Trojan-Dropper.Win32.Dapato.edkh (Kaspersky), Trojan.Generic.11422296 (B) (Emsisoft), Trojan.Generic.11422296 (AdAware), HackTool.Win32.PassView.FD, Trojan-Banker.Win32.Brasil.FD, Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, VirTool.Win32.DelfInject.FD, GenericAutorunWorm.YR, HackToolPassView.YR (Lavasoft MAS)Behaviour: Trojan-Dropper, Banker, Trojan, Worm, HackTool, VirTool, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: d93f08d35449ef2f2deebf6b9849b98b
SHA1: c03f2492efb261d13222f24fa47e700dd6aa97c2
SHA256: d02832c474eaac81883c632d1102a5e03a777be8c9ed5f717b83ef8be7fc1e31
SSDeep: 24576:kSB9bnOFJ86JO2uilocrvhI712dt/D0rhA6eyy:kSB9bYbcjilocrvhIIdt/DCA6ey
Size: 1097728 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: AirInstaller
Created at: 2014-06-26 14:31:06
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):
%original file name%.exe:1520
WSCollect.exe:1012
The Trojan injects its code into the following process(es):
WSCollect.exe:244
adobe.snr.patch-painter.exe:676
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:1520 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\adobe.snr.patch-painter.exe (1830 bytes)
%Program Files%\WSCollect.exe (7433 bytes)
The process WSCollect.exe:244 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\pid.txt (3 bytes)
%Documents and Settings%\%current user%\Application Data\pidloc.txt (30 bytes)
Registry activity
The process %original file name%.exe:1520 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "06 F1 C5 8F E7 8C C8 E3 86 52 83 85 30 1C 74 50"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%]
"WSCollect.exe" = "Universal Adobe Patcher"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"adobe.snr.patch-painter.exe" = "Universal Adobe Patcher"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
"Personal" = "%Documents and Settings%\%current user%\My Documents"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
The process WSCollect.exe:244 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"
[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1B 3E 3A B5 E3 E9 24 20 B6 43 40 B9 DA 7B 77 8F"
[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"
[HKLM\SOFTWARE\Microsoft\ESENT\Process\WSCollect\DEBUG]
"Trace Level" = ""
[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"
The Trojan deletes the following value(s) in system registry:
[HKLM\SOFTWARE\Microsoft\ESENT\Process\WSCollect\DEBUG]
"Trace Level"
The process WSCollect.exe:1012 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D7 4E 85 77 7E 45 33 F2 D5 1B ED 66 D9 B7 2D 8C"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"WSCollect" = "%Program Files%\WSCollect.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WSCollect" = "%Program Files%\WSCollect.exe"
The process adobe.snr.patch-painter.exe:676 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1A 9A AC B7 29 1D 98 6A 89 03 C9 CE 95 6E 2E F1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:1520
WSCollect.exe:1012 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Application Data\adobe.snr.patch-painter.exe (1830 bytes)
%Program Files%\WSCollect.exe (7433 bytes)
%Documents and Settings%\%current user%\Application Data\pid.txt (3 bytes)
%Documents and Settings%\%current user%\Application Data\pidloc.txt (30 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"WSCollect" = "%Program Files%\WSCollect.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WSCollect" = "%Program Files%\WSCollect.exe" - Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: PainteR
Product Name: Universal Adobe Patcher
Product Version: 1.1.0.0
Legal Copyright: PainteR
Legal Trademarks:
Original Filename: adobesnr.exe
Internal Name: Universal Adobe Patcher
File Version: 1.1.0.0
File Description: Universal Adobe Patcher
Comments:
Language: English (United States)
Company Name: PainteR Product Name: Universal Adobe PatcherProduct Version: 1.1.0.0Legal Copyright: PainteR Legal Trademarks: Original Filename: adobesnr.exeInternal Name: Universal Adobe PatcherFile Version: 1.1.0.0File Description: Universal Adobe PatcherComments: Language: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 8192 | 1061828 | 1064960 | 5.5433 | 527887ec0149809ff867a8662e29fa06 |
.rsrc | 1073152 | 20812 | 24576 | 3.43999 | 20fd70c993093037645eecb010d84e1b |
.reloc | 1097728 | 12 | 4096 | 0.011373 | 4236a66bef8cef8c12c7ffb05a11c899 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
adobe.snr.patch-painter.exe_676:
`.rsrc
`.rsrc
kernel32.dll
kernel32.dll
Windows
Windows
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
oleaut32.dll
EVariantBadIndexError
EVariantBadIndexError
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
u%CNu
u%CNu
%s[%d]
%s[%d]
%s_%d
%s_%d
EInvalidGraphicOperation
EInvalidGraphicOperation
Uh.SB
Uh.SB
USER32.DLL
USER32.DLL
comctl32.dll
comctl32.dll
uxtheme.dll
uxtheme.dll
PasswordChar,
PasswordChar,
OnKeyDown|
OnKeyDown|
OnKeyPress0
OnKeyPress0
OnKeyUpT
OnKeyUpT
ssHorizontal
ssHorizontal
OnKeyUpt
OnKeyUpt
Proportional
Proportional
%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
JumpID("","%s")
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeyworddpA
HelpKeyworddpA
crSQLWait
crSQLWait
%s (%s)
%s (%s)
Uh.FD
Uh.FD
imm32.dll
imm32.dll
AutoHotkeysL
AutoHotkeysL
AutoHotkeys
AutoHotkeys
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
TWMKey
TWMKey
KeyPreview@
KeyPreview@
WindowStatex
WindowStatex
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
vcltest3.dll
User32.dll
User32.dll
Uh!%F
Uh!%F
1.0.4
1.0.4
MAPI32.DLL
MAPI32.DLL
ole32.dll
ole32.dll
olepro32.dll
olepro32.dll
1.2.3
1.2.3
Invalid ZStream operation!
Invalid ZStream operation!
Options.dat
Options.dat
msimg32.dll
msimg32.dll
TacMDIWnd
TacMDIWnd
Uh.QI
Uh.QI
r.uXh
r.uXh
user32.dll
user32.dll
Cannot load image. %s not supported for %s files.
Cannot load image. %s not supported for %s files.
Cannot load image. Palette in %s file is invalid.
Cannot load image. Palette in %s file is invalid.
Cannot load image. Invalid or unexpected %s image format.
Cannot load image. Invalid or unexpected %s image format.
Cannot load image. CRC error found in %s file.
Cannot load image. CRC error found in %s file.
Cannot load image. Extra compressed data found in %s file.
Cannot load image. Extra compressed data found in %s file.
Cannot load image. Compression error found in %s file.
Cannot load image. Compression error found in %s file.
Invalid color format in %s file.
Invalid color format in %s file.
3333333
3333333
Conversion between indexed and non-indexed pixel formats is not supported.
Conversion between indexed and non-indexed pixel formats is not supported.
Portable network graphics (AlphaControls)
Portable network graphics (AlphaControls)
MenuSupport
MenuSupport
c:\Skins
c:\Skins
WEBBUTTON
WEBBUTTON
1.tmp
1.tmp
.JPEG
.JPEG
2.tmp
2.tmp
" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.
" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.
This version of the skin have not complete support by used AlphaControls package release.
This version of the skin have not complete support by used AlphaControls package release.
TacMenuSupport
TacMenuSupport
TacMenuSupportX
TacMenuSupportX
Webdings
Webdings
DWMAPI.DLL
DWMAPI.DLL
acMDIIcons
acMDIIcons
f;p.tI
f;p.tI
abcexport
abcexport
Compression Rate: %d %%
Compression Rate: %d %%
com.adobe.muse.csi
com.adobe.muse.csi
com.adobe.muse.framework.analytics
com.adobe.muse.framework.analytics
com.adobe.muse.framework.headlights
com.adobe.muse.framework.headlights
com.adobe.common.utils
com.adobe.common.utils
flash.events
flash.events
VVV.adobe.com/go/
VVV.adobe.com/go/
helpx.adobe.com
helpx.adobe.com
com.adobe.muse.csi.CSIMgr
com.adobe.muse.csi.CSIMgr
amtlib.dll
amtlib.dll
Adobe\Adobe After Effects CC 2014\Support Files\
Adobe\Adobe After Effects CC 2014\Support Files\
Adobe\Adobe Illustrator CC 2014\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014 (32 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014 (32 Bit)\Support Files\Contents\Windows\
Adobe\Adobe After Effects CC\Support Files\
Adobe\Adobe After Effects CC\Support Files\
Adobe\Adobe Flash Builder 4.7 (64 Bit)\eclipse\plugins\com.adobe.flexide.amt_4.7.0.349722\os\win32\x86_64\
Adobe\Adobe Flash Builder 4.7 (64 Bit)\eclipse\plugins\com.adobe.flexide.amt_4.7.0.349722\os\win32\x86_64\
Adobe\Adobe Illustrator CC (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC (64 Bit)\Support Files\Contents\Windows\
lightroom.exe
lightroom.exe
Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\
MuseOnAIR.swf
MuseOnAIR.swf
Adobe\Adobe After Effects CS6\Support Files\
Adobe\Adobe After Effects CS6\Support Files\
Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Flash Builder 4.6\eclipse\plugins\com.adobe.flexide.amt_4.6.1.335153\os\win32\x86\
Adobe\Adobe Flash Builder 4.6\eclipse\plugins\com.adobe.flexide.amt_4.6.1.335153\os\win32\x86\
Adobe\Adobe Illustrator CS6\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS6\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS5.5\Support Files\
Adobe\Adobe After Effects CS5.5\Support Files\
Adobe\Adobe Flash Builder 4.5\eclipse\plugins\com.adobe.flexide.amt_4.5.0.308971\os\win32\x86\
Adobe\Adobe Flash Builder 4.5\eclipse\plugins\com.adobe.flexide.amt_4.5.0.308971\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5.5\plugins\com.adobe.flexide.amt_1.5.0.308731\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5.5\plugins\com.adobe.flexide.amt_1.5.0.308731\os\win32\x86\
Adobe\Adobe Illustrator CS5.1\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS5.1\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS5\Support Files\
Adobe\Adobe After Effects CS5\Support Files\
Adobe\Adobe Flash Builder 4\plugins\com.adobe.flexide.amt_4.0.0.272416\os\win32\x86\
Adobe\Adobe Flash Builder 4\plugins\com.adobe.flexide.amt_4.0.0.272416\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5\plugins\com.adobe.flexide.amt_1.0.0.273393\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5\plugins\com.adobe.flexide.amt_1.0.0.273393\os\win32\x86\
Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS4\Support Files\
Adobe\Adobe After Effects CS4\Support Files\
Adobe\Adobe Illustrator CS4\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS4\Support Files\Contents\Windows\
Patch for activation %s.
Patch for activation %s.
Patch to disable the enter Adobe ID requests in %s.
Patch to disable the enter Adobe ID requests in %s.
%s pattern : %s
%s pattern : %s
ai_cc_about_tryout.png
ai_cc_about_tryout.png
ai_cc_about.png
ai_cc_about.png
ai_cc_about_tryout@2x.png
ai_cc_about_tryout@2x.png
ai_cc_about@2x.png
ai_cc_about@2x.png
ai_cc_splash_tryout.png
ai_cc_splash_tryout.png
ai_cc_splash.png
ai_cc_splash.png
ai_cc_splash_tryout@2x.png
ai_cc_splash_tryout@2x.png
ai_cc_splash@2x.png
ai_cc_splash@2x.png
ai_cs6_splash_tryout.png
ai_cs6_splash_tryout.png
ai_cs6_splash.png
ai_cs6_splash.png
ai_about_tryout.png
ai_about_tryout.png
ai_about.png
ai_about.png
AI_SplashTryout.png
AI_SplashTryout.png
AI_Splash.png
AI_Splash.png
Warning: Current operating system does not support 64-bit applications!
Warning: Current operating system does not support 64-bit applications!
deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly
deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly
inflate 1.0.4 Copyright 1995-1996 Mark Adler
inflate 1.0.4 Copyright 1995-1996 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
"5!5!`"`"
"5!5!`"`"
)|'|'u%u%
)|'|'u%u%
%"%"%($($
%"%"%($($
!u%u%g'g'g'g'g'g'w'w'
!u%u%g'g'g'g'g'g'w'w'
$c%c%
$c%c%
2!2!|!|!
2!2!|!|!
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
KWindows
KWindows
UrlMon
UrlMon
%sPopupClndr
%sPopupClndr
Font.Charset
Font.Charset
Font.Color
Font.Color
Font.Height
Font.Height
Font.Name
Font.Name
Font.Style
Font.Style
SkinData.SkinSection
SkinData.SkinSection
BoundLabel.Indent
BoundLabel.Indent
BoundLabel.Font.Charset
BoundLabel.Font.Charset
BoundLabel.Font.Color
BoundLabel.Font.Color
BoundLabel.Font.Height
BoundLabel.Font.Height
BoundLabel.Font.Name
BoundLabel.Font.Name
BoundLabel.Font.Style
BoundLabel.Font.Style
BoundLabel.Layout
BoundLabel.Layout
BoundLabel.MaxWidth
BoundLabel.MaxWidth
BoundLabel.UseSkinColor
BoundLabel.UseSkinColor
AddedTitle.Font.Charset
AddedTitle.Font.Charset
AddedTitle.Font.Color
AddedTitle.Font.Color
AddedTitle.Font.Height
AddedTitle.Font.Height
AddedTitle.Font.Name
AddedTitle.Font.Name
AddedTitle.Font.Style
AddedTitle.Font.Style
Items.Strings
Items.Strings
AnimEffects.BlendOnMoving.Active
AnimEffects.BlendOnMoving.Active
AnimEffects.BlendOnMoving.Time
AnimEffects.BlendOnMoving.Time
$AnimEffects.BlendOnMoving.BlendValue
$AnimEffects.BlendOnMoving.BlendValue
AnimEffects.DialogShow.Time
AnimEffects.DialogShow.Time
AnimEffects.DialogShow.Mode
AnimEffects.DialogShow.Mode
AnimEffects.FormShow.Time
AnimEffects.FormShow.Time
AnimEffects.FormShow.Mode
AnimEffects.FormShow.Mode
AnimEffects.FormHide.Time
AnimEffects.FormHide.Time
AnimEffects.FormHide.Mode
AnimEffects.FormHide.Mode
AnimEffects.DialogHide.Time
AnimEffects.DialogHide.Time
AnimEffects.DialogHide.Mode
AnimEffects.DialogHide.Mode
AnimEffects.PageChange.Time
AnimEffects.PageChange.Time
ButtonHuge.bmpX7
ButtonHuge.bmpX7
.bmp&m
.bmp&m
c]t%s
c]t%s
Master.bmp&m
Master.bmp&m
0kÖo&
0kÖo&
*Gq-g}
*Gq-g}
0~-66.>!!>.66
0~-66.>!!>.66
Edit.png
Edit.png
K&\.JF
K&\.JF
Glow.pngVN
Glow.pngVN
E>E.OO
E>E.OO
painter.png
painter.png
Window.pngha
Window.pngha
Bp.oN
Bp.oN
`>%S,
`>%S,
MenuSupport.IcoLineSkin
MenuSupport.IcoLineSkin
ICOLINE!MenuSupport.ExtraLineFont.Charset
ICOLINE!MenuSupport.ExtraLineFont.Charset
MenuSupport.ExtraLineFont.Color
MenuSupport.ExtraLineFont.Color
clWindowText MenuSupport.ExtraLineFont.Height
clWindowText MenuSupport.ExtraLineFont.Height
MenuSupport.ExtraLineFont.Name
MenuSupport.ExtraLineFont.Name
MenuSupport.ExtraLineFont.Style
MenuSupport.ExtraLineFont.Style
ThirdParty.ThirdEdits
ThirdParty.ThirdEdits
ThirdParty.ThirdButtons
ThirdParty.ThirdButtons
ThirdParty.ThirdBitBtns
ThirdParty.ThirdBitBtns
ThirdParty.ThirdCheckBoxes
ThirdParty.ThirdCheckBoxes
ThirdParty.ThirdGroupBoxes
ThirdParty.ThirdGroupBoxes
ThirdParty.ThirdListViews
ThirdParty.ThirdListViews
ThirdParty.ThirdPanels
ThirdParty.ThirdPanels
ThirdParty.ThirdGrids
ThirdParty.ThirdGrids
ThirdParty.ThirdTreeViews
ThirdParty.ThirdTreeViews
ThirdParty.ThirdComboBoxes
ThirdParty.ThirdComboBoxes
ThirdParty.ThirdWWEdits
ThirdParty.ThirdWWEdits
ThirdParty.ThirdVirtualTrees
ThirdParty.ThirdVirtualTrees
ThirdParty.ThirdGridEh
ThirdParty.ThirdGridEh
ThirdParty.ThirdPageControl
ThirdParty.ThirdPageControl
ThirdParty.ThirdTabControl
ThirdParty.ThirdTabControl
ThirdParty.ThirdToolBar
ThirdParty.ThirdToolBar
ThirdParty.ThirdStatusBar
ThirdParty.ThirdStatusBar
ThirdParty.ThirdSpeedButton
ThirdParty.ThirdSpeedButton
ThirdParty.ThirdScrollControl
ThirdParty.ThirdScrollControl
ThirdParty.ThirdUpDown
ThirdParty.ThirdUpDown
ThirdParty.ThirdScrollBar
ThirdParty.ThirdScrollBar
Constraints.MinHeight
Constraints.MinHeight
Constraints.MinWidth
Constraints.MinWidth
TsShellTreeView
TsShellTreeView
sShellTreeView1
sShellTreeView1
sShellTreeView1Change
sShellTreeView1Change
BoundLabel.Active
BoundLabel.Active
BoundLabel.Caption
BoundLabel.Caption
VertScrollBar.Tracking
VertScrollBar.Tracking
KeyPreview
KeyPreview
OnKeyPress
OnKeyPress
FormKeyPress
FormKeyPress
Constraints.MaxHeight
Constraints.MaxHeight
Constraints.MaxWidth
Constraints.MaxWidth
Glyph.Data
Glyph.Data
Brush.Color
Brush.Color
Pen.Style
Pen.Style
GlyphMode.Grayed
GlyphMode.Grayed
Colors.Strings
Colors.Strings
sEditHexKeyPress
sEditHexKeyPress
OnKeyDown
OnKeyDown
FormKeyDown
FormKeyDown
GetCPInfo
GetCPInfo
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
SetViewportOrgEx
SetViewportOrgEx
GetViewportOrgEx
GetViewportOrgEx
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowsHookExA
MapVirtualKeyA
MapVirtualKeyA
LoadKeyboardLayoutA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextA
GetKeyNameTextA
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
EnumChildWindows
EnumChildWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
GetKeyboardType
GetKeyboardType
.idata
.idata
.rdata
.rdata
P.reloc
P.reloc
P.rsrc
P.rsrc
.tlsWdJ
.tlsWdJ
version="1.1.0.0"
version="1.1.0.0"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
true
true
KERNEL32.DLL
KERNEL32.DLL
advapi32.dll
advapi32.dll
comdlg32.dll
comdlg32.dll
gdi32.dll
gdi32.dll
shell32.dll
shell32.dll
version.dll
version.dll
winmm.dll
winmm.dll
Add to custom colors set8Listbox (%s) style must be virtual in order to set Count
Add to custom colors set8Listbox (%s) style must be virtual in order to set Count
Error setting %s.Count
Error setting %s.Count
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
No help keyword specified.
No help keyword specified.
Text exceeds memo capacity/Menu '%s' is already being used by another form
Text exceeds memo capacity/Menu '%s' is already being used by another form
No help found for %s#No context-sensitive help installed$No topic-based help system installed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Unable to insert a line Clipboard does not support Icons
Unable to insert a line Clipboard does not support Icons
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Unsupported clipboard format
Unsupported clipboard format
Invalid property value List capacity out of bounds (%d)
Invalid property value List capacity out of bounds (%d)
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Resource %s not found
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Ancestor for '%s' not found
Ancestor for '%s' not found
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Cannot open file "%s". %s
Cannot open file "%s". %s
Invalid stream format$''%s'' is not a valid component name
Invalid stream format$''%s'' is not a valid component name
Invalid property element: %s
Invalid property element: %s
External exception %x
External exception %x
Interface not supported
Interface not supported
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
"Variant method calls not supported
"Variant method calls not supported
Invalid variant operation
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Operation not supported
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'
No argument for format '%s'
!'%s' is not a valid integer value('%s' is not a valid floating point value
!'%s' is not a valid integer value('%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid date
'%s' is not a valid time!'%s' is not a valid date and time
'%s' is not a valid time!'%s' is not a valid date and time
I/O error %d
I/O error %d
1.1.0.0
1.1.0.0
adobesnr.exe
adobesnr.exe
adobe.snr.patch-painter.exe_676_rwx_00401000_0016E000:
kernel32.dll
kernel32.dll
Windows
Windows
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
oleaut32.dll
EVariantBadIndexError
EVariantBadIndexError
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
u%CNu
u%CNu
%s[%d]
%s[%d]
%s_%d
%s_%d
EInvalidGraphicOperation
EInvalidGraphicOperation
Uh.SB
Uh.SB
USER32.DLL
USER32.DLL
comctl32.dll
comctl32.dll
uxtheme.dll
uxtheme.dll
PasswordChar,
PasswordChar,
OnKeyDown|
OnKeyDown|
OnKeyPress0
OnKeyPress0
OnKeyUpT
OnKeyUpT
ssHorizontal
ssHorizontal
OnKeyUpt
OnKeyUpt
Proportional
Proportional
%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
JumpID("","%s")
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeyworddpA
HelpKeyworddpA
crSQLWait
crSQLWait
%s (%s)
%s (%s)
Uh.FD
Uh.FD
imm32.dll
imm32.dll
AutoHotkeysL
AutoHotkeysL
AutoHotkeys
AutoHotkeys
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
TWMKey
TWMKey
KeyPreview@
KeyPreview@
WindowStatex
WindowStatex
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
vcltest3.dll
User32.dll
User32.dll
Uh!%F
Uh!%F
1.0.4
1.0.4
MAPI32.DLL
MAPI32.DLL
ole32.dll
ole32.dll
olepro32.dll
olepro32.dll
1.2.3
1.2.3
Invalid ZStream operation!
Invalid ZStream operation!
Options.dat
Options.dat
msimg32.dll
msimg32.dll
TacMDIWnd
TacMDIWnd
Uh.QI
Uh.QI
r.uXh
r.uXh
user32.dll
user32.dll
Cannot load image. %s not supported for %s files.
Cannot load image. %s not supported for %s files.
Cannot load image. Palette in %s file is invalid.
Cannot load image. Palette in %s file is invalid.
Cannot load image. Invalid or unexpected %s image format.
Cannot load image. Invalid or unexpected %s image format.
Cannot load image. CRC error found in %s file.
Cannot load image. CRC error found in %s file.
Cannot load image. Extra compressed data found in %s file.
Cannot load image. Extra compressed data found in %s file.
Cannot load image. Compression error found in %s file.
Cannot load image. Compression error found in %s file.
Invalid color format in %s file.
Invalid color format in %s file.
3333333
3333333
Conversion between indexed and non-indexed pixel formats is not supported.
Conversion between indexed and non-indexed pixel formats is not supported.
Portable network graphics (AlphaControls)
Portable network graphics (AlphaControls)
MenuSupport
MenuSupport
c:\Skins
c:\Skins
WEBBUTTON
WEBBUTTON
1.tmp
1.tmp
.JPEG
.JPEG
2.tmp
2.tmp
" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.
" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.
This version of the skin have not complete support by used AlphaControls package release.
This version of the skin have not complete support by used AlphaControls package release.
TacMenuSupport
TacMenuSupport
TacMenuSupportX
TacMenuSupportX
Webdings
Webdings
DWMAPI.DLL
DWMAPI.DLL
acMDIIcons
acMDIIcons
f;p.tI
f;p.tI
abcexport
abcexport
Compression Rate: %d %%
Compression Rate: %d %%
com.adobe.muse.csi
com.adobe.muse.csi
com.adobe.muse.framework.analytics
com.adobe.muse.framework.analytics
com.adobe.muse.framework.headlights
com.adobe.muse.framework.headlights
com.adobe.common.utils
com.adobe.common.utils
flash.events
flash.events
VVV.adobe.com/go/
VVV.adobe.com/go/
helpx.adobe.com
helpx.adobe.com
com.adobe.muse.csi.CSIMgr
com.adobe.muse.csi.CSIMgr
amtlib.dll
amtlib.dll
Adobe\Adobe After Effects CC 2014\Support Files\
Adobe\Adobe After Effects CC 2014\Support Files\
Adobe\Adobe Illustrator CC 2014\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014 (32 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC 2014 (32 Bit)\Support Files\Contents\Windows\
Adobe\Adobe After Effects CC\Support Files\
Adobe\Adobe After Effects CC\Support Files\
Adobe\Adobe Flash Builder 4.7 (64 Bit)\eclipse\plugins\com.adobe.flexide.amt_4.7.0.349722\os\win32\x86_64\
Adobe\Adobe Flash Builder 4.7 (64 Bit)\eclipse\plugins\com.adobe.flexide.amt_4.7.0.349722\os\win32\x86_64\
Adobe\Adobe Illustrator CC (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC (64 Bit)\Support Files\Contents\Windows\
lightroom.exe
lightroom.exe
Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\
MuseOnAIR.swf
MuseOnAIR.swf
Adobe\Adobe After Effects CS6\Support Files\
Adobe\Adobe After Effects CS6\Support Files\
Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\
Adobe\Adobe Flash Builder 4.6\eclipse\plugins\com.adobe.flexide.amt_4.6.1.335153\os\win32\x86\
Adobe\Adobe Flash Builder 4.6\eclipse\plugins\com.adobe.flexide.amt_4.6.1.335153\os\win32\x86\
Adobe\Adobe Illustrator CS6\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS6\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS5.5\Support Files\
Adobe\Adobe After Effects CS5.5\Support Files\
Adobe\Adobe Flash Builder 4.5\eclipse\plugins\com.adobe.flexide.amt_4.5.0.308971\os\win32\x86\
Adobe\Adobe Flash Builder 4.5\eclipse\plugins\com.adobe.flexide.amt_4.5.0.308971\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5.5\plugins\com.adobe.flexide.amt_1.5.0.308731\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5.5\plugins\com.adobe.flexide.amt_1.5.0.308731\os\win32\x86\
Adobe\Adobe Illustrator CS5.1\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS5.1\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS5\Support Files\
Adobe\Adobe After Effects CS5\Support Files\
Adobe\Adobe Flash Builder 4\plugins\com.adobe.flexide.amt_4.0.0.272416\os\win32\x86\
Adobe\Adobe Flash Builder 4\plugins\com.adobe.flexide.amt_4.0.0.272416\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5\plugins\com.adobe.flexide.amt_1.0.0.273393\os\win32\x86\
Adobe\Adobe Flash Catalyst CS5\plugins\com.adobe.flexide.amt_1.0.0.273393\os\win32\x86\
Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\
Adobe\Adobe After Effects CS4\Support Files\
Adobe\Adobe After Effects CS4\Support Files\
Adobe\Adobe Illustrator CS4\Support Files\Contents\Windows\
Adobe\Adobe Illustrator CS4\Support Files\Contents\Windows\
Patch for activation %s.
Patch for activation %s.
Patch to disable the enter Adobe ID requests in %s.
Patch to disable the enter Adobe ID requests in %s.
%s pattern : %s
%s pattern : %s
ai_cc_about_tryout.png
ai_cc_about_tryout.png
ai_cc_about.png
ai_cc_about.png
ai_cc_about_tryout@2x.png
ai_cc_about_tryout@2x.png
ai_cc_about@2x.png
ai_cc_about@2x.png
ai_cc_splash_tryout.png
ai_cc_splash_tryout.png
ai_cc_splash.png
ai_cc_splash.png
ai_cc_splash_tryout@2x.png
ai_cc_splash_tryout@2x.png
ai_cc_splash@2x.png
ai_cc_splash@2x.png
ai_cs6_splash_tryout.png
ai_cs6_splash_tryout.png
ai_cs6_splash.png
ai_cs6_splash.png
ai_about_tryout.png
ai_about_tryout.png
ai_about.png
ai_about.png
AI_SplashTryout.png
AI_SplashTryout.png
AI_Splash.png
AI_Splash.png
Warning: Current operating system does not support 64-bit applications!
Warning: Current operating system does not support 64-bit applications!
deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly
deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly
inflate 1.0.4 Copyright 1995-1996 Mark Adler
inflate 1.0.4 Copyright 1995-1996 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
"5!5!`"`"
"5!5!`"`"
)|'|'u%u%
)|'|'u%u%
%"%"%($($
%"%"%($($
!u%u%g'g'g'g'g'g'w'w'
!u%u%g'g'g'g'g'g'w'w'
$c%c%
$c%c%
2!2!|!|!
2!2!|!|!
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
KWindows
KWindows
UrlMon
UrlMon
%sPopupClndr
%sPopupClndr
Font.Charset
Font.Charset
Font.Color
Font.Color
Font.Height
Font.Height
Font.Name
Font.Name
Font.Style
Font.Style
SkinData.SkinSection
SkinData.SkinSection
BoundLabel.Indent
BoundLabel.Indent
BoundLabel.Font.Charset
BoundLabel.Font.Charset
BoundLabel.Font.Color
BoundLabel.Font.Color
BoundLabel.Font.Height
BoundLabel.Font.Height
BoundLabel.Font.Name
BoundLabel.Font.Name
BoundLabel.Font.Style
BoundLabel.Font.Style
BoundLabel.Layout
BoundLabel.Layout
BoundLabel.MaxWidth
BoundLabel.MaxWidth
BoundLabel.UseSkinColor
BoundLabel.UseSkinColor
AddedTitle.Font.Charset
AddedTitle.Font.Charset
AddedTitle.Font.Color
AddedTitle.Font.Color
AddedTitle.Font.Height
AddedTitle.Font.Height
AddedTitle.Font.Name
AddedTitle.Font.Name
AddedTitle.Font.Style
AddedTitle.Font.Style
Items.Strings
Items.Strings
AnimEffects.BlendOnMoving.Active
AnimEffects.BlendOnMoving.Active
AnimEffects.BlendOnMoving.Time
AnimEffects.BlendOnMoving.Time
$AnimEffects.BlendOnMoving.BlendValue
$AnimEffects.BlendOnMoving.BlendValue
AnimEffects.DialogShow.Time
AnimEffects.DialogShow.Time
AnimEffects.DialogShow.Mode
AnimEffects.DialogShow.Mode
AnimEffects.FormShow.Time
AnimEffects.FormShow.Time
AnimEffects.FormShow.Mode
AnimEffects.FormShow.Mode
AnimEffects.FormHide.Time
AnimEffects.FormHide.Time
AnimEffects.FormHide.Mode
AnimEffects.FormHide.Mode
AnimEffects.DialogHide.Time
AnimEffects.DialogHide.Time
AnimEffects.DialogHide.Mode
AnimEffects.DialogHide.Mode
AnimEffects.PageChange.Time
AnimEffects.PageChange.Time
ButtonHuge.bmpX7
ButtonHuge.bmpX7
.bmp&m
.bmp&m
c]t%s
c]t%s
Master.bmp&m
Master.bmp&m
0kÖo&
0kÖo&
*Gq-g}
*Gq-g}
0~-66.>!!>.66
0~-66.>!!>.66
Edit.png
Edit.png
K&\.JF
K&\.JF
Glow.pngVN
Glow.pngVN
E>E.OO
E>E.OO
painter.png
painter.png
Window.pngha
Window.pngha
Bp.oN
Bp.oN
`>%S,
`>%S,
MenuSupport.IcoLineSkin
MenuSupport.IcoLineSkin
ICOLINE!MenuSupport.ExtraLineFont.Charset
ICOLINE!MenuSupport.ExtraLineFont.Charset
MenuSupport.ExtraLineFont.Color
MenuSupport.ExtraLineFont.Color
clWindowText MenuSupport.ExtraLineFont.Height
clWindowText MenuSupport.ExtraLineFont.Height
MenuSupport.ExtraLineFont.Name
MenuSupport.ExtraLineFont.Name
MenuSupport.ExtraLineFont.Style
MenuSupport.ExtraLineFont.Style
ThirdParty.ThirdEdits
ThirdParty.ThirdEdits
ThirdParty.ThirdButtons
ThirdParty.ThirdButtons
ThirdParty.ThirdBitBtns
ThirdParty.ThirdBitBtns
ThirdParty.ThirdCheckBoxes
ThirdParty.ThirdCheckBoxes
ThirdParty.ThirdGroupBoxes
ThirdParty.ThirdGroupBoxes
ThirdParty.ThirdListViews
ThirdParty.ThirdListViews
ThirdParty.ThirdPanels
ThirdParty.ThirdPanels
ThirdParty.ThirdGrids
ThirdParty.ThirdGrids
ThirdParty.ThirdTreeViews
ThirdParty.ThirdTreeViews
ThirdParty.ThirdComboBoxes
ThirdParty.ThirdComboBoxes
ThirdParty.ThirdWWEdits
ThirdParty.ThirdWWEdits
ThirdParty.ThirdVirtualTrees
ThirdParty.ThirdVirtualTrees
ThirdParty.ThirdGridEh
ThirdParty.ThirdGridEh
ThirdParty.ThirdPageControl
ThirdParty.ThirdPageControl
ThirdParty.ThirdTabControl
ThirdParty.ThirdTabControl
ThirdParty.ThirdToolBar
ThirdParty.ThirdToolBar
ThirdParty.ThirdStatusBar
ThirdParty.ThirdStatusBar
ThirdParty.ThirdSpeedButton
ThirdParty.ThirdSpeedButton
ThirdParty.ThirdScrollControl
ThirdParty.ThirdScrollControl
ThirdParty.ThirdUpDown
ThirdParty.ThirdUpDown
ThirdParty.ThirdScrollBar
ThirdParty.ThirdScrollBar
Constraints.MinHeight
Constraints.MinHeight
Constraints.MinWidth
Constraints.MinWidth
TsShellTreeView
TsShellTreeView
sShellTreeView1
sShellTreeView1
sShellTreeView1Change
sShellTreeView1Change
BoundLabel.Active
BoundLabel.Active
BoundLabel.Caption
BoundLabel.Caption
VertScrollBar.Tracking
VertScrollBar.Tracking
KeyPreview
KeyPreview
OnKeyPress
OnKeyPress
FormKeyPress
FormKeyPress
Constraints.MaxHeight
Constraints.MaxHeight
Constraints.MaxWidth
Constraints.MaxWidth
Glyph.Data
Glyph.Data
Brush.Color
Brush.Color
Pen.Style
Pen.Style
GlyphMode.Grayed
GlyphMode.Grayed
Colors.Strings
Colors.Strings
sEditHexKeyPress
sEditHexKeyPress
OnKeyDown
OnKeyDown
FormKeyDown
FormKeyDown
GetCPInfo
GetCPInfo
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
SetViewportOrgEx
SetViewportOrgEx
GetViewportOrgEx
GetViewportOrgEx
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowsHookExA
MapVirtualKeyA
MapVirtualKeyA
LoadKeyboardLayoutA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextA
GetKeyNameTextA
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
EnumChildWindows
EnumChildWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
GetKeyboardType
GetKeyboardType
.idata
.idata
.rdata
.rdata
P.reloc
P.reloc
P.rsrc
P.rsrc
Add to custom colors set8Listbox (%s) style must be virtual in order to set Count
Add to custom colors set8Listbox (%s) style must be virtual in order to set Count
Error setting %s.Count
Error setting %s.Count
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
No help keyword specified.
No help keyword specified.
Text exceeds memo capacity/Menu '%s' is already being used by another form
Text exceeds memo capacity/Menu '%s' is already being used by another form
No help found for %s#No context-sensitive help installed$No topic-based help system installed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Unable to insert a line Clipboard does not support Icons
Unable to insert a line Clipboard does not support Icons
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Unsupported clipboard format
Unsupported clipboard format
Invalid property value List capacity out of bounds (%d)
Invalid property value List capacity out of bounds (%d)
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Resource %s not found
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Ancestor for '%s' not found
Ancestor for '%s' not found
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Cannot open file "%s". %s
Cannot open file "%s". %s
Invalid stream format$''%s'' is not a valid component name
Invalid stream format$''%s'' is not a valid component name
Invalid property element: %s
Invalid property element: %s
External exception %x
External exception %x
Interface not supported
Interface not supported
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
"Variant method calls not supported
"Variant method calls not supported
Invalid variant operation
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Operation not supported
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'
No argument for format '%s'
!'%s' is not a valid integer value('%s' is not a valid floating point value
!'%s' is not a valid integer value('%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid date
'%s' is not a valid time!'%s' is not a valid date and time
'%s' is not a valid time!'%s' is not a valid date and time
I/O error %d
I/O error %d
WSCollect.exe_244:
.text
.text
`.rsrc
`.rsrc
@.reloc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
v2.0.50727
v2.0.50727
CMemoryExecute.dll
CMemoryExecute.dll
CMemoryExecute
CMemoryExecute
PAGE_EXECUTE_READWRITE
PAGE_EXECUTE_READWRITE
.ctor
.ctor
System.Reflection
System.Reflection
System.Runtime.InteropServices
System.Runtime.InteropServices
System.Security.Permissions
System.Security.Permissions
System.Diagnostics
System.Diagnostics
System.Runtime.CompilerServices
System.Runtime.CompilerServices
DllImportAttribute
DllImportAttribute
kernel32.dll
kernel32.dll
ntdll.dll
ntdll.dll
System.Security
System.Security
$8fcd4931-91a2-4e18-849b-70de34ab75df
$8fcd4931-91a2-4e18-849b-70de34ab75df
1.0.0.0
1.0.0.0
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
C:\Users\Jovan\Documents\Visual Studio 2010\Projects\Stealer\CMemoryExecute\CMemoryExecute\obj\Release\CMemoryExecute.pdb
C:\Users\Jovan\Documents\Visual Studio 2010\Projects\Stealer\CMemoryExecute\CMemoryExecute\obj\Release\CMemoryExecute.pdb
mscoree.dll
mscoree.dll
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
D$.SPf
D$.SPf
2 34 567
2 34 567
com.apple.Safari
com.apple.Safari
com.apple.WebKit2WebProcess
com.apple.WebKit2WebProcess
SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins
SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins
"Account","Login Name","Password","Web Site","Comments"
"Account","Login Name","Password","Web Site","Comments"
3.7.5
3.7.5
SQLite format 3
SQLite format 3
CREATE TABLE sqlite_master(
CREATE TABLE sqlite_master(
sql text
sql text
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins
SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins
PK11_GetInternalKeySlot
PK11_GetInternalKeySlot
PK11_CheckUserPassword
PK11_CheckUserPassword
large file support is disabled
large file support is disabled
unknown operation
unknown operation
SQL logic error or missing database
SQL logic error or missing database
foreign_keys
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_compileoption_used
sqlite_source_id
sqlite_source_id
sqlite_version
sqlite_version
sqlite_attach
sqlite_attach
sqlite_detach
sqlite_detach
sqlite_stat1
sqlite_stat1
sqlite_rename_parent
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_trigger
sqlite_rename_table
sqlite_rename_table
%Y-%m-%d %H:%M:%S
%Y-%m-%d %H:%M:%S
%Y-%m-%d
%Y-%m-%d
%H:%M:%S
%H:%M:%S
SQLITE_
SQLITE_
failed to allocate %u bytes of memory
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
failed memory resize %u to %u bytes
922337203685477580
922337203685477580
API call with %s database connection pointer
API call with %s database connection pointer
%s-shm
%s-shm
%s\etilqs_
%s\etilqs_
OsError 0x%x (%u)
OsError 0x%x (%u)
Recovered %d frames from WAL file %s
Recovered %d frames from WAL file %s
%s-mjX
%s-mjX
foreign key constraint failed
foreign key constraint failed
unable to use function %s in the requested context
unable to use function %s in the requested context
abort at %d in [%s]: %s
abort at %d in [%s]: %s
constraint failed at %d in [%s]
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
cannot open savepoint - SQL statements in progress
no such savepoint: %s
no such savepoint: %s
cannot %s savepoint - SQL statements in progress
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
cannot change %s wal mode from within a transaction
statement aborts at %d: [%s] %s
statement aborts at %d: [%s] %s
misuse of aliased aggregate %s
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s.%s
%s: %s.%s
%s: %s.%s
%s: %s
%s: %s
%r %s BY term out of range - should be between 1 and %d
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
variable number must be between ?1 and ?%d
too many SQL variables
too many SQL variables
too many columns in %s
too many columns in %s
oversized integer: %s%s
oversized integer: %s%s
misuse of aggregate: %s()
misuse of aggregate: %s()
%.*s"%w"%s
%.*s"%w"%s
%s%.*s"%w"
%s%.*s"%w"
%s OR name=%Q
%s OR name=%Q
type='trigger' AND (%s)
type='trigger' AND (%s)
there is already another table or index with this name: %s
there is already another table or index with this name: %s
sqlite_
sqlite_
table %s may not be altered
table %s may not be altered
view %s may not be altered
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
sqlite_altertab_%s
CREATE TABLE %Q.%s(%s)
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl=%Q
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
invalid name: "%s"
invalid name: "%s"
too many attached databases - max %d
too many attached databases - max %d
database %s is already in use
database %s is already in use
unable to open database: %s
unable to open database: %s
no such database: %s
no such database: %s
cannot detach database %s
cannot detach database %s
database %s is locked
database %s is locked
%s %T cannot reference objects in database %s
%s %T cannot reference objects in database %s
object name reserved for internal use: %s
object name reserved for internal use: %s
there is already an index named %s
there is already an index named %s
too many columns on %s
too many columns on %s
duplicate column name: %s
duplicate column name: %s
default value of column [%s] is not constant
default value of column [%s] is not constant
table "%s" has more than one primary key
table "%s" has more than one primary key
no such collation sequence: %s
no such collation sequence: %s
CREATE %s %.*s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
view %s is circularly defined
view %s is circularly defined
table %s may not be dropped
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
use DROP VIEW to delete view %s
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
foreign key on %s should reference only one column of table %T
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
unknown column "%s" in foreign key definition
indexed columns are not unique
indexed columns are not unique
table %s may not be indexed
table %s may not be indexed
views may not be indexed
views may not be indexed
virtual tables may not be indexed
virtual tables may not be indexed
there is already a table named %s
there is already a table named %s
index %s already exists
index %s already exists
sqlite_autoindex_%s_%d
sqlite_autoindex_%s_%d
table %s has no column named %s
table %s has no column named %s
CREATE%s INDEX %.*s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
a JOIN clause is required before %s
unable to identify the object to be reindexed
unable to identify the object to be reindexed
table %s may not be modified
table %s may not be modified
cannot modify %s because it is a view
cannot modify %s because it is a view
foreign key mismatch
foreign key mismatch
table %S has %d columns but %d values were supplied
table %S has %d columns but %d values were supplied
%d values for %d columns
%d values for %d columns
table %S has no column named %s
table %S has no column named %s
%s.%s may not be NULL
%s.%s may not be NULL
PRIMARY KEY must be unique
PRIMARY KEY must be unique
automatic extension loading failed: %s
automatic extension loading failed: %s
foreign_key_list
foreign_key_list
malformed database schema (%s)
malformed database schema (%s)
%s - %s
%s - %s
unsupported file format
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unknown or unsupported join type: %T %T%s%T
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
cannot join using column %s - column not present in both tables
%s.%s
%s.%s
%s:%d
%s:%d
no such index: %s
no such index: %s
sqlite_subquery_%p_
sqlite_subquery_%p_
no such table: %s
no such table: %s
cannot create %s trigger on view: %S
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
no such trigger: %S
no such column: %s
no such column: %s
cannot VACUUM - SQL statements in progress
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
vtable constructor did not declare schema: %s
no such module: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
at most %d tables in a join
cannot use index: %s
cannot use index: %s
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
unable to close due to unfinished backup operation
unable to close due to unfinished backup operation
unknown database: %s
unknown database: %s
no such vfs: %s
no such vfs: %s
database corruption at line %d of [%.10s]
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
cannot open file at line %d of [%.10s]
sqlite3_open
sqlite3_open
sqlite3_prepare
sqlite3_prepare
sqlite3_step
sqlite3_step
sqlite3_column_text
sqlite3_column_text
sqlite3_column_int
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_int64
sqlite3_finalize
sqlite3_finalize
sqlite3_close
sqlite3_close
sqlite3_exec
sqlite3_exec
f:\Projects\VS2005\WebBrowserPassView\Release\WebBrowserPassView.pdb
f:\Projects\VS2005\WebBrowserPassView\Release\WebBrowserPassView.pdb
msvcrt.dll
msvcrt.dll
_wcmdln
_wcmdln
COMCTL32.dll
COMCTL32.dll
VERSION.dll
VERSION.dll
FindCloseUrlCache
FindCloseUrlCache
FindNextUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
FindFirstUrlCacheEntryW
WININET.dll
WININET.dll
GetWindowsDirectoryW
GetWindowsDirectoryW
KERNEL32.dll
KERNEL32.dll
EnumChildWindows
EnumChildWindows
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
comdlg32.dll
comdlg32.dll
RegCloseKey
RegCloseKey
RegOpenKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegEnumKeyExW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
5JEw%Xg
5JEw%Xg
hXXp://VVV.usertrust.com1
hXXp://VVV.usertrust.com1
3hXXp://crl.usertrust.com/AddTrustExternalCARoot.crl05
3hXXp://crl.usertrust.com/AddTrustExternalCARoot.crl05
hXXp://ocsp.usertrust.com0
hXXp://ocsp.usertrust.com0
1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl05
1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl05
1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl0t
1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl0t
1hXXp://crt.usertrust.com/UTNAddTrustObject_CA.crt0%
1hXXp://crt.usertrust.com/UTNAddTrustObject_CA.crt0%
hXXps://secure.comodo.net/CPS0A
hXXps://secure.comodo.net/CPS0A
0hXXp://crl.comodoca.com/COMODOCodeSigningCA2.crl0r
0hXXp://crl.comodoca.com/COMODOCodeSigningCA2.crl0r
0hXXp://crt.comodoca.com/COMODOCodeSigningCA2.crt0$
0hXXp://crt.comodoca.com/COMODOCodeSigningCA2.crt0$
hXXp://ocsp.comodoca.com0
hXXp://ocsp.comodoca.com0
support@nirsoft.net0
support@nirsoft.net0
t{SSh
t{SSh
v%SSW
v%SSW
Mail PassView
Mail PassView
Mozilla\Profiles
Mozilla\Profiles
Software\Mozilla\Mozilla Thunderbird
Software\Mozilla\Mozilla Thunderbird
%s\Main
%s\Main
sqlite3.dll
sqlite3.dll
nss3.dll
nss3.dll
%programfiles%\Mozilla Thunderbird
%programfiles%\Mozilla Thunderbird
AddExportHeaderLine
AddExportHeaderLine
%s %s %s
%s %s %s
HTTPMail User Name
HTTPMail User Name
SMTP USer Name
SMTP USer Name
HTTPMail Server
HTTPMail Server
SMTP Server
SMTP Server
POP3 Password2
POP3 Password2
IMAP Password2
IMAP Password2
HTTPMail Password2
HTTPMail Password2
SMTP Password2
SMTP Password2
POP3 Port
POP3 Port
IMAP Port
IMAP Port
HTTPMail Port
HTTPMail Port
SMTP Port
SMTP Port
HTTPMail Secure Connection
HTTPMail Secure Connection
SMTP Secure Connection
SMTP Secure Connection
SMTP Display Name
SMTP Display Name
SMTP Email Address
SMTP Email Address
POP3 Password
POP3 Password
IMAP Password
IMAP Password
HTTP Password
HTTP Password
SMTP Password
SMTP Password
HTTP User
HTTP User
SMTP User
SMTP User
HTTP Server URL
HTTP Server URL
HTTP Port
HTTP Port
HTTPMail Use SSL
HTTPMail Use SSL
SMTP Use SSL
SMTP Use SSL
%s\%s
%s\%s
PopPort
PopPort
PopPassword
PopPassword
SMTPAccount
SMTPAccount
SMTPServer
SMTPServer
SMTPPort
SMTPPort
SMTPLogSecure
SMTPLogSecure
SMTPPassword
SMTPPassword
%s\Accounts
%s\Accounts
LoginName
LoginName
SavePasswordText
SavePasswordText
ESMTPUsername
ESMTPUsername
ESMTPPassword
ESMTPPassword
POP3Password
POP3Password
fb.dat
fb.dat
%s@gmail.com
%s@gmail.com
%s@yahoo.com
%s@yahoo.com
Software\Microsoft\Windows Messaging Subsystem\Profiles
Software\Microsoft\Windows Messaging Subsystem\Profiles
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
%s %s
%s %s
smtp
smtp
advapi32.dll
advapi32.dll
comctl32.dll
comctl32.dll
*.ini
*.ini
netmsg.dll
netmsg.dll
Error %d: %s
Error %d: %s
%s (%s)
%s (%s)
menu_%d
menu_%d
dialog_%d
dialog_%d
TranslatorURL
TranslatorURL
_lng.ini
_lng.ini
%-18s: %s
%-18s: %s
%%-%d.%ds
%%-%d.%ds
%s %s %s %s %s%s %s%sbgcolor="%s"
bgcolor="%s"
%s
%s
%s%s>
%s%s>
%s>
%s>
report.html
report.html
*.txt
*.txt
*.htm;*.html
*.htm;*.html
*.xml
*.xml
*.csv
*.csv
Software\NirSoft\MailPassView
Software\NirSoft\MailPassView
MailPassView
MailPassView
/skeepass
/skeepass
/deleteregkey
/deleteregkey
Failed to load the executable file !
Failed to load the executable file !
mail.account.account
mail.account.account
mail.server
mail.server
port
port
mail.identity
mail.identity
signon.signonfilename
signon.signonfilename
mailbox://%s@%s
mailbox://%s@%s
imap://%s@%s
imap://%s@%s
mailbox://%s
mailbox://%s
imap://%s
imap://%s
signons.txt
signons.txt
signons.sqlite
signons.sqlite
prefs.js
prefs.js
Password.NET Messenger Service
Password.NET Messenger Service
User.NET Messenger Service
User.NET Messenger Service
Passport.Net\*
Passport.Net\*
ps:password
ps:password
windowslive:name=
windowslive:name=
Exception %8.8X at address %8.8X in module %s
Exception %8.8X at address %8.8X in module %s
Stack Data: %s
Stack Data: %s
Code Data: %s
Code Data: %s
mozsqlite3.dll
mozsqlite3.dll
psapi.dll
psapi.dll
pstorec.dll
pstorec.dll
5e7e8100-9138-11d1-945a-00c04fc308ff
5e7e8100-9138-11d1-945a-00c04fc308ff
00000000-0000-0000-0000-000000000000
00000000-0000-0000-0000-000000000000
220D5CD0-853A-11D0-84BC-00C04FD43F8F
220D5CD0-853A-11D0-84BC-00C04FD43F8F
220D5CD1-853A-11D0-84BC-00C04FD43F8F
220D5CD1-853A-11D0-84BC-00C04FD43F8F
220D5CC1-853A-11D0-84BC-00C04FD43F8F
220D5CC1-853A-11D0-84BC-00C04FD43F8F
417E2D75-84BD-11D0-84BB-00C04FD43F8F
417E2D75-84BD-11D0-84BB-00C04FD43F8F
shell32.dll
shell32.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
shlwapi.dll
shlwapi.dll
%s%s%s%s%s
%s
%s
%s
size="%d"
size="%d"
color="#%s"
color="#%s"
width="%s"
width="%s"
%s%s%s | %s%s%s SOFTWARE\Mozilla SOFTWARE\Mozilla mozilla mozilla %s\bin %s\bin PathToExe PathToExe \sqlite3.dll \sqlite3.dll \mozsqlite3.dll \mozsqlite3.dll Software\Microsoft\Windows Mail Software\Microsoft\Windows Mail Software\Microsoft\Windows Live Mail Software\Microsoft\Windows Live Mail SMTP_Server SMTP_Server SMTP_User_Name SMTP_User_Name POP3_Password2 POP3_Password2 IMAP_Password2 IMAP_Password2 NNTP_Password2 NNTP_Password2 SMTP_Password2 SMTP_Password2 SMTP_Email_Address SMTP_Email_Address SMTP_Port SMTP_Port NNTP_Port NNTP_Port IMAP_Port IMAP_Port POP3_Port POP3_Port SMTP_Secure_Connection SMTP_Secure_Connection *.oeaccount *.oeaccount \Microsoft\Windows Mail \Microsoft\Windows Mail \Microsoft\Windows Live Mail \Microsoft\Windows Live Mail f:\Projects\VS2005\mailpv\Release\mailpv.pdb f:\Projects\VS2005\mailpv\Release\mailpv.pdb _acmdln _acmdln RPCRT4.dll RPCRT4.dll GetWindowsDirectoryA GetWindowsDirectoryA RegDeleteKeyA RegDeleteKeyA RegOpenKeyExA RegOpenKeyExA RegEnumKeyA RegEnumKeyA RegEnumKeyExA RegEnumKeyExA ShellExecuteA ShellExecuteA NirSoftPADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD NirSoftPADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD Debugger.exe Debugger.exe Microsoft.VisualBasic Microsoft.VisualBasic System.Windows.Forms System.Windows.Forms System.Drawing System.Drawing System.Management System.Management tapi32.dll tapi32.dll rtm.dll rtm.dll user32.dll user32.dll Debugger.Debugger.resources Debugger.Debugger.resources Debugger.Resources.resources Debugger.Resources.resources Debugger.My Debugger.My WindowsFormsApplicationBase WindowsFormsApplicationBase Microsoft.VisualBasic.ApplicationServices Microsoft.VisualBasic.ApplicationServices System.ComponentModel System.ComponentModel System.CodeDom.Compiler System.CodeDom.Compiler Microsoft.VisualBasic.Devices Microsoft.VisualBasic.Devices m_MyWebServicesObjectProvider m_MyWebServicesObjectProvider .cctor .cctor get_WebServices get_WebServices HelpKeywordAttribute HelpKeywordAttribute System.ComponentModel.Design System.ComponentModel.Design WebServices WebServices Microsoft.VisualBasic.CompilerServices Microsoft.VisualBasic.CompilerServices System.Collections System.Collections ContainsKey ContainsKey InvalidOperationException InvalidOperationException MyWebServices MyWebServices encryptedpassstring encryptedpassstring encryptedsmtpstring encryptedsmtpstring portstring portstring fakeMSGholder fakeMSGholder encryptedftphost encryptedftphost encryptedftpuser encryptedftpuser encryptedftppass encryptedftppass useftp useftp websitevisitor websitevisitor websiteblocker websiteblocker passstring passstring smtpstring smtpstring ftphost ftphost ftpuser ftpuser ftppass ftppass WM_KEYUP WM_KEYUP WM_KEYDOWN WM_KEYDOWN WM_SYSKEYDOWN WM_SYSKEYDOWN WM_SYSKEYUP WM_SYSKEYUP KeyboardHandle KeyboardHandle KeyLog KeyLog CleanedPasswordsMAIL CleanedPasswordsMAIL CleanedPasswordsWB CleanedPasswordsWB System.IO System.IO get_ExecutablePath get_ExecutablePath WindowsIdentity WindowsIdentity System.Security.Principal System.Security.Principal set_WindowState set_WindowState FormWindowState FormWindowState UnhookWindowsHookEx UnhookWindowsHookEx SetWindowsHookEx SetWindowsHookEx SetWindowsHookExA SetWindowsHookExA GetAsyncKeyState GetAsyncKeyState vKey vKey HookKeyboard HookKeyboard UnhookKeyboard UnhookKeyboard Operators Operators get_Keyboard get_Keyboard Keyboard Keyboard get_CtrlKeyDown get_CtrlKeyDown get_AltKeyDown get_AltKeyDown KeyboardCallback KeyboardCallback System.Threading System.Threading System.Collections.Generic System.Collections.Generic Microsoft.VisualBasic.MyServices Microsoft.VisualBasic.MyServices System.Collections.ObjectModel System.Collections.ObjectModel MsgBox MsgBox MsgBoxResult MsgBoxResult MsgBoxStyle MsgBoxStyle set_WindowStyle set_WindowStyle ProcessWindowStyle ProcessWindowStyle ForceSteamLogin ForceSteamLogin System.Net.NetworkInformation System.Net.NetworkInformation get_OperationalStatus get_OperationalStatus OperationalStatus OperationalStatus FakemsgInstall FakemsgInstall System.Net.Mail System.Net.Mail SmtpClient SmtpClient System.Globalization System.Globalization set_Port set_Port System.Net System.Net Microsoft.Win32 Microsoft.Win32 RegistryKey RegistryKey OpenSubKey OpenSubKey System.Security.Cryptography System.Security.Cryptography System.Text System.Text set_Key set_Key stealWebroswers stealWebroswers WebClient WebClient readweb readweb System.IO.Compression System.IO.Compression SendLogsFTP SendLogsFTP FtpWebRequest FtpWebRequest WebRequest WebRequest UploadFTP UploadFTP secretKey secretKey set_KeySize set_KeySize get_KeySize get_KeySize System.Net.Sockets System.Net.Sockets virtualKey virtualKey KeyboardHookDelegate KeyboardHookDelegate get_Msg get_Msg Debugger.My.Resources Debugger.My.Resources System.Resources System.Resources get_CMemoryExecute get_CMemoryExecute get_WebBrowserPassView get_WebBrowserPassView WebBrowserPassView WebBrowserPassView System.Configuration System.Configuration 8.0.0.0 8.0.0.0 My.Computer My.Computer My.Application My.Application My.User My.User My.Forms My.Forms My.WebServices My.WebServices System.Windows.Forms.Form System.Windows.Forms.Form My.MyProject.Forms My.MyProject.Forms 4System.Web.Services.Protocols.SoapHttpClientProtocol 4System.Web.Services.Protocols.SoapHttpClientProtocol 3System.Resources.Tools.StronglyTypedResourceBuilder 3System.Resources.Tools.StronglyTypedResourceBuilder 4.0.0.0 4.0.0.0 KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator 10.0.0.0 10.0.0.0 My.Settings My.Settings $e48811ca-8af8-4e73-85dd-2045b9cca73a $e48811ca-8af8-4e73-85dd-2045b9cca73a _CorExeMain _CorExeMain %%0.ß %%0.ß Apple Computer\Preferences\keychain.plist Apple Computer\Preferences\keychain.plist LoadPasswordsIE LoadPasswordsIE LoadPasswordsFirefox LoadPasswordsFirefox LoadPasswordsChrome LoadPasswordsChrome LoadPasswordsOpera LoadPasswordsOpera LoadPasswordsSafari LoadPasswordsSafari LoadPasswordsSeaMonkey LoadPasswordsSeaMonkey UseFirefoxProfileFolder UseFirefoxProfileFolder UseFirefoxInstallFolder UseFirefoxInstallFolder UseChromeProfileFolder UseChromeProfileFolder UseOperaPasswordFile UseOperaPasswordFile FirefoxProfileFolder FirefoxProfileFolder FirefoxInstallFolder FirefoxInstallFolder ChromeProfileFolder ChromeProfileFolder OperaPasswordFile OperaPasswordFile Aadvapi32.dll Aadvapi32.dll crypt32.dll crypt32.dll 777705555443332 777705555443332 5555443332 5555443332 5555443332 5555443332 wand.dat wand.dat @nss3.dll @nss3.dll SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\seamonkey.exe SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\seamonkey.exe %programfiles%\Sea Monkey %programfiles%\Sea Monkey %programfiles%\Mozilla Firefox %programfiles%\Mozilla Firefox -signons.txt -signons.txt signons2.txt signons2.txt signons3.txt signons3.txt @dllhost.exe @dllhost.exe taskhost.exe taskhost.exe taskhostex.exe taskhostex.exe Microsoft\Windows\WebCache\WebCacheV01.dat Microsoft\Windows\WebCache\WebCacheV01.dat Microsoft\Windows\WebCache\WebCacheV24.dat Microsoft\Windows\WebCache\WebCacheV24.dat index.dat index.dat hXXps://VVV.google.com/accounts/servicelogin hXXps://VVV.google.com/accounts/servicelogin hXXp://VVV.facebook.com/ hXXp://VVV.facebook.com/ hXXps://login.yahoo.com/config/login hXXps://login.yahoo.com/config/login hXXp:// hXXp:// hXXps:// hXXps:// PTF:// PTF:// @history.dat @history.dat places.sqlite places.sqlite Mozilla\Firefox\Profiles Mozilla\Firefox\Profiles Mozilla\SeaMonkey\Profiles Mozilla\SeaMonkey\Profiles Mozilla\SeaMonkey Mozilla\SeaMonkey Mozilla\Firefox Mozilla\Firefox profiles.ini profiles.ini Profile%d Profile%d tntdll.dll tntdll.dll sWeb Data sWeb Data Login Data Login Data Google\Chrome\User Data Google\Chrome\User Data Google\Chrome SxS\User Data Google\Chrome SxS\User Data Opera\Opera\wand.dat Opera\Opera\wand.dat Opera\Opera7\profile\wand.dat Opera\Opera7\profile\wand.dat Opera Opera @"%s" @"%s" Ashell32.dll Ashell32.dll \nss3.dll \nss3.dll .save .save vaultcli.dll vaultcli.dll abe2869f-9b47-4cd9-a358-c22904dba7f7 abe2869f-9b47-4cd9-a358-c22904dba7f7 Copy &Password Copy &Password &HTML Report - All Items &HTML Report - All Items HTML R&eport - Selected Items HTML R&eport - Selected Items HTML Report - All Items HTML Report - All Items HTML Report - Selected Items HTML Report - Selected Items Load Passwords From... Load Passwords From... Google Chrome Google Chrome Mozilla Firefox Mozilla Firefox SeaMonkey SeaMonkey Firefox Options Firefox Options Master password: Master password: Firefox Profile: Firefox Profile: Firefox Installation: Firefox Installation: Chrome Options Chrome Options Opera Options Opera Options wand.dat file: wand.dat file: %d Passwords %d Passwords , %d Selected , %d Selected Web Browser Passwords%Choose another Firefox profile folder)Choose the installation folder of Firefox,Choose another profile of Chrome Web browser,Choose the password file of Opera (wand.dat) Web Browser Passwords%Choose another Firefox profile folder)Choose the installation folder of Firefox,Choose another profile of Chrome Web browser,Choose the password file of Opera (wand.dat) Loading... %d Loading... %d KeePass csv file KeePass csv file Opera Password File Opera Password File Firefox 1.x Firefox 1.x Firefox 2.x Firefox 2.x Firefox 3.0 Firefox 3.0 Firefox Firefox Chrome Chrome Web Browser Web Browser Password Password Password Strength Password Strength Password Field Password Field WebBrowserPassView.exe WebBrowserPassView.exe VVV.google.com/Please log in to your Gmail account VVV.google.com/Please log in to your Gmail account VVV.google.com:443/Please log in to your Gmail account VVV.google.com:443/Please log in to your Gmail account VVV.google.com/Please log in to your Google Account VVV.google.com/Please log in to your Google Account VVV.google.com:443/Please log in to your Google Account VVV.google.com:443/Please log in to your Google Account VVV.google.com VVV.google.com dWindowsLive:name=* dWindowsLive:name=* 82BD0E67-9FEA-4748-8672-D5EFE5B779B0 82BD0E67-9FEA-4748-8672-D5EFE5B779B0 Copy Password Copy Password %d items %d items Select Eudora.ini filename/Select the location of Thunderbird installation Select Eudora.ini filename/Select the location of Thunderbird installation Eudora.ini file Eudora.ini file SMTP SMTP Windows Mail Windows Mail Windows Live Mail Windows Live Mail Server Port Server Port SMTP Server Port SMTP Server Port Mail Password Recovery Mail Password Recovery mailpv.exe mailpv.exe 3, 7 #,) 3, 7 #,) MessageBoxIcon.Error MessageBoxIcon.Error noftp noftp filename.exe filename.exe hXXp://VVV.example.com/directory/file.exe hXXp://VVV.example.com/directory/file.exe Disablecmd Disablecmd \Windows Update.exe \Windows Update.exe \WindowsUpdate.exe \WindowsUpdate.exe SysInfo.txt SysInfo.txt \pid.txt \pid.txt \pidloc.txt \pidloc.txt \Mozilla\Firefox\Profiles \Mozilla\Firefox\Profiles 127.0.0.1 127.0.0.1 ping -n 1 -w 3000 1.1.1.1 ping -n 1 -w 3000 1.1.1.1 cmd.exe cmd.exe \SteamAppData.vdf \SteamAppData.vdf \ClientRegistry.blob \ClientRegistry.blob MessageBoxIcon.Exclamation MessageBoxIcon.Exclamation Keylogger Enabled: Keylogger Enabled: Operating System: Operating System: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced autorun.inf autorun.inf open=Sys.exe open=Sys.exe Sys.exe Sys.exe Software\Microsoft\Windows\CurrentVersion\Run Software\Microsoft\Windows\CurrentVersion\Run Windows Update Windows Update C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe \bitcoin\wallet.dat \bitcoin\wallet.dat _wallet.dat _wallet.dat wallet.dat wallet.dat Microsoft.NET\Framework\v2.0.50727\vbc.exe Microsoft.NET\Framework\v2.0.50727\vbc.exe holdermail.txt" holdermail.txt" holdermail.txt holdermail.txt Operating System Intel Recovery Operating System Intel Recovery Operating System Platform: Operating System Platform: Operating System Version: Operating System Version: WEB Browser Password Recovery WEB Browser Password Recovery Mail Messenger Password Recovery Mail Messenger Password Recovery Jdownloader Password Recovery Jdownloader Password Recovery holderwb.txt" holderwb.txt" holderwb.txt holderwb.txt C:\Users\ C:\Users\ _Pin0.jpeg _Pin0.jpeg _Pin1.jpeg _Pin1.jpeg _Pin2.jpeg _Pin2.jpeg _Pin3.jpeg _Pin3.jpeg _Pin4.jpeg _Pin4.jpeg Steals the Wallet.DAT file that holds the users bitcoin currency Steals the Wallet.DAT file that holds the users bitcoin currency \.minecraft\lastlogin \.minecraft\lastlogin There is a file attached to this email containing Minecraft username and password download it then decrypt the login information with my Minecraft Decryptor There is a file attached to this email containing Minecraft username and password download it then decrypt the login information with my Minecraft Decryptor Predator Pain v14 - Key Recorder - [ Predator Pain v14 - Key Recorder - [ Keylogger Log Keylogger Log .jpeg .jpeg Predator_Pain_v14_KeyLog_ Predator_Pain_v14_KeyLog_ hXXp://whatismyipaddress.com/ hXXp://whatismyipaddress.com/ Debugger.Resources Debugger.Resources :\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe :\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe This tool collects Windows Store log files This tool collects Windows Store log files 6.3.9600.16384 (winblue_rtm.130821-1623) 6.3.9600.16384 (winblue_rtm.130821-1623) WSCollect.exe WSCollect.exe Windows Windows Operating System Operating System 6.3.9600.16384 6.3.9600.16384 WSCollect.exe_244_rwx_00400000_00084000: .text .text `.rsrc `.rsrc @.reloc @.reloc lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet v2.0.50727 v2.0.50727 CMemoryExecute.dll CMemoryExecute.dll CMemoryExecute CMemoryExecute PAGE_EXECUTE_READWRITE PAGE_EXECUTE_READWRITE .ctor .ctor System.Reflection System.Reflection System.Runtime.InteropServices System.Runtime.InteropServices System.Security.Permissions System.Security.Permissions System.Diagnostics System.Diagnostics System.Runtime.CompilerServices System.Runtime.CompilerServices DllImportAttribute DllImportAttribute kernel32.dll kernel32.dll ntdll.dll ntdll.dll System.Security System.Security $8fcd4931-91a2-4e18-849b-70de34ab75df $8fcd4931-91a2-4e18-849b-70de34ab75df 1.0.0.0 1.0.0.0 System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 C:\Users\Jovan\Documents\Visual Studio 2010\Projects\Stealer\CMemoryExecute\CMemoryExecute\obj\Release\CMemoryExecute.pdb C:\Users\Jovan\Documents\Visual Studio 2010\Projects\Stealer\CMemoryExecute\CMemoryExecute\obj\Release\CMemoryExecute.pdb mscoree.dll mscoree.dll `.rdata `.rdata @.data @.data .rsrc .rsrc D$.SPf D$.SPf 2 34 567 2 34 567 com.apple.Safari com.apple.Safari com.apple.WebKit2WebProcess com.apple.WebKit2WebProcess SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins "Account","Login Name","Password","Web Site","Comments" "Account","Login Name","Password","Web Site","Comments" 3.7.5 3.7.5 SQLite format 3 SQLite format 3 CREATE TABLE sqlite_master( CREATE TABLE sqlite_master( sql text sql text REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins PK11_GetInternalKeySlot PK11_GetInternalKeySlot PK11_CheckUserPassword PK11_CheckUserPassword large file support is disabled large file support is disabled unknown operation unknown operation SQL logic error or missing database SQL logic error or missing database foreign_keys foreign_keys sqlite_compileoption_get sqlite_compileoption_get sqlite_compileoption_used sqlite_compileoption_used sqlite_source_id sqlite_source_id sqlite_version sqlite_version sqlite_attach sqlite_attach sqlite_detach sqlite_detach sqlite_stat1 sqlite_stat1 sqlite_rename_parent sqlite_rename_parent sqlite_rename_trigger sqlite_rename_trigger sqlite_rename_table sqlite_rename_table %Y-%m-%d %H:%M:%S %Y-%m-%d %H:%M:%S %Y-%m-%d %Y-%m-%d %H:%M:%S %H:%M:%S SQLITE_ SQLITE_ failed to allocate %u bytes of memory failed to allocate %u bytes of memory failed memory resize %u to %u bytes failed memory resize %u to %u bytes 922337203685477580 922337203685477580 API call with %s database connection pointer API call with %s database connection pointer %s-shm %s-shm %s\etilqs_ %s\etilqs_ OsError 0x%x (%u) OsError 0x%x (%u) Recovered %d frames from WAL file %s Recovered %d frames from WAL file %s %s-mjX %s-mjX foreign key constraint failed foreign key constraint failed unable to use function %s in the requested context unable to use function %s in the requested context abort at %d in [%s]: %s abort at %d in [%s]: %s constraint failed at %d in [%s] constraint failed at %d in [%s] cannot open savepoint - SQL statements in progress cannot open savepoint - SQL statements in progress no such savepoint: %s no such savepoint: %s cannot %s savepoint - SQL statements in progress cannot %s savepoint - SQL statements in progress cannot rollback transaction - SQL statements in progress cannot rollback transaction - SQL statements in progress cannot commit transaction - SQL statements in progress cannot commit transaction - SQL statements in progress sqlite_master sqlite_master SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid cannot change %s wal mode from within a transaction cannot change %s wal mode from within a transaction statement aborts at %d: [%s] %s statement aborts at %d: [%s] %s misuse of aliased aggregate %s misuse of aliased aggregate %s %s: %s.%s.%s %s: %s.%s.%s %s: %s.%s %s: %s.%s %s: %s %s: %s %r %s BY term out of range - should be between 1 and %d %r %s BY term out of range - should be between 1 and %d too many terms in %s BY clause too many terms in %s BY clause Expression tree is too large (maximum depth %d) Expression tree is too large (maximum depth %d) variable number must be between ?1 and ?%d variable number must be between ?1 and ?%d too many SQL variables too many SQL variables too many columns in %s too many columns in %s oversized integer: %s%s oversized integer: %s%s misuse of aggregate: %s() misuse of aggregate: %s() %.*s"%w"%s %.*s"%w"%s %s%.*s"%w" %s%.*s"%w" %s OR name=%Q %s OR name=%Q type='trigger' AND (%s) type='trigger' AND (%s) there is already another table or index with this name: %s there is already another table or index with this name: %s sqlite_ sqlite_ table %s may not be altered table %s may not be altered view %s may not be altered view %s may not be altered UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s; UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s; UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger'); UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger'); UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s; UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s; Cannot add a PRIMARY KEY column Cannot add a PRIMARY KEY column UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q sqlite_altertab_%s sqlite_altertab_%s CREATE TABLE %Q.%s(%s) CREATE TABLE %Q.%s(%s) DELETE FROM %Q.%s WHERE tbl=%Q DELETE FROM %Q.%s WHERE tbl=%Q SELECT tbl, idx, stat FROM %Q.sqlite_stat1 SELECT tbl, idx, stat FROM %Q.sqlite_stat1 invalid name: "%s" invalid name: "%s" too many attached databases - max %d too many attached databases - max %d database %s is already in use database %s is already in use unable to open database: %s unable to open database: %s no such database: %s no such database: %s cannot detach database %s cannot detach database %s database %s is locked database %s is locked %s %T cannot reference objects in database %s %s %T cannot reference objects in database %s object name reserved for internal use: %s object name reserved for internal use: %s there is already an index named %s there is already an index named %s too many columns on %s too many columns on %s duplicate column name: %s duplicate column name: %s default value of column [%s] is not constant default value of column [%s] is not constant table "%s" has more than one primary key table "%s" has more than one primary key no such collation sequence: %s no such collation sequence: %s CREATE %s %.*s CREATE %s %.*s UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d view %s is circularly defined view %s is circularly defined table %s may not be dropped table %s may not be dropped use DROP TABLE to delete table %s use DROP TABLE to delete table %s use DROP VIEW to delete view %s use DROP VIEW to delete view %s DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger' DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger' DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q foreign key on %s should reference only one column of table %T foreign key on %s should reference only one column of table %T number of columns in foreign key does not match the number of columns in the referenced table number of columns in foreign key does not match the number of columns in the referenced table unknown column "%s" in foreign key definition unknown column "%s" in foreign key definition indexed columns are not unique indexed columns are not unique table %s may not be indexed table %s may not be indexed views may not be indexed views may not be indexed virtual tables may not be indexed virtual tables may not be indexed there is already a table named %s there is already a table named %s index %s already exists index %s already exists sqlite_autoindex_%s_%d sqlite_autoindex_%s_%d table %s has no column named %s table %s has no column named %s CREATE%s INDEX %.*s CREATE%s INDEX %.*s INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q); INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q); no such index: %S no such index: %S index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped DELETE FROM %Q.%s WHERE name=%Q AND type='index' DELETE FROM %Q.%s WHERE name=%Q AND type='index' DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q a JOIN clause is required before %s a JOIN clause is required before %s unable to identify the object to be reindexed unable to identify the object to be reindexed table %s may not be modified table %s may not be modified cannot modify %s because it is a view cannot modify %s because it is a view foreign key mismatch foreign key mismatch table %S has %d columns but %d values were supplied table %S has %d columns but %d values were supplied %d values for %d columns %d values for %d columns table %S has no column named %s table %S has no column named %s %s.%s may not be NULL %s.%s may not be NULL PRIMARY KEY must be unique PRIMARY KEY must be unique automatic extension loading failed: %s automatic extension loading failed: %s foreign_key_list foreign_key_list malformed database schema (%s) malformed database schema (%s) %s - %s %s - %s unsupported file format unsupported file format SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid unknown or unsupported join type: %T %T%s%T unknown or unsupported join type: %T %T%s%T RIGHT and FULL OUTER JOINs are not currently supported RIGHT and FULL OUTER JOINs are not currently supported a NATURAL join may not have an ON or USING clause a NATURAL join may not have an ON or USING clause cannot have both ON and USING clauses in the same join cannot have both ON and USING clauses in the same join cannot join using column %s - column not present in both tables cannot join using column %s - column not present in both tables %s.%s %s.%s %s:%d %s:%d no such index: %s no such index: %s sqlite_subquery_%p_ sqlite_subquery_%p_ no such table: %s no such table: %s cannot create %s trigger on view: %S cannot create %s trigger on view: %S cannot create INSTEAD OF trigger on table: %S cannot create INSTEAD OF trigger on table: %S INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q') INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q') no such trigger: %S no such trigger: %S no such column: %s no such column: %s cannot VACUUM - SQL statements in progress cannot VACUUM - SQL statements in progress PRAGMA vacuum_db.synchronous=OFF PRAGMA vacuum_db.synchronous=OFF SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0 SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0 SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %' SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %' SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %' SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %' SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0 SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0 SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence' SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence' SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence'; SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence'; INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0) INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0) UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d vtable constructor failed: %s vtable constructor failed: %s vtable constructor did not declare schema: %s vtable constructor did not declare schema: %s no such module: %s no such module: %s table %s: xBestIndex returned an invalid plan table %s: xBestIndex returned an invalid plan at most %d tables in a join at most %d tables in a join cannot use index: %s cannot use index: %s the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers unable to close due to unfinished backup operation unable to close due to unfinished backup operation unknown database: %s unknown database: %s no such vfs: %s no such vfs: %s database corruption at line %d of [%.10s] database corruption at line %d of [%.10s] misuse at line %d of [%.10s] misuse at line %d of [%.10s] cannot open file at line %d of [%.10s] cannot open file at line %d of [%.10s] sqlite3_open sqlite3_open sqlite3_prepare sqlite3_prepare sqlite3_step sqlite3_step sqlite3_column_text sqlite3_column_text sqlite3_column_int sqlite3_column_int sqlite3_column_int64 sqlite3_column_int64 sqlite3_finalize sqlite3_finalize sqlite3_close sqlite3_close sqlite3_exec sqlite3_exec f:\Projects\VS2005\WebBrowserPassView\Release\WebBrowserPassView.pdb f:\Projects\VS2005\WebBrowserPassView\Release\WebBrowserPassView.pdb msvcrt.dll msvcrt.dll _wcmdln _wcmdln COMCTL32.dll COMCTL32.dll VERSION.dll VERSION.dll FindCloseUrlCache FindCloseUrlCache FindNextUrlCacheEntryW FindNextUrlCacheEntryW FindFirstUrlCacheEntryW FindFirstUrlCacheEntryW WININET.dll WININET.dll GetWindowsDirectoryW GetWindowsDirectoryW KERNEL32.dll KERNEL32.dll EnumChildWindows EnumChildWindows USER32.dll USER32.dll GDI32.dll GDI32.dll comdlg32.dll comdlg32.dll RegCloseKey RegCloseKey RegOpenKeyExW RegOpenKeyExW RegEnumKeyExW RegEnumKeyExW ADVAPI32.dll ADVAPI32.dll ShellExecuteW ShellExecuteW SHELL32.dll SHELL32.dll ole32.dll ole32.dll 5JEw%Xg 5JEw%Xg hXXp://VVV.usertrust.com1 hXXp://VVV.usertrust.com1 3hXXp://crl.usertrust.com/AddTrustExternalCARoot.crl05 3hXXp://crl.usertrust.com/AddTrustExternalCARoot.crl05 hXXp://ocsp.usertrust.com0 hXXp://ocsp.usertrust.com0 1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl05 1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl05 1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl0t 1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl0t 1hXXp://crt.usertrust.com/UTNAddTrustObject_CA.crt0% 1hXXp://crt.usertrust.com/UTNAddTrustObject_CA.crt0% hXXps://secure.comodo.net/CPS0A hXXps://secure.comodo.net/CPS0A 0hXXp://crl.comodoca.com/COMODOCodeSigningCA2.crl0r 0hXXp://crl.comodoca.com/COMODOCodeSigningCA2.crl0r 0hXXp://crt.comodoca.com/COMODOCodeSigningCA2.crt0$ 0hXXp://crt.comodoca.com/COMODOCodeSigningCA2.crt0$ hXXp://ocsp.comodoca.com0 hXXp://ocsp.comodoca.com0 support@nirsoft.net0 support@nirsoft.net0 t{SSh t{SSh v%SSW v%SSW Mail PassView Mail PassView Mozilla\Profiles Mozilla\Profiles Software\Mozilla\Mozilla Thunderbird Software\Mozilla\Mozilla Thunderbird %s\Main %s\Main sqlite3.dll sqlite3.dll nss3.dll nss3.dll %programfiles%\Mozilla Thunderbird %programfiles%\Mozilla Thunderbird AddExportHeaderLine AddExportHeaderLine %s %s %s %s %s %s HTTPMail User Name HTTPMail User Name SMTP USer Name SMTP USer Name HTTPMail Server HTTPMail Server SMTP Server SMTP Server POP3 Password2 POP3 Password2 IMAP Password2 IMAP Password2 HTTPMail Password2 HTTPMail Password2 SMTP Password2 SMTP Password2 POP3 Port POP3 Port IMAP Port IMAP Port HTTPMail Port HTTPMail Port SMTP Port SMTP Port HTTPMail Secure Connection HTTPMail Secure Connection SMTP Secure Connection SMTP Secure Connection SMTP Display Name SMTP Display Name SMTP Email Address SMTP Email Address POP3 Password POP3 Password IMAP Password IMAP Password HTTP Password HTTP Password SMTP Password SMTP Password HTTP User HTTP User SMTP User SMTP User HTTP Server URL HTTP Server URL HTTP Port HTTP Port HTTPMail Use SSL HTTPMail Use SSL SMTP Use SSL SMTP Use SSL %s\%s %s\%s PopPort PopPort PopPassword PopPassword SMTPAccount SMTPAccount SMTPServer SMTPServer SMTPPort SMTPPort SMTPLogSecure SMTPLogSecure SMTPPassword SMTPPassword %s\Accounts %s\Accounts LoginName LoginName SavePasswordText SavePasswordText ESMTPUsername ESMTPUsername ESMTPPassword ESMTPPassword POP3Password POP3Password fb.dat fb.dat %s@gmail.com %s@gmail.com %s@yahoo.com %s@yahoo.com Software\Microsoft\Windows Messaging Subsystem\Profiles Software\Microsoft\Windows Messaging Subsystem\Profiles Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles %s %s%s %ssmtp smtp advapi32.dll advapi32.dll comctl32.dll comctl32.dll *.ini *.ini netmsg.dll netmsg.dll Error %d: %s Error %d: %s %s (%s) %s (%s) menu_%d menu_%d dialog_%d dialog_%d TranslatorURL TranslatorURL _lng.ini _lng.ini %-18s: %s %-18s: %s %%-%d.%ds %%-%d.%ds | %s | %s | %s | %s |
---|---|---|---|---|---|
%s | %s | ||||
%s | %s bgcolor="%s" bgcolor="%s" %s %s %s%s> %s%s> %s> %s> report.html report.html *.txt *.txt *.htm;*.html *.htm;*.html *.xml *.xml *.csv *.csv Software\NirSoft\MailPassView Software\NirSoft\MailPassView MailPassView MailPassView /skeepass /skeepass /deleteregkey /deleteregkey Failed to load the executable file ! Failed to load the executable file ! mail.account.account mail.account.account mail.server mail.server port port mail.identity mail.identity signon.signonfilename signon.signonfilename mailbox://%s@%s mailbox://%s@%s imap://%s@%s imap://%s@%s mailbox://%s mailbox://%s imap://%s imap://%s signons.txt signons.txt signons.sqlite signons.sqlite prefs.js prefs.js Password.NET Messenger Service Password.NET Messenger Service User.NET Messenger Service User.NET Messenger Service Passport.Net\* Passport.Net\* ps:password ps:password windowslive:name= windowslive:name= Exception %8.8X at address %8.8X in module %s Exception %8.8X at address %8.8X in module %s Stack Data: %s Stack Data: %s Code Data: %s Code Data: %s mozsqlite3.dll mozsqlite3.dll psapi.dll psapi.dll pstorec.dll pstorec.dll 5e7e8100-9138-11d1-945a-00c04fc308ff 5e7e8100-9138-11d1-945a-00c04fc308ff 00000000-0000-0000-0000-000000000000 00000000-0000-0000-0000-000000000000 220D5CD0-853A-11D0-84BC-00C04FD43F8F 220D5CD0-853A-11D0-84BC-00C04FD43F8F 220D5CD1-853A-11D0-84BC-00C04FD43F8F 220D5CD1-853A-11D0-84BC-00C04FD43F8F 220D5CC1-853A-11D0-84BC-00C04FD43F8F 220D5CC1-853A-11D0-84BC-00C04FD43F8F 417E2D75-84BD-11D0-84BB-00C04FD43F8F 417E2D75-84BD-11D0-84BB-00C04FD43F8F shell32.dll shell32.dll Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders shlwapi.dll shlwapi.dll %s%s%s%s%s %s%s %ssize="%d" size="%d" color="#%s" color="#%s" width="%s" width="%s"
|