Skip to main content

Sample_e9264fbd29


GenericEmailWorm.YR (Lavasoft MAS)Behaviour: Worm, EmailWorm

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: e9264fbd29483aa7221d04df6a254528

SHA1: 92ab119b20817e679e8d91c4a631b101bad394ed

SHA256: 56f3bc8cf9e062169279597f20b0d5f04beb0e097e0abcbf3e9063f2c2597a46

SSDeep: 196608:aBWnXURnB8PJkepGtayKZDOJcejsGhEv20:aGPCXcyEJgEO0

Size: 6746680 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: BorlandDelphi30, UPolyXv05_v6

Company: Auslogics Labs Pty Ltd

Created at: 2013-10-13 11:19:32

Analyzed on: Windows7Ada SP1 64-bit

Summary: Worm. A program that is primarily replicating on networks or removable drives.

Dynamic Analysis

Payload

Behaviour Description
EmailWormWorm can send e-mails.


Process activity

The Worm creates the following process(es):

TPAutoConnSvc.exe:1776
reader.exe:1636
PCBooster.exe:476
DefaultBrowserFinder.exe:888
%original file name%.exe:2528
e9264fbd29483aa7221d04df6a254528.tmp:1728
GASender.exe:3756

The Worm injects its code into the following process(es):

PCBooster.exe:3308

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process PCBooster.exe:476 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

%Program Files% (x86)\TweakBit\PCBooster\AxComponentsVCL.bpl (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (471 bytes)
C:\ProgramData\TweakBit\PCBooster\1.x\Logs\PCBooster.log (4258 bytes)
%Program Files% (x86)\TweakBit\PCBooster\vcl160.bpl (291 bytes)
%Program Files% (x86)\TweakBit\PCBooster\AxComponentsRTL.bpl (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_D5F09CAA6E2CA434FEDC79A84C61CABA (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (1544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_D5F09CAA6E2CA434FEDC79A84C61CABA (471 bytes)
%Program Files% (x86)\TweakBit\PCBooster\rtl160.bpl (146 bytes)
%Program Files% (x86)\TweakBit\PCBooster\vclimg160.bpl (356 bytes)

The process PCBooster.exe:3308 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$CF3B.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$9D6B.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$E1BB.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$2A12.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$5D10.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$209C.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$764F.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$333C.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$B3A5.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$7317.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$C691.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$E81D.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$1AC9.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$973D.lnk (1 bytes)

The process DefaultBrowserFinder.exe:888 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$Cookies99236784 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\sqlite3.dll (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$Cookies99236831 (10 bytes)

The process %original file name%.exe:2528 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-VJQ7R.tmp\e9264fbd29483aa7221d04df6a254528.tmp (50 bytes)

The process e9264fbd29483aa7221d04df6a254528.tmp:1728 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

%Program Files% (x86)\TweakBit\PCBooster\unins000.msg (646 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-JLSEP.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GASender.exe (3073 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-HAIP5.tmp (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\AxComponentsRTL.bpl (7596 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-VNP0E.tmp (1281 bytes)
%Program Files% (x86)\TweakBit\PCBooster\Lang\is-EDSJA.tmp (53 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-OT2SA.tmp (21387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\installer_enu.ini (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\AxComponentsRTL.bpl (7547 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-H979H.tmp (7971 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakBit\PCBooster\TweakBit PC Booster on the Web.url (111 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-5MSGL.tmp (673 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-Q0SJ3.tmp (22336 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-RN34A.tmp (23811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\EULA.rtf (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\vcl160.bpl (24102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\AxComponentsVCL.bpl (22482 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-2RSMV.tmp (3073 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-9SV82.tmp (5441 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-5M99C.tmp (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GA.xml (868 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-ST3IJ.tmp (2 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-N00O5.tmp (7385 bytes)
%Program Files% (x86)\TweakBit\PCBooster\Lang\is-P03RI.tmp (37 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakBit\PCBooster\TweakBit PC Booster.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\ATUpdatersHelper.dll (6684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\reader.exe (2485 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-00OGU.tmp (132 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-HH77V.tmp (32641 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-73QEV.tmp (3361 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-ROL9M.tmp (601 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-UUJFI.tmp (2105 bytes)
%Program Files% (x86)\TweakBit\PCBooster\PCBooster.url (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\WizardHelper.dll (2321 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-VBS7G.tmp (3361 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-ES4AB.tmp (5873 bytes)
C:\Users\"%CurrentUserName%"\Desktop\TweakBit PCBooster.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GoogleAnalyticsHelper.dll (6663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\rtl160.bpl (21533 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-636VV.tmp (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\_isetup\_setup64.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GoogleAnalyticsHelper.dll (5873 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-1GJ8S.tmp (5873 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-Q4228.tmp (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-I0VOV.lnk (905 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-VAONU.tmp (7547 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-KIC4G.tmp (1425 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-CDRPO.tmp (7971 bytes)
%Program Files% (x86)\TweakBit\PCBooster\PCBooster.exe (49 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-Q4KSO.tmp (7433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\sqlite3.dll (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$9FB8.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\vclimg160.bpl (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\DefaultBrowserFinder.exe (2457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp (4 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-H3GGB.tmp (4545 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-9400Q.tmp (2105 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-HTLAN.tmp (25 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-A77H7.tmp (5873 bytes)
%Program Files% (x86)\TweakBit\PCBooster\unins000.dat (15741 bytes)
%Program Files% (x86)\TweakBit\PCBooster\Data\main.ini (31 bytes)
%Program Files% (x86)\TweakBit\PCBooster\is-1T4CP.tmp (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GA.xml (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GASender.exe (3589 bytes)

The process GASender.exe:3756 makes changes in the file system.


The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GoogleAnalyticsHelper.dll (790 bytes)

Registry activity

The process TPAutoConnSvc.exe:1776 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1]
"TrayData" = "2,Tray 3, 3,Tray 2, 1,Tray 1, 4,Manual Feed, 7,Auto Select"
"FormData" = "1,2159,2794,Letter¶40,40,2086,2712, 5,2159,3556,Legal¶40,40,2086,3474, 9,2100,2970,A4¶39,39,2032,2890, 7,1842,2667,Executive¶40,40,1761,2585, 258,2159,3302,8.5 x 13 (custom)¶40,40,2086,3220, 11,1480,2100,A5¶39,39,1408,2020, 70,1050,1480,A6¶39,39,975,1399, 13,1820,2570,B5 (JIS)¶39,39,1747,2490, 264,1950,2700,16K 195x270¶39,39,1882,2620, 263,1840,2600,16K 184x260¶39,39,1761,2520, 257,1970,2730,16K 197x273¶39,39,1896,2650, 43,1000,1480,Japanese Postcard¶39,39,921,1399, 82,1480,2000,Double Japan Postcard Rotated¶39,39,1408,1919, 20,1046,2413,Envelope #10¶40,40,975,2331, 37,983,1905,Envelope Monarch¶40,40,907,1823, 34,1760,2500,Envelope B5¶39,39,1693,2420, 28,1620,2290,Envelope C5¶39,39,1544,2209, 27,1100,2200,Envelope DL¶39,39,1029,2120"
"DelAfterCreate" = "1"

[HKU\.DEFAULT\Printers\DevModes2]
"NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1" = "4E 00 50 00 49 00 34 00 35 00 36 00 41 00 42 00"

The Worm deletes the following registry key(s):

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1]

The process reader.exe:1636 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"General.PartnerId" = "tweakbit"

The process PCBooster.exe:476 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCR\Wow6432Node\CLSID\{5D7D27E3-FF05-2968-061D-0779355AC07B}\Version]
"Assembly" = "5F 3E 15 CC C6 AE 4C 21 3C 7D 69 38 AA 90 45 CF"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"App.Application.AutostartEnable" = "1"
"General.InstallDateTime" = "A2 7E A1 C3 C4 87 E4 40"
"App.Application.UpdateDate" = "4F 63 A3 C3 C4 87 E4 40"
"App.Application.SendInfo" = "0"
"General.Language" = "enu"

The Worm deletes the following value(s) in system registry:


The Worm disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"TweakBit PCBooster PCBooster"

The process PCBooster.exe:3308 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"General.LastRun.PCBooster.exe" = "C9 92 C3 C3 C4 87 E4 40"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"App.Application.FileName" = "%Program Files% (x86)\TweakBit\PCBooster\PCBooster.exe"

The Worm deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process DefaultBrowserFinder.exe:888 makes changes in the system registry.


The Worm deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"General.DefWebBrowser"

The process e9264fbd29483aa7221d04df6a254528.tmp:1728 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash" = "8D 44 CE 77 AB 70 80 A9 C0 D4 92 F5 8A 91 F4 47"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFiles0000" = "%Program Files% (x86)\TweakBit\PCBooster\WizardHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\GoogleAnalyticsHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\GASender.exe, %Program Files% (x86)\TweakBit\PCBooster\ATToolsStdHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\ATUpdatersHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\sqlite3.dll, %Program Files% (x86)\TweakBit\PCBooster\ProductHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\Localizer.dll, %Program Files% (x86)\TweakBit\PCBooster\DebugHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\SendDebugLog.exe, %Program Files% (x86)\TweakBit\PCBooster\SettingsHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\CommonForms.Site.dll, %Program Files% (x86)\TweakBit\PCBooster\CommonForms.Routine.dll, %Program Files% (x86)\TweakBit\PCBooster\TaskSchedulerHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\AxBrowsers.dll, %Program Files% (x86)\TweakBit\PCBooster\DiskCleanerHelper.dll, %Program Files% (x86)\TweakBit\PCBooster\InternetOpǼ"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"MajorVersion" = "1"
"Publisher" = "Auslogics Labs Pty Ltd"
"DisplayVersion" = "1.6.7.2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"Inno Setup: Icon Group" = "TweakBit\PCBooster"
"DisplayIcon" = "%Program Files% (x86)\TweakBit\PCBooster\PCBooster.exe"
"EstimatedSize" = "24653"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"General.TrafficId" = "direct"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"Inno Setup: User" = "%CurrentUserName%"
"NoModify" = "1"
"URLInfoAbout" = "http://www.tweakbit.com/support/contact/"
"Inno Setup: Setup Version" = "5.5.4 (u)"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"General.Cookie" = ""

[HKLM\SOFTWARE\Wow6432Node\TweakBit\Google Analytics Package\1.x\Settings]
"ClientID" = "{DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"Inno Setup: Language" = "default"
"DisplayName" = "TweakBit PCBooster"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"App.Application.PurchaseUrlParam" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"InstallLocation" = "%Program Files% (x86)\TweakBit\PCBooster\"
"NoRepair" = "1"
"Contact" = "info@tweakbit.com"
"Inno Setup: App Path" = "%Program Files% (x86)\TweakBit\PCBooster"
"MinorVersion" = "6"
"URLUpdateInfo" = "http://www.tweakbit.com/pc-booster"
"UninstallString" = "%Program Files% (x86)\TweakBit\PCBooster\unins000.exe"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\ATUpdaters\1.x\Settings]
"Shared.Blocking.PCBooster" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"QuietUninstallString" = "%Program Files% (x86)\TweakBit\PCBooster\unins000.exe /SILENT"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Sequence" = "1"

[HKLM\SOFTWARE\Wow6432Node\TweakBit\PCBooster\1.x\Settings]
"GoogleAnalytics.InstallDate" = "41 ED 2D C1 C4 87 E4 40"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"SessionHash" = "54 65 6A 35 C7 BC 5C 1D A3 26 30 C3 D2 FF 26 64"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7EC1FD0-023F-49E1-B604-D81DA4BC87CA}_is1]
"InstallDate" = "20150211"
"HelpLink" = "http://www.tweakbit.com/en/support.php"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Owner" = "C0 06 00 00 81 9B FC CB 9A 45 D0 01"

The Worm deletes the following registry key(s):

[HKCU\Software\Microsoft\RestartManager\Session0000]

The Worm deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash"
"Sequence"
"RegFiles0000"
"SessionHash"
"Owner"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

The process GASender.exe:3756 makes changes in the system registry.


The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "D0 B2 BF DF 9A 45 D0 01"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "D0 B2 BF DF 9A 45 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "D0 B2 BF DF 9A 45 D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Worm deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

Dropped PE files

MD5 File path
28081d518da65605a5e797cc1c61414dc:\Program Files (x86)\TweakBit\PCBooster\ATToolsStdHelper.dll
5216e1d63b279e17f508735476a48738c:\Program Files (x86)\TweakBit\PCBooster\ATUpdatersHelper.dll
8e9886eaa08956e6a7125d35402b2cd0c:\Program Files (x86)\TweakBit\PCBooster\AxBrowsers.dll
13ec51f4b77e6d10368c9cd7d34015b5c:\Program Files (x86)\TweakBit\PCBooster\AxComponentsRTL.bpl
ea7f923c044e371f7ac865c289bc41cdc:\Program Files (x86)\TweakBit\PCBooster\AxComponentsVCL.bpl
2dd964f277a2eb0be65c2a74e7aed73dc:\Program Files (x86)\TweakBit\PCBooster\CommonForms.Routine.dll
ac146a7cc0c62d4c5f977506f47567d7c:\Program Files (x86)\TweakBit\PCBooster\CommonForms.Site.dll
1c3be0237394dce2441aef4e34b16b5ac:\Program Files (x86)\TweakBit\PCBooster\DebugHelper.dll
40c5afd165141ac3b8605f59b2cb705fc:\Program Files (x86)\TweakBit\PCBooster\DiskCleanerHelper.dll
8b5a7407269a274d6e0e01947124182bc:\Program Files (x86)\TweakBit\PCBooster\GASender.exe
e62f42393433eaa0bf0364f3d8c5153dc:\Program Files (x86)\TweakBit\PCBooster\GoogleAnalyticsHelper.dll
060ea6b858a569b90319d371115d83bec:\Program Files (x86)\TweakBit\PCBooster\InternetOptimizerHelper.dll
4d68aa70079c42f04e5e492f80f08941c:\Program Files (x86)\TweakBit\PCBooster\Localizer.dll
48a69482f5c55476a647130a3cccb996c:\Program Files (x86)\TweakBit\PCBooster\PCBooster.exe
bae8e23d18a1cd3b22bb92c29bea7746c:\Program Files (x86)\TweakBit\PCBooster\PCBoosterHelper.dll
d749fbf598df1a40c1dcc363c2bbfd76c:\Program Files (x86)\TweakBit\PCBooster\ProductHelper.dll
24fae492755f2217d843dc6dd5941e18c:\Program Files (x86)\TweakBit\PCBooster\RegistryCleanerHelper.dll
762c478461fce2de5dc11fea8ffa65f1c:\Program Files (x86)\TweakBit\PCBooster\SendDebugLog.exe
ac58deb030cda535c48ca0cf8a271613c:\Program Files (x86)\TweakBit\PCBooster\ServiceManagerHelper.dll
a350505d8f9ac1de171db80c1ef0c45cc:\Program Files (x86)\TweakBit\PCBooster\SettingsHelper.dll
a8c36da851232eec04aa271f85c3c5d1c:\Program Files (x86)\TweakBit\PCBooster\TaskSchedulerHelper.dll
38a2470102b957e8d729e765dafe352bc:\Program Files (x86)\TweakBit\PCBooster\TweakManagerHelper.dll
1e6a76cf76e15157a8ab81414236fae7c:\Program Files (x86)\TweakBit\PCBooster\WizardHelper.dll
84b98014441fd02ac4a534acbb539ab7c:\Program Files (x86)\TweakBit\PCBooster\rtl160.bpl
6c0bc1f4057b42014e3b41ea1374e163c:\Program Files (x86)\TweakBit\PCBooster\sqlite3.dll
0702670df49ea454a08df97cd0b6563bc:\Program Files (x86)\TweakBit\PCBooster\unins000.exe
98e8a593fce7c3f6aeb27e89c9804704c:\Program Files (x86)\TweakBit\PCBooster\vcl160.bpl
1ae339622f54f19827139e0baf9eac29c:\Program Files (x86)\TweakBit\PCBooster\vclimg160.bpl
13ec51f4b77e6d10368c9cd7d34015b5c:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\AxComponentsRTL.bpl
8b5a7407269a274d6e0e01947124182bc:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GASender.exe
e62f42393433eaa0bf0364f3d8c5153dc:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GoogleAnalyticsHelper.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    TPAutoConnSvc.exe:1776
    reader.exe:1636
    PCBooster.exe:476
    DefaultBrowserFinder.exe:888
    %original file name%.exe:2528
    e9264fbd29483aa7221d04df6a254528.tmp:1728
    GASender.exe:3756

  2. Delete the original Worm file.
  3. Delete or disinfect the following files created/modified by the Worm:

    %Program Files% (x86)\TweakBit\PCBooster\AxComponentsVCL.bpl (146 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (471 bytes)
    C:\ProgramData\TweakBit\PCBooster\1.x\Logs\PCBooster.log (4258 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\vcl160.bpl (291 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\AxComponentsRTL.bpl (49 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_D5F09CAA6E2CA434FEDC79A84C61CABA (1488 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (1544 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_D5F09CAA6E2CA434FEDC79A84C61CABA (471 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\rtl160.bpl (146 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\vclimg160.bpl (356 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$CF3B.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$9D6B.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$E1BB.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$2A12.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$5D10.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$209C.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$764F.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$333C.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$B3A5.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$7317.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$C691.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$E81D.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$1AC9.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$973D.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$Cookies99236784 (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\sqlite3.dll (667 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$Cookies99236831 (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-VJQ7R.tmp\e9264fbd29483aa7221d04df6a254528.tmp (50 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\unins000.msg (646 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-JLSEP.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GASender.exe (3073 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-HAIP5.tmp (3361 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\AxComponentsRTL.bpl (7596 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-VNP0E.tmp (1281 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\Lang\is-EDSJA.tmp (53 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-OT2SA.tmp (21387 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\installer_enu.ini (37 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\AxComponentsRTL.bpl (7547 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-H979H.tmp (7971 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakBit\PCBooster\TweakBit PC Booster on the Web.url (111 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-5MSGL.tmp (673 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-Q0SJ3.tmp (22336 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-RN34A.tmp (23811 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\EULA.rtf (25 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\vcl160.bpl (24102 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\AxComponentsVCL.bpl (22482 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-2RSMV.tmp (3073 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-9SV82.tmp (5441 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-5M99C.tmp (1281 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GA.xml (868 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-ST3IJ.tmp (2 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-N00O5.tmp (7385 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\Lang\is-P03RI.tmp (37 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakBit\PCBooster\TweakBit PC Booster.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\ATUpdatersHelper.dll (6684 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\reader.exe (2485 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-00OGU.tmp (132 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-HH77V.tmp (32641 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-73QEV.tmp (3361 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-ROL9M.tmp (601 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-UUJFI.tmp (2105 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\PCBooster.url (60 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\WizardHelper.dll (2321 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-VBS7G.tmp (3361 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-ES4AB.tmp (5873 bytes)
    C:\Users\"%CurrentUserName%"\Desktop\TweakBit PCBooster.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\GoogleAnalyticsHelper.dll (6663 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\_isetup\_shfoldr.dll (47 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\rtl160.bpl (21533 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-636VV.tmp (1425 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\_isetup\_setup64.tmp (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GoogleAnalyticsHelper.dll (5873 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-1GJ8S.tmp (5873 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-Q4228.tmp (2321 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-I0VOV.lnk (905 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-VAONU.tmp (7547 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-KIC4G.tmp (1425 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-CDRPO.tmp (7971 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\PCBooster.exe (49 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-Q4KSO.tmp (7433 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$$$9FB8.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\vclimg160.bpl (2461 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-6EJMO.tmp\DefaultBrowserFinder.exe (2457 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-H3GGB.tmp (4545 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-9400Q.tmp (2105 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-HTLAN.tmp (25 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-A77H7.tmp (5873 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\unins000.dat (15741 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\Data\main.ini (31 bytes)
    %Program Files% (x86)\TweakBit\PCBooster\is-1T4CP.tmp (2321 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GA.xml (864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\_Del_e9264fbd29483aa7221d04df6a254528\GASender.exe (3589 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name: Auslogics Labs Pty Ltd
Product Name: TweakBit PCBooster
Product Version: 1.6.7.2
Legal Copyright: Copyright (c) 2008-2015 Auslogics Labs Pty Ltd
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.6.7.2
File Description: TweakBit PCBooster Installation File
Comments: This installation was built with Inno Setup.
Language: Language Neutral

Company Name: Auslogics Labs Pty Ltd Product Name: TweakBit PCBooster Product Version: 1.6.7.2Legal Copyright: Copyright (c) 2008-2015 Auslogics Labs Pty Ltd Legal Trademarks: Original Filename: Internal Name: File Version: 1.6.7.2File Description: TweakBit PCBooster Installation File Comments: This installation was built with Inno Setup.Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text409661740619524.430243a126e478661f20816f9d9285615f98e
.itext69632288430723.97317ba48b9b17b3dd8b92da3bd93f20ddb34
.data73728320835841.55702d7fd5f4b562d7961758f3d6a8c834fd0
.bss778242219600d41d8cd98f00b204e9800998ecf8427e
.idata102400353635843.4462593d91a2b90e60bd758fc0c4908856ae1
.tls106496800d41d8cd98f00b204e9800998ecf8427e
.rdata110592245120.141743dffc444ccc131c9dcee18db49ee6403
.rsrc11468887692880644.076b15f3a5abc1561a582cb8ee40dfc86cc

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL IP
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c2399040bb50fcad
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs=178.255.83.1
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECED1peiCJBlhSarL0zjkmq4A=178.255.83.1
hxxp://www-google-analytics.l.google.com/collect
hxxp://www.tweakbit.com/pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false216.246.7.240
hxxp://www.tweakbit.com/pc-booster/cart/216.246.7.240
hxxp://e6845.ce.akamaiedge.net/crls/secureca.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEAsdsakZ8kw8Tvy1empObL8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEBHc6ENkz1QiC8Kfsu+chzI=
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEG6KkOvP8ESKcg0IBdCCpUQ=
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCSWGU/0VsUu
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCBH5CtNBDuCd
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSqKwMUr2QuEw7WkiXj/yq61z1iMAQU3s9cULeuAh8VF6oW6A21KJ1qWvMCEAUfF2/jMYyltKg9vzWZLPM=
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA8YsyncEHuJ
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDM203LqIY3d
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?9825b6b6c367264b
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA6iR0vHFpqB
hxxp://d1gbu8yzpfdsn2.cloudfront.net/CRL/class2.crl
hxxp://e6845.ce.akamaiedge.net/ga.crt
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF+cplPoBBth
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEEjP467eza0GY3odRLpEEVc=
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://gs1.wac.v2cdn.net/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=
hxxp://cs1.wpc.v0cdn.net/pki/mscorp/crl/msitwww2.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e6845.ce.akamaiedge.net/pca3.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCSWGU/0VsUu173.194.113.199
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDM203LqIY3d173.194.113.199
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F173.194.113.199
hxxp://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl68.232.34.200
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl88.221.132.166
hxxp://www.google-analytics.com/collect173.194.113.198
hxxp://www.certplus.com/CRL/class2.crl54.230.202.236
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=23.43.139.27
hxxp://crl.verisign.com/pca3.crl23.43.133.163
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c2399040bb50fcad88.221.132.177
hxxp://ga.symcb.com/ga.crt23.43.133.163
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl88.221.132.166
hxxp://gm.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSqKwMUr2QuEw7WkiXj/yq61z1iMAQU3s9cULeuAh8VF6oW6A21KJ1qWvMCEAUfF2/jMYyltKg9vzWZLPM=23.43.139.27
hxxp://g2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEG6KkOvP8ESKcg0IBdCCpUQ=23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA6iR0vHFpqB173.194.113.199
hxxp://ocsp.omniroot.com/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=93.184.220.20
hxxp://crl.geotrust.com/crls/secureca.crl23.43.133.163
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF+cplPoBBth173.194.113.199
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl88.221.132.166
hxxp://gtextval2-ocsp.geotrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEBHc6ENkz1QiC8Kfsu+chzI=23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA8YsyncEHuJ173.194.113.199
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?9825b6b6c367264b88.221.132.177
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECED1peiCJBlhSarL0zjkmq4A=178.255.83.1
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl88.221.132.166
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=108.162.232.207
hxxp://evsecure-ocsp.geotrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEAsdsakZ8kw8Tvy1empObL8=23.43.139.27
hxxp://ga.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEEjP467eza0GY3odRLpEEVc=23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCBH5CtNBDuCd173.194.113.199
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=23.43.139.27
store.tweakbit.com216.246.7.240
fonts.googleapis.com64.233.165.95
www.google.com.ua173.194.113.216
stats.g.doubleclick.net74.125.143.157
googleads.g.doubleclick.net173.194.113.217
extended-validation-ssl.geotrust.com69.58.181.73
www.googleadservices.com173.194.113.205
fonts.gstatic.com173.194.113.207
mc.yandex.ru213.180.193.119
seal.geotrust.com23.64.217.144
ieonline.microsoft.com204.79.197.200

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:38:16 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:16 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:38:16 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:16 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:38:16 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:16 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com

HTTP/1.1 200 OK

Server: Apache

ETag: "c449d4dd9061d0741beb9a23308d345b:1423617023"

Last-Modified: Wed, 11 Feb 2015 01:10:23 GMT

Date: Wed, 11 Feb 2015 01:34:28 GMT

Content-Length: 856

Connection: keep-alive

Content-Type: application/pkix-crl

0..T0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..150211004300Z..150221004300Z0..<0....X...140427081922Z0....v...140618150003Z0........140429180917Z0........140709194633Z0........140416233935Z0........140521155053Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..020515130611Z0.....#..140606204021Z0........100729164439Z0........140606222139Z0....%...020514181157Z0........140725020038Z0........100729164732Z0....M\..140430000442Z0.....-..140617185011Z0....uU..150118022133Z0....V...140624123102Z0........120627171025Z0........100301134531Z0........140618143256Z0........120627171017Z0.....>..140711125531Z0....[...100730213120Z0....j...140226123519Z0...*.H.............v.S.t..w...../....9.}x.LJ.......L.W.i...c...._ET.x....a.$....!G..x...0Bf,8.=.....,....k.#..P.D:.2....:.dC|.....a".#g...,.H..|R?HTTP/1.1 200 OK..Server: Apache..ETag: "c449d4dd9061d0741beb9a23308d345b:1423617023"..Last-Modified: Wed, 11 Feb 2015 01:10:23 GMT..Date: Wed, 11 Feb 2015 01:34:28 GMT..Content-Length: 856..Connection: keep-alive..Content-Type: application/pkix-crl..0..T0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..150211004300Z..150221004300Z0..<0....X...140427081922Z0....v...140618150003Z0........140429180917Z0........140709194633Z0........140416233935Z0........140521155053Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..020515130611Z0.....#..140606204021Z0........100729164439Z0........140606222139Z0....%...02051418115

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1697

content-transfer-encoding: binary

Cache-Control: max-age=584746, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Feb 2015 20:04:39 GMT

Expires: Tue, 17 Feb 2015 20:04:39 GMT

Date: Wed, 11 Feb 2015 01:38:53 GMT

Connection: keep-alive

0..........0..... .....0......0...0...A0?1=0;..U...4VeriSign Class 3 Code Signing 2004 CA OCSP Responder..20150210200439Z0s0q0I0... ........?.@..w.........Y.!......Q...==d6|h.[x....7..`..........cV.!.....20150210200439Z....20150217200439Z0...*.H...............U.#..&1x1.......n...tJ...-..`.-d...X.......\._......[]n\].;....n..}b..Y...b1.q....".2.<.../..:....\..... ..?...Y. .EF.e....Y!T#SLa.......&....I.t..v...Cy'uGK...g......-.........G>}q......1....p...pxP,.l.e^f5..i)xoE....]....t..?.....~..Su......D.,...\........0...0...0..{.........[..I|.....Zm..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...140428000000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 2004 CA OCSP Responder0.."0...*.H.............0.........Y....h..@..>.....%.-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l.....f..;]s!.\"v...|....].@.....K7m2...N......-S.I......5n...G7. ..W....n..*..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....<..6.....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%..0... .......0...U...........0... .....0......0f..U. ._0]0[..`.H...E....0L0#.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.symcb.com/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>q..i1o...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..wo......E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|........

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:36:42 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:42 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:36:42 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:42 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:36:42 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:42 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=473109, public, no-transform, must-revalidate

Last-Modified: Mon, 9 Feb 2015 12:58:45 GMT

Expires: Mon, 16 Feb 2015 12:58:45 GMT

Date: Wed, 11 Feb 2015 01:34:29 GMT

Connection: keep-alive

0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....20150209125845Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:v....20150209125845Z....20150216125845Z0...*.H.............e...c-.JM..D.9........[..NV...$..s ...K].3.',.yj.....*A.....i..h%..KCB8?.y ..-w.".<..wF....&*.JF.^.._ .E.:.v.H......... !=.....C........$...@..^.q/$?.V.Ul....D<..8...es.....V....E..10r...3.Ob...............Yvr......]Uu?B.....j ^4$Lj@."-m.N?-@b...~n.......Z....0...0..}0..e........:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTrust Global CA TGV OCSP Responder 30.."0...*.H.............0............\.hpc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd.....x..YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x..............6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o...A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830...*.H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a...nR9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7...=..w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v.....\.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%....

<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c2399040bb50fcad HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 03 Jul 2014 23:34:12 GMT

If-None-Match: "0b2464b1797cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com

HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT

ETag: "0b2464b1797cf1:0"

Cache-Control: max-age=86400

Date: Wed, 11 Feb 2015 01:34:09 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT..ETag: "0b2464b1797cf1:0"..Cache-Control: max-age=86400..Date: Wed, 11 Feb 2015 01:34:09 GMT..Connection: keep-alive..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECED1peiCJBlhSarL0zjkmq4A= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:34:20 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Tue, 10 Feb 2015 00:55:42 GMT

Expires: Sat, 14 Feb 2015 00:55:42 GMT

ETag: 15A41E5FEAD49BEEB473C8F4DF54A5175EC84475

Cache-Control: max-age=256281,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp8

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response

0..........0..... .....0......0...0.........,}...h|%....?......20150210005542Z0s0q0I0... .........%.6..Ga....e............,}...h|%....?......=iz ..XRj...9&......20150210005542Z....20150214005542Z0...*.H....................Z.Y.P......>..... .`...}\..@....?..c.....h......tr)BzS....'.|..%2.O...9h.D..* .....E..9t.k........8=2.aQ....S..t9.4*.g....MA..B.O...\....b.U.;a... ...(...(..P......D)x.H.f..12`.bM....(^..o|5d....@8j[..0b.^..'....//l[.._......^k........04......bu......

GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 11 Feb 2015 01:35:27 GMT

Last-Modified: Thu, 05 Feb 2015 19:47:05 GMT

Server: ECS (ams/D1C2)

X-Cache: HIT

Content-Length: 1406

0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..20150205094606Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M....'.G....20150204200915Z....20150505201415Z0...*.H.............g...].R...<2$s..uq.q.Y......E.@..1.... .......v...MM.pos"y.#F..{K........D.S_.F?.u...........Z"..?.....Q.:4...pm.T.R../{iU..6.........3z3."......a._P.....e.n$-...SCoP..V....l.B.CU!....D..8....O. _....AHl{W=Dc. .(.I`.h..e..R........I..K...6!.r....>t.l.../.I....0...0...0...........'..0...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTrust1"0 ..U....Baltimore CyberTrust Root0...150114195242Z..160114195229Z0G1.0...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-20110.."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...04..I......C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8..........h8GM..*.4.MP..../D4n.=ZTeH.B=kOT.v..2@F.2L..A...yn.4......fP...L...2.x....$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j.\.>.O....G.A........0..0... .....0......0...U.......0.0...U...........0...U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`;.l.uZ..k.F..^|A.Tb0...*.H.............n.h\Ch*G.c..yr..."._....J.-....j.t%..e.....(.h@.Z.7.a!m...sZH.N..>.S....K..........7wi3..x.D..l..ud.....CC......<.&.2. ..d...T.......;.S....\... ......m.6......#(.&....q.[z.........r..T....W...7ea.}..B.1........al.]i.F...-.0c...y.=?....E...........'>..O.._..

<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?9825b6b6c367264b HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT

If-None-Match: "0b96c77303ecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com

HTTP/1.1 200 OK

Cache-Control: max-age=604800

Content-Type: application/octet-stream

Last-Modified: Fri, 23 Jan 2015 02:29:11 GMT

Accept-Ranges: bytes

ETag: "803565fb436d01:0"

Server: Microsoft-IIS/8.5

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Content-Length: 57591

Date: Wed, 11 Feb 2015 01:34:30 GMT

Connection: keep-alive

MSCF............,...................I.................6Fm. .authroot.stl......8..CK...<T...g.v!M.d..f.%d..}K..5......dM*K..J.,%K"...!..=.k..........{=/....{g.~...............'....6..N....w......(.$.>.7...........'.....`.bx....^..$.'.^.K.C......<b=J..u....@.....2..e....pr.....usXq.d.i.jF$.4.........KI.Q........A2m:..E.P|...(.^p..=G|.....m...... .6...H.e.....X'...%$r.Y.(..)........|...;...V^r.VM.._*X.I. ..4.....*.....Y..`.0w.u...c.i.[..-...x..<.8.<.p..,..y.[v.Yn`......!.s...4e......B...$.,..........w.Pd.)....,..#.%..h...8...`.A...8.i(.!.$/.=.....i.\X.H......"...a...k...y6....F.._?\*.&..3.AJo.!..`....9....=.p.u..u....f.f....w...?..S..I.;.....5._...F.f..G?$......."..kq.y'.6tJ.e%..G.n.....z<.pX"....1..g."........V:.H.-...!}LM..t..-.y.j&...n{..-.]H. .....A.O.Xg..B...#.f.-..V@.g..8.....Ov...ET..*.....T...}o._./S..h@$.....!.@.D....c...A1..#.:?."....1..v.....&G...?O1x6"5.@..$.U...n.J...w.Y.{..........E.N.&...&.rC..W.....M.........,.e.....&eI(/eSO.B..K...R. K...s.@9....Jv.....(..Y./;-..M5.0.H2.y....:...........a.U....%.S.).^....1.B..a..=...q...X .B....F.../..../.Z...'..t....C....,.^...N=..t%N|IC.#.)6...q.E.J.i.E.>....".L........>...Vy.7.jxx......G........._q.1^..H&.4Z......^.E.K 9.Xg...qO.6%>..T....;n..s.'u.-...=.........p..p.Rn.........=.......F........d. d.AR.0U..........9b...=N..#....c.Icz......u.0............Y.q..b.wYE.......R...s..W....r].....hT....k.g..[...s.....X..`=zb.>..../..=........J.N.h...(}.5.7. .;..=F..F...'.?..2...3...=...B..`....{...f.`Kb..@..`Z.0!^8.t..<l.j..lI.P.q.>k

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:37:26 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:26 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:37:26 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:26 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:37:26 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:26 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=473109, public, no-transform, must-revalidate

Last-Modified: Mon, 9 Feb 2015 12:58:45 GMT

Expires: Mon, 16 Feb 2015 12:58:45 GMT

Date: Wed, 11 Feb 2015 01:34:29 GMT

Connection: keep-alive

0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....20150209125845Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:v....20150209125845Z....20150216125845Z0...*.H.............e...c-.JM..D.9........[..NV...$..s ...K].3.',.yj.....*A.....i..h%..KCB8?.y ..-w.".<..wF....&*.JF.^.._ .E.:.v.H......... !=.....C........$...@..^.q/$?.V.Ul....D<..8...es.....V....E..10r...3.Ob...............Yvr......]Uu?B.....j ^4$Lj@."-m.N?-@b...~n.......Z....0...0..}0..e........:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTrust Global CA TGV OCSP Responder 30.."0...*.H.............0............\.hpc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd.....x..YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x..............6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o...A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830...*.H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a...nR9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7...=..w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v.....\.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCSWGU/0VsUu HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Feb 2015 17:47:49 GMT

Expires: Sat, 14 Feb 2015 17:47:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 28000

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150210130435Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..$..O.V......20150210130435Z....20150217130435Z0...*.H................,u....$.I.v1..V..D...)[6.C...;..t.Wq#>w.X}P..$...D..s .n..PM0.P...\...l*...0*.u1.y...mwBe.wd..W....B.#Y....-.....i.....["f..EV..S/.K...EP.N.i.3*.....h. .Ip......Yu.M.p.L.O..P.~X.c.m.Gr.5..E...R..|.j.....~...}....Iyt.....qv9$....M......../.a..L....Vj.h......

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA8YsyncEHuJ HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 20:26:45 GMT

Expires: Wed, 11 Feb 2015 20:26:45 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 277665

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130523Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.....)..{.....20150207130523Z....20150214130523Z0...*.H.................M..ga..i..$5G:y ..6.....m.../T.F.....B...:a.g.BY[..?.Yh.8CX..(.j...x........B.1.lgPW..=Y!..iQ.......W..m................%....rf#h..(.Co....A.\..r.7......Q....%....F,]..S....eq.a....^.....R......,8.../$.....M.%.I........?......Av..E"5..`.@......,...TNc.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 20:26:45 GMT..Expires: Wed, 11 Feb 2015 20:26:45 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 277665..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130523Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.....)..{.....20150207130523Z....20150214130523Z0...*.H.................M..ga..i..$5G:y ..6.....m.../T.F.....B...:a.g.BY[..?.Yh.8CX..(.j...x........B.1.lgPW..=Y!..iQ.......W..m................%....rf#h..(.Co....A.\..r.7......Q....%....F,]..S....eq.a....^.....R......,8.../$.....M.%.I........?......Av..E"5..`.@......,...TNc.nt>....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:05:55 GMT

Expires: Wed, 11 Feb 2015 16:05:55 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293315

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130045Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....mP..-.....20150207130045Z....20150214130045Z0...*.H................(.....~/j.J.y.PP<.......w.......u.AW|..K...x/.R..h..9. ..&.;?..^....n.n. ....|.d...L."?..\p..L...9 .KK3.........h5..tH ......j.........F.!$.G...o95..$4.|6..r..... r.....Za.5..Y........J.z..l.U...H2[.....lV...2LCaE...V]..W...a.B.h..C[...!....Dz.j.?.*........

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDM203LqIY3d HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:02:51 GMT

Expires: Wed, 11 Feb 2015 16:02:51 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293499

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...ZHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:02:51 GMT..Expires: Wed, 11 Feb 2015 16:02:51 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293499..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...Znt>....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA6iR0vHFpqB HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:06:08 GMT

Expires: Wed, 11 Feb 2015 16:06:08 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293302

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:06:08 GMT..Expires: Wed, 11 Feb 2015 16:06:08 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293302..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I.....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF+cplPoBBth HTTP/1.1

Cache-Control: max-age = 345600

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 22:46:52 GMT

Expires: Wed, 11 Feb 2015 22:46:52 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 269258

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 22:46:52 GMT..Expires: Wed, 11 Feb 2015 22:46:52 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 269258..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=...

<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:35:27 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d2d0842adb2cfe463967fc5920b2d11041423618527; expires=Thu, 11-Feb-16 01:35:27 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Fri, 06 Feb 2015 23:51:50 GMT

Expires: Tue, 10 Feb 2015 23:51:50 GMT

ETag: "9006297540e316688484ed9e4b46a0dce7b0d372"

Cache-Control: max-age=345599,public,no-transform,must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b6ccf56df84046d-FRA

0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..20150206235150Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.{.....Z..w...d..\.-....w.....20150206235150Z....20150210235150Z."0 0... .....0......20140206235150Z0...*.H.............Q."...T1..ý.Rs.(..%l..<.....qN.jm\f...x3g...&.R.qQaH^....X.#{O G.....8K....(........f..&.%..m}.hU......9.......psNO.c;.Dz._....... ^..oQa48..6.......s.o..#.]{D..nQL.2.;.i0.$Vp....6...:f.....h.O..#......8..!g<q...d.tl.....h(..E.]-...................y.2.......0...0...0..........Z..~..M..<ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0... .......0... .....7....0.0... .......0... .....0......0...*.H..................sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._p..

<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:35:27 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d2d0842adb2cfe463967fc5920b2d11041423618527; expires=Thu, 11-Feb-16 01:35:27 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Fri, 06 Feb 2015 23:51:50 GMT

Expires: Tue, 10 Feb 2015 23:51:50 GMT

ETag: "9006297540e316688484ed9e4b46a0dce7b0d372"

Cache-Control: max-age=345599,public,no-transform,must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b6ccf572f8f046d-FRA

0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..20150206235150Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.{.....Z..w...d..\.-....w.....20150206235150Z....20150210235150Z."0 0... .....0......20140206235150Z0...*.H.............Q."...T1..ý.Rs.(..%l..<.....qN.jm\f...x3g...&.R.qQaH^....X.#{O G.....8K....(........f..&.%..m}.hU......9.......psNO.c;.Dz._....... ^..oQa48..6.......s.o..#.]{D..nQL.2.;.i0.$Vp....6...:f.....h.O..#......8..!g<q...d.tl.....h(..E.]-...................y.2.......0...0...0..........Z..~..M..<ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0... .......0... .....7....0.0... .......0... .....0......0...*.H..................sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._p..

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDM203LqIY3d HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:02:51 GMT

Expires: Wed, 11 Feb 2015 16:02:51 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293499

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...ZHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:02:51 GMT..Expires: Wed, 11 Feb 2015 16:02:51 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293499..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...Znt>....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF+cplPoBBth HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 22:46:52 GMT

Expires: Wed, 11 Feb 2015 22:46:52 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 269258

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 22:46:52 GMT..Expires: Wed, 11 Feb 2015 22:46:52 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 269258..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=...

<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 812

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 23 Oct 2014 05:05:32 GMT

If-None-Match: "a2f3ff97eeecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 07 Jan 2015 06:02:43 GMT

Accept-Ranges: bytes

ETag: "88c4768d3f2ad01:0"

Server: Microsoft-IIS/8.5

VTag: 438410416000000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 813

Cache-Control: max-age=900

Date: Wed, 11 Feb 2015 01:34:50 GMT

Connection: keep-alive

0..)0......0...*.H........0_1.0.....&...,d....com1.0.....&...,d....microsoft1-0 ..U...$Microsoft Root Certificate Authority..150106214825Z..150407100825Z0.0...a......../..100208014912Z._0]0...U.#..0......`@V'..%..*..S.Y..0... .....7.......0...U......(0... .....7......150406215825Z0...*.H..............vQ..r..L.Q.N..=#.......V;..r../\.m..<.."...F/U....(:.....xm.....P.e.F..BE8......=...G....6t:...?...L..B.v..p.M........z..Q.%J.6..I.......8...U. .g..=T=K....L..$w...^....y~..-a.'...*s#N.o..Qs.$h..:duV'~....8.6..w..b3.... .~)...|.I.y".>R.nJq.ws...3.....f}.E)\......EB.d\.2.....h...lMjT.7..lj.'lj.b....".L.Os6{.s...@....f.|7z.. ......>..Q...(......._....UM.EN.@.K\]#..Y.*.......T. .C.....A'..5FW.ETDvX..tE.....g5.....&..&.....x.^H;...../7..'9.t.I&<[.HX.j....Qw......}...qy3..q`<.....LB.9w|....;..Qw..a ..=.C.:.........

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Mon, 06 Oct 2014 05:06:02 GMT

If-None-Match: "3e1c83923e1cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sun, 21 Dec 2014 06:03:02 GMT

Accept-Ranges: bytes

ETag: "d2e35dc7e31cd01:0"

Server: Microsoft-IIS/8.5

VTag: 4389615400000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Wed, 11 Feb 2015 01:34:51 GMT

Connection: keep-alive

0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Windows Verification PCA..141220223154Z..150321105154Z._0]0...U.#..0.......p............<.J0... .....7.......0...U......30... .....7......150320224154Z0...*.H.............h.~oH#i.J.vh_.....A'B..g...........F....9c.{.m@Q.M.p...g.^ 4.r..Wv.Q.0.w..j....c9..w....I..%.~.l..F.......xo...._...o...7BR.;<..\R/ .....b.(....~..]|.v.u.i.X.B....I......./*...P..A..fi.}& .x.v{TFP[.G......A......L.o...)R.......V.u..V.../.Q..(L.].....uki~......

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 04 Oct 2014 05:06:12 GMT

If-None-Match: "58cddbea90dfcf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Fri, 19 Dec 2014 06:02:00 GMT

Accept-Ranges: bytes

ETag: "9a9a44d511bd01:0"

Server: Microsoft-IIS/8.0

VTag: 438346843700000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Wed, 11 Feb 2015 01:34:51 GMT

Connection: keep-alive

0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-Stamp PCA..141218221600Z..150319103600Z._0]0...U.#..0...#4..RFp..@.v.. ..5..0... .....7.......0...U......10... .....7......150318222600Z0...*.H............./..0Q~.r.}.E....&\....F.Z.C..#..F.s........<&\..9G..-....j..N... .C.Fk....;l.....2.K5D.........-.>...(...g.0.S.[?...T4q>.ln...z..L.......5.5s@d.q.('..e...Y..Bo..q..........I....'....i>..y:.eH@h`..\...UA.m#.~.. ;.3..d..;..<..........p..s..J..N `Az......@..lHTTP/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modified: Fri, 19 Dec 2014 06:02:00 GMT..Accept-Ranges: bytes..ETag: "9a9a44d511bd01:0"..Server: Microsoft-IIS/8.0..VTag: 438346843700000000..P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-Length: 550..Cache-Control: max-age=900..Date: Wed, 11 Feb 2015 01:34:51 GMT..Connection: keep-alive..0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-Stamp PCA..141218221600Z..150319103600Z._0]0...U.#..0...#4..RFp..@.v.. ..5..0... .....7.......0...U......10... .....7......150318222600Z0...*.H............./..0Q~.r.}.E....&\....F.Z.C..#..F.s........<&\..9G..-....j..N... .C.Fk....;l.....2.K5D.........-.>...(...g.0.S.[?...T4q>.ln...z..L.......5.5s@d.q.('..e...Y..Bo..q..........I....'....i>..y:.eH@h`..\...UA.m#.~.. ;.3..

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:35:09 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:09 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:35:10 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:10 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:35:10 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:10 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pca3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com

HTTP/1.1 200 OK

Server: Apache

ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"

Last-Modified: Fri, 19 Dec 2014 01:00:19 GMT

Date: Wed, 11 Feb 2015 01:38:53 GMT

Content-Length: 933

Connection: keep-alive

Content-Type: application/pkix-crl

0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authority..141210000000Z..150331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.......fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2....{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N....* ....010207212031Z0!..N....-.1Gq.@...C..040401175251Z0!..Y......w`G........070411175657Z0!..Z`..H.@B....Z.*q..080403172017Z0!..l....I...Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1..7<.....e..010207211822Z0...*.H............5..v...V.._)....A... ....>.5]....6.(.0uFW.*:T...6$.....R...Y.N.k........%Jn..I.j*.6.3~...r../=l..?...9..V0..@Tk......fn?....0.A.HTTP/1.1 200 OK..Server: Apache..ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"..Last-Modified: Fri, 19 Dec 2014 01:00:19 GMT..Date: Wed, 11 Feb 2015 01:38:53 GMT..Content-Length: 933..Connection: keep-alive..Content-Type: application/pkix-crl..0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authority..141210000000Z..150331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.......fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!.

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:38:41 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:41 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:38:41 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:41 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:38:41 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:38:41 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 28 Jan 2015 06:05:55 GMT

Accept-Ranges: bytes

ETag: "75565c7ac03ad01:0"

Server: Microsoft-IIS/8.5

VTag: 438743915800000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Wed, 11 Feb 2015 01:38:58 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Signing PCA..150127173215Z..150428055215Z.a0_0...U.#..0..........X..7.3...L...0... .....7.........0...U......Y0... .....7......150427174215Z0...*.H......................YIw.. ..(..y..O.G].B.."?.@...[1.}.X...]...e.J....pP.I....!6...%.D.k...>c.|R.?.i..yt.z..B.........b....n..m5...0....2..I!)v....z....y.#pXz.DO.....mF...e.'e...@.%...6./.bPZ...=....bp..j....lo....4........T9j...S.7Q.@.W..@.. ...M....z....Q...{u. .W....

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=500986, public, no-transform, must-revalidate

Last-Modified: Mon, 9 Feb 2015 20:44:25 GMT

Expires: Mon, 16 Feb 2015 20:44:25 GMT

Date: Wed, 11 Feb 2015 01:38:55 GMT

Connection: keep-alive

0..........0..... .....0......0...0........6?s....V....OlL".O..20150209204425Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5.......l$.%t...............20150209204425Z....20150216204425Z0...*.H..............'.^.M......_.(.~....b^:.[&...z.^.W.<'g.[..N..Y.k...i....U.Kc-.:B....]#...l.^..S0K.OV.. ..D/&.E?./...~.z....~.E.YA....c.4...~.t.$..X.s......X@.......sx......... .^.....7.t...*T.=1.3..I...n..m.i9.6l.....!..r..;..8..V...._......t..YE.^9.7...*&_.a......dM.......#0...0...0..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.........{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(..........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCBH5CtNBDuCd HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Mon, 09 Feb 2015 13:44:47 GMT

Expires: Fri, 13 Feb 2015 13:44:47 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 128982

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150209070755Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./......A.......20150209070755Z....20150216070755Z0...*.H..............-...Z3..\.wUy......z..U..........mAh.8.3}............9Qu....u.b.........&ZN/.i.Bnj...xf!.m...D.CF... .eF.J..I.K....8.n~%;....q....z....d....k.E.9.x..|.aU...l......t!TW.......,.p..V..C.Iu..5........I$.#l......b.....5..25Y.Yh....cW.k.c].....a....]..>O....D.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Mon, 09 Feb 2015 13:44:47 GMT..Expires: Fri, 13 Feb 2015 13:44:47 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 128982..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150209070755Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./......A.......20150209070755Z....20150216070755Z0...*.H..............-...Z3..\.wUy......z..U..........mAh.8.3}............9Qu....u.b.........&ZN/.i.Bnj...xf!.m...D.CF... .eF.J..I.K....8.n~%;....q....z....d....k.E.9.x..|.aU...l......t!TW.......,.p..V..C.Iu..5........I$.#l......b.....5..25Y.Yh....cW.k.c].....a....]..>O....D.....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:05:55 GMT

Expires: Wed, 11 Feb 2015 16:05:55 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293315

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130045Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....mP..-.....20150207130045Z....20150214130045Z0...*.H................(.....~/j.J.y.PP<.......w.......u.AW|..K...x/.R..h..9. ..&.;?..^....n.n. ....|.d...L."?..\p..L...9 .KK3.........h5..tH ......j.........F.!$.G...o95..$4.|6..r..... r.....Za.5..Y........J.z..l.U...H2[.....lV...2LCaE...V]..W...a.B.h..C[...!....Dz.j.?.*........

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:05:55 GMT

Expires: Wed, 11 Feb 2015 16:05:55 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293315

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130045Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....mP..-.....20150207130045Z....20150214130045Z0...*.H................(.....~/j.J.y.PP<.......w.......u.AW|..K...x/.R..h..9. ..&.;?..^....n.n. ....|.d...L."?..\p..L...9 .KK3.........h5..tH ......j.........F.!$.G...o95..$4.|6..r..... r.....Za.5..Y........J.z..l.U...H2[.....lV...2LCaE...V]..W...a.B.h..C[...!....Dz.j.?.*........

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDM203LqIY3d HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:02:51 GMT

Expires: Wed, 11 Feb 2015 16:02:51 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293499

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...ZHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:02:51 GMT..Expires: Wed, 11 Feb 2015 16:02:51 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293499..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130036Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..36.r.!......20150207130036Z....20150214130036Z0...*.H.............#F.j......(.........z...}Q5.....j1A..1.r.....L..V...nk...@../#..s.`%..d...6....{.. X8..i1.{...t.b.........R5...B.~n.D(..}J.6-..'..1...K.t..?w.B..U...R"c.@.....d..........~.N1..YX'.A....DQ..r|)F3.M.Y......i..DwD...n..Q&.;....|DI..sC.O..D.&o.....k.:.2.=C...Znt>....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA6iR0vHFpqB HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:06:08 GMT

Expires: Wed, 11 Feb 2015 16:06:08 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293302

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:06:08 GMT..Expires: Wed, 11 Feb 2015 16:06:08 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293302..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I...

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=460840, public, no-transform, must-revalidate

Last-Modified: Mon, 9 Feb 2015 09:39:15 GMT

Expires: Mon, 16 Feb 2015 09:39:15 GMT

Date: Wed, 11 Feb 2015 01:38:52 GMT

Connection: keep-alive

0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....20150209093915Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a..eR&.....Y.)..".\....20150209093915Z....20150216093915Z0...*.H.............~0...hO6...:&.O........D......Bnr.s.PL.....a.......|..]'[>...`......I...P<I.$.T.....s..zF....... R...39...<.. J........~..{.g....W#..............|.r.l..<4.b.....er.kw.3.....P[.........Q.....Z?.Sa.........6.F......8.{E.[......mQ/.@..4......X.1P."O.\....3.S.....0...0...0..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authority0...141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA - G1 OCSP Responder Certificate 30.."0...*.H.............0..........'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p..^|o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E...=._...... ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,....

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=500835, public, no-transform, must-revalidate

Last-Modified: Mon, 9 Feb 2015 20:44:24 GMT

Expires: Mon, 16 Feb 2015 20:44:24 GMT

Date: Wed, 11 Feb 2015 01:38:52 GMT

Connection: keep-alive

0..........0..... .....0......0...0........6?s....V....OlL".O..20150209204424Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5........M.s.Q~...@?j.......20150209204424Z....20150216204424Z0...*.H..............2..T.U...=..C.V....Bo9..e..2.....S.'.#../Y].k.....n..1.8J\..PM.xY.P6H.....Q9...]...Z..d...Bl...!..7W.P*..-.a.-...q.f'k.d.Z...o.. D.q.8w.!.:..8...C0.j.%V.#&.d..n..Q.,..kE.s...*....p..7....~..MI.LFE....e../.....\..,Z.clG...v.R....Q....o.w..`...@^...%...K..,...#0...0...0..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at https://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.........{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(..........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H......

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEG6KkOvP8ESKcg0IBdCCpUQ= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g2.symcb.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1426

content-transfer-encoding: binary

Cache-Control: max-age=423565, public, no-transform, must-revalidate

Last-Modified: Sun, 8 Feb 2015 23:09:01 GMT

Expires: Sun, 15 Feb 2015 23:09:01 GMT

Date: Wed, 11 Feb 2015 01:34:29 GMT

Connection: keep-alive

0..........0..... .....0.....t0..p0........[..)...g..M..o......20150208230901Z0s0q0I0... ........z.xI.u.@....0..K.u....,.PA.....6a[J.k...3...n.....D.r......D....20150208230901Z....20150215230901Z0...*.H.............^.z9a...e'.Y...H.{.Y..p........9....>;..i.....c........#'Nf..E.,.8..x.....%Y.7..M..L........itl...5.;.0T.iY...>...]n...5.=..H~..3e.|_J.e..X{....Y9.........=..)).......l...v..^!.n./....].]......TE.]........o..S....A..NBM.N..$...Q...h......r..D .r.~..K..X.a:....0...0...0..........u$"(D.X....A.j<.0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Primary Certification Authority0...141202000000Z..151216235959Z0d1.0...U....US1.0...U....GeoTrust Inc.1=0;..U...4GeoTrust Primary CA OCSP-TGV Responder Certificate 30.."0...*.H.............0.........>....L.B. (..j.P....Zf.xEKI...w5(.&...@........5a().D8.......... .....|~t...)..y..\.....B...1..}.<.....xv..m.8. ;.b.6..6?....n...1.@u.......[.IM.A.@...=...o....`.ik.....Z.[D0.X...|.R`}...b....AW~.......!...Z....#.a...cW..].C.erl.3%.F..{/...C)..H...(...]........i0g0...U.%..0... .......0... .....0......0...U.......0.0...U...........0!..U....0...0.1.0...U....TGV-B-2780...*.H.............f9(.F.?...Tn4.....V.....qp..............ZL........YC';..wz.o..).........k.p.6U..d.....X.M./..fm.w[g!..7].N.^.......4.[0.C...'.,.Y......;....A`.........T.b.......Z..HCB.c...3.4`g./!...j.#.L.;..Gv..V....h._.........Du7...-.s......Q....!...J...S...W....g...z...

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:34:14 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Mon, 09 Feb 2015 18:46:20 GMT

Expires: Fri, 13 Feb 2015 18:46:20 GMT

ETag: 01062FBB3D0546CB913A2AA747FBA98E2C378255

Cache-Control: max-age=234125,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp8

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response

0..........0..... .....0......0...0...... .F....e*F.yG.b.......20150209184620Z0s0q0I0... ........m..Lco.>..... _.~..... .F....e*F.yG.b........p.O.T..0`....u.....20150209184620Z....20150213184620Z0...*.H.............%...........FZ...%........./b..=.P."_.1.....p..J.S.}Q...<t..MF.......Z..M....!....D.}...z....Y..H.3.t?.a.Q`H.....`\..f....q.3.W6...|.....g..b.Nu..a....w.".....".m.y..... P.f....1y..>)`..)..O..l..>..N...z...Q.KX......e;[vb..3.H.`..f....rt.P5.O.4%...Z......\..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSqKwMUr2QuEw7WkiXj/yq61z1iMAQU3s9cULeuAh8VF6oW6A21KJ1qWvMCEAUfF2/jMYyltKg9vzWZLPM= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: gm.symcd.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1425

content-transfer-encoding: binary

Cache-Control: max-age=349869, public, no-transform, must-revalidate

Last-Modified: Sun, 8 Feb 2015 02:43:43 GMT

Expires: Sun, 15 Feb 2015 02:43:43 GMT

Date: Wed, 11 Feb 2015 01:34:29 GMT

Connection: keep-alive

0..........0..... .....0.....s0..o0.......B...".....s\.tc......20150208024343Z0s0q0I0... ......... ...d.....%..*..=b0....\P...........(.jZ......o.1....=.5.,.....20150208024343Z....20150215024343Z0...*.H..............).......9V....DM......u'...)..].....4...K'...Z...T^m$...$.~..e..4N.. H.kc......X..$:......;U....~U.[3m?....S.SW..c.).&..G...}._.b~..DKK6..>..v.>.I....IV.N........R.u$TV.g<O...o.....a...w..o...b.'t_....bdR..Q....U'...Z....[.'....=....L..k.._")......... ..a....0...0...0..........M. K..jU.....w .0...*.H........0G1.0...U....US1.0...U....GeoTrust Inc.1 0...U....GeoTrust EV SSL CA - G40...150119000000Z..150419235959Z011/0-..U...&GeoTrust EV SSL CA - G4 OCSP Responder0.."0...*.H.............0.........I.....n@.v ...@.....L...."E....6....M@a.Nt..&&...%..).........m.........C. ..8..w.^.....Q..b.?.......|...nMb5..}......=...a}......;[T"%.;..i..y..p..[l.b.3!.L...8..T7F...;N."....z.@....7S.......{..*..<.O......(l..g_ ..E....Q#.{N]....T..o../.,Y"......s<H.PC........0..0... .....0......0"..U....0...0.1.0...U....TGV-B-28620...U.#..0.....\P...........(.jZ.0...U.......B...".....s\.tc....0...U.......0.0...U.%..0... .......0...U...........0...*.H.............]...!3...I..g..X_O.32(.M...R#......[C....23.....@.$....&.C.......&.....K...:..._.1.....r.u...u...{...q_(..%?...;.OY&.Jo-....3w......&. Aa.19.q.Q..J<p^...P.. ..S...V=..(.....i.. .Y...~.z_.=.}....Q.">...Y..P.kd.....2..[X-L..c..1...i$"....g..?.A....i...M.v..u..

<<< skipped >>>

POST /collect HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: VVV.google-analytics.com

Content-Length: 113

Cache-Control: no-cache

v=1&tid=UA-49608409-4&cid={DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}&t=event&ec=1.6.7.2&ea=Install_1_Init&el=Yes&ev=0

HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 11 Feb 2015 01:34:24 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: VVV.google-analytics.com

Content-Length: 149

Cache-Control: no-cache

v=1&tid=UA-49608409-4&cid={DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}&t=event&ec=1.6.7.2&ea=SystemInfo_ScreenInfo*&el=Windows 7 x64, 1716x901, 32, 96&ev=0

HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 11 Feb 2015 01:34:24 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: VVV.google-analytics.com

Content-Length: 123

Cache-Control: no-cache

v=1&tid=UA-49608409-4&cid={DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}&t=event&ec=1.6.7.2&ea=SystemInfo_OS*&el=Windows 7 x64&ev=0

HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 11 Feb 2015 01:34:24 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: VVV.google-analytics.com

Content-Length: 121

Cache-Control: no-cache

v=1&tid=UA-49608409-4&cid={DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}&t=event&ec=1.6.7.2&ea=Install_2_FileCopyInit&el=Yes&ev=0

HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 11 Feb 2015 01:34:25 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: VVV.google-analytics.com

Content-Length: 120

Cache-Control: no-cache

v=1&tid=UA-49608409-4&cid={DDC984F5-1F37-4B28-96BC-9CB42CE1F7B0}&t=event&ec=1.6.7.2&ea=Install_4_Completed*&el=New&ev=25

HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 11 Feb 2015 01:34:25 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;..

GET /pki/mscorp/crl/msitwww2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com

HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=6610

Content-Type: application/pkix-crl

Date: Wed, 11 Feb 2015 01:35:28 GMT

Etag: "f3ebb69d2744d01:0"

Last-Modified: Mon, 09 Feb 2015 05:16:53 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (rtm/3541)

VTag: 791153316100000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 51739

0...0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA2..150209050638Z..150217052638Z0...02..Z....o1At:~..........140611053232Z0.0...U.......02..Z........7..w........140610132751Z0.0...U.......02..Z......nb..y.........140610132751Z0.0...U.......02..Z..."S....2......."..140609213929Z0.0...U.......02..Z....Wy.l.!L.........140606155944Z0.0...U.......02..Z....,)."............140604183121Z0.0...U.......02..Z......-. ..l........140604174925Z0.0...U.......02..Z....$..x..q.........140604173444Z0.0...U.......02..Z..........K.........140603144730Z0.0...U.......02..Z.....t..As..........140603102811Z0.0...U.......02..Z.... ..b............140603080319Z0.0...U.......02..Z.......H.r.D........140603013424Z0.0...U.......02..Z.....bM....G........140602100514Z0.0...U.......02..Z....._b!]...........140602060640Z0.0...U.......02..Z....:S..P.=.........140527234127Z0.0...U.......02..Z....(...G.8C........140527155451Z0.0...U.......02..Z....Zd. V...........140527155451Z0.0...U.......02..Z.........Ge!........140527155451Z0.0...U.......02..Z...@...y.>.......@..140527155450Z0.0...U.......02..Z...?...{T........?..140527155450Z0.0...U.......02..Z...>..z..=.......>..140527155450Z0.0...U.......02..Z...;.,k..0R......;..140527155450Z0.0...U.......02..Z...:h..jg.E......:..140527155449Z0.0...U.......02..Z...5$.A{.2.......5..140527155449Z0.0...U.......02..Z...4.....D'Y.....4..140527155449Z0.0...U.......02..Z...2.a...........2..

<<< skipped >>>

GET /CRL/class2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: VVV.certplus.com

HTTP/1.1 200 OK

Content-Type: application/x-pkcs7-crl

Content-Length: 805

Connection: keep-alive

Date: Fri, 06 Feb 2015 13:51:24 GMT

Server: Apache/2.0.64 (Unix) DAV/2 mod_jk/1.2.36 mod_ssl/2.0.64 OpenSSL/0.9.8x

Last-Modified: Fri, 06 Feb 2015 13:20:34 GMT

ETag: "5e1c-325-4915ac80"

Accept-Ranges: bytes

Age: 42126

X-Cache: Hit from cloudfront

Via: 1.1 6a9941488f8c4d7cfc9d159decc6f1d1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Okp96JfCNcsKEHm2HylwDuwnkiVox5vW1NlYwVquBixExbQXPjrmFw==

0..!0......0...*.H........0=1.0...U....FR1.0...U....Certplus1.0...U....Class 2 Primary CA..150205000000Z..160205000000Z0..e01..."...?......*a..!s..150205000000Z0.0...U.......01... .....j.om2.!w.....150205000000Z0.0...U.......01... r4.yL...&r/....q..140520000000Z0.0...U.......01... ..........X. .Q...140520000000Z0.0...U.......01..."... t.w..x...k.d..140505000000Z0.0...U.......01...".f.........i...S..140520000000Z0.0...U.......01..."..IOC5K.9~.b;.JT..140328000000Z0.0...U......../0-0...U.......0...U.#..0....s-...(......y....0.0...*.H...............V ..o..._t...z..z........O..W.G...J... V.G....$\.^.1...U..I...7e.U.s.x(1.'..z.b..T=....9......I".._s=G.<..*n.<........Hi.{...%..L...Z..-p...c./......I#.."R.bQ... ...z....O5......~...........{.N..N%.m>.$...>oS.......3y......Mw.8..6..]u5..s*i.i .H..v.I.j.$HTTP/1.1 200 OK..Content-Type: application/x-pkcs7-crl..Content-Length: 805..Connection: keep-alive..Date: Fri, 06 Feb 2015 13:51:24 GMT..Server: Apache/2.0.64 (Unix) DAV/2 mod_jk/1.2.36 mod_ssl/2.0.64 OpenSSL/0.9.8x..Last-Modified: Fri, 06 Feb 2015 13:20:34 GMT..ETag: "5e1c-325-4915ac80"..Accept-Ranges: bytes..Age: 42126..X-Cache: Hit from cloudfront..Via: 1.1 6a9941488f8c4d7cfc9d159decc6f1d1.cloudfront.net (CloudFront)..X-Amz-Cf-Id: Okp96JfCNcsKEHm2HylwDuwnkiVox5vW1NlYwVquBixExbQXPjrmFw==..0..!0......0...*.H........0=1.0...U....FR1.0...U....Certplus1.0...U....Class 2 Primary CA..150205000000Z..160205000000Z0..e01..."...?......*a..!s..150205000000Z0.0...U.......01... .....j.om2.!w.....150205000000Z0.0...U....

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEEjP467eza0GY3odRLpEEVc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ga.symcd.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1496

content-transfer-encoding: binary

Cache-Control: max-age=583964, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Feb 2015 19:44:34 GMT

Expires: Tue, 17 Feb 2015 19:44:34 GMT

Date: Wed, 11 Feb 2015 01:34:31 GMT

Connection: keep-alive

0..........0..... .....0......0...0......7.4U.=r...W..Y........20150210194434Z0s0q0I0... .........X....U.Gb...1.g..L7..o&V.\.... ...|.'/.....H.......cz.D.D.W....20150210194434Z....20150217194434Z0...*.H..............h...../H...U...v...5..{(...X8.s9...nw..}..W.....;<...d;..~..Q..[..s....c._O......eG......6...@7%aM0F..c>.wB. B..7..qK.z.....Dk>....h.t. M..aL#<{.].z..dL..)tA.T....k.d.1Y!..=..(E&2.q....u..g.P,....k.q.......9..ub>......!..U.5...N...u..{....<..... ..V..L.......0...0...0..........v..f.h.X.{A..|..0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Extended Validation SSL CA - G20...150101000000Z..150401235959Z0g1.0...U....US1.0...U....GeoTrust Inc.1@0>..U...7GeoTrust Extended Validation SSL CA - G2 OCSP Responder0.."0...*.H.............0..............n....>.....u.eV... .Vm..X.......RHq9...*.f@<......ok..tY...o..\..]kX...|......R._....|!..i.p.F...a.p.y"1..7t..2l"D.>._:.T.=*Q?...^.....~J...........qN.it.../.lp..Q......e....S.L.~....g.V9sV..a.'sg;..=F.J...G;....~{hQ.k.........Fh....R.6?1.z.y.z..p...........0..0...U.......0.0...U.%..0... .......0...U...........0... .....0......0"..U....0...0.1.0...U....TGV-B-26890...U.#..0...o&V.\.... ...|.'/...0...U......7.4U.=r...W..Y......0...*.H.............P/....F-....jd....1..m.|....A.....1..Y'..E!.r.)C..e..P.N..j......-..3.>...R.....D.E)......qF.7n..".,...\./.T....V&~.e-KB.?.. ..(A.7..w5L&..Qwh>..J.Md...O.[....#..HJ..z4B...B.........fA.a....!..Q.E#.*.4.....Kyu).j...q...........]..1.Z....b4..............].2..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi/CPNmFbSvtr2ZnJM5ICEAsdsakZ8kw8Tvy1empObL8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: evsecure-ocsp.geotrust.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1426

content-transfer-encoding: binary

Cache-Control: max-age=577430, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Feb 2015 17:54:26 GMT

Expires: Tue, 17 Feb 2015 17:54:26 GMT

Date: Wed, 11 Feb 2015 01:34:28 GMT

Connection: keep-alive

0..........0..... .....0.....t0..p0........[..)...g..M..o......20150210175426Z0s0q0I0... ........z.xI.u.@....0..K.u....,.PA.....6a[J.k...3.........L<N..zjNl.....20150210175426Z....20150217175426Z0...*.H..............W.,......./.W#..1.VwdO....m..=..!.#.=RPJ.cTx.......K6?v.7...L.}..C..r.m9B.ir..$9.}......<....jZ..W.L.p..jh.......|.$..pwOyo.....\.f.<.J....].qsz.....?..Y..........P."_....6...6.U....V.S..3.&.".Y..D... ..nl}....4w.9....6.5.D.g..Nr.......KX....t..Wk..[.........0...0...0..........u$"(D.X....A.j<.0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Primary Certification Authority0...141202000000Z..151216235959Z0d1.0...U....US1.0...U....GeoTrust Inc.1=0;..U...4GeoTrust Primary CA OCSP-TGV Responder Certificate 30.."0...*.H.............0.........>....L.B. (..j.P....Zf.xEKI...w5(.&...@........5a().D8.......... .....|~t...)..y..\.....B...1..}.<.....xv..m.8. ;.b.6..6?....n...1.@u.......[.IM.A.@...=...o....`.ik.....Z.[D0.X...|.R`}...b....AW~.......!...Z....#.a...cW..].C.erl.3%.F..{/...C)..H...(...]........i0g0...U.%..0... .......0... .....0......0...U.......0.0...U...........0!..U....0...0.1.0...U....TGV-B-2780...*.H.............f9(.F.?...Tn4.....V.....qp..............ZL........YC';..wz.o..).........k.p.6U..d.....X.M./..fm.w[g!..7].N.^.......4.[0.C...'.,.Y......;....A`.........T.b.......Z..HCB.c...3.4`g./!...j.#.L.;..Gv..V....h._.........Du7...-.s......Q....!...J...S...W....g...z...

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:35:26 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:26 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:35:26 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:26 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:35:26 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:26 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pki/mscorp/crl/msitwww2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com

HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=6610

Content-Type: application/pkix-crl

Date: Wed, 11 Feb 2015 01:35:28 GMT

Etag: "f3ebb69d2744d01:0"

Last-Modified: Mon, 09 Feb 2015 05:16:53 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (rtm/3541)

VTag: 791153316100000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 51739

0...0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA2..150209050638Z..150217052638Z0...02..Z....o1At:~..........140611053232Z0.0...U.......02..Z........7..w........140610132751Z0.0...U.......02..Z......nb..y.........140610132751Z0.0...U.......02..Z..."S....2......."..140609213929Z0.0...U.......02..Z....Wy.l.!L.........140606155944Z0.0...U.......02..Z....,)."............140604183121Z0.0...U.......02..Z......-. ..l........140604174925Z0.0...U.......02..Z....$..x..q.........140604173444Z0.0...U.......02..Z..........K.........140603144730Z0.0...U.......02..Z.....t..As..........140603102811Z0.0...U.......02..Z.... ..b............140603080319Z0.0...U.......02..Z.......H.r.D........140603013424Z0.0...U.......02..Z.....bM....G........140602100514Z0.0...U.......02..Z....._b!]...........140602060640Z0.0...U.......02..Z....:S..P.=.........140527234127Z0.0...U.......02..Z....(...G.8C........140527155451Z0.0...U.......02..Z....Zd. V...........140527155451Z0.0...U.......02..Z.........Ge!........140527155451Z0.0...U.......02..Z...@...y.>.......@..140527155450Z0.0...U.......02..Z...?...{T........?..140527155450Z0.0...U.......02..Z...>..z..=.......>..140527155450Z0.0...U.......02..Z...;.,k..0R......;..140527155450Z0.0...U.......02..Z...:h..jg.E......:..140527155449Z0.0...U.......02..Z...5$.A{.2.......5..140527155449Z0.0...U.......02..Z...4.....D'Y.....4..140527155449Z0.0...U.......02..Z...2.a...........2..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=367784, public, no-transform, must-revalidate

Last-Modified: Sun, 8 Feb 2015 07:48:42 GMT

Expires: Sun, 15 Feb 2015 07:48:42 GMT

Date: Wed, 11 Feb 2015 01:38:58 GMT

Connection: keep-alive

0..........0..... .....0......0...0........6?s....V....OlL".O..20150208074842Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5.......A..2.....:...:......20150208074842Z....20150215074842Z0...*.H.............B./.h...c....(&....9.-.}......z.....'..T-."6.b..lni`B.....X.M\m.V....Z...S..:.H7^L.@.r..."o..If=....m..Y.6p.4`*..V..M...H..OL}.]7c..N..H.........Z.h$c.C.m...Z3.e.. ....\'..4..}.nP...UF.]*I.._.5........|.0.2..O..j....Tu...h........./....t..N..Sb&...Q.h[..1?...#0...0...0..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at https://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.........{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(..........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H......

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:36:02 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:02 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:36:02 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:02 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:36:02 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:02 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:34:39 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:39 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:34:40 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:40 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:34:40 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:40 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:37:03 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:03 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:37:04 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:04 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:37:04 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:04 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:36:21 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:21 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:36:21 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:21 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:36:21 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:36:21 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:37:50 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:50 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:37:50 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:50 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:37:50 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:37:50 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:34:54 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:54 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:34:54 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:54 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:34:54 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:54 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 11 Feb 2015 01:35:27 GMT

Last-Modified: Thu, 05 Feb 2015 19:47:05 GMT

Server: ECS (ams/D1C2)

X-Cache: HIT

Content-Length: 1406

0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..20150205094606Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M....'.G....20150204200915Z....20150505201415Z0...*.H.............g...].R...<2$s..uq.q.Y......E.@..1.... .......v...MM.pos"y.#F..{K........D.S_.F?.u...........Z"..?.....Q.:4...pm.T.R../{iU..6.........3z3."......a._P.....e.n$-...SCoP..V....l.B.CU!....D..8....O. _....AHl{W=Dc. .(.I`.h..e..R........I..K...6!.r....>t.l.../.I....0...0...0...........'..0...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTrust1"0 ..U....Baltimore CyberTrust Root0...150114195242Z..160114195229Z0G1.0...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-20110.."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...04..I......C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8..........h8GM..*.4.MP..../D4n.=ZTeH.B=kOT.v..2@F.2L..A...yn.4......fP...L...2.x....$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j.\.>.O....G.A........0..0... .....0......0...U.......0.0...U...........0...U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`;.l.uZ..k.F..^|A.Tb0...*.H.............n.h\Ch*G.c..yr..."._....J.-....j.t%..e.....(.h@.Z.7.a!m...sZH.N..>.S....K..........7wi3..x.D..l..ud.....CC......<.&.2. ..d...T.......;.S....\... ......m.6......#(.&....q.[z.........r..T....W...7ea.}..B.1........al.]i.F...-.0c...y.=?....E...........'>..O.._..

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTzWOT5x7dVAEdi9YzJMaln3bxMNwQUbyZW2Vzn98kEIPgeunyRJy+M+gcCEBHc6ENkz1QiC8Kfsu+chzI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: gtextval2-ocsp.geotrust.com

HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1496

content-transfer-encoding: binary

Cache-Control: max-age=542373, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Feb 2015 08:14:01 GMT

Expires: Tue, 17 Feb 2015 08:14:01 GMT

Date: Wed, 11 Feb 2015 01:34:28 GMT

Connection: keep-alive

0..........0..... .....0......0...0......7.4U.=r...W..Y........20150210081401Z0s0q0I0... .........X....U.Gb...1.g..L7..o&V.\.... ...|.'/........Cd.T".......2....20150210081401Z....20150217081401Z0...*.H............."Q&Fk.m.....*..Vn.....6..6.9.....{:...h#...Ty...|.K9.]Z..e...X.&h....6.k)6.a....:..S.2.mC..&.Y>.T....nu.\..=.v.\$fZ..].6.li....mt.D.....g...|-J.`.....Q.D..P{..9 ..........R\1.&."....b..hdC....CN.6..AZ"[T..-..9a.t..y[...N.].&.n.FShdA0f...=$.....,J...b/k.2\.....0...0...0..........v..f.h.X.{A..|..0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Extended Validation SSL CA - G20...150101000000Z..150401235959Z0g1.0...U....US1.0...U....GeoTrust Inc.1@0>..U...7GeoTrust Extended Validation SSL CA - G2 OCSP Responder0.."0...*.H.............0..............n....>.....u.eV... .Vm..X.......RHq9...*.f@<......ok..tY...o..\..]kX...|......R._....|!..i.p.F...a.p.y"1..7t..2l"D.>._:.T.=*Q?...^.....~J...........qN.it.../.lp..Q......e....S.L.~....g.V9sV..a.'sg;..=F.J...G;....~{hQ.k.........Fh....R.6?1.z.y.z..p...........0..0...U.......0.0...U.%..0... .......0...U...........0... .....0......0"..U....0...0.1.0...U....TGV-B-26890...U.#..0...o&V.\.... ...|.'/...0...U......7.4U.=r...W..Y......0...*.H.............P/....F-....jd....1..m.|....A.....1..Y'..E!.r.)C..e..P.N..j......-..3.>...R.....D.E)......qF.7n..".,...\./.T....V&~.e-KB.?.. ..(A.7..w5L&..Qwh>..J.Md...O.[....#..HJ..z4B...B.........fA.a....!..Q.E#.*.4.....Kyu).j...q...........]..1.Z....b4..............].2..

<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:35:27 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=dc321a8078923fbc3770950adae24b7391423618527; expires=Thu, 11-Feb-16 01:35:27 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Fri, 06 Feb 2015 23:51:50 GMT

Expires: Tue, 10 Feb 2015 23:51:50 GMT

ETag: "9006297540e316688484ed9e4b46a0dce7b0d372"

Cache-Control: max-age=345599,public,no-transform,must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b6ccf56bab10485-FRA

0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..20150206235150Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.{.....Z..w...d..\.-....w.....20150206235150Z....20150210235150Z."0 0... .....0......20140206235150Z0...*.H.............Q."...T1..ý.Rs.(..%l..<.....qN.jm\f...x3g...&.R.qQaH^....X.#{O G.....8K....(........f..&.%..m}.hU......9.......psNO.c;.Dz._....... ^..oQa48..6.......s.o..#.]{D..nQL.2.;.i0.$Vp....6...:f.....h.O..#......8..!g<q...d.tl.....h(..E.]-...................y.2.......0...0...0..........Z..~..M..<ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0... .......0... .....7....0.0... .......0... .....0......0...*.H..................sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._p..

<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com

HTTP/1.1 200 OK

Date: Wed, 11 Feb 2015 01:35:27 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=dc321a8078923fbc3770950adae24b7391423618527; expires=Thu, 11-Feb-16 01:35:27 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Fri, 06 Feb 2015 23:51:50 GMT

Expires: Tue, 10 Feb 2015 23:51:50 GMT

ETag: "9006297540e316688484ed9e4b46a0dce7b0d372"

Cache-Control: max-age=345599,public,no-transform,must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b6ccf572ab40485-FRA

0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..20150206235150Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.{.....Z..w...d..\.-....w.....20150206235150Z....20150210235150Z."0 0... .....0......20140206235150Z0...*.H.............Q."...T1..ý.Rs.(..%l..<.....qN.jm\f...x3g...&.R.qQaH^....X.#{O G.....8K....(........f..&.%..m}.hU......9.......psNO.c;.Dz._....... ^..oQa48..6.......s.o..#.]{D..nQL.2.;.i0.$Vp....6...:f.....h.O..#......8..!g<q...d.tl.....h(..E.]-...................y.2.......0...0...0..........Z..~..M..<ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0... .......0... .....7....0.0... .......0... .....0......0...*.H..................sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._p..

<<< skipped >>>

GET /ga.crt HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ga.symcb.com

HTTP/1.1 200 OK

Server: Apache

ETag: "f61f2d12570d5bf28a61727a3a66fd48:1398881413"

Last-Modified: Wed, 30 Apr 2014 18:10:13 GMT

Content-Type: text/plain

Date: Wed, 11 Feb 2015 01:34:30 GMT

Content-Length: 1182

Connection: keep-alive

0...0................L<N..zjNl.0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Primary Certification Authority0...120823000000Z..220822235959Z0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTrust Extended Validation SSL CA - G20.."0...*.H.............0..........!..=..*M.{.......Cb[...fR...h1.....X.~.j.L1.!..p.....-...y...%.L...by."_.|"58#..<..-.X.5.f[..$.p.t2.F.2........d......k....l....2R...B1.HB..].c.1..H\EE"..Y..A....FM......F........E.myx..P.......:......?}b..mxH....#a.>5M.....K.sS...iU..g......M..)\...b...........^0..Z0=.. ........10/0-.. .....0..!hXXp://EVSecure-ocsp.geotrust.com0...U.......0.......0F..U. .?0=0;..U. .0301.. ........%hXXp://VVV.geotrust.com/resources/cps0A..U...:0806.4.2.0hXXp://EVSecure-crl.geotrust.com/GeoTrustPCA.crl0...U...........0*..U...#0!..0.1.0...U....VeriSignMPKI-2-2530...U......o&V.\.... ...|.'/...0...U.#..0...,.PA.....6a[J.k...3.0...*.H..............w.W...Eo.Ln}..q..9...Il.Iq.,..6..X..u.r..x.e...........#....uuJY....@.N...B)4{..j.t_......n..[......g{...ip......v[8.9E...S.=U9.....n...jLz^.....|,b..._?....I(...9"..]..._._.. ..I.Usj.z........09.(K..w$.....N...u..W..G....H.!.i!.............*yh.^.8.).w...HTTP/1.1 200 OK..Server: Apache..ETag: "f61f2d12570d5bf28a61727a3a66fd48:1398881413"..Last-Modified: Wed, 30 Apr 2014 18:10:13 GMT..Content-Type: text/plain..Date: Wed, 11 Feb 2015 01:34:30 GMT..Content-Length: 1182..Connection: keep-alive..0...0................L<N..zjNl.0...*.H........0X1.0...U....US1.0...U....GeoTrust Inc.110/..U...(GeoTr

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCALebVD3Ci3F HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:05:55 GMT

Expires: Wed, 11 Feb 2015 16:05:55 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293315

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130045Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....mP..-.....20150207130045Z....20150214130045Z0...*.H................(.....~/j.J.y.PP<.......w.......u.AW|..K...x/.R..h..9. ..&.;?..^....n.n. ....|.d...L."?..\p..L...9 .KK3.........h5..tH ......j.........F.!$.G...o95..$4.|6..r..... r.....Za.5..Y........J.z..l.U...H2[.....lV...2LCaE...V]..W...a.B.h..C[...!....Dz.j.?.*....HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:05:55 GMT..Expires: Wed, 11 Feb 2015 16:05:55 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293315..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130045Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....mP..-.....20150207130045Z....20150214130045Z0...*.H................(.....~/j.J.y.PP<.......w.......u.AW|..K...x/.R..h..9. ..&.;?..^....n.n. ....|.d...L."?..\p..L...9 .KK3.........h5..tH ......j.........F.!$.G...o95..$4.|6..r..... r.....Za.5..Y........J.z..l.U...H2[.....lV...2LCaE...V]..W...a.B.h..C[...!....Dz.j.?.*........

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCA6iR0vHFpqB HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 16:06:08 GMT

Expires: Wed, 11 Feb 2015 16:06:08 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 293302

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 16:06:08 GMT..Expires: Wed, 11 Feb 2015 16:06:08 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 293302..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207130027Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./....GK........20150207130027Z....20150214130027Z0...*.H...............7....5vW.\...j}.7...[a.....:..rf.Z..d...h..Wvo.......2.cdZ.381.j}%...)....?.....~UB.Z7......I&@...!...3w..:..=Z"...#p...bX...M.8|@e.....>.qd...o_......Q0..|.....j.......RL....{!../..(. ...V....1...N........K.AtqL!./.1.).x.."..;.z4...P..G...|.j:.."..~.I.....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF+cplPoBBth HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 07 Feb 2015 22:46:52 GMT

Expires: Wed, 11 Feb 2015 22:46:52 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 269258

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Sat, 07 Feb 2015 22:46:52 GMT..Expires: Wed, 11 Feb 2015 22:46:52 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Age: 269258..Alternate-Protocol: 80:quic,p=0.02..Cache-Control: public, max-age=345600..0..........0..... .....0......0...0......J......h.v....b..Z./..20150207190631Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.._..S...a....20150207190631Z....20150214190631Z0...*.H.............ET....}.....f@Z...93.20........... ....6.~T.........R.........T.0.d5-.>...o.....o.CK..XM,69.......f..m-.n#v.)y-N........c.y.B7..l.d.*L...).7Ec...*".z.i|P...~...........X~@7.w.U....&...\.........s./.X.......hgS..f...,.U.qY..#1......oV..>....>...WT.t.,QO..=...

<<< skipped >>>

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:34:26 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; path=/

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:26 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:34:27 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:27 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:34:27 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:34:27 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

GET /pc-booster/purchase/?source=pc-booster&campaign=tweakbit&traffic=direct&reason=EnterKey_Register_now&registered=false HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Found

Date: Wed, 11 Feb 2015 01:35:43 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:43 GMT; path=/; domain=VVV.tweakbit.com

Location: /pc-booster/cart/

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Content-Type: text/html

........................

GET /pc-booster/cart/ HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.tweakbit.com

DNT: 1

Connection: Keep-Alive

Cookie: PHPSESSID=5fcls7t2dn8hv466gjhh3vq3i5; E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; _ga=GA1.2.1554352451.1423618474; _gat=1; _ym_visorc_21425662=b

HTTP/1.1 302 Moved Temporarily

Date: Wed, 11 Feb 2015 01:35:43 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7 squeeze19

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:43 GMT; path=/; domain=VVV.tweakbit.com

Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 20

Keep-Alive: timeout=15, max=99

Connection: Keep-Alive

Content-Type: text/html

....................HTTP/1.1 302 Moved Temporarily..Date: Wed, 11 Feb 2015 01:35:43 GMT..Server: Apache/2.2.16 (Debian)..X-Powered-By: PHP/5.3.3-7 squeeze19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Set-Cookie: E24AE960-E6CF-4F69-B37D-A4E5D4D3F7BD=1; expires=Sun, 12-Apr-2015 01:35:43 GMT; path=/; domain=VVV.tweakbit.com..Location: hXXps://store.tweakbit.com/cart/first/?prods=4623068&clear&ref=&affiliate=..Vary: Accept-Encoding..Content-Encoding: gzip..Content-Length: 20..Keep-Alive: timeout=15, max=99..Connection: Keep-Alive..Content-Type: text/html........................

Map

The Worm connects to the servers at the folowing location(s):

Strings from Dumps

PCBooster.exe_3308:

.text

.text

`.itext

`.itext

`.data

`.data

.idata

.idata

.edata

.edata

@.tls

@.tls

.rdata

.rdata

@.rsrc

@.rsrc

@.xdata

@.xdata

MajorOperatingSystemVersion

MajorOperatingSystemVersion

MinorOperatingSystemVersion

MinorOperatingSystemVersion

biClrImportant

biClrImportant

_MemoryManager_EventLog.txt

_MemoryManager_EventLog.txt

operation.

operation.

FastMM has detected an attempt to call a virtual method on a freed object. An access violation will now be raised in order to abort the current operation.

FastMM has detected an attempt to call a virtual method on a freed object. An access violation will now be raised in order to abort the current operation.

FastMM has detected an attempt to use an interface of a freed object. An access violation will now be raised in order to abort the current operation.

FastMM has detected an attempt to use an interface of a freed object. An access violation will now be raised in order to abort the current operation.

Note: Memory leak detail is logged to a text file in the same folder as this application. To disable this memory leak check, undefine "EnableMemoryLeakReporting".

Note: Memory leak detail is logged to a text file in the same folder as this application. To disable this memory leak check, undefine "EnableMemoryLeakReporting".

FastMM4.pas MUST be the first unit in your project's .dpr file, otherwise memory may be allocated

FastMM4.pas MUST be the first unit in your project's .dpr file, otherwise memory may be allocated

go into its configuration page and ensure that the FastMM4.pas unit is initialized before any other unit.

go into its configuration page and ensure that the FastMM4.pas unit is initialized before any other unit.

;!199{199

;!199{199

;0!8&2{199

;0!8&2{199

"

"

Windows 95

Windows 95

Windows 95 OSR-2

Windows 95 OSR-2

Windows 98

Windows 98

Windows 98 SE

Windows 98 SE

Windows ME

Windows ME

Windows 9x New

Windows 9x New

Windows NT 3

Windows NT 3

Windows NT 4

Windows NT 4

Windows 2000

Windows 2000

Windows XP

Windows XP

Windows 2003

Windows 2003

Windows Vista

Windows Vista

Windows 2008

Windows 2008

Windows 7

Windows 7

Windows 2008 R2

Windows 2008 R2

Windows 8

Windows 8

Windows Server 8

Windows Server 8

Windows NT New

Windows NT New

TMsgHandler

TMsgHandler

TMsgHandlerOO

TMsgHandlerOO

user.exe

user.exe

TMsgHandlers

TMsgHandlers

madToolsMsgHandlerWindow

madToolsMsgHandlerWindow

>0';0974&0{199

>0';0974&0{199

cmovÌ

cmovÌ

setÌ

setÌ

pop %seg

pop %seg

push %seg

push %seg

Export

Export

VVV.madshi.net

VVV.madshi.net

.data

.data

.jdbg

.jdbg

madExcept.HandleContactForm

madExcept.HandleContactForm

madExcept.HandleScreenshotForm

madExcept.HandleScreenshotForm

bSendBugReport

bSendBugReport

bSaveBugReport

bSaveBugReport

bPrintBugReport

bPrintBugReport

bShowBugReport

bShowBugReport

esSysUtilsShowException

esSysUtilsShowException

esHttpExtension

esHttpExtension

esIntraweb

esIntraweb

esTThreadExecute

esTThreadExecute

epCompleteReport

epCompleteReport

TBugReportCallback

TBugReportCallback

bugReport

bugReport

TBugReportCallbackOO

TBugReportCallbackOO

eaSendBugReport

eaSendBugReport

eaSaveBugReport

eaSaveBugReport

eaPrintBugReport

eaPrintBugReport

eaSendBugReport2

eaSendBugReport2

eaSaveBugReport2

eaSaveBugReport2

eaPrintBugReport2

eaPrintBugReport2

eaShowBugReport

eaShowBugReport

TBugReportPluginA1

TBugReportPluginA1

TBugReportPluginWU

TBugReportPluginWU

TBugReportPluginExA{

TBugReportPluginExA{

TBugReportPluginExW

TBugReportPluginExW

The import table is invalid.

The import table is invalid.

%exceptMsg%

%exceptMsg%

%bugReport%

%bugReport%

Úte%

Úte%

Útetime%

Útetime%

%computerName%

%computerName%

Þsktop%

Þsktop%

%userappdata%

%userappdata%

%commonappdata%

%commonappdata%

MailAsSmtpServer

MailAsSmtpServer

MailAsSmtpClient

MailAsSmtpClient

UploadViaHttp

UploadViaHttp

SmtpServer

SmtpServer

SmtpPort

SmtpPort

SmtpAccount

SmtpAccount

SmtpPassword

SmtpPassword

HttpServer

HttpServer

HttpPort

HttpPort

HttpAccount

HttpAccount

HttpPassword

HttpPassword

bugreport.txt

bugreport.txt

screenshot.png

screenshot.png

ExceptMsg

ExceptMsg

FrozenMsg

FrozenMsg

BitFaultMsg

BitFaultMsg

send bug report

send bug report

save bug report

save bug report

print bug report

print bug report

show bug report

show bug report

bug report

bug report

please find the bug report attached

please find the bug report attached

Sending bug report...

Sending bug report...

PrepAttMsg

PrepAttMsg

MxLookMsg

MxLookMsg

ConnMsg

ConnMsg

AuthMsg

AuthMsg

SendMailMsg

SendMailMsg

FieldMsg

FieldMsg

SendAttMsg

SendAttMsg

SendFinalMsg

SendFinalMsg

SendFailMsg

SendFailMsg

Sorry, sending the bug report didn't work.

Sorry, sending the bug report didn't work.

GetFilter1NoBugReport

GetFilter1NoBugReport

GetFilter2NoBugReport

GetFilter2NoBugReport

GetGeneralNoBugReport

GetGeneralNoBugReport

SetFilter1NoBugReport

SetFilter1NoBugReport

SetFilter2NoBugReport

SetFilter2NoBugReport

SetGeneralNoBugReport

SetGeneralNoBugReport

GetAutoShowBugReport

GetAutoShowBugReport

SetAutoShowBugReport

SetAutoShowBugReport

GetMailAsSmtpServer

GetMailAsSmtpServer

SetMailAsSmtpServer

SetMailAsSmtpServer

GetMailAsSmtpClient

GetMailAsSmtpClient

SetMailAsSmtpClient

SetMailAsSmtpClient

GetUploadViaHttp

GetUploadViaHttp

SetUploadViaHttp

SetUploadViaHttp

GetSmtpServer

GetSmtpServer

SetSmtpServer

SetSmtpServer

GetSmtpPort

GetSmtpPort

SetSmtpPort

SetSmtpPort

GetSmtpAccount

GetSmtpAccount

SetSmtpAccount

SetSmtpAccount

GetSmtpPassword

GetSmtpPassword

SetSmtpPassword

SetSmtpPassword

GetHttpServer

GetHttpServer

SetHttpServer

SetHttpServer

GetHttpPort

GetHttpPort

SetHttpPort

SetHttpPort

GetHttpAccount

GetHttpAccount

SetHttpAccount

SetHttpAccount

GetHttpPassword

GetHttpPassword

SetHttpPassword

SetHttpPassword

GetAttachBugReport

GetAttachBugReport

SetAttachBugReport

SetAttachBugReport

GetAttachBugReportFile

GetAttachBugReportFile

SetAttachBugReportFile

SetAttachBugReportFile

GetDeleteBugReportFile

GetDeleteBugReportFile

SetDeleteBugReportFile

SetDeleteBugReportFile

GetBugReportSendAs

GetBugReportSendAs

SetBugReportSendAs

SetBugReportSendAs

GetBugReportZip

GetBugReportZip

SetBugReportZip

SetBugReportZip

GetBugReportFile

GetBugReportFile

SetBugReportFile

SetBugReportFile

GetAppendBugReports

GetAppendBugReports

SetAppendBugReports

SetAppendBugReports

GetBugReportFileSize

GetBugReportFileSize

SetBugReportFileSize

SetBugReportFileSize

GetExceptMsg

GetExceptMsg

SetExceptMsg

SetExceptMsg

GetFrozenMsg

GetFrozenMsg

SetFrozenMsg

SetFrozenMsg

GetBitFaultMsg

GetBitFaultMsg

SetBitFaultMsg

SetBitFaultMsg

GetPrepareAttachMsg

GetPrepareAttachMsg

SetPrepareAttachMsg

SetPrepareAttachMsg

GetMxLookupMsg

GetMxLookupMsg

SetMxLookupMsg

SetMxLookupMsg

GetConnectMsg

GetConnectMsg

SetConnectMsg

SetConnectMsg

GetAuthMsg

GetAuthMsg

SetAuthMsg

SetAuthMsg

GetSendMailMsg

GetSendMailMsg

SetSendMailMsg

SetSendMailMsg

GetFieldsMsg

GetFieldsMsg

SetFieldsMsg

SetFieldsMsg

GetSendAttachMsg

GetSendAttachMsg

SetSendAttachMsg

SetSendAttachMsg

GetSendFinalizeMsg

GetSendFinalizeMsg

SetSendFinalizeMsg

SetSendFinalizeMsg

GetSendFailureMsg

GetSendFailureMsg

SetSendFailureMsg

SetSendFailureMsg

TDABugReportCallback

TDABugReportCallback

TDABugReportCallbackOO

TDABugReportCallbackOO

FBugReportHeader

FBugReportHeader

FBugReportSections

FBugReportSections

FBugReport

FBugReport

FBugReportCallbacks

FBugReportCallbacks

FBugReportCallbacksOO

FBugReportCallbacksOO

FCreateBugReport

FCreateBugReport

FCorrectBugReportNo

FCorrectBugReportNo

GetBugReportHeader

GetBugReportHeader

GetBugReportSections

GetBugReportSections

GetBugReport_

GetBugReport_

SetBugReport

SetBugReport

GetBugReport

GetBugReport

RegisterBugReportCallback

RegisterBugReportCallback

bugReportCallback

bugReportCallback

UnregisterBugReportCallback

UnregisterBugReportCallback

GetCreateBugReport

GetCreateBugReport

SetCreateBugReport

SetCreateBugReport

ShowBugReport

ShowBugReport

SendBugReport

SendBugReport

SaveBugReport

SaveBugReport

PrintBugReport

PrintBugReport

CompleteBugReport

CompleteBugReport

CriticalBugReportCallbackExists

CriticalBugReportCallbackExists

VVV.google.de

VVV.google.de

SMTP:

SMTP:

Tcpip\Parameters

Tcpip\Parameters

VxD\MSTCP

VxD\MSTCP

A.ROOT-SERVERS.NET

A.ROOT-SERVERS.NET

K.ROOT-SERVERS.NET

K.ROOT-SERVERS.NET

VVV.madshi.net_multipart_boundary

VVV.madshi.net_multipart_boundary

LOGIN

LOGIN

AUTH LOGIN

AUTH LOGIN

http=

http=

HTTP/1.1

HTTP/1.1

*.txt

*.txt

BugReport

BugReport

TSendBugReportExRec

TSendBugReportExRec

FDefaultMsgBox

FDefaultMsgBox

defaultMsgBox

defaultMsgBox

BugReportChanged

BugReportChanged

 

 

 

 

<p class='"summary_info"'><textarea id='"bugReport"' readonly cols='"80"' rows='"20"' style='"width:100%;height:100%;</p'><p class='"summary_info"'>Software\Microsoft\Windows</p> <p class='"summary_info"'>Software\Microsoft\Windows</p> <p class='"summary_info"'>operating system</p> <p class='"summary_info"'>operating system</p> <p class='"summary_info"'>GetThreadReport</p> <p class='"summary_info"'>GetThreadReport</p> <p class='"summary_info"'>GetCpuRegisters</p> <p class='"summary_info"'>GetCpuRegisters</p> <p class='"summary_info"'>ServerSupportFunctionNext</p> <p class='"summary_info"'>ServerSupportFunctionNext</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>user32.dll</p> <p class='"summary_info"'>user32.dll</p> <p class='"summary_info"'>internal error. please notify bug@madshi.net</p> <p class='"summary_info"'>internal error. please notify bug@madshi.net</p> <p class='"summary_info"'>HardWareKey</p> <p class='"summary_info"'>HardWareKey</p> <p class='"summary_info"'>Project.Consts</p> <p class='"summary_info"'>Project.Consts</p> <p class='"summary_info"'>Project.DebugLog</p> <p class='"summary_info"'>Project.DebugLog</p> <p class='"summary_info"'>%TDebugLog<project.debuglog.tloglevel>c</project.debuglog.tloglevel></p> <p class='"summary_info"'>%TDebugLog<project.debuglog.tloglevel>c</project.debuglog.tloglevel></p> <p class='"summary_info"'>%TDebugLog<project.debuglog.tloglevel>@uF</project.debuglog.tloglevel></p> <p class='"summary_info"'>%TDebugLog<project.debuglog.tloglevel>@uF</project.debuglog.tloglevel></p> <p class='"summary_info"'>Auslogics.Debug.Log</p> <p class='"summary_info"'>Auslogics.Debug.Log</p> <p class='"summary_info"'>Interfaces.Routines</p> <p class='"summary_info"'>Interfaces.Routines</p> <p class='"summary_info"'>Interfaces.ATUpdaters</p> <p class='"summary_info"'>Interfaces.ATUpdaters</p> <p class='"summary_info"'>Interfaces.TweakManager</p> <p class='"summary_info"'>Interfaces.TweakManager</p> <p class='"summary_info"'>Interfaces.PCBoosterHelper</p> <p class='"summary_info"'>Interfaces.PCBoosterHelper</p> <p class='"summary_info"'>@:%-%S</p> <p class='"summary_info"'>@:%-%S</p> <p class='"summary_info"'>AT.Classes</p> <p class='"summary_info"'>AT.Classes</p> <p class='"summary_info"'>VerifyKey</p> <p class='"summary_info"'>VerifyKey</p> <p class='"summary_info"'>AKey</p> <p class='"summary_info"'>AKey</p> <p class='"summary_info"'>InstallKey</p> <p class='"summary_info"'>InstallKey</p> <p class='"summary_info"'>UninstallKey</p> <p class='"summary_info"'>UninstallKey</p> <p class='"summary_info"'>BlockCustomKey</p> <p class='"summary_info"'>BlockCustomKey</p> <p class='"summary_info"'>BlockKey</p> <p class='"summary_info"'>BlockKey</p> <p class='"summary_info"'>Interfaces.Protection</p> <p class='"summary_info"'>Interfaces.Protection</p> <p class='"summary_info"'>Interfaces.Protection </p><p class='"summary_info"'>Interfaces.Protection </p><p class='"summary_info"'>TDLLFunctionImport</p> <p class='"summary_info"'>TDLLFunctionImport</p> <p class='"summary_info"'>:TDLLImport.:1</p> <p class='"summary_info"'>:TDLLImport.:1</p> <p class='"summary_info"'>TDLLImport</p> <p class='"summary_info"'>TDLLImport</p> <p class='"summary_info"'>TImports</p> <p class='"summary_info"'>TImports</p> <p class='"summary_info"'>TDLLFunctionExport</p> <p class='"summary_info"'>TDLLFunctionExport</p> <p class='"summary_info"'>TExports</p> <p class='"summary_info"'>TExports</p> <p class='"summary_info"'>Interfaces.Protection4</p> <p class='"summary_info"'>Interfaces.Protection4</p> <p class='"summary_info"'>PExportTreeNode</p> <p class='"summary_info"'>PExportTreeNode</p> <p class='"summary_info"'>TExportTreeNode</p> <p class='"summary_info"'>TExportTreeNode</p> <p class='"summary_info"'>TExportTree&</p> <p class='"summary_info"'>TExportTree&</p> <p class='"summary_info"'>TExportTree</p> <p class='"summary_info"'>TExportTree</p> <p class='"summary_info"'>ImportArray</p> <p class='"summary_info"'>ImportArray</p> <p class='"summary_info"'>ExportArray</p> <p class='"summary_info"'>ExportArray</p> <p class='"summary_info"'>ExportTree</p> <p class='"summary_info"'>ExportTree</p> <p class='"summary_info"'>FindExport</p> <p class='"summary_info"'>FindExport</p> <p class='"summary_info"'>FindExportPerIndex</p> <p class='"summary_info"'>FindExportPerIndex</p> <p class='"summary_info"'>GetExportList</p> <p class='"summary_info"'>GetExportList</p> <p class='"summary_info"'>FImportTable</p> <p class='"summary_info"'>FImportTable</p> <p class='"summary_info"'>FBoundImportTable</p> <p class='"summary_info"'>FBoundImportTable</p> <p class='"summary_info"'>&TArray<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>&TArray<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerator<interfaces.protection.tsection>(</interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerator<interfaces.protection.tsection>(</interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerator<interfaces.protection.tsection>x</interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerator<interfaces.protection.tsection>x</interfaces.protection.tsection></p> <p class='"summary_info"'>System.Generics.Collections</p> <p class='"summary_info"'>System.Generics.Collections</p> <p class='"summary_info"'> TEnumerable<interfaces.protection.tsection>-</interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerable<interfaces.protection.tsection>-</interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerable<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'> TEnumerable<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>F:{System.Generics.Collections}TList<interfaces.protection.tsection>.:1</interfaces.protection.tsection></p> <p class='"summary_info"'>F:{System.Generics.Collections}TList<interfaces.protection.tsection>.:1</interfaces.protection.tsection></p> <p class='"summary_info"'>)IComparer<interfaces.protection.tsection>pkJ</interfaces.protection.tsection></p> <p class='"summary_info"'>)IComparer<interfaces.protection.tsection>pkJ</interfaces.protection.tsection></p> <p class='"summary_info"'>System.Generics.Defaults</p> <p class='"summary_info"'>System.Generics.Defaults</p> <p class='"summary_info"'>6TCollectionNotifyEvent<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>6TCollectionNotifyEvent<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'> IEnumerable<interfaces.protection.tsection>lkJ</interfaces.protection.tsection></p> <p class='"summary_info"'> IEnumerable<interfaces.protection.tsection>lkJ</interfaces.protection.tsection></p> <p class='"summary_info"'>1TList<interfaces.protection.tsection>.TEnumerator5</interfaces.protection.tsection></p> <p class='"summary_info"'>1TList<interfaces.protection.tsection>.TEnumerator5</interfaces.protection.tsection></p> <p class='"summary_info"'>1TList<interfaces.protection.tsection>.TEnumerator</interfaces.protection.tsection></p> <p class='"summary_info"'>1TList<interfaces.protection.tsection>.TEnumerator</interfaces.protection.tsection></p> <p class='"summary_info"'>%TList<interfaces.protection.tsection>&</interfaces.protection.tsection></p> <p class='"summary_info"'>%TList<interfaces.protection.tsection>&</interfaces.protection.tsection></p> <p class='"summary_info"'>%TList<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>%TList<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'> TObjectList<interfaces.protection.tsection><p class='"summary_info"'> TObjectList<interfaces.protection.tsection><p class='"summary_info"'> TObjectList<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'> TObjectList<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>TTwofishKeyData</p> <p class='"summary_info"'>TTwofishKeyData</p> <p class='"summary_info"'>FKeyData</p> <p class='"summary_info"'>FKeyData</p> <p class='"summary_info"'>AKeyData</p> <p class='"summary_info"'>AKeyData</p> <p class='"summary_info"'>FSessionKey</p> <p class='"summary_info"'>FSessionKey</p> <p class='"summary_info"'>FPassword</p> <p class='"summary_info"'>FPassword</p> <p class='"summary_info"'>APassword</p> <p class='"summary_info"'>APassword</p> <p class='"summary_info"'> TComparison<interfaces.protection.tsection>pkJ</interfaces.protection.tsection></p> <p class='"summary_info"'> TComparison<interfaces.protection.tsection>pkJ</interfaces.protection.tsection></p> <p class='"summary_info"'>)TComparer<interfaces.protection.tsection>2</interfaces.protection.tsection></p> <p class='"summary_info"'>)TComparer<interfaces.protection.tsection>2</interfaces.protection.tsection></p> <p class='"summary_info"'>)TComparer<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>)TComparer<interfaces.protection.tsection></interfaces.protection.tsection></p> <p class='"summary_info"'>F:{System.Generics.Collections}TList<interfaces.protection.tsection>.:3</interfaces.protection.tsection></p> <p class='"summary_info"'>F:{System.Generics.Collections}TList<interfaces.protection.tsection>.:3</interfaces.protection.tsection></p> <p class='"summary_info"'>DebugLogExeption</p> <p class='"summary_info"'>DebugLogExeption</p> <p class='"summary_info"'>AT.Logics.SingletonBase</p> <p class='"summary_info"'>AT.Logics.SingletonBase</p> <p class='"summary_info"'>Interfaces.ProductHelper</p> <p class='"summary_info"'>Interfaces.ProductHelper</p> <p class='"summary_info"'>Interfaces.SettingsHelper</p> <p class='"summary_info"'>Interfaces.SettingsHelper</p> <p class='"summary_info"'>TArray<system.string></system.string></p> <p class='"summary_info"'>TArray<system.string></system.string></p> <p class='"summary_info"'>Project.Globals</p> <p class='"summary_info"'>Project.Globals</p> <p class='"summary_info"'>TATConstsGUIBase.TLResource</p> <p class='"summary_info"'>TATConstsGUIBase.TLResource</p> <p class='"summary_info"'>RES_FM_MAIN_IMG_STATUS_REPORT RES_FM_MAIN_IMG_STATUS_REPORT_ON!RES_FM_MAIN_IMG_STATUS_REPORT_OFF</p> <p class='"summary_info"'>RES_FM_MAIN_IMG_STATUS_REPORT RES_FM_MAIN_IMG_STATUS_REPORT_ON!RES_FM_MAIN_IMG_STATUS_REPORT_OFF</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Consts</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Consts</p> <p class='"summary_info"'>ResFmMainImgStatusReport</p> <p class='"summary_info"'>ResFmMainImgStatusReport</p> <p class='"summary_info"'>ResFmMainImgStatusReportState</p> <p class='"summary_info"'>ResFmMainImgStatusReportState</p> <p class='"summary_info"'>AMsg</p> <p class='"summary_info"'>AMsg</p> <p class='"summary_info"'>Interfaces.TaskScheduler</p> <p class='"summary_info"'>Interfaces.TaskScheduler</p> <p class='"summary_info"'>Interfaces.TaskScheduler*</p> <p class='"summary_info"'>Interfaces.TaskScheduler*</p> <p class='"summary_info"'>Interfaces.DiskCleaner</p> <p class='"summary_info"'>Interfaces.DiskCleaner</p> <p class='"summary_info"'>Interfaces.RegistryCleaner</p> <p class='"summary_info"'>Interfaces.RegistryCleaner</p> <p class='"summary_info"'>Interfaces.InternetOptimizer</p> <p class='"summary_info"'>Interfaces.InternetOptimizer</p> <p class='"summary_info"'>Globals.TCmdParams</p> <p class='"summary_info"'>Globals.TCmdParams</p> <p class='"summary_info"'>Project.GUI.Globals</p> <p class='"summary_info"'>Project.GUI.Globals</p> <p class='"summary_info"'>;CommonCmdLineParams<project.gui.globals.globals.tcmdparams>^</project.gui.globals.globals.tcmdparams></p> <p class='"summary_info"'>;CommonCmdLineParams<project.gui.globals.globals.tcmdparams>^</project.gui.globals.globals.tcmdparams></p> <p class='"summary_info"'>;CommonCmdLineParams<project.gui.globals.globals.tcmdparams></project.gui.globals.globals.tcmdparams></p> <p class='"summary_info"'>;CommonCmdLineParams<project.gui.globals.globals.tcmdparams></project.gui.globals.globals.tcmdparams></p> <p class='"summary_info"'>Project.GUI.CmdLineParams</p> <p class='"summary_info"'>Project.GUI.CmdLineParams</p> <p class='"summary_info"'>TATLocalizerGUIBase.TTimeConvert</p> <p class='"summary_info"'>TATLocalizerGUIBase.TTimeConvert</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLMsg</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLMsg</p> <p class='"summary_info"'>MSG_ALL_ABBR_MASK</p> <p class='"summary_info"'>MSG_ALL_ABBR_MASK</p> <p class='"summary_info"'>MSG_ALL_ABBR_BYTES</p> <p class='"summary_info"'>MSG_ALL_ABBR_BYTES</p> <p class='"summary_info"'>MSG_ALL_ABBR_BYTE_OR_BYTES</p> <p class='"summary_info"'>MSG_ALL_ABBR_BYTE_OR_BYTES</p> <p class='"summary_info"'>MSG_ALL_ABBR_KILO_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_KILO_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_MEGA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_MEGA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_GIGA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_GIGA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_TERA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_TERA_BYTE</p> <p class='"summary_info"'>MSG_ALL_ABBR_ZERO</p> <p class='"summary_info"'>MSG_ALL_ABBR_ZERO</p> <p class='"summary_info"'>MSG_ALL_TIME_HOUR</p> <p class='"summary_info"'>MSG_ALL_TIME_HOUR</p> <p class='"summary_info"'>MSG_ALL_TIME_HOURS</p> <p class='"summary_info"'>MSG_ALL_TIME_HOURS</p> <p class='"summary_info"'>MSG_ALL_TIME_MINUTE</p> <p class='"summary_info"'>MSG_ALL_TIME_MINUTE</p> <p class='"summary_info"'>MSG_ALL_TIME_MINUTES</p> <p class='"summary_info"'>MSG_ALL_TIME_MINUTES</p> <p class='"summary_info"'>MSG_ALL_TIME_SECOND</p> <p class='"summary_info"'>MSG_ALL_TIME_SECOND</p> <p class='"summary_info"'>MSG_ALL_TIME_SECONDS</p> <p class='"summary_info"'>MSG_ALL_TIME_SECONDS</p> <p class='"summary_info"'>MSG_ALL_USER_NOT_ADMIN</p> <p class='"summary_info"'>MSG_ALL_USER_NOT_ADMIN</p> <p class='"summary_info"'>MSG_ALL_TRAY_FIRST_HELP</p> <p class='"summary_info"'>MSG_ALL_TRAY_FIRST_HELP</p> <p class='"summary_info"'>MSG_ALL_TRAY_PROTECTION_FULL</p> <p class='"summary_info"'>MSG_ALL_TRAY_PROTECTION_FULL</p> <p class='"summary_info"'>MSG_ALL_TRAY_PROTECTION_LIMITED</p> <p class='"summary_info"'>MSG_ALL_TRAY_PROTECTION_LIMITED</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_TRIAL</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_TRIAL</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_FULL</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_FULL</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_RESULT</p> <p class='"summary_info"'>MSG_ALL_STA_ZERO_RESULT</p> <p class='"summary_info"'>MSG_ALL_TASKS_AUTOSTART</p> <p class='"summary_info"'>MSG_ALL_TASKS_AUTOSTART</p> <p class='"summary_info"'>MSG_ALL_TASKS_AUTOSCAN</p> <p class='"summary_info"'>MSG_ALL_TASKS_AUTOSCAN</p> <p class='"summary_info"'>MSG_ALL_TASKS_SENDREPORT</p> <p class='"summary_info"'>MSG_ALL_TASKS_SENDREPORT</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_1</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_1</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_2</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_2</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_3"MSG_UPSELL_LBL_STATE_NOT_INSTALLED</p> <p class='"summary_info"'>MSG_ALL_BENEFIT_3"MSG_UPSELL_LBL_STATE_NOT_INSTALLED</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_INSTALLED#MSG_UPSELL_LBL_STATE_NOT_REGISTERED</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_INSTALLED#MSG_UPSELL_LBL_STATE_NOT_REGISTERED</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_REGISTERED#MSG_UPSELL_LBL_STATE_ERROR_DOWNLOAD</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_REGISTERED#MSG_UPSELL_LBL_STATE_ERROR_DOWNLOAD</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_DOWNLOAD</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_DOWNLOAD</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_RUN</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_RUN</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_REGISTER'MSG_UPSELL_SIMPLE_LBL_CAPTION_PCCLEANUP%MSG_UPSELL_SIMPLE_LBL_CAPTION_PCFIXUP'MSG_UPSELL_SIMPLE_LBL_CAPTION_PCSPEEDUP$MSG_UPSELL_SIMPLE_LBL_DESC_PCCLEANUP"MSG_UPSELL_SIMPLE_LBL_DESC_PCFIXUP$MSG_UPSELL_SIMPLE_LBL_DESC_PCSPEEDUP$MSG_UPSELL_PROJECT_PCCLEANUP_CAPTION(MSG_UPSELL_PROJECT_PCCLEANUP_DESCRIPTION#MSG_UPSELL_PROJECT_PCCLEANUP_SCANER"MSG_UPSELL_PROJECT_PCFIXUP_CAPTION&MSG_UPSELL_PROJECT_PCFIXUP_DESCRIPTION!MSG_UPSELL_PROJECT_PCFIXUP_SCANER$MSG_UPSELL_PROJECT_PCSPEEDUP_CAPTION(MSG_UPSELL_PROJECT_PCSPEEDUP_DESCRIPTION#MSG_UPSELL_PROJECT_PCSPEEDUP_SCANER"MSG_UPSELL_SUITE_PCCLEANUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_LBL_STATE_REGISTER'MSG_UPSELL_SIMPLE_LBL_CAPTION_PCCLEANUP%MSG_UPSELL_SIMPLE_LBL_CAPTION_PCFIXUP'MSG_UPSELL_SIMPLE_LBL_CAPTION_PCSPEEDUP$MSG_UPSELL_SIMPLE_LBL_DESC_PCCLEANUP"MSG_UPSELL_SIMPLE_LBL_DESC_PCFIXUP$MSG_UPSELL_SIMPLE_LBL_DESC_PCSPEEDUP$MSG_UPSELL_PROJECT_PCCLEANUP_CAPTION(MSG_UPSELL_PROJECT_PCCLEANUP_DESCRIPTION#MSG_UPSELL_PROJECT_PCCLEANUP_SCANER"MSG_UPSELL_PROJECT_PCFIXUP_CAPTION&MSG_UPSELL_PROJECT_PCFIXUP_DESCRIPTION!MSG_UPSELL_PROJECT_PCFIXUP_SCANER$MSG_UPSELL_PROJECT_PCSPEEDUP_CAPTION(MSG_UPSELL_PROJECT_PCSPEEDUP_DESCRIPTION#MSG_UPSELL_PROJECT_PCSPEEDUP_SCANER"MSG_UPSELL_SUITE_PCCLEANUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCCLEANUP_LINK MSG_UPSELL_SUITE_PCFIXUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCCLEANUP_LINK MSG_UPSELL_SUITE_PCFIXUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCFIXUP_LINK"MSG_UPSELL_SUITE_PCSPEEDUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCFIXUP_LINK"MSG_UPSELL_SUITE_PCSPEEDUP_CAPTION</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCSPEEDUP_LINK</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_PCSPEEDUP_LINK</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_LINK</p> <p class='"summary_info"'>MSG_UPSELL_SUITE_LINK</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_PRODUCT#MSG_UPSELL_TABLE_HEADER_DESCRIPTION</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_PRODUCT#MSG_UPSELL_TABLE_HEADER_DESCRIPTION</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_STATUS</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_STATUS</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_ACTION</p> <p class='"summary_info"'>MSG_UPSELL_TABLE_HEADER_ACTION</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_1</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_1</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_2</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_2</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_3</p> <p class='"summary_info"'>MSG_PG_ES_SUBS_INFO_3</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_1</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_1</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_2</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_2</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_3</p> <p class='"summary_info"'>MSG_PG_ES_CONTINUE_INFO_3</p> <p class='"summary_info"'>MSG_FM_MAIN_LBL_TOP_MENU</p> <p class='"summary_info"'>MSG_FM_MAIN_LBL_TOP_MENU</p> <p class='"summary_info"'>MSG_PG_S_BH_DEFAULT_AUTOSTART</p> <p class='"summary_info"'>MSG_PG_S_BH_DEFAULT_AUTOSTART</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_INSTALL</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_INSTALL</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_DOWNLOADING</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_DOWNLOADING</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_STARTING"MSG_NF_IA_LBL_TITLE_ERROR_DOWNLOAD</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_STARTING"MSG_NF_IA_LBL_TITLE_ERROR_DOWNLOAD</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_ERROR_RUN!MSG_NF_IA_LBL_DESCRIPTION_INSTALL%MSG_NF_IA_LBL_DESCRIPTION_DOWNLOADING"MSG_NF_IA_LBL_DESCRIPTION_STARTING(MSG_NF_IA_LBL_DESCRIPTION_ERROR_DOWNLOAD*MSG_NF_IA_LBL_DESCRIPTION_ERROR_FREE_SPACE#MSG_NF_IA_LBL_DESCRIPTION_ERROR_RUN(MSG_NF_IA_LBL_DOWNLOAD_CAPTION_PREPARING(MSG_NF_IA_LBL_DOWNLOAD_CAPTION_REMAINING'MSG_NF_IA_LBL_DOWNLOAD_CAPTION_STOPPING</p> <p class='"summary_info"'>MSG_NF_IA_LBL_TITLE_ERROR_RUN!MSG_NF_IA_LBL_DESCRIPTION_INSTALL%MSG_NF_IA_LBL_DESCRIPTION_DOWNLOADING"MSG_NF_IA_LBL_DESCRIPTION_STARTING(MSG_NF_IA_LBL_DESCRIPTION_ERROR_DOWNLOAD*MSG_NF_IA_LBL_DESCRIPTION_ERROR_FREE_SPACE#MSG_NF_IA_LBL_DESCRIPTION_ERROR_RUN(MSG_NF_IA_LBL_DOWNLOAD_CAPTION_PREPARING(MSG_NF_IA_LBL_DOWNLOAD_CAPTION_REMAINING'MSG_NF_IA_LBL_DOWNLOAD_CAPTION_STOPPING</p> <p class='"summary_info"'>MSG_NF_IA_LBL_DOWNLOAD_SIZE</p> <p class='"summary_info"'>MSG_NF_IA_LBL_DOWNLOAD_SIZE</p> <p class='"summary_info"'>MSG_NF_IA_BTN_INSTALL</p> <p class='"summary_info"'>MSG_NF_IA_BTN_INSTALL</p> <p class='"summary_info"'>MSG_OFFER_GUARANT</p> <p class='"summary_info"'>MSG_OFFER_GUARANT</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Localizer</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Localizer</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLURL</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLURL</p> <p class='"summary_info"'>URL_ALL_COMPANY</p> <p class='"summary_info"'>URL_ALL_COMPANY</p> <p class='"summary_info"'>URL_ALL_PURCHASE_UPGRADE</p> <p class='"summary_info"'>URL_ALL_PURCHASE_UPGRADE</p> <p class='"summary_info"'>URL_APP_CHECK_VERSION</p> <p class='"summary_info"'>URL_APP_CHECK_VERSION</p> <p class='"summary_info"'>URL_APP_INSTALLER</p> <p class='"summary_info"'>URL_APP_INSTALLER</p> <p class='"summary_info"'>URL_FM_MAIN_TOP_MENU_MANUAL%URL_FM_MAIN_TOP_MENU_CHECK_FOR_UPDATE'URL_FM_MAIN_BOTTOM_REGISTER_NOW_UPGRADE</p> <p class='"summary_info"'>URL_FM_MAIN_TOP_MENU_MANUAL%URL_FM_MAIN_TOP_MENU_CHECK_FOR_UPDATE'URL_FM_MAIN_BOTTOM_REGISTER_NOW_UPGRADE</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCCLEANUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCCLEANUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCFIXUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCFIXUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCSPEEDUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCSPEEDUP_A</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCCLEANUP_B</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCCLEANUP_B</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCFIXUP_B</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCFIXUP_B</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCSPEEDUP_B)URL_UPSELL_PROJECT_PCCLEANUP_PCSUPPORTBAR'URL_UPSELL_PROJECT_PCFIXUP_PCSUPPORTBAR)URL_UPSELL_PROJECT_PCSPEEDUP_PCSUPPORTBAR%URL_UPSELL_PROJECT_PCCLEANUP_PURCHASE#URL_UPSELL_PROJECT_PCFIXUP_PURCHASE%URL_UPSELL_PROJECT_PCSPEEDUP_PURCHASE#URL_UPSELL_PROJECT_PCSUITE_PURCHASE$URL_UPSELL_PROJECT_PCCLEANUP_UPGRADE"URL_UPSELL_PROJECT_PCFIXUP_UPGRADE$URL_UPSELL_PROJECT_PCSPEEDUP_UPGRADE</p> <p class='"summary_info"'>URL_UPSELL_PROJECT_PCSPEEDUP_B)URL_UPSELL_PROJECT_PCCLEANUP_PCSUPPORTBAR'URL_UPSELL_PROJECT_PCFIXUP_PCSUPPORTBAR)URL_UPSELL_PROJECT_PCSPEEDUP_PCSUPPORTBAR%URL_UPSELL_PROJECT_PCCLEANUP_PURCHASE#URL_UPSELL_PROJECT_PCFIXUP_PURCHASE%URL_UPSELL_PROJECT_PCSPEEDUP_PURCHASE#URL_UPSELL_PROJECT_PCSUITE_PURCHASE$URL_UPSELL_PROJECT_PCCLEANUP_UPGRADE"URL_UPSELL_PROJECT_PCFIXUP_UPGRADE$URL_UPSELL_PROJECT_PCSPEEDUP_UPGRADE</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLDef</p> <p class='"summary_info"'>TATLocalizerGUIBase.TLDef</p> <p class='"summary_info"'>DEF_PRODUCT_NAME_FOR_URLS</p> <p class='"summary_info"'>DEF_PRODUCT_NAME_FOR_URLS</p> <p class='"summary_info"'>MsgStaZero</p> <p class='"summary_info"'>MsgStaZero</p> <p class='"summary_info"'>MsgStaZeroTrial</p> <p class='"summary_info"'>MsgStaZeroTrial</p> <p class='"summary_info"'>MsgStaZeroFull</p> <p class='"summary_info"'>MsgStaZeroFull</p> <p class='"summary_info"'>MsgStaZeroResult</p> <p class='"summary_info"'>MsgStaZeroResult</p> <p class='"summary_info"'>UrlAllCompany</p> <p class='"summary_info"'>UrlAllCompany</p> <p class='"summary_info"'>UrlAppCheckVersion</p> <p class='"summary_info"'>UrlAppCheckVersion</p> <p class='"summary_info"'>UrlAppInstaller</p> <p class='"summary_info"'>UrlAppInstaller</p> <p class='"summary_info"'>UrlAllPurchase</p> <p class='"summary_info"'>UrlAllPurchase</p> <p class='"summary_info"'>UrlUpsellProjectCleanUp</p> <p class='"summary_info"'>UrlUpsellProjectCleanUp</p> <p class='"summary_info"'>UrlUpsellProjectFixUp</p> <p class='"summary_info"'>UrlUpsellProjectFixUp</p> <p class='"summary_info"'>UrlUpsellProjectSpeedUp</p> <p class='"summary_info"'>UrlUpsellProjectSpeedUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectCleanUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectCleanUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectFixUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectFixUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectSpeedUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectSpeedUp</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectSuite</p> <p class='"summary_info"'>UrlPurchaseUpsellProjectSuite</p> <p class='"summary_info"'>UrlFmMainTopMenuManual</p> <p class='"summary_info"'>UrlFmMainTopMenuManual</p> <p class='"summary_info"'>UrlFmMainTopMenuCheckForUpdate</p> <p class='"summary_info"'>UrlFmMainTopMenuCheckForUpdate</p> <p class='"summary_info"'>!UrlFmMainBottomRegisterNowUpgrade</p> <p class='"summary_info"'>!UrlFmMainBottomRegisterNowUpgrade</p> <p class='"summary_info"'>DefProductNameForUrls</p> <p class='"summary_info"'>DefProductNameForUrls</p> <p class='"summary_info"'>MsgAllFullProductName</p> <p class='"summary_info"'>MsgAllFullProductName</p> <p class='"summary_info"'>MsgAllUserNotAdmin</p> <p class='"summary_info"'>MsgAllUserNotAdmin</p> <p class='"summary_info"'>MsgAllTrayFirstHelp</p> <p class='"summary_info"'>MsgAllTrayFirstHelp</p> <p class='"summary_info"'>MsgAllTrayProtection</p> <p class='"summary_info"'>MsgAllTrayProtection</p> <p class='"summary_info"'>MsgAllTasksAutoStart</p> <p class='"summary_info"'>MsgAllTasksAutoStart</p> <p class='"summary_info"'>MsgAllTasksAutoScan</p> <p class='"summary_info"'>MsgAllTasksAutoScan</p> <p class='"summary_info"'>MsgAllTasksSendReport</p> <p class='"summary_info"'>MsgAllTasksSendReport</p> <p class='"summary_info"'>MsgAllBenefit</p> <p class='"summary_info"'>MsgAllBenefit</p> <p class='"summary_info"'>MsgUpsellLblStateNotInstalled</p> <p class='"summary_info"'>MsgUpsellLblStateNotInstalled</p> <p class='"summary_info"'>MsgUpsellLblStateInstalled</p> <p class='"summary_info"'>MsgUpsellLblStateInstalled</p> <p class='"summary_info"'>MsgUpsellLblStateNotRegistered</p> <p class='"summary_info"'>MsgUpsellLblStateNotRegistered</p> <p class='"summary_info"'>MsgUpsellLblStateRegistered</p> <p class='"summary_info"'>MsgUpsellLblStateRegistered</p> <p class='"summary_info"'>MsgUpsellLblStateErrorDownload</p> <p class='"summary_info"'>MsgUpsellLblStateErrorDownload</p> <p class='"summary_info"'>MsgUpsellLblStateDownload</p> <p class='"summary_info"'>MsgUpsellLblStateDownload</p> <p class='"summary_info"'>MsgUpsellLblStateRun</p> <p class='"summary_info"'>MsgUpsellLblStateRun</p> <p class='"summary_info"'>MsgUpsellLblStateRegister</p> <p class='"summary_info"'>MsgUpsellLblStateRegister</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCCleanUp</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCCleanUp</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCFixUp</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCFixUp</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCSpeedUp</p> <p class='"summary_info"'>MsgUpsellSimpleCaptionPCSpeedUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCCleanUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCCleanUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCFixUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCFixUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCSpeedUp</p> <p class='"summary_info"'>MsgUpsellSimpleDescPCSpeedUp</p> <p class='"summary_info"'>MsgUpsellProjectCleanUpCaption</p> <p class='"summary_info"'>MsgUpsellProjectCleanUpCaption</p> <p class='"summary_info"'>"MsgUpsellProjectCleanUpDescription</p> <p class='"summary_info"'>"MsgUpsellProjectCleanUpDescription</p> <p class='"summary_info"'>MsgUpsellProjectCleanUpScaner</p> <p class='"summary_info"'>MsgUpsellProjectCleanUpScaner</p> <p class='"summary_info"'>MsgUpsellProjectFixUpCaption</p> <p class='"summary_info"'>MsgUpsellProjectFixUpCaption</p> <p class='"summary_info"'>MsgUpsellProjectFixUpDescription</p> <p class='"summary_info"'>MsgUpsellProjectFixUpDescription</p> <p class='"summary_info"'>MsgUpsellProjectFixUpScaner</p> <p class='"summary_info"'>MsgUpsellProjectFixUpScaner</p> <p class='"summary_info"'>MsgUpsellProjectSpeedUpCaption</p> <p class='"summary_info"'>MsgUpsellProjectSpeedUpCaption</p> <p class='"summary_info"'>"MsgUpsellProjectSpeedUpDescription</p> <p class='"summary_info"'>"MsgUpsellProjectSpeedUpDescription</p> <p class='"summary_info"'>MsgUpsellProjectSpeedUpScaner</p> <p class='"summary_info"'>MsgUpsellProjectSpeedUpScaner</p> <p class='"summary_info"'>MsgUpsellSuiteCleanUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteCleanUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteCleanUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteCleanUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteFixUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteFixUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteFixUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteFixUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteSpeedUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteSpeedUpCaption</p> <p class='"summary_info"'>MsgUpsellSuiteSpeedUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteSpeedUpLink</p> <p class='"summary_info"'>MsgUpsellSuiteLink</p> <p class='"summary_info"'>MsgUpsellSuiteLink</p> <p class='"summary_info"'>MsgUpsellTableHeaderProduct</p> <p class='"summary_info"'>MsgUpsellTableHeaderProduct</p> <p class='"summary_info"'>MsgUpsellTableHeaderDescription</p> <p class='"summary_info"'>MsgUpsellTableHeaderDescription</p> <p class='"summary_info"'>MsgUpsellTableHeaderStatus</p> <p class='"summary_info"'>MsgUpsellTableHeaderStatus</p> <p class='"summary_info"'>MsgUpsellTableHeaderAction</p> <p class='"summary_info"'>MsgUpsellTableHeaderAction</p> <p class='"summary_info"'>MsgPgESSubsInfo1</p> <p class='"summary_info"'>MsgPgESSubsInfo1</p> <p class='"summary_info"'>MsgPgESSubsInfo2</p> <p class='"summary_info"'>MsgPgESSubsInfo2</p> <p class='"summary_info"'>MsgPgESSubsInfo3</p> <p class='"summary_info"'>MsgPgESSubsInfo3</p> <p class='"summary_info"'>MsgPgESContinueInfo1</p> <p class='"summary_info"'>MsgPgESContinueInfo1</p> <p class='"summary_info"'>MsgPgESContinueInfo2</p> <p class='"summary_info"'>MsgPgESContinueInfo2</p> <p class='"summary_info"'>MsgPgESContinueInfo3</p> <p class='"summary_info"'>MsgPgESContinueInfo3</p> <p class='"summary_info"'>MsgFmMainLblTopMenu</p> <p class='"summary_info"'>MsgFmMainLblTopMenu</p> <p class='"summary_info"'>AMsgHelp</p> <p class='"summary_info"'>AMsgHelp</p> <p class='"summary_info"'>MsgPgSBhDefaultAutostart</p> <p class='"summary_info"'>MsgPgSBhDefaultAutostart</p> <p class='"summary_info"'>MsgNfIALblTitleInstall</p> <p class='"summary_info"'>MsgNfIALblTitleInstall</p> <p class='"summary_info"'>MsgNfIALblTitleDownloading</p> <p class='"summary_info"'>MsgNfIALblTitleDownloading</p> <p class='"summary_info"'>MsgNfIALblTitleStarting</p> <p class='"summary_info"'>MsgNfIALblTitleStarting</p> <p class='"summary_info"'>MsgNfIALblTitleErrorDownload</p> <p class='"summary_info"'>MsgNfIALblTitleErrorDownload</p> <p class='"summary_info"'>MsgNfIALblTitleErrorRun</p> <p class='"summary_info"'>MsgNfIALblTitleErrorRun</p> <p class='"summary_info"'>MsgNfIALblDescriptionInstall</p> <p class='"summary_info"'>MsgNfIALblDescriptionInstall</p> <p class='"summary_info"'>MsgNfIALblDescriptionDownloading</p> <p class='"summary_info"'>MsgNfIALblDescriptionDownloading</p> <p class='"summary_info"'>MsgNfIALblDescriptionStarting</p> <p class='"summary_info"'>MsgNfIALblDescriptionStarting</p> <p class='"summary_info"'>"MsgNfIALblDescriptionErrorDownload</p> <p class='"summary_info"'>"MsgNfIALblDescriptionErrorDownload</p> <p class='"summary_info"'>#MsgNfIALblDescriptionErrorFreeSpace</p> <p class='"summary_info"'>#MsgNfIALblDescriptionErrorFreeSpace</p> <p class='"summary_info"'>MsgNfIALblDescriptionErrorRun</p> <p class='"summary_info"'>MsgNfIALblDescriptionErrorRun</p> <p class='"summary_info"'>"MsgNfIALblDownloadCaptionPreparing</p> <p class='"summary_info"'>"MsgNfIALblDownloadCaptionPreparing</p> <p class='"summary_info"'>"MsgNfIALblDownloadCaptionRemaining</p> <p class='"summary_info"'>"MsgNfIALblDownloadCaptionRemaining</p> <p class='"summary_info"'>!MsgNfIALblDownloadCaptionStopping</p> <p class='"summary_info"'>!MsgNfIALblDownloadCaptionStopping</p> <p class='"summary_info"'>MsgNfIALblDownloadSize</p> <p class='"summary_info"'>MsgNfIALblDownloadSize</p> <p class='"summary_info"'>MsgNfIABtnInstall</p> <p class='"summary_info"'>MsgNfIABtnInstall</p> <p class='"summary_info"'>MsgOfferGuarant</p> <p class='"summary_info"'>MsgOfferGuarant</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Singleton</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Singleton</p> <p class='"summary_info"'>$TATCmdParamsGUIBase.TATTypeCmdParams</p> <p class='"summary_info"'>$TATCmdParamsGUIBase.TATTypeCmdParams</p> <p class='"summary_info"'>cpSendReport</p> <p class='"summary_info"'>cpSendReport</p> <p class='"summary_info"'>cpSupportBar</p> <p class='"summary_info"'>cpSupportBar</p> <p class='"summary_info"'>AT.GUI.Logics.Base.CmdParams</p> <p class='"summary_info"'>AT.GUI.Logics.Base.CmdParams</p> <p class='"summary_info"'>VCommonCmdLineParams<at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams>^</at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams></p> <p class='"summary_info"'>VCommonCmdLineParams<at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams>^</at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams></p> <p class='"summary_info"'>VCommonCmdLineParams<at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams>t</at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams></p> <p class='"summary_info"'>VCommonCmdLineParams<at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams>t</at.gui.logics.base.cmdparams.tatcmdparamsguibase.tattypecmdparams></p> <p class='"summary_info"'>AddHourly</p> <p class='"summary_info"'>AddHourly</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Scheduler</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Scheduler</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Settings</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Settings</p> <p class='"summary_info"'>GetPurchaseUrlParam</p> <p class='"summary_info"'>GetPurchaseUrlParam</p> <p class='"summary_info"'>=Settings<at.gui.logics.base.settings.tatsettingsguiparamtype>=</at.gui.logics.base.settings.tatsettingsguiparamtype></p> <p class='"summary_info"'>=Settings<at.gui.logics.base.settings.tatsettingsguiparamtype>=</at.gui.logics.base.settings.tatsettingsguiparamtype></p> <p class='"summary_info"'>=Settings<at.gui.logics.base.settings.tatsettingsguiparamtype></at.gui.logics.base.settings.tatsettingsguiparamtype></p> <p class='"summary_info"'>=Settings<at.gui.logics.base.settings.tatsettingsguiparamtype></at.gui.logics.base.settings.tatsettingsguiparamtype></p> <p class='"summary_info"'>Project.Settings</p> <p class='"summary_info"'>Project.Settings</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Applications</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Applications</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.Upsell</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.Upsell</p> <p class='"summary_info"'>PurchaseURL</p> <p class='"summary_info"'>PurchaseURL</p> <p class='"summary_info"'>Interfaces.ServiceManager</p> <p class='"summary_info"'>Interfaces.ServiceManager</p> <p class='"summary_info"'>&AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>&AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>&AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>&AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>$AT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>$AT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>.AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>.AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>DownloadSupportBar</p> <p class='"summary_info"'>DownloadSupportBar</p> <p class='"summary_info"'>AUrl</p> <p class='"summary_info"'>AUrl</p> <p class='"summary_info"'>AT.Logics.Offers</p> <p class='"summary_info"'>AT.Logics.Offers</p> <p class='"summary_info"'>AT.GUI.Components.TrayIcon</p> <p class='"summary_info"'>AT.GUI.Components.TrayIcon</p> <p class='"summary_info"'>acStartDownloadExecute</p> <p class='"summary_info"'>acStartDownloadExecute</p> <p class='"summary_info"'>acStopDownloadExecute</p> <p class='"summary_info"'>acStopDownloadExecute</p> <p class='"summary_info"'>acInstallToolExecute</p> <p class='"summary_info"'>acInstallToolExecute</p> <p class='"summary_info"'>acInstallUpdateExecute</p> <p class='"summary_info"'>acInstallUpdateExecute</p> <p class='"summary_info"'>ShowSendBugReport</p> <p class='"summary_info"'>ShowSendBugReport</p> <p class='"summary_info"'>ShowInvalidKey</p> <p class='"summary_info"'>ShowInvalidKey</p> <p class='"summary_info"'>AURL</p> <p class='"summary_info"'>AURL</p> <p class='"summary_info"'>ShowSiteContactSupport</p> <p class='"summary_info"'>ShowSiteContactSupport</p> <p class='"summary_info"'>AT.GUI.Logics.Base.FormManager</p> <p class='"summary_info"'>AT.GUI.Logics.Base.FormManager</p> <p class='"summary_info"'>Project.Protection.ServerCheck</p> <p class='"summary_info"'>Project.Protection.ServerCheck</p> <p class='"summary_info"'>acTopHelpSendBugReport</p> <p class='"summary_info"'>acTopHelpSendBugReport</p> <p class='"summary_info"'>acTopHelpCompanyWebSite</p> <p class='"summary_info"'>acTopHelpCompanyWebSite</p> <p class='"summary_info"'>acTopHelpTechnicalSupport</p> <p class='"summary_info"'>acTopHelpTechnicalSupport</p> <p class='"summary_info"'>miTopHelpSendBugReport4</p> <p class='"summary_info"'>miTopHelpSendBugReport4</p> <p class='"summary_info"'>miTopHelpCompanyWebSite@</p> <p class='"summary_info"'>miTopHelpCompanyWebSite@</p> <p class='"summary_info"'>miTopHelpTechnicalSupportD</p> <p class='"summary_info"'>miTopHelpTechnicalSupportD</p> <p class='"summary_info"'>miTopHelpSendBugReport</p> <p class='"summary_info"'>miTopHelpSendBugReport</p> <p class='"summary_info"'>miTopHelpCompanyWebSite</p> <p class='"summary_info"'>miTopHelpCompanyWebSite</p> <p class='"summary_info"'>miTopHelpTechnicalSupport</p> <p class='"summary_info"'>miTopHelpTechnicalSupport</p> <p class='"summary_info"'>acTopHelpCompanyWebSiteExecute$</p> <p class='"summary_info"'>acTopHelpCompanyWebSiteExecute$</p> <p class='"summary_info"'>acTopHelpSendBugReportExecute#</p> <p class='"summary_info"'>acTopHelpSendBugReportExecute#</p> <p class='"summary_info"'>acTopHelpOnlineManualExecute'</p> <p class='"summary_info"'>acTopHelpOnlineManualExecute'</p> <p class='"summary_info"'>acTopHelpTechnicalSupportExecute&</p> <p class='"summary_info"'>acTopHelpTechnicalSupportExecute&</p> <p class='"summary_info"'>acTopHelpCheckForUpdatesExecute</p> <p class='"summary_info"'>acTopHelpCheckForUpdatesExecute</p> <p class='"summary_info"'>acTrayAllExitExecute!</p> <p class='"summary_info"'>acTrayAllExitExecute!</p> <p class='"summary_info"'>acTrayAllRestoreAppExecute</p> <p class='"summary_info"'>acTrayAllRestoreAppExecute</p> <p class='"summary_info"'>acTrayAllHideAppExecute</p> <p class='"summary_info"'>acTrayAllHideAppExecute</p> <p class='"summary_info"'>acTopSettingsExecute"</p> <p class='"summary_info"'>acTopSettingsExecute"</p> <p class='"summary_info"'>acTopHelpRegisterNowExecute</p> <p class='"summary_info"'>acTopHelpRegisterNowExecute</p> <p class='"summary_info"'>acTrayAllSettingsExecute!</p> <p class='"summary_info"'>acTrayAllSettingsExecute!</p> <p class='"summary_info"'>acBottomRegisterNowExecute</p> <p class='"summary_info"'>acBottomRegisterNowExecute</p> <p class='"summary_info"'>acTopHelpAboutExecute</p> <p class='"summary_info"'>acTopHelpAboutExecute</p> <p class='"summary_info"'>acTopHelpExecute</p> <p class='"summary_info"'>acTopHelpExecute</p> <p class='"summary_info"'>acBottomFeedbackExecute</p> <p class='"summary_info"'>acBottomFeedbackExecute</p> <p class='"summary_info"'>acTopHelpCompanyWebSiteExecute</p> <p class='"summary_info"'>acTopHelpCompanyWebSiteExecute</p> <p class='"summary_info"'>acTopHelpSendBugReportExecute</p> <p class='"summary_info"'>acTopHelpSendBugReportExecute</p> <p class='"summary_info"'>acTopHelpOnlineManualExecute</p> <p class='"summary_info"'>acTopHelpOnlineManualExecute</p> <p class='"summary_info"'>acTopHelpTechnicalSupportExecute</p> <p class='"summary_info"'>acTopHelpTechnicalSupportExecute</p> <p class='"summary_info"'>acTrayAllExitExecute</p> <p class='"summary_info"'>acTrayAllExitExecute</p> <p class='"summary_info"'>acTopSettingsExecute</p> <p class='"summary_info"'>acTopSettingsExecute</p> <p class='"summary_info"'>acTrayAllSettingsExecute</p> <p class='"summary_info"'>acTrayAllSettingsExecute</p> <p class='"summary_info"'>TAxWheelPlace.TAxAnimate%</p> <p class='"summary_info"'>TAxWheelPlace.TAxAnimate%</p> <p class='"summary_info"'>TAxWheelPlace.TAxAnimate0</p> <p class='"summary_info"'>TAxWheelPlace.TAxAnimate0</p> <p class='"summary_info"'>(TPCBoosterGUILocalizer.TPCBoosterMessage</p> <p class='"summary_info"'>(TPCBoosterGUILocalizer.TPCBoosterMessage</p> <p class='"summary_info"'>CANNOT_SAVE_ORIGINAL_STATE%MSG_FM_MAIN_ACT_TRAY_BOOSTER_MODE_OFF$MSG_FM_MAIN_ACT_TRAY_BOOSTER_MODE_ON</p> <p class='"summary_info"'>CANNOT_SAVE_ORIGINAL_STATE%MSG_FM_MAIN_ACT_TRAY_BOOSTER_MODE_OFF$MSG_FM_MAIN_ACT_TRAY_BOOSTER_MODE_ON</p> <p class='"summary_info"'>PCBooster.GUILocalizer</p> <p class='"summary_info"'>PCBooster.GUILocalizer</p> <p class='"summary_info"'>GetPCBoosterMsg</p> <p class='"summary_info"'>GetPCBoosterMsg</p> <p class='"summary_info"'>MsgFmMainActTrayBoosterMode</p> <p class='"summary_info"'>MsgFmMainActTrayBoosterMode</p> <p class='"summary_info"'>AMsgSettings</p> <p class='"summary_info"'>AMsgSettings</p> <p class='"summary_info"'>PCBooster.GUIGlobals</p> <p class='"summary_info"'>PCBooster.GUIGlobals</p> <p class='"summary_info"'>PCBooster.GUISettings</p> <p class='"summary_info"'>PCBooster.GUISettings</p> <p class='"summary_info"'>OnKeyDown</p> <p class='"summary_info"'>OnKeyDown</p> <p class='"summary_info"'>OnKeyPress</p> <p class='"summary_info"'>OnKeyPress</p> <p class='"summary_info"'>OnKeyUp</p> <p class='"summary_info"'>OnKeyUp</p> <p class='"summary_info"'>acAdvancedEditorExecute</p> <p class='"summary_info"'>acAdvancedEditorExecute</p> <p class='"summary_info"'>PCBooster.GUIApplication</p> <p class='"summary_info"'>PCBooster.GUIApplication</p> <p class='"summary_info"'>acTrayAllSettingsExecute#</p> <p class='"summary_info"'>acTrayAllSettingsExecute#</p> <p class='"summary_info"'>acTrayBoosterModeHomeExecute%</p> <p class='"summary_info"'>acTrayBoosterModeHomeExecute%</p> <p class='"summary_info"'>acTrayBoosterModeOfficeExecute%</p> <p class='"summary_info"'>acTrayBoosterModeOfficeExecute%</p> <p class='"summary_info"'>acTrayBoosterModeGamingExecute'</p> <p class='"summary_info"'>acTrayBoosterModeGamingExecute'</p> <p class='"summary_info"'>acTrayBoosterModeAdvancedExecute</p> <p class='"summary_info"'>acTrayBoosterModeAdvancedExecute</p> <p class='"summary_info"'>acTrayBoosterModeOffExecute</p> <p class='"summary_info"'>acTrayBoosterModeOffExecute</p> <p class='"summary_info"'>acTrayBoosterModeHomeExecute</p> <p class='"summary_info"'>acTrayBoosterModeHomeExecute</p> <p class='"summary_info"'>acTrayBoosterModeOfficeExecute</p> <p class='"summary_info"'>acTrayBoosterModeOfficeExecute</p> <p class='"summary_info"'>acTrayBoosterModeGamingExecute</p> <p class='"summary_info"'>acTrayBoosterModeGamingExecute</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Application</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Application</p> <p class='"summary_info"'>Interfaces.DebugLog.Send</p> <p class='"summary_info"'>Interfaces.DebugLog.Send</p> <p class='"summary_info"'>Interfaces.Localizer</p> <p class='"summary_info"'>Interfaces.Localizer</p> <p class='"summary_info"'>Interfaces.RescueCenter</p> <p class='"summary_info"'>Interfaces.RescueCenter</p> <p class='"summary_info"'>Interfaces.DiskWipeHelper</p> <p class='"summary_info"'>Interfaces.DiskWipeHelper</p> <p class='"summary_info"'>Interfaces.CommonForms.Routine</p> <p class='"summary_info"'>Interfaces.CommonForms.Routine</p> <p class='"summary_info"'>Interfaces.CommonForms.Site</p> <p class='"summary_info"'>Interfaces.CommonForms.Site</p> <p class='"summary_info"'>Interfaces.BrowserHelper</p> <p class='"summary_info"'>Interfaces.BrowserHelper</p> <p class='"summary_info"'>ufmNagBase$AT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>ufmNagBase$AT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.Upsell&AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.Upsell&AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>Interfaces.ServiceManager&AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>Interfaces.ServiceManager&AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Utils</p> <p class='"summary_info"'>AT.GUI.Logics.Base.Utils</p> <p class='"summary_info"'>Project.ExceptionHandler.MadShi</p> <p class='"summary_info"'>Project.ExceptionHandler.MadShi</p> <p class='"summary_info"'>madStackTrace.AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>madStackTrace.AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>AT.Logics.CanvasHelper</p> <p class='"summary_info"'>AT.Logics.CanvasHelper</p> <p class='"summary_info"'>6666666666666666</p> <p class='"summary_info"'>6666666666666666</p> <p class='"summary_info"'>%Program Files% (x86)\TweakBit\PCBooster\PCBooster_MemoryManager_EventLog.txt</p> <p class='"summary_info"'>%Program Files% (x86)\TweakBit\PCBooster\PCBooster_MemoryManager_EventLog.txt</p> <p class='"summary_info"'>rtl160.bpl</p> <p class='"summary_info"'>rtl160.bpl</p> <p class='"summary_info"'>@System@@IntfAddRef$qqrx45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@IntfAddRef$qqrx45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@IntfCast$qqrr45System@ÞlphiInterface$t17System@IInterface%x45System@ÞlphiInterface$t17System@IInterface%rx5_GUID</p> <p class='"summary_info"'>@System@@IntfCast$qqrr45System@ÞlphiInterface$t17System@IInterface%x45System@ÞlphiInterface$t17System@IInterface%rx5_GUID</p> <p class='"summary_info"'>@System@@IntfCopy$qqrr45System@ÞlphiInterface$t17System@IInterface%x45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@IntfCopy$qqrr45System@ÞlphiInterface$t17System@IInterface%x45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@IntfClear$qqrr45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@IntfClear$qqrr45System@ÞlphiInterface$t17System@IInterface%</p> <p class='"summary_info"'>@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus</p> <p class='"summary_info"'>@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus</p> <p class='"summary_info"'>@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2</p> <p class='"summary_info"'>@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2</p> <p class='"summary_info"'>@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@LStrFromString$qqrr27System@%AnsiStringT$us$i0$%rx28System@%SmallString$iuc$255%us</p> <p class='"summary_info"'>@System@@LStrFromString$qqrr27System@%AnsiStringT$us$i0$%rx28System@%SmallString$iuc$255%us</p> <p class='"summary_info"'>@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus</p> <p class='"summary_info"'>@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus</p> <p class='"summary_info"'>@System@@LStrLAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@LStrLAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%</p> <p class='"summary_info"'>@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule</p> <p class='"summary_info"'>@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule</p> <p class='"summary_info"'>@System@@_CToPasStr$qqrp28System@%SmallString$iuc$255%pxc</p> <p class='"summary_info"'>@System@@_CToPasStr$qqrp28System@%SmallString$iuc$255%pxc</p> <p class='"summary_info"'>@System@ReportMemoryLeaksOnShutdown</p> <p class='"summary_info"'>@System@ReportMemoryLeaksOnShutdown</p> <p class='"summary_info"'>GetKeyState</p> <p class='"summary_info"'>GetKeyState</p> <p class='"summary_info"'>EnumWindows</p> <p class='"summary_info"'>EnumWindows</p> <p class='"summary_info"'>gdi32.dll</p> <p class='"summary_info"'>gdi32.dll</p> <p class='"summary_info"'>version.dll</p> <p class='"summary_info"'>version.dll</p> <p class='"summary_info"'>GetWindowsDirectoryA</p> <p class='"summary_info"'>GetWindowsDirectoryA</p> <p class='"summary_info"'>CreatePipe</p> <p class='"summary_info"'>CreatePipe</p> <p class='"summary_info"'>advapi32.dll</p> <p class='"summary_info"'>advapi32.dll</p> <p class='"summary_info"'>RegQueryInfoKeyW</p> <p class='"summary_info"'>RegQueryInfoKeyW</p> <p class='"summary_info"'>RegOpenKeyExA</p> <p class='"summary_info"'>RegOpenKeyExA</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegEnumKeyA</p> <p class='"summary_info"'>RegEnumKeyA</p> <p class='"summary_info"'>RegCreateKeyExA</p> <p class='"summary_info"'>RegCreateKeyExA</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>SHFolder.dll</p> <p class='"summary_info"'>SHFolder.dll</p> <p class='"summary_info"'>comctl32.dll</p> <p class='"summary_info"'>comctl32.dll</p> <p class='"summary_info"'>shell32.dll</p> <p class='"summary_info"'>shell32.dll</p> <p class='"summary_info"'>ShellExecuteExA</p> <p class='"summary_info"'>ShellExecuteExA</p> <p class='"summary_info"'>ShellExecuteA</p> <p class='"summary_info"'>ShellExecuteA</p> <p class='"summary_info"'>ShellExecuteW</p> <p class='"summary_info"'>ShellExecuteW</p> <p class='"summary_info"'>@System@Sysutils@Supports$qqrx45System@ÞlphiInterface$t17System@IInterface%rx5_GUIDpv</p> <p class='"summary_info"'>@System@Sysutils@Supports$qqrx45System@ÞlphiInterface$t17System@IInterface%rx5_GUIDpv</p> <p class='"summary_info"'>@System@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeString</p> <p class='"summary_info"'>@System@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeString</p> <p class='"summary_info"'>@System@Sysutils@CharInSet$qqrbrx29System@%Set$tc$iuc$0$iuc$255%</p> <p class='"summary_info"'>@System@Sysutils@CharInSet$qqrbrx29System@%Set$tc$iuc$0$iuc$255%</p> <p class='"summary_info"'>@System@Variants@@VarToIntf$qqrr45System@ÞlphiInterface$t17System@IInterface%rx8TVarData</p> <p class='"summary_info"'>@System@Variants@@VarToIntf$qqrr45System@ÞlphiInterface$t17System@IInterface%rx8TVarData</p> <p class='"summary_info"'>@System@Classes@TLoginCredentialService@$bcdtr$qqrv</p> <p class='"summary_info"'>@System@Classes@TLoginCredentialService@$bcdtr$qqrv</p> <p class='"summary_info"'>@System@Classes@TLoginCredentialService@$bcctr$qqrv</p> <p class='"summary_info"'>@System@Classes@TLoginCredentialService@$bcctr$qqrv</p> <p class='"summary_info"'>@System@Classes@TComponent@ObserverAdded$qqrxix52System@ÞlphiInterface$t24System@Classes@IObserver%</p> <p class='"summary_info"'>@System@Classes@TComponent@ObserverAdded$qqrxix52System@ÞlphiInterface$t24System@Classes@IObserver%</p> <p class='"summary_info"'>@System@Classes@TStrings@AddStrings$qqrx45System@%DynamicArray$t20System@UnicodeString%</p> <p class='"summary_info"'>@System@Classes@TStrings@AddStrings$qqrx45System@%DynamicArray$t20System@UnicodeString%</p> <p class='"summary_info"'>comdlg32.dll</p> <p class='"summary_info"'>comdlg32.dll</p> <p class='"summary_info"'>wsock32.dll</p> <p class='"summary_info"'>wsock32.dll</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@SetRootKey$qqrp6HKEY__</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@SetRootKey$qqrp6HKEY__</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@CloseKey$qqrv</p> <p class='"summary_info"'>@System@Win@Registry@TRegistry@CloseKey$qqrv</p> <p class='"summary_info"'>vcl160.bpl</p> <p class='"summary_info"'>vcl160.bpl</p> <p class='"summary_info"'>@Vcl@Graphics@TGraphic@GetSupportsPartialTransparency$qqrv</p> <p class='"summary_info"'>@Vcl@Graphics@TGraphic@GetSupportsPartialTransparency$qqrv</p> <p class='"summary_info"'>@Vcl@Controls@TWinControl@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Vcl@Controls@TWinControl@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Vcl@Controls@TControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%</p> <p class='"summary_info"'>@Vcl@Controls@TControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%</p> <p class='"summary_info"'>@Vcl@Controls@TControl@IsShowHintStored$qqrv</p> <p class='"summary_info"'>@Vcl@Controls@TControl@IsShowHintStored$qqrv</p> <p class='"summary_info"'>@Vcl@Controls@TControl@SetAnchors$qqr54System@%Set$t26System@Uitypes@TAnchorKind$iuc$0$iuc$3%</p> <p class='"summary_info"'>@Vcl@Controls@TControl@SetAnchors$qqr54System@%Set$t26System@Uitypes@TAnchorKind$iuc$0$iuc$3%</p> <p class='"summary_info"'>@$xp$27Vcl@Controls@TKeyPressEvent</p> <p class='"summary_info"'>@$xp$27Vcl@Controls@TKeyPressEvent</p> <p class='"summary_info"'>@$xp$22Vcl@Controls@TKeyEvent</p> <p class='"summary_info"'>@$xp$22Vcl@Controls@TKeyEvent</p> <p class='"summary_info"'>winspool.drv</p> <p class='"summary_info"'>winspool.drv</p> <p class='"summary_info"'>@Vcl@Comctrls@THotKey@$bcctr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@THotKey@$bcctr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@THotKey@$bcdtr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@THotKey@$bcdtr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv</p> <p class='"summary_info"'>@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv</p> <p class='"summary_info"'>@Vcl@Forms@TApplication@GetExeName$qqrv</p> <p class='"summary_info"'>@Vcl@Forms@TApplication@GetExeName$qqrv</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%</p> <p class='"summary_info"'>@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%</p> <p class='"summary_info"'>vclimg160.bpl</p> <p class='"summary_info"'>vclimg160.bpl</p> <p class='"summary_info"'>AxComponentsVCL.bpl</p> <p class='"summary_info"'>AxComponentsVCL.bpl</p> <p class='"summary_info"'>AxComponentsRTL.bpl</p> <p class='"summary_info"'>AxComponentsRTL.bpl</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptGetKeyParam$qqruiuipucpuiui</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptGetKeyParam$qqruiuipucpuiui</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptDestroyKey$qqrui</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptDestroyKey$qqrui</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptDeriveKey$qqruiuiuiuipui</p> <p class='"summary_info"'>@Auslogics@Winapi@Advapi32@AdvApi32@CryptDeriveKey$qqruiuiuiuipui</p> <p class='"summary_info"'>@Auslogics@Vcl@Canvashelper@TCanvasHelper@AxDrawTextShadow$qqrx20System@UnicodeStringr18System@Types@TRectui71System@%Set$t43Auslogics@System@Uitypes@TAxTextShadowStyle$iuc$0$iuc$3!System@Uitypes@TColor</p> <p class='"summary_info"'>@Auslogics@Vcl@Canvashelper@TCanvasHelper@AxDrawTextShadow$qqrx20System@UnicodeStringr18System@Types@TRectui71System@%Set$t43Auslogics@System@Uitypes@TAxTextShadowStyle$iuc$0$iuc$3!System@Uitypes@TColor</p> <p class='"summary_info"'>@Auslogics@Vcl@Axcustomcontrol@TAxCustomControl@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Auslogics@Vcl@Axcustomcontrol@TAxCustomControl@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Auslogics@Vcl@Axcustommultiselectlistcontrol@TAxCustomMultiSelectListControl@DoSelectItemsInRect$qqr60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%rx18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axcustommultiselectlistcontrol@TAxCustomMultiSelectListControl@DoSelectItemsInRect$qqr60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%rx18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@DoProcessKeyDown$qqrrus60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%riro</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@DoProcessKeyDown$qqrrus60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%riro</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseMove$qqr60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseMove$qqr60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseUp$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseUp$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseDown$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@HeaderMouseDown$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Auslogics@Vcl@Axlistview@TAxCustomListView@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@GetFormPosition$qqrr27System@Uitypes@TWindowStater18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@GetFormPosition$qqrr27System@Uitypes@TWindowStater18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@SetFormPosition$qqr27System@Uitypes@TWindowStaterx18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@SetFormPosition$qqr27System@Uitypes@TWindowStaterx18System@Types@TRect</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@DoDrawWindowCaption$qqrp20Vcl@Graphics@TCanvasrx18System@Types@TRect71System@%Set$t43Auslogics@System@Uitypes@TAxTextShadowStyle$iuc$0$iuc$3!System@Uitypes@TColor</p> <p class='"summary_info"'>@Auslogics@Vcl@Axform@TAxForm@DoDrawWindowCaption$qqrp20Vcl@Graphics@TCanvasrx18System@Types@TRect71System@%Set$t43Auslogics@System@Uitypes@TAxTextShadowStyle$iuc$0$iuc$3!System@Uitypes@TColor</p> <p class='"summary_info"'>@Auslogics@Vcl@Axmessagebox@AxMessageBox@Show$qqr42Auslogics@System@Uitypes@TAxMessageBoxIconx20System@UnicodeString72System@%Set$t44Auslogics@System@Uitypes@TAxMessageBoxButton$iuc$0$iuc$5%</p> <p class='"summary_info"'>@Auslogics@Vcl@Axmessagebox@AxMessageBox@Show$qqr42Auslogics@System@Uitypes@TAxMessageBoxIconx20System@UnicodeString72System@%Set$t44Auslogics@System@Uitypes@TAxMessageBoxButton$iuc$0$iuc$5%</p> <p class='"summary_info"'>@Auslogics@Debug@Logfile@TDebugLogFile@FreeLogInstance$qqrrp37Auslogics@Debug@Logfile@TDebugLogFile</p> <p class='"summary_info"'>@Auslogics@Debug@Logfile@TDebugLogFile@FreeLogInstance$qqrrp37Auslogics@Debug@Logfile@TDebugLogFile</p> <p class='"summary_info"'>@Auslogics@Debug@Logfile@TDebugLogFile@GetLogInstance$qqrx20System@UnicodeString</p> <p class='"summary_info"'>@Auslogics@Debug@Logfile@TDebugLogFile@GetLogInstance$qqrx20System@UnicodeString</p> <p class='"summary_info"'>@Auslogics@Vcl@Axtrayicon@TAxCustomTrayIcon@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>@Auslogics@Vcl@Axtrayicon@TAxCustomTrayIcon@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation</p> <p class='"summary_info"'>PCBooster.exe</p> <p class='"summary_info"'>PCBooster.exe</p> <p class='"summary_info"'>VVV.madshi.net[</p> <p class='"summary_info"'>VVV.madshi.net[</p> <p class='"summary_info"'>mSgD</p> <p class='"summary_info"'>mSgD</p> <p class='"summary_info"'>=I.Bdy</p> <p class='"summary_info"'>=I.Bdy</p> <p class='"summary_info"'>&Q.iR</p> <p class='"summary_info"'>&Q.iR</p> <p class='"summary_info"'>^7.Fx </p> <p class='"summary_info"'>^7.Fx </p> <p class='"summary_info"'>>.TR]</p> <p class='"summary_info"'>>.TR]</p> <p class='"summary_info"'>n2).Xn</p> <p class='"summary_info"'>n2).Xn</p> <p class='"summary_info"'>.EPh.</p> <p class='"summary_info"'>.EPh.</p> <p class='"summary_info"'>H%%xa11</p> <p class='"summary_info"'>H%%xa11</p> <p class='"summary_info"'>(& &/(,(9$</p> <p class='"summary_info"'>(& &/(,(9$</p> <p class='"summary_info"'> * (((--#</p> <p class='"summary_info"'> * (((--#</p> <p class='"summary_info"'>(&(,02,$</p> <p class='"summary_info"'>(&(,02,$</p> <p class='"summary_info"'>.BELFQFRF`RS_R5</p> <p class='"summary_info"'>.BELFQFRF`RS_R5</p> <p class='"summary_info"'>$# $ # '</p> <p class='"summary_info"'>$# $ # '</p> <p class='"summary_info"'>7Interfaces.RescueCenter</p> <p class='"summary_info"'>7Interfaces.RescueCenter</p> <p class='"summary_info"'>/Interfaces.Routines</p> <p class='"summary_info"'>/Interfaces.Routines</p> <p class='"summary_info"'>8Project.Consts</p> <p class='"summary_info"'>8Project.Consts</p> <p class='"summary_info"'>{Project.GUI.Globals</p> <p class='"summary_info"'>{Project.GUI.Globals</p> <p class='"summary_info"'> AT.GUI.Logics.Base.Localizer</p> <p class='"summary_info"'> AT.GUI.Logics.Base.Localizer</p> <p class='"summary_info"'>wAT.GUI.Logics.Base.Settings</p> <p class='"summary_info"'>wAT.GUI.Logics.Base.Settings</p> <p class='"summary_info"'>\AT.Logics.SingletonBase</p> <p class='"summary_info"'>\AT.Logics.SingletonBase</p> <p class='"summary_info"'>4AT.GUI.Logics.Base.Scheduler</p> <p class='"summary_info"'>4AT.GUI.Logics.Base.Scheduler</p> <p class='"summary_info"'>:Interfaces.TaskScheduler</p> <p class='"summary_info"'>:Interfaces.TaskScheduler</p> <p class='"summary_info"'>WInterfaces.ATUpdaters</p> <p class='"summary_info"'>WInterfaces.ATUpdaters</p> <p class='"summary_info"'>XInterfaces.DiskCleaner</p> <p class='"summary_info"'>XInterfaces.DiskCleaner</p> <p class='"summary_info"'>qAT.Logics.Upsells.Base.Upsell</p> <p class='"summary_info"'>qAT.Logics.Upsells.Base.Upsell</p> <p class='"summary_info"'>mAT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>mAT.Logics.Upsells.Base.UpsellPCFixUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPCSpeedUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPCCleanUp</p> <p class='"summary_info"'>lProject.Protection.ServerCheck</p> <p class='"summary_info"'>lProject.Protection.ServerCheck</p> <p class='"summary_info"'>.AxWheelTypes</p> <p class='"summary_info"'>.AxWheelTypes</p> <p class='"summary_info"'>uPCBooster.GUIApplication</p> <p class='"summary_info"'>uPCBooster.GUIApplication</p> <p class='"summary_info"'>3PCBooster.GUIGlobals</p> <p class='"summary_info"'>3PCBooster.GUIGlobals</p> <p class='"summary_info"'>^AT.GUI.Components.TrayIcon</p> <p class='"summary_info"'>^AT.GUI.Components.TrayIcon</p> <p class='"summary_info"'>zProject.ExceptionHandler.MadShi</p> <p class='"summary_info"'>zProject.ExceptionHandler.MadShi</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>AT.Logics.Upsells.Base.UpsellPanel.TableUpsell</p> <p class='"summary_info"'>]AT.Logics.CanvasHelper</p> <p class='"summary_info"'>]AT.Logics.CanvasHelper</p> <p class='"summary_info"'>L0.ly</p> <p class='"summary_info"'>L0.ly</p> <p class='"summary_info"'>>.Of^</p> <p class='"summary_info"'>>.Of^</p> <p class='"summary_info"'>bX>gv!.ry</p> <p class='"summary_info"'>bX>gv!.ry</p> <p class='"summary_info"'>g4.xG</p> <p class='"summary_info"'>g4.xG</p> <p class='"summary_info"'>K-W}[T</p> <p class='"summary_info"'>K-W}[T</p> <p class='"summary_info"'>.dm|></p> <p class='"summary_info"'>.dm|></p> <p class='"summary_info"'>*R%XfJ?B8</p> <p class='"summary_info"'>*R%XfJ?B8</p> <p class='"summary_info"'>q*.tb</p> <p class='"summary_info"'>q*.tb</p> <p class='"summary_info"'>Font.Charset</p> <p class='"summary_info"'>Font.Charset</p> <p class='"summary_info"'>Font.Color</p> <p class='"summary_info"'>Font.Color</p> <p class='"summary_info"'>Font.Height</p> <p class='"summary_info"'>Font.Height</p> <p class='"summary_info"'>Font.Name</p> <p class='"summary_info"'>Font.Name</p> <p class='"summary_info"'>Font.Style</p> <p class='"summary_info"'>Font.Style</p> <p class='"summary_info"'>Font.Quality</p> <p class='"summary_info"'>Font.Quality</p> <p class='"summary_info"'>Margins.Left</p> <p class='"summary_info"'>Margins.Left</p> <p class='"summary_info"'>Margins.Top</p> <p class='"summary_info"'>Margins.Top</p> <p class='"summary_info"'>Margins.Right</p> <p class='"summary_info"'>Margins.Right</p> <p class='"summary_info"'>Margins.Bottom</p> <p class='"summary_info"'>Margins.Bottom</p> <p class='"summary_info"'>DescriptionFont.Charset</p> <p class='"summary_info"'>DescriptionFont.Charset</p> <p class='"summary_info"'>DescriptionFont.Color</p> <p class='"summary_info"'>DescriptionFont.Color</p> <p class='"summary_info"'>DescriptionFont.Height</p> <p class='"summary_info"'>DescriptionFont.Height</p> <p class='"summary_info"'>DescriptionFont.Name</p> <p class='"summary_info"'>DescriptionFont.Name</p> <p class='"summary_info"'>DescriptionFont.Style</p> <p class='"summary_info"'>DescriptionFont.Style</p> <p class='"summary_info"'>DescriptionFont.Quality</p> <p class='"summary_info"'>DescriptionFont.Quality</p> <p class='"summary_info"'>Items.Strings</p> <p class='"summary_info"'>Items.Strings</p> <p class='"summary_info"'>OnExecute</p> <p class='"summary_info"'>OnExecute</p> <p class='"summary_info"'>Constraints.MinHeight</p> <p class='"summary_info"'>Constraints.MinHeight</p> <p class='"summary_info"'>Constraints.MinWidth</p> <p class='"summary_info"'>Constraints.MinWidth</p> <p class='"summary_info"'>attach a screenshot to the bug report</p> <p class='"summary_info"'>attach a screenshot to the bug report</p> <p class='"summary_info"'><assemblyidentity name='"TWEAKBIT' pcbooster version='"1.6.7.2"' processorarchitecture='"*"' type='"win32"'></assemblyidentity></p> <p class='"summary_info"'><assemblyidentity name='"TWEAKBIT' pcbooster version='"1.6.7.2"' processorarchitecture='"*"' type='"win32"'></assemblyidentity></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{e2011457-1546-43c5-a5fe-008deee3d3f0}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{e2011457-1546-43c5-a5fe-008deee3d3f0}"/'></supportedos></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/'></supportedos></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/'></supportedos></p> <p class='"summary_info"'><requestedexecutionlevel level='"highestAvailable"' uiaccess='"false"'></requestedexecutionlevel></p> <p class='"summary_info"'><requestedexecutionlevel level='"highestAvailable"' uiaccess='"false"'></requestedexecutionlevel></p> <p class='"summary_info"'><assemblyidentity type='"win32"' name='"Microsoft.Windows.Common-Controls"' version='"6.0.0.0"' language='"*"' processorarchitecture='"*"' publickeytoken='"6595b64144ccf1df"'></assemblyidentity></p> <p class='"summary_info"'><assemblyidentity type='"win32"' name='"Microsoft.Windows.Common-Controls"' version='"6.0.0.0"' language='"*"' processorarchitecture='"*"' publickeytoken='"6595b64144ccf1df"'></assemblyidentity></p> <p class='"summary_info"'><windowssettings xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'></windowssettings></p> <p class='"summary_info"'><windowssettings xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'></windowssettings></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'>.Iw_[S_I</p> <p class='"summary_info"'>.Iw_[S_I</p> <p class='"summary_info"'>_w.wLq</p> <p class='"summary_info"'>_w.wLq</p> <p class='"summary_info"'>.DlbJl3</p> <p class='"summary_info"'>.DlbJl3</p> <p class='"summary_info"'>o.ZD>3)p</p> <p class='"summary_info"'>o.ZD>3)p</p> <p class='"summary_info"'>FastMM_FullDebugMode.dll</p> <p class='"summary_info"'>FastMM_FullDebugMode.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>nuser32.dll</p> <p class='"summary_info"'>nuser32.dll</p> <p class='"summary_info"'>ntdll.dll</p> <p class='"summary_info"'>ntdll.dll</p> <p class='"summary_info"'>.madExcept</p> <p class='"summary_info"'>.madExcept</p> <p class='"summary_info"'>cc32120mt.dll</p> <p class='"summary_info"'>cc32120mt.dll</p> <p class='"summary_info"'>cc32120.dll</p> <p class='"summary_info"'>cc32120.dll</p> <p class='"summary_info"'>screenShot.bmp</p> <p class='"summary_info"'>screenShot.bmp</p> <p class='"summary_info"'>ShellExecuteExW</p> <p class='"summary_info"'>ShellExecuteExW</p> <p class='"summary_info"'>madExceptIde_.bpl</p> <p class='"summary_info"'>madExceptIde_.bpl</p> <p class='"summary_info"'>wininet.dll</p> <p class='"summary_info"'>wininet.dll</p> <p class='"summary_info"'>mapi32.dll</p> <p class='"summary_info"'>mapi32.dll</p> <p class='"summary_info"'>IpHlpApi.dll</p> <p class='"summary_info"'>IpHlpApi.dll</p> <p class='"summary_info"'>%userappdata%\</p> <p class='"summary_info"'>%userappdata%\</p> <p class='"summary_info"'>screenShot.png</p> <p class='"summary_info"'>screenShot.png</p> <p class='"summary_info"'>hXXp://madExcept.com</p> <p class='"summary_info"'>hXXp://madExcept.com</p> <p class='"summary_info"'>wtsapi32.dll</p> <p class='"summary_info"'>wtsapi32.dll</p> <p class='"summary_info"'>nidapi32.dll</p> <p class='"summary_info"'>nidapi32.dll</p> <p class='"summary_info"'>kernelbase.dll</p> <p class='"summary_info"'>kernelbase.dll</p> <p class='"summary_info"'>setupapi.dll</p> <p class='"summary_info"'>setupapi.dll</p> <p class='"summary_info"'>psapi.dll</p> <p class='"summary_info"'>psapi.dll</p> <p class='"summary_info"'>CommonForms.dll</p> <p class='"summary_info"'>CommonForms.dll</p> <p class='"summary_info"'>CommonForms.Site.dll</p> <p class='"summary_info"'>CommonForms.Site.dll</p> <p class='"summary_info"'>CommonForms.Routine.dll</p> <p class='"summary_info"'>CommonForms.Routine.dll</p> <p class='"summary_info"'>CommonForms.Video.dll</p> <p class='"summary_info"'>CommonForms.Video.dll</p> <p class='"summary_info"'>An error occurred while loading library %s.</p> <p class='"summary_info"'>An error occurred while loading library %s.</p> <p class='"summary_info"'>Error code: 0x%s</p> <p class='"summary_info"'>Error code: 0x%s</p> <p class='"summary_info"'>Error message: %s</p> <p class='"summary_info"'>Error message: %s</p> <p class='"summary_info"'>It may have been removed. Please reinstall the application. If the problem persists, contact technical support.</p> <p class='"summary_info"'>It may have been removed. Please reinstall the application. If the problem persists, contact technical support.</p> <p class='"summary_info"'>DebugHelper.dll</p> <p class='"summary_info"'>DebugHelper.dll</p> <p class='"summary_info"'>ATUpdatersHelper.dll</p> <p class='"summary_info"'>ATUpdatersHelper.dll</p> <p class='"summary_info"'>TweakManagerHelper.dll</p> <p class='"summary_info"'>TweakManagerHelper.dll</p> <p class='"summary_info"'>PCBoosterHelper.dll</p> <p class='"summary_info"'>PCBoosterHelper.dll</p> <p class='"summary_info"'>.xdata</p> <p class='"summary_info"'>.xdata</p> <p class='"summary_info"'>{B89517AE-9E3A-43B3-A20A-528A0348776A}</p> <p class='"summary_info"'>{B89517AE-9E3A-43B3-A20A-528A0348776A}</p> <p class='"summary_info"'>GetKey</p> <p class='"summary_info"'>GetKey</p> <p class='"summary_info"'>WM_PROTECTION_CHANGED_07A98DB5-47CC-4653-84EE-9AD1732005A9</p> <p class='"summary_info"'>WM_PROTECTION_CHANGED_07A98DB5-47CC-4653-84EE-9AD1732005A9</p> <p class='"summary_info"'>ProductHelper.dll</p> <p class='"summary_info"'>ProductHelper.dll</p> <p class='"summary_info"'>\Software\%s\%s\%s\</p> <p class='"summary_info"'>\Software\%s\%s\%s\</p> <p class='"summary_info"'>SettingsHelper.dll</p> <p class='"summary_info"'>SettingsHelper.dll</p> <p class='"summary_info"'>RES_%s_GLYPH</p> <p class='"summary_info"'>RES_%s_GLYPH</p> <p class='"summary_info"'>RES_%s_TABLE_GLYPH</p> <p class='"summary_info"'>RES_%s_TABLE_GLYPH</p> <p class='"summary_info"'>RES_REG_BENEFIT_%d</p> <p class='"summary_info"'>RES_REG_BENEFIT_%d</p> <p class='"summary_info"'>TaskSchedulerHelper.dll</p> <p class='"summary_info"'>TaskSchedulerHelper.dll</p> <p class='"summary_info"'>DiskCleanerHelper.dll</p> <p class='"summary_info"'>DiskCleanerHelper.dll</p> <p class='"summary_info"'>{2BC837E3-A56A-48E4-8C3C-7B6C888CCA13}</p> <p class='"summary_info"'>{2BC837E3-A56A-48E4-8C3C-7B6C888CCA13}</p> <p class='"summary_info"'>RegistryCleanerHelper.dll</p> <p class='"summary_info"'>RegistryCleanerHelper.dll</p> <p class='"summary_info"'>InternetOptimizerHelper.dll</p> <p class='"summary_info"'>InternetOptimizerHelper.dll</p> <p class='"summary_info"'>Localizer.dll</p> <p class='"summary_info"'>Localizer.dll</p> <p class='"summary_info"'>%s %s</p> <p class='"summary_info"'>%s %s</p> <p class='"summary_info"'>General.Language</p> <p class='"summary_info"'>General.Language</p> <p class='"summary_info"'>GDI Library (gdiplus.dll) initialization error. This library is necessary for the application.</p> <p class='"summary_info"'>GDI Library (gdiplus.dll) initialization error. This library is necessary for the application.</p> <p class='"summary_info"'>Error text: %s.</p> <p class='"summary_info"'>Error text: %s.</p> <p class='"summary_info"'>1. Use the Windows installation disk to repair system files.</p> <p class='"summary_info"'>1. Use the Windows installation disk to repair system files.</p> <p class='"summary_info"'>2. Download the library from Microsoft's official site (hXXp://VVV.microsoft.com) and install it.</p> <p class='"summary_info"'>2. Download the library from Microsoft's official site (hXXp://VVV.microsoft.com) and install it.</p> <p class='"summary_info"'>General.DebugMode</p> <p class='"summary_info"'>General.DebugMode</p> <p class='"summary_info"'>Would you like to disable the debug mode right now? By disabling it you will not be able to create debug logs and send them to our support team.</p> <p class='"summary_info"'>Would you like to disable the debug mode right now? By disabling it you will not be able to create debug logs and send them to our support team.</p> <p class='"summary_info"'>General.DebugMode.DirectWrite</p> <p class='"summary_info"'>General.DebugMode.DirectWrite</p> <p class='"summary_info"'>General.InstallDateTime</p> <p class='"summary_info"'>General.InstallDateTime</p> <p class='"summary_info"'>userenv.dll</p> <p class='"summary_info"'>userenv.dll</p> <p class='"summary_info"'>General.LastRun.%s</p> <p class='"summary_info"'>General.LastRun.%s</p> <p class='"summary_info"'>%d %s</p> <p class='"summary_info"'>%d %s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowTrayTip</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowTrayTip</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpdateTrayIcon</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpdateTrayIcon</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowSettingsPages</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowSettingsPages</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageAutoScan_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageAutoScan_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageSendReport_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageSendReport_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpsellStartScan_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpsellStartScan_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpdateStatisticPage</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageUpdateStatisticPage</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageScanStart</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageScanStart</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageScanFinish</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageScanFinish</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageFixStart</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageFixStart</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowRegister_%s</p> <p class='"summary_info"'>E4930513-543F-450A-B68F-9590781C3064_MessageShowRegister_%s</p> <p class='"summary_info"'>\Software\Microsoft\Windows\CurrentVersion\Run</p> <p class='"summary_info"'>\Software\Microsoft\Windows\CurrentVersion\Run</p> <p class='"summary_info"'>Application.IsFirstRun</p> <p class='"summary_info"'>Application.IsFirstRun</p> <p class='"summary_info"'>Application.UpdateDate</p> <p class='"summary_info"'>Application.UpdateDate</p> <p class='"summary_info"'>General.IsRegistered</p> <p class='"summary_info"'>General.IsRegistered</p> <p class='"summary_info"'>Application.FileName</p> <p class='"summary_info"'>Application.FileName</p> <p class='"summary_info"'>Application.SendInfo</p> <p class='"summary_info"'>Application.SendInfo</p> <p class='"summary_info"'>Application.AutostartEnable</p> <p class='"summary_info"'>Application.AutostartEnable</p> <p class='"summary_info"'>Application.TurnOnVoiceAlerts</p> <p class='"summary_info"'>Application.TurnOnVoiceAlerts</p> <p class='"summary_info"'>MainForm.State</p> <p class='"summary_info"'>MainForm.State</p> <p class='"summary_info"'>MainForm.Top</p> <p class='"summary_info"'>MainForm.Top</p> <p class='"summary_info"'>MainForm.Left</p> <p class='"summary_info"'>MainForm.Left</p> <p class='"summary_info"'>Tray.UseIcon</p> <p class='"summary_info"'>Tray.UseIcon</p> <p class='"summary_info"'>Tray.ShowTip</p> <p class='"summary_info"'>Tray.ShowTip</p> <p class='"summary_info"'>Tray.ShowFirstHelp</p> <p class='"summary_info"'>Tray.ShowFirstHelp</p> <p class='"summary_info"'>Application.PurchaseUrlParam</p> <p class='"summary_info"'>Application.PurchaseUrlParam</p> <p class='"summary_info"'>Shared.Blocking.%s</p> <p class='"summary_info"'>Shared.Blocking.%s</p> <p class='"summary_info"'>/ShowTab:%s</p> <p class='"summary_info"'>/ShowTab:%s</p> <p class='"summary_info"'>{32207DDC-1102-4AD5-9CCD-A361F0E1BBC4}</p> <p class='"summary_info"'>{32207DDC-1102-4AD5-9CCD-A361F0E1BBC4}</p> <p class='"summary_info"'>{CA7C4C80-24B8-4027-8849-0C302333C427}</p> <p class='"summary_info"'>{CA7C4C80-24B8-4027-8849-0C302333C427}</p> <p class='"summary_info"'>{2FFDD819-5ACF-49D5-9F18-980B42E5DA66}</p> <p class='"summary_info"'>{2FFDD819-5ACF-49D5-9F18-980B42E5DA66}</p> <p class='"summary_info"'>{F15144C2-6144-4D33-B031-7C3A8BEA54C4}</p> <p class='"summary_info"'>{F15144C2-6144-4D33-B031-7C3A8BEA54C4}</p> <p class='"summary_info"'>{844059FA-4026-4BC9-A881-C4E967F02BF1}</p> <p class='"summary_info"'>{844059FA-4026-4BC9-A881-C4E967F02BF1}</p> <p class='"summary_info"'>{31800FE0-A99D-4456-8F0C-0A70866BB618}</p> <p class='"summary_info"'>{31800FE0-A99D-4456-8F0C-0A70866BB618}</p> <p class='"summary_info"'>{1C6A6CBF-55C7-417A-B361-EC91AD238B24}</p> <p class='"summary_info"'>{1C6A6CBF-55C7-417A-B361-EC91AD238B24}</p> <p class='"summary_info"'>{F8EA6A43-37BA-4015-952E-FDCD486DBBF4}</p> <p class='"summary_info"'>{F8EA6A43-37BA-4015-952E-FDCD486DBBF4}</p> <p class='"summary_info"'>pccleaner.exe</p> <p class='"summary_info"'>pccleaner.exe</p> <p class='"summary_info"'>fixmypc.exe</p> <p class='"summary_info"'>fixmypc.exe</p> <p class='"summary_info"'>pcspeedup.exe</p> <p class='"summary_info"'>pcspeedup.exe</p> <p class='"summary_info"'>pcsuite.exe</p> <p class='"summary_info"'>pcsuite.exe</p> <p class='"summary_info"'>ServiceManagerHelper.dll</p> <p class='"summary_info"'>ServiceManagerHelper.dll</p> <p class='"summary_info"'>select * from Win32_PortableBattery</p> <p class='"summary_info"'>select * from Win32_PortableBattery</p> <p class='"summary_info"'>KEY_NOT_FOUND</p> <p class='"summary_info"'>KEY_NOT_FOUND</p> <p class='"summary_info"'>KEY_DISABLED</p> <p class='"summary_info"'>KEY_DISABLED</p> <p class='"summary_info"'>%s?key=%s&activated=%s&product=%s&version=%s&computerid=%s</p> <p class='"summary_info"'>%s?key=%s&activated=%s&product=%s&version=%s&computerid=%s</p> <p class='"summary_info"'>keytype</p> <p class='"summary_info"'>keytype</p> <p class='"summary_info"'>%s. DateActivation: %s; IsActivated: %s; IsSubscription: %s; DayExpired: %s; DateLastCheck: %s; RequestCount: %s; RequestKeyValid: $%s; NeedShowDialog: $%s; RequestDayExpired: %s.</p> <p class='"summary_info"'>%s. DateActivation: %s; IsActivated: %s; IsSubscription: %s; DayExpired: %s; DateLastCheck: %s; RequestCount: %s; RequestKeyValid: $%s; NeedShowDialog: $%s; RequestDayExpired: %s.</p> <p class='"summary_info"'>Expire current key</p> <p class='"summary_info"'>Expire current key</p> <p class='"summary_info"'>RES_WHEEL_%s_BUTTON_MASK</p> <p class='"summary_info"'>RES_WHEEL_%s_BUTTON_MASK</p> <p class='"summary_info"'>RES_WHEEL_%s_BUTTON_GLYPH</p> <p class='"summary_info"'>RES_WHEEL_%s_BUTTON_GLYPH</p> <p class='"summary_info"'>RES_WHEEL_ACTIVE_%s_BUTTON_GLYPH</p> <p class='"summary_info"'>RES_WHEEL_ACTIVE_%s_BUTTON_GLYPH</p> <p class='"summary_info"'>RES_WHEEL_HIGHLIGHTED_%s_BUTTON</p> <p class='"summary_info"'>RES_WHEEL_HIGHLIGHTED_%s_BUTTON</p> <p class='"summary_info"'>RES_WHEEL_PRESSED_%s_BUTTON</p> <p class='"summary_info"'>RES_WHEEL_PRESSED_%s_BUTTON</p> <p class='"summary_info"'>F7EC1FD0-023F-49E1-B604-D81DA4BC87CA</p> <p class='"summary_info"'>F7EC1FD0-023F-49E1-B604-D81DA4BC87CA</p> <p class='"summary_info"'>PCBooster.Optimization.PerformanceMode</p> <p class='"summary_info"'>PCBooster.Optimization.PerformanceMode</p> <p class='"summary_info"'>PCBooster.Optimization.StartInPreviousMode</p> <p class='"summary_info"'>PCBooster.Optimization.StartInPreviousMode</p> <p class='"summary_info"'>AxBrowsers.dll</p> <p class='"summary_info"'>AxBrowsers.dll</p> <p class='"summary_info"'>66006666</p> <p class='"summary_info"'>66006666</p> <p class='"summary_info"'>RES_FM_MAIN_IMG_STATUS_REPORT!RES_FM_MAIN_IMG_STATUS_REPORT_OFF RES_FM_MAIN_IMG_STATUS_REPORT_ON</p> <p class='"summary_info"'>RES_FM_MAIN_IMG_STATUS_REPORT!RES_FM_MAIN_IMG_STATUS_REPORT_OFF RES_FM_MAIN_IMG_STATUS_REPORT_ON</p> <p class='"summary_info"'>1.6.7.2</p> <p class='"summary_info"'>1.6.7.2</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_612:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_1808:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_3412:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_4032:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_1700:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_3552:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"ME_subtitle"'>IEXPLORE.EXE_2192:</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>.text</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>`.data</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.idata</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>.rsrc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>@.reloc</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>u\j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>j.Xf9</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>USER32.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shell32-l1-1-0.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>IEFRAME.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>SHELL32.dll</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>iexplore.pdb</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-shlwapi-l1-1-0.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>iertutil.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>api-ms-win-downlevel-advapi32-l1-1-0.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>KERNEL32.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>msvcrt.dll</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_wcmdln</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>_amsg_exit</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegOpenKeyExW</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'>RegCloseKey</p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'><assemblyidentity version='"5.1.0.0"</p'><p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'>name="Microsoft.InternetExplorer"</p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><windowssettings></windowssettings></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'><dpiaware xmlns='"hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings"'>true</dpiaware></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'><supportedos id='"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/'></supportedos></p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>KEYW</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>.ENNNG.</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>a.ry.v</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>l.igM4</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>?1%SGf</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>xh.JW^</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>.97777"7" " " !</p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>3.... )) </p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>8888888888</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>.lPV)</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>úW1</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>.ApX/</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>H.ZAf</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>ð[U</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>%s!FK</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>1YYYY1YY9GEAA=77YRNNNW:.VT1</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>888777777</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>Y.hilkRROMLK=C,</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>..(((($$</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3...((((%</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3....(.''$</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>3.2...((((%</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>33.2....(,'</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>55323222...</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>(%&'00443445?</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>00.,,,4(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>000.,,9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>0020..9(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>003200;(</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>(#'( (''''!'!</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Microsoft.InternetExplorer.Default</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>{28fb17e0-d393-439d-9a21-9474a070473a}</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>imm32.dll</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>Kernel32.dll</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>"%s" %s</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>kernel32.dll</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>IEXPLORE.EXE</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>{00000000-0000-0000-0000-000000000000}</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>\\?\Volume</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview_Perftrack</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Browseui_Tabs_Tearoff_BetweenWindows_TabProc</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Frame_URLEntered</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>Imaging_CreateWebPagePreview</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>WS_ExecuteQuery</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_WindowStateChanged</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>IdleTask_Execution_Time</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>IMTravelLogMVC_TravelURL</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>Windows</p> <p class='"summary_info"'>10.00.9200.16521</p> <p class='"summary_info"'>10.00.9200.16521</p> </assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></assemblyidentity></p></interfaces.protection.tsection></p></interfaces.protection.tsection></p>