Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR, SearchProtectToolbar.YR (Lavasoft MAS)Behaviour: Trojan
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 318a6663af74b67d57dd3bbf4cb43861
SHA1: d5ecb527bd275dec14a53a3ee019d231ffabb03d
SHA256: 6ee9335a82aad1affb5a137595e47910e7d49cff70f5d9638b25ae67cabb71fa
SSDeep: 49152:GvyO10KduA6AVstWKTyEQ4bNpcK /iUPgZCTICUgX:MyOvdxSNpx /gxS
Size: 2050640 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: InstallX, LLC
Created at: 2014-04-16 21:44:24
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
dxtest.exe:868
wajam_validate.exe:208
wajam_validate.exe:1820
%original file name%.exe:372
ApnSetup.v7.exe:1324
The Trojan injects its code into the following process(es):
%original file name%.exe:1244
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:372 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\stub.log (10294 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\autorun.txt (79 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\wrapper.xml (975 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\timings.txt (143 bytes)
The process %original file name%.exe:1244 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.exe (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\EXMX05I1\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.zip (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\41ABG5AN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCC.dll (13404 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\318a6663af74b67d57dd3bbf4cb43861.log (464839 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\AskTB\asktbdet.zip (29028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCCLog.txt (168898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5RD5657\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCIS.dll (11704 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5RD5657\SCC[1].dll (22768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.exe (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X93WTD05\desktop.ini (67 bytes)
%System%\wbem\Logs\wbemprox.log (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\dxtest.exe (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.zip (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCC.config (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\detectionrules.dat (57028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\41ABG5AN\ENG.SCC.config[1].txt (740 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCIS2.zip (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCISDll.txt (39509 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\AskTB\APNSetup.V7.exe (31584 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.zip (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.zip (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCC.config (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10 (0 bytes)
The process ApnSetup.v7.exe:1324 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\APN-Stub\W3I-G-V7\Stb4fb6804c-1f03-4c4a-8781-156cfb443379.log (821 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Setup.ini (1 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\Setup.ini (0 bytes)
Registry activity
The process dxtest.exe:868 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1088495441"
"Name" = "dxtest.exe"
[HKLM\SOFTWARE\Microsoft\Direct3D\MostRecentApplication]
"Name" = "dxtest.exe"
The process wajam_validate.exe:208 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F3 20 38 11 C0 C5 36 AE 25 D6 21 95 83 0E EC E9"
The process wajam_validate.exe:1820 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "41 20 E2 D9 8A D4 53 13 4E 7C 77 D1 93 21 07 87"
The process %original file name%.exe:372 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C5 76 C5 03 49 EF 6C 21 17 26 C9 E8 C5 7D 4F 44"
The process %original file name%.exe:1244 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\InstallIQ]
"test" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 16 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BE C2 26 A3 30 15 90 66 43 11 26 72 C1 B1 04 5C"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following registry key(s):
[HKLM\SOFTWARE\InstallIQ]
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
[HKLM\SOFTWARE\InstallIQ]
"test"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"InstallIQ"
The process ApnSetup.v7.exe:1324 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 17 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "47 A1 23 6B CD BC 46 84 73 71 99 96 2E 99 5D C8"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
| MD5 | File path |
|---|---|
| 38212789a0f996c9f49d2646446c02f3 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\SCC.dll |
| d0f25e1b717ee325780b5c5a014f9623 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\SymCCIS.dll |
| 363a4a68a86441777924df8219aeb72c | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\pkg_17f512c0\AskTB\APNSetup.V7.exe |
| 858a016acfa24ade77aa475c08b4ac5a | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\pkg_17f512c0\dxtest.exe |
| 38212789a0f996c9f49d2646446c02f3 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\Y5RD5657\SCC[1].dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
dxtest.exe:868
wajam_validate.exe:208
wajam_validate.exe:1820
%original file name%.exe:372
ApnSetup.v7.exe:1324 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\stub.log (10294 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\autorun.txt (79 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\wrapper.xml (975 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\timings.txt (143 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.exe (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\EXMX05I1\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17f102f10\wajam_validate.zip (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\41ABG5AN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCC.dll (13404 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\318a6663af74b67d57dd3bbf4cb43861.log (464839 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\AskTB\asktbdet.zip (29028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCCLog.txt (168898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5RD5657\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCIS.dll (11704 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5RD5657\SCC[1].dll (22768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.exe (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X93WTD05\desktop.ini (67 bytes)
%System%\wbem\Logs\wbemprox.log (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\dxtest.exe (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\waj_17ffaf0\wajam_validate.zip (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SCC.config (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\detectionrules.dat (57028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\41ABG5AN\ENG.SCC.config[1].txt (740 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCIS2.zip (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\SymCCISDll.txt (39509 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pkg_17f512c0\AskTB\APNSetup.V7.exe (31584 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\APN-Stub\W3I-G-V7\Stb4fb6804c-1f03-4c4a-8781-156cfb443379.log (821 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Setup.ini (1 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: InstallX, LLC
Product Name: InstallIQ Installation Utility
Product Version: 2.140.0.0
Legal Copyright: Copyright (c)2013 InstallX, LLC. All rights reserved.
Legal Trademarks:
Original Filename: InstallIQ.exe
Internal Name: InstallIQ.exe
File Version: 2.140.0.0
File Description: InstallIQ Installation Utility
Comments:
Language: English (United States)
Company Name: InstallX, LLCProduct Name: InstallIQ Installation UtilityProduct Version: 2.140.0.0Legal Copyright: Copyright (c)2013 InstallX, LLC. All rights reserved.Legal Trademarks: Original Filename: InstallIQ.exeInternal Name: InstallIQ.exeFile Version: 2.140.0.0File Description: InstallIQ Installation UtilityComments: Language: English (United States)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 153581 | 153600 | 4.68023 | 93bbccb7e153fdf6610a2edb08fd1816 |
| .text-de | 159744 | 99155 | 99328 | 4.39339 | 517879cf2eb11e574a1abcabba2d6690 |
| .text-co | 262144 | 131437 | 131584 | 4.52533 | c8c6be515c5194a6bc43e18e119347d9 |
| .text-co | 397312 | 95967 | 96256 | 4.44245 | 08dc1f242263654a876ada98010d2339 |
| .text-co | 495616 | 50627 | 50688 | 4.4462 | 7cf0283ef2df379495fff8eff058da6e |
| .text-co | 548864 | 24521 | 24576 | 4.47551 | 6699fe976478a9437b081595c73ce5b4 |
| .text-co | 573440 | 12790 | 12800 | 4.45534 | cc786ba726c375afdf24324839a0e8c5 |
| .text-ti | 589824 | 43443 | 43520 | 4.60677 | 7f259b839b5b5bf74775e63ee9cac8ca |
| .text-co | 634880 | 20250 | 20480 | 4.41022 | 2455be945171d9099840487b5c44d67a |
| .text-co | 655360 | 59 | 512 | 0.606205 | 60d907a8b7d94f9734c148bd362f26d9 |
| .text-co | 659456 | 12349 | 12800 | 4.39887 | 3fb1dff8e9caa70ef035f0862d2f8e2f |
| .text-co | 675840 | 18560 | 18944 | 4.29724 | bf32db1d490f303a0d30bf2fa3edd9e5 |
| .text-co | 696320 | 27433 | 27648 | 4.48725 | 450ff932562a48299b69fa945abb5779 |
| .text-co | 724992 | 54598 | 54784 | 4.43216 | fca844fcaa4b617176450ddbcb4678f2 |
| .text-co | 782336 | 110190 | 110592 | 4.41479 | 5204e9433be98145655eb80e39189293 |
| .text-co | 892928 | 110483 | 110592 | 4.38543 | 1f21490826759f8d9427f6ab715c1a2a |
| .text-co | 1003520 | 51001 | 51200 | 4.44739 | 30c602cba1e4d5556edc514fc1af4606 |
| .text-co | 1056768 | 14894 | 15360 | 4.37323 | e63ca795aaf63f87e15af2e52e57e7dd |
| .text-co | 1073152 | 263610 | 263680 | 4.59732 | 91a0ba7871d8845dc29f87f819233a9e |
| .rdata | 1339392 | 398974 | 399360 | 3.7655 | f0562fe9243658509efed968bc25d88f |
| .data | 1740800 | 26948 | 16896 | 3.35275 | a9248f9d5900f7093be12b260d95c63c |
| .data-de | 1769472 | 45 | 512 | 0.014135 | 9475a59226943a3ad422e18169989f66 |
| .data-co | 1773568 | 176 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1777664 | 56 | 512 | 0.042395 | 3f87f818ead5cc7b24cb4244d077467a |
| .data-co | 1781760 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1785856 | 52 | 512 | 0.042395 | 19be7e9350865857d150c2d60c760dcc |
| .data-co | 1789952 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-ti | 1794048 | 1176 | 1536 | 1.00003 | 250b1898ad11d0110e0c586383e68993 |
| .data-co | 1798144 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1802240 | 4 | 512 | 0.014135 | d340f23a7d18057bb02252a3cb40b877 |
| .data-co | 1806336 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1810432 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1814528 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1818624 | 44 | 512 | 0.014135 | 9475a59226943a3ad422e18169989f66 |
| .data-co | 1822720 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1826816 | 80 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1830912 | 48 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1835008 | 40 | 512 | 0 | bf619eac0cdf3f68d496ea9344137e8b |
| .data-co | 1839104 | 2932 | 3072 | 1.35622 | 483c2de6ccf72fa13e7c66b902facbf6 |
| .rsrc | 1843200 | 315412 | 315904 | 5.17773 | 3616818d0b36b1791eed2315a1d85aee |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://www187a.apnanalytics.com/tr.gif?anxa=APNStub&anxv=7.2.1.1&anxe=OfferCheckEvent&anxr=aEutjc5o&reason=unsupportedBrowser&tpid=W3I-G-V7&result=-1&ft=check&orgb=IE&udbr=iexplore.exe_0_6.0.2900.5512 | |
| hxxp://a568.d.akamai.net/upgrade/NSS/SymCCIS/Production/SCC.dll | |
| hxxp://a568.d.akamai.net/upgrade/NSS/SymCCIS/Production/SCC/w3i/ENG.SCC.config.txt | |
| hxxp://stats.norton.com/n/p?module=9160&product=SCC&version=4.6.0.11&language=09.01&os=5.1.2600.3.0&y=1033&a=w3i&b=false&c=nis&d=nis=1000;nss=1123&e=0x0&error=0&n=0&j=0&k=0&l=none&m=none&o=none&q=none&t=none&u=-1&v=none | 63.245.197.112 |
| hxxp://stats.norton.com/n/p?module=9151&product=SymCCIS&version=2.0.0.29&language=09.01&os=5.1.2600.3.0&y=1033&b=w3i&a=CallCriteriaChecker&f=10&c=false&d=false&e=0x0&error=0&j=nis&k=nis=1000;nss=1123&g=0.359&l=2.797 | 63.245.197.112 |
| hxxp://www.wajam.com/install/valid?v=1&unique_id=8A49F6692FA995FFCB6A85F926695360 | |
| hxxp://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC.dll | 184.84.243.41 |
| hxxp://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC/w3i/ENG.SCC.config.txt | 184.84.243.41 |
| phn.apnanalytics.com | 199.36.100.187 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /upgrade/NSS/SymCCIS/Production/SCC.dll HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: liveupdate.symantecliveupdate.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache
ETag: "38212789a0f996c9f49d2646446c02f3:1402650668"
Last-Modified: Fri, 13 Jun 2014 09:09:28 GMT
Accept-Ranges: bytes
Content-Length: 167264
Content-Type: application/octet-stream
Cache-Control: max-age=891
Expires: Mon, 28 Jul 2014 04:27:45 GMT
Date: Mon, 28 Jul 2014 04:12:54 GMT
Connection: keep-alive
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........r.................................E...............................Q...................................Rich............PE..L......S...........!.........>.......z....................................................@.........................Ew......tx..{....p..=............t..`........... ................................................................................text....`.......T......PEC2TO...... ....rsrc.... ...p.......X.............. ....reloc...............r..............@.....................................................................................................................................................................................................................................................................................................................................................................................................................................*..U..9k3e..O.U...-.[O?wV|.........Uk .B..u3g5.I...jUi..c#.d.N.k.....jxf....f.....M..k./K.>.'S(..8.......Wz.j.....Q.Q.z p...F.....Z...A.n..&...Id.......>o...5.1...&?.....cA.!.}L...>..u......D...c.~3.:.M%.d.......BU.....o4[.$..|..n..$.vL<..~...Jd...uV.}....Q."..e..........Q...z..O.P..;...R.qlm.z.......4.'..O.._.C..[..C...].._..`r.;[.c.9@2..,6..m1...x.f=....d...9HR..?...A..?.f........>GUa..Q=^#\....<.e..e@r.)..y.Q.J...{..<`*....~f.Q......p..V....P.BP...y..=...?.....>O.f.?.
<<
<<< skipped >>>
GET /upgrade/NSS/SymCCIS/Production/SCC/w3i/ENG.SCC.config.txt HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: liveupdate.symantecliveupdate.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache
ETag: "b8dbac3cc2be258b539c305a828416aa:1395133614"
Last-Modified: Tue, 18 Mar 2014 09:06:50 GMT
Accept-Ranges: bytes
Content-Length: 3216
Content-Type: text/plain
Cache-Control: max-age=123
Expires: Mon, 28 Jul 2014 04:14:59 GMT
Date: Mon, 28 Jul 2014 04:12:56 GMT
Connection: keep-alive
...<..iy..}...e_.k.2..#r...-..\\^../..SG>Jc.G2...S... .d".!..:.\..A...='.... .......^....0...>.y..G...X...(.v..u.._...z.....#.[....yIie.......G.^1h...-.....7i........L(,.t......<.3....9.&.......q.....]O.6..A..h...^.:q.....X4a;T.....2.[.h. ..................`S...u......\.y.-...b...YVPT.CqXK....c....\,....R.N.[..2.[.h. ..SV.3..-......#.!u......A.S...^......o..p"d#../q...-.......0a.3.g. ..A...........{xE...%.ws=....d'Y....C...$..k.7...4.]|....Z..L..R.O._S?.g........n..G.v...d....!........\r.T...V.{.]h2.Z.]I...S.}.B..}..._%.n.t.6XK..rK.v.K...3Na..-...?......~_.....9..|............!fr.qON".H .......[.k..&..1l.>a2......3.C.#.A.y.....zx......4.."......u...%.....t.Nsb.&r..NS..]/.c^.j(z0M..pSn.:..t.....&~...E.|ab.L..(}..8..S._3...r....H.Y....0f...X<..U.o....b.g..U...av.....P#W..,.4..x..._..Y..D.......s...K.....8.....?.H.P.L..b.H..J.R..y...........R......'@.l.. k.. .z..m..8.9h.....3#...hkO.AiD....W>1...3...J.....eVqE.H.......v....._.........f..-0....@:....&.`.M.{...O.Ew.O..c..P.....(c...a;T......M~.1*.........hL..l.A....F}<)K.#.T.n.#..h{...U.&.`.M.{.di<:hTh.(............y..!.[.-RJ\...._...Tp.PD"#.".E.....gu,.3..o(X...ZL.....eX.(...y\....t..py1...EE...R....DOQ.H. .y......S.f...x]v.R...?..8|...........f..-0..Z...u.n.........`..;.5.(...S...EE...R..l..*.].F.....$.u%.".IT.F.....$...(c...]O.6..A....@.L...g.V.4...._..w.....(i...g. ..A..jyE. ..B..cH..{j,g........(......!....,..........N..W.Q.M...<'..U...~.$}.Z..]/...:U..@p(U...~.$}@.......%..h_...O]3...y..I.!.R....a......l..D.9:...K. .r.s.xa...H.
<<
<<< skipped >>>
GET /n/p?module=9160&product=SCC&version=4.6.0.11&language=09.01&os=5.1.2600.3.0&y=1033&a=w3i&b=false&c=nis&d=nis=1000;nss=1123&e=0x0&error=0&n=0&j=0&k=0&l=none&m=none&o=none&q=none&t=none&u=-1&v=none HTTP/1.1
User-Agent: Install Stub
Accept: */*
Host: stats.norton.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/plain;charset=ISO-8859-1
Content-Length: 13
Date: Mon, 28 Jul 2014 04:12:57 GMT
1406520777410....
GET /n/p?module=9151&product=SymCCIS&version=2.0.0.29&language=09.01&os=5.1.2600.3.0&y=1033&b=w3i&a=CallCriteriaChecker&f=10&c=false&d=false&e=0x0&error=0&j=nis&k=nis=1000;nss=1123&g=0.359&l=2.797 HTTP/1.1
User-Agent: Install Stub
Accept: */*
Host: stats.norton.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/plain;charset=ISO-8859-1
Content-Length: 13
Date: Mon, 28 Jul 2014 04:12:56 GMT
1406520777469HTTP/1.1 200 OK..Server: Apache-Coyote/1.1..Cache-Control: no-cache..Pragma: no-cache..Content-Type: text/plain;charset=ISO-8859-1..Content-Length: 13..Date: Mon, 28 Jul 2014 04:12:56 GMT..1406520777469..
GET /install/valid?v=1&unique_id=8A49F6692FA995FFCB6A85F926695360 HTTP/1.1
Host: VVV.wajam.com
HTTP/1.1 200 OK
Date: Mon, 28 Jul 2014 04:12:59 GMT
Server: Apache
Set-Cookie: PHPSESSID=08u1aal3embvacof3t1ueao2i4; path=/; domain=.wajam.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: _wau=14065207797447980; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: _wal=1406520779; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: not_logged_unique_id=8A49F6692FA995FFCB6A85F926695360; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: _waab=19,91,38,11,5,76,97,55,17,17; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: not_logged_unique_id=8A49F6692FA995FFCB6A85F926695360; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: _wal=1406520779; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: not_logged_unique_id=8A49F6692FA995FFCB6A85F926695360; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Set-Cookie: _wal=1406520779; expires=Tue, 28-Jul-2015 04:12:59 GMT; path=/; domain=.wajam.com
Vary: Accept-Encoding
Content-Length: 1
Connection: close
Content-Type: text/html; charset=utf-8
Set-Cookie: APPSESSID=w53|U9XNz|U9XNz; path=/; domain=.wajam.com
0..
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_372:
.text
.text
`.text-deS
`.text-deS
`.text-com
`.text-com
`.text-co
`.text-co
`.text-ti
`.text-ti
`.text-co;
`.text-co;
`.text-co=0
`.text-co=0
`.text-co)k
`.text-co)k
`.text-coF
`.text-coF
`.text-con
`.text-con
`.text-co9
`.text-co9
`.text-co.:
`.text-co.:
`.rdata
`.rdata
@.data
@.data
.data-de-
.data-de-
.data-co
.data-co
.data-co8
.data-co8
.data-co(
.data-co(
.data-co4
.data-co4
.data-ti
.data-ti
.data-co,
.data-co,
.data-coP
.data-coP
.data-co0
.data-co0
.data-cot
.data-cot
.rsrc
.rsrc
<-t><pre><pre>CSShZ</pre><pre>D$<h><pre>uDPh</pre><pre>CSSh3</pre><pre>CSSh8</pre><pre>CSSh=</pre><pre>CSShk</pre><pre>CSSh`</pre><pre>CSSho</pre><pre>FTPQW</pre><pre>1t.Ht</pre><pre>D$TCP</pre><pre>t.VSSQ</pre><pre>CSSh-</pre><pre>t5SSh3</pre><pre><:%u4</pre><pre>t8Ht.HHt#</pre><pre>.FGy1</pre><pre>Af;FP}%S3</pre><pre>|$|.tD</pre><pre>#t.Ht</pre><pre> 2 34 567</pre><pre>u.SSV</pre><pre>function not supported</pre><pre>operation canceled</pre><pre>address_family_not_supported</pre><pre>operation_in_progress</pre><pre>operation_not_supported</pre><pre>protocol_not_supported</pre><pre>operation_would_block</pre><pre>address family not supported</pre><pre>broken pipe</pre><pre>inappropriate io control operation</pre><pre>not supported</pre><pre>operation in progress</pre><pre>operation not permitted</pre><pre>operation not supported</pre><pre>operation would block</pre><pre>protocol not supported</pre><pre>Operation not permitted</pre><pre>Inappropriate I/O control operation</pre><pre>Broken pipe</pre><pre>operator</pre><pre>GetProcessWindowStation</pre><pre>CInstallIQApp::ReportIQUInstalls</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.desktop.application\installer.desktop.application\InstallIQApp.h</pre><pre>0xX</pre><pre>Invalid CRT parameter</pre><pre>InstallIQApp.cpp</pre><pre>stubinfo.ini</pre><pre>autorun.txt</pre><pre>wrapper.xml</pre><pre>ProductFailUrl</pre><pre>CInstallIQApp::InstallProductUrl</pre><pre>Called InstallProductUrl on a restricted install!</pre><pre>Unable to launch product url, url is empty!</pre><pre>download failed!! url=</pre><pre>msiexec.exe /i "%s"</pre><pre>direct Product install finished, returncode=%d</pre><pre>https://installer.freeze.com/LogError.aspx</pre><pre>stub.log</pre><pre>noexe</pre><pre>timings.txt</pre><pre>Process exit code = %u (0xX)</pre><pre>Extraxt however is an .exe, still sending logfile</pre><pre>stub extract failed on exe</pre><pre>InstallIQStub.cpp</pre><pre>IQErrorSender.cpp</pre><pre>(%d more)</pre><pre>statsd.response.txt</pre><pre>Web.Installer.InstallIQ.CommError</pre><pre>Web.Installer.InstallIQ.InstallError</pre><pre>Web.Installer.InstallIQ.OfferDownloadError</pre><pre>Web.Installer.InstallIQ.OfferInstallError</pre><pre>Web.Installer.InstallIQ.OfferInstallFailed</pre><pre>offer was accepted but failed to download, HTTP error=%d</pre><pre>offer was accepted but failed to install. Err=%d</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Common\Installer.Common.Dialogs\IQDialogMain.h</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.desktop.application\installer.desktop.application\MainWnd.h</pre><pre>MainWnd.cpp</pre><pre>mainwnd.cpp</pre><pre>PostStartMsg</pre><pre>" style="position:absolute; top:0; left:0; z-index:9999;" onclick="$('#iq_heatmap').remove()" /></pre><pre>dialog.demo.xml</pre><pre>http://www.w3i.com</pre><pre>Skipping enable add-ons step because url is empty.</pre><pre>crterr:%d</pre><pre>HRESULT:0x%X</pre><pre>Win32Err:%d</pre><pre>@ line %d in function <%s>.</pre><pre>wininet.dll</pre><pre>Unknown error: %d</pre><pre>IDispatch error #%d</pre><pre>LoadLibrary failed in loading current exe:</pre><pre>CoreResource.cpp</pre><pre>CStringW.GetBuffer failed!</pre><pre>0xx</pre><pre>-- %s line %d --</pre><pre>L%d:d.d.d_d:d:d.d</pre><pre>[X]</pre><pre>%s_%x%x%x%x%x</pre><pre>CoreFile.cpp</pre><pre>%s. {%s} @ line %d in function <%s> in module %s.</pre><pre>HRESULT:0x%X</pre><pre>Win32Err:%d</pre><pre>HttpStatus:%d</pre><pre>Error:%d</pre><pre>http://</pre><pre>https://</pre><pre>ftp://</pre><pre>CoreThread.cpp</pre><pre>CoreProcess.cpp</pre><pre>ShellExecuteCommand:</pre><pre>CCoreProcess::ShellExecuteCommand</pre><pre>Failed to execute command:</pre><pre>CCoreProcess::ShellExecuteCommandAndWait</pre><pre>CCoreProcess::CloseProcessWindowsByModuleName</pre><pre>ntdll.dll</pre><pre>CCoreProcess::GetProcessExe32</pre><pre>CCoreProcess::GetProcessExe64</pre><pre>kernel32.dll</pre><pre>CoreTiming.cpp</pre><pre>CommandLine.cpp</pre><pre>Exception %X in module %s at: 0x%p.</pre><pre>dbghelp.dll</pre><pre>0x%p %s</pre><pre>CoreEvent.cpp</pre><pre>0.0.0.0</pre><pre>%u,%u,%u,%u</pre><pre>CoreXml.cpp</pre><pre>_ftprintf_s failed writing header to</pre><pre>]/Key/text()</pre><pre>CCoreXml::ParseRequiredKeyValue</pre><pre>CCoreXml::ParseRequiredKeyInt</pre><pre>%Y-%m-%dT%H:%M:%S</pre><pre>CCoreSystem::GetWindowsVersionId</pre><pre>CoreSystem.cpp</pre><pre>Missing windows version, check the code!!</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion</pre><pre>%s (Build %d)</pre><pre>Unknown OS! Major: 0xX, Minor: 0xX</pre><pre>CCoreSystem::CacheWindowsInfo</pre><pre>%windows%</pre><pre>%system%</pre><pre>Software\Microsoft\Windows\CurrentVersion</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders</pre><pre>Þsktop%</pre><pre>Þsktopdir%</pre><pre>%userprofile%</pre><pre>%firefoxprofiles%</pre><pre>%s0x%.2x%.2x%.2x%.2x%.2x%.2x-</pre><pre>SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727</pre><pre>SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322</pre><pre>SOFTWARE\Microsoft\.NETFramework\policy\v1.0</pre><pre>3321-3705</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\</pre><pre>Iphlpapi.dll</pre><pre>%I64u%s</pre><pre>Alpha %d</pre><pre>PPC 6d</pre><pre>%windows%\Desktop</pre><pre>Advapi32.dll</pre><pre>shell32.dll</pre><pre>CoreVista.cpp</pre><pre>Software\Microsoft\Windows\CurrentVersion\Policies\System</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_USERS</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_CLASSES_ROOT</pre><pre>CCoreRegKey::Create</pre><pre>Warning: HKEY_CLASSES_ROOT opened for writing! This can lead to unpredictable results.</pre><pre>RegCreateKeyEx failed on key=</pre><pre>CCoreRegKey::Open</pre><pre>RegOpenKeyEx failed on key=</pre><pre>Registry key is not open! (</pre><pre>CCoreRegKey::GetValueType</pre><pre>CoreRegKey.cpp</pre><pre>CCoreRegKey::GetValueSize</pre><pre>CCoreRegKey::GetValueString</pre><pre>CCoreRegKey::GetValue</pre><pre>CCoreRegKey::SetValue</pre><pre>CCoreRegKey::DeleteValue</pre><pre>CCoreRegKey::DeleteKey</pre><pre>RegDeleteKeyExA</pre><pre>RegDeleteKeyEx failed on</pre><pre>RegDeleteKey failed on</pre><pre>CCoreRegKey::EnumSubKeys</pre><pre>CCoreRegKey::EnumValueNames</pre><pre>CCoreEntryPoint<long>::CCoreEntryPoint</long></pre><pre>CCoreEntryPoint<long>::LoadProcAddress</long></pre><pre>%s.%s</pre><pre>iexplore,ie.http</pre><pre>Failed to get IE version key!</pre><pre>Loading IE cookies for url:[</pre><pre>%a, %d-%b-%Y %H:%M:%S GMT</pre><pre>wrote %d cookies</pre><pre>cookie.dat</pre><pre>Vista.NoResult</pre><pre>Vista.SavedLow</pre><pre>Vista.NoCookies</pre><pre>domains.dat</pre><pre>cookie.ini</pre><pre>Vista.SetCookie</pre><pre>cookieman.exe</pre><pre>CoreInternetExplorer.cpp</pre><pre>-noframemerging "%s"</pre><pre>Unable to find iexplore.exe, using shell execute (with possible warnings)</pre><pre>iexplore.exe</pre><pre>ie.http\shell\open\command</pre><pre>Default search regkey not found (may be a brand new install)</pre><pre>EnumSubKeys failed!</pre><pre>ieframe.dll</pre><pre>url is empty!</pre><pre>Replacing existing provider url:</pre><pre>Error setting provider url!</pre><pre>DefaultSearchUrl</pre><pre>CCoreInternetExplorer::FindFirstHistoryUrl</pre><pre>FindFirstUrlCacheEntry() failed!!</pre><pre>findfirsturlfailed</pre><pre>CCoreInternetExplorer::FindNextHistoryUrl</pre><pre>FindUrlCache handle is null!! Did you call FindFirstHistoryUrl first??</pre><pre>FindNextUrlCacheEntry() failed!!</pre><pre>findnexturlfailed</pre><pre>CCoreInternetExplorer::FindCloseHistoryUrl</pre><pre>FindCloseUrlCache() failed!!</pre><pre>findcloseurlfailed</pre><pre>msgText is required!</pre><pre>msgTitle is required!</pre><pre>Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice</pre><pre>http\shell\open\command</pre><pre>CoreBrowser.cpp</pre><pre>Can't find shell associations or shell command reg keys!</pre><pre>Dll %s failed, resultcode = %x</pre><pre>SymCCIS2.zip</pre><pre>SymCCIS.dll</pre><pre>RunDLL productlist="%s" resultcodes="%s"</pre><pre>SCCLog.txt</pre><pre>SymCCIS_CheckCriteria.txt</pre><pre>___________________SCCLog.txt____________________</pre><pre>____________SymCCIS_CheckCriteria.txt____________</pre><pre>CoreDownloader.cpp</pre><pre>HTTP Status %d: %s</pre><pre>apiUrl is null!</pre><pre>API url is invalid!</pre><pre>%m/%d/%Y</pre><pre>wininet: HTTPSendRequest success - file block #</pre><pre>CoreWininet.cpp</pre><pre>wininet: HTTPSendRequest failed - file block #</pre><pre>Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)</pre><pre>wininet: connecting to %s:%d</pre><pre>HTTPSendRequest:</pre><pre>CCoreWininet::HTTPSendRequest</pre><pre>wininet: HttpOpenRequest failed!</pre><pre>httpopenrequest</pre><pre>wininet: Request handle is NULL after HttpSendRequest!</pre><pre>httpreqerr</pre><pre>unable to set wininet http decoding</pre><pre>Content-Type: application/x-www-form-urlencoded</pre><pre>wininet: HttpAddRequestHeaders (post flag) failed!</pre><pre>httpaddheaders</pre><pre>Range: bytes=%u-</pre><pre>Range: bytes=%u-%u</pre><pre>wininet: HttpAddRequestHeaders (range specification) failed!</pre><pre>httpaddheader</pre><pre>wininet: HttpSendRequest failed! (verb=</pre><pre>httpsendreq</pre><pre>httptimeout</pre><pre>wininet: HttpSendRequest failed!</pre><pre>wininet: HttpQueryInfo failed!</pre><pre>httpqueryinfo</pre><pre>httpproxy</pre><pre>wininet: Server responded with error: %d, %s. %s %s</pre><pre>httpstatus</pre><pre>wininet: HttpSendRequest: status OK received</pre><pre>wininet: HttpQueryInfo for content range failed!</pre><pre>wininet: HttpQueryInfo for file size failed!</pre><pre>wininet: Operation cancelled by caller.</pre><pre>Software\Microsoft\Windows\CurrentVersion\Internet Settings</pre><pre>CoreDownloadThread.cpp</pre><pre>01234567</pre><pre>PackageZlib.cpp</pre><pre>Error: %d bytes of %d read from file %s.</pre><pre>unzOpenCurrentFilePassword failed!</pre><pre>Error: %d bytes of %d were written to file %s.</pre><pre>unzOpenCurrentFilePassword failed! err=</pre><pre>Package.cpp</pre><pre>&#xX;</pre><pre></pre><pre>%s="%s"</pre><pre>%s='%s'</pre><pre><!--%s--></pre><pre><![CDATA[%s]]></pre><pre>version="%s"</pre><pre>encoding="%s"</pre><pre>standalone="%s"</pre><pre>zip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll</pre><pre>unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll</pre><pre>1.2.7</pre><pre>deflate 1.2.7 Copyright 1995-2012 Jean-loup Gailly and Mark Adler</pre><pre>inflate 1.2.7 Copyright 1995-2012 Mark Adler</pre><pre>SQLite format 3</pre><pre>REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY</pre><pre>CREATE TABLE sqlite_master(</pre><pre>sql text</pre><pre>3.7.5</pre><pre>CREATE TEMP TABLE sqlite_temp_master(</pre><pre>IQDownloader.cpp</pre><pre>AddDownload failed! url=</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.comm\IQCommThread.h</pre><pre>iehost.CreateStandalone failed!</pre><pre>iehost.Navigate failed!</pre><pre>IE open url:</pre><pre>CIQComm::IEOpenUrl</pre><pre>openurlie</pre><pre>Shell open url:</pre><pre>CIQComm::ShellOpenUrl</pre><pre>ShellExecuteEx failed!</pre><pre>openurlshell</pre><pre>productfailurl</pre><pre>producturl</pre><pre>fastwelcomedisclosureurl</pre><pre>detectionurl</pre><pre>pingurl</pre><pre>postbackurl</pre><pre>logfileurl</pre><pre>ieaddonbarmonitorurl</pre><pre>addonprompturl</pre><pre>trusturl</pre><pre>uninstalloption.publisher</pre><pre>searchprotector.publisher</pre><pre>statsdurl</pre><pre>prddiscimageurl</pre><pre>urlmon</pre><pre>CIQWrapperConfig::PromptForPingUrl</pre><pre>IQWrapperConfig.cpp</pre><pre>PromptForPingUrl called in production mode!!</pre><pre>1234567890</pre><pre>00000000-0000-0000-0000-000000000000</pre><pre>Ping File (ping.*.dat; ping.*.xml)|ping.*.dat; ping.*.xml|Text Files (*.txt)|*.txt|All Files (*.*)|*.*||</pre><pre>%programfiles%\Free Offers from Freeze.com\control.txt</pre><pre>%programfiles%\Free Offers from InstallX\control.txt</pre><pre>rule.LoadXml failed! type=</pre><pre>Excluded detection rule: "%s" type="%s" id="%s"</pre><pre>Number of parsed rules is not equal to rule count, parsed=%d, count=%d</pre><pre>regkey</pre><pre>chromeprefs</pre><pre>firefoxprefs</pre><pre>IQXmlDetection.cpp</pre><pre>detectionrules.dat</pre><pre>IQDetectionManager.cpp</pre><pre>Unhandled case in IQDetectionManager.EvaluateRulesAccelerated!</pre><pre>%s: %0.2f</pre><pre>Chrome</pre><pre>Firefox</pre><pre>Invalid flag in ExecuteResult:</pre><pre>CIQXmlRequirements::ParseExecuteResult</pre><pre>Running requirement.OnCancel:</pre><pre>Running requirement.OnInstall:</pre><pre>Running requirement.OnExit:</pre><pre>requirement.OnCancel is empty, skipping.</pre><pre>Software\Microsoft\Windows\CurrentVersion\RunOnce</pre><pre>requirement.OnExit is empty, skipping.</pre><pre>%s[%d]</pre><pre>passed</pre><pre>CIQXmlRequirements::RunExecute</pre><pre>IQDetectionThread.cpp</pre><pre>IQProgressDialog.cpp</pre><pre>NULL dialog passed to AddDialog!</pre><pre>%programfiles%\Core Services\IETester\IETester.exe</pre><pre>explorer.exe</pre><pre>IQDialogMain.cpp</pre><pre>welcomestats.dat</pre><pre>IQDialogIE9AddOn.cpp</pre><pre>chromeextensioncount</pre><pre>chromeextension</pre><pre>IQXmlDialogDownload.cpp</pre><pre>IQXmlDialogOffer.cpp</pre><pre>|%s,%s</pre><pre>{prddiscimageurl}</pre><pre>IQXmlInstallItem.cpp</pre><pre>chrome</pre><pre>firefox</pre><pre>IQXmlDialog.cpp</pre><pre>betamsg</pre><pre>found for Fast Welcome!! hardcoding to exe</pre><pre>found for IQU in Fast Welcome!! hardcoding to exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallIQ Updater</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\{8E1CB0F1-67BF-4052-AA23-FA22E94804C1}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall Helper</pre><pre>%programfiles%\W3i\InstallIQUpdater\InstallIQUpdater.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\{D322CFF6-BE33-47DA-BB9E-617C97B7AB36}</pre><pre>%programfiles%\W3i\UninstallHelper\UninstallHelper.exe</pre><pre>Invalid offer type=%s found in ping for %s.</pre><pre>Unknown offer type=%d in AddOffer. ConfigId=%s, OfferId=%s.</pre><pre>IQOfferManager.cpp</pre><pre>WaitForAllOffers: timed out waiting for %d offers after %d seconds.</pre><pre>Restarting Firefox...</pre><pre>Not restarting firefox; postback will open Firefox window..</pre><pre>Restarting Chrome...</pre><pre>Not restarting chrome; postback will open chrome window..</pre><pre>Chrome state=</pre><pre>control.txt</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBase.h</pre><pre>CIQOfferBase::ExpandUrl</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBaseInstall.h</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBaseCustom.h</pre><pre>Setting offer checkbox value: key=</pre><pre>chk_chrome</pre><pre>chk_firefox</pre><pre>CIQOfferEXE::GetXpiFilename</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferEXE.h</pre><pre>postinstallexecute</pre><pre>cmdline_iexplore</pre><pre>/cmdline_iexplore</pre><pre>cmdline_chrome</pre><pre>cmdline_firefox</pre><pre>postinstallexecuteintegrity</pre><pre>firefoxinstalltype</pre><pre>firefoxpref</pre><pre>naffkeywordurl</pre><pre>LUA account detected, and flag lua_runasdesktopuser detected, forcing executeAsDesktopUser</pre><pre>stopchrome</pre><pre>CIQOfferEXE::OnInstall</pre><pre>iconurl</pre><pre>Firefox preferences set=</pre><pre>Icon offer (in exe config) detected, running icon install</pre><pre>CIQOfferEXE::RunOfferInstaller</pre><pre>chromecancel</pre><pre>User canceled during Chrome shutdown!</pre><pre>rundll32.exe "%s" %s</pre><pre>msiexec.exe /i "%s" %s</pre><pre>msiexec.exe /i "%s" /qn ALLUSERS=2 REBOOT=ReallySuppress</pre><pre>CIQOfferEXE::BuildCommandLine</pre><pre>User canceled during Firefox shutdown!</pre><pre>Could not find firefox exe to install</pre><pre>Offer is installing XPI for Firefox 8 or higher, enabling GUI.</pre><pre>"%s" "%s"</pre><pre>"%s" -install-global-extension "%s"</pre><pre>"%s" %s</pre><pre>#NAFFKEYWORDURL#</pre><pre>CIQOfferEXE::InstallXpi</pre><pre>CIQOfferEXE::CancelXpiInstall</pre><pre>IQOfferEXE.cpp</pre><pre>CIQOfferEXE::RunOfferInstallerAsDesktopUser</pre><pre>badprocesshandle</pre><pre>CIQOfferEXE::WaitForOfferInstaller</pre><pre>process exit code: %d</pre><pre>CIQOfferEXE::WaitForProcessStarted</pre><pre>CIQOfferEXE::WaitForRegistryValue</pre><pre>Looking for Key:</pre><pre>Registry key (64-bit) found.</pre><pre>Registry key found.</pre><pre>CIQOfferEXE::WaitForFile</pre><pre>CIQOfferEXE::StartAppRegistryValue</pre><pre>PostInstallExecute:</pre><pre>Skipping post-install execute due to Simulation mode..</pre><pre>Cannot run post-install execute, file does not exist:</pre><pre>PostInstallExecute command failed!</pre><pre>CIQOfferEXE::PostInstallExecute</pre><pre>CIQOfferEXE::HandleFirefoxOptions</pre><pre>http:</pre><pre>HandleFirefoxOptions called with incorrect preferences set in config!</pre><pre>upromise.com,tsInstallContext=w3i|#PRODUCTID#|,now 7,/,no</pre><pre>Diagnostics: running upromise.com cookie handling...</pre><pre>upromise.com</pre><pre>upromise.com cookie test for IE failed!</pre><pre>upromise.com cookie test for Firefox failed!</pre><pre>Firefox shutdown rejected!</pre><pre>CIQOfferEXE::InsertCookie</pre><pre>Setting cookies in low-integrity context (windows vista)</pre><pre>CIQOfferEXE::RunIconInstall</pre><pre>%s_%s.url</pre><pre>%programfiles%\Free Offers from Freeze.com</pre><pre>CIQOfferEXE::InstallDejebelDll</pre><pre>IQInstallSearchProtector.cpp</pre><pre>browser.startup.homepage</pre><pre>cannot set startpage; firefox is currently running!</pre><pre>CCoreFirefox::SetStartpage</pre><pre>browser.startup.page</pre><pre>Setting Offer option to %d</pre><pre>googlechrome</pre><pre>Setting Firefox StartPage:</pre><pre>Setting Chrome Startpage:</pre><pre>CIQOfferStartPage::SetFirefoxStartPage</pre><pre>CIQOfferStartPage::SetChromeStartPage</pre><pre>Failed to write Firefox pref!</pre><pre>failchromestartpage</pre><pre>Unable to set chrome startpage</pre><pre>Successfully set chrome startpage</pre><pre>IQOfferStartPage.cpp</pre><pre>startpageurl</pre><pre>oldstartpageurl</pre><pre>http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}</pre><pre>http://dl.installiq.com/api/osd/osd.aspx</pre><pre>http://search.yahoo.com/favicon.ico</pre><pre>chromesearchprovider</pre><pre>chromename</pre><pre>dsapiurl</pre><pre>chromefaviconurl</pre><pre>chromekeyword</pre><pre>chromesuggesturl</pre><pre>Internet Explorer 6 doesn't support default search!</pre><pre>Missing url!</pre><pre>ie7nourl</pre><pre>Attempting to set Default Search via API exe</pre><pre>ie6scnourl</pre><pre>CIQOfferDefaultSearch::SetFirefoxSearchEngine</pre><pre>Simulation mode, setting Firefox default search engine:</pre><pre>Failed to write Yahoo xml for Firefox!</pre><pre>Failed to set keyword.URL Preference for Firefox!</pre><pre>Simulation mode, setting chrome default search engine:</pre><pre>CIQOfferDefaultSearch::SetChromeSearchEngine</pre><pre>chromefail</pre><pre>Failed to set default search from chrome</pre><pre>IQOfferDefaultSearch.cpp</pre><pre>oldsearchurl</pre><pre>searchurl</pre><pre>\apps.ini</pre><pre>toolbarurl</pre><pre>toolbarregkey</pre><pre>Missing data for firefox toolbar install! Name:</pre><pre>Failed to write Firefox pref (GUID)!</pre><pre>.guid</pre><pre>.Var1</pre><pre>Software\%s\Toolbar</pre><pre>heartbeat_url</pre><pre>cmdargs</pre><pre>http://airdownload.adobe.com/air/win/download/latest/AdobeAIRInstaller.exe</pre><pre>AdobeAirInstaller.exe</pre><pre>%programfiles%\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe</pre><pre>"%s" %s "%s"</pre><pre>%windows%\Web\Wallpaper</pre><pre>InstallIQFirefoxLock</pre><pre>IQOfferBaseInstall.cpp</pre><pre>CIQOfferBaseInstall::WaitForFirefoxLock</pre><pre>Waiting for Firefox lock...</pre><pre>_firefoxLock is already created!</pre><pre>Releasing Firefox lock</pre><pre>Firefox lock status:</pre><pre>uninstalloption.exe</pre><pre>stopfirefox</pre><pre>ischromeaddon</pre><pre>chromeclassid</pre><pre>dynamic_separator_on_cmdline_append</pre><pre>config.ini</pre><pre>IQOfferBaseCustom.cpp</pre><pre>ini.WriteString failed!</pre><pre>lib\settings.db</pre><pre>insert into Application (ProductSessionId, ApplicationTypeId, ApplicationId) VALUES ('%s',%s,'%s')</pre><pre>Error; uninstalloption.exe doesn't exist (after download and extract!)</pre><pre>Failed to extract uninstall option exe!</pre><pre>Error copying uninstalloption.exe to program files!</pre><pre>error downloading uninstall option url!</pre><pre>downloadurl</pre><pre>%s - %s</pre><pre>IQOfferFile.cpp</pre><pre>templateurl</pre><pre>disclosureurl</pre><pre>previewurl</pre><pre>regkeyadd</pre><pre>ieregkey</pre><pre>images/disclosure/imageurl</pre><pre>firefox.</pre><pre>chrome.</pre><pre>%s (err=%d, info=%s)</pre><pre>IQOffer.cpp</pre><pre>CIQOffer::StopFirefox</pre><pre>Stop Firefox message not set!</pre><pre>CIQOffer::StopChrome</pre><pre>Stop Chrome message not set!</pre><pre>Bad RegKeyAdd config; not correct format: (missing hive \ )</pre><pre>Bad RegKeyAdd config; not correct format: (missing = )</pre><pre>Bad RegKeyAdd config; not correct format: (missing , )</pre><pre>RegKeyAdd:</pre><pre>unable to set regkey from following RegKeyAdd:</pre><pre>unable to set regkey from following IERegKey:</pre><pre>unrecognized values in RegKeyAdd:</pre><pre>unrecognized values in IERegKey:</pre><pre>IERegKeyAdd:</pre><pre>http://download.freeze.com/lm/</pre><pre>%s/*[%d]/text()</pre><pre>IQPing.cpp</pre><pre>CIQPing::Execute</pre><pre>ping.dat</pre><pre>CIQUReporter::SendOffersToIQU</pre><pre>%programdata%\W3i\UninstallHelper\iqu.ini</pre><pre>2.0.1.0</pre><pre>%s,%s</pre><pre>IQUReporter.cpp</pre><pre>%programdata%\W3i\UninstallHelper\import</pre><pre>CIQUReporter::OutputXmlData</pre><pre>Failed to save IQU data, too many import files in directory!</pre><pre>CoreXml.SaveFile failed!</pre><pre>freezewrap.xml</pre><pre>freezewrap%d.xml</pre><pre>CIQUReporter::CheckUHVersion</pre><pre>softwareinfo%d.xml</pre><pre>CIQUReporter::MakeSoftwareInfoRequest</pre><pre>softwareinfo.xml</pre><pre>Failed to save SoftwareInfo data, too many import files in directory!</pre><pre>http://dl.installiq.com/API/IQU/SoftwareInfo.aspx</pre><pre>CIQUReporter::RunUninstallHelper</pre><pre>"%s" /silent /noswinfo</pre><pre>http://installer.freeze.com/testpost.asp</pre><pre>http://dl.installiq.com/postback/V1/landing.aspx</pre><pre>opera</pre><pre>%d,%d,%d,%s,%s</pre><pre>%s,%d,%d,%d</pre><pre>WrapperConfig.LoadAutoRun failed!</pre><pre>WrapperConfig.LoadCommandLine failed!</pre><pre>WrapperConfig.Initialize failed!</pre><pre>WrapperConfig.LoadWrapper failed!</pre><pre>Software\Freeze.com\Installer</pre><pre>%Y%m%d%H%M%S</pre><pre>FreezeWrapEngine.cpp</pre><pre>Unable to copy old offere history values; unable to create new regkey location!</pre><pre>attempting to copy old offer history values to new key</pre><pre>Missing Detection URL</pre><pre>detecturlmissing</pre><pre>keyid</pre><pre>%m%d%Y</pre><pre>Missing template url for fast welcome!</pre><pre>Performing postback, returncode=%d, failed=%d, err=%d...</pre><pre>Downloading %s...</pre><pre>Product type is not supported in ExpressWay!</pre><pre>typenotsupported</pre><pre>/restart=%d</pre><pre>Diagnostics: running CookieManager.HandleCookies...</pre><pre>%s:%d</pre><pre>FF.GetCookiesError</pre><pre>FF.NoCookies</pre><pre>handling firefox cookies...</pre><pre>FF.SetCookies</pre><pre>firefox: set cookies</pre><pre>firefox: no cookies found</pre><pre>FF.SetCookieError</pre><pre>Error enumerating firefox cookies!</pre><pre>firefoxenum</pre><pre>getting firefox cookies for</pre><pre>CCookieManager::GetFirefoxCookies</pre><pre>IE.FoundCookies</pre><pre>IE.EnumCookieError</pre><pre>IE.NoCookies</pre><pre>Vista.ExtractError</pre><pre>Vista.CopiedLow</pre><pre>Vista.CreateLowError</pre><pre>handling chrome cookies</pre><pre>Chrome: no cookies found</pre><pre>Chrome.SetCookieError</pre><pre>Chrome.GetCookiesError</pre><pre>Chrome.NoCookies</pre><pre>getting Chrome cookies for</pre><pre>CCookieManager::GetChromeCookies</pre><pre>Chrome.SetCookies</pre><pre>Chrome: set cookies succeeded</pre><pre>Safari.GetCookiesError</pre><pre>Error enumerating chrome cookies!</pre><pre>chromeenum</pre><pre>Safari.SetCookieError</pre><pre>Safari.SetCookies</pre><pre>Safari.NoCookies</pre><pre>IQNotifyBarThread.cpp</pre><pre>PackageManager.cpp</pre><pre>SessionScraperThread.cpp</pre><pre>CoreIEHost.CreateExisting failed!</pre><pre>producturlmissing</pre><pre>ExpressWay Product Url is missing!</pre><pre>hkey is NULL!</pre><pre>subKey is NULL!</pre><pre>UniqueId.cpp</pre><pre>%s(%s);</pre><pre>CoreJSON2.cpp</pre><pre>Node path not valid; node "%s" in path "%s" is not type Node!</pre><pre>Encryption key not initialized!</pre><pre>\/:*?"<>|</pre><pre>Failed to create URL file!</pre><pre>createurlfilefail</pre><pre>ShellWindows.Item failed!</pre><pre>Shell.CreateInstance failed!</pre><pre>browser.search.selectedEngine</pre><pre>keyword.URL</pre><pre>browser.search.defaultenginename</pre><pre>firefox.exe,firefox.url,firefoxportableurl,firefoxurl,firefox</pre><pre>MozillaUIWindowClass</pre><pre>MozillaWindowClass</pre><pre>Software\Mozilla\Mozilla Firefox</pre><pre>Failed to get Firefox version key!</pre><pre>firefoxver</pre><pre>CCoreFirefox::GetVersion</pre><pre>Profile%d</pre><pre>Firefox versions prior to 3 are not supported by LoadProfileCookies!</pre><pre>Loading Firefox3 cookies for url:[</pre><pre>%appdata%\Mozilla\Firefox</pre><pre>profiles.ini</pre><pre>%s=%s</pre><pre>cookies.sqlite</pre><pre>Enumerating Firefox3 cookies for</pre><pre>Enumerating Firefox cookies for</pre><pre>Found partial cookie in Firefox profile:</pre><pre>cookies.txt</pre><pre>Setting Firefox3 cookie for</pre><pre>insert into moz_cookies (name, value, host, path, expiry) VALUES ('%s','%s','%s','%s','%d')</pre><pre>Firefox version is not sufficient for setting cookies!! Must be 3.x or higher</pre><pre>firefox.exe</pre><pre>-requestPending -osint -new-window "%s"</pre><pre>prefs.js</pre><pre>CCoreFirefox::GetPrefString</pre><pre>PathToExe</pre><pre>%programfiles%\Mozilla Firefox</pre><pre>CCoreFirefox::SetPrefString</pre><pre>user_pref("%s", %s%s%s);</pre><pre>CoreFirefox.cpp</pre><pre>CCoreFirefox::SetDefaultSearch</pre><pre>Can't set search engine while Firefox is running!</pre><pre>Setting Firefox default search engine:</pre><pre>searchUrl is empty!</pre><pre>suggestionUrl is empty!</pre><pre>SuggestionUrl=</pre><pre>SearchUrl=</pre><pre>http://www.mozilla.org/2006/browser/search/</pre><pre>Failed to write Yahoo search prefs for Firefox!</pre><pre>browser.search.order.1</pre><pre>downloads.sqlite</pre><pre>places.sqlite</pre><pre>browser.search.order.2</pre><pre>Failed to open downloads.sqlite database!</pre><pre>select source from moz_downloads where source like '%%%s%%' order by id desc</pre><pre>/SearchPlugin/Url</pre><pre>Failed to open places.sqlite database!</pre><pre>select url from moz_places where url like '%%%s%%' order by id desc</pre><pre>firefox pref: browser.search.param.yahoo-fr=</pre><pre>firefox pref: keyword.URL=</pre><pre>browser.search.param.yahoo-fr</pre><pre>CCoreChrome::SetCookie</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreChrome.h</pre><pre>Chrome_WindowImpl_0</pre><pre>Chrome_WidgetWin_0</pre><pre>chrome.exe,chrome.hwd,chromehtml,chromiumhtml,chrome,chromium</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Cookies</pre><pre>Chrome_RenderWidgetHostHWND</pre><pre>Chrome_WidgetWin_1</pre><pre>select name, value, host_key, path, expires_utc from cookies where</pre><pre>host_key like '%</pre><pre>CCoreChrome; Cookie file does not exist</pre><pre>Loading Google Chrome cookies for url:[</pre><pre>Chrome cookie file does not exist</pre><pre>Enumerating Google Chrome cookies for</pre><pre>CCoreChrome::EnumCookiesLegacy</pre><pre>CCoreChrome::EnumCookiesV33</pre><pre>select host_key, name, value, path, expires_utc, encrypted_value from cookies where host_key like '%</pre><pre>select host_key, name, value, path, expires_utc from cookies where host_key like '%</pre><pre>Enumerating Google Chrome cookies (v33) for</pre><pre>chrome.dll</pre><pre>--new-window "%s"</pre><pre>Failed to decrypt chrome cookie:</pre><pre>Chrome cookie:</pre><pre>ChromeHTML\shell\open\command</pre><pre>%local_appdata%\Google\Chrome\Application</pre><pre>Unable to find chrome.exe, using shell execute (with possible warnings)</pre><pre>chrome.exe</pre><pre>%programfiles%\Google\Chrome\Application</pre><pre>CCoreChrome::GetStartpage</pre><pre>session/urls_to_restore_on_startup</pre><pre>session/startup_urls</pre><pre>CCoreChrome::GetStartupPages</pre><pre>CoreChrome.cpp</pre><pre>CCoreChrome::SetStartpage</pre><pre>CCoreChrome::SetStartPageOld</pre><pre>CCoreChrome::SetStartPageNew</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Web Data</pre><pre>SELECT value FROM meta WHERE key='Default Search Provider ID'</pre><pre>SELECT id, short_name, url FROM keywords where id = %s</pre><pre>CCoreChrome: Name param cannot be blank</pre><pre>CCoreChrome: keyword param cannot be blank</pre><pre>CCoreChrome::SetDefaultSearch</pre><pre>Found existing default search in Chrome: id=</pre><pre>failed to set Database keyword search!!</pre><pre>CCoreChrome: url param cannot be blank</pre><pre>http://www.yahoo.com/favicon.ico</pre><pre>failed to set database keyword search backup table!</pre><pre>Failed to set keyword hash!!</pre><pre>Chrome v25 or higher detected, skipping keyword_backup and keyword hashing..</pre><pre>Successfully set Default Search provider in chrome</pre><pre>keywords</pre><pre>CCoreChrome::SetDatabaseKeywordSearch</pre><pre>Successfully added default search data to keyword and meta tables</pre><pre>CCoreChrome::SetDatabaseKeywordSearchBackup</pre><pre>sql string is empty</pre><pre>UPDATE meta SET value='%s' WHERE key='Default Search Provider ID'</pre><pre>Successfully added default search data to keyword_backup and meta tables</pre><pre>CCoreChrome::FindSearchEntryID</pre><pre>keywords_backup</pre><pre>UPDATE meta SET value='%s' WHERE key='Default Search Provider ID Backup'</pre><pre>url like '%</pre><pre>url = '</pre><pre>SELECT id FROM keywords WHERE</pre><pre>keyword like '%</pre><pre>Setting existing default search in Chrome:</pre><pre>Error opening Chrome Web Data!</pre><pre>Please, don't change this Chrome setting</pre><pre>CCoreChrome::SetExistingDefaultSearchUrl</pre><pre>unable to set the database keyword hash!</pre><pre>Sqlite is not open!</pre><pre>SELECT id FROM keywords WHERE url='%s'</pre><pre>Looking up default search url:</pre><pre>CCoreChrome::LookupDefaultSearchUrl</pre><pre>LookupDefaultSearchUrl: id not found in row</pre><pre>CCoreChrome::IsPreferenceExist</pre><pre>SELECT id FROM keywords WHERE short_name='%s'</pre><pre>LookupDefaultSearchUrl: url not found in table</pre><pre>CCoreChrome::GetPreferenceInt</pre><pre>CCoreChrome::GetPreference</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Preferences</pre><pre>CCoreChrome::LoadChromePreferences</pre><pre>, suggest_url='%s'</pre><pre>WHERE id=%s</pre><pre>UPDATE %s set short_name='%s', keyword='%s', url='%s', favicon_url='%s'</pre><pre>, show_in_default_list=%s, safe_for_autoreplace=%s, input_encodings='%s'</pre><pre>short_name, keyword, favicon_url, url,</pre><pre>safe_for_autoreplace, originating_url, date_created, usage_count,</pre><pre>INSERT INTO %s (</pre><pre>'%s', '%s', '%s', '%s',</pre><pre>input_encodings, show_in_default_list, suggest_url, prepopulate_id,</pre><pre>created_by_policy, instant_url, last_modified, sync_guid) VALUES (</pre><pre>%s, '%s', %s, '%s')</pre><pre>CCoreChrome::GetHashData</pre><pre>%s, '%s', %s, %s,</pre><pre>'%s', %s, '%s', %s,</pre><pre>INSERT OR REPLACE INTO meta (key,value) VALUES (?,?)</pre><pre>SELECT id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid FROM keywords_backup ORDER BY id ASC</pre><pre>CCoreChrome::InsertHashSignature</pre><pre>select url from downloads_url_chains where url like '%%%s%%' order by id desc</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\History</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreSafari.h</pre><pre>Loading Safari cookies for url:[</pre><pre>safari.exe,safariurl,safari</pre><pre>%appdata%\Apple Computer\Safari\Cookies\Cookies.binarycookies</pre><pre>CoreSafari.cpp</pre><pre>%appdata%\Apple Computer\Safari\Cookies\Cookies.plist</pre><pre>Failed to get Safari version key!</pre><pre>-url "%s"</pre><pre>safari.exe</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreOpera.h</pre><pre>EnumCookies is not implemented for Opera!</pre><pre>CCoreOpera::EnumCookies</pre><pre>CCoreOpera::SetCookie</pre><pre>SetCookie is not implemented for Opera!</pre><pre>CCoreOpera::LoadCookies</pre><pre>LoadCookies is not implemented for Opera!</pre><pre>opera.exe,opera.protocol,opera.url,opera,operanext,operastable</pre><pre>CCoreOpera::OpenUrl</pre><pre>OpenURL is not implemented for Opera!</pre><pre>opera.exe</pre><pre>launcher.exe</pre><pre>Software\Opera Software</pre><pre>%programfiles%\Opera Next</pre><pre>%programfiles%\Opera</pre><pre>CCoreFirefoxXpiInstaller::Install</pre><pre>CoreFirefoxXPIInstaller.cpp</pre><pre>install.rdf</pre><pre>CCoreFirefoxXpiInstaller::GetXpiInfo</pre><pre>xml.LoadBuffer failed on</pre><pre>Installing Firefox add-ons via package...</pre><pre>Firefox.exe not found!</pre><pre>CCoreFirefoxXpiInstaller::InstallAsPackage</pre><pre>Create install.rdf failed!</pre><pre>installiq.xpi</pre><pre>Error running Firefox!</pre><pre>Running Firefox to install add-ons:</pre><pre><?xml version="1.0"?><RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><pre>xmlns:NC="http://home.netscape.com/NC-rdf#"</pre><pre>xmlns:em="http://www.mozilla.org/2004/em-rdf#"></pre><pre><Description about="urn:mozilla:install-manifest"></Description></pre><pre><em:id>multi@installiq.com</em:id></pre><pre><em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id></pre><pre><em:maxVersion>*.*.*</em:maxVersion></pre><pre>CCoreFirefoxXpiInstaller::SetResult</pre><pre>Installed Firefox extension:</pre><pre>CCoreFirefoxXpiInstaller::CreateInstallRDF</pre><pre>Error creating install.rdf!</pre><pre>CCoreFirefoxXpiInstaller::GetExtensionsFolder</pre><pre>Can't get Firefox default profiles folder!</pre><pre>~nsu.tmp\</pre><pre>config.dat</pre><pre>Yahoo uninstall key not found</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\</pre><pre>UninstallKey</pre><pre>Error replacing Yahoo Toolbar uninstall key!</pre><pre>ChromePriorSearchUrl</pre><pre>ChromeStartPage</pre><pre>UninstallKey=</pre><pre>FirefoxPriorStartPage</pre><pre>ChromePriorStartPage</pre><pre>FirefoxPriorSearchUrl</pre><pre>CoreBrowserOptionUninstaller.cpp</pre><pre>Not removing files because uninstallKey is empty</pre><pre>Error removing registry key from HKLM\</pre><pre>Bu_.exe</pre><pre>searchprotector.exe</pre><pre>config.xml</pre><pre>toolbar uninstall key was already replaced</pre><pre>replacing toolbar uninstall key</pre><pre>toolbar uninstall key not found, creating new add/remove entry...</pre><pre>Error replacing toolbar uninstall key!</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallX Search Protect for Yahoo</pre><pre>CoreSearchProtectorApp.cpp</pre><pre>CCoreSearchProtectorApp.ShutDown: window not found</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>/errorurl/text()</pre><pre>searchkeyword</pre><pre>chromesearch</pre><pre>chromestartpage</pre><pre>firefoxsearch</pre><pre>firefoxstartpage</pre><pre>errorurl</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Settings</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Stats</pre><pre>CCoreFirefoxAddOn::LoadAddonDatabase</pre><pre>CoreFirefoxAddOn.cpp</pre><pre>%firefoxprofiles%\extensions.sqlite</pre><pre>SELECT active FROM addon where id = '%s'</pre><pre>extensions/settings/%s</pre><pre>CCoreDefaultSearchAPI::SetDefaultSearchByApiExe</pre><pre>dsapi.zip</pre><pre>dsurl</pre><pre>%s "%s"</pre><pre>KeyExists</pre><pre>SourceKey</pre><pre>hkey_local_machine</pre><pre>hkey_classes_root</pre><pre>hkey_current_user</pre><pre>hkey_current_config</pre><pre>multireg: key found:</pre><pre>multireg: unable to parse key:</pre><pre>multireg%d</pre><pre>1.1.0.6</pre><pre>//flag[%d]/text()</pre><pre>DetectionFile.cpp</pre><pre>Cannot evaluate .NET Version, .NET may not be installed!</pre><pre>wajam_validate.zip</pre><pre>extracted wajam exe file not found!</pre><pre>wajamexemissing</pre><pre>Unable to get returncode from wajam_validate.exe!</pre><pre>Timed out waiting for wajam_validate.exe!</pre><pre>wajam_validate.exe detection process result = %d</pre><pre>yahoo.com</pre><pre>google.com</pre><pre>ask.com</pre><pre>aol.com</pre><pre>live.com</pre><pre>msn.com</pre><pre>CDetectionYahooToolbar::IsInstalledFirefox</pre><pre>_firefox is NULL!</pre><pre>CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\InprocServer32</pre><pre>%firefoxprofiles%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\install.rdf</pre><pre>DetectionFirefoxPrefs.cpp</pre><pre>CDetectionFirefoxPrefs::OnEvaluate</pre><pre>DetectionChromePrefs.cpp</pre><pre>_chrome is NULL!</pre><pre>CDetectionChromePrefs::OnEvaluate</pre><pre>DetectionCookie.cpp</pre><pre>CookieEvaluator.Add:</pre><pre>ApnStub.exe</pre><pre>asktbdet.zip</pre><pre>Ask detection process result = %d</pre><pre>/executeresult/text()</pre><pre>Missing ExecuteResult in requirement config!</pre><pre>/execute/text()</pre><pre>%programfiles%\iTunes\iTunes.exe</pre><pre>msnmsgr.exe</pre><pre>SOFTWARE\Microsoft\Windows Live\Messenger</pre><pre>ydetect.yhp</pre><pre>ydetect.ytb</pre><pre>ydetect.yas</pre><pre>Rules.cpp</pre><pre>RegKeyExists</pre><pre>)] disabled because of minimum windows version.</pre><pre>minwindowsversion</pre><pre>DetectionRule.cpp</pre><pre>Disabled; rule target is not Firefox</pre><pre>Disabled; Chrome is not installed</pre><pre>Disabled; Firefox is not installed</pre><pre>Disabled; rule target is not Chrome</pre><pre>CoreIEHost.cpp</pre><pre>m_WebBrowserEvents failed</pre><pre>IWebBrowser2 failed</pre><pre>_WebBrowserEvents failed</pre><pre>url1=</pre><pre>shell.Initialize failed!</pre><pre>url2=</pre><pre>_webBrowser->Quit failed!</pre><pre>Not initialized or _webBrowser is NULL!</pre><pre>Sending Quit to web browser...</pre><pre>CCoreIEHost::DeleteHistoryUrl</pre><pre>CCoreIEHost.OnDocumentComplete:</pre><pre>WebBrowser object is NULL!</pre><pre>Error: Collection didn't support IHTMLElementCollection!</pre><pre>*** set key code to 0 ****</pre><pre>Url is null!</pre><pre>%s, %s, l=0xx</pre><pre>[0x%X]</pre><pre>d:%s</pre><pre>CCoreSqlite::OpenDatabase</pre><pre>CCoreSqlite::CloseDatabase</pre><pre>CCoreSqlite::ExecuteStatement</pre><pre>sqlite3_exec failed, returned error:</pre><pre>CoreSqlite.cpp</pre><pre>dbexecerror</pre><pre>CCoreSqlite::StandardExecuteCallback</pre><pre>CCoreSqlite::PrepareCompiledStmt</pre><pre>Failed to prepare compiled statement, sqlite returned error: %d</pre><pre>sqliteerror</pre><pre>Cannot prepare statement, sql is empty!</pre><pre>sqlempty</pre><pre>CCoreSqlite::BindTextToCompiledStmt</pre><pre>CCoreSqlite::ExecuteCompiledStmt</pre><pre>bind text failed, errorcode=%d</pre><pre>CCoreSqlite::CheckStmtRowValid</pre><pre>sqlite3_step failed, errorcode=%d</pre><pre>sqlitestepfailed</pre><pre>Cannot get row results: statement has not executed!!</pre><pre>sqlite3_finalize failed, errorcode=%d</pre><pre>CCoreSqlite::CloseCompiledStmt</pre><pre>SQLITE_</pre><pre>d:d:d</pre><pre>d-d-d</pre><pre>d-d-d d:d:d</pre><pre>failed to allocate %u bytes of memory</pre><pre>failed memory resize %u to %u bytes</pre><pre>922337203685477580</pre><pre>API call with %s database connection pointer</pre><pre>RowKey</pre><pre>%s-shm</pre><pre>%s\etilqs_</pre><pre>OsError 0x%x (%u)</pre><pre>invalid page number %d</pre><pre>Recovered %d frames from WAL file %s</pre><pre>Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)</pre><pre>%d of %d pages missing from overflow list starting at %d</pre><pre>2nd reference to page %d</pre><pre>Failed to read ptrmap key=%d</pre><pre>Page %d:</pre><pre>unable to get the page. error code=%d</pre><pre>failed to get page %d</pre><pre>freelist leaf count too big on page %d</pre><pre>btreeInitPage() returns error code %d</pre><pre>On tree page %d cell %d:</pre><pre>On page %d at right child:</pre><pre>Multiple uses for byte %d of page %d</pre><pre>Fragmentation of %d bytes reported as %d on page %d</pre><pre>Corruption detected in cell %d on page %d</pre><pre>Page %d is never used</pre><pre>Pointer map page %d is referenced</pre><pre>unknown database %s</pre><pre>Outstanding page count goes from %d to %d during this analysis</pre><pre>keyinfo(%d</pre><pre>%s(%d)</pre><pre>%s-mjX</pre><pre>foreign key constraint failed</pre><pre>bind on a busy prepared statement: [%s]</pre><pre>unable to use function %s in the requested context</pre><pre>zeroblob(%d)</pre><pre>cannot open savepoint - SQL statements in progress</pre><pre>no such savepoint: %s</pre><pre>abort at %d in [%s]: %s</pre><pre>constraint failed at %d in [%s]</pre><pre>cannot %s savepoint - SQL statements in progress</pre><pre>cannot rollback transaction - SQL statements in progress</pre><pre>cannot commit transaction - SQL statements in progress</pre><pre>sqlite_master</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid</pre><pre>sqlite_temp_master</pre><pre>cannot change %s wal mode from within a transaction</pre><pre>database table is locked: %s</pre><pre>statement aborts at %d: [%s] %s</pre><pre>cannot open virtual table: %s</pre><pre>cannot open view: %s</pre><pre>cannot open value of type %s</pre><pre>indexed</pre><pre>cannot open %s column for writing</pre><pre>no such column: "%s"</pre><pre>foreign key</pre><pre>misuse of aliased aggregate %s</pre><pre>%s: %s</pre><pre>not authorized to use function: %s</pre><pre>%s: %s.%s.%s</pre><pre>%s: %s.%s</pre><pre>%r %s BY term out of range - should be between 1 and %d</pre><pre>too many terms in %s BY clause</pre><pre>variable number must be between ?1 and ?%d</pre><pre>too many SQL variables</pre><pre>Expression tree is too large (maximum depth %d)</pre><pre>too many columns in %s</pre><pre>EXECUTE %s%s SUBQUERY %d</pre><pre>%.*s"%w"%s</pre><pre>misuse of aggregate: %s()</pre><pre>sqlite_rename_trigger</pre><pre>sqlite_rename_parent</pre><pre>%s%.*s"%w"</pre><pre>sqlite_rename_table</pre><pre>type='trigger' AND (%s)</pre><pre>%s OR name=%Q</pre><pre>table %s may not be altered</pre><pre>view %s may not be altered</pre><pre>there is already another table or index with this name: %s</pre><pre>sqlite_</pre><pre>sqlite_sequence</pre><pre>UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q</pre><pre>UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;</pre><pre>UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');</pre><pre>UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;</pre><pre>Cannot add a PRIMARY KEY column</pre><pre>UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q</pre><pre>sqlite_stat1</pre><pre>sqlite_altertab_%s</pre><pre>SELECT tbl, idx, stat FROM %Q.sqlite_stat1</pre><pre>CREATE TABLE %Q.%s(%s)</pre><pre>DELETE FROM %Q.%s WHERE tbl=%Q</pre><pre>database %s is already in use</pre><pre>invalid name: "%s"</pre><pre>too many attached databases - max %d</pre><pre>unable to open database: %s</pre><pre>no such database: %s</pre><pre>database %s is locked</pre><pre>sqlite_detach</pre><pre>cannot detach database %s</pre><pre>access to %s.%s.%s is prohibited</pre><pre>sqlite_attach</pre><pre>%s %T cannot reference objects in database %s</pre><pre>access to %s.%s is prohibited</pre><pre>object name reserved for internal use: %s</pre><pre>too many columns on %s</pre><pre>duplicate column name: %s</pre><pre>there is already an index named %s</pre><pre>AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY</pre><pre>default value of column [%s] is not constant</pre><pre>table "%s" has more than one primary key</pre><pre>no such collation sequence: %s</pre><pre>UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d</pre><pre>CREATE TABLE %Q.sqlite_sequence(name,seq)</pre><pre>CREATE %s %.*s</pre><pre>view %s is circularly defined</pre><pre>UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d</pre><pre>use DROP VIEW to delete view %s</pre><pre>DELETE FROM %s.sqlite_sequence WHERE name=%Q</pre><pre>table %s may not be dropped</pre><pre>use DROP TABLE to delete table %s</pre><pre>foreign key on %s should reference only one column of table %T</pre><pre>number of columns in foreign key does not match the number of columns in the referenced table</pre><pre>DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q</pre><pre>unknown column "%s" in foreign key definition</pre><pre>indexed columns are not unique</pre><pre>virtual tables may not be indexed</pre><pre>there is already a table named %s</pre><pre>table %s may not be indexed</pre><pre>views may not be indexed</pre><pre>table %s has no column named %s</pre><pre>index %s already exists</pre><pre>sqlite_autoindex_%s_%d</pre><pre>INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);</pre><pre>CREATE%s INDEX %.*s</pre><pre>DELETE FROM %Q.%s WHERE name=%Q AND type='index'</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q</pre><pre>no such index: %S</pre><pre>index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped</pre><pre>a JOIN clause is required before %s</pre><pre>cannot modify %s because it is a view</pre><pre>unable to identify the object to be reindexed</pre><pre>table %s may not be modified</pre><pre>sqlite_source_id</pre><pre>sqlite_compileoption_used</pre><pre>sqlite_version</pre><pre>sqlite_compileoption_get</pre><pre>table %S has %d columns but %d values were supplied</pre><pre>%d values for %d columns</pre><pre>foreign key mismatch</pre><pre>%s.%s may not be NULL</pre><pre>PRIMARY KEY must be unique</pre><pre>table %S has no column named %s</pre><pre>no entry point [%s] in shared library [%s]</pre><pre>error during initialization: %s</pre><pre>sqlite3_extension_init</pre><pre>unable to open shared library [%s]</pre><pre>automatic extension loading failed: %s</pre><pre>foreign_keys</pre><pre>foreign_key_list</pre><pre>*** in database %s ***</pre><pre>unsupported encoding: %s</pre><pre>unsupported file format</pre><pre>malformed database schema (%s)</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid</pre><pre>database schema is locked: %s</pre><pre>RIGHT and FULL OUTER JOINs are not currently supported</pre><pre>a NATURAL join may not have an ON or USING clause</pre><pre>unknown or unsupported join type: %T %T%s%T</pre><pre>cannot have both ON and USING clauses in the same join</pre><pre>cannot join using column %s - column not present in both tables</pre><pre>USE TEMP B-TREE FOR %s</pre><pre>ORDER BY clause should come after %s not before</pre><pre>COMPOUND SUBQUERIES %d AND %d %s(%s)</pre><pre>no such index: %s</pre><pre>sqlite_subquery_%p_</pre><pre>LIMIT clause should come after %s not before</pre><pre>SELECTs to the left and right of %s do not have the same number of result columns</pre><pre>no such table: %s</pre><pre>sqlite3_get_table() called with two or more incompatible queries</pre><pre>INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')</pre><pre>cannot create %s trigger on view: %S</pre><pre>cannot create INSTEAD OF trigger on table: %S</pre><pre>no such column: %s</pre><pre>no such trigger: %S</pre><pre>-- TRIGGER %s</pre><pre>cannot VACUUM - SQL statements in progress</pre><pre>SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>PRAGMA vacuum_db.synchronous=OFF</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'</pre><pre>SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'</pre><pre>SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'</pre><pre>UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';</pre><pre>INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)</pre><pre>vtable constructor did not declare schema: %s</pre><pre>vtable constructor failed: %s</pre><pre>table %s: xBestIndex returned an invalid plan</pre><pre>no such module: %s</pre><pre>%s AS %s</pre><pre>%s SUBQUERY %d</pre><pre>%s TABLE %s</pre><pre>%s USING INTEGER PRIMARY KEY</pre><pre>%s (rowid=?)</pre><pre>%s USING %s%sINDEX%s%s%s</pre><pre>%s (rowid<?)</pre><pre>%s VIRTUAL TABLE INDEX %d:%s</pre><pre>%s (rowid>? AND rowid<?)</pre><pre>%s (rowid>?)</pre><pre>cannot use index: %s</pre><pre>%s (~%lld rows)</pre><pre>at most %d tables in a join</pre><pre>the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>unable to close due to unfinished backup operation</pre><pre>SQL logic error or missing database</pre><pre>unknown operation</pre><pre>large file support is disabled</pre><pre>no such vfs: %s</pre><pre>unknown database: %s</pre><pre>misuse at line %d of [%.10s]</pre><pre>cannot open file at line %d of [%.10s]</pre><pre>database corruption at line %d of [%.10s]</pre><pre>CoreIEControl.cpp</pre><pre>CoreHtmlDialog.cpp</pre><pre>onBeforeNavigate2 called, url=</pre><pre>CoreDialogCloseProcess.cpp</pre><pre>uxtheme.dll</pre><pre>urlarg:</pre><pre>%s/uninstallkeys/key[%d]/text()</pre><pre>/uninstallkeys/key</pre><pre>%s/uninstallkeys/key[%d]/attribute::type</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\</pre><pre>Unknown uninstall key type encountered, skipping lookup</pre><pre>Postback url is empty, skipping postback.</pre><pre>chromeaddonlogic</pre><pre>Target browser is unknown or unsupported; defaulting postback target browser to IE</pre><pre>chromeaddonLogic is true</pre><pre>postbackresponse.dat</pre><pre>norm.ieauto</pre><pre>alt.shell(2)</pre><pre>Opening Product Fail Url:</pre><pre>norm.shell(2)</pre><pre>norm.silent(3)</pre><pre>alt.ff</pre><pre>alt.chrome</pre><pre>alt.ie</pre><pre>IQPostback.cpp</pre><pre>alt.safari</pre><pre>alt.shell</pre><pre>Opening thank you page in Firefox:</pre><pre>Opening thank you page in Chrome:</pre><pre>Can't open thankyou page because the url is invalid:</pre><pre>Unable to open thankyou page.. turning off ShellExecute on URL (result may have still been launched)</pre><pre>ShellExecuteEx:</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Common\Installer.Common.Dialogs\IQDialogManager.h</pre><pre>%s,%d,%d,%d,%d,%d,%d,%d,%d</pre><pre>icons</pre><pre>offers</pre><pre>%s,v=%s,id=%s,rc=%d,e=%d,v=%d,c=%d,a=%d,i=%d,%s,err=%d,cf=%d,acc=%d,%u,%u,%u,%u,exc=%d</pre><pre>%s,%s,%d,%d,%s,%s,%d</pre><pre>t=%s,c=%d</pre><pre>%s_%s.d.%s</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall</pre><pre>hklm,%s,%d,%s</pre><pre>hkcu,%s,%d,%s</pre><pre>%s,%d,%s,"%s",%s</pre><pre>%s:v=%s,rc=%d,os=%s,%s,%s|ie=%s</pre><pre>%s:v=%s,id=%s,rc=%d,f=%d,e=%d,i=%s,p=%s,pb=%s,ex=%s,tr=%s,px=%d</pre><pre>%s,v=%s,id=%s,os=%d,rc=%d,v=%s,c=%s,l=0xx,spp=%s,epp=%s</pre><pre>%s,%s,rc=%s</pre><pre>INST_ie7searchurl</pre><pre>%s,%s,rc=%s,%d</pre><pre>%s,%s,rc=%s,%u,%u</pre><pre>%s,%s,rc=%s,%u,%u,%u,%u,%u</pre><pre>,os=%d,msi=%d.%d</pre><pre>%system%\msiexec.exe</pre><pre>,os=%d,sp=%d</pre><pre>%s|%s</pre><pre>%s,%s,%u,%u,%d,%s</pre><pre>%s,v=%s,id=%s,rc=%d,%u,%u,%d,%u,%u,%d,acc=%d,%u,%u,%u</pre><pre>v=%s,id=%s,rc=%d,%u</pre><pre>%s,%s,%s,%s,%s</pre><pre>%s,v=%s,id=%s,rc=%d,acc=%d,%u,%u,%u,%u,%u,%u</pre><pre>%d,%d,%d,%d,%d,%d,%d</pre><pre>%s,%s,%s</pre><pre>[%d,%d]</pre><pre>%s,%d,%d</pre><pre>%s,%d,%d,%s,%s,%s,%d,%s</pre><pre>%s,%d,%d,%s,%s,%s</pre><pre>%s,%d,%d,%d,%s,%s,%d,%d,%d,%d,%d,%d</pre><pre>%s,%s,%s,%d,%s,%d,%s,%s,%s</pre><pre>%s,%s,%d,%s,%s</pre><pre>%s|%d|%s</pre><pre>%Y%m%d</pre><pre>%s,%d,%s,%s,%s,%s</pre><pre>%s,%d,%s,%d</pre><pre>addonpostbackurl</pre><pre>thankYouPageUrl=</pre><pre>IQAddOnStatus.cpp</pre><pre>addon postback url is empty!</pre><pre>addonpostback_response.html</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Desktop.Application\ReleaseNoMFC\FreezeWrapWin.pdb</pre><pre>COMCTL32.dll</pre><pre>KERNEL32.dll</pre><pre>USER32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>PSAPI.DLL</pre><pre>VERSION.dll</pre><pre>USERENV.dll</pre><pre>InternetCrackUrlA</pre><pre>InternetCombineUrlA</pre><pre>FindFirstUrlCacheEntryA</pre><pre>FindNextUrlCacheEntryA</pre><pre>FindCloseUrlCache</pre><pre>WININET.dll</pre><pre>HttpOpenRequestA</pre><pre>HttpAddRequestHeadersA</pre><pre>HttpSendRequestA</pre><pre>HttpQueryInfoA</pre><pre>UrlEscapeA</pre><pre>SHDeleteEmptyKeyA</pre><pre>SHLWAPI.dll</pre><pre>IsValidURL</pre><pre>urlmon.dll</pre><pre>RPCRT4.dll</pre><pre>GetProcessHeap</pre><pre>GetWindowsDirectoryA</pre><pre>GetCPInfo</pre><pre>EnumWindows</pre><pre>EnumChildWindows</pre><pre>GDI32.dll</pre><pre>RegCloseKey</pre><pre>RegCreateKeyExA</pre><pre>RegOpenKeyExA</pre><pre>RegDeleteKeyA</pre><pre>RegQueryInfoKeyA</pre><pre>RegEnumKeyExA</pre><pre>ADVAPI32.dll</pre><pre>ShellExecuteExA</pre><pre>gdiplus.dll</pre><pre>CRYPT32.dll</pre><pre>GetKeyboardState</pre><pre>COMDLG32.dll</pre><pre>zcÁ</pre><pre>.?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@</pre><pre>.?AVCCoreStringUrl@@</pre><pre>.?AV?$CAtlArray@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@@ATL@@</pre><pre>.?AV?$CCoreEntryPoint@P6GJPAUHKEY__@@PBDKK@Z@@</pre><pre>.?AVCCoreRegKey@@</pre><pre>.?AVexecution_error@TinyXPath@@</pre><pre>.?AV?$CFlags@W4WebArgFlag@@@@</pre><pre>.?AV?$_Ref_count_obj@VCDetectionChromePrefs@@@std@@</pre><pre>.?AV?$_Ref_count_obj@VCDetectionFirefoxPrefs@@@std@@</pre><pre>.?AVCIQOfferEXE@@</pre><pre>.?AVCIQUReporter@@</pre><pre>.?AV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PAXV?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V?$CElementTraits@PAX@2@@ATL@@</pre><pre>.?AV?$CFlags@W4CoreFirefoxCache@@@@</pre><pre>.?AVCCoreFirefox@@</pre><pre>.?AVCCoreChrome@@</pre><pre>.?AV?$_Func_impl@U?$_Callable_obj@V?$_Bind@$00XU?$_Pmf_wrap@P8CCoreChrome@@AEXPAVCCoreSqlite@@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@ZXV1@PAV2@PAV34@U_Nil@std@@U56@U56@U56@U56@@std@@QAVCCoreChrome@@AAV?$_Ph@$00@2@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@U_Nil@2@U72@U72@U72@@std@@$0A@@std@@V?$allocator@V?$_Func_class@XPAVCCoreSqlite@@U_Nil@std@@U23@U23@U23@U23@U23@@std@@@2@XPAVCCoreSqlite@@U_Nil@2@U52@U52@U52@U52@U52@@std@@</pre><pre>.?AV?$_Func_base@XPAVCCoreSqlite@@U_Nil@std@@U23@U23@U23@U23@U23@@std@@</pre><pre>.?AV?$CFlags@W4CoreChromeCache@@@@</pre><pre>.?AV?$_Bind@$00XU?$_Pmf_wrap@P8CCoreChrome@@AEXPAVCCoreSqlite@@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@ZXV1@PAV2@PAV34@U_Nil@std@@U56@U56@U56@U56@@std@@QAVCCoreChrome@@AAV?$_Ph@$00@2@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@U_Nil@2@U72@U72@U72@@std@@</pre><pre>.?AVCCoreOpera@@</pre><pre>.?AV?$CFlags@W4CoreOperaCache@@@@</pre><pre>.?AVCCoreFirefoxXpiInstaller@@</pre><pre>.?AVCCoreFirefoxAddOn@@</pre><pre>.?AVCCoreChromeExtension@@</pre><pre>.?AVCDetectionFirefoxPrefs@@</pre><pre>.?AVCDetectionChromePrefs@@</pre><pre>.?AVCCoreWebBrowserEvents@@</pre><pre>.?AUDWebBrowserEvents2@@</pre><pre>.?AV?$CAtlArray@UWebArg@@V?$CElementTraits@UWebArg@@@ATL@@@ATL@@</pre><pre>.?AVCCoreWebArgs@@</pre><pre>.?AVCCoreSqlite@@</pre><pre>.?AV?$CAtlArray@PAV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@V?$CElementTraits@PAV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@@2@@ATL@@</pre><pre>.?AVCCoreSqliteResult@@</pre><pre>.?AVCIQWebArgs@@</pre><pre>c:\%original file name%.exe</pre><pre>@.reloc</pre><pre>Vista.BadArgs</pre><pre>\cookie.ini</pre><pre>\cookie.dat</pre><pre>Vista.BadArgs2</pre><pre>Domain%d</pre><pre>Name%d</pre><pre>\cookie%d.dat</pre><pre>\cookie%d.ini</pre><pre>Vista.NoAppLow</pre><pre>Vista.WideFail</pre><pre>Vista.GetCookieFail</pre><pre>Vista.AllocFail</pre><pre>Vista.CreateFileError</pre><pre>Vista.WriteFileError</pre><pre>SetCookie%d</pre><pre>Vista.SetCookieError</pre><pre>Error: %d. %s</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Desktop.Application\ReleaseNoMFC\Installer.CookieMan.pdb</pre><pre><requestedExecutionLevel level="asInvoker" uiAccess="false" /></pre><pre>3 3%3,323</pre><pre>dsapi.exe</pre><pre>~S.em</pre><pre>.oIJLHLLK</pre><pre>MN.LN</pre><pre>dsapi.exePK</pre><pre>T.qmu</pre><pre>Url 87</pre><pre>(.ALPO</pre><pre>.STBs</pre><pre>6.GQr</pre><pre>Hu.nbKzO</pre><pre>pI.sqO</pre><pre>Db.bE</pre><pre>B(P%S</pre><pre>u.oq$</pre><pre>]j.cA</pre><pre>==.vp</pre><pre> g.oLWJ</pre><pre>wajam_validate.exe</pre><pre>wrapper.xmlPK</pre><pre>autorun.txtPK</pre><pre><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD</pre><pre>@mscoree.dll</pre><pre>combase.dll</pre><pre>- CRT not initialized</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- floating point support not loaded</pre><pre>USER32.DLL</pre><pre>777705555443332</pre><pre>5555443332</pre><pre>5555443332</pre><pre>mscoree.dll</pre><pre>Send Error Report</pre><pre>Send Error Report?</pre><pre>s de support@teamfreeze.com.</pre><pre>Debe cerrar Firefox para poder continuar. Presione OK (Aceptar) para cerrarlo ahora. Es probable que deba cerrarlo manualmente.</pre><pre>Please email Customer Support at support@teamfreeze.com if you need further assistance.</pre><pre>To exit completely without installing your software, click the Cancel button.pFirefox must be closed before continuing. Press OK to close Firefox now. You may need to close Firefox manually.</pre><pre>We have created an error report that you can send to help improve #ProductName#. The report contains no Personally Identifiable Information (PII) and will only be used by us.</pre><pre>Would you like to submit this report?</pre><pre>n~Debe cerrar Chrome para poder continuar. Presione OK (Aceptar) para cerrarlo ahora. Es probable que deba cerrarlo manualmente.</pre><pre>InstallationmChrome must be closed before continuing. Press OK to close Chrome now. You may need to close Chrome manually.</pre><pre>This installation was unable to load the file specified. This is an installation program and should not be set as the default program for any file type.yYour browsers must be closed before continuing. Press OK to close your browsers now. You may need to close them manually.</pre><pre>2.140.0.0</pre><pre>InstallIQ.exe</pre><b>%original file name%.exe_1244:</b><pre>.text</pre><pre>`.text-deS</pre><pre>`.text-com</pre><pre>`.text-co</pre><pre>`.text-ti</pre><pre>`.text-co;</pre><pre>`.text-co=0</pre><pre>`.text-co)k</pre><pre>`.text-coF</pre><pre>`.text-con</pre><pre>`.text-co9</pre><pre>`.text-co.:</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.data-de-</pre><pre>.data-co</pre><pre>.data-co8</pre><pre>.data-co(</pre><pre>.data-co4</pre><pre>.data-ti</pre><pre>.data-co,</pre><pre>.data-coP</pre><pre>.data-co0</pre><pre>.data-cot</pre><pre>.rsrc</pre><pre><-t><pre><pre>CSShZ</pre><pre>D$<h><pre>uDPh</pre><pre>CSSh3</pre><pre>CSSh8</pre><pre>CSSh=</pre><pre>CSShk</pre><pre>CSSh`</pre><pre>CSSho</pre><pre>FTPQW</pre><pre>1t.Ht</pre><pre>D$TCP</pre><pre>t.VSSQ</pre><pre>CSSh-</pre><pre>t5SSh3</pre><pre><:%u4</pre><pre>t8Ht.HHt#</pre><pre>.FGy1</pre><pre>Af;FP}%S3</pre><pre>|$|.tD</pre><pre>#t.Ht</pre><pre> 2 34 567</pre><pre>u.SSV</pre><pre>function not supported</pre><pre>operation canceled</pre><pre>address_family_not_supported</pre><pre>operation_in_progress</pre><pre>operation_not_supported</pre><pre>protocol_not_supported</pre><pre>operation_would_block</pre><pre>address family not supported</pre><pre>broken pipe</pre><pre>inappropriate io control operation</pre><pre>not supported</pre><pre>operation in progress</pre><pre>operation not permitted</pre><pre>operation not supported</pre><pre>operation would block</pre><pre>protocol not supported</pre><pre>Operation not permitted</pre><pre>Inappropriate I/O control operation</pre><pre>Broken pipe</pre><pre>operator</pre><pre>GetProcessWindowStation</pre><pre>CInstallIQApp::ReportIQUInstalls</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.desktop.application\installer.desktop.application\InstallIQApp.h</pre><pre>0xX</pre><pre>Invalid CRT parameter</pre><pre>InstallIQApp.cpp</pre><pre>stubinfo.ini</pre><pre>autorun.txt</pre><pre>wrapper.xml</pre><pre>ProductFailUrl</pre><pre>CInstallIQApp::InstallProductUrl</pre><pre>Called InstallProductUrl on a restricted install!</pre><pre>Unable to launch product url, url is empty!</pre><pre>download failed!! url=</pre><pre>msiexec.exe /i "%s"</pre><pre>direct Product install finished, returncode=%d</pre><pre>https://installer.freeze.com/LogError.aspx</pre><pre>stub.log</pre><pre>noexe</pre><pre>timings.txt</pre><pre>Process exit code = %u (0xX)</pre><pre>Extraxt however is an .exe, still sending logfile</pre><pre>stub extract failed on exe</pre><pre>InstallIQStub.cpp</pre><pre>IQErrorSender.cpp</pre><pre>(%d more)</pre><pre>statsd.response.txt</pre><pre>Web.Installer.InstallIQ.CommError</pre><pre>Web.Installer.InstallIQ.InstallError</pre><pre>Web.Installer.InstallIQ.OfferDownloadError</pre><pre>Web.Installer.InstallIQ.OfferInstallError</pre><pre>Web.Installer.InstallIQ.OfferInstallFailed</pre><pre>offer was accepted but failed to download, HTTP error=%d</pre><pre>offer was accepted but failed to install. Err=%d</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Common\Installer.Common.Dialogs\IQDialogMain.h</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.desktop.application\installer.desktop.application\MainWnd.h</pre><pre>MainWnd.cpp</pre><pre>mainwnd.cpp</pre><pre>PostStartMsg</pre><pre>" style="position:absolute; top:0; left:0; z-index:9999;" onclick="$('#iq_heatmap').remove()" /></pre><pre>dialog.demo.xml</pre><pre>http://www.w3i.com</pre><pre>Skipping enable add-ons step because url is empty.</pre><pre>crterr:%d</pre><pre>HRESULT:0x%X</pre><pre>Win32Err:%d</pre><pre>@ line %d in function <%s>.</pre><pre>wininet.dll</pre><pre>Unknown error: %d</pre><pre>IDispatch error #%d</pre><pre>LoadLibrary failed in loading current exe:</pre><pre>CoreResource.cpp</pre><pre>CStringW.GetBuffer failed!</pre><pre>0xx</pre><pre>-- %s line %d --</pre><pre>L%d:d.d.d_d:d:d.d</pre><pre>[X]</pre><pre>%s_%x%x%x%x%x</pre><pre>CoreFile.cpp</pre><pre>%s. {%s} @ line %d in function <%s> in module %s.</pre><pre>HRESULT:0x%X</pre><pre>Win32Err:%d</pre><pre>HttpStatus:%d</pre><pre>Error:%d</pre><pre>http://</pre><pre>https://</pre><pre>ftp://</pre><pre>CoreThread.cpp</pre><pre>CoreProcess.cpp</pre><pre>ShellExecuteCommand:</pre><pre>CCoreProcess::ShellExecuteCommand</pre><pre>Failed to execute command:</pre><pre>CCoreProcess::ShellExecuteCommandAndWait</pre><pre>CCoreProcess::CloseProcessWindowsByModuleName</pre><pre>ntdll.dll</pre><pre>CCoreProcess::GetProcessExe32</pre><pre>CCoreProcess::GetProcessExe64</pre><pre>kernel32.dll</pre><pre>CoreTiming.cpp</pre><pre>CommandLine.cpp</pre><pre>Exception %X in module %s at: 0x%p.</pre><pre>dbghelp.dll</pre><pre>0x%p %s</pre><pre>CoreEvent.cpp</pre><pre>0.0.0.0</pre><pre>%u,%u,%u,%u</pre><pre>CoreXml.cpp</pre><pre>_ftprintf_s failed writing header to</pre><pre>]/Key/text()</pre><pre>CCoreXml::ParseRequiredKeyValue</pre><pre>CCoreXml::ParseRequiredKeyInt</pre><pre>%Y-%m-%dT%H:%M:%S</pre><pre>CCoreSystem::GetWindowsVersionId</pre><pre>CoreSystem.cpp</pre><pre>Missing windows version, check the code!!</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion</pre><pre>%s (Build %d)</pre><pre>Unknown OS! Major: 0xX, Minor: 0xX</pre><pre>CCoreSystem::CacheWindowsInfo</pre><pre>%windows%</pre><pre>%system%</pre><pre>Software\Microsoft\Windows\CurrentVersion</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders</pre><pre>Þsktop%</pre><pre>Þsktopdir%</pre><pre>%userprofile%</pre><pre>%firefoxprofiles%</pre><pre>%s0x%.2x%.2x%.2x%.2x%.2x%.2x-</pre><pre>SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727</pre><pre>SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322</pre><pre>SOFTWARE\Microsoft\.NETFramework\policy\v1.0</pre><pre>3321-3705</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\</pre><pre>Iphlpapi.dll</pre><pre>%I64u%s</pre><pre>Alpha %d</pre><pre>PPC 6d</pre><pre>%windows%\Desktop</pre><pre>Advapi32.dll</pre><pre>shell32.dll</pre><pre>CoreVista.cpp</pre><pre>Software\Microsoft\Windows\CurrentVersion\Policies\System</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_USERS</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_CLASSES_ROOT</pre><pre>CCoreRegKey::Create</pre><pre>Warning: HKEY_CLASSES_ROOT opened for writing! This can lead to unpredictable results.</pre><pre>RegCreateKeyEx failed on key=</pre><pre>CCoreRegKey::Open</pre><pre>RegOpenKeyEx failed on key=</pre><pre>Registry key is not open! (</pre><pre>CCoreRegKey::GetValueType</pre><pre>CoreRegKey.cpp</pre><pre>CCoreRegKey::GetValueSize</pre><pre>CCoreRegKey::GetValueString</pre><pre>CCoreRegKey::GetValue</pre><pre>CCoreRegKey::SetValue</pre><pre>CCoreRegKey::DeleteValue</pre><pre>CCoreRegKey::DeleteKey</pre><pre>RegDeleteKeyExA</pre><pre>RegDeleteKeyEx failed on</pre><pre>RegDeleteKey failed on</pre><pre>CCoreRegKey::EnumSubKeys</pre><pre>CCoreRegKey::EnumValueNames</pre><pre>CCoreEntryPoint<long>::CCoreEntryPoint</long></pre><pre>CCoreEntryPoint<long>::LoadProcAddress</long></pre><pre>%s.%s</pre><pre>iexplore,ie.http</pre><pre>Failed to get IE version key!</pre><pre>Loading IE cookies for url:[</pre><pre>%a, %d-%b-%Y %H:%M:%S GMT</pre><pre>wrote %d cookies</pre><pre>cookie.dat</pre><pre>Vista.NoResult</pre><pre>Vista.SavedLow</pre><pre>Vista.NoCookies</pre><pre>domains.dat</pre><pre>cookie.ini</pre><pre>Vista.SetCookie</pre><pre>cookieman.exe</pre><pre>CoreInternetExplorer.cpp</pre><pre>-noframemerging "%s"</pre><pre>Unable to find iexplore.exe, using shell execute (with possible warnings)</pre><pre>iexplore.exe</pre><pre>ie.http\shell\open\command</pre><pre>Default search regkey not found (may be a brand new install)</pre><pre>EnumSubKeys failed!</pre><pre>ieframe.dll</pre><pre>url is empty!</pre><pre>Replacing existing provider url:</pre><pre>Error setting provider url!</pre><pre>DefaultSearchUrl</pre><pre>CCoreInternetExplorer::FindFirstHistoryUrl</pre><pre>FindFirstUrlCacheEntry() failed!!</pre><pre>findfirsturlfailed</pre><pre>CCoreInternetExplorer::FindNextHistoryUrl</pre><pre>FindUrlCache handle is null!! Did you call FindFirstHistoryUrl first??</pre><pre>FindNextUrlCacheEntry() failed!!</pre><pre>findnexturlfailed</pre><pre>CCoreInternetExplorer::FindCloseHistoryUrl</pre><pre>FindCloseUrlCache() failed!!</pre><pre>findcloseurlfailed</pre><pre>msgText is required!</pre><pre>msgTitle is required!</pre><pre>Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice</pre><pre>http\shell\open\command</pre><pre>CoreBrowser.cpp</pre><pre>Can't find shell associations or shell command reg keys!</pre><pre>Dll %s failed, resultcode = %x</pre><pre>SymCCIS2.zip</pre><pre>SymCCIS.dll</pre><pre>RunDLL productlist="%s" resultcodes="%s"</pre><pre>SCCLog.txt</pre><pre>SymCCIS_CheckCriteria.txt</pre><pre>___________________SCCLog.txt____________________</pre><pre>____________SymCCIS_CheckCriteria.txt____________</pre><pre>CoreDownloader.cpp</pre><pre>HTTP Status %d: %s</pre><pre>apiUrl is null!</pre><pre>API url is invalid!</pre><pre>%m/%d/%Y</pre><pre>wininet: HTTPSendRequest success - file block #</pre><pre>CoreWininet.cpp</pre><pre>wininet: HTTPSendRequest failed - file block #</pre><pre>Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)</pre><pre>wininet: connecting to %s:%d</pre><pre>HTTPSendRequest:</pre><pre>CCoreWininet::HTTPSendRequest</pre><pre>wininet: HttpOpenRequest failed!</pre><pre>httpopenrequest</pre><pre>wininet: Request handle is NULL after HttpSendRequest!</pre><pre>httpreqerr</pre><pre>unable to set wininet http decoding</pre><pre>Content-Type: application/x-www-form-urlencoded</pre><pre>wininet: HttpAddRequestHeaders (post flag) failed!</pre><pre>httpaddheaders</pre><pre>Range: bytes=%u-</pre><pre>Range: bytes=%u-%u</pre><pre>wininet: HttpAddRequestHeaders (range specification) failed!</pre><pre>httpaddheader</pre><pre>wininet: HttpSendRequest failed! (verb=</pre><pre>httpsendreq</pre><pre>httptimeout</pre><pre>wininet: HttpSendRequest failed!</pre><pre>wininet: HttpQueryInfo failed!</pre><pre>httpqueryinfo</pre><pre>httpproxy</pre><pre>wininet: Server responded with error: %d, %s. %s %s</pre><pre>httpstatus</pre><pre>wininet: HttpSendRequest: status OK received</pre><pre>wininet: HttpQueryInfo for content range failed!</pre><pre>wininet: HttpQueryInfo for file size failed!</pre><pre>wininet: Operation cancelled by caller.</pre><pre>Software\Microsoft\Windows\CurrentVersion\Internet Settings</pre><pre>CoreDownloadThread.cpp</pre><pre>01234567</pre><pre>PackageZlib.cpp</pre><pre>Error: %d bytes of %d read from file %s.</pre><pre>unzOpenCurrentFilePassword failed!</pre><pre>Error: %d bytes of %d were written to file %s.</pre><pre>unzOpenCurrentFilePassword failed! err=</pre><pre>Package.cpp</pre><pre>&#xX;</pre><pre></pre><pre>%s="%s"</pre><pre>%s='%s'</pre><pre><!--%s--></pre><pre><![CDATA[%s]]></pre><pre>version="%s"</pre><pre>encoding="%s"</pre><pre>standalone="%s"</pre><pre>zip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll</pre><pre>unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll</pre><pre>1.2.7</pre><pre>deflate 1.2.7 Copyright 1995-2012 Jean-loup Gailly and Mark Adler</pre><pre>inflate 1.2.7 Copyright 1995-2012 Mark Adler</pre><pre>SQLite format 3</pre><pre>REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY</pre><pre>CREATE TABLE sqlite_master(</pre><pre>sql text</pre><pre>3.7.5</pre><pre>CREATE TEMP TABLE sqlite_temp_master(</pre><pre>IQDownloader.cpp</pre><pre>AddDownload failed! url=</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.comm\IQCommThread.h</pre><pre>iehost.CreateStandalone failed!</pre><pre>iehost.Navigate failed!</pre><pre>IE open url:</pre><pre>CIQComm::IEOpenUrl</pre><pre>openurlie</pre><pre>Shell open url:</pre><pre>CIQComm::ShellOpenUrl</pre><pre>ShellExecuteEx failed!</pre><pre>openurlshell</pre><pre>productfailurl</pre><pre>producturl</pre><pre>fastwelcomedisclosureurl</pre><pre>detectionurl</pre><pre>pingurl</pre><pre>postbackurl</pre><pre>logfileurl</pre><pre>ieaddonbarmonitorurl</pre><pre>addonprompturl</pre><pre>trusturl</pre><pre>uninstalloption.publisher</pre><pre>searchprotector.publisher</pre><pre>statsdurl</pre><pre>prddiscimageurl</pre><pre>urlmon</pre><pre>CIQWrapperConfig::PromptForPingUrl</pre><pre>IQWrapperConfig.cpp</pre><pre>PromptForPingUrl called in production mode!!</pre><pre>1234567890</pre><pre>00000000-0000-0000-0000-000000000000</pre><pre>Ping File (ping.*.dat; ping.*.xml)|ping.*.dat; ping.*.xml|Text Files (*.txt)|*.txt|All Files (*.*)|*.*||</pre><pre>%programfiles%\Free Offers from Freeze.com\control.txt</pre><pre>%programfiles%\Free Offers from InstallX\control.txt</pre><pre>rule.LoadXml failed! type=</pre><pre>Excluded detection rule: "%s" type="%s" id="%s"</pre><pre>Number of parsed rules is not equal to rule count, parsed=%d, count=%d</pre><pre>regkey</pre><pre>chromeprefs</pre><pre>firefoxprefs</pre><pre>IQXmlDetection.cpp</pre><pre>detectionrules.dat</pre><pre>IQDetectionManager.cpp</pre><pre>Unhandled case in IQDetectionManager.EvaluateRulesAccelerated!</pre><pre>%s: %0.2f</pre><pre>Chrome</pre><pre>Firefox</pre><pre>Invalid flag in ExecuteResult:</pre><pre>CIQXmlRequirements::ParseExecuteResult</pre><pre>Running requirement.OnCancel:</pre><pre>Running requirement.OnInstall:</pre><pre>Running requirement.OnExit:</pre><pre>requirement.OnCancel is empty, skipping.</pre><pre>Software\Microsoft\Windows\CurrentVersion\RunOnce</pre><pre>requirement.OnExit is empty, skipping.</pre><pre>%s[%d]</pre><pre>passed</pre><pre>CIQXmlRequirements::RunExecute</pre><pre>IQDetectionThread.cpp</pre><pre>IQProgressDialog.cpp</pre><pre>NULL dialog passed to AddDialog!</pre><pre>%programfiles%\Core Services\IETester\IETester.exe</pre><pre>explorer.exe</pre><pre>IQDialogMain.cpp</pre><pre>welcomestats.dat</pre><pre>IQDialogIE9AddOn.cpp</pre><pre>chromeextensioncount</pre><pre>chromeextension</pre><pre>IQXmlDialogDownload.cpp</pre><pre>IQXmlDialogOffer.cpp</pre><pre>|%s,%s</pre><pre>{prddiscimageurl}</pre><pre>IQXmlInstallItem.cpp</pre><pre>chrome</pre><pre>firefox</pre><pre>IQXmlDialog.cpp</pre><pre>betamsg</pre><pre>found for Fast Welcome!! hardcoding to exe</pre><pre>found for IQU in Fast Welcome!! hardcoding to exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallIQ Updater</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\{8E1CB0F1-67BF-4052-AA23-FA22E94804C1}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall Helper</pre><pre>%programfiles%\W3i\InstallIQUpdater\InstallIQUpdater.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\{D322CFF6-BE33-47DA-BB9E-617C97B7AB36}</pre><pre>%programfiles%\W3i\UninstallHelper\UninstallHelper.exe</pre><pre>Invalid offer type=%s found in ping for %s.</pre><pre>Unknown offer type=%d in AddOffer. ConfigId=%s, OfferId=%s.</pre><pre>IQOfferManager.cpp</pre><pre>WaitForAllOffers: timed out waiting for %d offers after %d seconds.</pre><pre>Restarting Firefox...</pre><pre>Not restarting firefox; postback will open Firefox window..</pre><pre>Restarting Chrome...</pre><pre>Not restarting chrome; postback will open chrome window..</pre><pre>Chrome state=</pre><pre>control.txt</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBase.h</pre><pre>CIQOfferBase::ExpandUrl</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBaseInstall.h</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferBaseCustom.h</pre><pre>Setting offer checkbox value: key=</pre><pre>chk_chrome</pre><pre>chk_firefox</pre><pre>CIQOfferEXE::GetXpiFilename</pre><pre>c:\tfs.vs2012\admin\windows\main\installer.common\installer.common.offers\IQOfferEXE.h</pre><pre>postinstallexecute</pre><pre>cmdline_iexplore</pre><pre>/cmdline_iexplore</pre><pre>cmdline_chrome</pre><pre>cmdline_firefox</pre><pre>postinstallexecuteintegrity</pre><pre>firefoxinstalltype</pre><pre>firefoxpref</pre><pre>naffkeywordurl</pre><pre>LUA account detected, and flag lua_runasdesktopuser detected, forcing executeAsDesktopUser</pre><pre>stopchrome</pre><pre>CIQOfferEXE::OnInstall</pre><pre>iconurl</pre><pre>Firefox preferences set=</pre><pre>Icon offer (in exe config) detected, running icon install</pre><pre>CIQOfferEXE::RunOfferInstaller</pre><pre>chromecancel</pre><pre>User canceled during Chrome shutdown!</pre><pre>rundll32.exe "%s" %s</pre><pre>msiexec.exe /i "%s" %s</pre><pre>msiexec.exe /i "%s" /qn ALLUSERS=2 REBOOT=ReallySuppress</pre><pre>CIQOfferEXE::BuildCommandLine</pre><pre>User canceled during Firefox shutdown!</pre><pre>Could not find firefox exe to install</pre><pre>Offer is installing XPI for Firefox 8 or higher, enabling GUI.</pre><pre>"%s" "%s"</pre><pre>"%s" -install-global-extension "%s"</pre><pre>"%s" %s</pre><pre>#NAFFKEYWORDURL#</pre><pre>CIQOfferEXE::InstallXpi</pre><pre>CIQOfferEXE::CancelXpiInstall</pre><pre>IQOfferEXE.cpp</pre><pre>CIQOfferEXE::RunOfferInstallerAsDesktopUser</pre><pre>badprocesshandle</pre><pre>CIQOfferEXE::WaitForOfferInstaller</pre><pre>process exit code: %d</pre><pre>CIQOfferEXE::WaitForProcessStarted</pre><pre>CIQOfferEXE::WaitForRegistryValue</pre><pre>Looking for Key:</pre><pre>Registry key (64-bit) found.</pre><pre>Registry key found.</pre><pre>CIQOfferEXE::WaitForFile</pre><pre>CIQOfferEXE::StartAppRegistryValue</pre><pre>PostInstallExecute:</pre><pre>Skipping post-install execute due to Simulation mode..</pre><pre>Cannot run post-install execute, file does not exist:</pre><pre>PostInstallExecute command failed!</pre><pre>CIQOfferEXE::PostInstallExecute</pre><pre>CIQOfferEXE::HandleFirefoxOptions</pre><pre>http:</pre><pre>HandleFirefoxOptions called with incorrect preferences set in config!</pre><pre>upromise.com,tsInstallContext=w3i|#PRODUCTID#|,now 7,/,no</pre><pre>Diagnostics: running upromise.com cookie handling...</pre><pre>upromise.com</pre><pre>upromise.com cookie test for IE failed!</pre><pre>upromise.com cookie test for Firefox failed!</pre><pre>Firefox shutdown rejected!</pre><pre>CIQOfferEXE::InsertCookie</pre><pre>Setting cookies in low-integrity context (windows vista)</pre><pre>CIQOfferEXE::RunIconInstall</pre><pre>%s_%s.url</pre><pre>%programfiles%\Free Offers from Freeze.com</pre><pre>CIQOfferEXE::InstallDejebelDll</pre><pre>IQInstallSearchProtector.cpp</pre><pre>browser.startup.homepage</pre><pre>cannot set startpage; firefox is currently running!</pre><pre>CCoreFirefox::SetStartpage</pre><pre>browser.startup.page</pre><pre>Setting Offer option to %d</pre><pre>googlechrome</pre><pre>Setting Firefox StartPage:</pre><pre>Setting Chrome Startpage:</pre><pre>CIQOfferStartPage::SetFirefoxStartPage</pre><pre>CIQOfferStartPage::SetChromeStartPage</pre><pre>Failed to write Firefox pref!</pre><pre>failchromestartpage</pre><pre>Unable to set chrome startpage</pre><pre>Successfully set chrome startpage</pre><pre>IQOfferStartPage.cpp</pre><pre>startpageurl</pre><pre>oldstartpageurl</pre><pre>http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}</pre><pre>http://dl.installiq.com/api/osd/osd.aspx</pre><pre>http://search.yahoo.com/favicon.ico</pre><pre>chromesearchprovider</pre><pre>chromename</pre><pre>dsapiurl</pre><pre>chromefaviconurl</pre><pre>chromekeyword</pre><pre>chromesuggesturl</pre><pre>Internet Explorer 6 doesn't support default search!</pre><pre>Missing url!</pre><pre>ie7nourl</pre><pre>Attempting to set Default Search via API exe</pre><pre>ie6scnourl</pre><pre>CIQOfferDefaultSearch::SetFirefoxSearchEngine</pre><pre>Simulation mode, setting Firefox default search engine:</pre><pre>Failed to write Yahoo xml for Firefox!</pre><pre>Failed to set keyword.URL Preference for Firefox!</pre><pre>Simulation mode, setting chrome default search engine:</pre><pre>CIQOfferDefaultSearch::SetChromeSearchEngine</pre><pre>chromefail</pre><pre>Failed to set default search from chrome</pre><pre>IQOfferDefaultSearch.cpp</pre><pre>oldsearchurl</pre><pre>searchurl</pre><pre>\apps.ini</pre><pre>toolbarurl</pre><pre>toolbarregkey</pre><pre>Missing data for firefox toolbar install! Name:</pre><pre>Failed to write Firefox pref (GUID)!</pre><pre>.guid</pre><pre>.Var1</pre><pre>Software\%s\Toolbar</pre><pre>heartbeat_url</pre><pre>cmdargs</pre><pre>http://airdownload.adobe.com/air/win/download/latest/AdobeAIRInstaller.exe</pre><pre>AdobeAirInstaller.exe</pre><pre>%programfiles%\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe</pre><pre>"%s" %s "%s"</pre><pre>%windows%\Web\Wallpaper</pre><pre>InstallIQFirefoxLock</pre><pre>IQOfferBaseInstall.cpp</pre><pre>CIQOfferBaseInstall::WaitForFirefoxLock</pre><pre>Waiting for Firefox lock...</pre><pre>_firefoxLock is already created!</pre><pre>Releasing Firefox lock</pre><pre>Firefox lock status:</pre><pre>uninstalloption.exe</pre><pre>stopfirefox</pre><pre>ischromeaddon</pre><pre>chromeclassid</pre><pre>dynamic_separator_on_cmdline_append</pre><pre>config.ini</pre><pre>IQOfferBaseCustom.cpp</pre><pre>ini.WriteString failed!</pre><pre>lib\settings.db</pre><pre>insert into Application (ProductSessionId, ApplicationTypeId, ApplicationId) VALUES ('%s',%s,'%s')</pre><pre>Error; uninstalloption.exe doesn't exist (after download and extract!)</pre><pre>Failed to extract uninstall option exe!</pre><pre>Error copying uninstalloption.exe to program files!</pre><pre>error downloading uninstall option url!</pre><pre>downloadurl</pre><pre>%s - %s</pre><pre>IQOfferFile.cpp</pre><pre>templateurl</pre><pre>disclosureurl</pre><pre>previewurl</pre><pre>regkeyadd</pre><pre>ieregkey</pre><pre>images/disclosure/imageurl</pre><pre>firefox.</pre><pre>chrome.</pre><pre>%s (err=%d, info=%s)</pre><pre>IQOffer.cpp</pre><pre>CIQOffer::StopFirefox</pre><pre>Stop Firefox message not set!</pre><pre>CIQOffer::StopChrome</pre><pre>Stop Chrome message not set!</pre><pre>Bad RegKeyAdd config; not correct format: (missing hive \ )</pre><pre>Bad RegKeyAdd config; not correct format: (missing = )</pre><pre>Bad RegKeyAdd config; not correct format: (missing , )</pre><pre>RegKeyAdd:</pre><pre>unable to set regkey from following RegKeyAdd:</pre><pre>unable to set regkey from following IERegKey:</pre><pre>unrecognized values in RegKeyAdd:</pre><pre>unrecognized values in IERegKey:</pre><pre>IERegKeyAdd:</pre><pre>http://download.freeze.com/lm/</pre><pre>%s/*[%d]/text()</pre><pre>IQPing.cpp</pre><pre>CIQPing::Execute</pre><pre>ping.dat</pre><pre>CIQUReporter::SendOffersToIQU</pre><pre>%programdata%\W3i\UninstallHelper\iqu.ini</pre><pre>2.0.1.0</pre><pre>%s,%s</pre><pre>IQUReporter.cpp</pre><pre>%programdata%\W3i\UninstallHelper\import</pre><pre>CIQUReporter::OutputXmlData</pre><pre>Failed to save IQU data, too many import files in directory!</pre><pre>CoreXml.SaveFile failed!</pre><pre>freezewrap.xml</pre><pre>freezewrap%d.xml</pre><pre>CIQUReporter::CheckUHVersion</pre><pre>softwareinfo%d.xml</pre><pre>CIQUReporter::MakeSoftwareInfoRequest</pre><pre>softwareinfo.xml</pre><pre>Failed to save SoftwareInfo data, too many import files in directory!</pre><pre>http://dl.installiq.com/API/IQU/SoftwareInfo.aspx</pre><pre>CIQUReporter::RunUninstallHelper</pre><pre>"%s" /silent /noswinfo</pre><pre>http://installer.freeze.com/testpost.asp</pre><pre>http://dl.installiq.com/postback/V1/landing.aspx</pre><pre>opera</pre><pre>%d,%d,%d,%s,%s</pre><pre>%s,%d,%d,%d</pre><pre>WrapperConfig.LoadAutoRun failed!</pre><pre>WrapperConfig.LoadCommandLine failed!</pre><pre>WrapperConfig.Initialize failed!</pre><pre>WrapperConfig.LoadWrapper failed!</pre><pre>Software\Freeze.com\Installer</pre><pre>%Y%m%d%H%M%S</pre><pre>FreezeWrapEngine.cpp</pre><pre>Unable to copy old offere history values; unable to create new regkey location!</pre><pre>attempting to copy old offer history values to new key</pre><pre>Missing Detection URL</pre><pre>detecturlmissing</pre><pre>keyid</pre><pre>%m%d%Y</pre><pre>Missing template url for fast welcome!</pre><pre>Performing postback, returncode=%d, failed=%d, err=%d...</pre><pre>Downloading %s...</pre><pre>Product type is not supported in ExpressWay!</pre><pre>typenotsupported</pre><pre>/restart=%d</pre><pre>Diagnostics: running CookieManager.HandleCookies...</pre><pre>%s:%d</pre><pre>FF.GetCookiesError</pre><pre>FF.NoCookies</pre><pre>handling firefox cookies...</pre><pre>FF.SetCookies</pre><pre>firefox: set cookies</pre><pre>firefox: no cookies found</pre><pre>FF.SetCookieError</pre><pre>Error enumerating firefox cookies!</pre><pre>firefoxenum</pre><pre>getting firefox cookies for</pre><pre>CCookieManager::GetFirefoxCookies</pre><pre>IE.FoundCookies</pre><pre>IE.EnumCookieError</pre><pre>IE.NoCookies</pre><pre>Vista.ExtractError</pre><pre>Vista.CopiedLow</pre><pre>Vista.CreateLowError</pre><pre>handling chrome cookies</pre><pre>Chrome: no cookies found</pre><pre>Chrome.SetCookieError</pre><pre>Chrome.GetCookiesError</pre><pre>Chrome.NoCookies</pre><pre>getting Chrome cookies for</pre><pre>CCookieManager::GetChromeCookies</pre><pre>Chrome.SetCookies</pre><pre>Chrome: set cookies succeeded</pre><pre>Safari.GetCookiesError</pre><pre>Error enumerating chrome cookies!</pre><pre>chromeenum</pre><pre>Safari.SetCookieError</pre><pre>Safari.SetCookies</pre><pre>Safari.NoCookies</pre><pre>IQNotifyBarThread.cpp</pre><pre>PackageManager.cpp</pre><pre>SessionScraperThread.cpp</pre><pre>CoreIEHost.CreateExisting failed!</pre><pre>producturlmissing</pre><pre>ExpressWay Product Url is missing!</pre><pre>hkey is NULL!</pre><pre>subKey is NULL!</pre><pre>UniqueId.cpp</pre><pre>%s(%s);</pre><pre>CoreJSON2.cpp</pre><pre>Node path not valid; node "%s" in path "%s" is not type Node!</pre><pre>Encryption key not initialized!</pre><pre>\/:*?"<>|</pre><pre>Failed to create URL file!</pre><pre>createurlfilefail</pre><pre>ShellWindows.Item failed!</pre><pre>Shell.CreateInstance failed!</pre><pre>browser.search.selectedEngine</pre><pre>keyword.URL</pre><pre>browser.search.defaultenginename</pre><pre>firefox.exe,firefox.url,firefoxportableurl,firefoxurl,firefox</pre><pre>MozillaUIWindowClass</pre><pre>MozillaWindowClass</pre><pre>Software\Mozilla\Mozilla Firefox</pre><pre>Failed to get Firefox version key!</pre><pre>firefoxver</pre><pre>CCoreFirefox::GetVersion</pre><pre>Profile%d</pre><pre>Firefox versions prior to 3 are not supported by LoadProfileCookies!</pre><pre>Loading Firefox3 cookies for url:[</pre><pre>%appdata%\Mozilla\Firefox</pre><pre>profiles.ini</pre><pre>%s=%s</pre><pre>cookies.sqlite</pre><pre>Enumerating Firefox3 cookies for</pre><pre>Enumerating Firefox cookies for</pre><pre>Found partial cookie in Firefox profile:</pre><pre>cookies.txt</pre><pre>Setting Firefox3 cookie for</pre><pre>insert into moz_cookies (name, value, host, path, expiry) VALUES ('%s','%s','%s','%s','%d')</pre><pre>Firefox version is not sufficient for setting cookies!! Must be 3.x or higher</pre><pre>firefox.exe</pre><pre>-requestPending -osint -new-window "%s"</pre><pre>prefs.js</pre><pre>CCoreFirefox::GetPrefString</pre><pre>PathToExe</pre><pre>%programfiles%\Mozilla Firefox</pre><pre>CCoreFirefox::SetPrefString</pre><pre>user_pref("%s", %s%s%s);</pre><pre>CoreFirefox.cpp</pre><pre>CCoreFirefox::SetDefaultSearch</pre><pre>Can't set search engine while Firefox is running!</pre><pre>Setting Firefox default search engine:</pre><pre>searchUrl is empty!</pre><pre>suggestionUrl is empty!</pre><pre>SuggestionUrl=</pre><pre>SearchUrl=</pre><pre>http://www.mozilla.org/2006/browser/search/</pre><pre>Failed to write Yahoo search prefs for Firefox!</pre><pre>browser.search.order.1</pre><pre>downloads.sqlite</pre><pre>places.sqlite</pre><pre>browser.search.order.2</pre><pre>Failed to open downloads.sqlite database!</pre><pre>select source from moz_downloads where source like '%%%s%%' order by id desc</pre><pre>/SearchPlugin/Url</pre><pre>Failed to open places.sqlite database!</pre><pre>select url from moz_places where url like '%%%s%%' order by id desc</pre><pre>firefox pref: browser.search.param.yahoo-fr=</pre><pre>firefox pref: keyword.URL=</pre><pre>browser.search.param.yahoo-fr</pre><pre>CCoreChrome::SetCookie</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreChrome.h</pre><pre>Chrome_WindowImpl_0</pre><pre>Chrome_WidgetWin_0</pre><pre>chrome.exe,chrome.hwd,chromehtml,chromiumhtml,chrome,chromium</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Cookies</pre><pre>Chrome_RenderWidgetHostHWND</pre><pre>Chrome_WidgetWin_1</pre><pre>select name, value, host_key, path, expires_utc from cookies where</pre><pre>host_key like '%</pre><pre>CCoreChrome; Cookie file does not exist</pre><pre>Loading Google Chrome cookies for url:[</pre><pre>Chrome cookie file does not exist</pre><pre>Enumerating Google Chrome cookies for</pre><pre>CCoreChrome::EnumCookiesLegacy</pre><pre>CCoreChrome::EnumCookiesV33</pre><pre>select host_key, name, value, path, expires_utc, encrypted_value from cookies where host_key like '%</pre><pre>select host_key, name, value, path, expires_utc from cookies where host_key like '%</pre><pre>Enumerating Google Chrome cookies (v33) for</pre><pre>chrome.dll</pre><pre>--new-window "%s"</pre><pre>Failed to decrypt chrome cookie:</pre><pre>Chrome cookie:</pre><pre>ChromeHTML\shell\open\command</pre><pre>%local_appdata%\Google\Chrome\Application</pre><pre>Unable to find chrome.exe, using shell execute (with possible warnings)</pre><pre>chrome.exe</pre><pre>%programfiles%\Google\Chrome\Application</pre><pre>CCoreChrome::GetStartpage</pre><pre>session/urls_to_restore_on_startup</pre><pre>session/startup_urls</pre><pre>CCoreChrome::GetStartupPages</pre><pre>CoreChrome.cpp</pre><pre>CCoreChrome::SetStartpage</pre><pre>CCoreChrome::SetStartPageOld</pre><pre>CCoreChrome::SetStartPageNew</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Web Data</pre><pre>SELECT value FROM meta WHERE key='Default Search Provider ID'</pre><pre>SELECT id, short_name, url FROM keywords where id = %s</pre><pre>CCoreChrome: Name param cannot be blank</pre><pre>CCoreChrome: keyword param cannot be blank</pre><pre>CCoreChrome::SetDefaultSearch</pre><pre>Found existing default search in Chrome: id=</pre><pre>failed to set Database keyword search!!</pre><pre>CCoreChrome: url param cannot be blank</pre><pre>http://www.yahoo.com/favicon.ico</pre><pre>failed to set database keyword search backup table!</pre><pre>Failed to set keyword hash!!</pre><pre>Chrome v25 or higher detected, skipping keyword_backup and keyword hashing..</pre><pre>Successfully set Default Search provider in chrome</pre><pre>keywords</pre><pre>CCoreChrome::SetDatabaseKeywordSearch</pre><pre>Successfully added default search data to keyword and meta tables</pre><pre>CCoreChrome::SetDatabaseKeywordSearchBackup</pre><pre>sql string is empty</pre><pre>UPDATE meta SET value='%s' WHERE key='Default Search Provider ID'</pre><pre>Successfully added default search data to keyword_backup and meta tables</pre><pre>CCoreChrome::FindSearchEntryID</pre><pre>keywords_backup</pre><pre>UPDATE meta SET value='%s' WHERE key='Default Search Provider ID Backup'</pre><pre>url like '%</pre><pre>url = '</pre><pre>SELECT id FROM keywords WHERE</pre><pre>keyword like '%</pre><pre>Setting existing default search in Chrome:</pre><pre>Error opening Chrome Web Data!</pre><pre>Please, don't change this Chrome setting</pre><pre>CCoreChrome::SetExistingDefaultSearchUrl</pre><pre>unable to set the database keyword hash!</pre><pre>Sqlite is not open!</pre><pre>SELECT id FROM keywords WHERE url='%s'</pre><pre>Looking up default search url:</pre><pre>CCoreChrome::LookupDefaultSearchUrl</pre><pre>LookupDefaultSearchUrl: id not found in row</pre><pre>CCoreChrome::IsPreferenceExist</pre><pre>SELECT id FROM keywords WHERE short_name='%s'</pre><pre>LookupDefaultSearchUrl: url not found in table</pre><pre>CCoreChrome::GetPreferenceInt</pre><pre>CCoreChrome::GetPreference</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\Preferences</pre><pre>CCoreChrome::LoadChromePreferences</pre><pre>, suggest_url='%s'</pre><pre>WHERE id=%s</pre><pre>UPDATE %s set short_name='%s', keyword='%s', url='%s', favicon_url='%s'</pre><pre>, show_in_default_list=%s, safe_for_autoreplace=%s, input_encodings='%s'</pre><pre>short_name, keyword, favicon_url, url,</pre><pre>safe_for_autoreplace, originating_url, date_created, usage_count,</pre><pre>INSERT INTO %s (</pre><pre>'%s', '%s', '%s', '%s',</pre><pre>input_encodings, show_in_default_list, suggest_url, prepopulate_id,</pre><pre>created_by_policy, instant_url, last_modified, sync_guid) VALUES (</pre><pre>%s, '%s', %s, '%s')</pre><pre>CCoreChrome::GetHashData</pre><pre>%s, '%s', %s, %s,</pre><pre>'%s', %s, '%s', %s,</pre><pre>INSERT OR REPLACE INTO meta (key,value) VALUES (?,?)</pre><pre>SELECT id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid FROM keywords_backup ORDER BY id ASC</pre><pre>CCoreChrome::InsertHashSignature</pre><pre>select url from downloads_url_chains where url like '%%%s%%' order by id desc</pre><pre>%local_appdata%\Google\Chrome\User Data\Default\History</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreSafari.h</pre><pre>Loading Safari cookies for url:[</pre><pre>safari.exe,safariurl,safari</pre><pre>%appdata%\Apple Computer\Safari\Cookies\Cookies.binarycookies</pre><pre>CoreSafari.cpp</pre><pre>%appdata%\Apple Computer\Safari\Cookies\Cookies.plist</pre><pre>Failed to get Safari version key!</pre><pre>-url "%s"</pre><pre>safari.exe</pre><pre>c:\tfs.vs2012\admin\windows\main\core.cpplib\core.cpplib.browser\CoreOpera.h</pre><pre>EnumCookies is not implemented for Opera!</pre><pre>CCoreOpera::EnumCookies</pre><pre>CCoreOpera::SetCookie</pre><pre>SetCookie is not implemented for Opera!</pre><pre>CCoreOpera::LoadCookies</pre><pre>LoadCookies is not implemented for Opera!</pre><pre>opera.exe,opera.protocol,opera.url,opera,operanext,operastable</pre><pre>CCoreOpera::OpenUrl</pre><pre>OpenURL is not implemented for Opera!</pre><pre>opera.exe</pre><pre>launcher.exe</pre><pre>Software\Opera Software</pre><pre>%programfiles%\Opera Next</pre><pre>%programfiles%\Opera</pre><pre>CCoreFirefoxXpiInstaller::Install</pre><pre>CoreFirefoxXPIInstaller.cpp</pre><pre>install.rdf</pre><pre>CCoreFirefoxXpiInstaller::GetXpiInfo</pre><pre>xml.LoadBuffer failed on</pre><pre>Installing Firefox add-ons via package...</pre><pre>Firefox.exe not found!</pre><pre>CCoreFirefoxXpiInstaller::InstallAsPackage</pre><pre>Create install.rdf failed!</pre><pre>installiq.xpi</pre><pre>Error running Firefox!</pre><pre>Running Firefox to install add-ons:</pre><pre><?xml version="1.0"?><RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><pre>xmlns:NC="http://home.netscape.com/NC-rdf#"</pre><pre>xmlns:em="http://www.mozilla.org/2004/em-rdf#"></pre><pre><Description about="urn:mozilla:install-manifest"></Description></pre><pre><em:id>multi@installiq.com</em:id></pre><pre><em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id></pre><pre><em:maxVersion>*.*.*</em:maxVersion></pre><pre>CCoreFirefoxXpiInstaller::SetResult</pre><pre>Installed Firefox extension:</pre><pre>CCoreFirefoxXpiInstaller::CreateInstallRDF</pre><pre>Error creating install.rdf!</pre><pre>CCoreFirefoxXpiInstaller::GetExtensionsFolder</pre><pre>Can't get Firefox default profiles folder!</pre><pre>~nsu.tmp\</pre><pre>config.dat</pre><pre>Yahoo uninstall key not found</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\</pre><pre>UninstallKey</pre><pre>Error replacing Yahoo Toolbar uninstall key!</pre><pre>ChromePriorSearchUrl</pre><pre>ChromeStartPage</pre><pre>UninstallKey=</pre><pre>FirefoxPriorStartPage</pre><pre>ChromePriorStartPage</pre><pre>FirefoxPriorSearchUrl</pre><pre>CoreBrowserOptionUninstaller.cpp</pre><pre>Not removing files because uninstallKey is empty</pre><pre>Error removing registry key from HKLM\</pre><pre>Bu_.exe</pre><pre>searchprotector.exe</pre><pre>config.xml</pre><pre>toolbar uninstall key was already replaced</pre><pre>replacing toolbar uninstall key</pre><pre>toolbar uninstall key not found, creating new add/remove entry...</pre><pre>Error replacing toolbar uninstall key!</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallX Search Protect for Yahoo</pre><pre>CoreSearchProtectorApp.cpp</pre><pre>CCoreSearchProtectorApp.ShutDown: window not found</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>/errorurl/text()</pre><pre>searchkeyword</pre><pre>chromesearch</pre><pre>chromestartpage</pre><pre>firefoxsearch</pre><pre>firefoxstartpage</pre><pre>errorurl</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Settings</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Stats</pre><pre>CCoreFirefoxAddOn::LoadAddonDatabase</pre><pre>CoreFirefoxAddOn.cpp</pre><pre>%firefoxprofiles%\extensions.sqlite</pre><pre>SELECT active FROM addon where id = '%s'</pre><pre>extensions/settings/%s</pre><pre>CCoreDefaultSearchAPI::SetDefaultSearchByApiExe</pre><pre>dsapi.zip</pre><pre>dsurl</pre><pre>%s "%s"</pre><pre>KeyExists</pre><pre>SourceKey</pre><pre>hkey_local_machine</pre><pre>hkey_classes_root</pre><pre>hkey_current_user</pre><pre>hkey_current_config</pre><pre>multireg: key found:</pre><pre>multireg: unable to parse key:</pre><pre>multireg%d</pre><pre>1.1.0.6</pre><pre>//flag[%d]/text()</pre><pre>DetectionFile.cpp</pre><pre>Cannot evaluate .NET Version, .NET may not be installed!</pre><pre>wajam_validate.zip</pre><pre>extracted wajam exe file not found!</pre><pre>wajamexemissing</pre><pre>Unable to get returncode from wajam_validate.exe!</pre><pre>Timed out waiting for wajam_validate.exe!</pre><pre>wajam_validate.exe detection process result = %d</pre><pre>yahoo.com</pre><pre>google.com</pre><pre>ask.com</pre><pre>aol.com</pre><pre>live.com</pre><pre>msn.com</pre><pre>CDetectionYahooToolbar::IsInstalledFirefox</pre><pre>_firefox is NULL!</pre><pre>CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\InprocServer32</pre><pre>%firefoxprofiles%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\install.rdf</pre><pre>DetectionFirefoxPrefs.cpp</pre><pre>CDetectionFirefoxPrefs::OnEvaluate</pre><pre>DetectionChromePrefs.cpp</pre><pre>_chrome is NULL!</pre><pre>CDetectionChromePrefs::OnEvaluate</pre><pre>DetectionCookie.cpp</pre><pre>CookieEvaluator.Add:</pre><pre>ApnStub.exe</pre><pre>asktbdet.zip</pre><pre>Ask detection process result = %d</pre><pre>/executeresult/text()</pre><pre>Missing ExecuteResult in requirement config!</pre><pre>/execute/text()</pre><pre>%programfiles%\iTunes\iTunes.exe</pre><pre>msnmsgr.exe</pre><pre>SOFTWARE\Microsoft\Windows Live\Messenger</pre><pre>ydetect.yhp</pre><pre>ydetect.ytb</pre><pre>ydetect.yas</pre><pre>Rules.cpp</pre><pre>RegKeyExists</pre><pre>)] disabled because of minimum windows version.</pre><pre>minwindowsversion</pre><pre>DetectionRule.cpp</pre><pre>Disabled; rule target is not Firefox</pre><pre>Disabled; Chrome is not installed</pre><pre>Disabled; Firefox is not installed</pre><pre>Disabled; rule target is not Chrome</pre><pre>CoreIEHost.cpp</pre><pre>m_WebBrowserEvents failed</pre><pre>IWebBrowser2 failed</pre><pre>_WebBrowserEvents failed</pre><pre>url1=</pre><pre>shell.Initialize failed!</pre><pre>url2=</pre><pre>_webBrowser->Quit failed!</pre><pre>Not initialized or _webBrowser is NULL!</pre><pre>Sending Quit to web browser...</pre><pre>CCoreIEHost::DeleteHistoryUrl</pre><pre>CCoreIEHost.OnDocumentComplete:</pre><pre>WebBrowser object is NULL!</pre><pre>Error: Collection didn't support IHTMLElementCollection!</pre><pre>*** set key code to 0 ****</pre><pre>Url is null!</pre><pre>%s, %s, l=0xx</pre><pre>[0x%X]</pre><pre>d:%s</pre><pre>CCoreSqlite::OpenDatabase</pre><pre>CCoreSqlite::CloseDatabase</pre><pre>CCoreSqlite::ExecuteStatement</pre><pre>sqlite3_exec failed, returned error:</pre><pre>CoreSqlite.cpp</pre><pre>dbexecerror</pre><pre>CCoreSqlite::StandardExecuteCallback</pre><pre>CCoreSqlite::PrepareCompiledStmt</pre><pre>Failed to prepare compiled statement, sqlite returned error: %d</pre><pre>sqliteerror</pre><pre>Cannot prepare statement, sql is empty!</pre><pre>sqlempty</pre><pre>CCoreSqlite::BindTextToCompiledStmt</pre><pre>CCoreSqlite::ExecuteCompiledStmt</pre><pre>bind text failed, errorcode=%d</pre><pre>CCoreSqlite::CheckStmtRowValid</pre><pre>sqlite3_step failed, errorcode=%d</pre><pre>sqlitestepfailed</pre><pre>Cannot get row results: statement has not executed!!</pre><pre>sqlite3_finalize failed, errorcode=%d</pre><pre>CCoreSqlite::CloseCompiledStmt</pre><pre>SQLITE_</pre><pre>d:d:d</pre><pre>d-d-d</pre><pre>d-d-d d:d:d</pre><pre>failed to allocate %u bytes of memory</pre><pre>failed memory resize %u to %u bytes</pre><pre>922337203685477580</pre><pre>API call with %s database connection pointer</pre><pre>RowKey</pre><pre>%s-shm</pre><pre>%s\etilqs_</pre><pre>OsError 0x%x (%u)</pre><pre>invalid page number %d</pre><pre>Recovered %d frames from WAL file %s</pre><pre>Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)</pre><pre>%d of %d pages missing from overflow list starting at %d</pre><pre>2nd reference to page %d</pre><pre>Failed to read ptrmap key=%d</pre><pre>Page %d:</pre><pre>unable to get the page. error code=%d</pre><pre>failed to get page %d</pre><pre>freelist leaf count too big on page %d</pre><pre>btreeInitPage() returns error code %d</pre><pre>On tree page %d cell %d:</pre><pre>On page %d at right child:</pre><pre>Multiple uses for byte %d of page %d</pre><pre>Fragmentation of %d bytes reported as %d on page %d</pre><pre>Corruption detected in cell %d on page %d</pre><pre>Page %d is never used</pre><pre>Pointer map page %d is referenced</pre><pre>unknown database %s</pre><pre>Outstanding page count goes from %d to %d during this analysis</pre><pre>keyinfo(%d</pre><pre>%s(%d)</pre><pre>%s-mjX</pre><pre>foreign key constraint failed</pre><pre>bind on a busy prepared statement: [%s]</pre><pre>unable to use function %s in the requested context</pre><pre>zeroblob(%d)</pre><pre>cannot open savepoint - SQL statements in progress</pre><pre>no such savepoint: %s</pre><pre>abort at %d in [%s]: %s</pre><pre>constraint failed at %d in [%s]</pre><pre>cannot %s savepoint - SQL statements in progress</pre><pre>cannot rollback transaction - SQL statements in progress</pre><pre>cannot commit transaction - SQL statements in progress</pre><pre>sqlite_master</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid</pre><pre>sqlite_temp_master</pre><pre>cannot change %s wal mode from within a transaction</pre><pre>database table is locked: %s</pre><pre>statement aborts at %d: [%s] %s</pre><pre>cannot open virtual table: %s</pre><pre>cannot open view: %s</pre><pre>cannot open value of type %s</pre><pre>indexed</pre><pre>cannot open %s column for writing</pre><pre>no such column: "%s"</pre><pre>foreign key</pre><pre>misuse of aliased aggregate %s</pre><pre>%s: %s</pre><pre>not authorized to use function: %s</pre><pre>%s: %s.%s.%s</pre><pre>%s: %s.%s</pre><pre>%r %s BY term out of range - should be between 1 and %d</pre><pre>too many terms in %s BY clause</pre><pre>variable number must be between ?1 and ?%d</pre><pre>too many SQL variables</pre><pre>Expression tree is too large (maximum depth %d)</pre><pre>too many columns in %s</pre><pre>EXECUTE %s%s SUBQUERY %d</pre><pre>%.*s"%w"%s</pre><pre>misuse of aggregate: %s()</pre><pre>sqlite_rename_trigger</pre><pre>sqlite_rename_parent</pre><pre>%s%.*s"%w"</pre><pre>sqlite_rename_table</pre><pre>type='trigger' AND (%s)</pre><pre>%s OR name=%Q</pre><pre>table %s may not be altered</pre><pre>view %s may not be altered</pre><pre>there is already another table or index with this name: %s</pre><pre>sqlite_</pre><pre>sqlite_sequence</pre><pre>UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q</pre><pre>UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;</pre><pre>UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');</pre><pre>UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;</pre><pre>Cannot add a PRIMARY KEY column</pre><pre>UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q</pre><pre>sqlite_stat1</pre><pre>sqlite_altertab_%s</pre><pre>SELECT tbl, idx, stat FROM %Q.sqlite_stat1</pre><pre>CREATE TABLE %Q.%s(%s)</pre><pre>DELETE FROM %Q.%s WHERE tbl=%Q</pre><pre>database %s is already in use</pre><pre>invalid name: "%s"</pre><pre>too many attached databases - max %d</pre><pre>unable to open database: %s</pre><pre>no such database: %s</pre><pre>database %s is locked</pre><pre>sqlite_detach</pre><pre>cannot detach database %s</pre><pre>access to %s.%s.%s is prohibited</pre><pre>sqlite_attach</pre><pre>%s %T cannot reference objects in database %s</pre><pre>access to %s.%s is prohibited</pre><pre>object name reserved for internal use: %s</pre><pre>too many columns on %s</pre><pre>duplicate column name: %s</pre><pre>there is already an index named %s</pre><pre>AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY</pre><pre>default value of column [%s] is not constant</pre><pre>table "%s" has more than one primary key</pre><pre>no such collation sequence: %s</pre><pre>UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d</pre><pre>CREATE TABLE %Q.sqlite_sequence(name,seq)</pre><pre>CREATE %s %.*s</pre><pre>view %s is circularly defined</pre><pre>UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d</pre><pre>use DROP VIEW to delete view %s</pre><pre>DELETE FROM %s.sqlite_sequence WHERE name=%Q</pre><pre>table %s may not be dropped</pre><pre>use DROP TABLE to delete table %s</pre><pre>foreign key on %s should reference only one column of table %T</pre><pre>number of columns in foreign key does not match the number of columns in the referenced table</pre><pre>DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q</pre><pre>unknown column "%s" in foreign key definition</pre><pre>indexed columns are not unique</pre><pre>virtual tables may not be indexed</pre><pre>there is already a table named %s</pre><pre>table %s may not be indexed</pre><pre>views may not be indexed</pre><pre>table %s has no column named %s</pre><pre>index %s already exists</pre><pre>sqlite_autoindex_%s_%d</pre><pre>INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);</pre><pre>CREATE%s INDEX %.*s</pre><pre>DELETE FROM %Q.%s WHERE name=%Q AND type='index'</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q</pre><pre>no such index: %S</pre><pre>index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped</pre><pre>a JOIN clause is required before %s</pre><pre>cannot modify %s because it is a view</pre><pre>unable to identify the object to be reindexed</pre><pre>table %s may not be modified</pre><pre>sqlite_source_id</pre><pre>sqlite_compileoption_used</pre><pre>sqlite_version</pre><pre>sqlite_compileoption_get</pre><pre>table %S has %d columns but %d values were supplied</pre><pre>%d values for %d columns</pre><pre>foreign key mismatch</pre><pre>%s.%s may not be NULL</pre><pre>PRIMARY KEY must be unique</pre><pre>table %S has no column named %s</pre><pre>no entry point [%s] in shared library [%s]</pre><pre>error during initialization: %s</pre><pre>sqlite3_extension_init</pre><pre>unable to open shared library [%s]</pre><pre>automatic extension loading failed: %s</pre><pre>foreign_keys</pre><pre>foreign_key_list</pre><pre>*** in database %s ***</pre><pre>unsupported encoding: %s</pre><pre>unsupported file format</pre><pre>malformed database schema (%s)</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid</pre><pre>database schema is locked: %s</pre><pre>RIGHT and FULL OUTER JOINs are not currently supported</pre><pre>a NATURAL join may not have an ON or USING clause</pre><pre>unknown or unsupported join type: %T %T%s%T</pre><pre>cannot have both ON and USING clauses in the same join</pre><pre>cannot join using column %s - column not present in both tables</pre><pre>USE TEMP B-TREE FOR %s</pre><pre>ORDER BY clause should come after %s not before</pre><pre>COMPOUND SUBQUERIES %d AND %d %s(%s)</pre><pre>no such index: %s</pre><pre>sqlite_subquery_%p_</pre><pre>LIMIT clause should come after %s not before</pre><pre>SELECTs to the left and right of %s do not have the same number of result columns</pre><pre>no such table: %s</pre><pre>sqlite3_get_table() called with two or more incompatible queries</pre><pre>INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')</pre><pre>cannot create %s trigger on view: %S</pre><pre>cannot create INSTEAD OF trigger on table: %S</pre><pre>no such column: %s</pre><pre>no such trigger: %S</pre><pre>-- TRIGGER %s</pre><pre>cannot VACUUM - SQL statements in progress</pre><pre>SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>PRAGMA vacuum_db.synchronous=OFF</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'</pre><pre>SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'</pre><pre>SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'</pre><pre>UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';</pre><pre>INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)</pre><pre>vtable constructor did not declare schema: %s</pre><pre>vtable constructor failed: %s</pre><pre>table %s: xBestIndex returned an invalid plan</pre><pre>no such module: %s</pre><pre>%s AS %s</pre><pre>%s SUBQUERY %d</pre><pre>%s TABLE %s</pre><pre>%s USING INTEGER PRIMARY KEY</pre><pre>%s (rowid=?)</pre><pre>%s USING %s%sINDEX%s%s%s</pre><pre>%s (rowid<?)</pre><pre>%s VIRTUAL TABLE INDEX %d:%s</pre><pre>%s (rowid>? AND rowid<?)</pre><pre>%s (rowid>?)</pre><pre>cannot use index: %s</pre><pre>%s (~%lld rows)</pre><pre>at most %d tables in a join</pre><pre>the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>unable to close due to unfinished backup operation</pre><pre>SQL logic error or missing database</pre><pre>unknown operation</pre><pre>large file support is disabled</pre><pre>no such vfs: %s</pre><pre>unknown database: %s</pre><pre>misuse at line %d of [%.10s]</pre><pre>cannot open file at line %d of [%.10s]</pre><pre>database corruption at line %d of [%.10s]</pre><pre>CoreIEControl.cpp</pre><pre>CoreHtmlDialog.cpp</pre><pre>onBeforeNavigate2 called, url=</pre><pre>CoreDialogCloseProcess.cpp</pre><pre>uxtheme.dll</pre><pre>urlarg:</pre><pre>%s/uninstallkeys/key[%d]/text()</pre><pre>/uninstallkeys/key</pre><pre>%s/uninstallkeys/key[%d]/attribute::type</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\</pre><pre>Unknown uninstall key type encountered, skipping lookup</pre><pre>Postback url is empty, skipping postback.</pre><pre>chromeaddonlogic</pre><pre>Target browser is unknown or unsupported; defaulting postback target browser to IE</pre><pre>chromeaddonLogic is true</pre><pre>postbackresponse.dat</pre><pre>norm.ieauto</pre><pre>alt.shell(2)</pre><pre>Opening Product Fail Url:</pre><pre>norm.shell(2)</pre><pre>norm.silent(3)</pre><pre>alt.ff</pre><pre>alt.chrome</pre><pre>alt.ie</pre><pre>IQPostback.cpp</pre><pre>alt.safari</pre><pre>alt.shell</pre><pre>Opening thank you page in Firefox:</pre><pre>Opening thank you page in Chrome:</pre><pre>Can't open thankyou page because the url is invalid:</pre><pre>Unable to open thankyou page.. turning off ShellExecute on URL (result may have still been launched)</pre><pre>ShellExecuteEx:</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Common\Installer.Common.Dialogs\IQDialogManager.h</pre><pre>%s,%d,%d,%d,%d,%d,%d,%d,%d</pre><pre>icons</pre><pre>offers</pre><pre>%s,v=%s,id=%s,rc=%d,e=%d,v=%d,c=%d,a=%d,i=%d,%s,err=%d,cf=%d,acc=%d,%u,%u,%u,%u,exc=%d</pre><pre>%s,%s,%d,%d,%s,%s,%d</pre><pre>t=%s,c=%d</pre><pre>%s_%s.d.%s</pre><pre>Software\Microsoft\Windows\CurrentVersion\Uninstall</pre><pre>hklm,%s,%d,%s</pre><pre>hkcu,%s,%d,%s</pre><pre>%s,%d,%s,"%s",%s</pre><pre>%s:v=%s,rc=%d,os=%s,%s,%s|ie=%s</pre><pre>%s:v=%s,id=%s,rc=%d,f=%d,e=%d,i=%s,p=%s,pb=%s,ex=%s,tr=%s,px=%d</pre><pre>%s,v=%s,id=%s,os=%d,rc=%d,v=%s,c=%s,l=0xx,spp=%s,epp=%s</pre><pre>%s,%s,rc=%s</pre><pre>INST_ie7searchurl</pre><pre>%s,%s,rc=%s,%d</pre><pre>%s,%s,rc=%s,%u,%u</pre><pre>%s,%s,rc=%s,%u,%u,%u,%u,%u</pre><pre>,os=%d,msi=%d.%d</pre><pre>%system%\msiexec.exe</pre><pre>,os=%d,sp=%d</pre><pre>%s|%s</pre><pre>%s,%s,%u,%u,%d,%s</pre><pre>%s,v=%s,id=%s,rc=%d,%u,%u,%d,%u,%u,%d,acc=%d,%u,%u,%u</pre><pre>v=%s,id=%s,rc=%d,%u</pre><pre>%s,%s,%s,%s,%s</pre><pre>%s,v=%s,id=%s,rc=%d,acc=%d,%u,%u,%u,%u,%u,%u</pre><pre>%d,%d,%d,%d,%d,%d,%d</pre><pre>%s,%s,%s</pre><pre>[%d,%d]</pre><pre>%s,%d,%d</pre><pre>%s,%d,%d,%s,%s,%s,%d,%s</pre><pre>%s,%d,%d,%s,%s,%s</pre><pre>%s,%d,%d,%d,%s,%s,%d,%d,%d,%d,%d,%d</pre><pre>%s,%s,%s,%d,%s,%d,%s,%s,%s</pre><pre>%s,%s,%d,%s,%s</pre><pre>%s|%d|%s</pre><pre>%Y%m%d</pre><pre>%s,%d,%s,%s,%s,%s</pre><pre>%s,%d,%s,%d</pre><pre>addonpostbackurl</pre><pre>thankYouPageUrl=</pre><pre>IQAddOnStatus.cpp</pre><pre>addon postback url is empty!</pre><pre>addonpostback_response.html</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Desktop.Application\ReleaseNoMFC\FreezeWrapWin.pdb</pre><pre>COMCTL32.dll</pre><pre>KERNEL32.dll</pre><pre>USER32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>PSAPI.DLL</pre><pre>VERSION.dll</pre><pre>USERENV.dll</pre><pre>InternetCrackUrlA</pre><pre>InternetCombineUrlA</pre><pre>FindFirstUrlCacheEntryA</pre><pre>FindNextUrlCacheEntryA</pre><pre>FindCloseUrlCache</pre><pre>WININET.dll</pre><pre>HttpOpenRequestA</pre><pre>HttpAddRequestHeadersA</pre><pre>HttpSendRequestA</pre><pre>HttpQueryInfoA</pre><pre>UrlEscapeA</pre><pre>SHDeleteEmptyKeyA</pre><pre>SHLWAPI.dll</pre><pre>IsValidURL</pre><pre>urlmon.dll</pre><pre>RPCRT4.dll</pre><pre>GetProcessHeap</pre><pre>GetWindowsDirectoryA</pre><pre>GetCPInfo</pre><pre>EnumWindows</pre><pre>EnumChildWindows</pre><pre>GDI32.dll</pre><pre>RegCloseKey</pre><pre>RegCreateKeyExA</pre><pre>RegOpenKeyExA</pre><pre>RegDeleteKeyA</pre><pre>RegQueryInfoKeyA</pre><pre>RegEnumKeyExA</pre><pre>ADVAPI32.dll</pre><pre>ShellExecuteExA</pre><pre>gdiplus.dll</pre><pre>CRYPT32.dll</pre><pre>GetKeyboardState</pre><pre>COMDLG32.dll</pre><pre>zcÁ</pre><pre>.?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@</pre><pre>.?AVCCoreStringUrl@@</pre><pre>.?AV?$CAtlArray@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@@ATL@@</pre><pre>.?AV?$CCoreEntryPoint@P6GJPAUHKEY__@@PBDKK@Z@@</pre><pre>.?AVCCoreRegKey@@</pre><pre>.?AVexecution_error@TinyXPath@@</pre><pre>.?AV?$CFlags@W4WebArgFlag@@@@</pre><pre>.?AV?$_Ref_count_obj@VCDetectionChromePrefs@@@std@@</pre><pre>.?AV?$_Ref_count_obj@VCDetectionFirefoxPrefs@@@std@@</pre><pre>.?AVCIQOfferEXE@@</pre><pre>.?AVCIQUReporter@@</pre><pre>.?AV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PAXV?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V?$CElementTraits@PAX@2@@ATL@@</pre><pre>.?AV?$CFlags@W4CoreFirefoxCache@@@@</pre><pre>.?AVCCoreFirefox@@</pre><pre>.?AVCCoreChrome@@</pre><pre>.?AV?$_Func_impl@U?$_Callable_obj@V?$_Bind@$00XU?$_Pmf_wrap@P8CCoreChrome@@AEXPAVCCoreSqlite@@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@ZXV1@PAV2@PAV34@U_Nil@std@@U56@U56@U56@U56@@std@@QAVCCoreChrome@@AAV?$_Ph@$00@2@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@U_Nil@2@U72@U72@U72@@std@@$0A@@std@@V?$allocator@V?$_Func_class@XPAVCCoreSqlite@@U_Nil@std@@U23@U23@U23@U23@U23@@std@@@2@XPAVCCoreSqlite@@U_Nil@2@U52@U52@U52@U52@U52@@std@@</pre><pre>.?AV?$_Func_base@XPAVCCoreSqlite@@U_Nil@std@@U23@U23@U23@U23@U23@@std@@</pre><pre>.?AV?$CFlags@W4CoreChromeCache@@@@</pre><pre>.?AV?$_Bind@$00XU?$_Pmf_wrap@P8CCoreChrome@@AEXPAVCCoreSqlite@@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@ZXV1@PAV2@PAV34@U_Nil@std@@U56@U56@U56@U56@@std@@QAVCCoreChrome@@AAV?$_Ph@$00@2@PAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@U_Nil@2@U72@U72@U72@@std@@</pre><pre>.?AVCCoreOpera@@</pre><pre>.?AV?$CFlags@W4CoreOperaCache@@@@</pre><pre>.?AVCCoreFirefoxXpiInstaller@@</pre><pre>.?AVCCoreFirefoxAddOn@@</pre><pre>.?AVCCoreChromeExtension@@</pre><pre>.?AVCDetectionFirefoxPrefs@@</pre><pre>.?AVCDetectionChromePrefs@@</pre><pre>.?AVCCoreWebBrowserEvents@@</pre><pre>.?AUDWebBrowserEvents2@@</pre><pre>.?AV?$CAtlArray@UWebArg@@V?$CElementTraits@UWebArg@@@ATL@@@ATL@@</pre><pre>.?AVCCoreWebArgs@@</pre><pre>.?AVCCoreSqlite@@</pre><pre>.?AV?$CAtlArray@PAV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@V?$CElementTraits@PAV?$CAtlMap@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@@2@@ATL@@</pre><pre>.?AVCCoreSqliteResult@@</pre><pre>.?AVCIQWebArgs@@</pre><pre>c:\%original file name%.exe</pre><pre>@.reloc</pre><pre>Vista.BadArgs</pre><pre>\cookie.ini</pre><pre>\cookie.dat</pre><pre>Vista.BadArgs2</pre><pre>Domain%d</pre><pre>Name%d</pre><pre>\cookie%d.dat</pre><pre>\cookie%d.ini</pre><pre>Vista.NoAppLow</pre><pre>Vista.WideFail</pre><pre>Vista.GetCookieFail</pre><pre>Vista.AllocFail</pre><pre>Vista.CreateFileError</pre><pre>Vista.WriteFileError</pre><pre>SetCookie%d</pre><pre>Vista.SetCookieError</pre><pre>Error: %d. %s</pre><pre>c:\tfs.vs2012\admin\windows\main\Installer.Desktop.Application\ReleaseNoMFC\Installer.CookieMan.pdb</pre><pre><requestedExecutionLevel level="asInvoker" uiAccess="false" /></pre><pre>3 3%3,323</pre><pre>dsapi.exe</pre><pre>~S.em</pre><pre>.oIJLHLLK</pre><pre>MN.LN</pre><pre>dsapi.exePK</pre><pre>T.qmu</pre><pre>Url 87</pre><pre>(.ALPO</pre><pre>.STBs</pre><pre>6.GQr</pre><pre>Hu.nbKzO</pre><pre>pI.sqO</pre><pre>Db.bE</pre><pre>B(P%S</pre><pre>u.oq$</pre><pre>]j.cA</pre><pre>==.vp</pre><pre> g.oLWJ</pre><pre>wajam_validate.exe</pre><pre>wrapper.xmlPK</pre><pre>autorun.txtPK</pre><pre><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD</pre><pre>@mscoree.dll</pre><pre>combase.dll</pre><pre>- CRT not initialized</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- floating point support not loaded</pre><pre>USER32.DLL</pre><pre>777705555443332</pre><pre>5555443332</pre><pre>5555443332</pre><pre>mscoree.dll</pre><pre>Send Error Report</pre><pre>Send Error Report?</pre><pre>s de support@teamfreeze.com.</pre><pre>Debe cerrar Firefox para poder continuar. Presione OK (Aceptar) para cerrarlo ahora. Es probable que deba cerrarlo manualmente.</pre><pre>Please email Customer Support at support@teamfreeze.com if you need further assistance.</pre><pre>To exit completely without installing your software, click the Cancel button.pFirefox must be closed before continuing. Press OK to close Firefox now. You may need to close Firefox manually.</pre><pre>We have created an error report that you can send to help improve #ProductName#. The report contains no Personally Identifiable Information (PII) and will only be used by us.</pre><pre>Would you like to submit this report?</pre><pre>n~Debe cerrar Chrome para poder continuar. Presione OK (Aceptar) para cerrarlo ahora. Es probable que deba cerrarlo manualmente.</pre><pre>InstallationmChrome must be closed before continuing. Press OK to close Chrome now. You may need to close Chrome manually.</pre><pre>This installation was unable to load the file specified. This is an installation program and should not be set as the default program for any file type.yYour browsers must be closed before continuing. Press OK to close your browsers now. You may need to close them manually.</pre><pre>2.140.0.0</pre><pre>InstallIQ.exe</pre><b>%original file name%.exe_1244_rwx_00EC0000_00002000:</b><pre>The procedure %s could not be located in the DLL %s.</pre><pre>The ordinal %d could not be located in the DLL %s.</pre><b>%original file name%.exe_1244_rwx_00F10000_00002000:</b><pre>The procedure %s could not be located in the DLL %s.</pre><pre>The ordinal %d could not be located in the DLL %s.</pre><b>%original file name%.exe_1244_rwx_10001000_00082000:</b><pre>SSSSh</pre><pre>t%SWh</pre><pre>1.3.6.1.4.1.311.10.3.5</pre><pre>1.3.6.1.4.1.311.10.3.6</pre><pre>1.3.6.1.5.5.7.3.3</pre><pre>2.5.4.6</pre><pre>2.5.4.8</pre><pre>2.5.4.7</pre><pre>2.5.4.10</pre><pre>2.5.4.11</pre><pre>2.5.4.3</pre><pre>WINTRUST.dll</pre><pre>CRYPT32.dll</pre><pre>{X-X-X-XX-XXXXXX}</pre><pre>operator</pre><pre>GetProcessWindowStation</pre><pre>SCC_CheckCriteria_Web</pre><pre>RegOpenKeyTransactedW</pre><pre>RegCreateKeyTransactedW</pre><pre>RegDeleteKeyTransactedW</pre><pre>RegDeleteKeyExW</pre><pre>2.0.0.29</pre><pre>CryptCATCatalogInfoFromContext</pre><pre>CryptMsgClose</pre><pre>CertCloseStore</pre><pre>CertFreeCertificateContext</pre><pre>CertFindCertificateInStore</pre><pre>CryptMsgGetParam</pre><pre>CertGetEnhancedKeyUsage</pre><pre>CertNameToStrW</pre><pre>CertGetNameStringW</pre><pre>URLOpenStreamW</pre><pre>urlmon.dll</pre><pre>DeleteUrlCacheEntryW</pre><pre>HttpOpenRequestW</pre><pre>HttpAddRequestHeadersW</pre><pre>HttpSendRequestW</pre><pre>WININET.dll</pre><pre>KERNEL32.dll</pre><pre>USER32.dll</pre><pre>RegCloseKey</pre><pre>RegOpenKeyExW</pre><pre>RegDeleteKeyW</pre><pre>RegCreateKeyExW</pre><pre>ADVAPI32.dll</pre><pre>ShellExecuteExW</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>SHLWAPI.dll</pre><pre>USERENV.dll</pre><pre>GetProcessHeap</pre><pre>GetWindowsDirectoryW</pre><pre>GetCPInfo</pre><pre>MsgWaitForMultipleObjectsEx</pre><pre>RegEnumKeyExW</pre><pre>RegQueryInfoKeyW</pre><pre>OLEAUT32.dll</pre><pre>SHDeleteKeyW</pre><pre>SHDeleteEmptyKeyW</pre><pre>SYMCCIS.dll</pre><pre>zcÁ</pre><pre>c:\%original file name%.exe</pre><pre>0xX</pre><pre>..\Source\ccVerifyTrustStatic.cpp</pre><pre>%SymEFA%</pre><pre>EFACli.dll</pre><pre>CLSID\%s\LocalServer32</pre><pre>CLSID\%s\InprocServer32</pre><pre>NTDLL.DLL</pre><pre>..\Source\ccVerifyTrustImpl.cpp</pre><pre>..\Source\FileCache.cpp</pre><pre>g..\Source\VerifyFile.cpp</pre><pre>..\Source\ccVerifyTrustPolicy.cpp</pre><pre>..\Source\CatalogIterator.cpp</pre><pre>..\Source\CatalogFileHash.cpp</pre><pre>WinTrust.dll</pre><pre>..\Source\CatalogContext.cpp</pre><pre>..\Source\ccSymModuleLifetimeMgrImpl.cpp</pre><pre>%s, %s, %s, %s(%ld)</pre><pre>..\Source\ccModule.cpp</pre><pre>..\Source\ccSystemInfo.cpp</pre><pre>..\Source\ccRegistry.cpp</pre><pre>..\Source\ccStringConvert.cpp</pre><pre>CSIDL_WINDOWS</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion</pre><pre>..\Source\ccPathExpansion.cpp</pre><pre>\\?\UNC</pre><pre>..\Source\ccSplitPath.cpp</pre><pre>..\Source\ccOSInfo.cpp</pre><pre>\wpeutil.dll</pre><pre>\FACTORY.exe</pre><pre>\wpeinit.exe</pre><pre>..\Source\ccMemory.cpp</pre><pre>..\Source\ccFile.cpp</pre><pre>..\Source\ccWow64FsRedirection.cpp</pre><pre>%s\%s</pre><pre>CIsolation::GetRegistryHive(): RegOpenKeyEx() returned ERROR_FILE_NOT_FOUND</pre><pre>CIsolation::GetRegistryHive(): RegOpenKeyEx() returned ERROR_ACCESS_DENIED</pre><pre>isolate.ini</pre><pre>%COMMON_SILO_DATA%</pre><pre>..\Source\ccEncryptedString.cpp</pre><pre>..\Source\ccSynchronize.cpp</pre><pre>..\Source\ccSymDllLifetimeMgr.cpp</pre><pre>kernel32.dll</pre><pre>KERNEL32.DLL</pre><pre>PSAPI.DLL</pre><pre>..\Source\ccPEBReader.cpp</pre><pre>..\Source\ccPrivilege.cpp</pre><pre>..\Source\ccSymIndexValueCollectionImpl.cpp</pre><pre>AWTSAPI32.DLL</pre><pre>..\Source\ccSymDllLifetimeMgrLocal.cpp</pre><pre>..\Source\ccSymIndexValueCollection.cpp</pre><pre>..\Source\ccSymValueCollection.cpp</pre><pre>ÌROOT%</pre><pre>rcPFRes.dll</pre><pre>rcPxyEvt.dll</pre><pre>rcProxy.dll</pre><pre>rcSvcHst.dll</pre><pre>rcEmlPxy.dll</pre><pre>rcLgView.dll</pre><pre>rcErrDsp.dll</pre><pre>rcAlert.dll</pre><pre>rcApp.dll</pre><pre>ccEmlPxy.dll</pre><pre>ccGLog.dll</pre><pre>ccJobMgr.dll</pre><pre>ccGEvt.dll</pre><pre>ccIPC.dll</pre><pre>ccRkSn.dll</pre><pre>PFPriv.dll</pre><pre>ccPxyIns.dll</pre><pre>ccPxyEvt.dll</pre><pre>ccInst64.dll</pre><pre>ccEvtCli.dll</pre><pre>ccTrstPc.dll</pre><pre>ccSvc.dll</pre><pre>ccEraser.dll</pre><pre>OEHeur.dll</pre><pre>ccCharCv.dll</pre><pre>ccInst.dll</pre><pre>DefUtDCD.dll</pre><pre>ccScanw.dll</pre><pre>ccScan.dll</pre><pre>dec_abi.dll</pre><pre>ccDec.dll</pre><pre>ccALEng.dll</pre><pre>ccErrDsp.dll</pre><pre>ccProSub.dll</pre><pre>ccVrTrst.dll</pre><pre>ccSetEvt.dll</pre><pre>ccSet.dll</pre><pre>ccAlert.dll</pre><pre>..\Source\ccArchive.cpp</pre><pre>..\Source\ccDummyArchive.cpp</pre><pre>..\Source\ccInstanceFactory.cpp</pre><pre>..\Source\ccSymValueCollectionConvert.cpp</pre><pre>..\Source\ccSymStreamArchive.cpp</pre><pre>Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders</pre><pre>Software\Microsoft\Windows\CurrentVersion</pre><pre>ÌROOT%\</pre><pre>ÌDATA%\</pre><pre>..\Source\ccSymInstalledApps.cpp</pre><pre>..\Source\ccSymDigest.cpp</pre><pre>..\Source\ccSymKeyValueCollectionImpl.cpp</pre><pre>..\Source\ccSymMemoryImpl.cpp</pre><pre>Archive.Write(CMemoryImpl::CSerializeImpl::Version) == FALSE</pre><pre>Archive.Read(nVersion) == FALSE</pre><pre>..\Source\ccSymStringImpl.cpp</pre><pre>Archive.Write(CStringImpl::Version) == FALSE</pre><pre>..\Source\ccSymInstanceFactoryImpl.cpp</pre><pre>t..\Source\ccMessageLock.cpp</pre><pre>..\Source\ccSymKeyValueCollection.cpp</pre><pre>..\Source\ccSymPersist.cpp</pre><pre>ÌROOT%\ccSet.dll</pre><pre>..\Source\ccSymObjectRepository.cpp</pre><pre>CommonClient\OBJID\%s</pre><pre>..\Source\ccMemoryArchive.cpp</pre><pre>..\Source\ccSymMemoryStreamImpl.cpp</pre><pre>mscoree.dll</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>WUSER32.DLL</pre><pre>FileDownloader::callURLOpenStream</pre><pre>CHttpRequest::CHttpRequest</pre><pre>CHttpRequest::~CHttpRequest</pre><pre>CHttpRequest::RequestPage</pre><pre>CHttpRequest::ParseURLW</pre><pre>https</pre><pre>[s d, d - d:d:d:d]</pre><pre>%s %ld</pre><pre>%s %s</pre><pre>%s 0x%x</pre><pre>http://cps.qalabs.symantec.com/teams/isp/symccis</pre><pre>http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Staging</pre><pre>http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production</pre><pre>SymCCIS.dll</pre><pre>SCC.dll</pre><pre>OfferUI.dll</pre><pre>SymInstallStub.exe</pre><pre>SymCCISDll.txt</pre><pre>Total CheckCriteria execution time in seconds =</pre><pre>NortonOfferEngineImpl::CheckCriteria_Web</pre><pre>downloadStubInstallerExe() failed, HR =</pre><pre>Failed to delete existing SCC.dll, GetLastError =</pre><pre>NortonOfferEngineImpl::downloadStubInstallerExe</pre><pre>Failed to delete existing SymInstallStub.exe, GetLastError =</pre><pre>NortonOfferEngineImpl::buildComponentDownloadURL</pre><pre>NortonOfferEngineImpl::getTestEnvironmentRootURL</pre><pre>NortonOfferEngineImpl::getISExeDestPath</pre><pre>getISExeDestPath() returned =</pre><pre>NortonOfferEngineImpl::sendPingForCheckCriteriaWeb</pre><pre>NortonOfferEngineImpl::getCheckCriteriaPingDataWeb</pre><pre>NortonOfferEngineImpl::getStubInstallerCmdLine</pre><pre>getStubInstallerCmdLine() returned =</pre><pre>NortonOfferEngineImpl::deleteDeclineCountRegKeyForThisProduct</pre><pre>NortonOfferEngineImpl::deleteDeclineCountParentKeyIfNoMoreProductsExist</pre><pre>Deleting DeclineCount subkey for partner =</pre><pre>Failed to create/open DECLINE_COUNT_REG_KEY</pre><pre>Advapi32.dll</pre><pre>http://stats.norton.com/n/p?</pre><pre>PingData::SendCheckCriteriaWebPing</pre><pre>PingData::createBaseURL</pre><pre>PingData::getCheckCriteriaPingURL</pre><pre>PingData::getCheckCriteriaWebPingURL</pre><pre>PingData::getInstallProductsPingURL</pre><pre>PingData::getOfferAcceptancePingURL</pre><pre>pingURL =</pre><pre>X.X</pre><pre>%u.%u.%u.%u.%u</pre><pre>Utility::LaunchProcessWithShellExecute</pre><pre>ShellExecuteEx failed, GetLastError =</pre><pre>; 5->>>></pre><pre>000000000</pre><pre>00000000000001</pre><b>%original file name%.exe_1244_rwx_10084000_00002000:</b><pre><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></pre><pre>NRTN_OfferEngine_CheckCriteria_Web</pre><pre>kernel32.dll</pre><pre>urlmon.dll</pre><pre>URLOpenStreamW</pre><pre>WININET.dll</pre><pre>USER32.dll</pre><pre>MsgWaitForMultipleObjectsEx</pre><pre>ADVAPI32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>SHLWAPI.dll</pre><pre>USERENV.dll</pre><pre>OLEAUT32.dll</pre><pre>2.0.0.29</pre></RDF></pre></h></pre></pre></-t></pre></RDF></pre></h></pre></pre></-t>