Behaviour: PUP. Potentially Unwanted Program. An application that does not display malicious behavior yet is installed without having first sought affirmative user consent for installation. Users may not realize, due to the nature of the installation procedure, that an application they have not explicitly agreed to has been installed. This category can also be used to classify other applications which in a certain context can be wanted e.g. remote administration tools or IRC clients.
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 12fd3fdd30842b7b335c8b3e984bec2b
SHA1: 9fe1f2b1fb6f2e1bbbe7b068cd5f79832c36be39
SHA256: 0d214af9bc5e43a3a4036c43939e650ca57aa16cc5ecf55ff72af097081aec1c
SSDeep: 49152:OPwLxnxU03/7or20GcszfC4GHcRZms43faM5/QxiuO1G2eon VK7lv:O88kcszfLG8RZJ6/Qkueeon VKRv
Size: 2336800 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: Conduit
Created at: 2011-07-06 17:31:20
Analyzed on: WindowsAda SP3 32-bit
Summary:
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The program creates the following process(es):
%original file name%.exe:2032
CltMngSvc.exe:2104
CltMngSvc.exe:2092
cltmng.exe:2516
cltmng.exe:1196
nst29.exe:632
SPRunner.exe:884
nsj2E.exe:2944
The program injects its code into the following process(es):No processes have been created.
File activity
The process %original file name%.exe:2032 makes changes in the file system.
The program creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\lib\json2.js (784 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\settings.js (11 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Program Files%\SearchProtect\ffprotect\application.js (601 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\nsprotector.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\bubble.css (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\main.html (2 bytes)
%Program Files%\SearchProtect\bin\SPHook64.dll (21216 bytes)
%Program Files%\SearchProtect\Dialogs\dialogsApi.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\information.png (2 bytes)
%Program Files%\SearchProtect\ffprotect\nsprotector.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\main.html (2 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\bubble.css (1 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Program Files%\SearchProtect\bin\ChromeModule.dll (33455 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Program Files%\SearchProtect\bin\FirefoxModule.dll (41699 bytes)
%Program Files%\SearchProtect\ffprotect\abstraction.js (52 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\bubble.js (6 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\bubble.js (6 bytes)
%Program Files%\SearchProtect\bin\InternetExplorerModule.dll (44462 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2E.exe (3616 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\dialogsApi.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso27.tmp (227043 bytes)
%Program Files%\SearchProtect\bin\SPTool64.exe (15536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\ConduitMsTimestamp.dll (3616 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPHook64.dll (21216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\System.dll (11 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\cltmng.exe (105913 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\information.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\settings.js (11 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Program Files%\SearchProtect\bin\uninstall.exe (6584 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2C.tmp (741694 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\CltMngSvc.exe (8184 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\bubble.js (6 bytes)
%Program Files%\SearchProtect\bin\SPHook32.dll (20416 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\application.js (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2D.tmp (1856 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPHook32.dll (20416 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\lib\json2.js (784 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\main.html (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst29.exe (3616 bytes)
%Program Files%\SearchProtect\bin\CltMngSvc.exe (8184 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\information.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\abstraction.js (52 bytes)
%Program Files%\SearchProtect\bin\SPRunner.exe (22552 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPTool64.exe (15536 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\bubble.css (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\settings.js (11 bytes)
%Program Files%\SearchProtect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\main.html (986 bytes)
%Program Files%\SearchProtect\bin\cltmng.exe (105913 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\dialogsApi.js (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\FirefoxModule.dll (41699 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\main.html (986 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\popupTransparent.xul (1 bytes)
%Program Files%\SearchProtect\Dialogs\lib\json2.js (784 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPRunner.exe (22552 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\InternetExplorerModule.dll (44462 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\ChromeModule.dll (33455 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\main.html (986 bytes)
The program deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\ConduitMsTimestamp.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy26.tmp (0 bytes)
The process cltmng.exe:1196 makes changes in the file system.
The program creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\SProtectorRepository\EN (1512 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\rep.dat (1981 bytes)
The process nst29.exe:632 makes changes in the file system.
The program creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsz2B.tmp\inetc.dll (24 bytes)
The program deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsz2B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz2B.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz2B.tmp\a.txt (0 bytes)
The process SPRunner.exe:884 makes changes in the file system.
The program creates and/or writes to the following file(s):
%Program Files%\Mozilla Firefox\browser\chrome.manifest (258 bytes)
%Program Files%\Mozilla Firefox\browser\nsprotector.js (1 bytes)
The process nsj2E.exe:2944 makes changes in the file system.
The program creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsk30.tmp\inetc.dll (24 bytes)
The program deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsk30.tmp\a.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk30.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk30.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse2F.tmp (0 bytes)
Registry activity
The process %original file name%.exe:2032 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B4 8C 8A 12 9D 96 69 27 7D B5 5F 31 64 FA D6 5A"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"DisplayVersion" = "1.7.0.72"
[HKCU\Software\SearchProtect\ffprotect]
"ffHomepage" = "{}"
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz2B.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsd28.tmp\,"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\SearchProtect]
"SPID" = "SP8ABC9271-93D9-43BD-AC03-9E81B6D82F0F"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"Publisher" = "Conduit"
[HKCU\Software\SearchProtect\ffprotect]
"ffSettings" = "{}"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"DisplayIcon" = "%Program Files%\SearchProtect\bin\cltmng.exe"
[HKLM\SOFTWARE\SearchProtect]
"Environment" = ""
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
"DisplayName" = "Search Protect by conduit"
"UninstallString" = "%Program Files%\SearchProtect\bin\uninstall.exe /S"
To automatically run itself each time Windows is booted, the program adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SearchProtectAll" = "%Program Files%\SearchProtect\bin\cltmng.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchProtect" = "%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\cltmng.exe"
The program deletes the following value(s) in system registry:
The program disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallCleanUp"
The process CltMngSvc.exe:2104 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "17 79 12 53 B6 F1 DE 7C B3 79 C9 C3 AB 68 1E 2F"
The process CltMngSvc.exe:2092 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8E 3A F8 C9 19 A9 9E C9 10 CB 82 D8 54 C0 37 80"
The process cltmng.exe:2516 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9E 5C 41 16 F7 FA E3 30 64 C3 B8 32 59 F2 E1 A8"
The process cltmng.exe:1196 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 D3 C2 B0 0B 62 6B ED 13 A5 68 FC 2B 89 EA 21"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\SearchProtect\ffprotect]
"ffHomepage" = "{}"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\SearchProtect\ffprotect]
"ffKeepAlive" = "{timestamp: 1399992598}"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3C 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\SearchProtect\ffprotect]
"ffSettings" = "{}"
The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"
The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
"UNCAsIntranet" = "1"
The program modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The program deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process nst29.exe:632 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "83 76 7A BE FE 0D 11 70 3B D0 4E 89 5A 3F 5A 55"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3A 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz2B.tmp\,"
The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"
The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
"UNCAsIntranet" = "1"
The program modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The program deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process nsj2E.exe:2944 makes changes in the system registry.
The program creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "46 B0 C3 CD 18 86 26 AD CF D0 73 F3 59 3C 8F 77"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz2B.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsd28.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsk30.tmp\,"
The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"
The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
"UNCAsIntranet" = "1"
The program modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The program deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
MD5 | File path |
---|---|
46d71381bd7609dc5ef9372dec3bd713 | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\ChromeModule.dll |
d76786ba05443c6fdd0184e0838e9968 | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\CltMngSvc.exe |
86f4c9976c2c91742ca37cca83c9240a | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\FirefoxModule.dll |
536631a821dfc158d248566d5d1b5f10 | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\InternetExplorerModule.dll |
3202bcc7a2e920dd049e357c720b9562 | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\SPHook32.dll |
134bcf1e18fccf48054547bb5dd2775e | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\SPHook64.dll |
196909a9dc2265c21aa49bd9cfa319aa | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\SPRunner.exe |
539887fe850807a17260fafa1a5a37ba | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\SPTool64.exe |
0a89171e6f87ea8848f6fbbee8ad366e | c:\Documents and Settings\"%CurrentUserName%"\Application Data\SearchProtect\bin\cltmng.exe |
cbb0857b4e4c5d947a0933733f19affc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsj2E.exe |
cbb0857b4e4c5d947a0933733f19affc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nst29.exe |
46d71381bd7609dc5ef9372dec3bd713 | c:\Program Files\SearchProtect\bin\ChromeModule.dll |
d76786ba05443c6fdd0184e0838e9968 | c:\Program Files\SearchProtect\bin\CltMngSvc.exe |
86f4c9976c2c91742ca37cca83c9240a | c:\Program Files\SearchProtect\bin\FirefoxModule.dll |
536631a821dfc158d248566d5d1b5f10 | c:\Program Files\SearchProtect\bin\InternetExplorerModule.dll |
3202bcc7a2e920dd049e357c720b9562 | c:\Program Files\SearchProtect\bin\SPHook32.dll |
134bcf1e18fccf48054547bb5dd2775e | c:\Program Files\SearchProtect\bin\SPHook64.dll |
196909a9dc2265c21aa49bd9cfa319aa | c:\Program Files\SearchProtect\bin\SPRunner.exe |
539887fe850807a17260fafa1a5a37ba | c:\Program Files\SearchProtect\bin\SPTool64.exe |
0a89171e6f87ea8848f6fbbee8ad366e | c:\Program Files\SearchProtect\bin\cltmng.exe |
ea8833537f79d2bd0fb19f4d10231c3e | c:\Program Files\SearchProtect\bin\uninstall.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:2032
CltMngSvc.exe:2104
CltMngSvc.exe:2092
cltmng.exe:2516
cltmng.exe:1196
nst29.exe:632
SPRunner.exe:884
nsj2E.exe:2944 - Delete the original program file.
- Delete or disinfect the following files created/modified by the program:
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\lib\json2.js (784 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\settings.js (11 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Program Files%\SearchProtect\ffprotect\application.js (601 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\nsprotector.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\bubble.css (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\main.html (2 bytes)
%Program Files%\SearchProtect\bin\SPHook64.dll (21216 bytes)
%Program Files%\SearchProtect\Dialogs\dialogsApi.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\information.png (2 bytes)
%Program Files%\SearchProtect\ffprotect\nsprotector.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\main.html (2 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\bubble.css (1 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Program Files%\SearchProtect\bin\ChromeModule.dll (33455 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Program Files%\SearchProtect\bin\FirefoxModule.dll (41699 bytes)
%Program Files%\SearchProtect\ffprotect\abstraction.js (52 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\bubble.js (6 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\bubble.js (6 bytes)
%Program Files%\SearchProtect\bin\InternetExplorerModule.dll (44462 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2E.exe (3616 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\dialogsApi.js (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso27.tmp (227043 bytes)
%Program Files%\SearchProtect\bin\SPTool64.exe (15536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\ConduitMsTimestamp.dll (3616 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPHook64.dll (21216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd28.tmp\System.dll (11 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-LTR.png (1 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-default-LTR.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\cltmng.exe (105913 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\information.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\settings.js (11 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Program Files%\SearchProtect\bin\uninstall.exe (6584 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2C.tmp (741694 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\CltMngSvc.exe (8184 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\images\warning.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\bubble.js (6 bytes)
%Program Files%\SearchProtect\bin\SPHook32.dll (20416 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\application.js (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2D.tmp (1856 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPHook32.dll (20416 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\SearchProtector.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\lib\json2.js (784 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\main.html (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst29.exe (3616 bytes)
%Program Files%\SearchProtect\bin\CltMngSvc.exe (8184 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\information.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\abstraction.js (52 bytes)
%Program Files%\SearchProtect\bin\SPRunner.exe (22552 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-default-RTL.png (1 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPTool64.exe (15536 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\bubble.css (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spsd\settings.js (11 bytes)
%Program Files%\SearchProtect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spsd\images\ok-button.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\spbd\main.html (986 bytes)
%Program Files%\SearchProtect\bin\cltmng.exe (105913 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\Dialogs\dialogsApi.js (2 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\lib\jquery.min.js (3312 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\FirefoxModule.dll (41699 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\Dialogs\spbd\main.html (986 bytes)
%Program Files%\SearchProtect\Dialogs\spsd\images\separation-line.png (938 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\popupTransparent.xul (1 bytes)
%Program Files%\SearchProtect\Dialogs\lib\json2.js (784 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\SPRunner.exe (22552 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\InternetExplorerModule.dll (44462 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\ChromeModule.dll (33455 bytes)
%Program Files%\SearchProtect\Dialogs\spbd\main.html (986 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\ffprotect\SProtectorRepository\EN (1512 bytes)
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\rep.dat (1981 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz2B.tmp\inetc.dll (24 bytes)
%Program Files%\Mozilla Firefox\browser\chrome.manifest (258 bytes)
%Program Files%\Mozilla Firefox\browser\nsprotector.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk30.tmp\inetc.dll (24 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SearchProtectAll" = "%Program Files%\SearchProtect\bin\cltmng.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchProtect" = "%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\cltmng.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Static Analysis
VersionInfo
Company Name: Conduit
Product Name: Search Protect
Product Version: 1.7.0.72
Legal Copyright: 2012 (c) Conduit. All rights reserved.
Legal Trademarks:
Original Filename: SearchProtect (R) P
Internal Name: Unknown
File Version: 1.7.0.72
File Description: Search Protect by Conduit
Comments:
Language: Language Neutral
Company Name: ConduitProduct Name: Search ProtectProduct Version: 1.7.0.72Legal Copyright: 2012 (c) Conduit. All rights reserved.Legal Trademarks: Original Filename: SearchProtect (R) PInternal Name: UnknownFile Version: 1.7.0.72File Description: Search Protect by ConduitComments: Language: Language Neutral
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 25506 | 25600 | 4.49191 | 3291075913c14a1799655a261fb21cca |
.rdata | 32768 | 6386 | 6656 | 3.3883 | 170563e94de7ebfd6e622a164ce38c8a |
.data | 40960 | 419484 | 512 | 0.991115 | 23d69b1e3a55dee07701198b7650a06b |
.ndata | 462848 | 1642496 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.rsrc | 2105344 | 36984 | 37376 | 4.09452 | 3a34d048205e5244e81b510137cc5436 |
Dropped from:
Downloaded by:
Similar by SSDeep:
b9527a4060835d7e61f34676fd217dfd89bbf2a124b4f648b227877779364f7ee693c884bcb191222313c106d4ecae0f
Similar by Lavasoft Polymorphic Checker:
Total found: 2
2e6ba9375e72306f1b3087338bccac7f
765c1e65d2dde64a60a273f3998cf22f
Network Activity
URLs
URL | IP |
---|---|
hxxp://jazz-1846647836.us-east-1.elb.amazonaws.com/ | |
hxxp://sp-installer.conduit-data.com/ | 50.16.210.106 |
sp-settings.spccint.com | 23.32.152.11 |
servicemap.conduit-services.com | 23.45.35.152 |
sp-translation.conduit-services.com | 23.45.35.152 |
sp-autoupdate.conduit-services.com | 23.45.35.152 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: sp-installer.conduit-data.com
Content-Length: 496
Connection: Keep-Alive
Cache-Control: no-cache
{"event_type":"install_start","SP_ID":"SP8ABC9271-93D9-43BD-AC03-9E81B6D82F0F","SP_version":"1.7.0.72","carrier_type":"","carrier_ID":"","carrier_version":"","carrier_userid":"","carrier_UM":"","OS_name":"Microsoft Windows XP Professional Service Pack 3 (build 2600)","OS_version":"5.1","hp_takeover":"false","other_takeover":"false","environment":"","sequence_timestamp":"1399992589483","browser":"UNKNOWN","browser_version":"", "installation_session_id":"IB9476675-FD9A-4171-9D68-92486F905A14"}
HTTP/1.1 202 Accepted
Date: Tue, 13 May 2014 14:49:56 GMT
P3P: CP="NOI ADM DEV COM NAV OUR STP"
Server: Apache-Coyote/1.1
Content-Length: 0
Connection: keep-alive
HTTP/1.1 202 Accepted..Date: Tue, 13 May 2014 14:49:56 GMT..P3P: CP="NOI ADM DEV COM NAV OUR STP"..Server: Apache-Coyote/1.1..Content-Length: 0..Connection: keep-alive..
Map
The program connects to the servers at the folowing location(s):
Strings from Dumps
CltMngSvc.exe_2104:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
function not supported
function not supported
operation canceled
operation canceled
address_family_not_supported
address_family_not_supported
operation_in_progress
operation_in_progress
operation_not_supported
operation_not_supported
protocol_not_supported
protocol_not_supported
operation_would_block
operation_would_block
address family not supported
address family not supported
broken pipe
broken pipe
inappropriate io control operation
inappropriate io control operation
not supported
not supported
operation in progress
operation in progress
operation not permitted
operation not permitted
operation not supported
operation not supported
operation would block
operation would block
protocol not supported
protocol not supported
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Operation not permitted
Operation not permitted
Inappropriate I/O control operation
Inappropriate I/O control operation
Broken pipe
Broken pipe
GetProcessWindowStation
GetProcessWindowStation
operator
operator
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Output\Release\bin\CltMngSvc.pdb
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Output\Release\bin\CltMngSvc.pdb
KERNEL32.dll
KERNEL32.dll
RegOpenKeyW
RegOpenKeyW
ReportEventW
ReportEventW
RegCloseKey
RegCloseKey
ADVAPI32.dll
ADVAPI32.dll
SHELL32.dll
SHELL32.dll
SHLWAPI.dll
SHLWAPI.dll
WTSAPI32.dll
WTSAPI32.dll
CryptMsgClose
CryptMsgClose
CertGetNameStringW
CertGetNameStringW
CertFreeCertificateContext
CertFreeCertificateContext
CertFindCertificateInStore
CertFindCertificateInStore
CertCloseStore
CertCloseStore
CryptMsgGetParam
CryptMsgGetParam
CRYPT32.dll
CRYPT32.dll
GetCPInfo
GetCPInfo
GetProcessHeap
GetProcessHeap
zcÁ
zcÁ
%Program Files%\SearchProtect\bin\CltMngSvc.exe
%Program Files%\SearchProtect\bin\CltMngSvc.exe
/1::::0/
/1::::0/
.8:::;::8.
.8:::;::8.
0"8 8<<5
0"8 8<<5
>633,, ,&36>
>633,, ,&36>
ttt.ttt{mnn
ttt.ttt{mnn
ttt.ttttprp
ttt.ttttprp
-----BEGIN PUBLIC KEY-----
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
-----END PUBLIC KEY-----
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
11F1M1S1v1
11F1M1S1v1
0<0\002\2
0<0\002\2
.mscoree.dll
.mscoree.dll
- CRT not initialized
- CRT not initialized
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- floating point support not loaded
- floating point support not loaded
USER32.DLL
USER32.DLL
%s (Error: %d)
%s (Error: %d)
kernel32.dll
kernel32.dll
1.7.0.72
1.7.0.72
All Files (*.*)
All Files (*.*)
No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.
No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.fRecover the auto-saved documents
Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.fRecover the auto-saved documents
%s [Recovered]
%s [Recovered]
cltmng.exe_1196:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
.hp|h
.hp|h
.jlhl
.jlhl
-j}h@
-j}h@
.jQh0
.jQh0
.jLhd
.jLhd
j.Yf;
j.Yf;
_tcPVj@
_tcPVj@
.PjRW
.PjRW
.EKSWU
.EKSWU
\$$;\$0|
\$$;\$0|
DlSHA512 block transform for x86, CRYPTOGAMS by <appro></appro>
DlSHA512 block transform for x86, CRYPTOGAMS by <appro></appro>
Camellia for x86 by <appro></appro>
Camellia for x86 by <appro></appro>
6-9'6-9'
6-9'6-9'
$6.:$6.:
$6.:$6.:
*?#1*?#1
*?#1*?#1
>8$4,8$4,
>8$4,8$4,
AES for x86, CRYPTOGAMS by <appro></appro>
AES for x86, CRYPTOGAMS by <appro></appro>
RC4 for x86, CRYPTOGAMS by <appro></appro>
RC4 for x86, CRYPTOGAMS by <appro></appro>
Montgomery Multiplication for x86, CRYPTOGAMS by <appro></appro>
Montgomery Multiplication for x86, CRYPTOGAMS by <appro></appro>
SHA1 block transform for x86, CRYPTOGAMS by <appro></appro>
SHA1 block transform for x86, CRYPTOGAMS by <appro></appro>
SHA256 block transform for x86, CRYPTOGAMS by <appro></appro>
SHA256 block transform for x86, CRYPTOGAMS by <appro></appro>
FtPS
FtPS
function not supported
function not supported
operation canceled
operation canceled
address_family_not_supported
address_family_not_supported
operation_in_progress
operation_in_progress
operation_not_supported
operation_not_supported
protocol_not_supported
protocol_not_supported
operation_would_block
operation_would_block
address family not supported
address family not supported
broken pipe
broken pipe
inappropriate io control operation
inappropriate io control operation
not supported
not supported
operation in progress
operation in progress
operation not permitted
operation not permitted
operation not supported
operation not supported
operation would block
operation would block
protocol not supported
protocol not supported
%b %d %H : %M : %S %Y
%b %d %H : %M : %S %Y
%m / %d / %y
%m / %d / %y
%I : %M : %S %p
%I : %M : %S %p
%d / %m / %y
%d / %m / %y
0123456789-
0123456789-
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
.\boost/exception/detail/exception_ptr.hpp
.\boost/exception/detail/exception_ptr.hpp
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
GetProcessWindowStation
GetProcessWindowStation
Operation not permitted
Operation not permitted
Inappropriate I/O control operation
Inappropriate I/O control operation
Broken pipe
Broken pipe
operator
operator
RSA part of OpenSSL 1.0.0e 6 Sep 2011
RSA part of OpenSSL 1.0.0e 6 Sep 2011
CERTIFICATE REQUEST
CERTIFICATE REQUEST
NEW CERTIFICATE REQUEST
NEW CERTIFICATE REQUEST
CERTIFICATE
CERTIFICATE
PUBLIC KEY
PUBLIC KEY
SHA-512 part of OpenSSL 1.0.0e 6 Sep 2011
SHA-512 part of OpenSSL 1.0.0e 6 Sep 2011
ssl_sess_cert
ssl_sess_cert
ssl_cert
ssl_cert
evp_pkey
evp_pkey
x509_pkey
x509_pkey
%s(%d): OpenSSL internal error, assertion failed: %s
%s(%d): OpenSSL internal error, assertion failed: %s
passed a null parameter
passed a null parameter
DSO support routines
DSO support routines
x509 certificate routines
x509 certificate routines
error:lX:%s:%s:%s
error:lX:%s:%s:%s
Big Number part of OpenSSL 1.0.0e 6 Sep 2011
Big Number part of OpenSSL 1.0.0e 6 Sep 2011
supportedAlgorithms
supportedAlgorithms
crossCertificatePair
crossCertificatePair
certificateRevocationList
certificateRevocationList
cACertificate
cACertificate
userCertificate
userCertificate
userPassword
userPassword
supportedApplicationContext
supportedApplicationContext
Microsoft Local Key set
Microsoft Local Key set
LocalKeySet
LocalKeySet
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-CryptoPro-KeyMeshing
id-Gost28147-89-CryptoPro-KeyMeshing
password based MAC
password based MAC
id-PasswordBasedMAC
id-PasswordBasedMAC
X509v3 Certificate Issuer
X509v3 Certificate Issuer
certificateIssuer
certificateIssuer
certicom-arc
certicom-arc
Proxy Certificate Information
Proxy Certificate Information
proxyCertInfo
proxyCertInfo
Microsoft Smartcardlogin
Microsoft Smartcardlogin
msSmartcardLogin
msSmartcardLogin
joint-iso-itu-t
joint-iso-itu-t
JOINT-ISO-ITU-T
JOINT-ISO-ITU-T
set-rootKeyThumb
set-rootKeyThumb
setAttr-Cert
setAttr-Cert
setCext-cCertRequired
setCext-cCertRequired
setCext-certType
setCext-certType
setct-CertResTBE
setct-CertResTBE
setct-CertReqTBEX
setct-CertReqTBEX
setct-CertReqTBE
setct-CertReqTBE
setct-AcqCardCodeMsgTBE
setct-AcqCardCodeMsgTBE
setct-CertInqReqTBS
setct-CertInqReqTBS
setct-CertResData
setct-CertResData
setct-CertReqTBS
setct-CertReqTBS
setct-CertReqData
setct-CertReqData
setct-PCertResTBS
setct-PCertResTBS
setct-PCertReqData
setct-PCertReqData
setct-AcqCardCodeMsg
setct-AcqCardCodeMsg
certificate extensions
certificate extensions
set-certExt
set-certExt
set-msgExt
set-msgExt
id-ecPublicKey
id-ecPublicKey
id-cmc-confirmCertAcceptance
id-cmc-confirmCertAcceptance
id-cmc-getCert
id-cmc-getCert
id-regInfo-certReq
id-regInfo-certReq
id-regCtrl-protocolEncrKey
id-regCtrl-protocolEncrKey
id-regCtrl-oldCertID
id-regCtrl-oldCertID
id-it-revPassphrase
id-it-revPassphrase
id-it-keyPairParamRep
id-it-keyPairParamRep
id-it-keyPairParamReq
id-it-keyPairParamReq
id-it-unsupportedOIDs
id-it-unsupportedOIDs
id-it-caKeyUpdateInfo
id-it-caKeyUpdateInfo
id-it-encKeyPairTypes
id-it-encKeyPairTypes
id-it-signKeyPairTypes
id-it-signKeyPairTypes
id-it-caProtEncCert
id-it-caProtEncCert
id-mod-attribute-cert
id-mod-attribute-cert
id-mod-qualified-cert-93
id-mod-qualified-cert-93
id-mod-qualified-cert-88
id-mod-qualified-cert-88
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-certValues
id-smime-aa-ets-certValues
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-otherSigCert
id-smime-aa-ets-otherSigCert
id-smime-aa-smimeEncryptCerts
id-smime-aa-smimeEncryptCerts
id-smime-aa-signingCertificate
id-smime-aa-signingCertificate
id-smime-aa-encrypKeyPref
id-smime-aa-encrypKeyPref
id-smime-aa-msgSigDigest
id-smime-aa-msgSigDigest
id-smime-ct-publishCert
id-smime-ct-publishCert
id-smime-mod-msg-v3
id-smime-mod-msg-v3
sdsiCertificate
sdsiCertificate
x509Certificate
x509Certificate
localKeyID
localKeyID
certBag
certBag
pkcs8ShroudedKeyBag
pkcs8ShroudedKeyBag
keyBag
keyBag
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
TLS Web Client Authentication
TLS Web Client Authentication
TLS Web Server Authentication
TLS Web Server Authentication
X509v3 Extended Key Usage
X509v3 Extended Key Usage
extendedKeyUsage
extendedKeyUsage
X509v3 Authority Key Identifier
X509v3 Authority Key Identifier
authorityKeyIdentifier
authorityKeyIdentifier
X509v3 Certificate Policies
X509v3 Certificate Policies
certificatePolicies
certificatePolicies
X509v3 Private Key Usage Period
X509v3 Private Key Usage Period
privateKeyUsagePeriod
privateKeyUsagePeriod
X509v3 Key Usage
X509v3 Key Usage
keyUsage
keyUsage
X509v3 Subject Key Identifier
X509v3 Subject Key Identifier
subjectKeyIdentifier
subjectKeyIdentifier
Netscape Certificate Sequence
Netscape Certificate Sequence
nsCertSequence
nsCertSequence
Netscape CA Policy Url
Netscape CA Policy Url
nsCaPolicyUrl
nsCaPolicyUrl
Netscape Renewal Url
Netscape Renewal Url
nsRenewalUrl
nsRenewalUrl
Netscape CA Revocation Url
Netscape CA Revocation Url
nsCaRevocationUrl
nsCaRevocationUrl
Netscape Revocation Url
Netscape Revocation Url
nsRevocationUrl
nsRevocationUrl
Netscape Base Url
Netscape Base Url
nsBaseUrl
nsBaseUrl
Netscape Cert Type
Netscape Cert Type
nsCertType
nsCertType
Netscape Certificate Extension
Netscape Certificate Extension
nsCertExt
nsCertExt
extendedCertificateAttributes
extendedCertificateAttributes
challengePassword
challengePassword
dhKeyAgreement
dhKeyAgreement
pubkey
pubkey
PEM part of OpenSSL 1.0.0e 6 Sep 2011
PEM part of OpenSSL 1.0.0e 6 Sep 2011
phrase is too short, needs to be at least %d chars
phrase is too short, needs to be at least %d chars
Enter PEM pass phrase:
Enter PEM pass phrase:
TRUSTED CERTIFICATE
TRUSTED CERTIFICATE
X509 CERTIFICATE
X509 CERTIFICATE
PRIVATE KEY
PRIVATE KEY
ENCRYPTED PRIVATE KEY
ENCRYPTED PRIVATE KEY
ANY PRIVATE KEY
ANY PRIVATE KEY
enc_key
enc_key
key_enc_algor
key_enc_algor
cert
cert
d.encrypted
d.encrypted
d.digest
d.digest
d.signed_and_enveloped
d.signed_and_enveloped
d.enveloped
d.enveloped
d.sign
d.sign
d.data
d.data
d.other
d.other
NETSCAPE_CERT_SEQUENCE
NETSCAPE_CERT_SEQUENCE
certs
certs
X509_PUBKEY
X509_PUBKEY
public_key
public_key
.\crypto\asn1\x_pubkey.c
.\crypto\asn1\x_pubkey.c
DSA part of OpenSSL 1.0.0e 6 Sep 2011
DSA part of OpenSSL 1.0.0e 6 Sep 2011
priv_key
priv_key
pub_key
pub_key
.\crypto\ec\ec_key.c
.\crypto\ec\ec_key.c
EC_PRIVATEKEY
EC_PRIVATEKEY
publicKey
publicKey
privateKey
privateKey
value.implicitlyCA
value.implicitlyCA
value.parameters
value.parameters
value.named_curve
value.named_curve
p.char_two
p.char_two
p.prime
p.prime
p.ppBasis
p.ppBasis
p.tpBasis
p.tpBasis
p.onBasis
p.onBasis
p.other
p.other
?456789:;<=
?456789:;<=
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
%'%1%=%C%K%O%s%
%'%1%=%C%K%O%s%
.%.-.3.7.9.?.W.[.o.y.
.%.-.3.7.9.?.W.[.o.y.
C%C'C3C7C9COCWCiC
C%C'C3C7C9COCWCiC
ERAND part of OpenSSL 1.0.0e 6 Sep 2011
ERAND part of OpenSSL 1.0.0e 6 Sep 2011
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
lhash part of OpenSSL 1.0.0e 6 Sep 2011
lhash part of OpenSSL 1.0.0e 6 Sep 2011
Stack part of OpenSSL 1.0.0e 6 Sep 2011
Stack part of OpenSSL 1.0.0e 6 Sep 2011
Diffie-Hellman part of OpenSSL 1.0.0e 6 Sep 2011
Diffie-Hellman part of OpenSSL 1.0.0e 6 Sep 2011
value.single
value.single
value.set
value.set
ASN.1 part of OpenSSL 1.0.0e 6 Sep 2011
ASN.1 part of OpenSSL 1.0.0e 6 Sep 2011
.\crypto\evp\evp_key.c
.\crypto\evp\evp_key.c
nkey <= EVP_MAX_KEY_LENGTH
nkey <= EVP_MAX_KEY_LENGTH
EVP part of OpenSSL 1.0.0e 6 Sep 2011
EVP part of OpenSSL 1.0.0e 6 Sep 2011
name.relativename
name.relativename
name.fullname
name.fullname
certificateHold
certificateHold
Certificate Hold
Certificate Hold
cessationOfOperation
cessationOfOperation
Cessation Of Operation
Cessation Of Operation
keyCompromise
keyCompromise
Key Compromise
Key Compromise
%*s%s:
%*s%s:
%*sOnly Attribute Certificates
%*sOnly Attribute Certificates
%*sOnly CA Certificates
%*sOnly CA Certificates
%*sOnly User Certificates
%*sOnly User Certificates
d.registeredID
d.registeredID
d.iPAddress
d.iPAddress
d.uniformResourceIdentifier
d.uniformResourceIdentifier
d.ediPartyName
d.ediPartyName
d.directoryName
d.directoryName
d.dNSName
d.dNSName
d.rfc822Name
d.rfc822Name
d.otherName
d.otherName
AUTHORITY_KEYID
AUTHORITY_KEYID
keyid
keyid
cert_info
cert_info
PKCS8_PRIV_KEY_INFO
PKCS8_PRIV_KEY_INFO
pkey
pkey
pkeyalg
pkeyalg
EC part of OpenSSL 1.0.0e 6 Sep 2011
EC part of OpenSSL 1.0.0e 6 Sep 2011
USER32.DLL
USER32.DLL
NETAPI32.DLL
NETAPI32.DLL
KERNEL32.DLL
KERNEL32.DLL
ADVAPI32.DLL
ADVAPI32.DLL
SHA1 part of OpenSSL 1.0.0e 6 Sep 2011
SHA1 part of OpenSSL 1.0.0e 6 Sep 2011
SHA-256 part of OpenSSL 1.0.0e 6 Sep 2011
SHA-256 part of OpenSSL 1.0.0e 6 Sep 2011
RIPE-MD160 part of OpenSSL 1.0.0e 6 Sep 2011
RIPE-MD160 part of OpenSSL 1.0.0e 6 Sep 2011
SHA part of OpenSSL 1.0.0e 6 Sep 2011
SHA part of OpenSSL 1.0.0e 6 Sep 2011
MD5 part of OpenSSL 1.0.0e 6 Sep 2011
MD5 part of OpenSSL 1.0.0e 6 Sep 2011
MD4 part of OpenSSL 1.0.0e 6 Sep 2011
MD4 part of OpenSSL 1.0.0e 6 Sep 2011
CAST part of OpenSSL 1.0.0e 6 Sep 2011
CAST part of OpenSSL 1.0.0e 6 Sep 2011
Blowfish part of OpenSSL 1.0.0e 6 Sep 2011
Blowfish part of OpenSSL 1.0.0e 6 Sep 2011
:RC2 part of OpenSSL 1.0.0e 6 Sep 2011
:RC2 part of OpenSSL 1.0.0e 6 Sep 2011
.pp@0
.pp@0
aEÐ
aEÐ
(#EÚ
(#EÚ
ÚE<<0
ÚE<<0
IDEA part of OpenSSL 1.0.0e 6 Sep 2011
IDEA part of OpenSSL 1.0.0e 6 Sep 2011
libdes part of OpenSSL 1.0.0e 6 Sep 2011
libdes part of OpenSSL 1.0.0e 6 Sep 2011
DES part of OpenSSL 1.0.0e 6 Sep 2011
DES part of OpenSSL 1.0.0e 6 Sep 2011
.\crypto\dh\dh_key.c
.\crypto\dh\dh_key.c
%s: (%d bit)
%s: (%d bit)
Public-Key
Public-Key
Private-Key
Private-Key
recommended-private-length: %d bits
recommended-private-length: %d bits
public-key:
public-key:
private-key:
private-key:
PKCS#3 DH Public-Key
PKCS#3 DH Public-Key
PKCS#3 DH Private-Key
PKCS#3 DH Private-Key
Public-Key: (%d bit)
Public-Key: (%d bit)
Private-Key: (%d bit)
Private-Key: (%d bit)
keylen <= sizeof key
keylen <= sizeof key
EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)
EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)
\X
\X
ddddddZ
ddddddZ
ddddddZ
ddddddZ
%d.%d.%d.%d
%d.%d.%d.%d
<unsupported></unsupported>
<unsupported></unsupported>
IP Address:%d.%d.%d.%d
IP Address:%d.%d.%d.%d
URI:%s
URI:%s
DNS:%s
DNS:%s
email:%s
email:%s
EdiPartyName:<unsupported></unsupported>
EdiPartyName:<unsupported></unsupported>
X400Name:<unsupported></unsupported>
X400Name:<unsupported></unsupported>
othername:<unsupported></unsupported>
othername:<unsupported></unsupported>
%d.%d.%d.%d/%d.%d.%d.%d
%d.%d.%d.%d/%d.%d.%d.%d
X509_CERT_PAIR
X509_CERT_PAIR
X509_CERT_AUX
X509_CERT_AUX
X.509 part of OpenSSL 1.0.0e 6 Sep 2011
X.509 part of OpenSSL 1.0.0e 6 Sep 2011
x%s
x%s
%s - d:d:d%.*s %d%s
%s - d:d:d%.*s %d%s
3ECDSA part of OpenSSL 1.0.0e 6 Sep 2011
3ECDSA part of OpenSSL 1.0.0e 6 Sep 2011
Basis Type: %s
Basis Type: %s
Field Type: %s
Field Type: %s
ASN1 OID: %s
ASN1 OID: %s
%s %s%lu (%s0x%lx)
%s %s%lu (%s0x%lx)
len>=0 && len<=(int)sizeof(ctx->key)
len>=0 && len<=(int)sizeof(ctx->key)
j <= (int)sizeof(ctx->key)
j <= (int)sizeof(ctx->key)
keylength
keylength
keyfunc
keyfunc
.\crypto\pkcs12\p12_key.c
.\crypto\pkcs12\p12_key.c
'() ,-./:=?
'() ,-./:=?
%lu:%s:%s:%d:%s
%lu:%s:%s:%d:%s
Verifying - %s
Verifying - %s
%*sPolicy Text: %s
%*sPolicy Text: %s
%*scrlUrl:
%*scrlUrl:
EXTENDED_KEY_USAGE
EXTENDED_KEY_USAGE
%*sZone: %s, User:
%*sZone: %s, User:
.\crypto\x509v3\v3_akey.c
.\crypto\x509v3\v3_akey.c
d.usernotice
d.usernotice
d.cpsuri
d.cpsuri
CERTIFICATEPOLICIES
CERTIFICATEPOLICIES
%*sExplicit Text: %s
%*sExplicit Text: %s
%*sNumber%s:
%*sNumber%s:
%*sOrganization: %s
%*sOrganization: %s
%*sCPS: %s
%*sCPS: %s
PKEY_USAGE_PERIOD
PKEY_USAGE_PERIOD
keyCertSign
keyCertSign
Certificate Sign
Certificate Sign
keyAgreement
keyAgreement
Key Agreement
Key Agreement
keyEncipherment
keyEncipherment
Key Encipherment
Key Encipherment
.\crypto\x509v3\v3_skey.c
.\crypto\x509v3\v3_skey.c
CONF part of OpenSSL 1.0.0e 6 Sep 2011
CONF part of OpenSSL 1.0.0e 6 Sep 2011
PROXY_CERT_INFO_EXTENSION
PROXY_CERT_INFO_EXTENSION
hexkey
hexkey
rsa_keygen_pubexp
rsa_keygen_pubexp
rsa_keygen_bits
rsa_keygen_bits
d.receiptList
d.receiptList
d.allOrFirstTier
d.allOrFirstTier
d.compressedData
d.compressedData
d.authenticatedData
d.authenticatedData
d.encryptedData
d.encryptedData
d.digestedData
d.digestedData
d.envelopedData
d.envelopedData
d.signedData
d.signedData
d.ori
d.ori
d.pwri
d.pwri
d.kekri
d.kekri
d.kari
d.kari
d.ktri
d.ktri
CMS_PasswordRecipientInfo
CMS_PasswordRecipientInfo
keyDerivationAlgorithm
keyDerivationAlgorithm
keyIdentifier
keyIdentifier
CMS_KeyAgreeRecipientInfo
CMS_KeyAgreeRecipientInfo
recipientEncryptedKeys
recipientEncryptedKeys
CMS_OriginatorIdentifierOrKey
CMS_OriginatorIdentifierOrKey
d.originatorKey
d.originatorKey
CMS_OriginatorPublicKey
CMS_OriginatorPublicKey
CMS_RecipientEncryptedKey
CMS_RecipientEncryptedKey
CMS_KeyAgreeRecipientIdentifier
CMS_KeyAgreeRecipientIdentifier
d.rKeyId
d.rKeyId
CMS_RecipientKeyIdentifier
CMS_RecipientKeyIdentifier
CMS_OtherKeyAttribute
CMS_OtherKeyAttribute
keyAttr
keyAttr
keyAttrId
keyAttrId
CMS_KeyTransRecipientInfo
CMS_KeyTransRecipientInfo
encryptedKey
encryptedKey
keyEncryptionAlgorithm
keyEncryptionAlgorithm
certificates
certificates
d.crl
d.crl
d.subjectKeyIdentifier
d.subjectKeyIdentifier
d.issuerAndSerialNumber
d.issuerAndSerialNumber
CMS_CertificateChoices
CMS_CertificateChoices
d.v2AttrCert
d.v2AttrCert
d.v1AttrCert
d.v1AttrCert
d.extendedCertificate
d.extendedCertificate
d.certificate
d.certificate
CMS_OtherCertificateFormat
CMS_OtherCertificateFormat
otherCert
otherCert
otherCertFormat
otherCertFormat
crlUrl
crlUrl
certStatus
certStatus
certId
certId
OCSP_CERTSTATUS
OCSP_CERTSTATUS
value.unknown
value.unknown
value.revoked
value.revoked
value.good
value.good
value.byKey
value.byKey
value.byName
value.byName
reqCert
reqCert
OCSP_CERTID
OCSP_CERTID
issuerKeyHash
issuerKeyHash
CONF_def part of OpenSSL 1.0.0e 6 Sep 2011
CONF_def part of OpenSSL 1.0.0e 6 Sep 2011
[[%s]]
[[%s]]
[%s] %s=%s
[%s] %s=%s
value.bag
value.bag
value.safes
value.safes
value.shkeybag
value.shkeybag
value.keybag
value.keybag
value.sdsicert
value.sdsicert
value.x509cert
value.x509cert
value.other
value.other
ECDH part of OpenSSL 1.0.0e 6 Sep 2011
ECDH part of OpenSSL 1.0.0e 6 Sep 2011
%s.dll
%s.dll
Main.cpp
Main.cpp
14:55:56
14:55:56
P%d_T%d_Dld_ld_ld_Tld_ld_ld
P%d_T%d_Dld_ld_ld_Tld_ld_ld
- inflate 1.1.3 Copyright 1995-1998 Mark Adler
- inflate 1.1.3 Copyright 1995-1998 Mark Adler
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\FileHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\FileHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\Logger\Log4cxxWrapper.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\Logger\Log4cxxWrapper.cpp
\StringFileInfo\xx\%s
\StringFileInfo\xx\%s
%d/%d/%d d:d:d
%d/%d/%d d:d:d
Module %d
Module %d
Image Base: 0xx Image Size: 0xx
Image Base: 0xx Image Size: 0xx
Checksum: 0xx Time Stamp: 0xx
Checksum: 0xx Time Stamp: 0xx
File Size: %-10d File Time: %s
File Size: %-10d File Time: %s
Company: %s
Company: %s
Product: %s
Product: %s
FileDesc: %s
FileDesc: %s
FileVer: %d.%d.%d.%d
FileVer: %d.%d.%d.%d
ProdVer: %d.%d.%d.%d
ProdVer: %d.%d.%d.%d
kernel32.dll
kernel32.dll
Windows Vista
Windows Vista
Windows Server 2008
Windows Server 2008
Windows 7
Windows 7
Windows Server 2008 R2
Windows Server 2008 R2
Windows 8
Windows 8
Windows Server 2012
Windows Server 2012
Windows 9
Windows 9
Windows Server 9
Windows Server 9
Web Server Edition
Web Server Edition
Windows Server 2003 R2
Windows Server 2003 R2
Windows Storage Server 2003
Windows Storage Server 2003
Windows Home Server
Windows Home Server
Windows XP Professional x64 Edition
Windows XP Professional x64 Edition
Windows Server 2003
Windows Server 2003
Web Edition
Web Edition
Windows XP
Windows XP
Windows 2000
Windows 2000
(build %d)
(build %d)
This sample does not support this version of Windows.
This sample does not support this version of Windows.
Error occurred at %s.
Error occurred at %s.
Operating system: %s
Operating system: %s
Operating system: Could not Determine
Operating system: Could not Determine
%d processor(s), type %d.
%d processor(s), type %d.
%d%% memory in use.
%d%% memory in use.
%d MBytes physical memory.
%d MBytes physical memory.
%d MBytes physical memory free.
%d MBytes physical memory free.
%d MBytes paging file.
%d MBytes paging file.
%d MBytes paging file free.
%d MBytes paging file free.
%d MBytes user address space.
%d MBytes user address space.
%d MBytes user address space free.
%d MBytes user address space free.
a Float Denormal Operand
a Float Denormal Operand
a Float Invalid Operation
a Float Invalid Operation
0xx:
0xx:
EDI: 0xx ESI: 0xx EAX: 0xx
EDI: 0xx ESI: 0xx EAX: 0xx
EBX: 0xx ECX: 0xx EDX: 0xx
EBX: 0xx ECX: 0xx EDX: 0xx
EIP: 0xx EBP: 0xx SegCs: 0xx
EIP: 0xx EBP: 0xx SegCs: 0xx
EFlags: 0xx ESP: 0xx SegSs: 0xx
EFlags: 0xx ESP: 0xx SegSs: 0xx
%s\CRASH_REPORT_%s.txt
%s\CRASH_REPORT_%s.txt
%s caused %s (0xx)
%s caused %s (0xx)
in module %s at x:x.
in module %s at x:x.
%s location x caused an access violation.
%s location x caused an access violation.
===== [end of %s] =====
===== [end of %s] =====
%s\CRASH_DUMP_%s.dmp
%s\CRASH_DUMP_%s.dmp
Exception code is 0xX
Exception code is 0xX
Crash dump file: %s
Crash dump file: %s
Crash report file :%s
Crash report file :%s
Error creating dump file, err=%d
Error creating dump file, err=%d
WM_CTLCOLORMSGBOX
WM_CTLCOLORMSGBOX
WM_VKEYTOITEM
WM_VKEYTOITEM
WM_KEYDOWN
WM_KEYDOWN
WM_KEYUP
WM_KEYUP
WM_SYSKEYDOWN
WM_SYSKEYDOWN
WM_SYSKEYUP
WM_SYSKEYUP
WM_KEYLAST
WM_KEYLAST
WM_DDE_EXECUTE
WM_DDE_EXECUTE
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\Utils.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\Utils.cpp
Utils::GetHttpHeaderData
Utils::GetHttpHeaderData
Windows Vista
Windows Vista
Windows Server 2008
Windows Server 2008
Windows 7
Windows 7
Windows Server 2008 R2
Windows Server 2008 R2
Windows 8
Windows 8
Windows Server 2012
Windows Server 2012
Windows 9
Windows 9
Windows Server 9
Windows Server 9
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\PingSender.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\PingSender.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\ServiceManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\ServiceManager.cpp
ServiceManager_::GetDefaultServiceMapUrl
ServiceManager_::GetDefaultServiceMapUrl
ServiceManager_::SetServiceMapUrl
ServiceManager_::SetServiceMapUrl
ServiceManager_::SetServiceMapUrlToSettings
ServiceManager_::SetServiceMapUrlToSettings
ServiceManager_::HttpAsyncCallBack
ServiceManager_::HttpAsyncCallBack
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\SelfProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\SelfProtector.cpp
key path:
key path:
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\DialogsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\DialogsManager.cpp
DialogsManager_::HandleDialogInvokeSync
DialogsManager_::HandleDialogInvokeSync
Navigation URL=
Navigation URL=
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\BrowserManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\BrowserManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\ToolbarManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\ToolbarManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\SettingsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\SettingsManager.cpp
SettingsManager_::ParseKeyValueSettings
SettingsManager_::ParseKeyValueSettings
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\SearchProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\SearchProtector.cpp
SearchProtector_::InitLoginService
SearchProtector_::InitLoginService
SearchProtector_::GetAppDataExePath
SearchProtector_::GetAppDataExePath
the value the Arg has been passed.
the value the Arg has been passed.
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\CommandLineHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\CommandLineHandler.cpp
(1 , 7 , 0 , 72)
(1 , 7 , 0 , 72)
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\TranslationManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\TranslationManager.cpp
TranslationManager_::GetServiceUrl
TranslationManager_::GetServiceUrl
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\TimerBasedServiceHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\TimerBasedServiceHandler.cpp
TimerBasedServiceHandler::HttpAsyncCallBack
TimerBasedServiceHandler::HttpAsyncCallBack
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\ServiceHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Services\ServiceHandler.cpp
ServiceHandler::HttpAsyncCallBack
ServiceHandler::HttpAsyncCallBack
ServiceHandler::GetServiceUrl
ServiceHandler::GetServiceUrl
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AliasManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AliasManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\RegistryProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\RegistryProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\ProtectorBase.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\ProtectorBase.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\FilesProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SelfProtector\FilesProtector.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\DialogBase.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\DialogBase.cpp
DialogBase::CompetitorURL
DialogBase::CompetitorURL
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\SettingsDialog.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Dialogs\SettingsDialog.cpp
SettingsDialog::GetNavigationURL
SettingsDialog::GetNavigationURL
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\AssetHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\AssetHandler.cpp
, using default url :
, using default url :
, using url as is
, using url as is
AssetHandler::UpdateUrlParams
AssetHandler::UpdateUrlParams
AssetHandler::MergeSearchUrlParameters
AssetHandler::MergeSearchUrlParameters
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\ModuleSettingsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\ModuleSettingsManager.cpp
ModuleSettingsManager::GetAssetUrl
ModuleSettingsManager::GetAssetUrl
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\UsageManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\UsageManager.cpp
UsageManager_::FlushReportsQueue
UsageManager_::FlushReportsQueue
UsageManager_::FlushReport
UsageManager_::FlushReport
UsageManager_::EnqueueReport
UsageManager_::EnqueueReport
ErrorManager_::ReportError
ErrorManager_::ReportError
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\ErrorManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\ErrorManager.cpp
ErrorManager_::ReportErrors
ErrorManager_::ReportErrors
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SearchAssetsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\SearchAssetsManager.cpp
SearchAssetsManager_::GetCtidAssetUrl
SearchAssetsManager_::GetCtidAssetUrl
SearchAssetsManager_::GetCurrentAssetUrl
SearchAssetsManager_::GetCurrentAssetUrl
SearchAssetsManager_::SetUrlByCtidAndAsset
SearchAssetsManager_::SetUrlByCtidAndAsset
SearchAssetsManager_::GetUrlByCtidAndAsset
SearchAssetsManager_::GetUrlByCtidAndAsset
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\TakeoverUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\TakeoverUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\InitData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\InitData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlerClassFactory.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlerClassFactory.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\FinishInstallHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Main\FinishInstallHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\BrowserUserCtid.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\BrowserUserCtid.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\RepositoryManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\RepositoryManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\InitDataManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\InitDataManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\ServerSettingsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Settings\ServerSettingsManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\UninstallManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\UninstallManager.cpp
UninstallManager::RemoveSelfFromPendingFileRenameOperations
UninstallManager::RemoveSelfFromPendingFileRenameOperations
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\LoginManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\LoginManager.cpp
LoginManager::~LoginManager
LoginManager::~LoginManager
LoginManager::LoginManager
LoginManager::LoginManager
LoginManager::RequestService
LoginManager::RequestService
LoginManager::CreateInitialJson
LoginManager::CreateInitialJson
LoginManager::GetBrowserSpecificData
LoginManager::GetBrowserSpecificData
LoginManager::GetInstalledCompetitors
LoginManager::GetInstalledCompetitors
LoginManager::ReqestServiceByBrowser
LoginManager::ReqestServiceByBrowser
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AutoUpdateManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AutoUpdateManager.cpp
ShellExecute error
ShellExecute error
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\ProtectionUserChangedAssetUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\ProtectionUserChangedAssetUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\ProtectionUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\ProtectionUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\UsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\UsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\BrowserSpecificUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\BrowserSpecificUsageData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\FFAssetHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\FFAssetHandler.cpp
FFAssetHandler::UpdateUrlParams
FFAssetHandler::UpdateUrlParams
FFAssetHandler::GetRevertSettingsRegKeyByOS
FFAssetHandler::GetRevertSettingsRegKeyByOS
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\IEAssetHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\AssetHandlers\IEAssetHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\FunnelDataManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\SearchProtectorLibrary\Usages\FunnelDataManager.cpp
FunnelDataManager_::ReportFunnelData
FunnelDataManager_::ReportFunnelData
FunnelDataManager_::CreateInitialReportJson
FunnelDataManager_::CreateInitialReportJson
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\RegistryHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\RegistryHandler.cpp
RegistryHandler::CreateKey
RegistryHandler::CreateKey
RegistryHandler::GetKey
RegistryHandler::GetKey
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\HTTP\HTTPManager.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\HTTP\HTTPManager.cpp
Conduit::SearchProtector::Utils::HTTPManager::AsyncThreadProc
Conduit::SearchProtector::Utils::HTTPManager::AsyncThreadProc
Conduit::SearchProtector::Utils::HTTPManager::AsyncThreadProc_
Conduit::SearchProtector::Utils::HTTPManager::AsyncThreadProc_
Conduit::SearchProtector::Utils::HTTPManager::AsyncDownloadThreadProc
Conduit::SearchProtector::Utils::HTTPManager::AsyncDownloadThreadProc
Conduit::SearchProtector::Utils::HTTPManager::RequestAsync
Conduit::SearchProtector::Utils::HTTPManager::RequestAsync
Conduit::SearchProtector::Utils::HTTPManager::CheckInternetConnection
Conduit::SearchProtector::Utils::HTTPManager::CheckInternetConnection
Conduit::SearchProtector::Utils::HTTPManager::DownloadFileAsync
Conduit::SearchProtector::Utils::HTTPManager::DownloadFileAsync
Conduit::SearchProtector::Utils::HTTPManager::AsyncDownloadThreadProc_
Conduit::SearchProtector::Utils::HTTPManager::AsyncDownloadThreadProc_
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\TimerWindow.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\TimerWindow.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\DataChangeNotifier.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\DataChangeNotifier.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\CompressionHandler.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\CompressionHandler.cpp
Content-Disposition: form-data; name="%s"; filename="%s"
Content-Disposition: form-data; name="%s"; filename="%s"
Content-Disposition: form-data; name="%s"
Content-Disposition: form-data; name="%s"
https
https
HTTP/1.0
HTTP/1.0
https://
https://
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
http://
http://
Content-Length: %u
Content-Length: %u
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\BrowserModule.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\BrowserModule.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\UsersProfileData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\UsersProfileData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\UserBrowserAsset.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\UserBrowserAsset.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\ToolbarSettings.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\ToolbarSettings.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Events\Event.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Events\Event.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\SearchAssetData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\SearchAssetData.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\BrowserAsset.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\Data\BrowserAsset.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\ModuleAction.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\BaseModule\ModuleAction.cpp
nWebBrowserContainer::WebBrowserContainer
nWebBrowserContainer::WebBrowserContainer
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserContainer.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserContainer.cpp
WebBrowserContainer::~WebBrowserContainer
WebBrowserContainer::~WebBrowserContainer
WebBrowserContainer::Initialize
WebBrowserContainer::Initialize
WebBrowserContainer::CreateExternal
WebBrowserContainer::CreateExternal
WebBrowserContainer::Navigate
WebBrowserContainer::Navigate
Failed Navigate bsUrl=
Failed Navigate bsUrl=
WebBrowserContainer::InitContainer
WebBrowserContainer::InitContainer
Calling Navigate bsUrl=
Calling Navigate bsUrl=
WebBrowserContainer::Finalize
WebBrowserContainer::Finalize
WebBrowserContainer::SetLocation
WebBrowserContainer::SetLocation
WebBrowserContainer::AddBehaviorToBodyElement
WebBrowserContainer::AddBehaviorToBodyElement
WebBrowserContainer::SetVisible
WebBrowserContainer::SetVisible
WebBrowserContainer::OnBeforeNavigate
WebBrowserContainer::OnBeforeNavigate
WebBrowserContainer::OnDocumentComplete
WebBrowserContainer::OnDocumentComplete
WebBrowserContainer::GetWindowContext
WebBrowserContainer::GetWindowContext
WebBrowserContainer::InjectJs
WebBrowserContainer::InjectJs
WebBrowserContainer::OnNavigateComplete
WebBrowserContainer::OnNavigateComplete
WebBrowserContainer::OnNavigateError
WebBrowserContainer::OnNavigateError
WebBrowserContainer::HasFocusIO
WebBrowserContainer::HasFocusIO
WebBrowserContainer::TranslateAcceleratorIO
WebBrowserContainer::TranslateAcceleratorIO
WebBrowserContainer::OnRefresh
WebBrowserContainer::OnRefresh
WebBrowserContainer::OnFocus
WebBrowserContainer::OnFocus
WebBrowserContainer::UIActivateIO
WebBrowserContainer::UIActivateIO
WebBrowserContainer::OnSize
WebBrowserContainer::OnSize
WebBrowserContainer::OnRefreshComplete
WebBrowserContainer::OnRefreshComplete
WebBrowserContainer::FocusChange
WebBrowserContainer::FocusChange
WebBrowserContainer::SetAlphaColorKey
WebBrowserContainer::SetAlphaColorKey
, m_pWebBrowser =
, m_pWebBrowser =
WebBrowserContainer::SetDragAndDropFiles
WebBrowserContainer::SetDragAndDropFiles
WebBrowserContainer::SetMainToolbarBrowserTransparent
WebBrowserContainer::SetMainToolbarBrowserTransparent
WebBrowserContainer::InvokeSync
WebBrowserContainer::InvokeSync
WebBrowserContainer::InvokeASync
WebBrowserContainer::InvokeASync
WebBrowserContainer::SetInvokeSyncCallback
WebBrowserContainer::SetInvokeSyncCallback
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserDefs.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserDefs.cpp
WebBrowserExternal::~WebBrowserExternal
WebBrowserExternal::~WebBrowserExternal
WebBrowserExternal::Invoke
WebBrowserExternal::Invoke
WebBrowserExternal::OnApiWriteDebugString
WebBrowserExternal::OnApiWriteDebugString
WebBrowserExternal::WebBrowserExternal
WebBrowserExternal::WebBrowserExternal
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserExternal.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserExternal.cpp
WebBrowserExternal::GetDispatch
WebBrowserExternal::GetDispatch
WebBrowserExternal::GenerateFunctionsAndDISPIDs
WebBrowserExternal::GenerateFunctionsAndDISPIDs
WebBrowserExternal::GetTypeInfo
WebBrowserExternal::GetTypeInfo
WebBrowserExternal::GetTypeInfoCount
WebBrowserExternal::GetTypeInfoCount
WebWindow::WindowProc_
WebWindow::WindowProc_
WebWindow::WebWindow
WebWindow::WebWindow
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebWindow.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebWindow.cpp
WebWindow::~WebWindow
WebWindow::~WebWindow
WebWindow::OnKillFocus
WebWindow::OnKillFocus
WebWindow::OnSetFocus
WebWindow::OnSetFocus
WebWindow::Show
WebWindow::Show
WebWindow::Create
WebWindow::Create
WebWindow::GetClientRect
WebWindow::GetClientRect
WebWindow::GetWindowRect
WebWindow::GetWindowRect
WebWindow::OnEraseBackground
WebWindow::OnEraseBackground
WebWindow::SetAlphaColorKey
WebWindow::SetAlphaColorKey
CWebBrowserFocusWnd::~CWebBrowserFocusWnd
CWebBrowserFocusWnd::~CWebBrowserFocusWnd
CWebBrowserFocusWnd::CWebBrowserFocusWnd
CWebBrowserFocusWnd::CWebBrowserFocusWnd
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserFocusWnd.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserFocusWnd.cpp
WebBrowserDispatcher::~WebBrowserDispatcher
WebBrowserDispatcher::~WebBrowserDispatcher
WebBrowserDispatcher::InitGIT
WebBrowserDispatcher::InitGIT
WebBrowserDispatcher::WebBrowserDispatcher
WebBrowserDispatcher::WebBrowserDispatcher
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserDispatcher.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\DialogsLibrary\WebBrowserDispatcher.cpp
WebBrowserDispatcher::GetIDsOfNames
WebBrowserDispatcher::GetIDsOfNames
WebBrowserDispatcher::GetDocumentInterface
WebBrowserDispatcher::GetDocumentInterface
WebBrowserDispatcher::DisconnectAllHtmlEvents
WebBrowserDispatcher::DisconnectAllHtmlEvents
WebBrowserDispatcher::ConnectEvents
WebBrowserDispatcher::ConnectEvents
WebBrowserDispatcher::DisconnectEvents
WebBrowserDispatcher::DisconnectEvents
WebBrowserDispatcher::Invoke
WebBrowserDispatcher::Invoke
WebBrowserDispatcher::OnNavigateError
WebBrowserDispatcher::OnNavigateError
WebBrowserDispatcher::OnWindowStateChanged
WebBrowserDispatcher::OnWindowStateChanged
WebBrowserDispatcher::OnDocumentComplete
WebBrowserDispatcher::OnDocumentComplete
WebBrowserDispatcher::OnBeforeNavigate
WebBrowserDispatcher::OnBeforeNavigate
WebBrowserDispatcher::OnNavigateComplete
WebBrowserDispatcher::OnNavigateComplete
WebBrowserDispatcher::OnDownloadComplete
WebBrowserDispatcher::OnDownloadComplete
WebBrowserDispatcher::OnDownloadBegin
WebBrowserDispatcher::OnDownloadBegin
WebBrowserDispatcher::OnWindowClosing
WebBrowserDispatcher::OnWindowClosing
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\BaseWnd.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Utils\BaseWnd.cpp
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Output\Release\bin\cltmng.pdb
D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\SearchProtector\Dev\1.7.0\Output\Release\bin\cltmng.pdb
SetProcessShutdownParameters
SetProcessShutdownParameters
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
SHLWAPI.dll
SHLWAPI.dll
VERSION.dll
VERSION.dll
PSAPI.DLL
PSAPI.DLL
dbghelp.dll
dbghelp.dll
CryptMsgClose
CryptMsgClose
CertGetNameStringW
CertGetNameStringW
CertFreeCertificateContext
CertFreeCertificateContext
CertFindCertificateInStore
CertFindCertificateInStore
CertCloseStore
CertCloseStore
CryptMsgGetParam
CryptMsgGetParam
CRYPT32.dll
CRYPT32.dll
CreateIoCompletionPort
CreateIoCompletionPort
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GDI32.dll
GDI32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
UrlUnescapeW
UrlUnescapeW
InternetCrackUrlW
InternetCrackUrlW
HttpQueryInfoA
HttpQueryInfoA
HttpSendRequestExW
HttpSendRequestExW
HttpSendRequestW
HttpSendRequestW
HttpOpenRequestA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestA
HttpEndRequestW
HttpEndRequestW
WININET.dll
WININET.dll
RegCreateKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegNotifyChangeKeyValue
ReportEventA
ReportEventA
COMCTL32.dll
COMCTL32.dll
zcÁ
zcÁ
.?AVwindows_file_codecvt@@
.?AVwindows_file_codecvt@@
.?AVIHttpAsyncCallback@Utils@SearchProtector@Conduit@@
.?AVIHttpAsyncCallback@Utils@SearchProtector@Conduit@@
.PA_W
.PA_W
.?AV?$thread_data@V?$bind_t@XV?$BindThis2@_NVDialogsManager_@@PAVIWebBrowserContainer@@PAUtagDISPPARAMS@@@@V?$list2@V?$value@PAVIWebBrowserContainer@@@_bi@boost@@V?$value@PAUtagDISPPARAMS@@@23@@_bi@boost@@@_bi@boost@@@detail@boost@@
.?AV?$thread_data@V?$bind_t@XV?$BindThis2@_NVDialogsManager_@@PAVIWebBrowserContainer@@PAUtagDISPPARAMS@@@@V?$list2@V?$value@PAVIWebBrowserContainer@@@_bi@boost@@V?$value@PAUtagDISPPARAMS@@@23@@_bi@boost@@@_bi@boost@@@detail@boost@@
.?AV?$sp_counted_impl_p@VLoginManager@@@detail@boost@@
.?AV?$sp_counted_impl_p@VLoginManager@@@detail@boost@@
.?AVCmdLineInterface@TCLAP@@
.?AVCmdLineInterface@TCLAP@@
.?AVCmdLineParseException@TCLAP@@
.?AVCmdLineParseException@TCLAP@@
.?AVCmdLineOutput@TCLAP@@
.?AVCmdLineOutput@TCLAP@@
.?AVCmdLine@TCLAP@@
.?AVCmdLine@TCLAP@@
.?AVLoginManager@@
.?AVLoginManager@@
.?AVIWebBrowserContainer@@
.?AVIWebBrowserContainer@@
.?AVWebBrowserDispatcher@@
.?AVWebBrowserDispatcher@@
.?AVWebBrowserContainer@@
.?AVWebBrowserContainer@@
.?AVWebWindow@@
.?AVWebWindow@@
.?AVWebBrowserExternal@@
.?AVWebBrowserExternal@@
.?AVCWebBrowserFocusWnd@@
.?AVCWebBrowserFocusWnd@@
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\
%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\
/1::::0/
/1::::0/
.8:::;::8.
.8:::;::8.
0"8 8<<5
0"8 8<<5
>633,, ,&36>
>633,, ,&36>
ttt.ttt{mnn
ttt.ttt{mnn
ttt.ttttprp
ttt.ttttprp
-----BEGIN PUBLIC KEY-----
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
-----END PUBLIC KEY-----
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<&< <:<?<</pre><pre>1 353)535=5</pre><pre>;(<4<9<><</pre><pre>4'4,4;4@4</pre><pre>: :-:::?:</pre><pre>3 34393</pre><pre>< </<4<}<</pre><pre>3 3-3:3?3</pre><pre>=%=*=9=>=</pre><pre>2(2F2j2x2</pre><pre>5 5-5:5?5</pre><pre>7 7:7?7}7</pre><pre>0%0*090>0</pre><pre>?#?(?7?<?</pre><pre><#<(<7<<<~<</pre><pre>;!;.;;;@;</pre><pre>5 5%5u5</pre><pre>0 0-0:0?0</pre><pre>; ;%;4;9;</pre><pre>?!?0?5?~?</pre><pre>=#=(=7=<=</pre><pre>0!0.0;0@0</pre><pre>= =%=4=9=|=</pre><pre>3 3%3-3{3</pre><pre>2!20252~2</pre><pre>? ?%?4?9?|?</pre><pre>0&0 0:0?0</pre><pre>7$7)787=7</pre><pre>3"3'363;3</pre><pre>0 0090|0</pre><pre>6 808n8s8 9œ9h9</pre><pre>7%7*797>7</pre><pre>7"7'767;7~7</pre><pre><$<)<8<=<</pre><pre>9&9 9:9?9</pre><pre>>!>.>;>@></pre><pre>333F3K3P3]3u3z3</pre><pre>5S5F5K5P5]5r5w5</pre><pre>3 4G4C4Q4g4l4q4~4</pre><pre>1 2%2S2_2m2</pre><pre>=$=3=8={=</pre><pre>6#6(676<6</pre><pre>7'8,858;8</pre><pre>1&1 1:1?1</pre><pre><!><pre>11L1S1</pre><pre>0%1S1a1o1</pre><pre>4 4D494</pre><pre>6!60656~6</pre><pre>='=,=;=@=</pre><pre>7 7/747}7</pre><pre>7 7-7:7?7</pre><pre>:$:):8:=:</pre><pre>7&7 7:7?7</pre><pre>6 77u7</pre><pre>%0S0a0o0</pre><pre>4%4*494>4</pre><pre>= =-=:=?=</pre><pre>9"9'969;9~9</pre><pre>:':,:;:@:</pre><pre>2!2&2[2`2</pre><pre>5S5F5K5P5]5u5z5</pre><pre>8%8*898>8</pre><pre>3!30353~3</pre><pre>6%7S7a7o7</pre><pre>2"2'262;2</pre><pre>4 4-4:4?4</pre><pre>>!>&>5>:>|></pre><pre>7Â8u8</pre><pre>=$=)=8===</pre><pre>1$1)181=1</pre><pre>8!80858~8</pre><pre>4!40454~4</pre><pre>; ;/;4;};</pre><pre>7%8X8^8i8</pre><pre>0(2,2024282<2@2</pre><pre>313F3U3h3r3</pre><pre>7Â8u8</pre><pre>5054585<5</pre><pre>1%2U2</pre><pre>1%1S1[1</pre><pre>8%8S8[8</pre><pre>5%6-6u6}6</pre><pre>3%4U4i4q4</pre><pre>3%4U4</pre><pre>8 8$8(8,808</pre><pre>0 0$0(0,00040</pre><pre>5 5$5(5,50545</pre><pre>1(3,3034383<3</pre><pre>,7074787<7</pre><pre>= =$=(=,=0=4=8=<=</pre><pre>1 1(141\1</pre><pre>> >(>4>\></pre><pre>0$0,040|0</pre><pre>combase.dll</pre><pre>mscoree.dll</pre><pre>- CRT not initialized</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- floating point support not loaded</pre><pre>portuguese-brazilian</pre><pre>Login</pre><pre>LoggerConfig.xml</pre><pre>1.7.0.72</pre><pre>SetProcessShutdownParameters ,bRet:</pre><pre>CreateIoCompletionPort, hFile=</pre><pre>Error in CreateIoCompletionPort, err</pre><pre>Exit function. uiKey=</pre><pre>uiMonitorKey=</pre><pre>MonitorDirectoryThread(): I/O Operation has been canceled, Stopped=</pre><pre>CloseHandle on hDirOPPort, GetLastError=</pre><pre>PWM_SYSKEYUP</pre><pre>AIDispatch error #%d</pre><pre>user32.dll</pre><pre>Clog4cxx.dll</pre><pre>Firefox</pre><pre>Chrome</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion</pre><pre>wUrl=</pre><pre>https://servicemap.conduit-services.com/sp</pre><pre>https://servicemap.qaconduit-services.com/sp</pre><pre>Exit function. wUrl=</pre><pre>ChromeModule.dll</pre><pre>FirefoxModule.dll</pre><pre>InternetExplorerModule.dll</pre><pre>rep.dat</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/smart_ptr/shared_ptr.hpp</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/thread/win32/thread_primitives.hpp</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/thread/win32/thread_heap_alloc.hpp</pre><pre>detail::win32::HeapFree(detail::win32::GetProcessHeap(),0,heap_memory)!=0</pre><pre>Unsupported dialog position =</pre><pre>cNot enough arguments were passed</pre><pre>Finish Reason is unsupported =</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/smart_ptr/scoped_ptr.hpp</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/signals2/detail/auto_buffer.hpp</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/signals2/detail/signal_template.hpp</pre><pre>_shared_state.unique()</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/signals2/detail/slot_groups.hpp</pre><pre>this_map_it != _group_map.end()</pre><pre>it != _list.end()</pre><pre>map_it != _group_map.end()</pre><pre>weakly_equivalent(map_it->first, key)</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/optional/optional.hpp</pre><pre>members_.capacity_ >= N</pre><pre>members_.capacity_ >= n</pre><pre>size_ <= members_.capacity_</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/variant/detail/visitation_impl.hpp</pre><pre>D:\builds\34\Search Protector\SP-1.7.0-CI\Sources\3rdParty\Boost\boost_1_53_0\boost/variant/detail/forced_return.hpp</pre><pre>Missing Export entries in DLL</pre><pre>!pAssetChangedData</pre><pre>pAssetEvent == NULL</pre><pre>Enter function. wkey=</pre><pre>GetSetting wkey=</pre><pre>GetSetting failed getting wkey=</pre><pre>Overwritting previous setting. key=</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion</pre><pre>fmsvcp100.dll</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders</pre><pre>ymsvcr100.dll</pre><pre>GetProccessID Failed on explorer.exe!</pre><pre>yIntegrity level is high while explorer.exe is not!</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>m_InitDataChangeQueue.size() =</pre><pre>Missing array of translated keys!</pre><pre>translatedKeys</pre><pre>keyId</pre><pre>Couldn't find translation for key</pre><pre>sCouldn't find default translation for key</pre><pre>Enter function. wKey=</pre><pre>Interval hasn't passed yet for</pre><pre>data.iRefreshInterval=</pre><pre>Getting service failed. URL:</pre><pre>. HTTP Code:</pre><pre>Exit function. Failed getting Client Log service, Not reporting error on it,Avoid Poison Reverse</pre><pre>Key has changed!</pre><pre>g..\Dialogs\spsd\main.html</pre><pre>No knowledge of current url for asset.</pre><pre>KnownUrlForState</pre><pre>Current url:</pre><pre>No last known url (Shouldn't happen). Sending Asset change event</pre><pre>, Known url=</pre><pre>CurrentUrl=</pre><pre>wCurrentUrl=</pre><pre>PreviousUrl=</pre><pre>!pAssetChangeEvent || !pAssetChangeEvent->NewAssetData()</pre><pre>MyKnownUrl=</pre><pre>NewUrl=</pre><pre>Unable to parse CTID from new conduit search URL:</pre><pre>Not protecting firefox!</pre><pre>This lose event already executed.</pre><pre>e, new URL</pre><pre>, prev URL</pre><pre>Url found as invalid</pre><pre>Failed to build default url :</pre><pre>http://search.conduit.com/?ctid=</pre><pre>No valid url to takeover with</pre><pre>Url before update:</pre><pre>m_pSearchAssetData->Url()=</pre><pre>SearchAssetManaget->GetCtidAssetUrl failed for CTID:</pre><pre>aggressiveTakeoverWindowSec</pre><pre>wNewUrl=</pre><pre>Enter function. wMainUrl=</pre><pre>wMainUrl=</pre><pre>Enter function. wSearchApiCtidUrl=</pre><pre>aNew url and search api urls are identical. Nothing to merge or takeover.</pre><pre>Set key path [</pre><pre>Enqueuing usage report:</pre><pre>No queued usages to report</pre><pre>Unable to build usage report</pre><pre>Deleted the error report from requests map =</pre><pre>CRASH*.txt</pre><pre>tKeepCrashReports</pre><pre>Maxed out retries count for error report:</pre><pre>CRASH*.dmp</pre><pre>HomePageUrl</pre><pre>SearchUrl</pre><pre>takeover_url</pre><pre>SPSetup.exe</pre><pre>tPathToExe</pre><pre>pSoftware\Mozilla\Mozilla Firefox</pre><pre>Change in exe directory detected.</pre><pre>serviceMapUrl</pre><pre>3.6.0.0</pre><pre>3.7.0.0</pre><pre>CustomizedAssetUrl</pre><pre>Unknown server setting. key =</pre><pre>PendingFileRenameOperations</pre><pre>Unable to get current Asset URL for</pre><pre>LoginData=</pre><pre>Not sending login for browser =</pre><pre>Sending login for browser =</pre><pre>autoUpdateModuleUrl</pre><pre>.AutoUpdateDownloadUrl</pre><pre>Invalid URL</pre><pre>Starting download: m_wAutoUpdateURL=</pre><pre>DownloadFileAsync Error. Unable to download auto-update file, URL:</pre><pre>SPUpdater.exe</pre><pre>lReg Key:</pre><pre>Url Reverted to</pre><pre>revertedUrl</pre><pre>different from new url</pre><pre>d-d-d d:d:d</pre><pre>RegCloseKey failed. Name=</pre><pre>hKey is null. Error code:</pre><pre>RegCloseKey failed</pre><pre>, bKeyExist=</pre><pre>RegCreateKeyExW failed</pre><pre>ExitFunction hKey = 0x</pre><pre>rRegNotifyChangeKeyValue failed</pre><pre>pHttpAsyncData == NULL</pre><pre>Deleting pHttpAsyncData</pre><pre>Exception(...) while trying to send HTTP request</pre><pre>Exception while trying to send HTTP request</pre><pre>wUrl=</pre><pre>Tsearch.qasite.com</pre><pre>search.conduit.com</pre><pre>%s%s%s</pre><pre>], Url[</pre><pre>Shell.Explorer</pre><pre>Failed reciving IWebBrowser 2 from IUnknown</pre><pre>EnterFunction bsUrl=</pre><pre>Navigate received null Url</pre><pre>WebWindow::Create failed</pre><pre>Exception: Navigate failed!!! url=</pre><pre>m_pWebBrowser is NULL !!!</pre><pre>Browser is busy navigation will not be execute</pre><pre>Stoping IWebBrowser2 ...</pre><pre>m_pWebBrowser->Stop failed. hRes=</pre><pre>=get_URL failed</pre><pre>eEnterFunction clrColorKey =</pre><pre>SetAlphaColorKey failed</pre><pre>Windows.External.writeDebugString</pre><pre>Windows.External.InvokePlatformAction: param 1 is not string</pre><pre>SP_Web_Window</pre><pre>Failed to load user32.dll</pre><pre>m_pWebBrowser is NULL</pre><pre>SPHOOK_MSG_USER_CHANGED_HOMEPAGE</pre><pre>SPHOOK_MSG_NEW_WINDOW_CREATED</pre><pre>SPHOOK_MSG_IE_FRAME_ACTIVATED</pre><pre>SPHOOK_MSG_USER_CHANGED_SEARCH_PROVIDER</pre><pre>SPHOOK_REGISTRY_CHANGED_MSG</pre><pre>SPHOOK_MSG_END_HOOK</pre><pre>WSetWindowSubclass Failed</pre><pre>Assertion failed: %s, file %s, line %d</pre><pre>%Documents and Settings%\%current user%\Application Data\SearchProtect\bin\cltmng.exe</pre><pre>All Files (*.*)</pre><pre>No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.</pre><pre>Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.</pre><pre>Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.</pre><pre>#Unable to load mail system support.</pre><pre>Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.fRecover the auto-saved documents</pre><pre>%s [Recovered]</pre></!></pre></pre></pre></pre></pre>