUrl:

%*scrlUrl:

EXTENDED_KEY_USAGE

EXTENDED_KEY_USAGE

%*sZone: %s, User:

%*sZone: %s, User:

keyid

keyid

.\crypto\x509v3\v3_akey.c

.\crypto\x509v3\v3_akey.c

d.usernotice

d.usernotice

d.cpsuri

d.cpsuri

d.other

d.other

CERTIFICATEPOLICIES

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sExplicit Text: %s

%*sNumber%s:

%*sNumber%s:

%*sOrganization: %s

%*sOrganization: %s

%*sCPS: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

PKEY_USAGE_PERIOD

keyCertSign

keyCertSign

Certificate Sign

Certificate Sign

keyAgreement

keyAgreement

Key Agreement

Key Agreement

keyEncipherment

keyEncipherment

Key Encipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_skey.c

pubkey

pubkey

EC_PRIVATEKEY

EC_PRIVATEKEY

publicKey

publicKey

privateKey

privateKey

value.implicitlyCA

value.implicitlyCA

value.parameters

value.parameters

value.named_curve

value.named_curve

p.char_two

p.char_two

p.prime

p.prime

p.ppBasis

p.ppBasis

p.tpBasis

p.tpBasis

p.onBasis

p.onBasis

p.other

p.other

PKCS8_PRIV_KEY_INFO

PKCS8_PRIV_KEY_INFO

pkey

pkey

pkeyalg

pkeyalg

x%s

x%s

Basis Type: %s

Basis Type: %s

Field Type: %s

Field Type: %s

ASN1 OID: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%s %s%lu (%s0x%lx)

value.bag

value.bag

value.safes

value.safes

value.shkeybag

value.shkeybag

value.keybag

value.keybag

value.sdsicert

value.sdsicert

value.x509cert

value.x509cert

value.other

value.other

cert_info

cert_info

\X

\X

'() ,-./:=?

'() ,-./:=?

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

[[%s]]

[[%s]]

[%s] %s=%s

[%s] %s=%s

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

certs

certs

%s - d:d:d%.*s %d%s

%s - d:d:d%.*s %d%s

AUTHORITY_KEYID

AUTHORITY_KEYID

enc_key

enc_key

key_enc_algor

key_enc_algor

cert

cert

d.encrypted

d.encrypted

d.digest

d.digest

d.signed_and_enveloped

d.signed_and_enveloped

d.enveloped

d.enveloped

d.sign

d.sign

d.data

d.data

.\crypto\evp\evp_pkey.c

.\crypto\evp\evp_pkey.c

d.receiptList

d.receiptList

d.allOrFirstTier

d.allOrFirstTier

d.compressedData

d.compressedData

d.authenticatedData

d.authenticatedData

d.encryptedData

d.encryptedData

d.digestedData

d.digestedData

d.envelopedData

d.envelopedData

d.signedData

d.signedData

d.ori

d.ori

d.pwri

d.pwri

d.kekri

d.kekri

d.kari

d.kari

d.ktri

d.ktri

CMS_PasswordRecipientInfo

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyDerivationAlgorithm

keyIdentifier

keyIdentifier

CMS_KeyAgreeRecipientInfo

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

CMS_OriginatorIdentifierOrKey

d.originatorKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

CMS_OtherKeyAttribute

keyAttr

keyAttr

keyAttrId

keyAttrId

CMS_KeyTransRecipientInfo

CMS_KeyTransRecipientInfo

encryptedKey

encryptedKey

keyEncryptionAlgorithm

keyEncryptionAlgorithm

certificates

certificates

d.crl

d.crl

d.subjectKeyIdentifier

d.subjectKeyIdentifier

d.issuerAndSerialNumber

d.issuerAndSerialNumber

CMS_CertificateChoices

CMS_CertificateChoices

d.v2AttrCert

d.v2AttrCert

d.v1AttrCert

d.v1AttrCert

d.extendedCertificate

d.extendedCertificate

d.certificate

d.certificate

CMS_OtherCertificateFormat

CMS_OtherCertificateFormat

otherCert

otherCert

otherCertFormat

otherCertFormat

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

OPENSSL_ALLOW_PROXY_CERTS

OPENSSL_ALLOW_PROXY_CERTS

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

%s.dll

%s.dll

%lu:%s:%s:%d:%s

%lu:%s:%s:%d:%s

ddddddZ

ddddddZ

ddddddZ

ddddddZ

PEM part of OpenSSL 1.0.0g 18 Jan 2012

PEM part of OpenSSL 1.0.0g 18 Jan 2012

phrase is too short, needs to be at least %d chars

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

Enter PEM pass phrase:

TRUSTED CERTIFICATE

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

CERTIFICATE

X509 CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

.\crypto\evp\evp_key.c

nkey

nkey

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Verifying - %s

Verifying - %s

D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp

D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp

D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp

img.dims

img.dims

corrsize.height

corrsize.height

(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims()

(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims()

_img.size().height

_img.size().height

D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp

D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp

D:\Libs\opencv\sources\modules\core\src\alloc.cpp

D:\Libs\opencv\sources\modules\core\src\alloc.cpp

D:\Libs\opencv\sources\modules\core\src\matrix.cpp

D:\Libs\opencv\sources\modules\core\src\matrix.cpp

m.dims >= 2

m.dims >= 2

0

0

0

0

m.dims

m.dims

0

0

r == Range::all() || (0

r == Range::all() || (0

COI is not supported by the function

COI is not supported by the function

0

0

0

0

Unknown/unsupported array type

Unknown/unsupported array type

i

i

(size_t)i

(size_t)i

!fixedSize() || ((Mat*)obj)->size.operator()() == _sz

!fixedSize() || ((Mat*)obj)->size.operator()() == _sz

!fixedSize() || ((UMat*)obj)->size.operator()() == _sz

!fixedSize() || ((UMat*)obj)->size.operator()() == _sz

!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)

CV_MAT_TYPE(mtype) == m.type()

CV_MAT_TYPE(mtype) == m.type()

m.dims == d

m.dims == d

m.size[j] == sizes[j]

m.size[j] == sizes[j]

d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))

d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))

!fixedSize() || len == vv.size()

!fixedSize() || len == vv.size()

Vectors with element size %d are not supported. Please, modify OutputArray::create()

Vectors with element size %d are not supported. Please, modify OutputArray::create()

v[j].empty()

v[j].empty()

i

i

checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)

checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)

_m.dims()

_m.dims()

_src.dims()

_src.dims()

src.size() == dst.size() && (src.cols == 1 || src.rows == 1)

src.size() == dst.size() && (src.cols == 1 || src.rows == 1)

dst.cols == dst.rows

dst.cols == dst.rows

m.dims

m.dims

_src.dims()

_src.dims()

A.size == arrays[i0]->size

A.size == arrays[i0]->size

A.step[d-1] == A.elemSize()

A.step[d-1] == A.elemSize()

%s:%d: error: (%d) %s in function %s

%s:%d: error: (%d) %s in function %s

%s:%d: error: (%d) %s

%s:%d: error: (%d) %s

OpenCV Error: %s (%s) in %s, file %s, line %d

OpenCV Error: %s (%s) in %s, file %s, line %d

Inplace operation is not supported

Inplace operation is not supported

Input image depth is not supported by function

Input image depth is not supported by function

Unsupported format or combination of formats

Unsupported format or combination of formats

Input COI is not supported

Input COI is not supported

No CUDA support

No CUDA support

No OpenGL support

No OpenGL support

Unknown %s code %d

Unknown %s code %d

D:\Libs\opencv\sources\modules\core\src\system.cpp

D:\Libs\opencv\sources\modules\core\src\system.cpp

tlsKey != TLS_OUT_OF_INDEXES

tlsKey != TLS_OUT_OF_INDEXES

cv::TLSContainerStorage::releaseKey

cv::TLSContainerStorage::releaseKey

key_ >= 0

key_ >= 0

D:\Libs\opencv\sources\modules\core\src\convert.cpp

D:\Libs\opencv\sources\modules\core\src\convert.cpp

j

j

i1 >= 0 && j

i1 >= 0 && j

D:\Libs\opencv\sources\modules\core\src\copy.cpp

D:\Libs\opencv\sources\modules\core\src\copy.cpp

mask.depth() == CV_8U && (mcn == 1 || mcn == cn)

mask.depth() == CV_8U && (mcn == 1 || mcn == cn)

size() == mask.size()

size() == mask.size()

checkScalar(value, type(), _value.kind(), _InputArray::MAT )

checkScalar(value, type(), _value.kind(), _InputArray::MAT )

mask.empty() || (mask.type() == CV_8U && size == mask.size)

mask.empty() || (mask.type() == CV_8U && size == mask.size)

Unknown/unsupported border type

Unknown/unsupported border type

src.depth() == dst.depth() && src.size == dst.size

src.depth() == dst.depth() && src.size == dst.size

(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)

(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)

src.channels() == dst.channels()

src.channels() == dst.channels()

D:\Libs\opencv\sources\modules\core\src\matop.cpp

D:\Libs\opencv\sources\modules\core\src\matop.cpp

CV_MAT_CN(_type) == e.a.channels()

CV_MAT_CN(_type) == e.a.channels()

Unknown operation

Unknown operation

D:\Libs\opencv\sources\modules\core\src\arithm.cpp

D:\Libs\opencv\sources\modules\core\src\arithm.cpp

The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'

The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'

(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)

(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'

The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'

type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)

type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)

(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)

(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'

The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'

D:\Libs\opencv\sources\modules\core\src\stat.cpp

D:\Libs\opencv\sources\modules\core\src\stat.cpp

mask.empty() || mask.type() == CV_8U

mask.empty() || mask.type() == CV_8U

mask.empty() || mask.type() == CV_8UC1

mask.empty() || mask.type() == CV_8UC1

dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn

dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn

D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp

D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp

!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp

!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp

type == srcB.type() && srcA.size() == srcB.size()

type == srcB.type() && srcA.size() == srcB.size()

D:\Libs\opencv\sources\modules\core\src\umatrix.cpp

D:\Libs\opencv\sources\modules\core\src\umatrix.cpp

D:\Libs\opencv\sources\modules\core\src\array.cpp

D:\Libs\opencv\sources\modules\core\src\array.cpp

_dst.data == data0

_dst.data == data0

NULL array pointer is passed

NULL array pointer is passed

Unrecognized or unsupported array type

Unrecognized or unsupported array type

unrecognized or unsupported array type

unrecognized or unsupported array type

Only continuous nD arrays are supported here

Only continuous nD arrays are supported here

Unsupported format

Unsupported format

rect.width >= 0 && rect.height >= 0 && rect.x width && rect.y height && rect.x rect.width >= (int)(rect.width > 0) && rect.y rect.height >= (int)(rect.height > 0)

rect.width >= 0 && rect.height >= 0 && rect.x width && rect.y height && rect.x rect.width >= (int)(rect.width > 0) && rect.y rect.height >= (int)(rect.height > 0)

D:\Libs\opencv\sources\modules\core\src\datastructs.cpp

D:\Libs\opencv\sources\modules\core\src\datastructs.cpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp

The library is compiled without CUDA support

The library is compiled without CUDA support

D:\Libs\opencv\sources\modules\core\src\opengl.cpp

D:\Libs\opencv\sources\modules\core\src\opengl.cpp

The library is compiled without OpenGL support

The library is compiled without OpenGL support

OpenCL.dll

OpenCL.dll

D:\Libs\opencv\sources\modules\core\src\matmul.cpp

D:\Libs\opencv\sources\modules\core\src\matmul.cpp

type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)

type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)

a_size.width == len

a_size.width == len

a_size.height == len

a_size.height == len

C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))

C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))

type == _src2.type()

type == _src2.type()

src1.size == src2.size

src1.size == src2.size

src.channels() == 1

src.channels() == 1

delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)

delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)

D:\Libs\opencv\sources\modules\core\src\lapack.cpp

D:\Libs\opencv\sources\modules\core\src\lapack.cpp

type == _src2.type() && (type == CV_32F || type == CV_64F)

type == _src2.type() && (type == CV_32F || type == CV_64F)

(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols

(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols

src.rows == src.cols

src.rows == src.cols

w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data

w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data

u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))

u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))

rhs.data == 0 || (rhs.type() == type && rhs.rows == m)

rhs.data == 0 || (rhs.type() == type && rhs.rows == m)

D:\Libs\opencv\sources\modules\core\src\persistence.cpp

D:\Libs\opencv\sources\modules\core\src\persistence.cpp

-.Inf

-.Inf

An attempt to add element without a key to a map, or add element with key to sequence

An attempt to add element without a key to a map, or add element with key to sequence

The key is an empty

The key is an empty

The key is too long

The key is too long

Key must start with a letter or _

Key must start with a letter or _

Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '

Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '

Key should start with a letter or _

Key should start with a letter or _

Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'

Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'

elements with keys can not be written to sequence

elements with keys can not be written to sequence

Images with planar data layout are not supported

Images with planar data layout are not supported

2if%s

2if%s

ß%s

ß%s

function not supported

function not supported

operation canceled

operation canceled

address_family_not_supported

address_family_not_supported

operation_in_progress

operation_in_progress

operation_not_supported

operation_not_supported

protocol_not_supported

protocol_not_supported

operation_would_block

operation_would_block

address family not supported

address family not supported

broken pipe

broken pipe

inappropriate io control operation

inappropriate io control operation

not supported

not supported

operation in progress

operation in progress

operation not permitted

operation not permitted

operation not supported

operation not supported

operation would block

operation would block

protocol not supported

protocol not supported

0123456789-

0123456789-

%b %d %H : %M : %S %Y

%b %d %H : %M : %S %Y

%m / %d / %y

%m / %d / %y

%I : %M : %S %p

%I : %M : %S %p

%d / %m / %y

%d / %m / %y

The repeat operator "*" cannot start a regular expression.

The repeat operator "*" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

Found a closing repetition operator } with no corresponding {.

Found a closing repetition operator } with no corresponding {.

Can't terminate a sub-expression with an alternation operator |.

Can't terminate a sub-expression with an alternation operator |.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

A regular expression can start with the alternation operator |.

A regular expression can start with the alternation operator |.

Invalid alternation operators within (?...) block.

Invalid alternation operators within (?...) block.

More than one alternation operator | was encountered inside a conditional expression.

More than one alternation operator | was encountered inside a conditional expression.

Alternation operators are not allowed inside a DEFINE block.

Alternation operators are not allowed inside a DEFINE block.

A repetition operator cannot be applied to a zero-width assertion.

A repetition operator cannot be applied to a zero-width assertion.

left-curly-bracket

left-curly-bracket

right-curly-bracket

right-curly-bracket

0123456789

0123456789

Unmatched quantified repeat operator { or \{.

Unmatched quantified repeat operator { or \{.

Invalid preceding regular expression prior to repetition operator.

Invalid preceding regular expression prior to repetition operator.

kernel32.dll

kernel32.dll

boost::filesystem::directory_iterator::operator

boost::filesystem::directory_iterator::operator

boost thread: trying joining itself

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

libs\log\src\code_conversion.cpp

libs\log\src\code_conversion.cpp

libs\log\src\global_logger_storage.cpp

libs\log\src\global_logger_storage.cpp

[u-u-u u:u:u.u] [%s] %s %s

[u-u-u u:u:u.u] [%s] %s %s

[u-u-u u:u:u.u] [%s] %s %ls

[u-u-u u:u:u.u] [%s] %s %ls

libs\log\src\attribute_name.cpp

libs\log\src\attribute_name.cpp

libs\log\src\thread_specific.cpp

libs\log\src\thread_specific.cpp

Line %d, Column %d

Line %d, Column %d

remote_config.cpp

remote_config.cpp

Path.cpp

Path.cpp

%Y-%m-%d %H:%M:%S

%Y-%m-%d %H:%M:%S

en_US.UTF-8

en_US.UTF-8

log_ng.cpp

log_ng.cpp

mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger

mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger

AccountInfo.cpp

AccountInfo.cpp

filesystem_utils.cpp

filesystem_utils.cpp

system\windows_services.cpp

system\windows_services.cpp

mailru::windows_services::StopService

mailru::windows_services::StopService

Resource.cpp

Resource.cpp

hXXp://

hXXp://

hXXps://

hXXps://

version_info.cpp

version_info.cpp

is_admin.cpp

is_admin.cpp

c:\build\desktop_apps\sputniklib\auto_handle.hpp

c:\build\desktop_apps\sputniklib\auto_handle.hpp

process_enumerate.cpp

process_enumerate.cpp

string.cpp

string.cpp

mailru::firefox_js_core::load_prefs_js

mailru::firefox_js_core::load_prefs_js

firefox_js.cpp

firefox_js.cpp

mailru::sqlite::database::database

mailru::sqlite::database::database

sqlite.cpp

sqlite.cpp

process_util.cpp

process_util.cpp

unzip.cpp

unzip.cpp

!"#$%&'(

!"#$%&'(

)* ,-./0123

)* ,-./0123

encryption.cpp

encryption.cpp

testing_env.cpp

testing_env.cpp

Suggest URL

Suggest URL

mailru::opera::searchini::save

mailru::opera::searchini::save

opera_searchini.cpp

opera_searchini.cpp

user_logon_watcher.cpp

user_logon_watcher.cpp

sync_objects.cpp

sync_objects.cpp

SessionsInfo.cpp

SessionsInfo.cpp

mailru::WaitForUserLogIn

mailru::WaitForUserLogIn

uninstall_manager.cpp

uninstall_manager.cpp

mailru::url_parser::init

mailru::url_parser::init

url_parser.cpp

url_parser.cpp

sqlite_reader.cpp

sqlite_reader.cpp

mailru::SqliteReader::SqliteReader

mailru::SqliteReader::SqliteReader

system_info\system_info_collector.cpp

system_info\system_info_collector.cpp

metrics\async_metric_scheduler.cpp

metrics\async_metric_scheduler.cpp

crash_handler.cpp

crash_handler.cpp

shortcut.cpp

shortcut.cpp

thread.entry_event

thread.entry_event

thread.exit_event

thread.exit_event

HTTP error:

HTTP error:

https

https

network\http_client_impl.cpp

network\http_client_impl.cpp

mailru::`anonymous-namespace'::ParseHttpDate

mailru::`anonymous-namespace'::ParseHttpDate

hXXp://any.url/

hXXp://any.url/

C:\Build\desktop_apps\3party\boost/network/protocol/http/client/connection/connection_delegate_factory.hpp

C:\Build\desktop_apps\3party\boost/network/protocol/http/client/connection/connection_delegate_factory.hpp

class boost::shared_ptr __cdecl boost::network::http::impl::connection_delegate_factory::new_connection_delegate(class boost::asio::io_service &,bool,bool,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,long)

class boost::shared_ptr __cdecl boost::network::http::impl::connection_delegate_factory::new_connection_delegate(class boost::asio::io_service &,bool,bool,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,class boost::optional,class std::allocator > >,long)

HTTPS not supported.

HTTPS not supported.

system_info\system_info.cpp

system_info\system_info.cpp

s-sputnik.mail.ru

s-sputnik.mail.ru

255.255.255.255

255.255.255.255

asio.ssl

asio.ssl

asio.ssl error

asio.ssl error

add_certificate_authority

add_certificate_authority

^HTTP/1.1 (\d ) (. )

^HTTP/1.1 (\d ) (. )

HTTP/1.1

HTTP/1.1

caching_policy.cpp

caching_policy.cpp

task_scheduler.cpp

task_scheduler.cpp

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

%S#[k

%S#[k

?#%X.y

?#%X.y

MaxPolicyElementKey

MaxPolicyElementKey

Operation not permitted

Operation not permitted

Inappropriate I/O control operation

Inappropriate I/O control operation

Broken pipe

Broken pipe

operator

operator

GetProcessWindowStation

GetProcessWindowStation

pExecutionResource

pExecutionResource

SQLite format 3

SQLite format 3

3.7.11

3.7.11

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

foreign_keys

foreign_keys

sqlite_rename_table

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_rename_parent

sqlite_rename_parent

sqlite_stat1

sqlite_stat1

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

RowKey

RowKey

sqlite_detach

sqlite_detach

sqlite_attach

sqlite_attach

sqlite_version

sqlite_version

sqlite_source_id

sqlite_source_id

sqlite_log

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_compileoption_get

sqlite_compileoption_get

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

OsError 0x%x (%u)

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

cannot limit WAL size: %s

invalid page number %d

invalid page number %d

2nd reference to page %d

2nd reference to page %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

failed to get page %d

failed to get page %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

Page %d:

Page %d:

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On tree page %d cell %d:

On page %d at right child:

On page %d at right child:

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Page %d is never used

Pointer map page %d is referenced

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ delete: %s

MJ delete: %s

MJ collide: %s

MJ collide: %s

-mjX9X

-mjX9X

foreign key constraint failed

foreign key constraint failed

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

abort at %d in [%s]: %s

abort at %d in [%s]: %s

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

sqlite_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

database table is locked: %s

database table is locked: %s

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open value of type %s

cannot open virtual table: %s

cannot open virtual table: %s

cannot open view: %s

cannot open view: %s

no such column: "%s"

no such column: "%s"

foreign key

foreign key

indexed

indexed

cannot open %s column for writing

cannot open %s column for writing

misuse of aliased aggregate %s

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s.%s

%s: %s.%s

%s: %s.%s

%s: %s

%s: %s

not authorized to use function: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

too many SQL variables

too many SQL variables

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

%s%.*s"%w"

%s%.*s"%w"

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

sqlite_

sqlite_

table %s may not be altered

table %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

view %s may not be altered

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_altertab_%s

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

invalid name: "%s"

too many attached databases - max %d

too many attached databases - max %d

database %s is already in use

database %s is already in use

unable to open database: %s

unable to open database: %s

no such database: %s

no such database: %s

cannot detach database %s

cannot detach database %s

database %s is locked

database %s is locked

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

there is already an index named %s

there is already an index named %s

too many columns on %s

too many columns on %s

duplicate column name: %s

duplicate column name: %s

default value of column [%s] is not constant

default value of column [%s] is not constant

table "%s" has more than one primary key

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

no such collation sequence: %s

CREATE %s %.*s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

sqlite_stat

table %s may not be dropped

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

indexed columns are not unique

indexed columns are not unique

table %s may not be indexed

table %s may not be indexed

views may not be indexed

views may not be indexed

virtual tables may not be indexed

virtual tables may not be indexed

there is already a table named %s

there is already a table named %s

index %s already exists

index %s already exists

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

table %s has no column named %s

table %s has no column named %s

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

a JOIN clause is required before %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

table %s may not be modified

table %s may not be modified

cannot modify %s because it is a view

cannot modify %s because it is a view

foreign key mismatch

foreign key mismatch

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

%d values for %d columns

%d values for %d columns

table %S has no column named %s

table %S has no column named %s

%s.%s may not be NULL

%s.%s may not be NULL

PRIMARY KEY must be unique

PRIMARY KEY must be unique

sqlite3_extension_init

sqlite3_extension_init

unable to open shared library [%s]

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

error during initialization: %s

automatic extension loading failed: %s

automatic extension loading failed: %s

foreign_key_list

foreign_key_list

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

unsupported file format

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s.%s

%s:%d

%s:%d

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

no such index: %s

sqlite_subquery_%p_

sqlite_subquery_%p_

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

no such trigger: %S

-- TRIGGER %s

-- TRIGGER %s

no such column: %s

no such column: %s

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s SUBQUERY %d

%s TABLE %s

%s TABLE %s

%s AS %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid=?)

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid>?)

%s (rowid>?)

%s (rowid)

%s (rowid)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

%s (~%lld rows)

at most %d tables in a join

at most %d tables in a join

cannot use index: %s

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

unable to close due to unfinished backup operation

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

%s mode not allowed: %s

%s mode not allowed: %s

no such vfs: %s

no such vfs: %s

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

c:\build\desktop_apps\3party\ticpp\ticpp.h

c:\build\desktop_apps\3party\ticpp\ticpp.h

ticpp.cpp

ticpp.cpp

Type is unsupported

Type is unsupported

X;

X;

%s>

%s>

%s="%s"

%s="%s"

%s='%s'

%s='%s'

version="%s"

version="%s"

encoding="%s"

encoding="%s"

standalone="%s"

standalone="%s"

type="%s"

type="%s"

href="%s"

href="%s"

unsupported version

unsupported version

.UTF-8

.UTF-8

.windows-

.windows-

windows1250

windows1250

windows1251

windows1251

windows1252

windows1252

windows1253

windows1253

windows1254

windows1254

windows1255

windows1255

windows1256

windows1256

windows1257

windows1257

windows874

windows874

windows932

windows932

windows936

windows936

Invalid or unsupported charset:

Invalid or unsupported charset:

1.2.5

1.2.5

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

inflate 1.2.5 Copyright 1995-2010 Mark Adler

inflate 1.2.5 Copyright 1995-2010 Mark Adler

RSA PRIVATE KEY

RSA PRIVATE KEY

PUBLIC KEY

PUBLIC KEY

DSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

EC PRIVATE KEY

NETSCAPE_CERT_SEQUENCE

NETSCAPE_CERT_SEQUENCE

RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012

RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012

SHA part of OpenSSL 1.0.0g 18 Jan 2012

SHA part of OpenSSL 1.0.0g 18 Jan 2012

MD4 part of OpenSSL 1.0.0g 18 Jan 2012

MD4 part of OpenSSL 1.0.0g 18 Jan 2012

CAST part of OpenSSL 1.0.0g 18 Jan 2012

CAST part of OpenSSL 1.0.0g 18 Jan 2012

Blowfish part of OpenSSL 1.0.0g 18 Jan 2012

Blowfish part of OpenSSL 1.0.0g 18 Jan 2012

:RC2 part of OpenSSL 1.0.0g 18 Jan 2012

:RC2 part of OpenSSL 1.0.0g 18 Jan 2012

.pp@0

.pp@0

aEÐ

aEÐ

(#EÚ

(#EÚ

ÚE

ÚE

IDEA part of OpenSSL 1.0.0g 18 Jan 2012

IDEA part of OpenSSL 1.0.0g 18 Jan 2012

libdes part of OpenSSL 1.0.0g 18 Jan 2012

libdes part of OpenSSL 1.0.0g 18 Jan 2012

DES part of OpenSSL 1.0.0g 18 Jan 2012

DES part of OpenSSL 1.0.0g 18 Jan 2012

3OpenSSL 1.0.0g 18 Jan 2012

3OpenSSL 1.0.0g 18 Jan 2012

GOST signature length is %d

GOST signature length is %d

.\ssl\ssl_cert.c

.\ssl\ssl_cert.c

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT56

EXPORT40

EXPORT40

EXPORT

EXPORT

wrong number of key bits

wrong number of key bits

unsupported status type

unsupported status type

unsupported ssl version

unsupported ssl version

unsupported protocol

unsupported protocol

unsupported elliptic curve

unsupported elliptic curve

unsupported digest type

unsupported digest type

unsupported compression algorithm

unsupported compression algorithm

unsupported cipher

unsupported cipher

unknown pkey type

unknown pkey type

unknown key exchange type

unknown key exchange type

unknown certificate type

unknown certificate type

unable to find public key parameters

unable to find public key parameters

unable to extract public key

unable to extract public key

unable to decode ecdh certs

unable to decode ecdh certs

unable to decode dh certs

unable to decode dh certs

tried to use unsupported cipher

tried to use unsupported cipher

tls peer did not respond with certificate list

tls peer did not respond with certificate list

tls client cert req with anon cipher

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 bad certificate hash value

tlsv1 alert export restriction

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert certificate expired

sslv3 alert bad certificate

sslv3 alert bad certificate

signature for non signing certificate

signature for non signing certificate

reuse cert type not zero

reuse cert type not zero

reuse cert length not zero

reuse cert length not zero

public key not rsa

public key not rsa

public key is not rsa

public key is not rsa

public key encrypt error

public key encrypt error

peer error unsupported certificate type

peer error unsupported certificate type

peer error no certificate

peer error no certificate

peer error certificate

peer error certificate

peer did not return a certificate

peer did not return a certificate

null ssl method passed

null ssl method passed

no publickey

no publickey

no private key assigned

no private key assigned

no privatekey

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert received

no client cert method

no client cert method

no ciphers passed

no ciphers passed

no certificate specified

no certificate specified

no certificate set

no certificate set

no certificate returned

no certificate returned

no certificate assigned

no certificate assigned

no certificates returned

no certificates returned

missing tmp rsa pkey

missing tmp rsa pkey

missing tmp rsa key

missing tmp rsa key

missing tmp ecdh key

missing tmp ecdh key

missing tmp dh key

missing tmp dh key

missing rsa signing cert

missing rsa signing cert

missing rsa encrypting cert

missing rsa encrypting cert

missing rsa certificate

missing rsa certificate

missing export tmp rsa key

missing export tmp rsa key

missing export tmp dh key

missing export tmp dh key

missing dsa signing cert

missing dsa signing cert

missing dh rsa cert

missing dh rsa cert

missing dh key

missing dh key

missing dh dsa cert

missing dh dsa cert

krb5 server rd_req (keytab perms?)

krb5 server rd_req (keytab perms?)

key arg too long

key arg too long

invalid ticket keys length

invalid ticket keys length

http request

http request

https proxy request

https proxy request

error generating tmp rsa key

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for signing

ecc cert not for key agreement

ecc cert not for key agreement

cert length mismatch

cert length mismatch

certificate verify failed

certificate verify failed

bad ecc cert

bad ecc cert

bad dh pub key length

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_PKEY

SSL_SET_CERT

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_INST

SSL_CERT_DUP

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

CLIENT_CERTIFICATE

SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012

SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

c->iv_len session->key_arg)

c->iv_len session->key_arg)

s->s2->key_material_length s2->key_material

s->s2->key_material_length s2->key_material

SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012

SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012

TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

os.length session_id)

os.length session_id)

DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

key expansion

key expansion

client write key

client write key

server write key

server write key

%s:%d: rec->data != rec->input

%s:%d: rec->data != rec->input

!$&'()* ,;=

!$&'()* ,;=

Operation not permitted on an object without an associated state.

Operation not permitted on an object without an associated state.

libs\log\src\text_file_backend.cpp

libs\log\src\text_file_backend.cpp

%H:%M:%S.%f

%H:%M:%S.%f

.\crypto\engine\eng_pkey.c

.\crypto\engine\eng_pkey.c

Load certs from files in a directory

Load certs from files in a directory

%s%clx.%s%d

%s%clx.%s%d

unsupported type

unsupported type

unsupported recpientinfo type

unsupported recpientinfo type

unsupported recipient type

unsupported recipient type

unsupported kek algorithm

unsupported kek algorithm

unsupported content type

unsupported content type

signer certificate not found

signer certificate not found

private key does not match certificate

private key does not match certificate

no public key

no public key

no private key

no private key

no msgsigdigest

no msgsigdigest

no key or cert

no key or cert

no key

no key

not supported for this key type

not supported for this key type

not key transport

not key transport

msgsigdigest wrong length

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest verification failure

msgsigdigest error

msgsigdigest error

invalid key length

invalid key length

invalid encrypted key length

invalid encrypted key length

error setting key

error setting key

error getting public key

error getting public key

certificate verify error

certificate verify error

certificate has no keyid

certificate has no keyid

certificate already present

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_recipient_key

CMS_add0_cert

CMS_add0_cert

unsupported requestorname type

unsupported requestorname type

no certificates in chain

no certificates in chain

error parsing url

error parsing url

PARSE_HTTP_LINE1

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_parse_url

OCSP_cert_id_new

OCSP_cert_id_new

unimplemented public key method

unimplemented public key method

invalid cmd number

invalid cmd number

invalid cmd name

invalid cmd name

failed loading public key

failed loading public key

failed loading private key

failed loading private key

cmd not executable

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

ENGINE_cmd_is_executable

unsupported md algorithm

unsupported md algorithm

invalid signer certificate purpose

invalid signer certificate purpose

ess signing certificate error

ess signing certificate error

ess add signing cert error

ess add signing cert error

TS_VERIFY_CERT

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

ESS_ADD_SIGNING_CERT

functionality not supported

functionality not supported

WIN32_JOINER

WIN32_JOINER

unsupported pkcs12 mode

unsupported pkcs12 mode

key gen error

key gen error

PKCS8_add_keyusage

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_key_gen_asc

PKCS12_add_localkeyid

PKCS12_add_localkeyid

unsupported option

unsupported option

unable to get issuer keyid

unable to get issuer keyid

policy syntax not currently supported

policy syntax not currently supported

operation not defined

operation not defined

no proxy cert policy language defined

no proxy cert policy language defined

no issuer certificate

no issuer certificate

extension setting not supported

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

R2I_CERTPOL

unsupported cipher type

unsupported cipher type

unable to find certificate

unable to find certificate

signing not supported for this key type

signing not supported for this key type

operation not supported on this type

operation not supported on this type

no recipient matches key

no recipient matches key

no recipient matches certificate

no recipient matches certificate

encryption not supported for this key type

encryption not supported for this key type

decrypted key is wrong length

decrypted key is wrong length

PKCS7_add_certificate

PKCS7_add_certificate

unsupported method

unsupported method

no port specified

no port specified

no port defined

no port defined

no accept port specified

no accept port specified

BIO_get_port

BIO_get_port

ECDH_compute_key

ECDH_compute_key

data too large for key size

data too large for key size

unsupported field

unsupported field

passed null parameter

passed null parameter

not a supported NIST prime

not a supported NIST prime

missing private key

missing private key

keys not set

keys not set

invalid private key

invalid private key

PKEY_EC_SIGN

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

PKEY_EC_CTRL

o2i_ECPublicKey

o2i_ECPublicKey

i2o_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print_fp

EC_KEY_print

EC_KEY_print

EC_KEY_new

EC_KEY_new

EC_KEY_generate_key

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_copy

EC_KEY_check_key

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

DO_EC_KEY_PRINT

d2i_ECPrivateKey

d2i_ECPrivateKey

zlib not supported

zlib not supported

wrong public key type

wrong public key type

unsupported public key type

unsupported public key type

unsupported encryption algorithm

unsupported encryption algorithm

unsupported any defined by type

unsupported any defined by type

unknown public key type

unknown public key type

unable to decode rsa private key

unable to decode rsa private key

unable to decode rsa key

unable to decode rsa key

streaming not supported

streaming not supported

private key header missing

private key header missing

digest and key type not supported

digest and key type not supported

bad password read

bad password read

X509_PKEY_new

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PublicKey

i2d_PrivateKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PublicKey

d2i_PrivateKey

d2i_PrivateKey

d2i_AutoPrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unsupported algorithm

unknown key type

unknown key type

unable to get certs public key

unable to get certs public key

public key encode error

public key encode error

public key decode error

public key decode error

no cert set for us to verify

no cert set for us to verify

method not supported

method not supported

loading cert dir

loading cert dir

key values mismatch

key values mismatch

key type mismatch

key type mismatch

cert already in hash table

cert already in hash table

cant check dh key

cant check dh key

X509_verify_cert

X509_verify_cert

X509_STORE_add_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_set

X509_PUBKEY_get

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_file

X509_load_cert_crl_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_get_pubkey_parameters

X509_check_private_key

X509_check_private_key

GET_CERT_BY_SUBJECT

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

PKEY_DSA_CTRL

unsupported key components

unsupported key components

unsupported encryption

unsupported encryption

read key

read key

public key no rsa

public key no rsa

problems getting password

problems getting password

keyblob too short

keyblob too short

keyblob header parse error

keyblob header parse error

expecting public key blob

expecting public key blob

expecting private key blob

expecting private key blob

error converting private key

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY_FP

DO_PK8PKEY

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported salt type

unsupported private key algorithm

unsupported private key algorithm

unsupported prf

unsupported prf

unsupported key size

unsupported key size

unsupported key derivation function

unsupported key derivation function

unsupported keylength

unsupported keylength

unsuported number of rounds

unsuported number of rounds

private key encode error

private key encode error

private key decode error

private key decode error

operaton not initialized

operaton not initialized

operation not supported for this keytype

operation not supported for this keytype

no operation set

no operation set

no key set

no key set

keygen failure

keygen failure

invalid operation

invalid operation

expecting a ec key

expecting a ec key

expecting a ecdsa key

expecting a ecdsa key

expecting a dsa key

expecting a dsa key

expecting a dh key

expecting a dh key

expecting an rsa key

expecting an rsa key

different key types

different key types

ctrl operation not implemented

ctrl operation not implemented

command not supported

command not supported

camellia key setup failed

camellia key setup failed

bn pubkey error

bn pubkey error

bad key length

bad key length

aes key setup failed

aes key setup failed

PKEY_SET_TYPE

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

D2I_PKEY

CAMELLIA_INIT_KEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

AES_INIT_KEY

invalid public key

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

PKEY_DH_DERIVE

GENERATE_KEY

GENERATE_KEY

COMPUTE_KEY

COMPUTE_KEY

rsa operations not supported

rsa operations not supported

key size too small

key size too small

invalid keybits

invalid keybits

illegal or unsupported padding mode

illegal or unsupported padding mode

digest too big for rsa key

digest too big for rsa key

data too small for key size

data too small for key size

RSA_generate_key

RSA_generate_key

RSA_check_key

RSA_check_key

RSA_BUILTIN_KEYGEN

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

PKEY_RSA_CTRL

.\crypto\asn1\x_pkey.c

.\crypto\asn1\x_pkey.c

C:\Build\desktop_apps\_out\MailRuUpdater.pdb

C:\Build\desktop_apps\_out\MailRuUpdater.pdb

MailRuUpdater.exe

MailRuUpdater.exe

??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

SetWindowsHookExW

SetWindowsHookExW

UnhookWindowsHookEx

UnhookWindowsHookEx

USER32.dll

USER32.dll

GDI32.dll

GDI32.dll

RegCloseKey

RegCloseKey

RegCreateKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegDeleteKeyW

RegEnumKeyExW

RegEnumKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

RegQueryInfoKeyW

ReportEventA

ReportEventA

ADVAPI32.dll

ADVAPI32.dll

FindExecutableW

FindExecutableW

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

SHLWAPI.dll

SHLWAPI.dll

COMCTL32.dll

COMCTL32.dll

WS2_32.dll

WS2_32.dll

PSAPI.DLL

PSAPI.DLL

USERENV.dll

USERENV.dll

WTSAPI32.dll

WTSAPI32.dll

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CRYPT32.dll

CRYPT32.dll

d3d9.dll

d3d9.dll

VERSION.dll

VERSION.dll

CreateIoCompletionPort

CreateIoCompletionPort

GetCPInfo

GetCPInfo

ShellExecuteExW

ShellExecuteExW

CoInternetParseUrl

CoInternetParseUrl

urlmon.dll

urlmon.dll

PeekNamedPipe

PeekNamedPipe

-----BEGIN PUBLIC KEY-----

-----BEGIN PUBLIC KEY-----

-----END PUBLIC KEY-----

-----END PUBLIC KEY-----

HTTP/

HTTP/

zcÁ

zcÁ

.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@

.?AVAuditFirefox@mailru@@

.?AVAuditFirefox@mailru@@

.?AVCheckerFirefox@AuditFirefox@mailru@@

.?AVCheckerFirefox@AuditFirefox@mailru@@

.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@

.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@

.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@

.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@

.?AVCheckerVbmFirefox@AuditFirefox@mailru@@

.?AVCheckerVbmFirefox@AuditFirefox@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@

.?AVAuditGoogleChrome@mailru@@

.?AVAuditGoogleChrome@mailru@@

.?AVCheckerCh@AuditGoogleChrome@mailru@@

.?AVCheckerCh@AuditGoogleChrome@mailru@@

.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@

.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@

.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@

.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@

.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@

.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@

.?AVChromeExtensionStorage@mailru@@

.?AVChromeExtensionStorage@mailru@@

.?AVFirefoxExtensionStorage@mailru@@

.?AVFirefoxExtensionStorage@mailru@@

.?AUChromeExtensionTraits@checksum_traits@mailru@@

.?AUChromeExtensionTraits@checksum_traits@mailru@@

.?AUFirefoxExtensionTraits@checksum_traits@mailru@@

.?AUFirefoxExtensionTraits@checksum_traits@mailru@@

.?AVsettings@firefox@mailru@@

.?AVsettings@firefox@mailru@@

.?AVHttpError@mailru@@

.?AVHttpError@mailru@@

.?AVTaskExecuteAV@mailru@@

.?AVTaskExecuteAV@mailru@@

.?AV?$_Ref_count_obj@VTaskExecuteAV@mailru@@@std@@

.?AV?$_Ref_count_obj@VTaskExecuteAV@mailru@@@std@@

.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@

.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@

.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@

.?AVwindows_file_codecvt@@

.?AVwindows_file_codecvt@@

.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@

.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@

.?AVexception@sqlite@mailru@@

.?AVexception@sqlite@mailru@@

.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@

.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@

.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@

.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@

.?AUProcessKey@sysinfo@mailru@@

.?AUProcessKey@sysinfo@mailru@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@

.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@

.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$bind_t@XV?$mf4@XU?$async_resolver@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@@policies@http@network@boost@@AAV?$basic_resolver@Vudp@ip@asio@boost@@V?$resolver_service@Vudp@ip@asio@boost@@@234@@ip@asio@5@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GV?$function@$$A6AXABVerror_code@system@boost@@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@Z@5@@_mfi@boost@@V?$list5@V?$value@PAU?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@_bi@boost@@U?$arg@$00@3@U?$arg@$01@3@U?$arg@$02@3@U?$arg@$03@3@@_bi@3@@_bi@boost@@

.?AV?$bind_t@XV?$mf4@XU?$async_resolver@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@@policies@http@network@boost@@AAV?$basic_resolver@Vudp@ip@asio@boost@@V?$resolver_service@Vudp@ip@asio@boost@@@234@@ip@asio@5@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GV?$function@$$A6AXABVerror_code@system@boost@@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@Z@5@@_mfi@boost@@V?$list5@V?$value@PAU?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@_bi@boost@@U?$arg@$00@3@U?$arg@$01@3@U?$arg@$02@3@U?$arg@$03@3@@_bi@3@@_bi@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@ABVerror_code@system@5@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@V?$value@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@23@U?$arg@$00@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@ABVerror_code@system@5@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@V?$value@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@23@U?$arg@$00@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@W4state_t@12345@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@W4state_t@?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@23@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@W4state_t@12345@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@W4state_t@?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@23@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AU?$async_connection_base@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$async_connection_base@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_protocol_handler@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_protocol_handler@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AV?$enable_shared_from_this@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@

.?AV?$enable_shared_from_this@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@

.?AV?$sp_counted_impl_p@Uconnection_impl@?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@Uconnection_impl@?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$basic_client_impl@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$basic_client_impl@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@Unormal_delegate@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@Unormal_delegate@impl@http@network@boost@@@detail@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@

.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@

.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVunsupported_os@Concurrency@@

.?AVunsupported_os@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AUIExecutionContext@Concurrency@@

.?AUIExecutionContext@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AUIExecutionResource@Concurrency@@

.?AUIExecutionResource@Concurrency@@

.?AUconnection_delegate@impl@http@network@boost@@

.?AUconnection_delegate@impl@http@network@boost@@

.?AUnormal_delegate@impl@http@network@boost@@

.?AUnormal_delegate@impl@http@network@boost@@

Inappropriate I/O control opera

Inappropriate I/O control opera

99\9a9t9

99\9a9t9

0 0$0(0,0

0 0$0(0,0

9 9$9(9,90949

9 9$9(9,90949

5T5f5

5T5f5

1#1(1-1~2

1#1(1-1~2

7-7Z7}7

7-7Z7}7

8$91969|9

8$91969|9

5(5&989&:7:

5(5&989&:7:

99P9

99P9

3$4*4/4{4

3$4*4/4{4

9%;*;/;4;@;};

9%;*;/;4;@;};

;#

;#

3-4M4}4

3-4M4}4

=&>5>&?3?

=&>5>&?3?

0 1%1U1

0 1%1U1

;*

;*

4%5S5c5

4%5S5c5

=#=6=&>8>

=#=6=&>8>

5(6/6^6~6

5(6/6^6~6

3%3s3

3%3s3

3%4U4

3%4U4

0 1(1-1@1

0 1(1-1@1

1,2r2

1,2r2

2

8 8$8(8,8084888
2%2U3
5 5$5(5,50545
%0u0z0
6 6$6(6,6
3?4V4g4t4{4
161>1]1-2}2
5%7*7/747@7}7
9Ÿ:u:f>u>
1$1 141>1
2/2|2
4O4U4u4
6&7,767\7
2&383&464
3'4}546>8
1C1k1y1
5-5o5}5
8$8 828~8
3%7u8Y9~9
5h6S6l6
6$6-626>6
2#222@2#424@4
8Å“9
8%9s9
2&3,3#464
2
3%4U4
>$?(?,?0?4?
>8>@>|>
> ?$?(?,?0?4?8?@?
4 4$4(4,40444|4
? ?$?(?,?0?
2(5,505
> >$>(>,>0>4>8>
:(;,;0;4;
0 0$0(0,0004080
1 1$1(1,1014181
8 8$8(8,808
=8=@=\=|=
2(202
=$=,=8=\=|=
7 7(707
3,383@3`3
0,080@0\0
5,585@5`5
?$?8?@?`?
4$4,484\4|4
7$7,787\7|7
8$8,888`8
>$>,>8>\>|>
? ?$?(?,?0?4?
/signatures.mrdj
hXXp://mrds.mail.ru/update/2/version.txt
/sputnik/spmrids.mrdj
GuardMailRu.exe
KMail.Ru\Sputnik\Report
hXXp://xml.binupdate.mail.ru/audit_config.mrdj
Start new check operation
o failed to parse. New report Created
restore mail.ru for:
operation_type
checker->Check failed, msg =
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetched
FFExtensions/FFVbm/Url
Hp/Url
Dse/Url
Vbm/Url
hAdvapi32.dll
Google\Chrome\User Data\Safe Browsing Extension Blacklist
NGoogle/Chrome/User Data
Google/Chrome/Application
Software\Policies\Google\Chrome
hXXp://xml.binupdate.mail.ru/ext_storage.mrdj
Google Chrome
Google/Chrome/User Data/Default
Google/Chrome/Application/chrome.exe
Software/Google/Chrome/BLBeacon
Software\Mail.Ru\AmigoInstaller
psqlite3_reset
sqlite3_bind_blob
sqlite3_bind_text16
_0.localstorage
chrome-extension_
key TEXT UNIQUE ON CONFLICT REPLACE,
SELECT value FROM ItemTable WHERE key = ?
manifest.json
URLS
sqlite3_exec
Web Data
chrome.exe
select k.url from meta m, keywords k where m.key='Default Search Provider ID' and m.value=k.id
Mail.Ru
SELECT id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE
DELETE FROM keywords WHERE short_name = '@MAIL.RU'
SELECT * FROM keywords
ALTER TABLE keywords ADD COLUMN alternate_urls VARCHAR DEFAULT ''
ALTER TABLE keywords ADD COLUMN search_terms_replacement_key VARCHAR DEFAULT ''
INSERT INTO keywords
id, short_name, keyword, favicon_url, url, show_in_default_list, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
@Mail.Ru','go.mail.ru','hXXp://go.mail.ru/favicon.ico','hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg',1,1,'',1333701777,0,'windows-1251','hXXp://suggests.go.mail.ru/ff3?q={searchTerms}',%PREPOPULATE_ID%,0,'',0,'03095DE3-A6E7-4793-A20C-399A0F4A92E1'
UPDATE keywords SET short_name = '
@Mail.Ru', keyword = 'go.mail.ru', favicon_url = 'hXXp://go.mail.ru/favicon.ico', url = 'hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg%RFR%',show_in_default_list = '1' WHERE id = '%ID%'
SELECT id , prepopulate_id FROM keywords WHERE keyword = 'go.mail.ru' COLLATE NOCASE
SELECT id , prepopulate_id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE
SELECT id, prepopulate_id FROM keywords
' WHERE key = 'Default Search Provider ID'
' WHERE key = 'Default Search Provider ID Backup'
SELECT value FROM meta WHERE key = 'version'
UPDATE keywords SET suggest_url = '%SUGGEST_URL%' WHERE keyword like '%mail.ru%'
%SUGGEST_URL%
^(chrome-extension://)?(\w{32})?/?
Software/Google/Chrome/Extensions
Sync Data Backup/SyncData.sqlite3
hXXps://clients2.google.com/service/update2/crx
hXXp://xml.binupdate.mail.ru/guard/mrids.mrdj?
chrome_url_overrides/newtab
Extension from url installed
DefaultSearchProviderSearchURL
DefaultSearchProviderKeyword
DefaultSearchProviderInstantURL
DefaultSearchProviderSuggestURL
^chrome-extension://([a-z]{32})/
pmail.ru
VVV.mail.ru
VVV.go.mail.ru
common_process.exe
{27116687-8CD6-4A82-BA83-5099C3A885BF}
{A12C4AB1-F4D0-4771-8C21-613E9D12491F}
{1079004F-E4EF-4A44-9D1F-7C9CE09CE258}
{901B414B-72A2-48C6-8DCD-29388B8B3E40}
{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}
{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}
{ADAC3638-040C-498C-845A-F89B99705444}
{4519D3B5-465C-4AE2-A905-960CA7D5385C}
{F581DE96-9AA1-45C8-8335-B7445525371A}
{DCEF19BB-AB61-48F4-A7CB-6D677D90D1C2}
{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}
{11A1974E-9BEF-4B50-8E2F-9F25FC775BD1}
{3E57F3FE-4397-4DEA-A19A-760BFCD24242}
{63CF3EC2-0122-429B-AB91-781D5D6A8513}
{D33EDE61-8E43-4C1F-9371-6A240B4DA5C9}
{ABCAA0D8-A892-481F-9492-ACC63768F659}
{8DC7BF6A-58F3-4740-B600-34E37FFADC21}
{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}
{96AF929E-B8EB-499E-99A8-095E4262BE26}
{027940D4-10B8-43B6-9707-A4EE47618E1D}
{45DA0BF7-F31B-4360-BF9A-8E7374A78916}
{5552B451-2086-4B64-82C6-732B18E41FCD}
{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}
{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}
{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}
{3CE4F0C3-2143-491F-8F20-27792166C41F}
{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}
{14737ADB-9F88-47E8-A76F-D365509795AC}
{25A21CA7-3B29-4A32-8F04-25389F58ED78}
{9A43760C-B8B0-44BA-8DB2-82041B01D78A}
{E26CB86D-BD59-40B5-B285-55ACAC12C019}
chrome-extension://clpdgmdkdnijjbgmnajolnbnjejoeogm/visual-bookmarks.html
chrome-extension://hcncjpganfocbfoenaemagjjopkkindp/visual-bookmarks.html
chrome-extension://jaocgokledfmfebefgbeokdodbbdjhdd/visual-bookmarks.html
chrome-extension://dhngkpgdbpbkopndlpkicfaiffphdkbo/visual-bookmarks.html
Software\AppDataLow\Software\Mail.Ru\IE_Bar
Software\Mail.Ru\IE_Bar
Software/Mail.Ru/Updater
Software\Mail.Ru\Flags
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall
SOFTWARE/Microsoft/Windows/CurrentVersion/Run
SOFTWARE/Mail.Ru
{09900DE8-1DCA-443F-9243-26FF581438AF}
{58810E75-E249-44C6-B989-11D227263E24}
{91397D20-1446-11D4-8AF4-0040CA1127B6}
{95289393-33EA-4F8D-B952-483415B9C955}
hXXp://mrds.mail.ru/update/2/
Software/Mail.Ru
hXXp://go.mail.ru/distib/ep/?q={SearchTerms}
hXXp://suggests.go.mail.ru/ie8?q={SearchTerms}
{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Mail.Ru
iexplore.exe
{8E8F97CD-60B5-456F-A201-73065652D099}
Mail.Ru/mrkeeper.exe
hXXp://go.mail.ru/search?q={SearchTerms}&fr=iextn
{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}
hXXp://go.mail.ru/search?fr=ntg&q=
hXXp://go.mail.ru/distib/ep/
firefox.exe
search@mail.ru
homepage@mail.ru
opera.exe
hXXp://go.mail.ru/distib/ep/?q={searchTerms}
SOFTWARE/Google/Chrome/Extensions
amigo.exe
nichrome.exe
browser.exe
Yandex.Browser.New
Software/Mail.Ru/ChromeInstaller
hXXp://xml.binupdate.mail.ru/guard/update/version.xml
F777C640-57F8-4ECE-A40B-F571D25C2EFE
.html
opera
launcher.exe
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Google Chrome
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Bromium
Software/Microsoft/Windows/CurrentVersion/Uninstall/Xpom
Software/Microsoft/Windows/CurrentVersion/Uninstall/{1B89BC31-F539-4EBD-B94F-C24705C73433}
Software/Microsoft/Windows/CurrentVersion/Uninstall/YandexBrowser
xpom.exe
Software/Microsoft/Windows/CurrentVersion/Uninstall/xpom
Software/Microsoft/Windows/CurrentVersion/Uninstall/Amigo
google chrome
firefox
Microsoft/Windows/Start Menu
Microsoft/Windows/
extensions.json
Unable to patch extensions.json
install.rdf
em:updateURL
em:iconURL
nFailed to parse extensions.json
Failed to write extensions.json:
tsearch-metadata.json
sessionstore.js
places.sqlite
cookies.sqlite
prefs.js
Mozilla\Firefox\profiles.ini
Mozilla\Firefox
search.json
LMozilla Firefox
mailru.xml
@Mail.Ru
@Mail.Ru
hXXp://VVV.mail.ru/
%SEARCH_URL%
extensions.ini
ini keys failed
extensions.json not parsed!
File: %s
System32/GroupPolicy/Machine/Registry.pol
System32/GroupPolicy/User/Registry.pol
Sysnative/GroupPolicy/Machine/Registry.pol
Sysnative/GroupPolicy/User/Registry.pol
SysWOW64/GroupPolicy/Machine/Registry.pol
SysWOW64/GroupPolicy/User/Registry.pol
SELECT last_visit_time FROM urls order by last_visit_time DESC LIMIT 1
couldn't create instance of IUrlHistoryStg2
EnumUrls failed
Software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects
Software/Microsoft/Windows/CurrentVersion/Ext/Settings
Mail.Ru/Sputnik
SOFTWARE/Microsoft/Windows/CurrentVersion/URL/DefaultPrefix
FaviconURLFallback
SuggestionsURL
ie.reg
[-HKEY_USERS\
import
reg.exe
eVVV.
Mail.Ru/Id
Software\Microsoft\Windows\CurrentVersion\Run
Software\Mail.ru\Tech\ptls
hXXp://go.mail.ru/distib/mark/
go_metric_url
hXXp://mrds.mail.ru/update/2/version.txt?type=product_online_metric
mrds_metric_url
MailProducts/Nrs.dat
kSoftware/Mail.Ru/Guard
R.delay
hXXp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?
url_argument
key_arg
^(http[s]?:\/\/)?(www\.)?([\w\.-] )([:\/].*)?$
{598504EA-A67F-4E3C-9CB2-F686B72D4BE6}
{453FD166-5BF4-4C00-AD14-4065187ABBFB}
{5A38BFBE-DFD4-46C5-8598-EE133F10611F}
RemoteTasksExecuter thread stuck
Remote tasks execution started
hXXp://xml.binupdate.mail.ru/tasks.mrdj?
Software/Microsoft/Windows/CurrentVersion/Run
Syahoo.com
webalta.ru
yambler.net
yafinder.com
Found mail.ru extension of type
Task execution failed:
ohXXp://mailruupdater.cdnmail.ru/MailRuUpdater.exe
SSoftware\Mail.Ru
nAllow service process execute task
--uac-passed
mru_uac_passed
Guard@Mail\.ru
SwReporter
software_reporter_tool.log
Error parsing reporter logs:
dFailed to update SwReporter data:
since_last_exec
chrome
hXXp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj?
Start proceed Google Chrome
Google Chrome is done
Google Chrome is not done
Start proceed Firefox
Firefox is done
Firefox is not done
hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj?
hXXp://go.mail.ru/?chverfix=1&fr=chverfix_sg
hXXp://go.mail.ru/search?q={SearchTerms}&ieverfix=1&fr=ieverfix_dse
hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetching failed
o/checksums.mrdj
FFExtensions/Hp/Url
SELECT urls.url, visit_time
FROM visits INNER JOIN urls
ON visits.url = urls.id
IEExtensions/Dse/Url
S{EC32BCCC-7012-459F-8D79-6E7D38DC1ECD}
Svk.com/audios
ok.ru/music
my.mail.ru/music
e.mail.ru/messages/inbox
vk.com/app
ok.ru/game
ok.ru/app
my.mail.ru/app
games.mail.ru
SELECT id, url, last_visit_time FROM urls where url like '%%%1%%%' order by last_visit_time DESC limit 1
SELECT url, last_visit_date FROM moz_places where url like '%%%1%%%' and guid != '' and guid notnull order by last_visit_date desc limit 1
\Toolbar\Custom\Packages\hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox
Yandex\Toolbar\state.json
yasearch-xb\plugins.json
Software\Mail.Ru\Updater
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
uac-passed
oamigo_tmp.exe
hXXp://binupdate.mail.ru/amigo/version2.xml
internet_tmp.exe
hXXp://binupdate.mail.ru/chrome/version3.xml
internetupdater_tmp.exe
hXXp://binupdate.mail.ru/chrome/version2.xml
0.0.0.0
inttoam_tmp.exe
hXXp://binupdate.mail.ru/chrome/internet_to_amigo.xml
28.0.1501.430
hXXp://binupdate.mail.ru/updater/version.xml
mrutmp.exe
.mru_update_service
amsg
ovr_chrome
last_chrome
Google/Chrome/User Data/Default/History
/friends.mrdj
Updater.Mail.Ru
Mail.Ru Group
Updater.Mail.Ru exist
Updater.Mail.Ru: Error during coping file, rc =
Service::Update update operation is proceed
gUpdater.Mail.Ru: StartService: RegisterServiceCtrlHandler returned error
Updater.Mail.Ru: StartService: SetServiceStatus returned error
Updater.Mail.Ru: SERVICE_CONTROL_STOP
Updater.Mail.Ru: SERVICE_CONTROL_INTERROGATE
Updater.Mail.Ru: SERVICE_CONTROL_SHUTDOWN
xml.binupdate.mail.ru
%1% (%2%)
hSoftware/Mail.Ru/Tech/UserID
Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders
\StringFileInfo\xx
notepad.exe
0123456789 ,.
SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System
Incorrect firefox js file
sqlite3_prepare16_v2
sqlite3_step
sqlite3
SQLite error %1% returned by %2%
SQLite error code %1%, file %2%
stub.exe
hXXp://xml.binupdate.mail.ru/tenv.mrdj
filter.cfg
metrics.csv
http.csv
%Y%m%d
%Y-%m-%d
%H:%M:%S
%Y%m%dT%H%M%S%F%q
%Y-%m-%d %H:%M:%S%F%Q
%Y-%b-%d %H:%M:%S%F %z
%O:%M:%S%F
Invalid url
Ex
kSOFTWARE/Mail.ru
Mail.ru/ifrm
Internet Explorer/iexplore.exe
Global\651CB287-2277-4F76-84C6-1D61E868304B
Mail.ru/CommonCache
Failed to parse HTTP date:
%Y-%b-%d
o%Y%m%d
SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders
asio-58CCDC44-6264-4842-90C2-F3C545CB8AA7-%u-%p
TestModes/NoHttpsHostVerification
hXXp://xml.binupdate.mail.ru/cache_policy.mrdj
rCachingPolicy/Urls
mscoree.dll
padvapi32.dll
skernel32.dll
combase.dll
- floating point support not loaded
- CRT not initialized
- Attempt to initialize the CRT more than once.
portuguese-brazilian
888816666554443
6666554443
!6666554443
%5N.log
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe
Mail.Ru updater
1.23.0.220
MailRuUpdater.exe_2516:
.text
`.rdata
@.data
.rsrc
@.reloc
SHA256 block transform for x86, CRYPTOGAMS by 
SHA1 block transform for x86, CRYPTOGAMS by 
.EKSWU
DlSHA512 block transform for x86, CRYPTOGAMS by 
Montgomery Multiplication for x86, CRYPTOGAMS by 
FtPS
FTPG
FTPj
6-9'6-9'
$6.:$6.:
*?#1*?#1
>8$4,8$4,
AES for x86, CRYPTOGAMS by 
|$@3|$
Camellia for x86 by 
RC4 for x86, CRYPTOGAMS by 
w%s( 
8%u(j
uXj.hLj
ugj.hLj
gj.hdi
 FTPj
F\ FTP
>
t.Jx 
;*u%C
Lj.hL
j.Yf;
_tcPVj@
.PjRW
f;F.se
?sqliu
 2 34 567
?%Y-%u
m-%du
?%H:%u
M:%Su
C:\desktop_apps\SputnikLib/log_ng.h
C:\desktop_apps\CommonFiles/url_params_common.hpp
mailru::url_params::formalize_common_params
mailru::url_params::AddWinVerInfo
mailru::url_params::AddChromeMetrics
mailru::url_params::AddToolVer
mailru::url_params::AddOtherProcessInfo
..\CommonFiles\audit\audit.cpp
..\CommonFiles\audit\audit_browsers_manager.cpp
c:\desktop_apps\commonfiles\audit\audit_browsers_manager.h
ReportTime
..\CommonFiles\audit\audit_browser_settings.cpp
mailru::AuditBrowserSettings::MakeReport
) report successfully done
Make report failed
mailru::AuditBrowserSettings::ScheduleReportCheck
mailru::AuditBrowserSettings::CollectReportInfo
mailru::AuditBrowserSettings::CheckReport
error report structer
..\CommonFiles\audit\audit_google_chrome.cpp
mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild
mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild
mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild
:Incorrect key length
Unable to read chrome blocklist
Chrome blocklist file is not valid
chrome blocklist contains unsupported elements
..\CommonFiles\chrome-safe-browsing.cpp
mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile
shard_header.add_prefix_count > kMaxAddSubChunksCount
Unable to open "%s" for writing
RegCreateKeyTransactedW
C:\desktop_apps\SputnikLib/reg_key.hpp
startup_urls
urls_to_restore_on_startup
..\commonfiles\chromiums.cpp
Chrome
RegOpenKeyTransactedW
RegDeleteKeyTransactedW
KERNEL32.DLL
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
%%%%-%%%%-%%%%-%%%%
C:\desktop_apps\CommonFiles/sql_lite_bind.hpp
..\CommonFiles\chromium_settings.cpp
hXXp://mail.ru
hXXp://VVV.mail.ru
browser.show_home_button
session.restore_on_startup
yandex\.ru. clid
mailru::chromium::settings::search_url
chrome_settings_overrides
search_url
template_url_data
mailru::chromium::settings::search_url_without_extensions
@MAIL.RU
suggestions_url
suggestions_url_post_params
windows-1251
keyword
mail.ru
D15371FE-C188-4E99-9841-A91F3BCBCCC3
search_terms_replacement_key
search_url_post_params
favicon_url
hXXp://go.mail.ru/favicon.ico
image_url
image_url_post_params
instant_url
instant_url_post_params
originating_url
alternate_urls
default_search_provider_data.template_url_data
suggest_url
default_search_provider.name
default_search_provider.search_url
go.mail.ru
keystore_encryption_bootstrap_token
chrome_url_overrides
chrome-extension://
extensions.settings.
hXXp://mail.ru/cnt/9824
mail.ru
mailru::chromium::settings::url_from_ext_id
extensions.known_disabled
error %s
update_url
.enabled
hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg?
check_policy.amg not loaded
check_policy.amg NOT decoded
check_policy.amg NOT parsed
mailru::chromium::settings::InstallExtensionFromUrlNoThrow
Disabling dse in GPO failed: %s
Looking for local GPO failed: %s
yasearch.native_comps.hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.searchName
hXXp://VVV.mail.ru/cnt/7861
hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1
hXXp://img.imgsmail.ru/r/agent/favicon.ico
hXXp://mail.ru/cnt/10445
hXXp://VVV.mail.ru/
hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}
hXXp://go.mail.ru/search?fr=ntg&q=
hXXp://m.mail.ru/cgi-bin/splash?opera=1
hXXp://VVV.mail.ru/cnt/5090
hXXp://go.mail.ru/search?q=%s&fr=ntg
@mail.ru
hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}
hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb
hXXp://go.mail.ru/favicon_images.ico
hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb
hXXp://go.mail.ru/favicon_video.ico
hXXp://VVV.mail.ru/cnt/5091
hXXp://redir.opera.com/speeddials/mail.ru
hXXp://redir.opera.com/bookmarks/mail.ru
hXXp://go.mail.ru/search?q=%s&fr=opr11
hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg
hXXp://suggests.go.mail.ru/ff3?q={searchTerms}
hXXp://mail.ru/cnt/10226
hXXp://go.mail.ru/?pin=1
mailru::default_browser::find_executable
..\CommonFiles\default_browser.cpp
C:\desktop_apps\SputnikLib/com_scope.h
SHORTCUTS PROSEED ERROR: std exception = %s
..\commonfiles\file_util.cpp
C:\desktop_apps\3party\ticpp/ticpp.h
..\CommonFiles\firefox_settings.cpp
mailru::firefox::settings::~settings
browser.startup.homepage
Profile%d
hXXp://go.mail.ru
browser.search.selectedEngine
browser.search.defaultenginename
browser.search.defaulturl
keyword.URL
extensions.enabledAddons
mailru::firefox::settings::is_yandex_elements_intsalled
yasearch@yandex.ru
mailru::firefox::settings::remove_media_viewer
browser.search.suggest.enabled
browser.search.useDBForOrder
Firefox
..\CommonFiles\Firefox_visual_bookmarks.cpp
mailru::firefox::visual_bookmarks::install
mailru::firefox::visual_bookmarks::download
urn:mozilla:item:
mailru::firefox::visual_bookmarks::localstore_rdf
chrome://browser/content/browser.xul#mailru_main_toolbar
(\s*app-profile\s \{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s rel%\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s \d )\s*.*
partner_new_url
partner_online_url
hXXps://xtnmailru.cdnmail.ru/go_ffvbm1_update.rdf
chrome://vbmail.ru/skin/vb-logo.png
extensions.autoDisableScopes
extensions.shownSelectionUI
mailru::firefox::enable_visual_bookmarks::PatchExtensionSqlite
mailru::firefox::enable_visual_bookmarks::PatchExtensionIni
mailru::firefox::enable_visual_bookmarks::PatchExtensionJson
updateURL
updateKey
optionsURL
aboutURL
iconURL
icon64URL
Mail.Ru
homepageURL
hXXp://sputnik.mail.ru/
{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
mailru::firefox::enable_visual_bookmarks::is_enabled
mailru::firefox::enable_visual_bookmarks::PatchFileTime
..\CommonFiles\GPOManager.cpp
GetRegistryKey for machine failed
GetRegistryKey for user failed
?mailru::sqlite_bind::column_int64
search_id() = %s
HKEY_USERS ie search url = %s
HKEY_LOCAL_MACHINE ie search url = %s
..\CommonFiles\ie_settings.cpp
Disabling GPO restrictions failed: %s
mailru::reg_keyT::check
ntdll.dll
kernel32.dll
..\CommonFiles\Install_stat.cpp
..\CommonFiles\savestate.cpp
web_data_ver
save_google_state_task::do_task error : item_in_storage.file_serialize
..\CommonFiles\shortcut_check.cpp
c:\desktop_apps\commonfiles\tasks\TaskShortcuts.h
..\CommonFiles\Tasks\RemoteTaskExecuter.cpp
mailru::RemoteTasksExecuter::InitTasks
mailru::RemoteTasksExecuter::ExecuteTask
mailru::RemoteTasksExecuter::FetchTasks
Fetching tasks.mrdj...
Fetching url =
google chrome sync_enabled
..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp
ERROR google_blocked_mailru_extensions_base::ProceedExtensions std::exception %s !!!
..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp
ChromeVbmId
ChromeVbmArchive
..\CommonFiles\Tasks\TaskInstallUpdater.cpp
..\CommonFiles\Tasks\TaskInterface.cpp
..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp
cmd_line =
..\CommonFiles\Tasks\TaskPeriodicDisableGPO.cpp
14000000000000000
..\CommonFiles\Tasks\TaskPreventSRT.cpp
mailru::TaskPreventSRT::SendReporterMetric
software_reporter
ReporterLogPattern
invalid map key
ERROR: chrome_value is empty
..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp
..\CommonFiles\Tasks\TaskRestoreFFDse.cpp
..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp
mailru::TaskStartGroupBlackList::ProceedGoogleChrome
ProceedGoogleChrome patch prepared
ProceedGoogleChrome start patching
google_chrome object constructed
Google Chrome settings are synced
Google Chrome extensions are synced
TaskStartGroupBlackList::ProceedGoogleChrome failed, error =
ProceedGoogleChrome patch_util.set_was_patch(true);
mailru::TaskStartGroupBlackList::CleanUpChromeStartPages
mailru::TaskStartGroupBlackList::ProceedFirefox
ProceedFirefox is running
hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg
TaskStartGroupBlackList::ProceedGoogleChrome failed, er =
TaskStartGroupBlackList::ProceedGoogleChrome failed
hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg
..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp
..\CommonFiles\Tasks\task_change_sic_settings.cpp
..\CommonFiles\tasks\task_user_preferences.cpp
mailru::TaskUserPreferences::AnalyzeFirefox
hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml
hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox
Error reading yandex plugin config: %s
Error changing yandex smartbar config: %s
Error disabling yandex smartbox plugin: %s
..\CommonFiles\yandex_elements.cpp
class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &) const
Error reading yandex config setting "%s": %s
browser.uiCustomization.state
Error enabling standard search panel: %s
guid_manager.cpp
installer.cpp
mailru::reg_keyT::throw_on_error
main.cpp
Started with cmd line
c:\desktop_apps\mailruupdater\concrete_update_task.hpp
self_update_task.cpp
SendBrowsersStatistic.cpp
c:\desktop_apps\mailruupdater\SendBrowsersStatistic.h
updater::SendBrowsersStastic::BrowserData::getDSEurl
updater::SendBrowsersStastic::BrowserData::getDSEurl
updater::SendBrowsersStastic::BrowserData::getDSEurl
service.cpp
asio.misc
asio.misc error
C:\desktop_apps\3party\boost_1_56_0\boost/exception/detail/exception_ptr.hpp
update_info.cpp
fetch_url
Program fetch url
md5 fetch url
cmd_line
util.cpp
updater::Util::SaveChromeStateTask
SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012
len>=0 && lenkey)
j key)
SHA1 part of OpenSSL 1.0.0g 18 Jan 2012
SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012
ssl_sess_cert
ssl_cert
evp_pkey
x509_pkey
%s(%d): OpenSSL internal error, assertion failed: %s
RSA part of OpenSSL 1.0.0g 18 Jan 2012
supportedAlgorithms
crossCertificatePair
certificateRevocationList
cACertificate
userCertificate
userPassword
supportedApplicationContext
Microsoft Local Key set
LocalKeySet
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-CryptoPro-KeyMeshing
password based MAC
id-PasswordBasedMAC
X509v3 Certificate Issuer
certificateIssuer
certicom-arc
Proxy Certificate Information
proxyCertInfo
Microsoft Smartcardlogin
msSmartcardLogin
joint-iso-itu-t
JOINT-ISO-ITU-T
set-rootKeyThumb
setAttr-Cert
setCext-cCertRequired
setCext-certType
setct-CertResTBE
setct-CertReqTBEX
setct-CertReqTBE
setct-AcqCardCodeMsgTBE
setct-CertInqReqTBS
setct-CertResData
setct-CertReqTBS
setct-CertReqData
setct-PCertResTBS
setct-PCertReqData
setct-AcqCardCodeMsg
certificate extensions
set-certExt
set-msgExt
id-ecPublicKey
id-cmc-confirmCertAcceptance
id-cmc-getCert
id-regInfo-certReq
id-regCtrl-protocolEncrKey
id-regCtrl-oldCertID
id-it-revPassphrase
id-it-keyPairParamRep
id-it-keyPairParamReq
id-it-unsupportedOIDs
id-it-caKeyUpdateInfo
id-it-encKeyPairTypes
id-it-signKeyPairTypes
id-it-caProtEncCert
id-mod-attribute-cert
id-mod-qualified-cert-93
id-mod-qualified-cert-88
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-certValues
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-otherSigCert
id-smime-aa-smimeEncryptCerts
id-smime-aa-signingCertificate
id-smime-aa-encrypKeyPref
id-smime-aa-msgSigDigest
id-smime-ct-publishCert
id-smime-mod-msg-v3
sdsiCertificate
x509Certificate
localKeyID
certBag
pkcs8ShroudedKeyBag
keyBag
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
TLS Web Client Authentication
TLS Web Server Authentication
X509v3 Extended Key Usage
extendedKeyUsage
X509v3 Authority Key Identifier
authorityKeyIdentifier
X509v3 Certificate Policies
certificatePolicies
X509v3 Private Key Usage Period
privateKeyUsagePeriod
X509v3 Key Usage
keyUsage
X509v3 Subject Key Identifier
subjectKeyIdentifier
Netscape Certificate Sequence
nsCertSequence
Netscape CA Policy Url
nsCaPolicyUrl
Netscape Renewal Url
nsRenewalUrl
Netscape CA Revocation Url
nsCaRevocationUrl
Netscape Revocation Url
nsRevocationUrl
Netscape Base Url
nsBaseUrl
Netscape Cert Type
nsCertType
Netscape Certificate Extension
nsCertExt
extendedCertificateAttributes
challengePassword
dhKeyAgreement
passed a null parameter
DSO support routines
x509 certificate routines
error:lX:%s:%s:%s
Stack part of OpenSSL 1.0.0g 18 Jan 2012
Big Number part of OpenSSL 1.0.0g 18 Jan 2012
lhash part of OpenSSL 1.0.0g 18 Jan 2012
ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012
hexkey
rsa_keygen_pubexp
rsa_keygen_bits
RAND part of OpenSSL 1.0.0g 18 Jan 2012
You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html
keylen 
EVP_CIPHER_key_length(cipher) 
%d.%d.%d.%d
EC part of OpenSSL 1.0.0g 18 Jan 2012
ECDSA part of OpenSSL 1.0.0g 18 Jan 2012
.\crypto\ec\ec_key.c
DSA part of OpenSSL 1.0.0g 18 Jan 2012
Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012
.\crypto\dh\dh_key.c
value.single
value.set
USER32.DLL
NETAPI32.DLL
ADVAPI32.DLL
keylength
keyfunc
EVP part of OpenSSL 1.0.0g 18 Jan 2012
.\crypto\pkcs12\p12_key.c
d.registeredID
d.iPAddress
d.uniformResourceIdentifier
d.ediPartyName
d.directoryName
d.dNSName
d.rfc822Name
d.otherName
ECDH part of OpenSSL 1.0.0g 18 Jan 2012
priv_key
pub_key
%'%1$=%C%K%O%s%
.%.-.3.7.9.?.W.[.o.y.
C%C'C3C7C9COCWCiC
%s: (%d bit)
Public-Key
Private-Key
recommended-private-length: %d bits
public-key:
private-key:
PKCS#3 DH Public-Key
PKCS#3 DH Private-Key
Public-Key: (%d bit)
Private-Key: (%d bit)
IP Address:%d.%d.%d.%d
URI:%s
DNS:%s
email:%s
EdiPartyName:
X400Name:
othername:
/usr/local/ssl/certs
/usr/local/ssl/cert.pem
SSL_CERT_DIR
SSL_CERT_FILE
CONF part of OpenSSL 1.0.0g 18 Jan 2012
X509_PUBKEY
public_key
.\crypto\asn1\x_pubkey.c
name.relativename
name.fullname
certificateHold
Certificate Hold
cessationOfOperation
Cessation Of Operation
keyCompromise
Key Compromise
%*s%s:
%*sOnly Attribute Certificates
%*sOnly CA Certificates
%*sOnly User Certificates
%d.%d.%d.%d/%d.%d.%d.%d
%*sPolicy Text: %s
%*scrlUrl:
EXTENDED_KEY_USAGE
%*sZone: %s, User:
keyid
.\crypto\x509v3\v3_akey.c
d.usernotice
d.cpsuri
d.other
CERTIFICATEPOLICIES
%*sExplicit Text: %s
%*sNumber%s:
%*sOrganization: %s
%*sCPS: %s
PKEY_USAGE_PERIOD
keyCertSign
Certificate Sign
keyAgreement
Key Agreement
keyEncipherment
Key Encipherment
.\crypto\x509v3\v3_skey.c
pubkey
EC_PRIVATEKEY
publicKey
privateKey
value.implicitlyCA
value.parameters
value.named_curve
p.char_two
p.prime
p.ppBasis
p.tpBasis
p.onBasis
p.other
PKCS8_PRIV_KEY_INFO
pkey
pkeyalg
x%s
Basis Type: %s
Field Type: %s
ASN1 OID: %s
%s %s%lu (%s0x%lx)
value.bag
value.safes
value.shkeybag
value.keybag
value.sdsicert
value.x509cert
value.other
cert_info
\X
'() ,-./:=?
CONF_def part of OpenSSL 1.0.0g 18 Jan 2012
[[%s]]
[%s] %s=%s
MD5 part of OpenSSL 1.0.0g 18 Jan 2012
PROXY_CERT_INFO_EXTENSION
crlUrl
certStatus
certId
OCSP_CERTSTATUS
value.unknown
value.revoked
value.good
value.byKey
value.byName
reqCert
OCSP_CERTID
issuerKeyHash
certs
%s - d:d:d%.*s %d%s
AUTHORITY_KEYID
enc_key
key_enc_algor
cert
d.encrypted
d.digest
d.signed_and_enveloped
d.enveloped
d.sign
d.data
.\crypto\evp\evp_pkey.c
d.receiptList
d.allOrFirstTier
d.compressedData
d.authenticatedData
d.encryptedData
d.digestedData
d.envelopedData
d.signedData
d.ori
d.pwri
d.kekri
d.kari
d.ktri
CMS_PasswordRecipientInfo
keyDerivationAlgorithm
keyIdentifier
CMS_KeyAgreeRecipientInfo
recipientEncryptedKeys
CMS_OriginatorIdentifierOrKey
d.originatorKey
CMS_OriginatorPublicKey
CMS_RecipientEncryptedKey
CMS_KeyAgreeRecipientIdentifier
d.rKeyId
CMS_RecipientKeyIdentifier
CMS_OtherKeyAttribute
keyAttr
keyAttrId
CMS_KeyTransRecipientInfo
encryptedKey
keyEncryptionAlgorithm
certificates
d.crl
d.subjectKeyIdentifier
d.issuerAndSerialNumber
CMS_CertificateChoices
d.v2AttrCert
d.v1AttrCert
d.extendedCertificate
d.certificate
CMS_OtherCertificateFormat
otherCert
otherCertFormat
X.509 part of OpenSSL 1.0.0g 18 Jan 2012
OPENSSL_ALLOW_PROXY_CERTS
X509_CERT_PAIR
X509_CERT_AUX
%s.dll
%lu:%s:%s:%d:%s
ddddddZ
ddddddZ
PEM part of OpenSSL 1.0.0g 18 Jan 2012
phrase is too short, needs to be at least %d chars
Enter PEM pass phrase:
TRUSTED CERTIFICATE
CERTIFICATE REQUEST
NEW CERTIFICATE REQUEST
CERTIFICATE
X509 CERTIFICATE
PRIVATE KEY
ENCRYPTED PRIVATE KEY
ANY PRIVATE KEY
.\crypto\evp\evp_key.c
nkey 
?456789:;
!"#$%&'()* ,-./0123
Verifying - %s
D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp
D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp
img.dims 
corrsize.height 
(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims() 
_img.size().height 
D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp
D:\Libs\opencv\sources\modules\core\src\alloc.cpp
D:\Libs\opencv\sources\modules\core\src\matrix.cpp
m.dims >= 2
0 
0 
m.dims 
0 
r == Range::all() || (0 
COI is not supported by the function
0 
0 
Unknown/unsupported array type
i 
(size_t)i 
!fixedSize() || ((Mat*)obj)->size.operator()() == _sz
!fixedSize() || ((UMat*)obj)->size.operator()() == _sz
!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)
!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)
CV_MAT_TYPE(mtype) == m.type()
m.dims == d
m.size[j] == sizes[j]
d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))
!fixedSize() || len == vv.size()
Vectors with element size %d are not supported. Please, modify OutputArray::create()
v[j].empty()
i 
checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)
_m.dims() 
_src.dims() 
src.size() == dst.size() && (src.cols == 1 || src.rows == 1)
dst.cols == dst.rows
m.dims 
_src.dims() 
A.size == arrays[i0]->size
A.step[d-1] == A.elemSize()
%s:%d: error: (%d) %s in function %s
%s:%d: error: (%d) %s
OpenCV Error: %s (%s) in %s, file %s, line %d
Inplace operation is not supported
Input image depth is not supported by function
Unsupported format or combination of formats
Input COI is not supported
No CUDA support
No OpenGL support
Unknown %s code %d
D:\Libs\opencv\sources\modules\core\src\system.cpp
tlsKey != TLS_OUT_OF_INDEXES
cv::TLSContainerStorage::releaseKey
key_ >= 0
D:\Libs\opencv\sources\modules\core\src\convert.cpp
j 
i1 >= 0 && j 
D:\Libs\opencv\sources\modules\core\src\copy.cpp
mask.depth() == CV_8U && (mcn == 1 || mcn == cn)
size() == mask.size()
checkScalar(value, type(), _value.kind(), _InputArray::MAT )
mask.empty() || (mask.type() == CV_8U && size == mask.size)
Unknown/unsupported border type
src.depth() == dst.depth() && src.size == dst.size
(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)
src.channels() == dst.channels()
D:\Libs\opencv\sources\modules\core\src\matop.cpp
CV_MAT_CN(_type) == e.a.channels()
Unknown operation
D:\Libs\opencv\sources\modules\core\src\arithm.cpp
The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'
(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)
The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'
type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)
(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)
The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'
D:\Libs\opencv\sources\modules\core\src\stat.cpp
mask.empty() || mask.type() == CV_8U
mask.empty() || mask.type() == CV_8UC1
dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn
D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp
!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp
type == srcB.type() && srcA.size() == srcB.size()
D:\Libs\opencv\sources\modules\core\src\umatrix.cpp
D:\Libs\opencv\sources\modules\core\src\array.cpp
_dst.data == data0
NULL array pointer is passed
Unrecognized or unsupported array type
unrecognized or unsupported array type
Only continuous nD arrays are supported here
Unsupported format
rect.width >= 0 && rect.height >= 0 && rect.x width && rect.y height && rect.x   rect.width >= (int)(rect.width > 0) && rect.y   rect.height >= (int)(rect.height > 0)
D:\Libs\opencv\sources\modules\core\src\datastructs.cpp
D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp
The library is compiled without CUDA support
D:\Libs\opencv\sources\modules\core\src\opengl.cpp
The library is compiled without OpenGL support
OpenCL.dll
D:\Libs\opencv\sources\modules\core\src\matmul.cpp
type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)
a_size.width == len
a_size.height == len
C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))
type == _src2.type()
src1.size == src2.size
src.channels() == 1
delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)
D:\Libs\opencv\sources\modules\core\src\lapack.cpp
type == _src2.type() && (type == CV_32F || type == CV_64F)
(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols
src.rows == src.cols
w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data
u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))
rhs.data == 0 || (rhs.type() == type && rhs.rows == m)
D:\Libs\opencv\sources\modules\core\src\persistence.cpp
-.Inf
An attempt to add element without a key to a map, or add element with key to sequence
The key is an empty
The key is too long
Key must start with a letter or _
Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '
Key should start with a letter or _
Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'
elements with keys can not be written to sequence
Images with planar data layout are not supported
2if%s
ß%s
function not supported
operation canceled
address_family_not_supported
operation_in_progress
operation_not_supported
protocol_not_supported
operation_would_block
address family not supported
broken pipe
inappropriate io control operation
not supported
operation in progress
operation not permitted
operation not supported
operation would block
protocol not supported
0123456789-
%b %d %H : %M : %S %Y
%m / %d / %y
%I : %M : %S %p
%d / %m / %y
The repeat operator "*" cannot start a regular expression.
The repeat operator "?" cannot start a regular expression.
The repeat operator " " cannot start a regular expression.
Found a closing repetition operator } with no corresponding {.
Can't terminate a sub-expression with an alternation operator |.
The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.
A regular expression can start with the alternation operator |.
Invalid alternation operators within (?...) block.
More than one alternation operator | was encountered inside a conditional expression.
Alternation operators are not allowed inside a DEFINE block.
A repetition operator cannot be applied to a zero-width assertion.
left-curly-bracket
right-curly-bracket
0123456789
Unmatched quantified repeat operator { or \{.
Invalid preceding regular expression prior to repetition operator.
boost::filesystem::directory_iterator::operator  
boost thread: trying joining itself
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
libs\log\src\code_conversion.cpp
libs\log\src\global_logger_storage.cpp
libs\log\src\attribute_name.cpp
[u-u-u u:u:u.u] [%s] %s %s
[u-u-u u:u:u.u] [%s] %s %ls
libs\log\src\thread_specific.cpp
Resource.cpp
%Y-%m-%d %H:%M:%S
en_US.UTF-8
log_ng.cpp
mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger
is_admin.cpp
c:\desktop_apps\sputniklib\auto_handle.hpp
process_enumerate.cpp
GetModuleFileNameEx succeed %s
Path.cpp
remote_config.cpp
string.cpp
version_info.cpp
AccountInfo.cpp
mailru::sqlite::database::database
sqlite.cpp
"#%{}|\^~[] ?&@=:,
hXXp://
hXXps://
process_util.cpp
unzip.cpp
filesystem_utils.cpp
mailru::firefox_js_core::load_prefs_js
firefox_js.cpp
!"#$%&'(
)* ,-./0123
encryption.cpp
testing_env.cpp
SessionsInfo.cpp
mailru::WaitForUserLogIn
Suggest URL
mailru::opera::searchini::save
opera_searchini.cpp
sync_objects.cpp
uninstall_manager.cpp
mailru::url_parser::init
url_parser.cpp
system_info\system_info_collector.cpp
crash_handler.cpp
shortcut.cpp
thread.entry_event
thread.exit_event
mailru::http::request_headers::get_header
C:\desktop_apps\SputnikLib/http_downloader.h
HTTP/1.1
^HTTP/1.1 (\d ) (. )
mailru::http::response_headers::response_headers
mailru::http::response_headers::get_file_time
http_downloader.cpp
mailru::http::downloader_impl::connection_data_file::~connection_data_file
mailru::http::downloader_impl::handle_read_headers
mailru::http::raw::downloader::fetch_file_attributes
HTTP error %2%: %3%
mailru::http::fetch_wstring_via_tempfile
system_info\system_info.cpp
s-sputnik.mail.ru
hXXps://VVV.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_Certificate_Authority.pem
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
255.255.255.255
asio.ssl
asio.ssl error
add_certificate_authority
https
HTTP error:
caching_policy.cpp
task_scheduler.cpp
Line %d, Column %d
Visual C   CRT: Not enough memory to complete call to strerror.
%S#[k
?#%X.y
MaxPolicyElementKey
Operation not permitted
Inappropriate I/O control operation
Broken pipe
operator
GetProcessWindowStation
pExecutionResource
SQLite format 3
3.7.11
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
foreign_keys
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_parent
sqlite_stat1
SQL logic error or missing database
unknown operation
large file support is disabled
RowKey
sqlite_detach
sqlite_attach
sqlite_version
sqlite_source_id
sqlite_log
sqlite_compileoption_used
sqlite_compileoption_get
SQLITE_
d-d-d d:d:d
d:d:d
d-d-d
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
922337203685477580
API call with %s database connection pointer
OsError 0x%x (%u)
os_win.c:%d: (%d) %s(%s) - %s
delayed %dms for lock/sharing conflict
%s-shm
%s\etilqs_
Recovered %d frames from WAL file %s
cannot limit WAL size: %s
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On page %d at right child:
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
unknown database %s
keyinfo(%d
%s(%d)
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mjX9X
foreign key constraint failed
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
zeroblob(%d)
abort at %d in [%s]: %s
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
cannot open value of type %s
cannot open virtual table: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s
%s: %s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
EXECUTE %s%s SUBQUERY %d
misuse of aggregate: %s()
%.*s"%w"%s
%s%.*s"%w"
%s OR name=%Q
type='trigger' AND (%s)
sqlite_
table %s may not be altered
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
invalid name: "%s"
too many attached databases - max %d
database %s is already in use
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
no such collation sequence: %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
indexed columns are not unique
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
unable to identify the object to be reindexed
table %s may not be modified
cannot modify %s because it is a view
foreign key mismatch
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
%s.%s may not be NULL
PRIMARY KEY must be unique
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
foreign_key_list
*** in database %s ***
unsupported encoding: %s
malformed database schema (%s)
%s - %s
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
USE TEMP B-TREE FOR %s
COMPOUND SUBQUERIES %d AND %d %s(%s)
%s.%s
%s:%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
SCAN TABLE %s %s%s(~%d rows)
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
-- TRIGGER %s
no such column: %s
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
%s SUBQUERY %d
%s TABLE %s
%s AS %s
%s USING %s%sINDEX%s%s%s
%s USING INTEGER PRIMARY KEY
%s (rowid=?)
%s (rowid>? AND rowid)
%s (rowid>?)
%s (rowid)
%s VIRTUAL TABLE INDEX %d:%s
%s (~%lld rows)
at most %d tables in a join
cannot use index: %s
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
unable to close due to unfinished backup operation
unknown database: %s
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
c:\desktop_apps\3party\ticpp\ticpp.h
ticpp.cpp
Type is unsupported
X;
%s>
%s="%s"
%s='%s'
version="%s"
encoding="%s"
standalone="%s"
type="%s"
href="%s"
unsupported version
.UTF-8
.windows-
windows1250
windows1251
windows1252
windows1253
windows1254
windows1255
windows1256
windows1257
windows874
windows932
windows936
Invalid or unsupported charset:
1.2.5
deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler
inflate 1.2.5 Copyright 1995-2010 Mark Adler
RSA PRIVATE KEY
PUBLIC KEY
DSA PRIVATE KEY
EC PRIVATE KEY
NETSCAPE_CERT_SEQUENCE
RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012
SHA part of OpenSSL 1.0.0g 18 Jan 2012
MD4 part of OpenSSL 1.0.0g 18 Jan 2012
CAST part of OpenSSL 1.0.0g 18 Jan 2012
Blowfish part of OpenSSL 1.0.0g 18 Jan 2012
:RC2 part of OpenSSL 1.0.0g 18 Jan 2012
.pp@0
aEÐ
 (#EÚ
ÚE
IDEA part of OpenSSL 1.0.0g 18 Jan 2012
libdes part of OpenSSL 1.0.0g 18 Jan 2012
DES part of OpenSSL 1.0.0g 18 Jan 2012
3OpenSSL 1.0.0g 18 Jan 2012
GOST signature length is %d
.\ssl\ssl_cert.c
%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s
EXPORT56
EXPORT40
EXPORT
wrong number of key bits
unsupported status type
unsupported ssl version
unsupported protocol
unsupported elliptic curve
unsupported digest type
unsupported compression algorithm
unsupported cipher
unknown pkey type
unknown key exchange type
unknown certificate type
unable to find public key parameters
unable to extract public key
unable to decode ecdh certs
unable to decode dh certs
tried to use unsupported cipher
tls peer did not respond with certificate list
tls client cert req with anon cipher
tlsv1 unsupported extension
tlsv1 certificate unobtainable
tlsv1 bad certificate status response
tlsv1 bad certificate hash value
tlsv1 alert export restriction
sslv3 alert unsupported certificate
sslv3 alert no certificate
sslv3 alert certificate unknown
sslv3 alert certificate revoked
sslv3 alert certificate expired
sslv3 alert bad certificate
signature for non signing certificate
reuse cert type not zero
reuse cert length not zero
public key not rsa
public key is not rsa
public key encrypt error
peer error unsupported certificate type
peer error no certificate
peer error certificate
peer did not return a certificate
null ssl method passed
no publickey
no private key assigned
no privatekey
Peer haven't sent GOST certificate, required for selected ciphersuite
no client cert received
no client cert method
no ciphers passed
no certificate specified
no certificate set
no certificate returned
no certificate assigned
no certificates returned
missing tmp rsa pkey
missing tmp rsa key
missing tmp ecdh key
missing tmp dh key
missing rsa signing cert
missing rsa encrypting cert
missing rsa certificate
missing export tmp rsa key
missing export tmp dh key
missing dsa signing cert
missing dh rsa cert
missing dh key
missing dh dsa cert
krb5 server rd_req (keytab perms?)
key arg too long
invalid ticket keys length
http request
https proxy request
error generating tmp rsa key
ecc cert should have sha1 signature
ecc cert should have rsa signature
ecc cert not for signing
ecc cert not for key agreement
cert length mismatch
certificate verify failed
bad ecc cert
bad dh pub key length
TLS1_SETUP_KEY_BLOCK
tls1_cert_verify_mac
SSL_VERIFY_CERT_CHAIN
SSL_use_RSAPrivateKey_file
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey
SSL_use_PrivateKey_file
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey
SSL_use_certificate_file
SSL_use_certificate_ASN1
SSL_use_certificate
SSL_SET_PKEY
SSL_SET_CERT
SSL_SESS_CERT_NEW
SSL_GET_SIGN_PKEY
SSL_GET_SERVER_SEND_CERT
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate_file
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate
SSL_CTX_set_client_cert_engine
SSL_CTX_check_private_key
SSL_CHECK_SRVR_ECC_CERT_AND_ALG
SSL_check_private_key
SSL_CERT_NEW
SSL_CERT_INSTANTIATE
SSL_CERT_INST
SSL_CERT_DUP
SSL_add_file_cert_subjects_to_stack
SSL_add_dir_cert_subjects_to_stack
SSL3_SETUP_KEY_BLOCK
SSL3_SEND_SERVER_KEY_EXCHANGE
SSL3_SEND_SERVER_CERTIFICATE
SSL3_SEND_CLIENT_KEY_EXCHANGE
SSL3_SEND_CLIENT_CERTIFICATE
SSL3_SEND_CERTIFICATE_REQUEST
SSL3_OUTPUT_CERT_CHAIN
SSL3_GET_SERVER_CERTIFICATE
SSL3_GET_KEY_EXCHANGE
SSL3_GET_CLIENT_KEY_EXCHANGE
SSL3_GET_CLIENT_CERTIFICATE
SSL3_GET_CERT_VERIFY
SSL3_GET_CERT_STATUS
SSL3_GET_CERTIFICATE_REQUEST
SSL3_GENERATE_KEY_BLOCK
SSL3_CHECK_CERT_AND_ALGORITHM
SSL3_ADD_CERT_TO_BUF
SSL2_SET_CERTIFICATE
SSL2_GENERATE_KEY_MATERIAL
REQUEST_CERTIFICATE
GET_CLIENT_MASTER_KEY
DTLS1_SEND_SERVER_KEY_EXCHANGE
DTLS1_SEND_SERVER_CERTIFICATE
DTLS1_SEND_CLIENT_KEY_EXCHANGE
DTLS1_SEND_CLIENT_CERTIFICATE
DTLS1_SEND_CERTIFICATE_REQUEST
DTLS1_OUTPUT_CERT_CHAIN
DTLS1_ADD_CERT_TO_BUF
CLIENT_MASTER_KEY
CLIENT_CERTIFICATE
SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012
s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)
c->iv_len session->key_arg)
s->s2->key_material_length s2->key_material
SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012
TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012
os.length session_id)
DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012
key expansion
client write key
server write key
%s:%d: rec->data != rec->input
libs\log\src\text_file_backend.cpp
%H:%M:%S.%f
.\crypto\engine\eng_pkey.c
Load certs from files in a directory
%s%clx.%s%d
unsupported type
unsupported recpientinfo type
unsupported recipient type
unsupported kek algorithm
unsupported content type
signer certificate not found
private key does not match certificate
no public key
no private key
no msgsigdigest
no key or cert
no key
not supported for this key type
not key transport
msgsigdigest wrong length
msgsigdigest verification failure
msgsigdigest error
invalid key length
invalid encrypted key length
error setting key
error getting public key
certificate verify error
certificate has no keyid
certificate already present
CMS_SIGNERINFO_VERIFY_CERT
CMS_RecipientInfo_set0_pkey
CMS_RecipientInfo_set0_key
CMS_RecipientInfo_ktri_cert_cmp
cms_msgSigDigest_add1
CMS_GET0_CERTIFICATE_CHOICES
CMS_EncryptedData_set1_key
CMS_decrypt_set1_pkey
CMS_decrypt_set1_key
CMS_add1_recipient_cert
CMS_add0_recipient_key
CMS_add0_cert
unsupported requestorname type
no certificates in chain
error parsing url
PARSE_HTTP_LINE1
OCSP_parse_url
OCSP_cert_id_new
unimplemented public key method
invalid cmd number
invalid cmd name
failed loading public key
failed loading private key
cmd not executable
ENGINE_UNLOAD_KEY
ENGINE_load_ssl_client_cert
ENGINE_load_public_key
ENGINE_load_private_key
ENGINE_get_pkey_meth
ENGINE_get_pkey_asn1_meth
ENGINE_ctrl_cmd_string
ENGINE_ctrl_cmd
ENGINE_cmd_is_executable
unsupported md algorithm
invalid signer certificate purpose
ess signing certificate error
ess add signing cert error
TS_VERIFY_CERT
TS_TST_INFO_set_msg_imprint
TS_RESP_CTX_set_signer_cert
TS_RESP_CTX_set_certs
TS_REQ_set_msg_imprint
TS_MSG_IMPRINT_set_algo
TS_CHECK_SIGNING_CERTS
ESS_SIGNING_CERT_NEW_INIT
ESS_CERT_ID_NEW_INIT
ESS_ADD_SIGNING_CERT
functionality not supported
WIN32_JOINER
unsupported pkcs12 mode
key gen error
PKCS8_add_keyusage
PKCS12_PBE_keyivgen
PKCS12_newpass
PKCS12_MAKE_SHKEYBAG
PKCS12_MAKE_KEYBAG
PKCS12_key_gen_uni
PKCS12_key_gen_asc
PKCS12_add_localkeyid
unsupported option
unable to get issuer keyid
policy syntax not currently supported
operation not defined
no proxy cert policy language defined
no issuer certificate
extension setting not supported
V2I_EXTENDED_KEY_USAGE
V2I_AUTHORITY_KEYID
S2I_SKEY_ID
S2I_ASN1_SKEY_ID
R2I_CERTPOL
unsupported cipher type
unable to find certificate
signing not supported for this key type
operation not supported on this type
no recipient matches key
no recipient matches certificate
encryption not supported for this key type
decrypted key is wrong length
PKCS7_add_certificate
unsupported method
no port specified
no port defined
no accept port specified
BIO_get_port
ECDH_compute_key
data too large for key size
unsupported field
passed null parameter
not a supported NIST prime
missing private key
keys not set
invalid private key
PKEY_EC_SIGN
PKEY_EC_PARAMGEN
PKEY_EC_KEYGEN
PKEY_EC_DERIVE
PKEY_EC_CTRL_STR
PKEY_EC_CTRL
o2i_ECPublicKey
i2o_ECPublicKey
i2d_ECPrivateKey
EC_KEY_print_fp
EC_KEY_print
EC_KEY_new
EC_KEY_generate_key
EC_KEY_copy
EC_KEY_check_key
ECKEY_TYPE2PARAM
ECKEY_PUB_ENCODE
ECKEY_PUB_DECODE
ECKEY_PRIV_ENCODE
ECKEY_PRIV_DECODE
ECKEY_PARAM_DECODE
ECKEY_PARAM2TYPE
DO_EC_KEY_PRINT
d2i_ECPrivateKey
zlib not supported
wrong public key type
unsupported public key type
unsupported encryption algorithm
unsupported any defined by type
unknown public key type
unable to decode rsa private key
unable to decode rsa key
streaming not supported
private key header missing
digest and key type not supported
bad password read
X509_PKEY_new
i2d_RSA_PUBKEY
i2d_PublicKey
i2d_PrivateKey
i2d_EC_PUBKEY
i2d_DSA_PUBKEY
d2i_X509_PKEY
d2i_PublicKey
d2i_PrivateKey
d2i_AutoPrivateKey
unsupported algorithm
unknown key type
unable to get certs public key
public key encode error
public key decode error
no cert set for us to verify
method not supported
loading cert dir
key values mismatch
key type mismatch
cert already in hash table
cant check dh key
X509_verify_cert
X509_STORE_add_cert
X509_REQ_check_private_key
X509_PUBKEY_set
X509_PUBKEY_get
X509_load_cert_file
X509_load_cert_crl_file
X509_get_pubkey_parameters
X509_check_private_key
GET_CERT_BY_SUBJECT
ADD_CERT_DIR
PKEY_DSA_KEYGEN
PKEY_DSA_CTRL
unsupported key components
unsupported encryption
read key
public key no rsa
problems getting password
keyblob too short
keyblob header parse error
expecting public key blob
expecting private key blob
error converting private key
PEM_WRITE_PRIVATEKEY
PEM_READ_PRIVATEKEY
PEM_READ_BIO_PRIVATEKEY
PEM_PK8PKEY
PEM_F_PEM_WRITE_PKCS8PRIVATEKEY
DO_PK8PKEY_FP
DO_PK8PKEY
d2i_PKCS8PrivateKey_fp
d2i_PKCS8PrivateKey_bio
unsupported salt type
unsupported private key algorithm
unsupported prf
unsupported key size
unsupported key derivation function
unsupported keylength
unsuported number of rounds
private key encode error
private key decode error
operaton not initialized
operation not supported for this keytype
no operation set
no key set
keygen failure
invalid operation
expecting a ec key
expecting a ecdsa key
expecting a dsa key
expecting a dh key
expecting an rsa key
different key types
ctrl operation not implemented
command not supported
camellia key setup failed
bn pubkey error
bad key length
aes key setup failed
PKEY_SET_TYPE
PKCS5_v2_PBE_keyivgen
PKCS5_PBE_keyivgen
EVP_PKEY_verify_recover_init
EVP_PKEY_verify_recover
EVP_PKEY_verify_init
EVP_PKEY_verify
EVP_PKEY_sign_init
EVP_PKEY_sign
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen
EVP_PKEY_new
EVP_PKEY_keygen_init
EVP_PKEY_keygen
EVP_PKEY_get1_RSA
EVP_PKEY_get1_EC_KEY
EVP_PKEY_GET1_ECDSA
EVP_PKEY_get1_DSA
EVP_PKEY_get1_DH
EVP_PKEY_encrypt_old
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt
EVP_PKEY_derive_set_peer
EVP_PKEY_derive_init
EVP_PKEY_derive
EVP_PKEY_decrypt_old
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt
EVP_PKEY_CTX_dup
EVP_PKEY_CTX_ctrl_str
EVP_PKEY_CTX_ctrl
EVP_PKEY_copy_parameters
EVP_PKEY2PKCS8_broken
EVP_PKCS82PKEY_BROKEN
EVP_PKCS82PKEY
EVP_CIPHER_CTX_set_key_length
ECKEY_PKEY2PKCS8
ECDSA_PKEY2PKCS8
DSA_PKEY2PKCS8
DSAPKEY2PKCS8
D2I_PKEY
CAMELLIA_INIT_KEY
AES_INIT_KEY
invalid public key
PKEY_DH_KEYGEN
PKEY_DH_DERIVE
GENERATE_KEY
COMPUTE_KEY
rsa operations not supported
key size too small
invalid keybits
illegal or unsupported padding mode
digest too big for rsa key
data too small for key size
RSA_generate_key
RSA_check_key
RSA_BUILTIN_KEYGEN
PKEY_RSA_VERIFYRECOVER
PKEY_RSA_SIGN
PKEY_RSA_CTRL_STR
PKEY_RSA_CTRL
.\crypto\asn1\x_pkey.c
C:\desktop_apps\_out\MailRuUpdater.pdb
MailRuUpdater.exe
??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ
?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A
?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A
?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A
?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A
?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A
?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A
?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A
?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A
GetProcessHeap
KERNEL32.dll
SetWindowsHookExW
UnhookWindowsHookEx
USER32.dll
GDI32.dll
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
ReportEventA
ADVAPI32.dll
FindExecutableW
ShellExecuteW
SHELL32.dll
ole32.dll
OLEAUT32.dll
SHLWAPI.dll
COMCTL32.dll
WS2_32.dll
PSAPI.DLL
USERENV.dll
WTSAPI32.dll
CRYPT32.dll
VERSION.dll
CreateIoCompletionPort
GetCPInfo
ShellExecuteExW
CoInternetParseUrl
urlmon.dll
PeekNamedPipe
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
zcÁ
.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@
.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@
.?AVAuditFirefox@mailru@@
.?AVCheckerFirefox@AuditFirefox@mailru@@
.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@
.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@
.?AVCheckerVbmFirefox@AuditFirefox@mailru@@
.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@
.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@
.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@
.?AVAuditGoogleChrome@mailru@@
.?AVCheckerCh@AuditGoogleChrome@mailru@@
.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@
.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@
.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@
.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@
.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@
.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@
.?AV?$_Func_base@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AVsettings@firefox@mailru@@
.?AVvisual_bookmarks@firefox@mailru@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@
.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@
.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@
.?AVwindows_file_codecvt@@
.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@
.?AVexception@sqlite@mailru@@
.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@
.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@
.?AUProcessKey@sysinfo@mailru@@
.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@
.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@
.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@
.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@
.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@
.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@
.?AVconnection_data@downloader_impl@http@mailru@@
.?AVconnection_data_file@downloader_impl@http@mailru@@
.?AVconnection_data_string@downloader_impl@http@mailru@@
.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@
.?AV?$sp_counted_impl_p@Vdownload_limitation@downloader_impl@http@mailru@@@detail@boost@@
.?AV?$sp_counted_impl_p@Vconnection_data_file@downloader_impl@http@mailru@@@detail@boost@@
.?AV?$sp_counted_impl_p@Vconnection_data_string@downloader_impl@http@mailru@@@detail@boost@@
.?AVinvalid_scheduler_policy_key@Concurrency@@
.?AVinvalid_operation@Concurrency@@
.?AVunsupported_os@Concurrency@@
.?AVinvalid_oversubscribe_operation@Concurrency@@
.?AUITopologyExecutionResource@Concurrency@@
.?AUIExecutionContext@Concurrency@@
.?AVExecutionResource@details@Concurrency@@
.?AUIExecutionResource@Concurrency@@
Inappropriate I/O control opera
0 0$0(0,0
313C3O3a3m3r3
0%0s0
343f3
8:X:#;i;n;};
8(8&:5:_:
;";';&
9%9U9u9
3?4X4
8Å“9h9
:&:;:@:{:
4"414&585
0"0)00090
3%3s3
2/2x2c3}3
9$9(9,90949
878
77R7c7o7v7
5#6-676\6
8 8%8*888
? ?$?(?,?0?4?8?
8 8$8(8,8&9
2%3u3z3
9 9$9(9,9
5 5$5(5,50545~5
6$6,666
2"2(22282*323
2#20262=2^2
5"=)=2=9=
708}8!:(:
7 7-787@7_7
1 1$1(1,1
0'0-020@0
3#323@3#525@5
: :$:(:,:0:4:
5,5054585
3 3$3(3,3034383
5 5$5(5,50545
4 4$4(4,484
6 6$6(6,6064686
8 8$8(8,8084888
9(9,90949|9
=@>\>`>|>
> >$>(>,>0>4>8>
8 8$8(8,808
? ?$?(?,?0?4?8?
1 1$1(1,101
6 6$6(6,6064686
8 8$8(8,8084888
1 1$1(1,1014181
6 6$6(6,6
2$2,282\2|2
7,787@7`7
2,282\2|2
3 3(343\3
7,787\7|7
:,:8:@:`:
?(?4?\?
>$>,>8>\>|>
;(;4;
1$1,181`1
0 0(040\0
1 1(1,1|1
2 202@2`2
> >$>(>,>0>|>
praetorian.exe
qipguard.exe
BrowserManager.exe
BrowserManagerGUI.exe
QHActiveDefense.exe
QHSafeTray.exe.exe
QHWatchdog.exe
GuardMailRu.exe
JMail.Ru\Sputnik\Report
hXXp://xml.binupdate.mail.ru/audit_config.mrdj
Start new check operation
o failed to parse. New report Created
restore mail.ru for:
operation_type
checker->Check failed, msg =
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetched
FFExtensions/FFVbm/Url
Hp/Url
Dse/Url
Vbm/Url
Google\Chrome\User Data\Safe Browsing Extension Blacklist
Advapi32.dll
MGoogle/Chrome/User Data
Google/Chrome/Application
Software\Policies\Google\Chrome
hXXp://xml.binupdate.mail.ru/ext_storage.mrdj
Google Chrome
Google/Chrome/User Data/Default
Google/Chrome/Application/chrome.exe
Software/Google/Chrome/BLBeacon
URLS
manifest.json
sqlite3_reset
sqlite3_exec
Web Data
chrome.exe
select k.url from meta m, keywords k where m.key='Default Search Provider ID' and m.value=k.id
select id, short_name from keywords where url like '%go.mail.ru%' COLLATE NOCASE
No go.mail.ru in chromium
SELECT id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE
DELETE FROM keywords WHERE short_name = '@MAIL.RU'
SELECT * FROM keywords
ALTER TABLE keywords ADD COLUMN alternate_urls VARCHAR DEFAULT ''
ALTER TABLE keywords ADD COLUMN search_terms_replacement_key VARCHAR DEFAULT ''
INSERT INTO keywords
id, short_name, keyword, favicon_url, url, show_in_default_list, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
@Mail.Ru','go.mail.ru','hXXp://go.mail.ru/favicon.ico','hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg',1,1,'',1333701777,0,'windows-1251','hXXp://suggests.go.mail.ru/ff3?q={searchTerms}',%PREPOPULATE_ID%,0,'',0,'03095DE3-A6E7-4793-A20C-399A0F4A92E1'
UPDATE keywords SET short_name = '
@Mail.Ru', keyword = 'go.mail.ru', favicon_url = 'hXXp://go.mail.ru/favicon.ico', url = 'hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg%RFR%',show_in_default_list = '1' WHERE id = '%ID%'
SELECT id , prepopulate_id FROM keywords WHERE keyword = 'go.mail.ru' COLLATE NOCASE
SELECT id , prepopulate_id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE
SELECT id, prepopulate_id FROM keywords
' WHERE key = 'Default Search Provider ID'
' WHERE key = 'Default Search Provider ID Backup'
SELECT value FROM meta WHERE key = 'version'
UPDATE keywords SET suggest_url = '%SUGGEST_URL%' WHERE keyword like '%mail.ru%'
%SUGGEST_URL%
^(chrome-extension://)?(\w{32})?/?
Software/Google/Chrome/Extensions
Sync Data Backup/SyncData.sqlite3
hXXps://clients2.google.com/service/update2/crx
hXXp://xml.binupdate.mail.ru/guard/mrids.mrdj?
Extension from url installed
DefaultSearchProviderSearchURL
DefaultSearchProviderKeyword
&%1$=%2%
mmail.ru
VVV.mail.ru
VVV.go.mail.ru
common_process.exe
{27116687-8CD6-4A82-BA83-5099C3A885BF}
{A12C4AB1-F4D0-4771-8C21-613E9D12491F}
{1079004F-E4EF-4A44-9D1F-7C9CE09CE258}
{901B414B-72A2-48C6-8DCD-29388B8B3E40}
{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}
{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}
{ADAC3638-040C-498C-845A-F89B99705444}
{4519D3B5-465C-4AE2-A905-960CA7D5385C}
{F581DE96-9AA1-45C8-8335-B7445525371A}
{DCEF19BB-AB61-48F4-A7CB-6D677D90D1C2}
{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}
{11A1974E-9BEF-4B50-8E2F-9F25FC775BD1}
{3E57F3FE-4397-4DEA-A19A-760BFCD24242}
{603A8599-628C-4F00-A940-A09F1583A23E}
{D33EDE61-8E43-4C1F-9371-6A240B4DA5C9}
{C74622AC-AC0B-44E5-BDC2-EE39A5FD9EC9}
{ABCAA0D8-A892-481F-9492-ACC63768F659}
{8DC7BF6A-58F3-4740-B600-34E37FFADC21}
{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}
{96AF929E-B8EB-499E-99A8-095E4262BE26}
{027940D4-10B8-43B6-9707-A4EE47618E1D}
{45DA0BF7-F31B-4360-BF9A-8E7374A78916}
{5552B451-2086-4B64-82C6-732B18E41FCD}
{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}
{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}
{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}
{3CE4F0C3-2143-491F-8F20-27792166C41F}
{66CD85E0-6D8E-444E-9D71-AED8BA171A26}
{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}
{14737ADB-9F88-47E8-A76F-D365509795AC}
chrome-extension://clpdgmdkdnijjbgmnajolnbnjejoeogm/visual-bookmarks.html
chrome-extension://hcncjpganfocbfoenaemagjjopkkindp/visual-bookmarks.html
chrome-extension://jaocgokledfmfebefgbeokdodbbdjhdd/visual-bookmarks.html
chrome-extension://dhngkpgdbpbkopndlpkicfaiffphdkbo/visual-bookmarks.html
)Software\AppDataLow\Software\Mail.Ru\IE_Bar
Software\Mail.Ru\IE_Bar
Software/Mail.Ru/Updater
Software\Mail.Ru\Flags
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall
SOFTWARE/Microsoft/Windows/CurrentVersion/Run
SOFTWARE/Mail.Ru
@Mail.Ru
{09900DE8-1DCA-443F-9243-26FF581438AF}
{58810E75-E249-44C6-B989-11D227263E24}
{91397D20-1446-11D4-8AF4-0040CA1127B6}
{95289393-33EA-4F8D-B952-483415B9C955}
hXXp://mrds.mail.ru/update/2/
hXXp://suggests.go.mail.ru/ie8?q={SearchTerms}
{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Mail.Ru
iexplore.exe
{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}
firefox.exe
opera.exe
SOFTWARE/Google/Chrome/Extensions
amigo.exe
nichrome.exe
browser.exe
Yandex.Browser.New
Software/Mail.Ru/ChromeInstaller
hXXp://xml.binupdate.mail.ru/guard/update/version.xml
F777C640-57F8-4ECE-A40B-F571D25C2EFE
.html
opera
launcher.exe
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Google Chrome
SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Bromium
Software/Microsoft/Windows/CurrentVersion/Uninstall/Xpom
Software/Microsoft/Windows/CurrentVersion/Uninstall/{1B89BC31-F539-4EBD-B94F-C24705C73433}
Software/Microsoft/Windows/CurrentVersion/Uninstall/YandexBrowser
xpom.exe
Software/Microsoft/Windows/CurrentVersion/Uninstall/xpom
Software/Microsoft/Windows/CurrentVersion/Uninstall/Amigo
google chrome
firefox
Microsoft/Windows/Start Menu
Microsoft/Windows/
tsearch-metadata.json
prefs.js
sessionstore.js
places.sqlite
cookies.sqlite
Mozilla\Firefox\profiles.ini
Mozilla\Firefox
Lsearch.json
Mozilla Firefox
mailru.xml
@Mail.Ru
@Mail.Ru
hXXp://VVV.mail.ru/
extensions.ini
ini keys failed
extensions.json
extensions.json not parsed!
localstore.rdf
extensions.sqlite
PMail.Ru\Tmp\ffvisualbookmarks.7z
install.rdf
d.autoreg
extensions.rdf
extensions.cache
install_options.xml
@Mail.Ru
Mail.ru
Firefox
File: %s
SELECT last_visit_time FROM urls order by last_visit_time DESC LIMIT 1
couldn't create instance of IUrlHistoryStg2
EnumUrls failed
FaviconURLFallback
SuggestionsURL
ie.reg
[-HKEY_USERS\
import
reg.exe
*.dll
%1%version.txt?type=%2%&GUID=%3%&rfr=%4%
metric successfully send, url =
metric send failed, url =
Mail.Ru/Id
Software\Microsoft\Windows\CurrentVersion\Run
Software\Mail.ru\Tech\ptls
Software/Mail.Ru/Guard
R.delay
Mail.Ru/mrst
hXXp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?
url_argument
key_arg
^(http[s]?:\/\/)?(www\.)?([\w\.-] )([:\/].*)?$
Remote tasks execution started
hXXp://xml.binupdate.mail.ru/tasks.mrdj?
added task to executing task array
Software/Microsoft/Windows/CurrentVersion/Run
Syahoo.com
webalta.ru
yambler.net
yafinder.com
Found mail.ru extension of type
KhXXp://mailruupdater.cdnmail.ru/MailRuUpdater.exe
5Software\Mail.ru\Tech\ptls
SSoftware\Mail.Ru
Allow service process execute task
--uac-passed
mru_uac_passed
Guard@Mail\.ru
SwReporter
software_reporter_tool.log
Error parsing reporter logs:
dFailed to update SwReporter data:
since_last_exec
chrome
hXXp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj?
Terminating update.exe
update.exe
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj?
\bmail\.ru\b
K{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633}
{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
qip.ru
Start proceed Google Chrome
Google Chrome is done
Google Chrome is not done
Start proceed Firefox
Firefox is done
Firefox is not done
hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj?
hXXp://go.mail.ru/?chverfix=1&fr=chverfix_sg
hXXp://go.mail.ru/search?q={SearchTerms}&ieverfix=1&fr=ieverfix_dse
hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj
hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetching failed
Svk.com/audios
ok.ru/music
my.mail.ru/music
e.mail.ru/messages/inbox
vk.com/app
ok.ru/game
ok.ru/app
my.mail.ru/app
games.mail.ru
SELECT id, url, last_visit_time FROM urls where url like '%%%1%%%' order by last_visit_time DESC limit 1
SELECT url, last_visit_date FROM moz_places where url like '%%%1%%%' and guid != '' and guid notnull order by last_visit_date desc limit 1
\Toolbar\Custom\Packages\hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox
Yandex\Toolbar\state.json
yasearch-xb\plugins.json
Software\Mail.Ru\Updater
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
uac-passed
Kamigo_tmp.exe
hXXp://binupdate.mail.ru/amigo/version2.xml
internet_tmp.exe
hXXp://binupdate.mail.ru/chrome/version3.xml
internetupdater_tmp.exe
hXXp://binupdate.mail.ru/chrome/version2.xml
0.0.0.0
inttoam_tmp.exe
hXXp://binupdate.mail.ru/chrome/internet_to_amigo.xml
28.0.1501.430
hXXp://binupdate.mail.ru/updater/version.xml
mrutmp.exe
.mru_update_service
C:\logging
amsg
last_chrome
ovr_chrome
Google/Chrome/User Data/Default/History
hXXp://xml.binupdate.mail.ru/friends.mrdj
oUpdater.Mail.Ru
Mail.Ru Group
Updater.Mail.Ru exist
Updater.Mail.Ru: Error during coping file, rc =
Service::Update update operation is proceed
Updater.Mail.Ru: StartService: RegisterServiceCtrlHandler returned error
Updater.Mail.Ru: StartService: SetServiceStatus returned error
Updater.Mail.Ru: SERVICE_CONTROL_STOP
Updater.Mail.Ru: SERVICE_CONTROL_INTERROGATE
Updater.Mail.Ru: SERVICE_CONTROL_SHUTDOWN
%1% (%2%)
\StringFileInfo\xx
notepad.exe
SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System
0123456789 ,.
Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders
sqlite3_prepare16_v2
sqlite3_step
sqlite3
SQLite error %1% returned by %2%
SQLite error code %1%, file %2%
sAbsolutePath: 
Incorrect firefox js file
stub.exe
hXXp://xml.binupdate.mail.ru/tenv.mrdj
filter.cfg
metrics.csv
http.csv
%Y%m%d
%Y-%m-%d
%H:%M:%S
%Y%m%dT%H%M%S%F%q
%Y-%m-%d %H:%M:%S%F%Q
%Y-%b-%d %H:%M:%S%F %z
%O:%M:%S%F
Invalid url
jMail.ru/ifrm
SOFTWARE/Mail.ru
Internet Explorer/iexplore.exe
Global\651CB287-2277-4F76-84C6-1D61E868304B
Mail.ru/CommonCache
HTTP code %1%
%Y-%b-%d
l%Y%m%d
SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders
asio-58CCDC44-6264-4842-90C2-F3C545CB8AA7-%u-%p
hXXp://xml.binupdate.mail.ru/cache_policy.mrdj
rCachingPolicy/Urls
mscoree.dll
madvapi32.dll
skernel32.dll
combase.dll
- floating point support not loaded
- CRT not initialized
- Attempt to initialize the CRT more than once.
portuguese-brazilian
888816666554443
6666554443
!6666554443
%5N.log
%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe
Mail.Ru updater
1.17.0.150
3>
3>
3r3>