Skip to main content

Gen.Variant.Kazy.423280_f626ea0823


UDS:DangerousObject.Multi.Generic (Kaspersky), Gen:Variant.Kazy.423280 (B) (Emsisoft), Gen:Variant.Kazy.423280 (AdAware), mzpefinder_pcap_file.YR, SearchProtectToolbar.YR, GenericInjector.YR (Lavasoft MAS)Behaviour: Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: f626ea0823df77d84c95b5002fbbabe5

SHA1: 939a154ab1c5e2dd75c1fa245e28660620ed66d1

SHA256: 1b69546bf9bf2175372af9ab5b0a987dc6bcd709d2c4d8c519f0085d319537bf

SSDeep: 384:ZtfgYHcxbRqyHtRV1GWkJDAZubr99YRuzD1blESrUhxEMO:zg7lQyHDKRESrUhxE3

Size: 16896 bytes

File type: EXE

Platform: WIN32

Entropy: Not Packed

PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6

Company: no certificate found

Created at: 2014-08-05 00:35:54

Analyzed on: WindowsXP SP3 32-bit

Summary: Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Malware creates the following process(es):

nsq12.exe:2780
cltmngui.exe:2936
nsm16.exe:3528
CltMngSvc.exe:2852
CltMngSvc.exe:2840
cltmng.exe:2924
nsj4.exe:1052
nsj4.exe:588
nsqC.tmp:2596
nwi1xfrt.h3a.exe:1968

The Malware injects its code into the following process(es):

%original file name%.exe:1392

Mutexes

The following mutexes were created/opened:

ZonesLockedCacheCounterMutexZonesCacheCounterMutexZonesCounterMutexRasPbFileShimCacheMutex

File activity

The process nsq12.exe:2780 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsl14.tmp\inetc.dll (30 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsl14.tmp\a.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl14.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb13.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl14.tmp\inetc.dll (0 bytes)

The process cltmngui.exe:2936 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\UI\rep\UIRepository.dat (1057 bytes)

The process nsm16.exe:3528 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsr18.tmp\inetc.dll (30 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsh17.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr18.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr18.tmp\a.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr18.tmp\inetc.dll (0 bytes)

The process CltMngSvc.exe:2852 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Program Files%\SearchProtect\Main\rep\SystemRepository.dat (9 bytes)

The process cltmng.exe:2924 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\rep\UserSettings.dat (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\rep\UserRepository.dat (1751 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\STG\Init_15.tmp (0 bytes)

The process nsj4.exe:1052 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsy7.tmp (11152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\StubUtils.dll (9320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsqC.txt (71 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsqC.tmp (434424 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\SPSetup[1].exe (434424 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsi6.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\inet.txt2_M167B4029-C0F6-4111-93DA-0055D3CC0504_{341A4053-076E-4F2B-818E-EE372394AF53} (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\StubUtils.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsqC.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\System.dll (0 bytes)

The process nsj4.exe:588 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\StubUtils.dll (9320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsqA.tmp (11152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsdD.txt (79 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsdD.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\StubUtils.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\inet.txt2_M167B4029-C0F6-4111-93DA-0055D3CC0504_{BC263492-E070-4AA7-B715-E0E9A2E4DEDC} (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp (0 bytes)

The process %original file name%.exe:1392 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nwi1xfrt.h3a.exe (18340 bytes)

The process nsqC.tmp:2596 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Program Files%\SearchProtect\UI\dialogs\Images\close-win-def.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\checkbox_checked.png (360 bytes)
%Program Files%\SearchProtect\UI\dialogs\settings\settings.js (11 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bgUninstall.png (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\15.tmp (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\v.png (1 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\SPVC64.dll (103387 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\SPVC32.dll (287458 bytes)
%Program Files%\SearchProtect\EULA.txt (784 bytes)
%Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.html (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\Apply-onclick.png (2 bytes)
%Program Files%\SearchProtect\Main\bin\uninstall.exe (33747 bytes)
%Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\rep\UserRepository.dat (478 bytes)
%Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.css (5 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\menu-selected.png (3 bytes)
%Program Files%\SearchProtect\UI\dialogs\settings\defaults.js (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\radio-button2.png (886 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\btnSilver.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\main.js (10 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\checkbox.png (378 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\btnClose.png (933 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsuF.tmp (691196 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\json2.min.js (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bgSettings.png (12 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\SPTool64.exe (50351 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\hez-def.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\defaults.js (983 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\hez.png (256 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\close-win-over-click.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\radio-button.png (859 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bg.png (784 bytes)
%Program Files%\SearchProtect\UI\dialogs\uninstall\defaults.js (1 bytes)
%Program Files%\SearchProtect\UI\bin\cltmngui.exe (100378 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\gray-bg.png (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\style.css (7 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bgSettingsDS.png (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\SPtool.dll (81046 bytes)
%Program Files%\SearchProtect\Main\bin\CltMngSvc.exe (97773 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\cltmng.exe (170836 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bg-uninstall.png (11 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\info-icon.png (424 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\browsers32.sdb (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\button-bg.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\icon-win.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq12.exe (5520 bytes)
%Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.js (5 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\radio-button-def.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\SPDialogAPI.js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm16.exe (5520 bytes)
%Program Files%\SearchProtect\UI\dialogs\settings.html (8 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bgNotif.png (9 bytes)
%Program Files%\SearchProtect\UI\dialogs\protection\protection.html (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\settings\settings.html (12 bytes)
%Program Files%\SearchProtect\UI\dialogs\protection\defaults.js (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.html (5 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\Settings-icon.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\bg-with-logo.png (1552 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\radio-button-selected.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.js (7 bytes)
%Program Files%\SearchProtect\UI\dialogs\protection\protection.js (7 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\menu-rollover.png (1 bytes)
%Program Files%\SearchProtect\Main\rep\SystemRepository.dat (2225 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\text-field.png (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\protection\protection.css (4 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\checkbox_def.png (274 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\inetc.dll (784 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\dialogUtils.js (1 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\btnBlue.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ct3326582[1] (763 bytes)
%Program Files%\SearchProtect\Main\bin\SPTool.dll (81732 bytes)
%Program Files%\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv11.tmp (763 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (6584 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\Apply-default.png (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\settings\settings.css (8 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\Apply-Rollover.png (2 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\hez-selected.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\System.dll (11 bytes)
%Program Files%\SearchProtect\UI\dialogs\Images\x.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Program Files%\SearchProtect\UI\dialogs\protectionDS\defaults.js (1 bytes)
%Program Files%\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (8560 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\SPtool.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoE.tmp (0 bytes)

The process nwi1xfrt.h3a.exe:1968 makes changes in the file system.


The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\downloadstub[1] (52 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc2.tmp (7189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj4.exe (11736 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso5.tmp (52 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\MiniStubUtils.dll (7192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\spstub[1].exe (11736 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj4.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso5.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\inet.txt1_M167B4029-C0F6-4111-93DA-0055D3CC0504 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\MiniStubUtils.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\inetc.dll (0 bytes)

Registry activity

The process nsq12.exe:2780 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl14.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BE 88 B0 69 D8 12 04 2E DF D8 7B 27 C2 EA 7B 36"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process cltmngui.exe:2936 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 21 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B0 2B 76 BB 6B 07 1F 0F CA E3 11 8D DA 6E B4 71"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nsm16.exe:3528 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl14.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsy8.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsr18.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 22 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3F C9 A7 04 A3 86 5B 2E FA B5 DD A9 E6 95 4C 7D"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process CltMngSvc.exe:2852 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\LocalService\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\SearchProtect]
"TS" = "0"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 03 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\LocalService\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1F 1C 2E FD AB 70 4F 2D 82 50 13 13 4B 06 2B A4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\LocalService\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The Malware deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoConfigURL"
"ProxyServer"

The process CltMngSvc.exe:2840 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2A D9 15 49 28 FB BC FA AE 6E 58 2E 6E B4 01 A9"

The process cltmng.exe:2924 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 20 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0D 92 F0 A4 55 D6 DA 58 3A 66 20 00 63 A9 52 B4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nsj4.exe:1052 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl14.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsy8.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 96 20 19 C0 CD E2 7F 47 2D B9 01 6B DE 98 BB"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nsj4.exe:588 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "62 CF 54 A0 F9 2B 0D 83 08 A6 6E E1 CE AC 4A A7"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process %original file name%.exe:1392 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DC A0 2E 94 F8 1E EC 9D 8A 2D DB 1A 19 86 67 7C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"nwi1xfrt.h3a.exe" = "Search Protect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process nsqC.tmp:2596 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\SearchProtect]
"SPID" = "SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs" = "C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"Publisher" = "Client Connect LTD"

[HKLM\SOFTWARE\SearchProtect]
"Environment" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"UninstallString" = "C:\PROGRA~1\SearchProtect\Main\bin\uninstall.exe /S"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"DisplayVersion" = "2.16.20.192"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\SearchProtect]
"InstallDir" = "C:\PROGRA~1\SearchProtect"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"DisplayIcon" = "C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe"
"DisplayName" = "Search Protect"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "01 14 8D 8F 24 40 A2 67 32 75 FA 40 F7 CE 3C 88"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The Malware disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallCleanUp"

The process nwi1xfrt.h3a.exe:1968 makes changes in the system registry.


The Malware creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsfB.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl14.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsy8.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsr18.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsr3.tmp\,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D8 AF 0A C3 F5 35 C1 C8 AF 99 94 A2 DE 57 D4 58"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
02c162fd7706e887624dfcc410979355c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsm16.exe
02c162fd7706e887624dfcc410979355c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsq12.exe
81c1d94ffd2c170a86c4c0c7b183e9efc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsqC.tmp
0b813086a3400aafa1639d08823fbd46c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nwi1xfrt.h3a.exe
a90faa6449a4beca4466564510991bb1c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\spstub[1].exe
81c1d94ffd2c170a86c4c0c7b183e9efc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\SPSetup[1].exe
49010923a074f8c93b0cbc10600187cdc:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe
41ea3a902bcc76650664b8a10e4a1722c:\Program Files\SearchProtect\Main\bin\SPTool.dll
75323751eb811da0bd13430d8cb81d83c:\Program Files\SearchProtect\Main\bin\uninstall.exe
fe7292c8fc7d1a0314a26e253af2254dc:\Program Files\SearchProtect\SearchProtect\bin\SPTool64.exe
95d43017acf77911d801bbda1125d428c:\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll
f303bf7e33c8e5ed667d751501981c63c:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
6c365122d30012d9316cd1dee0c005d4c:\Program Files\SearchProtect\SearchProtect\bin\SPVC64.dll
9d0e94e14d5808cd42cf28b076f19fb1c:\Program Files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
2875ed5399cd95ad378b35097311fb1ec:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe
fcd5525df15e9f59707ae0cbe0d636c2c:\Program Files\SearchProtect\UI\bin\cltmngui.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    nsq12.exe:2780
    cltmngui.exe:2936
    nsm16.exe:3528
    CltMngSvc.exe:2852
    CltMngSvc.exe:2840
    cltmng.exe:2924
    nsj4.exe:1052
    nsj4.exe:588
    nsqC.tmp:2596
    nwi1xfrt.h3a.exe:1968

  2. Delete the original Malware file.
  3. Delete or disinfect the following files created/modified by the Malware:

    %Documents and Settings%\%current user%\Local Settings\Temp\nsl14.tmp\inetc.dll (30 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\UI\rep\UIRepository.dat (1057 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsr18.tmp\inetc.dll (30 bytes)
    %Program Files%\SearchProtect\Main\rep\SystemRepository.dat (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\rep\UserSettings.dat (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect\rep\UserRepository.dat (1751 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy7.tmp (11152 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\StubUtils.dll (9320 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsqC.txt (71 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy8.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsqC.tmp (434424 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\SPSetup[1].exe (434424 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\StubUtils.dll (9320 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsqA.tmp (11152 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsfB.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsdD.txt (79 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nwi1xfrt.h3a.exe (18340 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\close-win-def.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\checkbox_checked.png (360 bytes)
    %Program Files%\SearchProtect\UI\dialogs\settings\settings.js (11 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bgUninstall.png (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\15.tmp (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\v.png (1 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\SPVC64.dll (103387 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\SPVC32.dll (287458 bytes)
    %Program Files%\SearchProtect\EULA.txt (784 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.html (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\Apply-onclick.png (2 bytes)
    %Program Files%\SearchProtect\Main\bin\uninstall.exe (33747 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.css (4 bytes)
    %Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.css (5 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\menu-selected.png (3 bytes)
    %Program Files%\SearchProtect\UI\dialogs\settings\defaults.js (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\radio-button2.png (886 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\btnSilver.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\main.js (10 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\checkbox.png (378 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\btnClose.png (933 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsuF.tmp (691196 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\json2.min.js (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bgSettings.png (12 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\SPTool64.exe (50351 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\hez-def.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\defaults.js (983 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\hez.png (256 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\close-win-over-click.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\radio-button.png (859 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bg.png (784 bytes)
    %Program Files%\SearchProtect\UI\dialogs\uninstall\defaults.js (1 bytes)
    %Program Files%\SearchProtect\UI\bin\cltmngui.exe (100378 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\gray-bg.png (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\style.css (7 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bgSettingsDS.png (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\SPtool.dll (81046 bytes)
    %Program Files%\SearchProtect\Main\bin\CltMngSvc.exe (97773 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\cltmng.exe (170836 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bg-uninstall.png (11 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\info-icon.png (424 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\browsers32.sdb (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\button-bg.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\icon-win.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsq12.exe (5520 bytes)
    %Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.js (5 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\radio-button-def.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\SPDialogAPI.js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsm16.exe (5520 bytes)
    %Program Files%\SearchProtect\UI\dialogs\settings.html (8 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bgNotif.png (9 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protection\protection.html (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\settings\settings.html (12 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protection\defaults.js (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\uninstall\uninstall.html (5 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\Settings-icon.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\bg-with-logo.png (1552 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\radio-button-selected.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protectionDS\protectionDS.js (7 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protection\protection.js (7 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\menu-rollover.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\text-field.png (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protection\protection.css (4 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\checkbox_def.png (274 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\inetc.dll (784 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\dialogUtils.js (1 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\btnBlue.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ct3326582[1] (763 bytes)
    %Program Files%\SearchProtect\Main\bin\SPTool.dll (81732 bytes)
    %Program Files%\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js (3312 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsv11.tmp (763 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (6584 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\Apply-default.png (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\settings\settings.css (8 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\Apply-Rollover.png (2 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\hez-selected.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp\System.dll (11 bytes)
    %Program Files%\SearchProtect\UI\dialogs\Images\x.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
    %Program Files%\SearchProtect\UI\dialogs\protectionDS\defaults.js (1 bytes)
    %Program Files%\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (8560 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\downloadstub[1] (52 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsc2.tmp (7189 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsj4.exe (11736 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nso5.tmp (52 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\MiniStubUtils.dll (7192 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\spstub[1].exe (11736 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name:
Product Name: RegistryReader32_64
Product Version: 1.0.0.0
Legal Copyright: Copyright (c) 2014
Legal Trademarks:
Original Filename: 37_3834e6081a.exe
Internal Name: 37_3834e6081a.exe
File Version: 1.0.0.0
File Description: RegistryReader32_64
Comments:
Language: English (United Kingdom)

Company Name: Product Name: RegistryReader32_64Product Version: 1.0.0.0Legal Copyright: Copyright (c) 2014Legal Trademarks: Original Filename: 37_3834e6081a.exeInternal Name: 37_3834e6081a.exeFile Version: 1.0.0.0File Description: RegistryReader32_64Comments: Language: English (United Kingdom)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text819213892143363.55876736519f3b730b3482156d2bb98c0b9d
.rsrc24576140015362.80562fdd2ec17b48dc57f10426d6774541e81
.reloc32768125120.056519465f944cce555ad1612ddb16788bec74

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL IP
hxxp://e9287.g.akamaiedge.net/sp-downloader.exe
hxxp://jazz-1846647836.us-east-1.elb.amazonaws.com/
hxxp://e9287.g.akamaiedge.net/stub/spstub.exe
hxxp://sp-download.va.spccint.com/download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP
hxxp://e9287.g.akamaiedge.net/Installer/2.16.20.192/SPSetup.exe
hxxp://spms-download.va.spccint.com/download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP
hxxp://e3937.g.akamaiedge.net/spinstallersettings/2.16.20.192/test/ABTEST_SETTINGS_ID/carrierId/ct3326582
hxxp://sp-ip2location.va.spccint.com/ip/?client=sp
hxxp://a1015.g1.akamai.net/UP/settings/?ctid=CT3326582&UM=&c=UA&DUM=2
hxxp://stats.getprivate.net/index.php/api/offer-status144.76.116.117
hxxp://sp-storage.spccinta.com/stub/spstub.exe23.9.111.99
hxxp://sp-storage.spccinta.com/sp-downloader.exe23.9.111.99
hxxp://orbtr-installer.databssint.com/54.225.157.67
hxxp://sp-settings.spccint.com/spinstallersettings/2.16.20.192/test/ABTEST_SETTINGS_ID/carrierId/ct332658223.7.71.61
hxxp://sp-storage.spccinta.com/Installer/2.16.20.192/SPSetup.exe23.9.111.99
hxxp://c.api.seccint.com/UP/settings/?ctid=CT3326582&UM=&c=UA&DUM=2199.117.103.136
hxxp://sp-download.spccint.com/download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP199.101.114.124
hxxp://sp-ip2location.spccint.com/ip/?client=sp199.101.114.209
hxxp://spms-download.spccint.com/download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP199.101.115.231
hxxp://sp-alive-msg.databssint.com/54.225.157.67
hxxp://sp-usage.databssint.com/107.22.223.150
hxxp://sp-installer.databssint.com/107.22.223.150
servicemap.spccint.com23.7.71.61
c-sp-download.spccint.com23.201.24.11
sp-autoupdate.spccint.com23.7.71.61

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP HTTP/1.1

Accept: application/sp-download-v2

User-Agent: NSIS_Inetc (Mozilla)

Host: spms-download.spccint.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Length: 79

Content-Type: application/json; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sun, 17 Aug 2014 17:57:35 GMT

"http:\/\/spms-storage.spccint.com\/Installer\/0.0.0.0\/OrbiterInstaller.exe 1"HTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Pragma: no-cache..Content-Length: 79..Content-Type: application/json; charset=utf-8..Expires: -1..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 17 Aug 2014 17:57:35 GMT.."http:\/\/spms-storage.spccint.com\/Installer\/0.0.0.0\/OrbiterInstaller.exe 1"..

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: orbtr-installer.databssint.com

Content-Length: 695

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"orbtr_Stub_Init", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false -orbiter", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "ORBTR", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1"}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:05 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:05 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive......

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: orbtr-installer.databssint.com

Content-Length: 895

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"orbtr_Stub_DownloadComplete", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false -orbiter", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "ORBTR", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0","result":"success","reason":"50" , "log":"10#", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1", "Installer_download_time_sec":"1", "Installer_url":"hXXp://spms-storage.spccint.com/Installer/0.0.0.0/OrbiterInstaller.exe", "ExtraData":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:06 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:06 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive......

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: orbtr-installer.databssint.com

Content-Length: 791

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"orbtr_Stub_Complete", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false -orbiter", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "ORBTR", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0","result":"success","reason":"50" , "log":"10#16#", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1", "Installer_time_sec":"1", "ExtraData":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:07 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

GET /stub/spstub.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-storage.spccinta.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Last-Modified: Sun, 17 Aug 2014 20:51:56 GMT

Accept-Ranges: bytes

ETag: "8089503af264c1568a46208aea546eff"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 177352

Date: Sun, 17 Aug 2014 17:59:01 GMT

Connection: keep-alive

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........#yd.B.7.B.7.B.7..z7.B.7..l7.B.7.B.7.B.7.:.7.B.7...7.B.7.:.7.B.7Rich.B.7........................PE..L....q.N.................d.......B..K5............@..........................p!......~...............................................`!.0............................................................................................................text....c.......d.................. ..`.rdata...............h..............@..@.data....f..........................@....ndata...P...............................rsrc...0....`!.....................@..@................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H......G..H.P.u..u..u...|.@..K...SV.5..G.W.E.P.u.....@..e...E..E.P.u.....@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.......P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.u.....@._^3.[.....L$....G...i. @...T.....tUVW.q.3.;5..G.sD..i. @...D..S.....t.G.....t...O..t .....u...3....3...F. @..;5..G.r.[_^...U..QQ.U.

<<< skipped >>>

GET /ip/?client=sp HTTP/1.1

User-Agent: SearchProtect;2.16.20.192;Microsoft Windows XP;SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A

Accept: */*

Host: sp-ip2location.spccint.com

HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 181

Content-Type: application/json; charset=text/plain

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sun, 17 Aug 2014 17:59:39 GMT

{"Location":{"City":"KHARKIV","Country":"UKRAINE","CountryCode":"UA","IP":"193.138.244.231","Latitude":49.98081,"Longitude":36.25272,"Region":"KHARKIVS'KA OBLAST'"},"Language":"uk"}HTTP/1.1 200 OK..Cache-Control: private..Content-Length: 181..Content-Type: application/json; charset=text/plain..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 17 Aug 2014 17:59:39 GMT..{"Location":{"City":"KHARKIV","Country":"UKRAINE","CountryCode":"UA","IP":"193.138.244.231","Latitude":49.98081,"Longitude":36.25272,"Region":"KHARKIVS'KA OBLAST'"},"Language":"uk"}..

GET /UP/settings/?ctid=CT3326582&UM=&c=UA&DUM=2 HTTP/1.1

User-Agent: SearchProtect;2.16.20.192;Microsoft Windows XP;SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A

Accept: */*

Host: c.api.seccint.com

HTTP/1.1 200 OK

Content-Type: application/json; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNetMvc-Version: 3.0

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Content-Length: 4229

Cache-Control: private, max-age=3600

Expires: Sun, 17 Aug 2014 18:59:40 GMT

Date: Sun, 17 Aug 2014 17:59:40 GMT

Connection: keep-alive

{"GeneralId":null,"Ctid":"CT3326582","ProviderId":2,"ProviderName":"Bing","UserIP":"193.138.244.231","UserLanguage":"ru","ToolbarLanguage":"en","EntityLanguage":"en","CountryShortCode":"UA","IsUserRTL":false,"IsToolbarRTL":false,"IsEntityRTL":false,"ShowClientDialog":true,"HomePageUrl":"hXXp://VVV.trovi.com/?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=SB_CUI&UM=6&UP=UP_ID","IsCustomizedHomepage":false,"HomePageButtonUrl":"hXXp://VVV.trovi.com/?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=SB_CUI&UM=6&UP=UP_ID&SAT=HPB","UM":"","SearchDomain":"VVV.trovi.com","ToolbarSearchBox":{"History":{"IsEnabled":true,"Position":1,"MaxAmount":5,"Label":{"Text":"History"}},"Verticals":[{"Name":"SearchImages","SearchUrl":"hXXp://VVV.trovi.com/?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=67&SearchType=SearchImages&CUI=SB_CUI&UM=6&UP=UP_ID&q=UCM_SEARCH_TERM","EmptySearchUrl":"hXXp://VVV.trovi.com/?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=67&SearchType=SearchImages&CUI=SB_CUI&UM=6&UP=UP_ID"}],"EmptySearchUrl":"http://VVV.trovi.com/?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=67&CUI=SB_CUI&UM=6&UP=UP_ID","SearchUrl":"hXXp://VVV.trovi.com/Results.aspx?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=67&CUI=SB_CUI&UM=6&UP=UP_ID&q=UCM_SEARCH_TERM","Suggest":{"SearchResultsUrl":"hXXp://VVV.trovi.com/Results.aspx?gd=&ctid=CT3326582&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=67&Su

<<< skipped >>>

GET /sp-downloader.exe HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0

Host: sp-storage.spccinta.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Sun, 17 Aug 2014 20:40:02 GMT

Accept-Ranges: bytes

ETag: "32b94cf0ed04298eaab31147eadd7760"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 145928

Date: Sun, 17 Aug 2014 17:58:57 GMT

Connection: keep-alive

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........#yd.B.7.B.7.B.7..z7.B.7..l7.B.7.B.7.B.7.:.7.B.7...7.B.7.:.7.B.7Rich.B.7........................PE..L....q.N.................d.......B..K5............@..........................p......wA...............................................`..(...........8"...............................................................................................text....c.......d.................. ..`.rdata...............h..............@..@.data....f..........................@....ndata...P...............................rsrc...(....`......................@..@................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H......G..H.P.u..u..u...|.@..K...SV.5..G.W.E.P.u.....@..e...E..E.P.u.....@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.......P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.u.....@._^3.[.....L$....G...i. @...T.....tUVW.q.3.;5..G.sD..i. @...D..S.....t.G.....t...O..t .....u...3....3...F. @..;5..G.r.[_^...U..QQ.U.

<<< skipped >>>

POST /index.php/api/offer-status HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: stats.getprivate.net

Content-Length: 93

Expect: 100-continue

Connection: Close

HTTP/1.1 100 Continue

....

GET /spinstallersettings/2.16.20.192/test/ABTEST_SETTINGS_ID/carrierId/ct3326582 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-settings.spccint.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Content-Type: application/json; charset=text/plain

Last-Modified: Thu, 07 Aug 2014 07:47:35 GMT

ETag: "7ace2b0a2d45a9208d14608e8a3fea78"

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Content-Length: 763

Cache-Control: private, max-age=900

Expires: Sun, 17 Aug 2014 18:14:30 GMT

Date: Sun, 17 Aug 2014 17:59:30 GMT

Connection: keep-alive

{"InstallerSettings":{"CHExtension_Id":null,"CHExtension_LandingPage":null,"CHExtension_Name":null,"DEFAULT_CMD":"-carrier_type=CTID -carrier_id=CT3331172 -Platform=all -startpage=true -defaultsearch=true -install_time_revert=true","DUM":"2","InstallSPPDriver":null,"IsAUAllowednoTB":"true","LOST_USERS":"false","PING":"false","SERVICE_LOST_USERS":null,"TbExternalAssetsEnable":"true","UNINSTALL_PING":"false"},"AbTestSettings":{"Experiment":"","Variant":"","TestParameter":""},"CarrierSettings":{"CHExtensionMode":"false","v_env":"true","v_env_10":"true","v_env_12":"false"},"signature":"PPJUtVBuf3mq4bSjHfCsPw0GVGgp99IghgIBJ9ghQyHjTCEGgcsEffb099GrCK7NwFnh16V1V6GO1QUTahcxWN9Saw2WlvY KWSHhWpPzWwBcHSyChLzrmENQcLwfqx00VEJYOFQfuJlUaRc7cOOrUha8SZCLWiPBJ6S2ajhIuA="}HTTP/1.1 200 OK..Content-Type: application/json; charset=text/plain..Last-Modified: Thu, 07 Aug 2014 07:47:35 GMT..ETag: "7ace2b0a2d45a9208d14608e8a3fea78"..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Content-Length: 763..Cache-Control: private, max-age=900..Expires: Sun, 17 Aug 2014 18:14:30 GMT..Date: Sun, 17 Aug 2014 17:59:30 GMT..Connection: keep-alive..{"InstallerSettings":{"CHExtension_Id":null,"CHExtension_LandingPage":null,"CHExtension_Name":null,"DEFAULT_CMD":"-carrier_type=CTID -carrier_id=CT3331172 -Platform=all -startpage=true -defaultsearch=true -install_time_revert=true","DUM":"2","InstallSPPDriver":null,"IsAUAllowednoTB":"true","LOST_USERS":"false","PING":"false","SERVICE_LOST_USERS":null,"TbExternalAssetsEnable":

<<< skipped >>>

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 1080

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"install_completed","SP_ID":"SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A","SP_version":"2.16.20.192","OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)","OS_version":"5.1","browser":"InternetExplorer","browser_version":"6.0.2900.5512","carrier_type":"ctid","carrier_ID":"CT3326582","carrier_version":"","carrier_userid":"","carrier_UM":"","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","hp_takeover":"true","other_takeover":"true","environment":"","sequence_timestamp":"1408298355903","profile_number":"1","user_number":"1", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "download_length": 24359, "install_type": "install", "result": "success", "reason": "0","v_env_tests":{"10_ProcessesExists":"0","10_ModuleInjected":"0","10_FakeSPServiceParent":"0","12_ProcessesExists":"0","12_StatusKeyExists":"0"},"v_env_codes":{"10":"0","12":"0"},"channel_id": "", "brand": "SP" , "previous_brand":"", "brand_install_type":"cleanmachine","extra_info":"","Experiment":"","Variant":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:44 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 969

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"install_start","SP_ID":"SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A","SP_version":"2.16.20.192","OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)","OS_version":"5.1","browser":"InternetExplorer","browser_version":"6.0.2900.5512","carrier_type":"ctid","carrier_ID":"CT3326582","carrier_version":"","carrier_userid":"","carrier_UM":"","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","hp_takeover":"true","other_takeover":"true","environment":"","sequence_timestamp":"1408298345543","profile_number":"1","user_number":"1", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "download_length": 24359, "install_type": "install", "result": "SP_RESULT", "reason": "SP_FAIL_REASON","v_env_tests":"V_ENV_TESTS_ALIAS","v_env_codes":"V_ENV_CODES_ALIAS","channel_id": "", "brand": "SP" , "previous_brand":"", "brand_install_type":"","extra_info":"","Experiment":"","Variant":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:34 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

GET /download/CarrierId/ct3326582/CarrierVersion/DEFAULT/CarrierType/ctid/Brand/SP HTTP/1.1

Accept: application/sp-download-v2

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-download.spccint.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: application/json; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sun, 17 Aug 2014 17:59:04 GMT

Content-Length: 71

"http:\/\/sp-storage.spccinta.com\/Installer\/2.16.20.192\/SPSetup.exe"HTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Pragma: no-cache..Content-Type: application/json; charset=utf-8..Expires: -1..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 17 Aug 2014 17:59:04 GMT..Content-Length: 71.."http:\/\/sp-storage.spccinta.com\/Installer\/2.16.20.192\/SPSetup.exe"..

POST / HTTP/1.0

Content-Type: application/json

Accept: */*

Host: sp-usage.databssint.com

Content-Length: 417

Connection: Keep-Alive

Pragma: no-cache

{"SP_ID":"SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A","Experiment":"","Variant":"","oslocale":"","environment":"","OS_version":"5.1","OS_name":"Microsoft Windows XP","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","sequence_timestamp":"1408298348449","SP_version":"2.16.20.192","brand":"SP","action_type":"driver_first_enabled","result":"success","failure_reason":""}

HTTP/1.1 202 Accepted

Access-Control-Allow-Methods: GET,POST,HEAD,OPTIONS,PUT

Access-Control-Allow-Origin: *

Date: Sun, 17 Aug 2014 17:59:36 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Access-Control-Allow-Methods: GET,POST,HEAD,OPTIONS,PUT..Access-Control-Allow-Origin: *..Date: Sun, 17 Aug 2014 17:59:36 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive..

POST / HTTP/1.1

Content-Type: application/json

Accept: */*

User-Agent: SearchProtect;2.16.20.192;Microsoft Windows XP;SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A

Host: sp-alive-msg.databssint.com

Content-Length: 461

Connection: Keep-Alive

Cache-Control: no-cache

{"SP_ID":"SPF8B1E6B3-90B2-4DFC-8D8B-2A44AAB80E5A","SP_version":"2.16.20.192","OS_name":"Microsoft Windows XP","OS_version":"5.1","install_date":"20140817","environment":"","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","Experiment":"","Variant":"","driver_enabled":"false","action_type":"alive","type":"","brand":"SP","carrier_ID":"ct3326582","browser":"InternetExplorer","browser_version":"6.0.2900.5512"}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:39 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:39 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive..

GET /Installer/2.16.20.192/SPSetup.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-storage.spccinta.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Last-Modified: Sun, 17 Aug 2014 20:53:28 GMT

Accept-Ranges: bytes

ETag: "30fa0875de550a8d5c8d3bc251a75073"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 6837632

Date: Sun, 17 Aug 2014 17:59:05 GMT

Connection: keep-alive

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........#yd.B.7.B.7.B.7..z7.B.7..l7.B.7.B.7.B.7.:.7.B.7...7.B.7.:.7.B.7Rich.B.7........................PE..L....q.N.................d.......B..K5............@.......................... *.....5.h...............................................(..y...........=h..............................................................................................text....c.......d.................. ..`.rdata...............h..............@..@.data....f..........................@....ndata....!..............................rsrc....y....(..z..................@..@................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H......G..H.P.u..u..u...|.@..K...SV.5..G.W.E.P.u.....@..e...E..E.P.u.....@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.......P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.u.....@._^3.[.....L$....G...i. @...T.....tUVW.q.3.;5..G.sD..i. @...D..S.....t.G.....t...O..t .....u...3....3...F. @..;5..G.r.[_^...U..QQ.U.

<<< skipped >>>

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 677

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"Stub_Init", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "SP", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1"}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:03 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:03 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive......

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 875

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"Stub_DownloadComplete", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "SP", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0","result":"success","reason":"0" , "log":"10#6-0#", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1", "Installer_download_time_sec":"25", "Installer_url":"hXXp://sp-storage.spccinta.com/Installer/2.16.20.192/SPSetup.exe", "ExtraData":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:28 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:28 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive......

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 782

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"Stub_Complete", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504", "environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true -sessionid=M167B4029-C0F6-4111-93DA-0055D3CC0504 -downloadlength=2391 -EXT_ISID=false", "download_length": "2391", "carrier_ID": "ct3326582", "carrier_type": "ctid", "carrier_version": "DEFAULT", "brand": "SP", "EXT_ISID":"false","machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG","installer_version":"2.4.3.0","result":"success","reason":"0" , "log":"10#6-0#8#9-0-0#", "OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)", "OS_version":"5.1", "Installer_time_sec":"16", "ExtraData":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:44 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 417

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"MiniStub_Init", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504","environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true", "EXT_ISID":"false", "carrier_ID":"ct3326582", "machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG", "installer_version":"1.1.2.4", "origin":""}

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:58:59 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:58:59 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive......

POST / HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: sp-installer.databssint.com

Content-Length: 457

Connection: Keep-Alive

Cache-Control: no-cache

{"event_type":"MiniStub_Complete", "installation_session_id":"M167B4029-C0F6-4111-93DA-0055D3CC0504","environment":"", "command_line":"-carrier_type=ctid -carrier_id=ct3326582 -platform=all -startpage=true -defaultsearch=true", "EXT_ISID":"false", "carrier_ID":"ct3326582", "machine_ID":"9EKT4KIHYP05AIWKCMQN9NQXBR0OGZGUDWSPEVZXPXWQ6S2TD6LRCPJLMTQCFHUBKY67AOEAOT3MNTQYLME8MG", "installer_version":"1.1.2.4", "origin":"", "result":"success", "reason": "0" }

HTTP/1.1 202 Accepted

Date: Sun, 17 Aug 2014 17:59:44 GMT

P3P: CP="NOI ADM DEV COM NAV OUR STP"

Server: Apache-Coyote/1.1

Content-Length: 0

Connection: keep-alive

HTTP/1.1 202 Accepted..Date: Sun, 17 Aug 2014 17:59:44 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive..

Map

The Malware connects to the servers at the folowing location(s):

Strings from Dumps

CltMngSvc.exe_2852:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

.EKSWU

.EKSWU

\$$;\$0|

\$$;\$0|

DlSHA512 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Camellia for x86 by

Camellia for x86 by

AES for Intel AES-NI, CRYPTOGAMS by

AES for Intel AES-NI, CRYPTOGAMS by

6-9'6-9'

6-9'6-9'

$6.:$6.:

$6.:$6.:

*?#1*?#1

*?#1*?#1

>8$4,8$4,

>8$4,8$4,

AES for x86, CRYPTOGAMS by

AES for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

FtPS

FtPS

D$@j.Xf

D$@j.Xf

t.JuG

t.JuG

PSSSSSSh

PSSSSSSh

t.VVW

t.VVW

FTPj

FTPj

tCPQ

tCPQ

,4,56,789

,4,56,789

u.hLKe

u.hLKe

j.Yf;

j.Yf;

_tcPVj@

_tcPVj@

.PjRW

.PjRW

broken pipe

broken pipe

inappropriate io control operation

inappropriate io control operation

not supported

not supported

operation in progress

operation in progress

operation not permitted

operation not permitted

operation not supported

operation not supported

operation would block

operation would block

protocol not supported

protocol not supported

function not supported

function not supported

operation canceled

operation canceled

address_family_not_supported

address_family_not_supported

operation_in_progress

operation_in_progress

operation_not_supported

operation_not_supported

protocol_not_supported

protocol_not_supported

operation_would_block

operation_would_block

address family not supported

address family not supported

0123456789-

0123456789-

%b %d %H : %M : %S %Y

%b %d %H : %M : %S %Y

%m / %d / %y

%m / %d / %y

%I : %M : %S %p

%I : %M : %S %p

%d / %m / %y

%d / %m / %y

boost thread: trying joining itself

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

Operation not permitted

Operation not permitted

Inappropriate I/O control operation

Inappropriate I/O control operation

Broken pipe

Broken pipe

operator

operator

GetProcessWindowStation

GetProcessWindowStation

kernel32.dll

kernel32.dll

left-curly-bracket

left-curly-bracket

right-curly-bracket

right-curly-bracket

RSA part of OpenSSL 1.0.1e 11 Feb 2013

RSA part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

ssl_sess_cert

ssl_sess_cert

ssl_cert

ssl_cert

evp_pkey

evp_pkey

x509_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

pubkey

pubkey

PEM part of OpenSSL 1.0.1e 11 Feb 2013

PEM part of OpenSSL 1.0.1e 11 Feb 2013

enc_key

enc_key

key_enc_algor

key_enc_algor

cert

cert

d.encrypted

d.encrypted

d.digest

d.digest

d.signed_and_enveloped

d.signed_and_enveloped

d.enveloped

d.enveloped

d.sign

d.sign

d.data

d.data

d.other

d.other

NETSCAPE_CERT_SEQUENCE

NETSCAPE_CERT_SEQUENCE

certs

certs

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

DSA part of OpenSSL 1.0.1e 11 Feb 2013

DSA part of OpenSSL 1.0.1e 11 Feb 2013

priv_key

priv_key

pub_key

pub_key

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

EC_PRIVATEKEY

EC_PRIVATEKEY

publicKey

publicKey

privateKey

privateKey

value.implicitlyCA

value.implicitlyCA

value.parameters

value.parameters

value.named_curve

value.named_curve

p.char_two

p.char_two

p.prime

p.prime

p.ppBasis

p.ppBasis

p.tpBasis

p.tpBasis

p.onBasis

p.onBasis

p.other

p.other

Any Extended Key Usage

Any Extended Key Usage

anyExtendedKeyUsage

anyExtendedKeyUsage

supportedAlgorithms

supportedAlgorithms

crossCertificatePair

crossCertificatePair

certificateRevocationList

certificateRevocationList

cACertificate

cACertificate

userCertificate

userCertificate

userPassword

userPassword

supportedApplicationContext

supportedApplicationContext

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

%'%1%=%C%K%O%s%

%'%1%=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

C%C'C3C7C9COCWCiC

RAND part of OpenSSL 1.0.1e 11 Feb 2013

RAND part of OpenSSL 1.0.1e 11 Feb 2013

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

lhash part of OpenSSL 1.0.1e 11 Feb 2013

lhash part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

value.single

value.single

value.set

value.set

EVP part of OpenSSL 1.0.1e 11 Feb 2013

EVP part of OpenSSL 1.0.1e 11 Feb 2013

name.relativename

name.relativename

name.fullname

name.fullname

certificateHold

certificateHold

Certificate Hold

Certificate Hold

cessationOfOperation

cessationOfOperation

Cessation Of Operation

Cessation Of Operation

keyCompromise

keyCompromise

Key Compromise

Key Compromise

%*s%s:

%*s%s:

%*sOnly Attribute Certificates

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%*sOnly User Certificates

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

cert_info

cert_info

PKCS8_PRIV_KEY_INFO

PKCS8_PRIV_KEY_INFO

pkey

pkey

pkeyalg

pkeyalg

EC part of OpenSSL 1.0.1e 11 Feb 2013

EC part of OpenSSL 1.0.1e 11 Feb 2013

USER32.DLL

USER32.DLL

NETAPI32.DLL

NETAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

ADVAPI32.DLL

ADVAPI32.DLL

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

%s: (%d bit)

%s: (%d bit)

Public-Key

Public-Key

Private-Key

Private-Key

recommended-private-length: %d bits

recommended-private-length: %d bits

public-key:

public-key:

private-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Public-Key: (%d bit)

Private-Key: (%d bit)

Private-Key: (%d bit)

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

.pp@0

.pp@0

aEÐ

aEÐ

(#EÚ

(#EÚ

ÚE

ÚE

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

\X

\X

ddddddZ

ddddddZ

ddddddZ

ddddddZ

%d.%d.%d.%d

%d.%d.%d.%d

IP Address:%d.%d.%d.%d

IP Address:%d.%d.%d.%d

URI:%s

URI:%s

DNS:%s

DNS:%s

email:%s

email:%s

EdiPartyName:

EdiPartyName:

X400Name:

X400Name:

othername:

othername:

%d.%d.%d.%d/%d.%d.%d.%d

%d.%d.%d.%d/%d.%d.%d.%d

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

x%s

x%s

%s - d:d:d%.*s %d%s

%s - d:d:d%.*s %d%s

keylen

keylen

EVP_CIPHER_key_length(cipher)

EVP_CIPHER_key_length(cipher)

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

Basis Type: %s

Basis Type: %s

Field Type: %s

Field Type: %s

ASN1 OID: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%s %s%lu (%s0x%lx)

'() ,-./:=?

'() ,-./:=?

Verifying - %s

Verifying - %s

%*sPolicy Text: %s

%*sPolicy Text: %s

%*scrlUrl:

%*scrlUrl:

EXTENDED_KEY_USAGE

EXTENDED_KEY_USAGE

%*sZone: %s, User:

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

.\crypto\x509v3\v3_akey.c

d.usernotice

d.usernotice

d.cpsuri

d.cpsuri

CERTIFICATEPOLICIES

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sExplicit Text: %s

%*sNumber%s:

%*sNumber%s:

%*sOrganization: %s

%*sOrganization: %s

%*sCPS: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

PKEY_USAGE_PERIOD

keyCertSign

keyCertSign

Certificate Sign

Certificate Sign

keyAgreement

keyAgreement

Key Agreement

Key Agreement

keyEncipherment

keyEncipherment

Key Encipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_skey.c

CONF part of OpenSSL 1.0.1e 11 Feb 2013

CONF part of OpenSSL 1.0.1e 11 Feb 2013

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

hexkey

hexkey

rsa_keygen_pubexp

rsa_keygen_pubexp

rsa_keygen_bits

rsa_keygen_bits

keylength

keylength

keyfunc

keyfunc

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

.\crypto\pkcs12\p12_key.c

.\crypto\pkcs12\p12_key.c

d.receiptList

d.receiptList

d.allOrFirstTier

d.allOrFirstTier

d.compressedData

d.compressedData

d.authenticatedData

d.authenticatedData

d.encryptedData

d.encryptedData

d.digestedData

d.digestedData

d.envelopedData

d.envelopedData

d.signedData

d.signedData

d.ori

d.ori

d.pwri

d.pwri

d.kekri

d.kekri

d.kari

d.kari

d.ktri

d.ktri

CMS_PasswordRecipientInfo

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyDerivationAlgorithm

keyIdentifier

keyIdentifier

CMS_KeyAgreeRecipientInfo

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

CMS_OriginatorIdentifierOrKey

d.originatorKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

CMS_OtherKeyAttribute

keyAttr

keyAttr

keyAttrId

keyAttrId

CMS_KeyTransRecipientInfo

CMS_KeyTransRecipientInfo

encryptedKey

encryptedKey

keyEncryptionAlgorithm

keyEncryptionAlgorithm

certificates

certificates

d.crl

d.crl

d.subjectKeyIdentifier

d.subjectKeyIdentifier

d.issuerAndSerialNumber

d.issuerAndSerialNumber

CMS_CertificateChoices

CMS_CertificateChoices

d.v2AttrCert

d.v2AttrCert

d.v1AttrCert

d.v1AttrCert

d.extendedCertificate

d.extendedCertificate

d.certificate

d.certificate

CMS_OtherCertificateFormat

CMS_OtherCertificateFormat

otherCert

otherCert

otherCertFormat

otherCertFormat

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

[[%s]]

[[%s]]

[%s] %s=%s

[%s] %s=%s

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

value.bag

value.bag

value.safes

value.safes

value.shkeybag

value.shkeybag

value.keybag

value.keybag

value.sdsicert

value.sdsicert

value.x509cert

value.x509cert

value.other

value.other

%s.dll

%s.dll

!f%f#f

!f%f#f

_(_>_6_ _

_(_>_6_ _

_ _>_4_:_0_)_:_-_

_ _>_4_:_0_)_:_-_

_:_)_:_1_ _

_:_)_:_1_ _

:_-_-_0_-_

:_-_-_0_-_

]>]2]3]9](]4])]

]>]2]3]9](]4])]

]

]

]9]4].]>]2] ]8]/]8]9]

]9]4].]>]2] ]8]/]8]9]

F6F4F)F2F#FòF/F)F(F

F6F4F)F2F#FòF/F)F(F

F%F.F'F(F!F#F

F%F.F'F(F!F#F

;_:_9_>_*_3_ _

;_:_9_>_*_3_ _

_:_>_-_<_7_>

_:_>_-_<_7_>

^0^5^0^1^)^0^

^0^5^0^1^)^0^

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

{{{$1053}}}

{{{$1053}}}

{{{$1056}}}

{{{$1056}}}

{{{$1057}}}

{{{$1057}}}

{{{$631}}}

{{{$631}}}

{{{$1058}}}

{{{$1058}}}

]8]]5]}]

]8]]5]}]

]/]2])]8]>])]2]/]}]

]/]2])]8]>])]2]/]}]

]/]

]/]

{{{$1064}}}

{{{$1064}}}

{{{$1067}}}

{{{$1067}}}

{{{$1066}}}

{{{$1066}}}

{{{$1069}}}

{{{$1069}}}

{{{$1068}}}

{{{$1068}}}

{{{$1071}}}

{{{$1071}}}

{{{$1070}}}

{{{$1070}}}

{{{$1073}}}

{{{$1073}}}

{{{$1072}}}

{{{$1072}}}

{{{$1075}}}

{{{$1075}}}

{{{$1074}}}

{{{$1074}}}

{{{$1077}}}

{{{$1077}}}

{{{$1076}}}

{{{$1076}}}

{{{$1079}}}

{{{$1079}}}

{{{$1078}}}

{{{$1078}}}

{{{$1081}}}

{{{$1081}}}

{{{$1080}}}

{{{$1080}}}

{{{$1082}}}

{{{$1082}}}

{{{$1110}}}

{{{$1110}}}

{{{$1111}}}

{{{$1111}}}

{{{$1113}}}

{{{$1113}}}

{{{$1112}}}

{{{$1112}}}

{{{$1115}}}

{{{$1115}}}

{{{$1114}}}

{{{$1114}}}

{{{$1117}}}

{{{$1117}}}

{{{$1116}}}

{{{$1116}}}

{{{$1118}}}

{{{$1118}}}

{{{$1120}}}

{{{$1120}}}

{{{$1119}}}

{{{$1119}}}

{{{$1122}}}

{{{$1122}}}

{{{$1121}}}

{{{$1121}}}

{{{$1125}}}

{{{$1125}}}

{{{$1126}}}

{{{$1126}}}

{{{$1123}}}

{{{$1123}}}

{{{$1124}}}

{{{$1124}}}

{{{$1132}}}

{{{$1132}}}

{{{$1131}}}

{{{$1131}}}

{{{$1134}}}

{{{$1134}}}

{{{$1133}}}

{{{$1133}}}

{{{$1135}}}

{{{$1135}}}

{{{$1137}}}

{{{$1137}}}

{{{$1136}}}

{{{$1136}}}

{{{$1139}}}

{{{$1139}}}

{{{$1138}}}

{{{$1138}}}

{{{$1141}}}

{{{$1141}}}

{{{$1140}}}

{{{$1140}}}

{{{$138}}}

{{{$138}}}

{{{$139}}}

{{{$139}}}

{{{$140}}}

{{{$140}}}

{{{$141}}}

{{{$141}}}

{{{$143}}}

{{{$143}}}

{{{$142}}}

{{{$142}}}

{{{$145}}}

{{{$145}}}

{{{$144}}}

{{{$144}}}

{{{$146}}}

{{{$146}}}

{{{$124}}}

{{{$124}}}

{{{$125}}}

{{{$125}}}

{{{$128}}}

{{{$128}}}

{{{$129}}}

{{{$129}}}

{{{$126}}}

{{{$126}}}

{{{$127}}}

{{{$127}}}

{{{$132}}}

{{{$132}}}

{{{$133}}}

{{{$133}}}

{{{$130}}}

{{{$130}}}

{{{$131}}}

{{{$131}}}

{{{$134}}}

{{{$134}}}

{{{$135}}}

{{{$135}}}

]3].])]

]3].])]

2_:_ _7_0_;_

2_:_ _7_0_;_

/[3[)[>[:[?[

/[3[)[>[:[?[

^;^,^(^7^=^;^~^;^&^7^-^*^-^~^

^;^,^(^7^=^;^~^;^&^7^-^*^-^~^

^;^,^(^7^=^;^~^,^;^*^ ^,^0^;^:^~^;^,^,^1^,^~^

^;^,^(^7^=^;^~^,^;^*^ ^,^0^;^:^~^;^,^,^1^,^~^

v%@%W%S%L%F%@%

v%@%W%S%L%F%@%

%l%K%V%Q%D%I%I%

%l%K%V%Q%D%I%I%

%v%@%W%S%L%F%@%

%v%@%W%S%L%F%@%

%f%W%@%D%Q%@%A%

%f%W%@%D%Q%@%A%

%j%U%@%K%@%A%

%j%U%@%K%@%A%

\9\.\*\5\?\9\|\

\9\.\*\5\?\9\|\

{{{$478}}}

{{{$478}}}

{{{$476}}}

{{{$476}}}

{{{$466}}}

{{{$466}}}

{{{$473}}}

{{{$473}}}

,\0\=\(\:\3\.\1\

,\0\=\(\:\3\.\1\

\3\3\(\/\(\.\=\,\9\.\|\

\3\3\(\/\(\.\=\,\9\.\|\

\9\;\5\/\(\9\.\

\9\;\5\/\(\9\.\

\.\3\ \/\9\.\

\.\3\ \/\9\.\

\5\:\9\(\5\1\9\

\5\:\9\(\5\1\9\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

{{{$488}}}

{{{$488}}}

{{{$489}}}

{{{$489}}}

{{{$490}}}

{{{$490}}}

{{{$491}}}

{{{$491}}}

{{{$492}}}

{{{$492}}}

{{{$493}}}

{{{$493}}}

{{{$494}}}

{{{$494}}}

{{{$501}}}

{{{$501}}}

{{{$502}}}

{{{$502}}}

{{{$499}}}

{{{$499}}}

{{{$500}}}

{{{$500}}}

{{{$503}}}

{{{$503}}}

{{{$505}}}

{{{$505}}}

{{{$504}}}

{{{$504}}}

{{{$508}}}

{{{$508}}}

{{{$509}}}

{{{$509}}}

{{{$506}}}

{{{$506}}}

{{{$507}}}

{{{$507}}}

{{{$511}}}

{{{$511}}}

{{{$512}}}

{{{$512}}}

{{{$510}}}

{{{$510}}}

{{{$513}}}

{{{$513}}}

{{{$514}}}

{{{$514}}}

{{{$515}}}

{{{$515}}}

{{{$518}}}

{{{$518}}}

{{{$516}}}

{{{$516}}}

{{{$517}}}

{{{$517}}}

{{{$519}}}

{{{$519}}}

{{{$520}}}

{{{$520}}}

{{{$521}}}

{{{$521}}}

{{{$522}}}

{{{$522}}}

{{{$523}}}

{{{$523}}}

{{{$524}}}

{{{$524}}}

{{{$525}}}

{{{$525}}}

{{{$526}}}

{{{$526}}}

{{{$527}}}

{{{$527}}}

{{{$528}}}

{{{$528}}}

{{{$616}}}

{{{$616}}}

{{{$617}}}

{{{$617}}}

{{{$614}}}

{{{$614}}}

{{{$615}}}

{{{$615}}}

{{{$618}}}

{{{$618}}}

{{{$619}}}

{{{$619}}}

C,CÇC4C"C1C&C

C,CÇC4C"C1C&C

@/@&@4@7@!@2@%@

@/@&@4@7@!@2@%@

@/@:@)@,@,@!@

@/@:@)@,@,@!@

@/@:@)@,@,@!@`@

@/@:@)@,@,@!@`@

@)@2@%@&@/@8@

@)@2@%@&@/@8@

{{{$409}}}

{{{$409}}}

{{{$407}}}

{{{$407}}}

{{{$408}}}

{{{$408}}}

{{{$410}}}

{{{$410}}}

@%@!@2@#@(@

@%@!@2@#@(@

@(@/@2@4@

@(@/@2@4@

{{{$411}}}

{{{$411}}}

{{{$413}}}

{{{$413}}}

{{{$414}}}

{{{$414}}}

{{{$415}}}

{{{$415}}}

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

7<.-8>

7<.-8>

{{{$317}}}

{{{$317}}}

{{{$318}}}

{{{$318}}}

{{{$319}}}

{{{$319}}}

{{{$339}}}

{{{$339}}}

KEYWORDS

KEYWORDS

KEYWORD

KEYWORD

{{{$362}}}

{{{$362}}}

{{{$364}}}

{{{$364}}}

{{{$363}}}

{{{$363}}}

{{{$365}}}

{{{$365}}}

]2]3]9](]4])]

]2]3]9](]4])]

]?].])]/]])]4]2]3]

]?].])]/]])]4]2]3]

]

]

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

insert into ItemTable (key, value) VALUES ('%s', '%s');

insert into ItemTable (key, value) VALUES ('%s', '%s');

4]>]2]3]

4]>]2]3]

\1\=\;\9\

\1\=\;\9\

\(\=\(\9\

\(\=\(\9\

{{{$636}}}

{{{$636}}}

{{{$635}}}

{{{$635}}}

{{{$634}}}

{{{$634}}}

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

{{{$637}}}

{{{$637}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

Module %d

Module %d

%d/%d/%d d:d:d

%d/%d/%d d:d:d

(more frames truncated from call stack report)

(more frames truncated from call stack report)

File Size: %-10d File Time: %s

File Size: %-10d File Time: %s

Checksum: 0xx Time Stamp: 0xx

Checksum: 0xx Time Stamp: 0xx

Image Base: 0xx Image Size: 0xx

Image Base: 0xx Image Size: 0xx

FileDesc: %s

FileDesc: %s

Product: %s

Product: %s

Company: %s

Company: %s

ProdVer: %d.%d.%d.%d

ProdVer: %d.%d.%d.%d

FileVer: %d.%d.%d.%d

FileVer: %d.%d.%d.%d

Windows Vista

Windows Vista

Windows Server 2008

Windows Server 2008

Windows 8

Windows 8

Windows Server 2012

Windows Server 2012

Windows 7

Windows 7

Windows Server 2008 R2

Windows Server 2008 R2

Windows 9

Windows 9

Web Edition

Web Edition

Windows Server 9

Windows Server 9

Windows XP

Windows XP

(build %d)

(build %d)

Windows 2000

Windows 2000

Error occurred at %s.

Error occurred at %s.

This sample does not support this version of Windows.

This sample does not support this version of Windows.

%d processor(s), type %d.

%d processor(s), type %d.

Operating system: Could not Determine

Operating system: Could not Determine

Operating system: %s

Operating system: %s

%d MBytes paging file.

%d MBytes paging file.

%d MBytes physical memory free.

%d MBytes physical memory free.

%d%% memory in use.

%d%% memory in use.

%d MBytes user address space free.

%d MBytes user address space free.

Windows Storage Server 2003

Windows Storage Server 2003

Windows Server 2003 R2

Windows Server 2003 R2

Web Server Edition

Web Server Edition

%d MBytes user address space.

%d MBytes user address space.

Windows Server 2003

Windows Server 2003

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

a Float Denormal Operand

a Float Denormal Operand

Windows Home Server

Windows Home Server

a Float Invalid Operation

a Float Invalid Operation

%d MBytes paging file free.

%d MBytes paging file free.

%d MBytes physical memory.

%d MBytes physical memory.

0xx:

0xx:

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

%s\CRASH_REPORT_%s.txt

%s\CRASH_REPORT_%s.txt

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

%s caused %s (0xx)

%s caused %s (0xx)

in module %s at x:x.

in module %s at x:x.

%s location x caused an access violation.

%s location x caused an access violation.

%s\CRASH_DUMP_%s.dmp

%s\CRASH_DUMP_%s.dmp

===== [end of %s] =====

===== [end of %s] =====

Error creating dump file, err=%d

Error creating dump file, err=%d

Exception code is 0xX

Exception code is 0xX

Crash dump file: %s

Crash dump file: %s

Crash report file :%s

Crash report file :%s

P%d_T%d_Dld_ld_ld_Tld_ld_ld

P%d_T%d_Dld_ld_ld_Tld_ld_ld

code: %x

code: %x

code: %x, addr: %x, module: %s

code: %x, addr: %x, module: %s

00:00:00.

00:00:00.

NtQueryKey

NtQueryKey

{{{$621}}}

{{{$621}}}

{{{$620}}}

{{{$620}}}

{{{$623}}}

{{{$623}}}

{{{$622}}}

{{{$622}}}

{{{$629}}}

{{{$629}}}

{{{$628}}}

{{{$628}}}

{{{$697}}}

{{{$697}}}

{{{$696}}}

{{{$696}}}

{{{$695}}}

{{{$695}}}

{{{$698}}}

{{{$698}}}

%s 0x%I64x %s [file:%s(%u)]

%s 0x%I64x %s [file:%s(%u)]

PTF://

PTF://

hXXps://

hXXps://

hXXp://

hXXp://

[%u, 0xx] %s

[%u, 0xx] %s

wininet.dll

wininet.dll

https

https

HTTP/1.0

HTTP/1.0

Content-Type: application/x-www-form-urlencoded

Content-Type: application/x-www-form-urlencoded

request HttpSendRequestA failed...

request HttpSendRequestA failed...

Content-Length: %u

Content-Length: %u

response failed...last error %d

response failed...last error %d

1.1.3

1.1.3

gen_codes: max_code %d

gen_codes: max_code %d

code %d bits %d->%d

code %d bits %d->%d

bl code -

bl code -

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

{{{$722}}}

{{{$722}}}

{{{$723}}}

{{{$723}}}

{{{$724}}}

{{{$724}}}

{{{$725}}}

{{{$725}}}

{{{$728}}}

{{{$728}}}

{{{$727}}}

{{{$727}}}

{{{$726}}}

{{{$726}}}

{{{$729}}}

{{{$729}}}

{{{$730}}}

{{{$730}}}

{{{$732}}}

{{{$732}}}

{{{$731}}}

{{{$731}}}

{{{$734}}}

{{{$734}}}

{{{$733}}}

{{{$733}}}

{{{$735}}}

{{{$735}}}

{{{$738}}}

{{{$738}}}

{{{$737}}}

{{{$737}}}

{{{$736}}}

{{{$736}}}

{{{$739}}}

{{{$739}}}

{{{$740}}}

{{{$740}}}

{{{$748}}}

{{{$748}}}

{{{$747}}}

{{{$747}}}

{{{$749}}}

{{{$749}}}

{{{$752}}}

{{{$752}}}

{{{$751}}}

{{{$751}}}

%{{{$674}}}

%{{{$674}}}

{{{$673}}}

{{{$673}}}

{{{$672}}}

{{{$672}}}

SQLite format 3

SQLite format 3

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY_\

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY_\

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

3.7.16

3.7.16

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

{{{$102}}}

{{{$102}}}

{{{$101}}}

{{{$101}}}

{{{$103}}}

{{{$103}}}

{{{$109}}}

{{{$109}}}

{{{$108}}}

{{{$108}}}

{{{$111}}}

{{{$111}}}

{{{$110}}}

{{{$110}}}

{{{$105}}}

{{{$105}}}

{{{$104}}}

{{{$104}}}

{{{$107}}}

{{{$107}}}

{{{$106}}}

{{{$106}}}

{{{$113}}}

{{{$113}}}

{{{$112}}}

{{{$112}}}

{{{$114}}}

{{{$114}}}

{{{$117}}}

{{{$117}}}

{{{$118}}}

{{{$118}}}

{{{$115}}}

{{{$115}}}

{{{$116}}}

{{{$116}}}

{{{$121}}}

{{{$121}}}

{{{$122}}}

{{{$122}}}

{{{$119}}}

{{{$119}}}

{{{$120}}}

{{{$120}}}

{{{$123}}}

{{{$123}}}

{{{$100}}}

{{{$100}}}

{{{$691}}}

{{{$691}}}

{{{$690}}}

{{{$690}}}

{{{$693}}}

{{{$693}}}

{{{$692}}}

{{{$692}}}

{{{$687}}}

{{{$687}}}

{{{$686}}}

{{{$686}}}

{{{$689}}}

{{{$689}}}

{{{$688}}}

{{{$688}}}

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

{{{$137}}}

{{{$137}}}

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

_0_9_ _(_>_-_:_

_0_9_ _(_>_-_:_

_-_0_ _:_<_ _>

_-_0_ _:_<_ _>

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

RowKey

RowKey

GetProcessHeap

GetProcessHeap

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

OsError 0x%x (%u)

OsError 0x%x (%u)

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

cannot limit WAL size: %s

cannot limit WAL size: %s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

invalid page number %d

invalid page number %d

2nd reference to page %d

2nd reference to page %d

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

failed to get page %d

failed to get page %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

Page %d:

Page %d:

On page %d at right child:

On page %d at right child:

On tree page %d cell %d:

On tree page %d cell %d:

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Pointer map page %d is referenced

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

Page %d is never used

Page %d is never used

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

MJ collide: %s

MJ collide: %s

-mjX9X

-mjX9X

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ delete: %s

MJ delete: %s

foreign key constraint failed

foreign key constraint failed

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

abort at %d in [%s]: %s

abort at %d in [%s]: %s

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

sqlite_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

database table is locked: %s

database table is locked: %s

cannot open value of type %s

cannot open value of type %s

no such column: "%s"

no such column: "%s"

foreign key

foreign key

cannot open virtual table: %s

cannot open virtual table: %s

cannot open view: %s

cannot open view: %s

indexed

indexed

cannot open %s column for writing

cannot open %s column for writing

%s: %s.%s.%s

%s: %s.%s.%s

misuse of aliased aggregate %s

misuse of aliased aggregate %s

not authorized to use function: %s

not authorized to use function: %s

%s: %s.%s

%s: %s.%s

%s: %s

%s: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

too many SQL variables

too many SQL variables

too many columns in %s

too many columns in %s

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

%s%.*s"%w"

%s%.*s"%w"

sqlite_rename_parent

sqlite_rename_parent

sqlite_rename_table

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_

sqlite_

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

view %s may not be altered

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

table %s may not be altered

table %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

sqlite_sequence

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

sqlite_altertab_%s

sqlite_altertab_%s

sqlite_stat1

sqlite_stat1

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

invalid name: "%s"

database %s is already in use

database %s is already in use

too many attached databases - max %d

too many attached databases - max %d

no such database: %s

no such database: %s

cannot detach database %s

cannot detach database %s

unable to open database: %s

unable to open database: %s

sqlite_detach

sqlite_detach

sqlite_attach

sqlite_attach

database %s is locked

database %s is locked

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

object name reserved for internal use: %s

object name reserved for internal use: %s

duplicate column name: %s

duplicate column name: %s

default value of column [%s] is not constant

default value of column [%s] is not constant

there is already an index named %s

there is already an index named %s

too many columns on %s

too many columns on %s

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

table "%s" has more than one primary key

table "%s" has more than one primary key

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE %s %.*s

CREATE %s %.*s

view %s is circularly defined

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

sqlite_stat

sqlite_stat%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

table %s may not be dropped

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

indexed columns are not unique

indexed columns are not unique

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

views may not be indexed

views may not be indexed

virtual tables may not be indexed

virtual tables may not be indexed

table %s may not be indexed

table %s may not be indexed

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

table %s has no column named %s

table %s has no column named %s

there is already a table named %s

there is already a table named %s

index %s already exists

index %s already exists

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

no such index: %S

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

a JOIN clause is required before %s

a JOIN clause is required before %s

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

no such collation sequence: %s

no such collation sequence: %s

table %s may not be modified

table %s may not be modified

unable to identify the object to be reindexed

unable to identify the object to be reindexed

cannot modify %s because it is a view

cannot modify %s because it is a view

sqlite_source_id

sqlite_source_id

sqlite_log

sqlite_log

sqlite_version

sqlite_version

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_compileoption_get

sqlite_compileoption_get

foreign key mismatch - "%w" referencing "%w"

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

table %S has no column named %s

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

%d values for %d columns

%d values for %d columns

PRIMARY KEY must be unique

PRIMARY KEY must be unique

%s.%s may not be NULL

%s.%s may not be NULL

constraint %s failed

constraint %s failed

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

error during initialization: %s

sqlite3_extension_init

sqlite3_extension_init

unable to open shared library [%s]

unable to open shared library [%s]

automatic extension loading failed: %s

automatic extension loading failed: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

foreign_key_check

foreign_key_check

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

database schema is locked: %s

unsupported file format

unsupported file format

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

%s:%d

%s:%d

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s.%s

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

no such index: %s

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

%s.%s.%s

%s.%s.%s

no such table: %s

no such table: %s

sqlite_subquery_%p_

sqlite_subquery_%p_

too many references to "%s": max 65535

too many references to "%s": max 65535

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

-- TRIGGER %s

-- TRIGGER %s

no such column: %s

no such column: %s

no such trigger: %S

no such trigger: %S

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s AS %s

%s AS %s

%s SUBQUERY %d

%s SUBQUERY %d

%s TABLE %s

%s TABLE %s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid=?)

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s (rowid)

%s (rowid)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid>?)

%s (rowid>?)

cannot use index: %s

cannot use index: %s

%s (~%lld rows)

%s (~%lld rows)

at most %d tables in a join

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

%s mode not allowed: %s

%s mode not allowed: %s

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

no such vfs: %s

no such vfs: %s

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

{{{$709}}}

{{{$709}}}

{{{$710}}}

{{{$710}}}

{{{$708}}}

{{{$708}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\CltMngSvc.pdb

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\CltMngSvc.pdb

WTSAPI32.dll

WTSAPI32.dll

USERENV.dll

USERENV.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ReportEventW

ReportEventW

ADVAPI32.dll

ADVAPI32.dll

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

I_RpcBindingInqTransportType

I_RpcBindingInqTransportType

RPCRT4.dll

RPCRT4.dll

PSAPI.DLL

PSAPI.DLL

VERSION.dll

VERSION.dll

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpSendRequestW

HttpSendRequestW

HttpSendRequestA

HttpSendRequestA

HttpSendRequestExW

HttpSendRequestExW

HttpEndRequestW

HttpEndRequestW

HttpQueryInfoA

HttpQueryInfoA

WININET.dll

WININET.dll

CryptMsgClose

CryptMsgClose

CertGetNameStringW

CertGetNameStringW

CertFreeCertificateContext

CertFreeCertificateContext

CertFindCertificateInStore

CertFindCertificateInStore

CertCloseStore

CertCloseStore

CryptMsgGetParam

CryptMsgGetParam

CRYPT32.dll

CRYPT32.dll

dbghelp.dll

dbghelp.dll

GetCPInfo

GetCPInfo

RegCloseKey

RegCloseKey

RegOpenKeyExW

RegOpenKeyExW

RegDeleteKeyW

RegDeleteKeyW

RegEnumKeyExW

RegEnumKeyExW

RegCreateKeyExW

RegCreateKeyExW

RegNotifyChangeKeyValue

RegNotifyChangeKeyValue

ReportEventA

ReportEventA

zcÁ

zcÁ

C:\PROGRA~1\SearchProtect\

C:\PROGRA~1\SearchProtect\

;74/, (%#

;74/, (%#

~{xrpfa\ZSM@;3-%U

~{xrpfa\ZSM@;3-%U

function k(a) { return a

function k(a) { return a

var c, d, h, m, g = e, f, b = j[a]; b && typeof b === "object" && typeof b.toJSON === "function" && (b = b.toJSON(a)); typeof i === "function" && (b = i.call(j, a, b)); switch (typeof b) {

var c, d, h, m, g = e, f, b = j[a]; b && typeof b === "object" && typeof b.toJSON === "function" && (b = b.toJSON(a)); typeof i === "function" && (b = i.call(j, a, b)); switch (typeof b) {

e = n; f = []; if (Object.prototype.toString.apply(b) === "[object Array]") { m = b.length; for (c = 0; c

e = n; f = []; if (Object.prototype.toString.apply(b) === "[object Array]") { m = b.length; for (c = 0; c

} if (typeof Date.prototype.toJSON !== "function") Date.prototype.toJSON = function () { return isFinite(this.valueOf()) ? this.getUTCFullYear() "-" k(this.getUTCMonth() 1) "-" k(this.getUTCDate()) "T" k(this.getUTCHours()) ":" k(this.getUTCMinutes()) ":" k(this.getUTCSeconds()) "Z" : null }, String.prototype.toJSON = Number.prototype.toJSON = Boolean.prototype.toJSON = function () { return this.valueOf() }; var q = /[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,

} if (typeof Date.prototype.toJSON !== "function") Date.prototype.toJSON = function () { return isFinite(this.valueOf()) ? this.getUTCFullYear() "-" k(this.getUTCMonth() 1) "-" k(this.getUTCDate()) "T" k(this.getUTCHours()) ":" k(this.getUTCMinutes()) ":" k(this.getUTCSeconds()) "Z" : null }, String.prototype.toJSON = Number.prototype.toJSON = Boolean.prototype.toJSON = function () { return this.valueOf() }; var q = /[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,

p = /[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g, e, n, r = { "\u0008": "\\b", "\t": "\\t", "\n": "\\n", "\u000c": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\" }, i; if (typeof JSON.stringify !== "function") JSON.stringify = function (a, j, c) {

p = /[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g, e, n, r = { "\u0008": "\\b", "\t": "\\t", "\n": "\\n", "\u000c": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\" }, i; if (typeof JSON.stringify !== "function") JSON.stringify = function (a, j, c) {

var d; n = e = ""; if (typeof c === "number") for (d = 0; d

var d; n = e = ""; if (typeof c === "number") for (d = 0; d

}; if (typeof JSON.parse !== "function") JSON.parse = function (a, e) {

}; if (typeof JSON.parse !== "function") JSON.parse = function (a, e) {

function c(a, d) { var g, f, b = a[d]; if (b && typeof b === "object") for (g in b) Object.prototype.hasOwnProperty.call(b, g) && (f = c(b, g), f !== void 0 ? b[g] = f : delete b[g]); return e.call(a, d, b) } var d, a = String(a); q.lastIndex = 0; q.test(a) && (a = a.replace(q, function (a) { return "\\u" ("0000" a.charCodeAt(0).toString(16)).slice(-4) })); if (/^[\],:{}\s]*$/.test(a.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, "@").replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g,

function c(a, d) { var g, f, b = a[d]; if (b && typeof b === "object") for (g in b) Object.prototype.hasOwnProperty.call(b, g) && (f = c(b, g), f !== void 0 ? b[g] = f : delete b[g]); return e.call(a, d, b) } var d, a = String(a); q.lastIndex = 0; q.test(a) && (a = a.replace(q, function (a) { return "\\u" ("0000" a.charCodeAt(0).toString(16)).slice(-4) })); if (/^[\],:{}\s]*$/.test(a.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, "@").replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g,

"]").replace(/(?:^|:|,)(?:\s*\[) /g, ""))) return d = eval("(" a ")"), typeof e === "function" ? c({ "": d }, "") : d; throw new SyntaxError("JSON.parse");

"]").replace(/(?:^|:|,)(?:\s*\[) /g, ""))) return d = eval("(" a ")"), typeof e === "function" ? c({ "": d }, "") : d; throw new SyntaxError("JSON.parse");

ws.api = ws.api || {};

ws.api = ws.api || {};

ws.api.FunctionsEnum = {

ws.api.FunctionsEnum = {

SET_KEY: 1,

SET_KEY: 1,

GET_KEY: 2,

GET_KEY: 2,

REMOVE_KEY: 3,

REMOVE_KEY: 3,

ws.api.StatusEnum = {

ws.api.StatusEnum = {

SP_RESULT_KEY_DOES_NOT_EXIST: -2,

SP_RESULT_KEY_DOES_NOT_EXIST: -2,

ws.api.RESULT_TIMOUET = 3000;

ws.api.RESULT_TIMOUET = 3000;

ws.api.storage = ws.api.storage || {};

ws.api.storage = ws.api.storage || {};

ws.api.storage.setKey =

ws.api.storage.setKey =

function (pluginId, key, value, callback, options) {

function (pluginId, key, value, callback, options) {

if (typeof (pluginId) !== 'string' || pluginId === "" || typeof (key) !== 'string' || key === "" || typeof (callback) !== 'function') {

if (typeof (pluginId) !== 'string' || pluginId === "" || typeof (key) !== 'string' || key === "" || typeof (callback) !== 'function') {

callback(ws.api.StatusEnum.SP_RESULT_INVALID_PARAMS);

callback(ws.api.StatusEnum.SP_RESULT_INVALID_PARAMS);

// Construct an object which will be passed to the VC holding all the parameters

// Construct an object which will be passed to the VC holding all the parameters

data.funcId = ws.api.FunctionsEnum.SET_KEY;

data.funcId = ws.api.FunctionsEnum.SET_KEY;

data.pluginId = pluginId;

data.pluginId = pluginId;

data.key = key;

data.key = key;

data.value = value;

data.value = value;

data.options = options; // Currently not used - this is for future use, if we will want to add more parameters we will

data.options = options; // Currently not used - this is for future use, if we will want to add more parameters we will

var resultObj = JSON.parse(result);

var resultObj = JSON.parse(result);

callback(resultObj.status);

callback(resultObj.status);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE);

}, ws.api.RESULT_TIMOUET);

}, ws.api.RESULT_TIMOUET);

ws.internal.SendStringToVC(JSON.stringify(data), myCallback);

ws.internal.SendStringToVC(JSON.stringify(data), myCallback);

ws.api.storage.getKey =

ws.api.storage.getKey =

function (pluginId, key, callback, options) {

function (pluginId, key, callback, options) {

data.funcId = ws.api.FunctionsEnum.GET_KEY;

data.funcId = ws.api.FunctionsEnum.GET_KEY;

var value = resultObj.value;

var value = resultObj.value;

if (resultObj.status != ws.api.StatusEnum.SP_RESULT_SUCCESS) {

if (resultObj.status != ws.api.StatusEnum.SP_RESULT_SUCCESS) {

callback(resultObj.status, value);

callback(resultObj.status, value);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE, "");

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE, "");

ws.api.storage.removeKey =

ws.api.storage.removeKey =

data.funcId = ws.api.FunctionsEnum.REMOVE_KEY;

data.funcId = ws.api.FunctionsEnum.REMOVE_KEY;

ws.api.system = ws.api.system || {};

ws.api.system = ws.api.system || {};

ws.api.system.remove =

ws.api.system.remove =

data.funcId = ws.api.FunctionsEnum.REMOVE;

data.funcId = ws.api.FunctionsEnum.REMOVE;

data.shouldCallUninstaller = shouldCallUninstaller;

data.shouldCallUninstaller = shouldCallUninstaller;

ws.internal = ws.internal || {};

ws.internal = ws.internal || {};

if (ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID === undefined) {

if (ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID === undefined) {

ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID = true;

ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID = true;

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;

; ;$;(;,;0;4;

;

;

11C1R1a1p1

11C1R1a1p1

7t7C7R7a7p7

7t7C7R7a7p7

5l6

5l6

7 8/8=8#9;9

7 8/8=8#9;9

5,5:5"6|6

5,5:5"6|6

1 1$1(1,1014181

1 1$1(1,1014181

2x3-4c6k6q6}6

2x3-4c6k6q6}6

223F3i3~3

223F3i3~3

;*

;*

3"3&3*3.32363

3"3&3*3.32363

6(7-737:7

6(7-737:7

1%2s2

1%2s2

7 7$7(7,7|7

7 7$7(7,7|7

4(5,5\5`5

4(5,5\5`5

4 4$4(4,404

4 4$4(4,404

?$?(?@?\?

?$?(?@?\?

>$>(>@>\>`>|>

>$>(>@>\>`>|>

14181\1`1

14181\1`1

5 5$5(5,5054585

5 5$5(5,5054585

? ?$?(?,?0?4?8?@?

? ?$?(?,?0?4?8?@?

7$70787|7

7$70787|7

2 2$2(2,20242

2 2$2(2,20242

6$6,646

6$6,646

hmscoree.dll

hmscoree.dll

Vkernel32.dll

Vkernel32.dll

combase.dll

combase.dll

- floating point support not loaded

- floating point support not loaded

- CRT not initialized

- CRT not initialized

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

portuguese-brazilian

portuguese-brazilian

8.0.0.0-11.999.999.999

8.0.0.0-11.999.999.999

33.0.0.0-36.999.999.999

33.0.0.0-36.999.999.999

16.0.0.0-31.999.999.999

16.0.0.0-31.999.999.999

Failed to execute installer :

Failed to execute installer :

SPSetup.exe

SPSetup.exe

}{{{$668}}}

}{{{$668}}}

{{{$669}}}

{{{$669}}}

{{{$670}}}

{{{$670}}}

}{{{$671}}}

}{{{$671}}}

{{{$668}}}

{{{$668}}}

{{{$671}}}

{{{$671}}}

%s (Error: %d)

%s (Error: %d)

{{{SP#Conduit::SearchProtector::Service::ServiceBase::ReportEventW#SP}}}

{{{SP#Conduit::SearchProtector::Service::ServiceBase::ReportEventW#SP}}}

*.dmp

*.dmp

{{{$1062}}}

{{{$1062}}}

}{{{$670}}}

}{{{$670}}}

{{{$1129}}}

{{{$1129}}}

{{{$1130}}}

{{{$1130}}}

WindowsSessionManagerThread

WindowsSessionManagerThread

}{{{$669}}}

}{{{$669}}}

J16.0.0.0-31.999.999.999

J16.0.0.0-31.999.999.999

2.16.20.192

2.16.20.192

UserRepository.dat

UserRepository.dat

SystemRepository.dat

SystemRepository.dat

UIRepository.dat

UIRepository.dat

{{{$612}}}

{{{$612}}}

{{{$669}}}

{{{$669}}}

36.0.0.0

36.0.0.0

32.0.0.0

32.0.0.0

{{{$296}}}

{{{$296}}}

{{{$295}}}

{{{$295}}}

{{{$299}}}

{{{$299}}}

{{{$298}}}

{{{$298}}}

{{{$301}}}

{{{$301}}}

{{{$302}}}

{{{$302}}}

Failed to set Url

Failed to set Url

{{{$309}}}

{{{$309}}}

{{{$308}}}

{{{$308}}}

{{{$310}}}

{{{$310}}}

{{{$312}}}

{{{$312}}}

{{{$311}}}

{{{$311}}}

{{{$314}}}

{{{$314}}}

{{{$315}}}

{{{$315}}}

{{{$321}}}

{{{$321}}}

{{{$322}}}

{{{$322}}}

{{{$326}}}

{{{$326}}}

{{{$330}}}

{{{$330}}}

{{{$334}}}

{{{$334}}}

{{{$335}}}

{{{$335}}}

{{{$338}}}

{{{$338}}}

{{{$337}}}

{{{$337}}}

{{{$350}}}

{{{$350}}}

{{{$349}}}

{{{$349}}}

{{{$356}}}

{{{$356}}}

{{{$355}}}

{{{$355}}}

{{{$360}}}

{{{$360}}}

{{{$359}}}

{{{$359}}}

;chrome-extension_

;chrome-extension_

_0.localstorage

_0.localstorage

{{{$257}}}

{{{$257}}}

{{{$256}}}

{{{$256}}}

{{{$260}}}

{{{$260}}}

{{{$259}}}

{{{$259}}}

{{{$385}}}

{{{$385}}}

{{{$386}}}

{{{$386}}}

{{{$383}}}

{{{$383}}}

{{{$371}}}

{{{$371}}}

{{{$372}}}

{{{$372}}}

HKEY_USERS

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_NLSTEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_DYN_DATA

HKEY_CURRENT_USER_LOCAL_SETTINGS

HKEY_CURRENT_USER_LOCAL_SETTINGS

{{{$712}}}

{{{$712}}}

Yuser32.dll

Yuser32.dll

ieframe.dll

ieframe.dll

Windows Server 2008

Windows Server 2008

Windows Vista

Windows Vista

Windows Server 2012

Windows Server 2012

Windows 8

Windows 8

Windows Server 2008 R2

Windows Server 2008 R2

Windows 7

Windows 7

Windows 8.1

Windows 8.1

%x %x[%s] %I64x %x %x

%x %x[%s] %I64x %x %x

{{{$703}}}

{{{$703}}}

{{{$702}}}

{{{$702}}}

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

ntdll.dll

ntdll.dll

%s%s%s

%s%s%s

Correct password required

Correct password required

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{$720}}}

{{{$720}}}

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

O16.0.0.0-31.999.999.999

O16.0.0.0-31.999.999.999

{{{$373}}}

{{{$373}}}

{{{$375}}}

{{{$375}}}

{{{$374}}}

{{{$374}}}

{{{$630}}}

{{{$630}}}

HIDispatch error #%d

HIDispatch error #%d

IWindowsSessionManagerException

IWindowsSessionManagerException

01234567

01234567

JRpcTransportException

JRpcTransportException

N8.0.0.0-11.999.999.999

N8.0.0.0-11.999.999.999

Kernel32.dll

Kernel32.dll

C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe

C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe

cltmng.exe_2924:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

.EKSWU

.EKSWU

\$$;\$0|

\$$;\$0|

DlSHA512 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Camellia for x86 by

Camellia for x86 by

AES for Intel AES-NI, CRYPTOGAMS by

AES for Intel AES-NI, CRYPTOGAMS by

6-9'6-9'

6-9'6-9'

$6.:$6.:

$6.:$6.:

*?#1*?#1

*?#1*?#1

>8$4,8$4,

>8$4,8$4,

AES for x86, CRYPTOGAMS by

AES for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

FtPS

FtPS

D$@j.Xf

D$@j.Xf

t;j.Yf

t;j.Yf

j.Xf9

j.Xf9

!\$0!\$4

!\$0!\$4

FTPj

FTPj

tCPQ

tCPQ

,4,56,789

,4,56,789

hCRt

hCRt

PSSSSSSh

PSSSSSSh

FTPj

FTPj

F\ FTP

F\ FTP

j.Yf;

j.Yf;

_tcPVj@

_tcPVj@

.PjRW

.PjRW

r%f;M

r%f;M

broken pipe

broken pipe

inappropriate io control operation

inappropriate io control operation

not supported

not supported

operation in progress

operation in progress

operation not permitted

operation not permitted

operation not supported

operation not supported

operation would block

operation would block

protocol not supported

protocol not supported

function not supported

function not supported

operation canceled

operation canceled

address_family_not_supported

address_family_not_supported

operation_in_progress

operation_in_progress

operation_not_supported

operation_not_supported

protocol_not_supported

protocol_not_supported

operation_would_block

operation_would_block

address family not supported

address family not supported

0123456789-

0123456789-

%b %d %H : %M : %S %Y

%b %d %H : %M : %S %Y

%m / %d / %y

%m / %d / %y

%I : %M : %S %p

%I : %M : %S %p

%d / %m / %y

%d / %m / %y

kernel32.dll

kernel32.dll

boost::filesystem::directory_iterator::operator

boost::filesystem::directory_iterator::operator

The repeat operator "*" cannot start a regular expression.

The repeat operator "*" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

Found a closing repetition operator } with no corresponding {.

Found a closing repetition operator } with no corresponding {.

Can't terminate a sub-expression with an alternation operator |.

Can't terminate a sub-expression with an alternation operator |.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

A regular expression can start with the alternation operator |.

A regular expression can start with the alternation operator |.

Invalid alternation operators within (?...) block.

Invalid alternation operators within (?...) block.

More than one alternation operator | was encountered inside a conditional expression.

More than one alternation operator | was encountered inside a conditional expression.

Alternation operators are not allowed inside a DEFINE block.

Alternation operators are not allowed inside a DEFINE block.

A repetition operator cannot be applied to a zero-width assertion.

A repetition operator cannot be applied to a zero-width assertion.

left-curly-bracket

left-curly-bracket

right-curly-bracket

right-curly-bracket

0123456789

0123456789

Unmatched quantified repeat operator { or \{.

Unmatched quantified repeat operator { or \{.

Invalid preceding regular expression prior to repetition operator.

Invalid preceding regular expression prior to repetition operator.

boost thread: trying joining itself

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

Operation not permitted

Operation not permitted

Inappropriate I/O control operation

Inappropriate I/O control operation

Broken pipe

Broken pipe

operator

operator

GetProcessWindowStation

GetProcessWindowStation

CERTIFICATE REQUEST

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

CERTIFICATE

PUBLIC KEY

PUBLIC KEY

RSA part of OpenSSL 1.0.1e 11 Feb 2013

RSA part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

ssl_sess_cert

ssl_sess_cert

ssl_cert

ssl_cert

evp_pkey

evp_pkey

x509_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines

error:lX:%s:%s:%s

error:lX:%s:%s:%s

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

pubkey

pubkey

PEM part of OpenSSL 1.0.1e 11 Feb 2013

PEM part of OpenSSL 1.0.1e 11 Feb 2013

phrase is too short, needs to be at least %d chars

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

Enter PEM pass phrase:

TRUSTED CERTIFICATE

TRUSTED CERTIFICATE

X509 CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

ANY PRIVATE KEY

enc_key

enc_key

key_enc_algor

key_enc_algor

cert

cert

d.encrypted

d.encrypted

d.digest

d.digest

d.signed_and_enveloped

d.signed_and_enveloped

d.enveloped

d.enveloped

d.sign

d.sign

d.data

d.data

d.other

d.other

NETSCAPE_CERT_SEQUENCE

NETSCAPE_CERT_SEQUENCE

certs

certs

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

DSA part of OpenSSL 1.0.1e 11 Feb 2013

DSA part of OpenSSL 1.0.1e 11 Feb 2013

priv_key

priv_key

pub_key

pub_key

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

EC_PRIVATEKEY

EC_PRIVATEKEY

publicKey

publicKey

privateKey

privateKey

value.implicitlyCA

value.implicitlyCA

value.parameters

value.parameters

value.named_curve

value.named_curve

p.char_two

p.char_two

p.prime

p.prime

p.ppBasis

p.ppBasis

p.tpBasis

p.tpBasis

p.onBasis

p.onBasis

p.other

p.other

Any Extended Key Usage

Any Extended Key Usage

anyExtendedKeyUsage

anyExtendedKeyUsage

supportedAlgorithms

supportedAlgorithms

crossCertificatePair

crossCertificatePair

certificateRevocationList

certificateRevocationList

cACertificate

cACertificate

userCertificate

userCertificate

userPassword

userPassword

supportedApplicationContext

supportedApplicationContext

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

%'%1%=%C%K%O%s%

%'%1%=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

C%C'C3C7C9COCWCiC

RAND part of OpenSSL 1.0.1e 11 Feb 2013

RAND part of OpenSSL 1.0.1e 11 Feb 2013

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

lhash part of OpenSSL 1.0.1e 11 Feb 2013

lhash part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

value.single

value.single

value.set

value.set

.\crypto\evp\evp_key.c

.\crypto\evp\evp_key.c

nkey

nkey

EVP part of OpenSSL 1.0.1e 11 Feb 2013

EVP part of OpenSSL 1.0.1e 11 Feb 2013

name.relativename

name.relativename

name.fullname

name.fullname

certificateHold

certificateHold

Certificate Hold

Certificate Hold

cessationOfOperation

cessationOfOperation

Cessation Of Operation

Cessation Of Operation

keyCompromise

keyCompromise

Key Compromise

Key Compromise

%*s%s:

%*s%s:

%*sOnly Attribute Certificates

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%*sOnly User Certificates

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

cert_info

cert_info

PKCS8_PRIV_KEY_INFO

PKCS8_PRIV_KEY_INFO

pkey

pkey

pkeyalg

pkeyalg

EC part of OpenSSL 1.0.1e 11 Feb 2013

EC part of OpenSSL 1.0.1e 11 Feb 2013

USER32.DLL

USER32.DLL

NETAPI32.DLL

NETAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

ADVAPI32.DLL

ADVAPI32.DLL

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

%s: (%d bit)

%s: (%d bit)

Public-Key

Public-Key

Private-Key

Private-Key

recommended-private-length: %d bits

recommended-private-length: %d bits

public-key:

public-key:

private-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Public-Key: (%d bit)

Private-Key: (%d bit)

Private-Key: (%d bit)

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

.pp@0

.pp@0

aEÐ

aEÐ

(#EÚ

(#EÚ

ÚE

ÚE

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

\X

\X

ddddddZ

ddddddZ

ddddddZ

ddddddZ

%d.%d.%d.%d

%d.%d.%d.%d

IP Address:%d.%d.%d.%d

IP Address:%d.%d.%d.%d

URI:%s

URI:%s

DNS:%s

DNS:%s

email:%s

email:%s

EdiPartyName:

EdiPartyName:

X400Name:

X400Name:

othername:

othername:

%d.%d.%d.%d/%d.%d.%d.%d

%d.%d.%d.%d/%d.%d.%d.%d

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

x%s

x%s

%s - d:d:d%.*s %d%s

%s - d:d:d%.*s %d%s

keylen

keylen

EVP_CIPHER_key_length(cipher)

EVP_CIPHER_key_length(cipher)

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

Basis Type: %s

Basis Type: %s

Field Type: %s

Field Type: %s

ASN1 OID: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%s %s%lu (%s0x%lx)

'() ,-./:=?

'() ,-./:=?

%lu:%s:%s:%d:%s

%lu:%s:%s:%d:%s

Verifying - %s

Verifying - %s

%*sPolicy Text: %s

%*sPolicy Text: %s

%*scrlUrl:

%*scrlUrl:

EXTENDED_KEY_USAGE

EXTENDED_KEY_USAGE

%*sZone: %s, User:

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

.\crypto\x509v3\v3_akey.c

d.usernotice

d.usernotice

d.cpsuri

d.cpsuri

CERTIFICATEPOLICIES

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sExplicit Text: %s

%*sNumber%s:

%*sNumber%s:

%*sOrganization: %s

%*sOrganization: %s

%*sCPS: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

PKEY_USAGE_PERIOD

keyCertSign

keyCertSign

Certificate Sign

Certificate Sign

keyAgreement

keyAgreement

Key Agreement

Key Agreement

keyEncipherment

keyEncipherment

Key Encipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_skey.c

CONF part of OpenSSL 1.0.1e 11 Feb 2013

CONF part of OpenSSL 1.0.1e 11 Feb 2013

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

hexkey

hexkey

rsa_keygen_pubexp

rsa_keygen_pubexp

rsa_keygen_bits

rsa_keygen_bits

keylength

keylength

keyfunc

keyfunc

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

.\crypto\pkcs12\p12_key.c

.\crypto\pkcs12\p12_key.c

d.receiptList

d.receiptList

d.allOrFirstTier

d.allOrFirstTier

d.compressedData

d.compressedData

d.authenticatedData

d.authenticatedData

d.encryptedData

d.encryptedData

d.digestedData

d.digestedData

d.envelopedData

d.envelopedData

d.signedData

d.signedData

d.ori

d.ori

d.pwri

d.pwri

d.kekri

d.kekri

d.kari

d.kari

d.ktri

d.ktri

CMS_PasswordRecipientInfo

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyDerivationAlgorithm

keyIdentifier

keyIdentifier

CMS_KeyAgreeRecipientInfo

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

CMS_OriginatorIdentifierOrKey

d.originatorKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

CMS_OtherKeyAttribute

keyAttr

keyAttr

keyAttrId

keyAttrId

CMS_KeyTransRecipientInfo

CMS_KeyTransRecipientInfo

encryptedKey

encryptedKey

keyEncryptionAlgorithm

keyEncryptionAlgorithm

certificates

certificates

d.crl

d.crl

d.subjectKeyIdentifier

d.subjectKeyIdentifier

d.issuerAndSerialNumber

d.issuerAndSerialNumber

CMS_CertificateChoices

CMS_CertificateChoices

d.v2AttrCert

d.v2AttrCert

d.v1AttrCert

d.v1AttrCert

d.extendedCertificate

d.extendedCertificate

d.certificate

d.certificate

CMS_OtherCertificateFormat

CMS_OtherCertificateFormat

otherCert

otherCert

otherCertFormat

otherCertFormat

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

[[%s]]

[[%s]]

[%s] %s=%s

[%s] %s=%s

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

value.bag

value.bag

value.safes

value.safes

value.shkeybag

value.shkeybag

value.keybag

value.keybag

value.sdsicert

value.sdsicert

value.x509cert

value.x509cert

value.other

value.other

%s.dll

%s.dll

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

^0^5^0^1^)^0^

^0^5^0^1^)^0^

{{{$631}}}

{{{$631}}}

{{{$764}}}

{{{$764}}}

{{{$765}}}

{{{$765}}}

{{{$766}}}

{{{$766}}}

{{{$767}}}

{{{$767}}}

{{{$770}}}

{{{$770}}}

{{{$771}}}

{{{$771}}}

!f%f#f

!f%f#f

_(_>_6_ _

_(_>_6_ _

_ _>_4_:_0_)_:_-_

_ _>_4_:_0_)_:_-_

_:_)_:_1_ _

_:_)_:_1_ _

:_-_-_0_-_

:_-_-_0_-_

]>]2]3]9](]4])]

]>]2]3]9](]4])]

]

]

]9]4].]>]2] ]8]/]8]9]

]9]4].]>]2] ]8]/]8]9]

F6F4F)F2F#FòF/F)F(F

F6F4F)F2F#FòF/F)F(F

F%F.F'F(F!F#F

F%F.F'F(F!F#F

;_:_9_>_*_3_ _

;_:_9_>_*_3_ _

_:_>_-_<_7_>

_:_>_-_<_7_>

]3].])]

]3].])]

2_:_ _7_0_;_

2_:_ _7_0_;_

/[3[)[>[:[?[

/[3[)[>[:[?[

{{{$466}}}

{{{$466}}}

{{{$473}}}

{{{$473}}}

{{{$476}}}

{{{$476}}}

{{{$478}}}

{{{$478}}}

C,CÇC4C"C1C&C

C,CÇC4C"C1C&C

@/@&@4@7@!@2@%@

@/@&@4@7@!@2@%@

@/@:@)@,@,@!@

@/@:@)@,@,@!@

@/@:@)@,@,@!@`@

@/@:@)@,@,@!@`@

@)@2@%@&@/@8@

@)@2@%@&@/@8@

{{{$407}}}

{{{$407}}}

{{{$408}}}

{{{$408}}}

{{{$409}}}

{{{$409}}}

{{{$410}}}

{{{$410}}}

@%@!@2@#@(@

@%@!@2@#@(@

@(@/@2@4@

@(@/@2@4@

{{{$411}}}

{{{$411}}}

{{{$413}}}

{{{$413}}}

{{{$414}}}

{{{$414}}}

{{{$415}}}

{{{$415}}}

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

insert into ItemTable (key, value) VALUES ('%s', '%s');

insert into ItemTable (key, value) VALUES ('%s', '%s');

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

7<.-8>

7<.-8>

{{{$317}}}

{{{$317}}}

{{{$318}}}

{{{$318}}}

{{{$319}}}

{{{$319}}}

{{{$339}}}

{{{$339}}}

KEYWORDS

KEYWORDS

KEYWORD

KEYWORD

{{{$362}}}

{{{$362}}}

{{{$364}}}

{{{$364}}}

{{{$363}}}

{{{$363}}}

{{{$365}}}

{{{$365}}}

]2]3]9](]4])]

]2]3]9](]4])]

]?].])]/]])]4]2]3]

]?].])]/]])]4]2]3]

]

]

4]>]2]3]

4]>]2]3]

(more frames truncated from call stack report)

(more frames truncated from call stack report)

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

%d/%d/%d d:d:d

%d/%d/%d d:d:d

Module %d

Module %d

Checksum: 0xx Time Stamp: 0xx

Checksum: 0xx Time Stamp: 0xx

Image Base: 0xx Image Size: 0xx

Image Base: 0xx Image Size: 0xx

File Size: %-10d File Time: %s

File Size: %-10d File Time: %s

Product: %s

Product: %s

Company: %s

Company: %s

FileVer: %d.%d.%d.%d

FileVer: %d.%d.%d.%d

FileDesc: %s

FileDesc: %s

ProdVer: %d.%d.%d.%d

ProdVer: %d.%d.%d.%d

Windows Vista

Windows Vista

Windows 7

Windows 7

Windows 8

Windows 8

Windows Server 2008

Windows Server 2008

Windows 9

Windows 9

Windows Server 2008 R2

Windows Server 2008 R2

Web Edition

Web Edition

Windows XP

Windows XP

Windows Server 2012

Windows Server 2012

Windows Server 9

Windows Server 9

Windows 2000

Windows 2000

(build %d)

(build %d)

Error occurred at %s.

Error occurred at %s.

This sample does not support this version of Windows.

This sample does not support this version of Windows.

Operating system: Could not Determine

Operating system: Could not Determine

Operating system: %s

Operating system: %s

%d%% memory in use.

%d%% memory in use.

%d processor(s), type %d.

%d processor(s), type %d.

%d MBytes physical memory free.

%d MBytes physical memory free.

%d MBytes paging file.

%d MBytes paging file.

%d MBytes paging file free.

%d MBytes paging file free.

%d MBytes user address space free.

%d MBytes user address space free.

%d MBytes user address space.

%d MBytes user address space.

Windows Server 2003 R2

Windows Server 2003 R2

Web Server Edition

Web Server Edition

a Float Denormal Operand

a Float Denormal Operand

Windows Home Server

Windows Home Server

Windows Storage Server 2003

Windows Storage Server 2003

Windows Server 2003

Windows Server 2003

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

a Float Invalid Operation

a Float Invalid Operation

0xx:

0xx:

%s\CRASH_REPORT_%s.txt

%s\CRASH_REPORT_%s.txt

%d MBytes physical memory.

%d MBytes physical memory.

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

%s caused %s (0xx)

%s caused %s (0xx)

in module %s at x:x.

in module %s at x:x.

%s location x caused an access violation.

%s location x caused an access violation.

===== [end of %s] =====

===== [end of %s] =====

Exception code is 0xX

Exception code is 0xX

Crash dump file: %s

Crash dump file: %s

Crash report file :%s

Crash report file :%s

%s\CRASH_DUMP_%s.dmp

%s\CRASH_DUMP_%s.dmp

Error creating dump file, err=%d

Error creating dump file, err=%d

P%d_T%d_Dld_ld_ld_Tld_ld_ld

P%d_T%d_Dld_ld_ld_Tld_ld_ld

code: %x, addr: %x, module: %s

code: %x, addr: %x, module: %s

code: %x

code: %x

\1\=\;\9\

\1\=\;\9\

\(\=\(\9\

\(\=\(\9\

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

{{{$635}}}

{{{$635}}}

{{{$634}}}

{{{$634}}}

{{{$636}}}

{{{$636}}}

{{{$637}}}

{{{$637}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

NtQueryKey

NtQueryKey

{{{$620}}}

{{{$620}}}

{{{$622}}}

{{{$622}}}

{{{$621}}}

{{{$621}}}

{{{$623}}}

{{{$623}}}

{{{$628}}}

{{{$628}}}

{{{$629}}}

{{{$629}}}

{{{$696}}}

{{{$696}}}

{{{$695}}}

{{{$695}}}

{{{$698}}}

{{{$698}}}

{{{$697}}}

{{{$697}}}

%s 0x%I64x %s [file:%s(%u)]

%s 0x%I64x %s [file:%s(%u)]

PTF://

PTF://

hXXp://

hXXp://

hXXps://

hXXps://

wininet.dll

wininet.dll

[%u, 0xx] %s

[%u, 0xx] %s

https

https

HTTP/1.0

HTTP/1.0

Content-Type: application/x-www-form-urlencoded

Content-Type: application/x-www-form-urlencoded

request HttpSendRequestA failed...

request HttpSendRequestA failed...

Content-Length: %u

Content-Length: %u

response failed...last error %d

response failed...last error %d

{{{$674}}}

{{{$674}}}

{{{$672}}}

{{{$672}}}

{{{$673}}}

{{{$673}}}

{{{$773}}}

{{{$773}}}

{{{$776}}}

{{{$776}}}

{{{$774}}}

{{{$774}}}

{{{$775}}}

{{{$775}}}

{{{$936}}}

{{{$936}}}

{{{$935}}}

{{{$935}}}

{={={/{9{){

{={={/{9{){

{{{$867}}}

{{{$867}}}

{{{$868}}}

{{{$868}}}

0c3c.cCc

0c3c.cCc

C"C3CcC%C"C*C/C&C'CcC%C,C1CcC

C"C3CcC%C"C*C/C&C'CcC%C,C1CcC

]/]/]2]/]

]/]/]2]/]

]](]/]/]8]3])]}]

]](]/]/]8]3])]}]

{{{$779}}}

{{{$779}}}

{{{$780}}}

{{{$780}}}

_/_;_>_ _:_

_/_;_>_ _:_

_0_(_1_3_0_>_;_

_0_(_1_3_0_>_;_

{{{$966}}}

{{{$966}}}

{{{$967}}}

{{{$967}}}

D(DÐD"D D6D)D

D(DÐD"D D6D)D

s]sSs%s

s]sSs%s

[([:[[

[([:[[

{{{$761}}}

{{{$761}}}

{{{$760}}}

{{{$760}}}

{{{$763}}}

{{{$763}}}

{{{$762}}}

{{{$762}}}

--4,5=,8'>.

--4,5=,8'>.

--=,=,8'>"

--=,=,8'>"

##:" 3"6)0

##:" 3"6)0

##3"6)0,

##3"6)0,

##3!'3"55

##3!'3"55

::#;%4*;/0)9

::#;%4*;/0)9

::*;,0)5

::*;,0)5

((1) 8)=";

((1) 8)=";

((8)>";'

((8)>";'

9 %2?,52? 6

9 %2?,52? 6

22 3:"3'8!1

22 3:"3'8!1

22"3$8!=

22"3$8!=

>>'?6.? 4-=

>>'?6.? 4-=

>>.? 4-1

>>.? 4-1

>>.<:.>

>>.<:.>

22 3-

22 3-

''>&7&1-4(

''>&7&1-4(

%/6%%

%/6%%

44-5 :$5!>'7

44-5 :$5!>'7

4>'44$5$5">';

4>'44$5$5">';

voc}XXs^VY_HnSSH||e}tl}ivo

voc}XXs^VY_HnSSH||e}tl}ivo

//6.'?.:%

//6.'?.:%

//?- ?.99

//?- ?.99

##3"3"6)0,

##3"3"6)0,

##:"3"5)00

##:"3"5)00

#)0###)0###9

#)0###)0###9

99 81)8,3*:

99 81)8,3*:

99)8,3*6

99)8,3*6

11(0.?!0$;"2

11(0.?!0$;"2

ovza@CLK@uWJU@WQ\ee|dmudpovfJKQ@]QeeudsovjGO@FQeeugassDIP@eoveeu

ovza@CLK@uWJU@WQ\ee|dmudpovfJKQ@]QeeudsovjGO@FQeeugassDIP@eoveeu

_3_*_8_6_1_

_3_*_8_6_1_

_ _>_ _:_

_ _>_ _:_

C&C%C"C6C/C7CcC

C&C%C"C6C/C7CcC

C"C1C1C*C&C1CcC%C,C1CcC

C"C1C1C*C&C1CcC%C,C1CcC

spx.params

spx.params

spx.assets

spx.assets

0_ _7_:_-_

0_ _7_:_-_

SQLite format 3

SQLite format 3

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

3.7.16

3.7.16

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

{{{$101}}}

{{{$101}}}

{{{$105}}}

{{{$105}}}

{{{$106}}}

{{{$106}}}

{{{$107}}}

{{{$107}}}

{{{$108}}}

{{{$108}}}

{{{$102}}}

{{{$102}}}

{{{$103}}}

{{{$103}}}

{{{$104}}}

{{{$104}}}

{{{$113}}}

{{{$113}}}

{{{$109}}}

{{{$109}}}

{{{$110}}}

{{{$110}}}

{{{$111}}}

{{{$111}}}

{{{$112}}}

{{{$112}}}

{{{$100}}}

{{{$100}}}

{{{$114}}}

{{{$114}}}

{{{$115}}}

{{{$115}}}

{{{$118}}}

{{{$118}}}

{{{$119}}}

{{{$119}}}

{{{$116}}}

{{{$116}}}

{{{$117}}}

{{{$117}}}

{{{$122}}}

{{{$122}}}

{{{$123}}}

{{{$123}}}

{{{$120}}}

{{{$120}}}

{{{$121}}}

{{{$121}}}

{{{$542}}}

{{{$542}}}

{{{$543}}}

{{{$543}}}

{{{$529}}}

{{{$529}}}

{{{$530}}}

{{{$530}}}

{{{$531}}}

{{{$531}}}

{{{$532}}}

{{{$532}}}

{{{$533}}}

{{{$533}}}

{{{$538}}}

{{{$538}}}

{{{$539}}}

{{{$539}}}

\3\3\(\/\(\.\=\,\9\.\|\

\3\3\(\/\(\.\=\,\9\.\|\

\9\;\5\/\(\9\.\

\9\;\5\/\(\9\.\

\.\3\ \/\9\.\

\.\3\ \/\9\.\

\5\:\9\(\5\1\9\

\5\:\9\(\5\1\9\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

{{{$541}}}

{{{$541}}}

{{{$534}}}

{{{$534}}}

{{{$535}}}

{{{$535}}}

{{{$536}}}

{{{$536}}}

{{{$537}}}

{{{$537}}}

{{{$242}}}

{{{$242}}}

{{{$243}}}

{{{$243}}}

{{{$566}}}

{{{$566}}}

{{{$565}}}

{{{$565}}}

{{{$569}}}

{{{$569}}}

{{{$570}}}

{{{$570}}}

{{{$571}}}

{{{$571}}}

{{{$567}}}

{{{$567}}}

{{{$568}}}

{{{$568}}}

{{{$573}}}

{{{$573}}}

{{{$574}}}

{{{$574}}}

{{{$575}}}

{{{$575}}}

{{{$576}}}

{{{$576}}}

{{{$572}}}

{{{$572}}}

{{{$578}}}

{{{$578}}}

{{{$579}}}

{{{$579}}}

{{{$580}}}

{{{$580}}}

{{{$577}}}

{{{$577}}}

{{{$582}}}

{{{$582}}}

{{{$583}}}

{{{$583}}}

{{{$581}}}

{{{$581}}}

{{{$585}}}

{{{$585}}}

{{{$584}}}

{{{$584}}}

{{{$588}}}

{{{$588}}}

{{{$586}}}

{{{$586}}}

{{{$587}}}

{{{$587}}}

{{{$591}}}

{{{$591}}}

{{{$592}}}

{{{$592}}}

{{{$589}}}

{{{$589}}}

{{{$595}}}

{{{$595}}}

{{{$594}}}

{{{$594}}}

{{{$598}}}

{{{$598}}}

{{{$596}}}

{{{$596}}}

{{{$597}}}

{{{$597}}}

{{{$600}}}

{{{$600}}}

{{{$601}}}

{{{$601}}}

{{{$599}}}

{{{$599}}}

{{{$603}}}

{{{$603}}}

{{{$602}}}

{{{$602}}}

{{{$606}}}

{{{$606}}}

{{{$604}}}

{{{$604}}}

{{{$605}}}

{{{$605}}}

{{{$608}}}

{{{$608}}}

{{{$609}}}

{{{$609}}}

{{{$607}}}

{{{$607}}}

{{{$611}}}

{{{$611}}}

{{{$610}}}

{{{$610}}}

,\0\=\(\:\3\.\1\

,\0\=\(\:\3\.\1\

u%W%@%S%d%V%V%@%Q%a%D%Q%D%

u%W%@%S%d%V%V%@%Q%a%D%Q%D%

{{{$510}}}

{{{$510}}}

{{{$514}}}

{{{$514}}}

{{{$511}}}

{{{$511}}}

{{{$512}}}

{{{$512}}}

{{{$513}}}

{{{$513}}}

{{{$515}}}

{{{$515}}}

{{{$518}}}

{{{$518}}}

{{{$516}}}

{{{$516}}}

{{{$517}}}

{{{$517}}}

{{{$519}}}

{{{$519}}}

{{{$520}}}

{{{$520}}}

{{{$521}}}

{{{$521}}}

{{{$522}}}

{{{$522}}}

{{{$523}}}

{{{$523}}}

{{{$524}}}

{{{$524}}}

{{{$525}}}

{{{$525}}}

{{{$526}}}

{{{$526}}}

{{{$527}}}

{{{$527}}}

{{{$528}}}

{{{$528}}}

{{{$618}}}

{{{$618}}}

{{{$619}}}

{{{$619}}}

{{{$614}}}

{{{$614}}}

{{{$615}}}

{{{$615}}}

{{{$616}}}

{{{$616}}}

{{{$617}}}

{{{$617}}}

{{{$722}}}

{{{$722}}}

{{{$724}}}

{{{$724}}}

{{{$723}}}

{{{$723}}}

{{{$725}}}

{{{$725}}}

{{{$729}}}

{{{$729}}}

{{{$727}}}

{{{$727}}}

{{{$726}}}

{{{$726}}}

{{{$728}}}

{{{$728}}}

{{{$730}}}

{{{$730}}}

{{{$731}}}

{{{$731}}}

{{{$733}}}

{{{$733}}}

{{{$732}}}

{{{$732}}}

{{{$735}}}

{{{$735}}}

{{{$734}}}

{{{$734}}}

{{{$736}}}

{{{$736}}}

{{{$740}}}

{{{$740}}}

{{{$739}}}

{{{$739}}}

{{{$738}}}

{{{$738}}}

{{{$737}}}

{{{$737}}}

{{{$747}}}

{{{$747}}}

{{{$749}}}

{{{$749}}}

{{{$748}}}

{{{$748}}}

{{{$751}}}

{{{$751}}}

{{{$752}}}

{{{$752}}}

{{{$643}}}

{{{$643}}}

{{{$648}}}

{{{$648}}}

{{{$645}}}

{{{$645}}}

{{{$644}}}

{{{$644}}}

{{{$647}}}

{{{$647}}}

{{{$646}}}

{{{$646}}}

00:00:00.

00:00:00.

1.1.3

1.1.3

gen_codes: max_code %d

gen_codes: max_code %d

code %d bits %d->%d

code %d bits %d->%d

bl code -

bl code -

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

{{{$139}}}

{{{$139}}}

{{{$138}}}

{{{$138}}}

{{{$141}}}

{{{$141}}}

{{{$140}}}

{{{$140}}}

{{{$142}}}

{{{$142}}}

{{{$144}}}

{{{$144}}}

{{{$143}}}

{{{$143}}}

{{{$146}}}

{{{$146}}}

{{{$145}}}

{{{$145}}}

{{{$124}}}

{{{$124}}}

{{{$126}}}

{{{$126}}}

{{{$125}}}

{{{$125}}}

{{{$132}}}

{{{$132}}}

{{{$131}}}

{{{$131}}}

{{{$134}}}

{{{$134}}}

{{{$133}}}

{{{$133}}}

{{{$128}}}

{{{$128}}}

{{{$127}}}

{{{$127}}}

{{{$130}}}

{{{$130}}}

{{{$129}}}

{{{$129}}}

{{{$135}}}

{{{$135}}}

boost::too_many_args: format-string referred to less arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_few_args: format-string referred to more arguments than were passed

Union operator has to be applied to node sets

Union operator has to be applied to node sets

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"

Conduit::SearchProtector::Utils::Singleton::GetInstance

Conduit::SearchProtector::Utils::Singleton::GetInstance

invalid map key

invalid map key

%s[%d]: %s

%s[%d]: %s

SQLITE_ERROR

SQLITE_ERROR

SQLITE_OK

SQLITE_OK

SQLITE_PERM

SQLITE_PERM

SQLITE_INTERNAL

SQLITE_INTERNAL

SQLITE_BUSY

SQLITE_BUSY

SQLITE_ABORT

SQLITE_ABORT

SQLITE_NOMEM

SQLITE_NOMEM

SQLITE_LOCKED

SQLITE_LOCKED

SQLITE_INTERRUPT

SQLITE_INTERRUPT

SQLITE_READONLY

SQLITE_READONLY

SQLITE_CORRUPT

SQLITE_CORRUPT

SQLITE_IOERR

SQLITE_IOERR

SQLITE_FULL

SQLITE_FULL

SQLITE_NOTFOUND

SQLITE_NOTFOUND

SQLITE_PROTOCOL

SQLITE_PROTOCOL

SQLITE_CANTOPEN

SQLITE_CANTOPEN

SQLITE_SCHEMA

SQLITE_SCHEMA

SQLITE_EMPTY

SQLITE_EMPTY

SQLITE_CONSTRAINT

SQLITE_CONSTRAINT

SQLITE_TOOBIG

SQLITE_TOOBIG

SQLITE_MISUSE

SQLITE_MISUSE

SQLITE_MISMATCH

SQLITE_MISMATCH

SQLITE_AUTH

SQLITE_AUTH

SQLITE_NOLFS

SQLITE_NOLFS

SQLITE_RANGE

SQLITE_RANGE

SQLITE_FORMAT

SQLITE_FORMAT

SQLITE_DONE

SQLITE_DONE

SQLITE_ROW

SQLITE_ROW

CPPSQLITE_ERROR

CPPSQLITE_ERROR

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d-d-d

d-d-d

d:d:d

d:d:d

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

RowKey

RowKey

GetProcessHeap

GetProcessHeap

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

OsError 0x%x (%u)

OsError 0x%x (%u)

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

cannot limit WAL size: %s

cannot limit WAL size: %s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

invalid page number %d

invalid page number %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

2nd reference to page %d

2nd reference to page %d

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

freelist leaf count too big on page %d

freelist leaf count too big on page %d

failed to get page %d

failed to get page %d

unable to get the page. error code=%d

unable to get the page. error code=%d

Page %d:

Page %d:

On tree page %d cell %d:

On tree page %d cell %d:

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On page %d at right child:

On page %d at right child:

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Pointer map page %d is referenced

Pointer map page %d is referenced

Page %d is never used

Page %d is never used

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ collide: %s

MJ collide: %s

MJ delete: %s

MJ delete: %s

foreign key constraint failed

foreign key constraint failed

-mjX9X

-mjX9X

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

abort at %d in [%s]: %s

abort at %d in [%s]: %s

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

sqlite_master

sqlite_master

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

database table is locked: %s

database table is locked: %s

cannot open value of type %s

cannot open value of type %s

cannot open virtual table: %s

cannot open virtual table: %s

no such column: "%s"

no such column: "%s"

cannot open view: %s

cannot open view: %s

indexed

indexed

foreign key

foreign key

cannot open %s column for writing

cannot open %s column for writing

misuse of aliased aggregate %s

misuse of aliased aggregate %s

%s: %s.%s

%s: %s.%s

%s: %s.%s.%s

%s: %s.%s.%s

not authorized to use function: %s

not authorized to use function: %s

%s: %s

%s: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

too many SQL variables

too many SQL variables

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

sqlite_rename_table

sqlite_rename_table

%s%.*s"%w"

%s%.*s"%w"

sqlite_rename_parent

sqlite_rename_parent

sqlite_rename_trigger

sqlite_rename_trigger

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

table %s may not be altered

table %s may not be altered

sqlite_

sqlite_

view %s may not be altered

view %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

sqlite_sequence

sqlite_sequence

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_altertab_%s

sqlite_stat1

sqlite_stat1

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

too many attached databases - max %d

too many attached databases - max %d

invalid name: "%s"

invalid name: "%s"

database %s is already in use

database %s is already in use

no such database: %s

no such database: %s

unable to open database: %s

unable to open database: %s

cannot detach database %s

cannot detach database %s

sqlite_detach

sqlite_detach

database %s is locked

database %s is locked

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

sqlite_attach

sqlite_attach

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

there is already an index named %s

there is already an index named %s

duplicate column name: %s

duplicate column name: %s

too many columns on %s

too many columns on %s

table "%s" has more than one primary key

table "%s" has more than one primary key

default value of column [%s] is not constant

default value of column [%s] is not constant

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

CREATE %s %.*s

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

view %s is circularly defined

sqlite_stat%d

sqlite_stat%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

table %s may not be dropped

table %s may not be dropped

sqlite_stat

sqlite_stat

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

indexed columns are not unique

indexed columns are not unique

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

views may not be indexed

views may not be indexed

table %s may not be indexed

table %s may not be indexed

there is already a table named %s

there is already a table named %s

virtual tables may not be indexed

virtual tables may not be indexed

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

index %s already exists

index %s already exists

table %s has no column named %s

table %s has no column named %s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

no such index: %S

no such index: %S

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

a JOIN clause is required before %s

a JOIN clause is required before %s

no such collation sequence: %s

no such collation sequence: %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

cannot modify %s because it is a view

cannot modify %s because it is a view

table %s may not be modified

table %s may not be modified

sqlite_source_id

sqlite_source_id

sqlite_version

sqlite_version

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_log

sqlite_log

sqlite_compileoption_get

sqlite_compileoption_get

foreign key mismatch - "%w" referencing "%w"

foreign key mismatch - "%w" referencing "%w"

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

table %S has no column named %s

table %S has no column named %s

%d values for %d columns

%d values for %d columns

%s.%s may not be NULL

%s.%s may not be NULL

PRIMARY KEY must be unique

PRIMARY KEY must be unique

constraint %s failed

constraint %s failed

sqlite3_extension_init

sqlite3_extension_init

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

unable to open shared library [%s]

unable to open shared library [%s]

automatic extension loading failed: %s

automatic extension loading failed: %s

error during initialization: %s

error during initialization: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

foreign_key_check

foreign_key_check

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

unsupported file format

database schema is locked: %s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s:%d

%s:%d

%s.%s

%s.%s

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

sqlite_subquery_%p_

sqlite_subquery_%p_

no such index: %s

no such index: %s

%s.%s.%s

%s.%s.%s

too many references to "%s": max 65535

too many references to "%s": max 65535

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

-- TRIGGER %s

-- TRIGGER %s

no such trigger: %S

no such trigger: %S

no such column: %s

no such column: %s

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s SUBQUERY %d

%s AS %s

%s AS %s

%s TABLE %s

%s TABLE %s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid=?)

%s (rowid=?)

%s (rowid)

%s (rowid)

%s (rowid>?)

%s (rowid>?)

%s (~%lld rows)

%s (~%lld rows)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

cannot use index: %s

cannot use index: %s

at most %d tables in a join

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

no such vfs: %s

no such vfs: %s

%s mode not allowed: %s

%s mode not allowed: %s

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

$@!@4@!@

$@!@4@!@

K.K?K?K"K%K,KkK8K.K9K=K"K(K.KkK-K*K"K'K.K/KeKkK

K.K?K?K"K%K,KkK8K.K9K=K"K(K.KkK-K*K"K'K.K/KeKkK

6S%S6S=S'S

6S%S6S=S'S

{{{$710}}}

{{{$710}}}

{{{$708}}}

{{{$708}}}

{{{$709}}}

{{{$709}}}

{{{$137}}}

{{{$137}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\cltmng.pdb

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\cltmng.pdb

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

USER32.dll

USER32.dll

VERSION.dll

VERSION.dll

PSAPI.DLL

PSAPI.DLL

InternetCrackUrlW

InternetCrackUrlW

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpSendRequestW

HttpSendRequestW

HttpSendRequestA

HttpSendRequestA

HttpSendRequestExW

HttpSendRequestExW

HttpEndRequestW

HttpEndRequestW

HttpQueryInfoA

HttpQueryInfoA

WININET.dll

WININET.dll

dbghelp.dll

dbghelp.dll

CryptMsgClose

CryptMsgClose

CertGetNameStringW

CertGetNameStringW

CertFreeCertificateContext

CertFreeCertificateContext

CertFindCertificateInStore

CertFindCertificateInStore

CertCloseStore

CertCloseStore

CryptMsgGetParam

CryptMsgGetParam

CRYPT32.dll

CRYPT32.dll

UrlUnescapeW

UrlUnescapeW

SHLWAPI.dll

SHLWAPI.dll

CreateIoCompletionPort

CreateIoCompletionPort

GetCPInfo

GetCPInfo

RegCloseKey

RegCloseKey

RegOpenKeyExW

RegOpenKeyExW

RegDeleteKeyW

RegDeleteKeyW

RegEnumKeyExW

RegEnumKeyExW

RegCreateKeyExW

RegCreateKeyExW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegNotifyChangeKeyValue

RegNotifyChangeKeyValue

ADVAPI32.dll

ADVAPI32.dll

ShellExecuteExW

ShellExecuteExW

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

ReportEventA

ReportEventA

I_RpcBindingInqTransportType

I_RpcBindingInqTransportType

RPCRT4.dll

RPCRT4.dll

zcÁ

zcÁ

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\SearchProtect

function k(a) { return a

function k(a) { return a

var c, d, h, m, g = e, f, b = j[a]; b && typeof b === "object" && typeof b.toJSON === "function" && (b = b.toJSON(a)); typeof i === "function" && (b = i.call(j, a, b)); switch (typeof b) {

var c, d, h, m, g = e, f, b = j[a]; b && typeof b === "object" && typeof b.toJSON === "function" && (b = b.toJSON(a)); typeof i === "function" && (b = i.call(j, a, b)); switch (typeof b) {

e = n; f = []; if (Object.prototype.toString.apply(b) === "[object Array]") { m = b.length; for (c = 0; c

e = n; f = []; if (Object.prototype.toString.apply(b) === "[object Array]") { m = b.length; for (c = 0; c

} if (typeof Date.prototype.toJSON !== "function") Date.prototype.toJSON = function () { return isFinite(this.valueOf()) ? this.getUTCFullYear() "-" k(this.getUTCMonth() 1) "-" k(this.getUTCDate()) "T" k(this.getUTCHours()) ":" k(this.getUTCMinutes()) ":" k(this.getUTCSeconds()) "Z" : null }, String.prototype.toJSON = Number.prototype.toJSON = Boolean.prototype.toJSON = function () { return this.valueOf() }; var q = /[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,

} if (typeof Date.prototype.toJSON !== "function") Date.prototype.toJSON = function () { return isFinite(this.valueOf()) ? this.getUTCFullYear() "-" k(this.getUTCMonth() 1) "-" k(this.getUTCDate()) "T" k(this.getUTCHours()) ":" k(this.getUTCMinutes()) ":" k(this.getUTCSeconds()) "Z" : null }, String.prototype.toJSON = Number.prototype.toJSON = Boolean.prototype.toJSON = function () { return this.valueOf() }; var q = /[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,

p = /[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g, e, n, r = { "\u0008": "\\b", "\t": "\\t", "\n": "\\n", "\u000c": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\" }, i; if (typeof JSON.stringify !== "function") JSON.stringify = function (a, j, c) {

p = /[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g, e, n, r = { "\u0008": "\\b", "\t": "\\t", "\n": "\\n", "\u000c": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\" }, i; if (typeof JSON.stringify !== "function") JSON.stringify = function (a, j, c) {

var d; n = e = ""; if (typeof c === "number") for (d = 0; d

var d; n = e = ""; if (typeof c === "number") for (d = 0; d

}; if (typeof JSON.parse !== "function") JSON.parse = function (a, e) {

}; if (typeof JSON.parse !== "function") JSON.parse = function (a, e) {

function c(a, d) { var g, f, b = a[d]; if (b && typeof b === "object") for (g in b) Object.prototype.hasOwnProperty.call(b, g) && (f = c(b, g), f !== void 0 ? b[g] = f : delete b[g]); return e.call(a, d, b) } var d, a = String(a); q.lastIndex = 0; q.test(a) && (a = a.replace(q, function (a) { return "\\u" ("0000" a.charCodeAt(0).toString(16)).slice(-4) })); if (/^[\],:{}\s]*$/.test(a.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, "@").replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g,

function c(a, d) { var g, f, b = a[d]; if (b && typeof b === "object") for (g in b) Object.prototype.hasOwnProperty.call(b, g) && (f = c(b, g), f !== void 0 ? b[g] = f : delete b[g]); return e.call(a, d, b) } var d, a = String(a); q.lastIndex = 0; q.test(a) && (a = a.replace(q, function (a) { return "\\u" ("0000" a.charCodeAt(0).toString(16)).slice(-4) })); if (/^[\],:{}\s]*$/.test(a.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, "@").replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g,

"]").replace(/(?:^|:|,)(?:\s*\[) /g, ""))) return d = eval("(" a ")"), typeof e === "function" ? c({ "": d }, "") : d; throw new SyntaxError("JSON.parse");

"]").replace(/(?:^|:|,)(?:\s*\[) /g, ""))) return d = eval("(" a ")"), typeof e === "function" ? c({ "": d }, "") : d; throw new SyntaxError("JSON.parse");

ws.api = ws.api || {};

ws.api = ws.api || {};

ws.api.FunctionsEnum = {

ws.api.FunctionsEnum = {

SET_KEY: 1,

SET_KEY: 1,

GET_KEY: 2,

GET_KEY: 2,

REMOVE_KEY: 3,

REMOVE_KEY: 3,

ws.api.StatusEnum = {

ws.api.StatusEnum = {

SP_RESULT_KEY_DOES_NOT_EXIST: -2,

SP_RESULT_KEY_DOES_NOT_EXIST: -2,

ws.api.RESULT_TIMOUET = 3000;

ws.api.RESULT_TIMOUET = 3000;

ws.api.storage = ws.api.storage || {};

ws.api.storage = ws.api.storage || {};

ws.api.storage.setKey =

ws.api.storage.setKey =

function (pluginId, key, value, callback, options) {

function (pluginId, key, value, callback, options) {

if (typeof (pluginId) !== 'string' || pluginId === "" || typeof (key) !== 'string' || key === "" || typeof (callback) !== 'function') {

if (typeof (pluginId) !== 'string' || pluginId === "" || typeof (key) !== 'string' || key === "" || typeof (callback) !== 'function') {

callback(ws.api.StatusEnum.SP_RESULT_INVALID_PARAMS);

callback(ws.api.StatusEnum.SP_RESULT_INVALID_PARAMS);

// Construct an object which will be passed to the VC holding all the parameters

// Construct an object which will be passed to the VC holding all the parameters

data.funcId = ws.api.FunctionsEnum.SET_KEY;

data.funcId = ws.api.FunctionsEnum.SET_KEY;

data.pluginId = pluginId;

data.pluginId = pluginId;

data.key = key;

data.key = key;

data.value = value;

data.value = value;

data.options = options; // Currently not used - this is for future use, if we will want to add more parameters we will

data.options = options; // Currently not used - this is for future use, if we will want to add more parameters we will

var resultObj = JSON.parse(result);

var resultObj = JSON.parse(result);

callback(resultObj.status);

callback(resultObj.status);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE);

}, ws.api.RESULT_TIMOUET);

}, ws.api.RESULT_TIMOUET);

ws.internal.SendStringToVC(JSON.stringify(data), myCallback);

ws.internal.SendStringToVC(JSON.stringify(data), myCallback);

ws.api.storage.getKey =

ws.api.storage.getKey =

function (pluginId, key, callback, options) {

function (pluginId, key, callback, options) {

data.funcId = ws.api.FunctionsEnum.GET_KEY;

data.funcId = ws.api.FunctionsEnum.GET_KEY;

var value = resultObj.value;

var value = resultObj.value;

if (resultObj.status != ws.api.StatusEnum.SP_RESULT_SUCCESS) {

if (resultObj.status != ws.api.StatusEnum.SP_RESULT_SUCCESS) {

callback(resultObj.status, value);

callback(resultObj.status, value);

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE, "");

callback(ws.api.StatusEnum.SP_RESULT_SP_UNRESPONSIVE, "");

ws.api.storage.removeKey =

ws.api.storage.removeKey =

data.funcId = ws.api.FunctionsEnum.REMOVE_KEY;

data.funcId = ws.api.FunctionsEnum.REMOVE_KEY;

ws.api.system = ws.api.system || {};

ws.api.system = ws.api.system || {};

ws.api.system.remove =

ws.api.system.remove =

data.funcId = ws.api.FunctionsEnum.REMOVE;

data.funcId = ws.api.FunctionsEnum.REMOVE;

data.shouldCallUninstaller = shouldCallUninstaller;

data.shouldCallUninstaller = shouldCallUninstaller;

ws.internal = ws.internal || {};

ws.internal = ws.internal || {};

if (ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID === undefined) {

if (ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID === undefined) {

ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID = true;

ws.internal.injectedSP_PLUGIN_ID_SP_TASK_ID = true;

;74/, (%#

;74/, (%#

~{xrpfa\ZSM@;3-%U

~{xrpfa\ZSM@;3-%U

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;8;

7 7$7(7,707

7 7$7(7,707

1%2s2

1%2s2

14282

14282

=>??}?

=>??}?

: ;';0;9;

: ;';0;9;

2-242g2n2}2

2-242g2n2}2

9”9C9R9a9p9

9”9C9R9a9p9

2$2C2R2a2p2

2$2C2R2a2p2

9%:1:7:<:>

9%:1:7:<:>

;"

;"

7"7)73787|7

7"7)73787|7

;";&;*;.;5;

;";&;*;.;5;

5#5'5 5/53575>5

5#5'5 5/53575>5

; ;$;(;,;0;4;3=

; ;$;(;,;0;4;3=

:#->

:#->

;

;

1-1A1U1i1}1

1-1A1U1i1}1

3 3$3(3,303

3 3$3(3,303

7084888

7084888

0 0$0(0,000

0 0$0(0,000

5#525?5`5

5#525?5`5

= =$=(=,=0=

= =$=(=,=0=

626?6[6|6

626?6[6|6

9%9S9b9o9

9%9S9b9o9

9Ÿ9

9Ÿ9

1"2F2i2~2

1"2F2i2~2

: :$:#>3>

: :$:#>3>

6d6C6N6X6b6l6v6

6d6C6N6X6b6l6v6

9 9$9(949

9 9$9(949

7 7$707@7

7 7$707@7

= =(=\=`=

= =(=\=`=

0$1(1,1014181

0$1(1,1014181

2 2$2(2,2024282

2 2$2(2,2024282

; ;$;(;,;|=

; ;$;(;,;|=

4,484@4`4|4

4,484@4`4|4

7,787\7|7

7,787\7|7

=,=8=@=`=

=,=8=@=`=

1$1,181`1

1$1,181`1

=(=4=

=(=4=

mmscoree.dll

mmscoree.dll

nkernel32.dll

nkernel32.dll

combase.dll

combase.dll

- floating point support not loaded

- floating point support not loaded

- CRT not initialized

- CRT not initialized

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

portuguese-brazilian

portuguese-brazilian

8.0.0.0-11.999.999.999

8.0.0.0-11.999.999.999

33.0.0.0-36.999.999.999

33.0.0.0-36.999.999.999

16.0.0.0-31.999.999.999

16.0.0.0-31.999.999.999

{{{$668}}}

{{{$668}}}

{{{$669}}}

{{{$669}}}

{{{$670}}}

{{{$670}}}

{{{$671}}}

{{{$671}}}

2.16.20.192

2.16.20.192

UserRepository.dat

UserRepository.dat

SystemRepository.dat

SystemRepository.dat

UIRepository.dat

UIRepository.dat

chrome-extension_

chrome-extension_

_0.localstorage

_0.localstorage

{{{$257}}}

{{{$257}}}

;{{{$668}}}

;{{{$668}}}

{{{$256}}}

{{{$256}}}

{{{$260}}}

{{{$260}}}

{{{$259}}}

{{{$259}}}

36.0.0.0

36.0.0.0

32.0.0.0

32.0.0.0

{{{$296}}}

{{{$296}}}

{{{$295}}}

{{{$295}}}

{{{$298}}}

{{{$298}}}

{{{$299}}}

{{{$299}}}

{{{$301}}}

{{{$301}}}

{{{$302}}}

{{{$302}}}

Failed to set Url

Failed to set Url

{{{$309}}}

{{{$309}}}

{{{$312}}}

{{{$312}}}

{{{$308}}}

{{{$308}}}

{{{$311}}}

{{{$311}}}

{{{$310}}}

{{{$310}}}

{{{$314}}}

{{{$314}}}

{{{$315}}}

{{{$315}}}

{{{$321}}}

{{{$321}}}

{{{$322}}}

{{{$322}}}

{{{$327}}}

{{{$327}}}

{{{$330}}}

{{{$330}}}

{{{$334}}}

{{{$334}}}

{{{$335}}}

{{{$335}}}

{{{$337}}}

{{{$337}}}

{{{$338}}}

{{{$338}}}

{{{$349}}}

{{{$349}}}

{{{$350}}}

{{{$350}}}

{{{$356}}}

{{{$356}}}

{{{$355}}}

{{{$355}}}

{{{$360}}}

{{{$360}}}

{{{$359}}}

{{{$359}}}

{{{$383}}}

{{{$383}}}

{{{$385}}}

{{{$385}}}

{{{$386}}}

{{{$386}}}

{{{$371}}}

{{{$371}}}

{{{$372}}}

{{{$372}}}

user32.dll

user32.dll

ieframe.dll

ieframe.dll

Windows Vista

Windows Vista

Windows 7

Windows 7

Windows Server 2008

Windows Server 2008

Windows 8

Windows 8

Windows Server 2008 R2

Windows Server 2008 R2

Windows 8.1

Windows 8.1

Windows Server 2012

Windows Server 2012

%x %x[%s] %I64x %x %x

%x %x[%s] %I64x %x %x

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_USERS

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_NLSTEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_DYN_DATA

HKEY_DYN_DATA

HKEY_CURRENT_USER_LOCAL_SETTINGS

HKEY_CURRENT_USER_LOCAL_SETTINGS

ntdll.dll

ntdll.dll

{{{$702}}}

{{{$702}}}

{{{$703}}}

{{{$703}}}

{{{$877}}}

{{{$877}}}

{{{SP#Conduit::SearchProtector::SPM::SPMAssetsManager::MapAssets#SP}}}

{{{SP#Conduit::SearchProtector::SPM::SPMAssetsManager::MapAssets#SP}}}

{{{$897}}}

{{{$897}}}

{{{SP#Conduit::SearchProtector::SPM::SPMAssetsManager::ExecuteAssetChangeAttemptDecision#SP}}}

{{{SP#Conduit::SearchProtector::SPM::SPMAssetsManager::ExecuteAssetChangeAttemptDecision#SP}}}

SPSetup.exe

SPSetup.exe

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::CheckForCompetitors#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::CheckForCompetitors#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::RequestService#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::RequestService#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::RequestServiceByBrowser#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::RequestServiceByBrowser#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::SPM::Services::LoginManager::HttpAsyncCallBack#SP}}}

hXXp://VVV.mozilla.org/keymaster/gatekeeper/there.is.only.xul

hXXp://VVV.mozilla.org/keymaster/gatekeeper/there.is.only.xul

Plugin Id: %s, Plugin Name: %s, Plugin version: %s

Plugin Id: %s, Plugin Name: %s, Plugin version: %s

chrome.exe

chrome.exe

%s\script_%d.dat

%s\script_%d.dat

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

{{{$540}}}

{{{$540}}}

{{{$376}}}

{{{$376}}}

{{{$377}}}

{{{$377}}}

{{{$378}}}

{{{$378}}}

{{{$373}}}

{{{$373}}}

{{{$374}}}

{{{$374}}}

{{{$375}}}

{{{$375}}}

{{{$379}}}

{{{$379}}}

{{{$612}}}

{{{$612}}}

{{{$553}}}

{{{$553}}}

{{{$554}}}

{{{$554}}}

{{{$712}}}

{{{$712}}}

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{$720}}}

{{{$720}}}

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

%s%s%s

%s%s%s

Correct password required

Correct password required

IDispatch error #%d

IDispatch error #%d

{{{$630}}}

{{{$630}}}

\%s\%s.exe

\%s\%s.exe

01234567

01234567

{{{SP#Conduit::SearchProtector::Application::Services::ServiceManager::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::ServiceManager::HttpAsyncCallBack#SP}}}

UserSettings.dat

UserSettings.dat

{{{SP#Conduit::SearchProtector::Application::Services::ServiceHandler::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::ServiceHandler::HttpAsyncCallBack#SP}}}

e33.0.0.0-36.999.999.999

e33.0.0.0-36.999.999.999

{{{$77}}}

{{{$77}}}

{{{SP#Conduit::SearchProtector::Application::Services::TimerBasedServiceHandler::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::TimerBasedServiceHandler::HttpAsyncCallBack#SP}}}

iRpcTransportException

iRpcTransportException

C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe

C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe

cltmngui.exe_2936:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

.EKSWU

.EKSWU

\$$;\$0|

\$$;\$0|

DlSHA512 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Camellia for x86 by

Camellia for x86 by

AES for Intel AES-NI, CRYPTOGAMS by

AES for Intel AES-NI, CRYPTOGAMS by

6-9'6-9'

6-9'6-9'

$6.:$6.:

$6.:$6.:

*?#1*?#1

*?#1*?#1

>8$4,8$4,

>8$4,8$4,

AES for x86, CRYPTOGAMS by

AES for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GHASH for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

GF(2^m) Multiplication for x86, CRYPTOGAMS by

FtPS

FtPS

D$@j.Xf

D$@j.Xf

tcPVWQ

tcPVWQ

FTPj

FTPj

tCPQ

tCPQ

,4,56,789

,4,56,789

PSSSSSSh

PSSSSSSh

j.Yf;

j.Yf;

_tcPVj@

_tcPVj@

.PjRW

.PjRW

broken pipe

broken pipe

inappropriate io control operation

inappropriate io control operation

not supported

not supported

operation in progress

operation in progress

operation not permitted

operation not permitted

operation not supported

operation not supported

operation would block

operation would block

protocol not supported

protocol not supported

function not supported

function not supported

operation canceled

operation canceled

address_family_not_supported

address_family_not_supported

operation_in_progress

operation_in_progress

operation_not_supported

operation_not_supported

protocol_not_supported

protocol_not_supported

operation_would_block

operation_would_block

address family not supported

address family not supported

0123456789-

0123456789-

%b %d %H : %M : %S %Y

%b %d %H : %M : %S %Y

%m / %d / %y

%m / %d / %y

%I : %M : %S %p

%I : %M : %S %p

%d / %m / %y

%d / %m / %y

kernel32.dll

kernel32.dll

left-curly-bracket

left-curly-bracket

right-curly-bracket

right-curly-bracket

boost thread: trying joining itself

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

Operation not permitted

Operation not permitted

Inappropriate I/O control operation

Inappropriate I/O control operation

Broken pipe

Broken pipe

GetProcessWindowStation

GetProcessWindowStation

operator

operator

CERTIFICATE REQUEST

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

CERTIFICATE

PUBLIC KEY

PUBLIC KEY

RSA part of OpenSSL 1.0.1e 11 Feb 2013

RSA part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

ssl_sess_cert

ssl_sess_cert

ssl_cert

ssl_cert

evp_pkey

evp_pkey

x509_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines

error:lX:%s:%s:%s

error:lX:%s:%s:%s

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

pubkey

pubkey

PEM part of OpenSSL 1.0.1e 11 Feb 2013

PEM part of OpenSSL 1.0.1e 11 Feb 2013

phrase is too short, needs to be at least %d chars

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

Enter PEM pass phrase:

TRUSTED CERTIFICATE

TRUSTED CERTIFICATE

X509 CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

ANY PRIVATE KEY

enc_key

enc_key

key_enc_algor

key_enc_algor

cert

cert

d.encrypted

d.encrypted

d.digest

d.digest

d.signed_and_enveloped

d.signed_and_enveloped

d.enveloped

d.enveloped

d.sign

d.sign

d.data

d.data

d.other

d.other

NETSCAPE_CERT_SEQUENCE

NETSCAPE_CERT_SEQUENCE

certs

certs

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

DSA part of OpenSSL 1.0.1e 11 Feb 2013

DSA part of OpenSSL 1.0.1e 11 Feb 2013

priv_key

priv_key

pub_key

pub_key

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

EC_PRIVATEKEY

EC_PRIVATEKEY

publicKey

publicKey

privateKey

privateKey

value.implicitlyCA

value.implicitlyCA

value.parameters

value.parameters

value.named_curve

value.named_curve

p.char_two

p.char_two

p.prime

p.prime

p.ppBasis

p.ppBasis

p.tpBasis

p.tpBasis

p.onBasis

p.onBasis

p.other

p.other

Any Extended Key Usage

Any Extended Key Usage

anyExtendedKeyUsage

anyExtendedKeyUsage

supportedAlgorithms

supportedAlgorithms

crossCertificatePair

crossCertificatePair

certificateRevocationList

certificateRevocationList

cACertificate

cACertificate

userCertificate

userCertificate

userPassword

userPassword

supportedApplicationContext

supportedApplicationContext

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

%'%1%=%C%K%O%s%

%'%1%=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

C%C'C3C7C9COCWCiC

RAND part of OpenSSL 1.0.1e 11 Feb 2013

RAND part of OpenSSL 1.0.1e 11 Feb 2013

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

lhash part of OpenSSL 1.0.1e 11 Feb 2013

lhash part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Stack part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

value.single

value.single

value.set

value.set

.\crypto\evp\evp_key.c

.\crypto\evp\evp_key.c

nkey

nkey

EVP part of OpenSSL 1.0.1e 11 Feb 2013

EVP part of OpenSSL 1.0.1e 11 Feb 2013

name.relativename

name.relativename

name.fullname

name.fullname

certificateHold

certificateHold

Certificate Hold

Certificate Hold

cessationOfOperation

cessationOfOperation

Cessation Of Operation

Cessation Of Operation

keyCompromise

keyCompromise

Key Compromise

Key Compromise

%*s%s:

%*s%s:

%*sOnly Attribute Certificates

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%*sOnly User Certificates

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

cert_info

cert_info

PKCS8_PRIV_KEY_INFO

PKCS8_PRIV_KEY_INFO

pkey

pkey

pkeyalg

pkeyalg

EC part of OpenSSL 1.0.1e 11 Feb 2013

EC part of OpenSSL 1.0.1e 11 Feb 2013

USER32.DLL

USER32.DLL

NETAPI32.DLL

NETAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

ADVAPI32.DLL

ADVAPI32.DLL

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

%s: (%d bit)

%s: (%d bit)

Public-Key

Public-Key

Private-Key

Private-Key

recommended-private-length: %d bits

recommended-private-length: %d bits

public-key:

public-key:

private-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Public-Key: (%d bit)

Private-Key: (%d bit)

Private-Key: (%d bit)

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

AES part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

:RC2 part of OpenSSL 1.0.1e 11 Feb 2013

.pp@0

.pp@0

aEÐ

aEÐ

(#EÚ

(#EÚ

ÚE

ÚE

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

libdes part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

\X

\X

ddddddZ

ddddddZ

ddddddZ

ddddddZ

%d.%d.%d.%d

%d.%d.%d.%d

IP Address:%d.%d.%d.%d

IP Address:%d.%d.%d.%d

URI:%s

URI:%s

DNS:%s

DNS:%s

email:%s

email:%s

EdiPartyName:

EdiPartyName:

X400Name:

X400Name:

othername:

othername:

%d.%d.%d.%d/%d.%d.%d.%d

%d.%d.%d.%d/%d.%d.%d.%d

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

x%s

x%s

%s - d:d:d%.*s %d%s

%s - d:d:d%.*s %d%s

keylen

keylen

EVP_CIPHER_key_length(cipher)

EVP_CIPHER_key_length(cipher)

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

Basis Type: %s

Basis Type: %s

Field Type: %s

Field Type: %s

ASN1 OID: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%s %s%lu (%s0x%lx)

'() ,-./:=?

'() ,-./:=?

%lu:%s:%s:%d:%s

%lu:%s:%s:%d:%s

Verifying - %s

Verifying - %s

%*sPolicy Text: %s

%*sPolicy Text: %s

%*scrlUrl:

%*scrlUrl:

EXTENDED_KEY_USAGE

EXTENDED_KEY_USAGE

%*sZone: %s, User:

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

.\crypto\x509v3\v3_akey.c

d.usernotice

d.usernotice

d.cpsuri

d.cpsuri

CERTIFICATEPOLICIES

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sExplicit Text: %s

%*sNumber%s:

%*sNumber%s:

%*sOrganization: %s

%*sOrganization: %s

%*sCPS: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

PKEY_USAGE_PERIOD

keyCertSign

keyCertSign

Certificate Sign

Certificate Sign

keyAgreement

keyAgreement

Key Agreement

Key Agreement

keyEncipherment

keyEncipherment

Key Encipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_skey.c

CONF part of OpenSSL 1.0.1e 11 Feb 2013

CONF part of OpenSSL 1.0.1e 11 Feb 2013

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

hexkey

hexkey

rsa_keygen_pubexp

rsa_keygen_pubexp

rsa_keygen_bits

rsa_keygen_bits

keylength

keylength

keyfunc

keyfunc

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

.\crypto\pkcs12\p12_key.c

.\crypto\pkcs12\p12_key.c

d.receiptList

d.receiptList

d.allOrFirstTier

d.allOrFirstTier

d.compressedData

d.compressedData

d.authenticatedData

d.authenticatedData

d.encryptedData

d.encryptedData

d.digestedData

d.digestedData

d.envelopedData

d.envelopedData

d.signedData

d.signedData

d.ori

d.ori

d.pwri

d.pwri

d.kekri

d.kekri

d.kari

d.kari

d.ktri

d.ktri

CMS_PasswordRecipientInfo

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyDerivationAlgorithm

keyIdentifier

keyIdentifier

CMS_KeyAgreeRecipientInfo

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

CMS_OriginatorIdentifierOrKey

d.originatorKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

CMS_OtherKeyAttribute

keyAttr

keyAttr

keyAttrId

keyAttrId

CMS_KeyTransRecipientInfo

CMS_KeyTransRecipientInfo

encryptedKey

encryptedKey

keyEncryptionAlgorithm

keyEncryptionAlgorithm

certificates

certificates

d.crl

d.crl

d.subjectKeyIdentifier

d.subjectKeyIdentifier

d.issuerAndSerialNumber

d.issuerAndSerialNumber

CMS_CertificateChoices

CMS_CertificateChoices

d.v2AttrCert

d.v2AttrCert

d.v1AttrCert

d.v1AttrCert

d.extendedCertificate

d.extendedCertificate

d.certificate

d.certificate

CMS_OtherCertificateFormat

CMS_OtherCertificateFormat

otherCert

otherCert

otherCertFormat

otherCertFormat

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

[[%s]]

[[%s]]

[%s] %s=%s

[%s] %s=%s

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

value.bag

value.bag

value.safes

value.safes

value.shkeybag

value.shkeybag

value.keybag

value.keybag

value.sdsicert

value.sdsicert

value.x509cert

value.x509cert

value.other

value.other

%s.dll

%s.dll

RegOpenKeyTransactedW

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyExW

RegDeleteKeyExW

:_-_-_0_-_

:_-_-_0_-_

]>]2]3]9](]4])]

]>]2]3]9](]4])]

]

]

]9]4].]>]2] ]8]/]8]9]

]9]4].]>]2] ]8]/]8]9]

F6F4F)F2F#FòF/F)F(F

F6F4F)F2F#FòF/F)F(F

F%F.F'F(F!F#F

F%F.F'F(F!F#F

\2\7\2\3\ \2\

\2\7\2\3\ \2\

<_3_0_>

<_3_0_>

*_1_6_1_,_ _>_3_3_

*_1_6_1_,_ _>_3_3_

{{{$1283}}}

{{{$1283}}}

{{{$631}}}

{{{$631}}}

{{{$1284}}}

{{{$1284}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\Boost\boost_1_55_0\boost/exception/detail/exception_ptr.hpp

]3].])]

]3].])]

!f%f#f

!f%f#f

_(_>_6_ _

_(_>_6_ _

_ _>_4_:_0_)_:_-_

_ _>_4_:_0_)_:_-_

_:_)_:_1_ _

_:_)_:_1_ _

;_:_9_>_*_3_ _

;_:_9_>_*_3_ _

_:_>_-_<_7_>

_:_>_-_<_7_>

^0^5^0^1^)^0^

^0^5^0^1^)^0^

{{{$466}}}

{{{$466}}}

{{{$473}}}

{{{$473}}}

{{{$476}}}

{{{$476}}}

{{{$478}}}

{{{$478}}}

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

(more frames truncated from call stack report)

(more frames truncated from call stack report)

%d/%d/%d d:d:d

%d/%d/%d d:d:d

Module %d

Module %d

Image Base: 0xx Image Size: 0xx

Image Base: 0xx Image Size: 0xx

Checksum: 0xx Time Stamp: 0xx

Checksum: 0xx Time Stamp: 0xx

File Size: %-10d File Time: %s

File Size: %-10d File Time: %s

Company: %s

Company: %s

Product: %s

Product: %s

FileDesc: %s

FileDesc: %s

FileVer: %d.%d.%d.%d

FileVer: %d.%d.%d.%d

ProdVer: %d.%d.%d.%d

ProdVer: %d.%d.%d.%d

Windows Vista

Windows Vista

Windows Server 2008

Windows Server 2008

Windows 7

Windows 7

Windows Server 2008 R2

Windows Server 2008 R2

Windows 8

Windows 8

Windows 9

Windows 9

Windows Server 2012

Windows Server 2012

Web Edition

Web Edition

Windows Server 9

Windows Server 9

Windows XP

Windows XP

Windows 2000

Windows 2000

(build %d)

(build %d)

This sample does not support this version of Windows.

This sample does not support this version of Windows.

Error occurred at %s.

Error occurred at %s.

Operating system: %s

Operating system: %s

Operating system: Could not Determine

Operating system: Could not Determine

%d processor(s), type %d.

%d processor(s), type %d.

%d%% memory in use.

%d%% memory in use.

%d MBytes physical memory free.

%d MBytes physical memory free.

%d MBytes paging file.

%d MBytes paging file.

%d MBytes paging file free.

%d MBytes paging file free.

%d MBytes user address space.

%d MBytes user address space.

%d MBytes user address space free.

%d MBytes user address space free.

Web Server Edition

Web Server Edition

Windows Server 2003 R2

Windows Server 2003 R2

Windows Storage Server 2003

Windows Storage Server 2003

Windows Home Server

Windows Home Server

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

Windows Server 2003

Windows Server 2003

a Float Denormal Operand

a Float Denormal Operand

a Float Invalid Operation

a Float Invalid Operation

%d MBytes physical memory.

%d MBytes physical memory.

0xx:

0xx:

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

%s\CRASH_REPORT_%s.txt

%s\CRASH_REPORT_%s.txt

%s caused %s (0xx)

%s caused %s (0xx)

in module %s at x:x.

in module %s at x:x.

%s location x caused an access violation.

%s location x caused an access violation.

===== [end of %s] =====

===== [end of %s] =====

%s\CRASH_DUMP_%s.dmp

%s\CRASH_DUMP_%s.dmp

Error creating dump file, err=%d

Error creating dump file, err=%d

Exception code is 0xX

Exception code is 0xX

Crash dump file: %s

Crash dump file: %s

Crash report file :%s

Crash report file :%s

P%d_T%d_Dld_ld_ld_Tld_ld_ld

P%d_T%d_Dld_ld_ld_Tld_ld_ld

code: %x

code: %x

code: %x, addr: %x, module: %s

code: %x, addr: %x, module: %s

\1\=\;\9\

\1\=\;\9\

\(\=\(\9\

\(\=\(\9\

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

5|1|=|;|9|#|/|(|=|(|9|#|;|9|2|9|.|=|0|5|&|9|#|.|9|/|9|=|0|#|(|3|#|=|)|8|5|(|

{{{$635}}}

{{{$635}}}

{{{$634}}}

{{{$634}}}

{{{$636}}}

{{{$636}}}

{{{$637}}}

{{{$637}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\3rdParty\google\gtest\gtest-1.6.0\include\gtest/internal/gtest-port.h

%s 0x%I64x %s [file:%s(%u)]

%s 0x%I64x %s [file:%s(%u)]

{{{$104}}}

{{{$104}}}

{{{$102}}}

{{{$102}}}

{{{$103}}}

{{{$103}}}

{{{$101}}}

{{{$101}}}

{{{$111}}}

{{{$111}}}

{{{$112}}}

{{{$112}}}

{{{$109}}}

{{{$109}}}

{{{$110}}}

{{{$110}}}

{{{$107}}}

{{{$107}}}

{{{$108}}}

{{{$108}}}

{{{$105}}}

{{{$105}}}

{{{$106}}}

{{{$106}}}

{{{$113}}}

{{{$113}}}

{{{$100}}}

{{{$100}}}

{{{$117}}}

{{{$117}}}

{{{$116}}}

{{{$116}}}

{{{$115}}}

{{{$115}}}

{{{$114}}}

{{{$114}}}

{{{$121}}}

{{{$121}}}

{{{$120}}}

{{{$120}}}

{{{$119}}}

{{{$119}}}

{{{$118}}}

{{{$118}}}

{{{$123}}}

{{{$123}}}

{{{$122}}}

{{{$122}}}

{{{$530}}}

{{{$530}}}

{{{$529}}}

{{{$529}}}

{{{$531}}}

{{{$531}}}

{{{$536}}}

{{{$536}}}

{{{$535}}}

{{{$535}}}

{{{$534}}}

{{{$534}}}

{{{$533}}}

{{{$533}}}

{{{$532}}}

{{{$532}}}

{{{$541}}}

{{{$541}}}

{{{$539}}}

{{{$539}}}

{{{$538}}}

{{{$538}}}

{{{$537}}}

{{{$537}}}

{{{$543}}}

{{{$543}}}

{{{$542}}}

{{{$542}}}

{{{$488}}}

{{{$488}}}

{{{$491}}}

{{{$491}}}

{{{$490}}}

{{{$490}}}

{{{$489}}}

{{{$489}}}

{{{$494}}}

{{{$494}}}

{{{$493}}}

{{{$493}}}

{{{$492}}}

{{{$492}}}

{{{$499}}}

{{{$499}}}

{{{$503}}}

{{{$503}}}

{{{$502}}}

{{{$502}}}

{{{$501}}}

{{{$501}}}

{{{$500}}}

{{{$500}}}

{{{$509}}}

{{{$509}}}

{{{$508}}}

{{{$508}}}

{{{$507}}}

{{{$507}}}

{{{$506}}}

{{{$506}}}

{{{$505}}}

{{{$505}}}

{{{$504}}}

{{{$504}}}

{{{$565}}}

{{{$565}}}

{{{$568}}}

{{{$568}}}

{{{$567}}}

{{{$567}}}

{{{$566}}}

{{{$566}}}

{{{$572}}}

{{{$572}}}

{{{$571}}}

{{{$571}}}

{{{$570}}}

{{{$570}}}

{{{$569}}}

{{{$569}}}

{{{$577}}}

{{{$577}}}

{{{$576}}}

{{{$576}}}

{{{$575}}}

{{{$575}}}

{{{$574}}}

{{{$574}}}

{{{$573}}}

{{{$573}}}

{{{$581}}}

{{{$581}}}

{{{$580}}}

{{{$580}}}

{{{$579}}}

{{{$579}}}

{{{$578}}}

{{{$578}}}

{{{$584}}}

{{{$584}}}

{{{$583}}}

{{{$583}}}

{{{$582}}}

{{{$582}}}

{{{$587}}}

{{{$587}}}

{{{$586}}}

{{{$586}}}

{{{$585}}}

{{{$585}}}

{{{$589}}}

{{{$589}}}

{{{$588}}}

{{{$588}}}

{{{$594}}}

{{{$594}}}

{{{$592}}}

{{{$592}}}

{{{$591}}}

{{{$591}}}

{{{$597}}}

{{{$597}}}

{{{$596}}}

{{{$596}}}

{{{$595}}}

{{{$595}}}

{{{$599}}}

{{{$599}}}

{{{$598}}}

{{{$598}}}

{{{$602}}}

{{{$602}}}

{{{$601}}}

{{{$601}}}

{{{$600}}}

{{{$600}}}

{{{$605}}}

{{{$605}}}

{{{$604}}}

{{{$604}}}

{{{$603}}}

{{{$603}}}

{{{$607}}}

{{{$607}}}

{{{$606}}}

{{{$606}}}

{{{$610}}}

{{{$610}}}

{{{$609}}}

{{{$609}}}

{{{$608}}}

{{{$608}}}

{{{$611}}}

{{{$611}}}

{{{$243}}}

{{{$243}}}

{{{$242}}}

{{{$242}}}

\3\3\(\/\(\.\=\,\9\.\|\

\3\3\(\/\(\.\=\,\9\.\|\

\9\;\5\/\(\9\.\

\9\;\5\/\(\9\.\

\.\3\ \/\9\.\

\.\3\ \/\9\.\

\5\:\9\(\5\1\9\

\5\:\9\(\5\1\9\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

\*\9\2\(\|\>\.\3\ \/\9\.\|\

,\0\=\(\:\3\.\1\

,\0\=\(\:\3\.\1\

4]>]2]3]

4]>]2]3]

2_:_ _7_0_;_

2_:_ _7_0_;_

/[3[)[>[:[?[

/[3[)[>[:[?[

{{{$511}}}

{{{$511}}}

{{{$510}}}

{{{$510}}}

{{{$514}}}

{{{$514}}}

{{{$513}}}

{{{$513}}}

{{{$512}}}

{{{$512}}}

{{{$515}}}

{{{$515}}}

{{{$518}}}

{{{$518}}}

{{{$517}}}

{{{$517}}}

{{{$516}}}

{{{$516}}}

{{{$520}}}

{{{$520}}}

{{{$519}}}

{{{$519}}}

{{{$524}}}

{{{$524}}}

{{{$523}}}

{{{$523}}}

{{{$522}}}

{{{$522}}}

{{{$521}}}

{{{$521}}}

{{{$526}}}

{{{$526}}}

{{{$525}}}

{{{$525}}}

{{{$528}}}

{{{$528}}}

{{{$527}}}

{{{$527}}}

{{{$618}}}

{{{$618}}}

{{{$617}}}

{{{$617}}}

{{{$616}}}

{{{$616}}}

{{{$615}}}

{{{$615}}}

{{{$614}}}

{{{$614}}}

{{{$619}}}

{{{$619}}}

C,CÇC4C"C1C&C

C,CÇC4C"C1C&C

@/@&@4@7@!@2@%@

@/@&@4@7@!@2@%@

@/@:@)@,@,@!@

@/@:@)@,@,@!@

@/@:@)@,@,@!@`@

@/@:@)@,@,@!@`@

@)@2@%@&@/@8@

@)@2@%@&@/@8@

{{{$409}}}

{{{$409}}}

{{{$408}}}

{{{$408}}}

{{{$407}}}

{{{$407}}}

{{{$410}}}

{{{$410}}}

@%@!@2@#@(@

@%@!@2@#@(@

@(@/@2@4@

@(@/@2@4@

{{{$411}}}

{{{$411}}}

{{{$413}}}

{{{$413}}}

{{{$414}}}

{{{$414}}}

{{{$415}}}

{{{$415}}}

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

v%J%C%Q%R%D%W%@%y%d%U%U%a%D%Q%D%i%J%R%y%v%J%C%Q%R%D%W%@%y%v%H%D%W%Q%g%D%W%y%c%c%

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

CREATE TABLE ItemTable (key TEXT UNIQUE ON CONFLICT REPLACE, value TEXT NOT NULL ON CONFLICT FAIL);

insert into ItemTable (key, value) VALUES ('%s', '%s');

insert into ItemTable (key, value) VALUES ('%s', '%s');

7<.-8>

7<.-8>

{{{$318}}}

{{{$318}}}

{{{$317}}}

{{{$317}}}

{{{$319}}}

{{{$319}}}

{{{$339}}}

{{{$339}}}

KEYWORDS

KEYWORDS

KEYWORD

KEYWORD

{{{$363}}}

{{{$363}}}

{{{$362}}}

{{{$362}}}

{{{$364}}}

{{{$364}}}

{{{$365}}}

{{{$365}}}

]2]3]9](]4])]

]2]3]9](]4])]

]?].])]/]])]4]2]3]

]?].])]/]])]4]2]3]

]

]

u%W%@%S%d%V%V%@%Q%a%D%Q%D%

u%W%@%S%d%V%V%@%Q%a%D%Q%D%

00:00:00.

00:00:00.

NtQueryKey

NtQueryKey

{{{$621}}}

{{{$621}}}

{{{$620}}}

{{{$620}}}

{{{$623}}}

{{{$623}}}

{{{$622}}}

{{{$622}}}

{{{$629}}}

{{{$629}}}

{{{$628}}}

{{{$628}}}

{{{$698}}}

{{{$698}}}

{{{$697}}}

{{{$697}}}

{{{$696}}}

{{{$696}}}

{{{$695}}}

{{{$695}}}

1.1.3

1.1.3

gen_codes: max_code %d

gen_codes: max_code %d

code %d bits %d->%d

code %d bits %d->%d

bl code -

bl code -

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%)

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u

hXXps://

hXXps://

hXXp://

hXXp://

wininet.dll

wininet.dll

PTF://

PTF://

[%u, 0xx] %s

[%u, 0xx] %s

https

https

HTTP/1.0

HTTP/1.0

Content-Type: application/x-www-form-urlencoded

Content-Type: application/x-www-form-urlencoded

request HttpSendRequestA failed...

request HttpSendRequestA failed...

Content-Length: %u

Content-Length: %u

response failed...last error %d

response failed...last error %d

{{{$723}}}

{{{$723}}}

{{{$722}}}

{{{$722}}}

{{{$725}}}

{{{$725}}}

{{{$724}}}

{{{$724}}}

{{{$728}}}

{{{$728}}}

{{{$727}}}

{{{$727}}}

{{{$726}}}

{{{$726}}}

{{{$729}}}

{{{$729}}}

{{{$730}}}

{{{$730}}}

{{{$734}}}

{{{$734}}}

{{{$733}}}

{{{$733}}}

{{{$732}}}

{{{$732}}}

{{{$731}}}

{{{$731}}}

{{{$735}}}

{{{$735}}}

{{{$738}}}

{{{$738}}}

{{{$737}}}

{{{$737}}}

{{{$736}}}

{{{$736}}}

{{{$740}}}

{{{$740}}}

{{{$739}}}

{{{$739}}}

{{{$749}}}

{{{$749}}}

{{{$748}}}

{{{$748}}}

{{{$747}}}

{{{$747}}}

{{{$752}}}

{{{$752}}}

{{{$751}}}

{{{$751}}}

{{{$674}}}

{{{$674}}}

{{{$673}}}

{{{$673}}}

{{{$672}}}

{{{$672}}}

SQLite format 3

SQLite format 3

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

3.7.16

3.7.16

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

{{{$139}}}

{{{$139}}}

{{{$138}}}

{{{$138}}}

{{{$145}}}

{{{$145}}}

{{{$144}}}

{{{$144}}}

{{{$143}}}

{{{$143}}}

{{{$142}}}

{{{$142}}}

{{{$141}}}

{{{$141}}}

{{{$140}}}

{{{$140}}}

{{{$146}}}

{{{$146}}}

{{{$127}}}

{{{$127}}}

{{{$126}}}

{{{$126}}}

{{{$125}}}

{{{$125}}}

{{{$124}}}

{{{$124}}}

{{{$134}}}

{{{$134}}}

{{{$133}}}

{{{$133}}}

{{{$132}}}

{{{$132}}}

{{{$131}}}

{{{$131}}}

{{{$130}}}

{{{$130}}}

{{{$129}}}

{{{$129}}}

{{{$128}}}

{{{$128}}}

{{{$135}}}

{{{$135}}}

{{{$1292}}}

{{{$1292}}}

{{{$1293}}}

{{{$1293}}}

{{{$1294}}}

{{{$1294}}}

{{{$1301}}}

{{{$1301}}}

{{{$1300}}}

{{{$1300}}}

%^|^.^,^1^*^;^=^*^7^1^0^

%^|^.^,^1^*^;^=^*^7^1^0^

^'^0^?^3^7^=^

^'^0^?^3^7^=^

^;^?^,^=^6^~^

^;^?^,^=^6^~^

^,^1^*^;^=^*^

^,^1^*^;^=^*^

^,^1^*^;^=^*^7^1^0^

^,^1^*^;^=^*^7^1^0^

^2^2^1^)^~^

^2^2^1^)^~^

^;^?^,^0^

^;^?^,^0^

^,^7^(^?^*^;^

^,^7^(^?^*^;^

^,^7^(^?^=^'^~^

^,^7^(^?^=^'^~^

^7^=^;^0^-^;^

^7^=^;^0^-^;^

^7^=^;^0^-^;^~^

^7^=^;^0^-^;^~^

^0^7^0^-^*^?^2^2^|^#^

^0^7^0^-^*^?^2^2^|^#^

Y

Y

YY

YY

"D%D D!D D1D0D

"D%D D!D D1D0D

5@.@#@(@%@#@ @%@$@

5@.@#@(@%@#@ @%@$@

$@!@4@!@

$@!@4@!@

K.K?K?K"K%K,KkK8K.K9K=K"K(K.KkK-K*K"K'K.K/KeKkK

K.K?K?K"K%K,KkK8K.K9K=K"K(K.KkK-K*K"K'K.K/KeKkK

6S%S6S=S'S

6S%S6S=S'S

{{{$709}}}

{{{$709}}}

{{{$708}}}

{{{$708}}}

{{{$710}}}

{{{$710}}}

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d-d-d

d-d-d

d:d:d

d:d:d

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

API call with %s database connection pointer

API call with %s database connection pointer

922337203685477580

922337203685477580

RowKey

RowKey

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

OsError 0x%x (%u)

OsError 0x%x (%u)

GetProcessHeap

GetProcessHeap

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

cannot limit WAL size: %s

cannot limit WAL size: %s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

invalid page number %d

invalid page number %d

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

2nd reference to page %d

2nd reference to page %d

unable to get the page. error code=%d

unable to get the page. error code=%d

Page %d:

Page %d:

freelist leaf count too big on page %d

freelist leaf count too big on page %d

failed to get page %d

failed to get page %d

On tree page %d cell %d:

On tree page %d cell %d:

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On page %d at right child:

On page %d at right child:

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Pointer map page %d is referenced

Pointer map page %d is referenced

Page %d is never used

Page %d is never used

unknown database %s

unknown database %s

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

MJ collide: %s

MJ collide: %s

MJ delete: %s

MJ delete: %s

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

foreign key constraint failed

foreign key constraint failed

-mjX9X

-mjX9X

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

unable to use function %s in the requested context

unable to use function %s in the requested context

zeroblob(%d)

zeroblob(%d)

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

constraint failed at %d in [%s]

constraint failed at %d in [%s]

abort at %d in [%s]: %s

abort at %d in [%s]: %s

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

sqlite_temp_master

sqlite_temp_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

sqlite_master

sqlite_master

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

database table is locked: %s

database table is locked: %s

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

cannot open value of type %s

cannot open value of type %s

no such column: "%s"

no such column: "%s"

cannot open view: %s

cannot open view: %s

cannot open virtual table: %s

cannot open virtual table: %s

cannot open %s column for writing

cannot open %s column for writing

indexed

indexed

foreign key

foreign key

misuse of aliased aggregate %s

misuse of aliased aggregate %s

not authorized to use function: %s

not authorized to use function: %s

%s: %s

%s: %s

%s: %s.%s

%s: %s.%s

%s: %s.%s.%s

%s: %s.%s.%s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

too many SQL variables

too many SQL variables

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

%.*s"%w"%s

%.*s"%w"%s

misuse of aggregate: %s()

misuse of aggregate: %s()

sqlite_rename_parent

sqlite_rename_parent

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_rename_table

sqlite_rename_table

%s%.*s"%w"

%s%.*s"%w"

type='trigger' AND (%s)

type='trigger' AND (%s)

%s OR name=%Q

%s OR name=%Q

view %s may not be altered

view %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

table %s may not be altered

table %s may not be altered

sqlite_

sqlite_

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

sqlite_sequence

sqlite_sequence

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_stat1

sqlite_stat1

sqlite_altertab_%s

sqlite_altertab_%s

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

database %s is already in use

database %s is already in use

too many attached databases - max %d

too many attached databases - max %d

invalid name: "%s"

invalid name: "%s"

no such database: %s

no such database: %s

unable to open database: %s

unable to open database: %s

sqlite_detach

sqlite_detach

database %s is locked

database %s is locked

cannot detach database %s

cannot detach database %s

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

sqlite_attach

sqlite_attach

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

duplicate column name: %s

duplicate column name: %s

too many columns on %s

too many columns on %s

there is already an index named %s

there is already an index named %s

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

table "%s" has more than one primary key

table "%s" has more than one primary key

default value of column [%s] is not constant

default value of column [%s] is not constant

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

CREATE %s %.*s

view %s is circularly defined

view %s is circularly defined

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

sqlite_stat%d

sqlite_stat%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

table %s may not be dropped

table %s may not be dropped

sqlite_stat

sqlite_stat

indexed columns are not unique

indexed columns are not unique

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

views may not be indexed

views may not be indexed

table %s may not be indexed

table %s may not be indexed

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

index %s already exists

index %s already exists

there is already a table named %s

there is already a table named %s

virtual tables may not be indexed

virtual tables may not be indexed

table %s has no column named %s

table %s has no column named %s

no such index: %S

no such index: %S

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

a JOIN clause is required before %s

a JOIN clause is required before %s

no such collation sequence: %s

no such collation sequence: %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

cannot modify %s because it is a view

cannot modify %s because it is a view

table %s may not be modified

table %s may not be modified

sqlite_source_id

sqlite_source_id

sqlite_version

sqlite_version

sqlite_compileoption_get

sqlite_compileoption_get

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_log

sqlite_log

foreign key mismatch - "%w" referencing "%w"

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

table %S has no column named %s

%d values for %d columns

%d values for %d columns

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

PRIMARY KEY must be unique

PRIMARY KEY must be unique

constraint %s failed

constraint %s failed

%s.%s may not be NULL

%s.%s may not be NULL

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

unable to open shared library [%s]

unable to open shared library [%s]

sqlite3_extension_init

sqlite3_extension_init

automatic extension loading failed: %s

automatic extension loading failed: %s

error during initialization: %s

error during initialization: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

foreign_key_check

foreign_key_check

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

unsupported file format

%s - %s

%s - %s

database schema is locked: %s

database schema is locked: %s

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

%s:%d

%s:%d

%s.%s

%s.%s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

%s.%s.%s

%s.%s.%s

too many references to "%s": max 65535

too many references to "%s": max 65535

sqlite_subquery_%p_

sqlite_subquery_%p_

no such index: %s

no such index: %s

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

-- TRIGGER %s

-- TRIGGER %s

no such trigger: %S

no such trigger: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such column: %s

no such column: %s

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

vtable constructor failed: %s

vtable constructor failed: %s

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

no such module: %s

no such module: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s AS %s

%s AS %s

%s TABLE %s

%s TABLE %s

%s SUBQUERY %d

%s SUBQUERY %d

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s (rowid)

%s (rowid)

%s (rowid>?)

%s (rowid>?)

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid=?)

%s (rowid=?)

cannot use index: %s

cannot use index: %s

at most %d tables in a join

at most %d tables in a join

%s (~%lld rows)

%s (~%lld rows)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

no such vfs: %s

no such vfs: %s

%s mode not allowed: %s

%s mode not allowed: %s

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

{{{$137}}}

{{{$137}}}

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\cltmngui.pdb

C:\Build\117\Search Protector\SP-2.16.20-Production\Sources\SearchProtector\Dev\2.16.20\Output\Release_32\cltmngui.pdb

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegDeleteKeyW

RegDeleteKeyW

RegOpenKeyExW

RegOpenKeyExW

RegEnumKeyExW

RegEnumKeyExW

RegCloseKey

RegCloseKey

ADVAPI32.dll

ADVAPI32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

PSAPI.DLL

PSAPI.DLL

VERSION.dll

VERSION.dll

dbghelp.dll

dbghelp.dll

GetCPInfo

GetCPInfo

GDI32.dll

GDI32.dll

SHELL32.dll

SHELL32.dll

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpSendRequestW

HttpSendRequestW

HttpSendRequestA

HttpSendRequestA

HttpSendRequestExW

HttpSendRequestExW

HttpEndRequestW

HttpEndRequestW

HttpQueryInfoA

HttpQueryInfoA

WININET.dll

WININET.dll

RegisterHotKey

RegisterHotKey

ReportEventA

ReportEventA

I_RpcBindingInqTransportType

I_RpcBindingInqTransportType

RPCRT4.dll

RPCRT4.dll

zcÁ

zcÁ

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\UI

%Documents and Settings%\%current user%\Local Settings\Application Data\SearchProtect\UI

;74/, (%#

;74/, (%#

~{xrpfa\ZSM@;3-%U

~{xrpfa\ZSM@;3-%U

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;8;

7 7$7(7,707

7 7$7(7,707

1%2s2

1%2s2

14282

14282

5 5$5(5,5

5 5$5(5,5

7%7S7Z7c7l7

7%7S7Z7c7l7

00C0R0a0p0

00C0R0a0p0

6 6'636\6

6 6'636\6

2!2S2

2!2S2

(040:0?0^0

(040:0?0^0

11

11

:0;4;8;

:0;4;8;

2%2x2

2%2x2

=(=8=>=`=

=(=8=>=`=

4"515?5 686

4"515?5 686

9!9)909.:

9!9)909.:

6!6*646^6

6!6*646^6

,>

,>

0$0 090}0

0$0 090}0

9 9$9(9,9

9 9$9(9,9

= =$=(=,=0=4=

= =$=(=,=0=4=

5&5 5;5@5

5&5 5;5@5

5,565@5|6

5,565@5|6

4]5

4]5

> >$>(>,>0>4>

> >$>(>,>0>4>

? ?$?(?,?0?4?8?@?

? ?$?(?,?0?4?8?@?

6"6,656>6[6

6"6,656>6[6

=&>8>>>\>

=&>8>>>\>

> >$>(>,>0>4>8>

> >$>(>,>0>4>8>

:(;,;\;`;

:(;,;\;`;

6 6$6(6,6064686

6 6$6(6,6064686

; ;$;(;,;0;

; ;$;(;,;0;

6 6$6(6,6064686

6 6$6(6,6064686

? ?(?0?`?

? ?(?0?`?

7,787@7`7

7,787@7`7

>$>,>8>\>|>

>$>,>8>\>|>

= =@=\=`=

= =@=\=`=

6 6$6(6,606

6 6$6(6,606

Zmscoree.dll

Zmscoree.dll

Zkernel32.dll

Zkernel32.dll

combase.dll

combase.dll

- floating point support not loaded

- floating point support not loaded

- CRT not initialized

- CRT not initialized

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

portuguese-brazilian

portuguese-brazilian

8.0.0.0-11.999.999.999

8.0.0.0-11.999.999.999

33.0.0.0-36.999.999.999

33.0.0.0-36.999.999.999

16.0.0.0-31.999.999.999

16.0.0.0-31.999.999.999

{{{$630}}}

{{{$630}}}

Advapi32.dll

Advapi32.dll

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

}{{{$668}}}

}{{{$668}}}

{{{$669}}}

{{{$669}}}

{{{$670}}}

{{{$670}}}

{{{$671}}}

{{{$671}}}

{{{$668}}}

{{{$668}}}

UserRepository.dat

UserRepository.dat

SystemRepository.dat

SystemRepository.dat

UIRepository.dat

UIRepository.dat

%x %x[%s] %I64x %x %x

%x %x[%s] %I64x %x %x

user32.dll

user32.dll

ieframe.dll

ieframe.dll

Windows Vista

Windows Vista

Windows 7

Windows 7

Windows Server 2008

Windows Server 2008

Windows 8

Windows 8

Windows Server 2008 R2

Windows Server 2008 R2

Windows 8.1

Windows 8.1

Windows Server 2012

Windows Server 2012

HKEY_PERFORMANCE_NLSTEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_TEXT

HKEY_CURRENT_USER_LOCAL_SETTINGS

HKEY_CURRENT_USER_LOCAL_SETTINGS

{{{$703}}}

{{{$703}}}

{{{$702}}}

{{{$702}}}

{{{$540}}}

{{{$540}}}

{{{$372}}}

{{{$372}}}

{{{$371}}}

{{{$371}}}

2.16.20.192

2.16.20.192

{{{$612}}}

{{{$612}}}

{{{$386}}}

{{{$386}}}

{{{$385}}}

{{{$385}}}

_0.localstorage

_0.localstorage

chrome-extension_

chrome-extension_

{{{$256}}}

{{{$256}}}

{{{$257}}}

{{{$257}}}

;{{{$259}}}

;{{{$259}}}

{{{$260}}}

{{{$260}}}

36.0.0.0

36.0.0.0

32.0.0.0

32.0.0.0

{{{$295}}}

{{{$295}}}

{{{$296}}}

{{{$296}}}

{{{$298}}}

{{{$298}}}

{{{$299}}}

{{{$299}}}

{{{$301}}}

{{{$301}}}

{{{$302}}}

{{{$302}}}

Failed to set Url

Failed to set Url

{{{$311}}}

{{{$311}}}

{{{$312}}}

{{{$312}}}

{{{$308}}}

{{{$308}}}

{{{$309}}}

{{{$309}}}

{{{$310}}}

{{{$310}}}

{{{$314}}}

{{{$314}}}

{{{$315}}}

{{{$315}}}

{{{$321}}}

{{{$321}}}

{{{$322}}}

{{{$322}}}

{{{$326}}}

{{{$326}}}

{{{$327}}}

{{{$327}}}

{{{$334}}}

{{{$334}}}

{{{$335}}}

{{{$335}}}

{{{$337}}}

{{{$337}}}

{{{$338}}}

{{{$338}}}

{{{$349}}}

{{{$349}}}

{{{$350}}}

{{{$350}}}

{{{$360}}}

{{{$360}}}

{{{$355}}}

{{{$355}}}

{{{$356}}}

{{{$356}}}

{{{$383}}}

{{{$383}}}

{{{$375}}}

{{{$375}}}

{{{$374}}}

{{{$374}}}

{{{$373}}}

{{{$373}}}

{{{$554}}}

{{{$554}}}

{{{$553}}}

{{{$553}}}

{{{$712}}}

{{{$712}}}

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceCreationEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

SELECT * FROM __InstanceDeletionEvent WITHIN %1% WHERE TargetInstance ISA 'Win32_Process' And TargetInstance.Name = '%2%'

ntdll.dll

ntdll.dll

%s%s%s

%s%s%s

Correct password required

Correct password required

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{SP#Conduit::SearchProtector::Utils::WMIAgentJob::Join#SP}}}

{{{$720}}}

{{{$720}}}

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

{{{$1291}}}

{{{$1291}}}

01234567

01234567

UserSettings.dat

UserSettings.dat

{{{SP#Conduit::SearchProtector::Application::Services::ServiceManager::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::ServiceManager::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::TimerBasedServiceHandler::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::TimerBasedServiceHandler::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::ServiceHandler::HttpAsyncCallBack#SP}}}

{{{SP#Conduit::SearchProtector::Application::Services::ServiceHandler::HttpAsyncCallBack#SP}}}

M2.16.20.192

M2.16.20.192

XRpcTransportException

XRpcTransportException

C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe

C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe