Backdoor.Win32.PcClient.FD, Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Trojan, Backdoor
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 1b1fc347eb5dd4be5caa67d0cfa56009
SHA1: 628690d7cd9c3d9590b886794f5f3376edaeac78
SHA256: 2fc13cb500fd7eb67202191c5c2c2d371979ce4a33a2ffff4a6d97b5532e4e0e
SSDeep: 196608:AIh DEbQJEb/eVzhmfzkRKWKLOKNQIJDl54c QQfv9/e57dBGwHY:AboQJEredyzkRKWlarQPfvdmBV4
Size: 8673824 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: Bandoo Media Inc.
Created at: 2013-05-30 11:09:10
Analyzed on: WindowsXP SP3 32-bit
Summary: Backdoor. Malware that enables a remote control of victim's machine.
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Backdoor creates the following process(es):
imapi.exe:440
mediabar.exe:816
patch_ff.exe:416
jZipMediaBar.exe:128
jZipMediaBar.exe:920
jZipMediaBar.exe:600
%original file name%.exe:1468
rundll32.exe:1276
DatamngrCoordinator.exe:676
DatamngrCoordinator.exe:1480
mscorsvw.exe:1912
regsvr32.exe:652
regsvr32.exe:1512
pack.exe:1528
The Backdoor injects its code into the following process(es):
DatamngrUI.exe:1308
DatamngrCoordinator.exe:736
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process imapi.exe:440 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%WinDir%\Temp\hscbwa8b.TMP (146970 bytes)
The process mediabar.exe:816 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\jZipMediaBar.exe (17245 bytes)
The process patch_ff.exe:416 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%WinDir%\Temp\nsmAA.tmp\System.dll (11 bytes)
%WinDir%\Temp\nsmAA.tmp\registry.dll (784 bytes)
%WinDir%\Temp\nsgA9.tmp (3684 bytes)
%WinDir%\Temp\nsmAA\Helper.dll (15116 bytes)
The Backdoor deletes the following file(s):
%WinDir%\Temp\nsmAA.tmp\registry.dll (0 bytes)
%WinDir%\Temp\nsrA8.tmp (0 bytes)
%WinDir%\Temp\nsmAA.tmp (0 bytes)
%WinDir%\Temp\nsmAA.tmp\System.dll (0 bytes)
The process jZipMediaBar.exe:128 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (133 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\trackid.dat (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\xml.dll (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\toolbar.xml (14 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.xul (24832 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\widget.xml (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ocode.xml (390 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsProcess.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\as_guid.dat (38 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\AccessControl.dll (9 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\music_logo.png (992 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\InetLoad.dll (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6584 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsisFirewall.dll (8 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\splash_icon.png (11 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\apnuserid.dat (16 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\install.ico (8 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\manifest.xml (2267 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\components\windowmediator.js (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\dtuser.exe (33888 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\guid.dat (38 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\sysid.dat (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.htm (716 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsjA0.tmp (140704 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\appid.dat (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\partner.xml (218 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\tb_icon.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\UAC.dll (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\external.js (24832 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\System.dll (11 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.js (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\uninstall.exe (6115 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ioSpecial.ini (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\inetc.dll (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\geodata.xml (441 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\imeshjzipmusictoolbar-manifest.xml (9 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\geolocation[1].xml (441 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\{88d8ecb7-204f-4efd-8134-f6341f76c672}\geodata.xml (441 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\tb_icon.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\widget.jsw (784 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\Lyrics.png (518 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\tb_icon.ico (15 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\setupCfg.xml (579 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
The Backdoor deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ioSpecial.ini (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu9F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsProcess.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\xml.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\AccessControl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsisFirewall.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\InetLoad.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\toolbar.xml (0 bytes)
The process jZipMediaBar.exe:920 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\install.ico (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\ocode.xml (390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsbA3.tmp (140704 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\setupCfg.xml (579 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6584 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\toolbar.xml (14 bytes)
%Program Files%\Music App\Datamngr\SRTOOL~1\uninstall.exe (6115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\AccessControl.dll (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\imeshjzipmusictoolbar-manifest.xml (9 bytes)
The Backdoor deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\toolbar.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\AccessControl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nswA2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\xml.dll (0 bytes)
The process jZipMediaBar.exe:600 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6584 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\toolbar.xml (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsuA6.tmp (128244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\ocode.xml (390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\imeshjzipmusictoolbar-manifest.xml (9 bytes)
The Backdoor deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\xml.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nspA5.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\toolbar.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp (0 bytes)
The process %original file name%.exe:1468 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\92.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\91.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\98.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\pack.exe (112669 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\86.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8F.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\90.tmp (4545 bytes)
%Program Files%\Music App\Datamngr\x64 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\Starter.exe (4992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8C.tmp (4545 bytes)
%Program Files%\Music App\Datamngr\Helper.dll (15116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\95.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\97.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\install_statistics[1].xml (498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\CHAppConfirm.exe (8184 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\Helper.dll (66604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\94.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\87.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\93.tmp (4545 bytes)
%Program Files%\Music App\Datamngr\Uninstall.exe (3616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\registry.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\96.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9C.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\88.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\89.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsw7F.tmp (342492 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\mediabar.exe (69435 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\99.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\UserInfo.dll (4 bytes)
The Backdoor deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\91.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\registry.dll (0 bytes)
%Program Files%\Music App\Datamngr\apcrtldr36.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\98.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\92.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\mgrldr_u.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\90.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\System.dll (0 bytes)
%Program Files%\Music App\Datamngr\Internet Explorer Settings Update.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\95.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\apcrtldr36.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\97.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\setmgrc2.cfg (0 bytes)
%Program Files%\Music App\Datamngr\x64\mgrldr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\86.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr7E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\94.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\87.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\93.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\apcrtldr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\96.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\IEBHO.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\88.tmp (0 bytes)
%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings Update.exe (0 bytes)
%Program Files%\Music App\Datamngr\x64\Datamngr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\89.tmp (0 bytes)
%Program Files%\Music App\Datamngr\SRToolBar (0 bytes)
%Program Files%\Music App\Datamngr\mgrldr_u.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\install_statistics[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\99.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8B.tmp (0 bytes)
The process DatamngrCoordinator.exe:676 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg (2234 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg (2376 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\general.cfg (1 bytes)
%WinDir%\Temp\537f7e9a\patch_ff.exe (72036 bytes)
The Backdoor deletes the following file(s):
%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg.bak (0 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg.bak (0 bytes)
The process regsvr32.exe:652 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\dtx.ini (15 bytes)
The process pack.exe:1528 makes changes in the file system.
The Backdoor creates and/or writes to the following file(s):
%Program Files%\Music App\Datamngr\Datamngr.dll (19394 bytes)
%Program Files%\Music App\Datamngr\x64\mgrldr_u.dll (22 bytes)
%Program Files%\Music App\Datamngr\mgrldr.dll (19 bytes)
%Program Files%\Music App\Datamngr\x64\apcrtldr.dll (8424 bytes)
%Program Files%\Music App\Datamngr\DatamngrCoordinator.exe (26869 bytes)
%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings Update.exe (9244 bytes)
%Program Files%\Music App\Datamngr\setmgrc2.cfg (34 bytes)
%Program Files%\Music App\Datamngr\x64\apcrtldr36.dll (8002 bytes)
%Program Files%\Music App\Datamngr\IEBHO.dll (16250 bytes)
%Program Files%\Music App\Datamngr\x64\Datamngr.dll (17442 bytes)
%Program Files%\Music App\Datamngr\x64\setmgrc2.cfg (41 bytes)
%Program Files%\Music App\Datamngr\DatamngrUI.exe (29743 bytes)
%Program Files%\Music App\Datamngr\x64\mgrldr.dll (22 bytes)
%Program Files%\Music App\Datamngr\favicon.ico (1 bytes)
%Program Files%\Music App\Datamngr\apcrtldr36.dll (3759 bytes)
%Program Files%\Music App\Datamngr\apcrtldr.dll (4487 bytes)
%Program Files%\Music App\Datamngr\Internet Explorer Settings Update.exe (8841 bytes)
%Program Files%\Music App\Datamngr\x64\IEBHO.dll (20723 bytes)
%Program Files%\Music App\Datamngr\Internet Explorer Settings.exe (9722 bytes)
%Program Files%\Music App\Datamngr\mgrldr_u.dll (98 bytes)
%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings.exe (9489 bytes)
Registry activity
The process imapi.exe:440 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2E 4A AD BA 52 2D BA B5 59 5E 79 15 7D 48 51 BF"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi]
"ControlFlags" = "1"
"Active" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi\ImapiSvc]
"BitNames" = " ImapiDebugError ImapiDebugWarning ImapiDebugTrace ImapiDebugInfo ImapiDebugX ImapiDebugSort"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi]
"LogSessionName" = "stdout"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi\ImapiSvc]
"Guid" = "8107d8e9-e323-49f5-bba2-abc35c243dca"
The process mediabar.exe:816 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "80 16 C9 22 4B 55 60 33 E5 BE B1 FA E3 5F 90 FF"
The process patch_ff.exe:416 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "48 B3 B3 5B 9C 76 84 20 74 75 A7 83 4F A7 BA 9B"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsrA4.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsrA4.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nskA7.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nskA7.tmp\, , \??\%WinDir%\TEMP\nsmAA.tmp\registry.dll,"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKLM\SOFTWARE\Datamngr\General\patches]
"3" = "1"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"
The process jZipMediaBar.exe:128 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\nsProcess.dll,"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"apn_ptnrs" = "^AG7"
"SB" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=IE&psv=&gct=sb&q={searchTerms}"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"DisplayName" = "Music Search App for Internet Explorer (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"hpr_cr" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=IE&psv=&gct=hp"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\IE]
"Path" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"ds" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=IE&psv=&gct=&q={searchTerms}"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 16 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"nthp_cr" = "1"
"CountryCode" = "CA"
[HKCU\Software\APNDTX\JZP2-DTX]
"Browsers" = "1-IE"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\IE]
"App ID" = "imeshjzipmusictoolbar"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A1DCD0E-64D8-4B5C-BEE3-6814ED6B24FA}]
"Policy" = "3"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppName" = "dtuser.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"Publisher" = "IAC Search and Media, Inc."
[HKCU\Software\imeshjzipmusictoolbar]
"Installer Language" = "1033"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\APNDTX]
"ToolbarID" = "Music Search App (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\APNDTX\JZP2-DTX]
"trgb" = "IE"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"Version" = "2.1.0.0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"DisplayVersion" = "2.1.0.0"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\IE]
"DisplayName" = "Music Search App (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\APNDTX\JZP2-DTX]
"Class ID" = "{88d8ecb7-204f-4efd-8134-f6341f76c672}"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"Locale" = "en_CA"
"sysid" = "102"
[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled-IE" = "JZP2-DTX"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A1DCD0E-64D8-4B5C-BEE3-6814ED6B24FA}]
"AppPath" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"NoRepair" = "1"
"DisplayIcon" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE\install.ico"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"Policy" = "3"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"nt" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=IE&psv=&gct=tab"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"EstimatedSize" = "0"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"AppID" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"o" = "APN10646"
"apn_dtid" = "^BND102^YY^CA"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"AppName" = "uninstall.exe"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"timeofinstall" = "2014-08-04T19:07:25"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"UninstallString" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE\uninstall.exe /UN=IE /PID=JZP2-DTX /PCD=IMH"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"AppPath" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE"
[HKCU\Software\APNDTX]
"Version" = "2.1.0.0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"TrackID" = "BND102"
"apn_uid" = "2156720980024292"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"Policy" = "3"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B9 1F F3 82 A5 92 66 23 FE BF 81 86 DD 10 FB A9"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"lastinstalled" = "IE"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A1DCD0E-64D8-4B5C-BEE3-6814ED6B24FA}]
"AppName" = "dtuser.exe"
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n13505-429&t=4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"NoModify" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"doi" = "2014-08-04"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppPath" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"dbr" = "IE"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\APNDTX\JZP2-DTX]
"lastinstalled" = "IE"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarIE]
"InstallLocation" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE"
[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled" = "JZP2-DTX"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"hp" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=IE&psv=&gct=hp"
The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Adds a rule to the firewall Windows which allows any network activity:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\Music App\Datamngr\SRTOOL~1\IE]
"dtUser.exe" = "%Program Files%\Music App\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Music Search App (Dist. by Bandoo Media, Inc.) DTX Broker"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Backdoor deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\Music App\Datamngr\SRTOOL~1\IE]
"dtuser.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"ProxyServer"
"AutoConfigURL"
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBarLayout"
The Backdoor disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NSIS.Library.RegTool.v1"
"NSIS.Library.RegTool.v3"
"NSIS.Library.RegTool.v2"
"NSIS.Library.RegTool.v5"
"NSIS.Library.RegTool.v4"
The process jZipMediaBar.exe:920 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsrA4.tmp\xml.dll,"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"Version" = "2.1.0.0"
"TrackID" = "BND102"
"CountryCode" = "CA"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"NoRepair" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"o" = "APN10646"
[HKCU\Software\APNDTX\JZP2-DTX]
"Browsers" = "1-IE,2-FF"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"apn_dtid" = "^BND102^YY^CA"
"apn_uid" = "2156720980024292"
[HKCU\Software\imeshjzipmusictoolbar]
"Installer Language" = "1033"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\APNDTX]
"ToolbarID" = "Music Search App (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"DisplayVersion" = "2.1.0.0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"hp" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=FF&psv=&gct=hp"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\FF]
"Path" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1"
[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled-FF" = "JZP2-DTX"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"AppID" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"InstallLocation" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\FF]
"App ID" = "imeshjzipmusictoolbar"
[HKCU\Software\APNDTX\JZP2-DTX]
"lastinstalled" = "FF"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"Policy" = "3"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"Locale" = "en_CA"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"doi" = "2014-08-04"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 17 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"ds" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=FF&psv=&gct=&q={searchTerms}"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"UninstallString" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\uninstall.exe /UN=FF /PID=JZP2-DTX /PCD=IMH"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"AppName" = "uninstall.exe"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}\FF]
"DisplayName" = "Music Search App (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"dbr" = "IE"
[HKCU\Software\APNDTX]
"Version" = "2.1.0.0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"Publisher" = "IAC Search and Media, Inc."
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"apn_ptnrs" = "^AG7"
"sysid" = "102"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5B 5D C6 1E F2 4A F4 77 FB 0B 54 77 A5 A2 44 71"
[HKCU\Software\APNDTX\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"lastinstalled" = "FF"
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n13505-429&t=4"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"nthp_cr" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"AppPath" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"hpr_cr" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=FF&psv=&gct=hp"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"NoModify" = "1"
"EstimatedSize" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"DisplayIcon" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\install.ico"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"nt" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=FF&psv=&gct=tab"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\imeshjzipmusictoolbarFF]
"DisplayName" = "Music Search App for Firefox (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled" = "JZP2-DTX"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"timeofinstall" = "2014-08-04T19:07:33"
"SB" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^CA&apn_uid=2156720980024292&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^CA&apn_dbr=IE&doi=2014-08-04&trgb=FF&psv=&gct=sb&q={searchTerms}"
The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Backdoor deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process jZipMediaBar.exe:600 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsoA1.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsrA4.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsrA4.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nskA7.tmp\xml.dll,"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 18 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "69 45 CC D6 1A 53 12 3D E0 89 5C 28 51 25 8E 66"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Backdoor deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process %original file name%.exe:1468 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Datamngr\General]
"Country" = "CA"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"debugger" = "tasklist.exe"
[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x86" = "%Program Files%\Music App\Datamngr\apcrtldr.dll"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Datamngr\General]
"kapid" = "0"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Datamngr\General]
"kisid" = "102"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Datamngr\General]
"ie_ds_supported" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n13505-429&t=4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKLM\SOFTWARE\Datamngr\General]
"sitime" = "1407186363"
"clid" = "{2B567CA9-800C-4C9C-AC46-F5DB148AC8B9}"
[HKLM\SOFTWARE\Datamngr]
"Version" = "5.0.0.13505"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"FrameAuto" = "1"
[HKLM\SOFTWARE\Datamngr\General]
"ostype" = "win32"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Datamngr\General]
"UC" = "429"
"LN" = "en"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "64 8E A4 3C 5A 06 CD FD 70 A6 A1 9F 20 D6 C4 34"
[HKLM\SOFTWARE\Datamngr\General]
"home" = "%Program Files%\Music App"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Datamngr\General]
"pver" = "5.0.0.13505"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Datamngr\General]
"iTime" = "2014-08-04"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Datamngr\General]
"osl" = "en-US"
[HKCU\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"10" = "10"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 19 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Internet Explorer\Approved Extensions]
"{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}" = "51 66 7A 6C 4C 1D 3B 1B D5 D9 17 B9 E3 28 C4 06"
[HKLM\SOFTWARE\Datamngr\General]
"os_user_type" = "Admin"
"aw" = "No"
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Use Search Asst" = "no"
[HKLM\SOFTWARE\Datamngr\General]
"ptype" = "n"
[HKLM\SOFTWARE\Datamngr]
"browser" = " ie ff cr"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Datamngr\General]
"osver" = "5.1"
"kbn" = "13505"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Datamngr\General]
"sysid" = "102"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Datamngr\General]
"iver" = "5.0.0.13505"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Datamngr\General]
"AppID" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
"Flags" = "1024"
[HKLM\SOFTWARE\Datamngr\General]
"Guid" = "{348A95A8-B9AB-D6CA-22E9-923BE6250C62}"
"ie_hp_supported" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"debugger" = "tasklist.exe"
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Search Bar" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"
[HKLM\SOFTWARE\Datamngr\General]
"UID" = "2156720980024292"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"debugger" = "tasklist.exe"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Backdoor adds the reference to itself to be executed when a user logs on:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoRestartShell" = "1"
The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
The Backdoor deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"Appinit_Dlls"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"
The Backdoor disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"removejZipdatamngr"
"removejZiptoolbar"
The process DatamngrUI.exe:1308 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "09 2E 3F 27 A0 A4 49 03 D3 37 AE 85 09 B2 24 76"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
The process rundll32.exe:1276 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "17 D8 0F ED EC FB E8 51 CC BD CE C8 BE 74 E2 1E"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
The process DatamngrCoordinator.exe:676 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5A C0 95 25 DB 0A 78 0A 40 0B 30 45 AD D6 25 50"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
The process DatamngrCoordinator.exe:1480 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4D 95 3D 80 71 49 23 DE 1C E5 59 11 A7 95 E3 69"
[HKLM\SOFTWARE\Datamngr\General]
"srn0" = "DatamngrCoordinator"
"srn1" = "F06DEFF2-5B9C-490D-910F-35D3A9119622"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
The process DatamngrCoordinator.exe:736 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "16 CC 68 7F BF D9 40 D6 75 36 C1 E5 6C E5 F1 04"
[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x64" = "c:\program files\music app\datamngr\x64\apcrtldr.dll"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
The process mscorsvw.exe:1912 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\State]
"AccumulatedWaitIdleTime" = "2340000"
The process regsvr32.exe:652 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "23 DC 18 12 29 B1 98 95 9F 0E FC D2 B2 9D F0 25"
[HKCR\CLSID\{88d8ecb7-204f-4efd-8134-f6341f76c672}\InprocServer32]
"ThreadingModel" = "Apartment"
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{88d8ecb7-204f-4efd-8134-f6341f76c672}" = "Music Search App (Dist. by Bandoo Media, Inc.)"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCR\CLSID\{88d8ecb7-204f-4efd-8134-f6341f76c672}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll"
[HKCR\CLSID\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"(Default)" = "Music Search App (Dist. by Bandoo Media, Inc.)"
It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88d8ecb7-204f-4efd-8134-f6341f76c672}]
"(Default)" = "Music Search App (Dist. by Bandoo Media, Inc.)"
The process regsvr32.exe:1512 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKCR\SearchQUIEHelper.DNSGuard\CLSID]
"(Default)" = "{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}"
[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0]
"(Default)" = "SearchQUIEBHO 1.0 Type Library"
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
"ThreadingModel" = "Apartment"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\0\win32]
"(Default)" = "C:\PROGRA~1\MUSICA~1\Datamngr\IEBHO.dll"
[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
"ThreadingModel" = "Apartment"
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
"(Default)" = "Data Manager"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICA~1\Datamngr\IEBHO.dll"
[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\HELPDIR]
"(Default)" = "C:\PROGRA~1\MUSICA~1\Datamngr"
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICA~1\Datamngr\IEBHO.dll"
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\VersionIndependentProgID]
"(Default)" = "SearchQUIEHelper.UrlHelper"
[HKCR\SearchQUIEHelper.DNSGuard.1]
"(Default)" = "Data Manager"
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\ProgID]
"(Default)" = "SearchQUIEHelper.UrlHelper.1"
[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}]
"(Default)" = "IDNSGuard"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "72 81 EB 02 97 19 6E 04 BE 76 02 61 E7 32 F6 8D"
[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\TypeLib]
"Version" = "1.0"
[HKCR\SearchQUIEHelper.DNSGuard.1\CLSID]
"(Default)" = "{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}"
[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\TypeLib]
"(Default)" = "{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}"
[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}]
"(Default)" = "ErrorFilter Class"
[HKCR\SearchQUIEHelper.DNSGuard\CurVer]
"(Default)" = "SearchQUIEHelper.UrlHelper.1"
[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\FLAGS]
"(Default)" = "0"
[HKCR\SearchQUIEHelper.DNSGuard]
"(Default)" = "Data Manager"
The Backdoor deletes the following registry key(s):
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\VersionIndependentProgID]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\Programmable]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\Programmable]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\ProgID]
The process pack.exe:1528 makes changes in the system registry.
The Backdoor creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "94 09 11 D1 35 5D 1F 5A 4C CC 76 A5 EE EB A1 1D"
Dropped PE files
MD5 | File path |
---|---|
cd36c68e6c1263092527ff8f699b44f1 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll |
2b5ba142a270ad4458e47c22ce47d85e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\CHAppConfirm.exe |
173339e2a278f2366a0b4497f285096a | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\Helper.dll |
f2bd065e8fa1ad0231ca68da353282cb | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\Starter.exe |
c69e7ca8794f8f74235f03d5569a4606 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\nst85.tmp\jZipMediaBar.exe |
7bb8d7ac11fdda90c16486dcb2957505 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\nst85.tmp\mediabar.exe |
3bd811bda524b633756efebf6c519f1a | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsc81\nst85.tmp\pack.exe |
fbda05aa26e02d38effb82294e83ea69 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nskA7.tmp\xml.dll |
05450face243b3a7472407b999b03a72 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsoA1.tmp\nsProcess.dll |
fbda05aa26e02d38effb82294e83ea69 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsoA1.tmp\xml.dll |
fbda05aa26e02d38effb82294e83ea69 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsrA4.tmp\xml.dll |
6b45736664da266495efaf7e0a827a4c | c:\Program Files\Music App\Datamngr\Datamngr.dll |
136b16a2905b694817ad9a40814d07c6 | c:\Program Files\Music App\Datamngr\DatamngrCoordinator.exe |
c68b3a45ba9eb35d153b477a303b4f8e | c:\Program Files\Music App\Datamngr\DatamngrUI.exe |
173339e2a278f2366a0b4497f285096a | c:\Program Files\Music App\Datamngr\Helper.dll |
bf4a578e703db51174ed279bbe7fdffd | c:\Program Files\Music App\Datamngr\IEBHO.dll |
d1260a8667ea288c144e546fbd4e35c0 | c:\Program Files\Music App\Datamngr\Internet Explorer Settings.exe |
b3dfef830957cd1206d0a0e4b54a9a68 | c:\Program Files\Music App\Datamngr\SRTOOL~1\IE\dtuser.exe |
775b7ee21c3bf311359c6f17ab7faa42 | c:\Program Files\Music App\Datamngr\SRTOOL~1\IE\searchresultsDx.dll |
4e6a4c964300a51c7fb93cff092cedc3 | c:\Program Files\Music App\Datamngr\SRTOOL~1\IE\searchresultstb.dll |
dd5f9bd2301a4f5fe3ae68c81c79d914 | c:\Program Files\Music App\Datamngr\SRTOOL~1\IE\uninstall.exe |
dd5f9bd2301a4f5fe3ae68c81c79d914 | c:\Program Files\Music App\Datamngr\SRTOOL~1\uninstall.exe |
cbc8cce9997e910512ea4f2025f934e2 | c:\Program Files\Music App\Datamngr\Uninstall.exe |
77e0fa6f6c45f4f39472929c1b1e81c1 | c:\Program Files\Music App\Datamngr\apcrtldr.dll |
fdefb84713a7d6c1a590740c364cf64c | c:\Program Files\Music App\Datamngr\mgrldr.dll |
5e8741a35bb8c5064350be759ceb5dab | c:\Program Files\Music App\Datamngr\setmgrc2.cfg |
4caef6b94f60114eddf6609bf641d9be | c:\WINDOWS\Temp\537f7e9a\patch_ff.exe |
2b7007ed0262ca02ef69d8990815cbeb | c:\WINDOWS\Temp\nsmAA.tmp\registry.dll |
173339e2a278f2366a0b4497f285096a | c:\WINDOWS\Temp\nsmAA\Helper.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
Using the driver "\??\%Program Files%\Music App\Datamngr\setmgrc2.cfg" the Backdoor controls operations with a system registry by installing the registry notifier.
The Backdoor installs the following kernel-mode hooks:
ZwOpenProcess
ZwOpenThread
Using the driver " \??\%Program Files%\Music App\Datamngr\setmgrc2.cfg" the Backdoor attaches its filter-device object to the Volume Device Object (VDO) of the file system driver.
Propagation
Removals
Static Analysis
VersionInfo
Company Name: Bandoo Media Inc.
Product Name: jZip
Product Version: 5.0.0.13505
Legal Copyright: Copyright (c) 2005 - 2014
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 5.0.0.13505
File Description: Music App Install
Comments:
Language: Language Neutral
Company Name: Bandoo Media Inc.Product Name: jZipProduct Version: 5.0.0.13505Legal Copyright: Copyright (c) 2005 - 2014Legal Trademarks: Original Filename: Internal Name: File Version: 5.0.0.13505File Description: Music App InstallComments: Language: Language Neutral
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 28852 | 29184 | 4.49139 | b7dd7ef0e5ad7002a5410c08a455d9a2 |
.rdata | 36864 | 10930 | 11264 | 3.0441 | 8acc145fd5b0b8d5e29138559785c9da |
.data | 49152 | 425660 | 512 | 1.01815 | 7a21637804e89fb9667b4619ab7edba1 |
.ndata | 475136 | 5263360 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.rsrc | 5738496 | 3224 | 3584 | 2.8119 | f1609956b7abf1ea76ac323655fbe9b3 |
.reloc | 5742592 | 4010 | 4096 | 3.76782 | ad6293bc5305b6077390e73c8cd0bb73 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://websearch.ask.com/geolocation | 199.36.100.106 |
hxxp://e6845.ce.akamaiedge.net/pca3-g5.crl | |
hxxp://e6845.ce.akamaiedge.net/CSC3-2010.crl | |
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=IE&browsers=1-IE&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | |
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=FF&browsers=1-IE,2-FF&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | |
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&targetbrowser=CR&browsers=&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | |
hxxp://preved.bandoobe.com/login | 94.31.0.109 |
hxxp://a1015.g1.akamai.net/cdn/update/jzip.com/patches/3/patch_ff.exe | |
hxxp://preved.bandoobe.com/install_statistics.php | 94.31.0.109 |
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=FF&browsers=1-IE,2-FF&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | 74.113.233.187 |
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=IE&browsers=1-IE&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | 74.113.233.187 |
hxxp://csc3-2010-crl.verisign.com/CSC3-2010.crl | 23.9.117.163 |
hxxp://service.bandoobe.com/install_statistics.php | 94.31.0.109 |
hxxp://crl.verisign.com/pca3-g5.crl | 23.9.117.163 |
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&targetbrowser=CR&browsers=&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en | 74.113.233.187 |
hxxp://download.cdn.bn-update-download.com/cdn/update/jzip.com/patches/3/patch_ff.exe | 184.84.243.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=FF&browsers=1-IE,2-FF&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: anx.apnanalytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.0.10
Date: Mon, 04 Aug 2014 21:05:54 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Cache-Control: max-age=0
GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&targetbrowser=IE&browsers=1-IE&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: anx.apnanalytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.0.10
Date: Mon, 04 Aug 2014 21:05:51 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Cache-Control: max-age=0
GET /pca3-g5.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "dad74562eea63e24f12699a6f02c517d:1403752510"
Last-Modified: Thu, 26 Jun 2014 03:15:10 GMT
Accept-Ranges: bytes
Content-Length: 533
Date: Mon, 04 Aug 2014 21:05:51 GMT
Connection: keep-alive
Content-Type: application/pkix-crl
0...0..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Class 3 Public Primary Certification Authority - G5..140617000000Z..140930235959Z0...*.H.............Z.....{.......iV}.pm@..]...q....MT.....c.......[....?....zZ.....,. P.~........*.'.....,......Y..!..s$..;.v..y<.................gf.? ...9#...........O"5u....q1`.H....3...>.....l9g.X..i7.b.N]..<....@....j.IO..V.oU_v2X....kf.q.......oq.j.e?v..o.l..Y.......!....
GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2156720980024292&anxv=2.1.0.0&anxp=^AG7^BND102^YY^CA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&targetbrowser=CR&browsers=&locale=en_CA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ie_tbs=&ff_tbs=&cr_tbs=&OSlanguage=en HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: anx.apnanalytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.0.10
Date: Mon, 04 Aug 2014 21:05:56 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Cache-Control: max-age=0
GET /geolocation HTTP/1.1
User-Agent: NSIS_DOWNLOAD
Host: websearch.ask.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Aug 2014 21:05:45 GMT
Server: Apache
Content-Length: 441
Connection: close
Content-Type: text/xml;charset=UTF-8
<?xml version="1.0" encoding="UTF-8"?>.<geodata><location country="CA" countryName="Canada" state="QC" city="Montreal" zipcode="H1A H1B H1C H1E H1G H1H H1K H1L H1M H1N H1R H1S H1T H1V H1W H1X H1Y H1Z H2A H2B H2C H2E H2G H2H H2J H2K H2L H2M H2N H2P H2R H2S H2T H2V H2W H2X H2Y H2Z H3A H3B H3C H3G H3H H3J H3K H3L H3M H3N H3P H3R H3S H3T H3V H3W H3X H3Y H3Z H4A H4B H4C H4E H4J H4K H4N H4P H4V H4W H4Z H5A H5B" ip=""%local server IP%""/>.</geodata>...
POST /install_statistics.php HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Host: service.bandoobe.com
Content-Length: 1626
Cache-Control: no-cache
XML=<secure_request><salt>102</salt><data>w0CVUcFdIY0fRhQvcXmku9udu ayQJCyNPSAJA8D3KSVmh/T8FQcjatxVhh5yZC1BIMRcnVi5noWtCBha5ko77P7z75v5J29jyjzqel akI6Z6KXFP BMPiqtF75QOXP/ /WVxym v83bO2V4nXlm8 1sKWk2O3mDe64C3 JpbAOtMiczM0WYdooc5DtsCKQoYgYgbge3Ew71EWWVjDcOaikURwRnqImuZLC/CwFUsjGPbWjMxQiyBecPy17wIbFLxeHPT5PPOuHvHtz1/moVBwsiIWxy2nRzDHWTFR0Cmerx09BjjrhK89D2W lfFT4wmNVEBotLzjofn3nnHKE1cd3UnDYbYAVuCUe9tJGQOSOUuR4lHlUVdnaFypAmjAYJDl/kQp7Oz3jqgKzHjH4NP2 wA/Dh0e3oMD mVoxc5p2SRxvBC5xGGoqr29qiT98zsY5Lmn46PGPDWqvCpdWlvyznRMm2e9k9wNqMbpG7u6Uk7sSvi9EaHlQplDebPT rTWHhpyC4A5O1GTl2PAhb z9Z8mYfrPwMZ04vVtugdJnz7YndK4lSmf4YDyomqDQPyXxuh7WtufAqgRFt8vAmLHSQxF3UgacrZoEdIU1yzGNjMuhQGKKUaAgz2uucV5DEryASSkmI38LdXuxjRpCqq7yftAuT8jZ/7E x2RSytFbW6b9LZpxPYLIG6FNZNtJ2PIKYW4eWF/Sc6wqegoy1kG0Bn6ZfFBo5DwrhzD0GECJp4XO8vAYi1dbx/tt4qvkaFmzVATrdrHWW16kl4D0aTc5AFp9GlR5qtFbX mHLBGseMLKwJODYKtk/FyuEvFhG2uKuVe484qVbf263pY1cDgs3N8yxju/HhZ74SJU4H5NfPeV2yh RPBO2ge iBuwRB5A/0MFSZFO/ 1ZDuOEWtOzqMIhWJ8KtjmCXu//pqtnDSmKGpX1yqP2U6Us8qFrWQYNwKsbVdGGKoqN6ms7dZimJ4nTAzs7vcyKW68VgLTMtuhskfTzIvSn3p6x6wBozrsymQGxgj5Chak3LkcOUn9ZhkmAGSGRK jFYvkNa0pstZIeOtJyVrC47i5 XY Au6TmalRRQutbpHFTFFh/mA3o7iaWmTx2MhWoGBSpechsFEGF1ZbFJwmZtgP/4cfd9o6dVoBqPvJS/JJy5GewvZKlxFCDRt/AMDElsEKohkxvfcvEzx35Aq39Qto82nV2Hav2M1PtlqwFpTXnse5/VTQNv
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Aug 2014 21:06:03 GMT
Content-Type: text/xml
Connection: keep-alive
Keep-Alive: timeout=30
Content-Length: 498
X-Server: web2
<?xml version="1.0" encoding="utf-8"?>..<secure_reply>.. <data>w0CVUcFdIY0fRhQvcXmku4sxfa5 83iQTWFwH25neuGv RNVU ksAGKvjBD7nK0UqnINiyRaQ/gsGfT0bMI Fdn6aVI..
GET /cdn/update/jzip.com/patches/3/patch_ff.exe HTTP/1.1
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: download.cdn.bn-update-download.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Wed, 30 Jul 2014 13:53:38 GMT
Accept-Ranges: bytes
Content-Length: 564544
X-Stat-Server: web2
Content-Type: application/octet-stream
Cache-Control: max-age=2592000
Expires: Wed, 03 Sep 2014 21:05:58 GMT
Date: Mon, 04 Aug 2014 21:05:58 GMT
Connection: keep-alive
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A{.c...0...0...0.b<0...0.b,0...0...0...0...0...0..%0...0.."0...0Rich...0........................PE..L...&..Q.................r.......B...9............@.................................<.....@.........................................................@................................................................................................text....p.......r.................. ..`.rdata...*.......,...v..............@..@.data....~..........................@....ndata.......@...........................rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H.....=G..H.P.u..u..u.....@..K...SV.5.=G.W.E.P.u.....@..e...E..E.P.u.....@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.......P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.u.....@._^3.[.....L$...=G...i. @...T.....tUVW.q.3.;5.=G.sD..i. @...D..S.....t.G.....t...O..t .....u...3....3...F. @..;5.=G.r.[_^...U.
<<< skipped >>>
POST /login HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Content-Length: 1224
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: preved.bandoobe.com
Connection: Keep-Alive
XML=
102nS6zu6b3AINh1fIVG/JF/W7qzL+G6vAmB7Ozy6xHcaBmcr5qvX3swgFeYtyXYDUYg4cJxKPVsxPPYGZsIIl5bAkAn5xdvdo3kunrIZ3HE5kiGeOlzIf4Nc1VWi4U/43koyVh8xqTfP1g7N8FOqhVLHjL7ayM/MTcD6gldniq5aHbh0L7sDI6E/U6ee/MXcUDydAA6x+y+4M0MlNPaiFkI4LOOfo3oUx4u2C9g6dFMdHrl46VSKkQ+nDn5/JC6mrqxYz0Fz1OVeLX7P0f0kAvel8BTrVtqGiTcMRHSI1SCprC8p8U3L++DH6pZEhQ/7L14C+l6Ui1mInB+V56yuMVukmARbqYCZPoHyu7m2THDRbyt/lEs/I7xHXreLEH/9GLx38UPdyPxDkH5UukfUbyhhalgrXMCMKhIndklAK/MHzAbsxW9vsfQgf9e/cGQ771QBXTYqUpuE279VjsGDs3Yvc+BdavmdAk4S5suEYHtGx2tjMKmZdLZ940G6p76/w8yXs8LOhtPZ7dGswkJvXu28Yx5rDJz/SLhPFx33+TX1pPt+/VmR38a2vzA3JsU0eAtip2DraDMq6PiQs8I89Mhfic/IZ2N9twEooemq3mKrpFVP3c8LYbyagGqDyNAKy77BBLOHP+QGoEuFCU1IAAlhdUg+ovscb7xQ1T/DfFdR16omEVByDunG0y+IQj8QIOc09b0IZieBwGRNKlRJsDFLSx0GumA4+QAc2n2JZYQj8suIgr6U/Jh8LzjjFynuwcHk2GwrmlJx1rDBpGexhydm7LNejG21i+ASUodIRU0vpXrd0oeRiCPVMv3WeTuASVrtLcQ7nDvg5s2U2jP7KCBP6O2x0TgGABiDjryWqKiBCds1yhH8oFe5uM2JrBB4gHBw4dieqnCMaI9Dd0bjWX40hV6c/yR3MVGpoQAVBvqyOf7ftSa7MlF/ASEPv+k1/DWLvTcA75HPSrUy6blW6Z9ba3D1HU1Sc7NoxnGIG1WgGeAtiNLeL2pkpmyB69xfZBLjALSfjQEp03FMB+ldnpYg==
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Aug 2014 21:05:58 GMT
Content-Type: text/xml
Connection: keep-alive
Keep-Alive: timeout=30
Content-Length: 3910
X-Server: web1
<?xml version="1.0" encoding="utf-8"?>..<secure_reply>.. <data>w0CVUcFdIY0fRhQvcXmku4sxfa5 83iQTWFwH25neuFAAkZqYNsCVsgiXPh0oFAZ3SPwP45LJH3lZsLu7tbFyyISZXZrjiozmIj1/ZUwW 6BtsZ2fX2P1NEXUaICoC3dduzFug7FnlAeHghFkVyb5An7I6y4F7MTCY6Xu6cVu52UZzmiPhdzWeydPTOYXZOFzNNynrrwwzLoQqWGdU1E9C54Saw6Md8/tvrsa7 fLTBH4r39SX/xGVaZggARXfBXRAK18BP5a3YgmIrhggpBv/iyVx3mtYYSjLVVtRiF/nc f3wGWR67FS4HTkV0s/R9OH33mVLuKvR707BtuGAU5crqg2h4gTJfYfY9aFWgHXgVF10jt7BdJuoHSVieSLcNbJQmt8i1GND7Bi6XNxDZxlTxUsq/hPCBtk3L2phBBUwtzzQPAeo/rT7iKDd3W5Oo3vV77zQJitVZQ7WXTR/6Ye5tBNksK3PEB7wecNaWRHUarxhaY8FXvOTehDldLJvit36O0fFe8VsycvmaddzUlmyqDylmTsX0YZGob4TuU ztj/NlH51trPByKbKxXK/SdKr4oUSqxrP4lZoUUjyLhuQCq8T6udskQRWqEz9wJ VeBzS3UYjkHBPB4/A1CuIOmFEjTEXCLIjL6g3C0SJUEtD1SnWxSt6aX2UMbzeair0s214nD2WUvauMNyv0u2dK10r27FbVaMLCVI 4WjkPKn9RwMkLkqlZYy69WyeBqIdR/gPj6 Rvg6EkP8PmHvUMNheIkRH3OyDCICrnICFn/fX3AlPIybVuqknEydjEzSYkJEUu6mryfNtna27bZ9tIxggU57yDttBwoiSHtT KH8bgfVaCnjPCAea3fYeh/MiDQ8sGAPG0TTFb7FHeoyFMApk6XuN zvw231QTzM1trGlywvKVXrqbCJThuWuN/4NQ/6/ kn5z1YltIecZxT4So8GKhv8bTsDZHtpQd9LS33kK9tpWMUfRaLH91RmABsFGnkNYNA9D6qfx3uRXUr//4hSPWlO PtRFwzcuOkyy3RCd39 gkZ SsnVwiBSCCYIVLEry3ozV4AxV7PRvMOWeDm8cSpGeHdtiKrbKNLZI2/RsS06XtA/uYlztE5ny hXwmIaPbStS0txQPpjEJ94/BNAyG1qeYetNUyjwQkNy6E/mWAC 9RZ5AtztEWNnhmGkPf7Jd/kN6SOAu/VtQNjYw5Xto9RpUiVS1Y0QggeVTQ3jv7MN5BiSQ7oPUazThQHx1rkdUjTRl08HkzRiQxDLEMAEHs93iUG2G/GGTbqGB8OV7aPUaVIlUtWNEIIHlU0N47 zDeQYkkO6D1Gs04UB8da5HVI00ZdPB5M0YkMQy6IfGYeFIbb/7cSGvwJROPgl9YVRvihcPNH zuap1tJ055DSoToQuKxhw5/qXnI6xH3v8RKwSq2o7SnUmtfTJPmVAu
<<< skipped >>>
GET /CSC3-2010.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: csc3-2010-crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "c29d29b237a2729660dd5d125b7b3de4:1407143412"
Last-Modified: Mon, 04 Aug 2014 09:10:12 GMT
Date: Mon, 04 Aug 2014 21:05:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Connection: Transfer-Encoding
Content-Type: application/pkix-crl
00006000..0....0.......0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at https://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Signing 2010 CA..140804090003Z..140818090003Z0...x0!.....S.@.k....6..c..140730092631Z0!....c..k....D.k.....120708062201Z0!... _...u.t.=.<.&...130218061114Z0!...&..].....P.k.:...120125130117Z0!...7P.x....8.Q...s..130227010252Z0!...J.....Q..Y.[.....110404153956Z0!...d...=..q!_...g9..130729145216Z0!...d....Y.......o...140711083257Z0!...l.....h2<.H......120329152211Z0!...q.9...`H.*.Y.C...120525202212Z0!...s...TM.......0...121221080842Z0!...t..,.. ...eL.....130314222305Z0!...y..r.HW.v.....w..140423054643Z0!..../u.......A..5...101214165045Z0!.....0.Xc...%...iM..121102230226Z0!.......S.a&.X5t.E]..111206083350Z0!....c.(....B.[M83...140108164517Z0!....A.Sv.....f,.....110609003155Z0!.....z......!.ID{]..101228182208Z0!....b^......{d.J'...130102154110Z0!.......n........'u..140521222808Z0!......0..........I..130912181631Z0!....6e...~..T.......130131012247Z0!.........bD#*u......130226223939Z0!.......@..'$.).;}\..130121172259Z0!....7.v..........n..120724160733Z0!....P;.Y..d...c.(...120209181451Z0!.....].bb[.....!....140328205453Z0!.....a...L`..IV.....130402103508Z0!......fFW.z.....@T..130117000242Z0!...........].{7.....120730000000Z0!...".......Z.V.,.e..121031192224Z0!...'....[.1......g..130318195659Z0!...,GI.jH.|...J.....120518121623Z0!...<%a.=.d.......O..120424164254Z0!...@........... .a..121109212441Z0!...L.&L..
<<< skipped >>>
Map
The Backdoor connects to the servers at the folowing location(s):
Strings from Dumps
DatamngrCoordinator.exe_676:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
t.hX*m
t.hX*m
.hh=m
.hh=m
t.Pj:
t.Pj:
3|$83|$0
3|$83|$0
3|$@3|$4
3|$@3|$4
\$,3\$43
\$,3\$43
.QZ^&
.QZ^&
~$)~()|$
~$)~()|$
T$DRSSh
T$DRSSh
xSSSh
xSSSh
FTPjKS
FTPjKS
FtPj;S
FtPj;S
C.PjRV
C.PjRV
.GFy,
.GFy,
8sqliu
8sqliu
u.VWh|/l
u.VWh|/l
2 34 567
2 34 567
<%u7j><pre>X<%u2j><pre>boost::filesystem::directory_iterator::operator </pre><pre>kernel32.dll</pre><pre>Visual C CRT: Not enough memory to complete call to strerror.</pre><pre>Broken pipe</pre><pre>Inappropriate I/O control operation</pre><pre>Operation not permitted</pre><pre>portuguese-brazilian</pre><pre>GetProcessWindowStation</pre><pre>operator</pre><pre>CPPSQLITE_ERROR</pre><pre>SQLITE_DONE</pre><pre>SQLITE_ROW</pre><pre>SQLITE_RANGE</pre><pre>SQLITE_FORMAT</pre><pre>SQLITE_AUTH</pre><pre>SQLITE_NOLFS</pre><pre>SQLITE_MISUSE</pre><pre>SQLITE_MISMATCH</pre><pre>SQLITE_CONSTRAINT</pre><pre>SQLITE_TOOBIG</pre><pre>SQLITE_SCHEMA</pre><pre>SQLITE_EMPTY</pre><pre>SQLITE_PROTOCOL</pre><pre>SQLITE_CANTOPEN</pre><pre>SQLITE_FULL</pre><pre>SQLITE_NOTFOUND</pre><pre>SQLITE_CORRUPT</pre><pre>SQLITE_IOERR</pre><pre>SQLITE_INTERRUPT</pre><pre>SQLITE_READONLY</pre><pre>SQLITE_NOMEM</pre><pre>SQLITE_LOCKED</pre><pre>SQLITE_BUSY</pre><pre>SQLITE_ABORT</pre><pre>SQLITE_PERM</pre><pre>SQLITE_INTERNAL</pre><pre>SQLITE_ERROR</pre><pre>SQLITE_OK</pre><pre>%s[%d]: %s</pre><pre>select count(*) from sqlite_master where type='table' and name='%s'</pre><pre>large file support is disabled</pre><pre>SQL logic error or missing database</pre><pre>foreign_keys</pre><pre>sqlite_compileoption_get</pre><pre>sqlite_compileoption_used</pre><pre>sqlite_source_id</pre><pre>sqlite_version</pre><pre>sqlite_attach</pre><pre>sqlite_detach</pre><pre>sqlite_stat1</pre><pre>sqlite_rename_parent</pre><pre>sqlite_rename_trigger</pre><pre>sqlite_rename_table</pre><pre>RowKey</pre><pre>3.7.3</pre><pre>SQLite format 3</pre><pre>CREATE TABLE sqlite_master(</pre><pre>sql text</pre><pre>CREATE TEMP TABLE sqlite_temp_master(</pre><pre>REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY</pre><pre>922337203685477580</pre><pre>SQLITE_</pre><pre>?API call with %s database connection pointer</pre><pre>%s\etilqs_</pre><pre>OsError 0x%x (%u)</pre><pre>2nd reference to page %d</pre><pre>invalid page number %d</pre><pre>%s(%d)</pre><pre>keyinfo(%d</pre><pre>%r %s BY term out of range - should be between 1 and %d</pre><pre>Expression tree is too large (maximum depth %d)</pre><pre>too many SQL variables</pre><pre>variable number must be between ?1 and ?%d</pre><pre>too many columns in %s</pre><pre>%s OR name=%Q</pre><pre>type='trigger' AND (%s)</pre><pre>SELECT tbl, idx, stat FROM %Q.sqlite_stat1</pre><pre>access to %s.%s.%s is prohibited</pre><pre>access to %s.%s is prohibited</pre><pre>object name reserved for internal use: %s</pre><pre>sqlite_</pre><pre>duplicate column name: %s</pre><pre>too many columns on %s</pre><pre>unknown column "%s" in foreign key definition</pre><pre>number of columns in foreign key does not match the number of columns in the referenced table</pre><pre>foreign key on %s should reference only one column of table %T</pre><pre>a JOIN clause is required before %s</pre><pre>cannot modify %s because it is a view</pre><pre>table %s may not be modified</pre><pre>foreign key mismatch</pre><pre>error during initialization: %s</pre><pre>no entry point [%s] in shared library [%s]</pre><pre>unable to open shared library [%s]</pre><pre>sqlite3_extension_init</pre><pre>unknown or unsupported join type: %T %T%s%T</pre><pre>RIGHT and FULL OUTER JOINs are not currently supported</pre><pre>%s:%d</pre><pre>no such index: %s</pre><pre>UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d</pre><pre>sqlite_master</pre><pre>sqlite_temp_master</pre><pre>vtable constructor did not declare schema: %s</pre><pre>vtable constructor failed: %s</pre><pre>no such module: %s</pre><pre>table %s: xBestIndex returned an invalid plan</pre><pre>database corruption at line %d of [%.10s]</pre><pre>misuse at line %d of [%.10s]</pre><pre>cannot open file at line %d of [%.10s]</pre><pre>failed to allocate %u bytes of memory</pre><pre>failed memory resize %u to %u bytes</pre><pre>Recovered %d frames from WAL file %s</pre><pre>foreign key constraint failed</pre><pre>DELETE FROM %Q.%s WHERE tbl=%Q</pre><pre>CREATE TABLE %Q.%s(%s)</pre><pre>%s %T cannot reference objects in database %s</pre><pre>default value of column [%s] is not constant</pre><pre>UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d</pre><pre>%s - %s</pre><pre>malformed database schema (%s)</pre><pre>cannot join using column %s - column not present in both tables</pre><pre>cannot have both ON and USING clauses in the same join</pre><pre>a NATURAL join may not have an ON or USING clause</pre><pre>%s: %s</pre><pre>%s: %s.%s</pre><pre>%s: %s.%s.%s</pre><pre>misuse of aliased aggregate %s</pre><pre>not authorized to use function: %s</pre><pre>too many terms in %s BY clause</pre><pre>invalid name: "%s"</pre><pre>Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)</pre><pre>Failed to read ptrmap key=%d</pre><pre>failed to get page %d</pre><pre>%d of %d pages missing from overflow list starting at %d</pre><pre>freelist leaf count too big on page %d</pre><pre>Fragmentation of %d bytes reported as %d on page %d</pre><pre>Multiple uses for byte %d of page %d</pre><pre>Corruption detected in cell %d on page %d</pre><pre>On page %d at right child:</pre><pre>On tree page %d cell %d:</pre><pre>unable to get the page. error code=%d</pre><pre>btreeInitPage() returns error code %d</pre><pre>Page %d:</pre><pre>Outstanding page count goes from %d to %d during this analysis</pre><pre>Pointer map page %d is referenced</pre><pre>Page %d is never used</pre><pre>INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')</pre><pre>%s-mjX</pre><pre>unable to use function %s in the requested context</pre><pre>zeroblob(%d)</pre><pre>database %s is locked</pre><pre>cannot detach database %s</pre><pre>no such database: %s</pre><pre>no such collation sequence: %s</pre><pre>%s.%s</pre><pre>unknown database %s</pre><pre>bind on a busy prepared statement: [%s]</pre><pre>%.*s"%w"%s</pre><pre>%s%.*s"%w"</pre><pre>UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q</pre><pre>Cannot add a PRIMARY KEY column</pre><pre>automatic extension loading failed: %s</pre><pre>B}Tunable to close due to unfinished backup operation</pre><pre>d-d-d d:d:d</pre><pre>d:d:d</pre><pre>d-d-d</pre><pre>database schema is locked: %s</pre><pre>SELECTs to the left and right of %s do not have the same number of result columns</pre><pre>LIMIT clause should come after %s not before</pre><pre>ORDER BY clause should come after %s not before</pre><pre>INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';</pre><pre>SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'</pre><pre>SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'</pre><pre>SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>PRAGMA vacuum_db.synchronous=OFF</pre><pre>cannot VACUUM - SQL statements in progress</pre><pre>BmTunknown database: %s</pre><pre>misuse of aggregate: %s()</pre><pre>indexed columns are not unique</pre><pre>PRIMARY KEY must be unique</pre><pre>%s.%s may not be NULL</pre><pre>no such vfs: %s</pre><pre>%s-shm</pre><pre>constraint failed at %d in [%s]</pre><pre>abort at %d in [%s]: %s</pre><pre>database table is locked: %s</pre><pre>cannot change %s wal mode from within a transaction</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid</pre><pre>cannot commit transaction - SQL statements in progress</pre><pre>cannot rollback transaction - SQL statements in progress</pre><pre>cannot %s savepoint - SQL statements in progress</pre><pre>no such savepoint: %s</pre><pre>cannot open savepoint - SQL statements in progress</pre><pre>statement aborts at %d: [%s] %s</pre><pre>sqlite3_get_table() called with two or more incompatible queries</pre><pre>%s ORDER BY</pre><pre>%s VIRTUAL TABLE INDEX %d:%s</pre><pre>%s USING PRIMARY KEY</pre><pre>%s VIA MULTI-INDEX UNION</pre><pre>%s WITH INDEX %s</pre><pre>cannot use index: %s</pre><pre>%s WITH AUTOMATIC INDEX</pre><pre>%s AS %s</pre><pre>TABLE %s</pre><pre>at most %d tables in a join</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid</pre><pre>unsupported file format</pre><pre>no such trigger: %S</pre><pre>unable to open database: %s</pre><pre>database %s is already in use</pre><pre>too many attached databases - max %d</pre><pre>sqlite_sequence</pre><pre>there is already an index named %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q</pre><pre>DELETE FROM %Q.%s WHERE name=%Q AND type='index'</pre><pre>index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped</pre><pre>no such index: %S</pre><pre>unable to identify the object to be reindexed</pre><pre>no such table: %s</pre><pre>sqlite_subquery_%p_</pre><pre>cannot create INSTEAD OF trigger on table: %S</pre><pre>cannot create %s trigger on view: %S</pre><pre>cannot open value of type %s</pre><pre>cannot open %s column for writing</pre><pre>no such column: "%s"</pre><pre>cannot open view: %s</pre><pre>cannot open virtual table: %s</pre><pre>indexed</pre><pre>foreign key</pre><pre>sqlite_altertab_%s</pre><pre>INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);</pre><pre>CREATE%s INDEX %.*s</pre><pre>table %s has no column named %s</pre><pre>sqlite_autoindex_%s_%d</pre><pre>index %s already exists</pre><pre>there is already a table named %s</pre><pre>virtual tables may not be indexed</pre><pre>views may not be indexed</pre><pre>table %s may not be indexed</pre><pre>AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY</pre><pre>table "%s" has more than one primary key</pre><pre>CREATE TABLE %Q.sqlite_sequence(name,seq)</pre><pre>UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d</pre><pre>CREATE %s %.*s</pre><pre>view %s is circularly defined</pre><pre>table %S has no column named %s</pre><pre>%d values for %d columns</pre><pre>table %S has %d columns but %d values were supplied</pre><pre>*** in database %s ***</pre><pre>unsupported encoding: %s</pre><pre>foreign_key_list</pre><pre>no such column: %s</pre><pre>there is already another table or index with this name: %s</pre><pre>UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;</pre><pre>UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q</pre><pre>UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');</pre><pre>UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;</pre><pre>view %s may not be altered</pre><pre>table %s may not be altered</pre><pre>-- TRIGGER %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q</pre><pre>DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'</pre><pre>DELETE FROM %s.sqlite_sequence WHERE name=%Q</pre><pre>use DROP VIEW to delete view %s</pre><pre>use DROP TABLE to delete table %s</pre><pre>table %s may not be dropped</pre><pre>the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>class std::basic_string<wchar_t>,class std::allocator<wchar_t> > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp</pre><pre>void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp</pre><pre>keywords</pre><pre>SELECT value FROM meta WHERE key = 'version'</pre><pre>SELECT %s FROM keywords_backup ORDER BY id ASC</pre><pre>UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'</pre><pre>Not supported chrome db</pre><pre>CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp</pre><pre>void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string<char>,class std::allocator<char> > &)</char></char></pre><pre>DROP TABLE %s</pre><pre>select %s from %s where key = '%s';</pre><pre>select * from %s where %s = '%s';</pre><pre>update %s set %s = %d where key = '%s';</pre><pre>DELETE FROM keywords WHERE short_name = '%s';</pre><pre>INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);</pre><pre>SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'</pre><pre>UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>keywords_backup</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp</pre><pre>{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}</pre><pre>void __thiscall PTL::Interprocess<struct KipodLogger::InterprocessName>::Event<class KipodLogger::NewLogEvent>::Notify(const class std::basic_string<char>,class std::allocator<char> > &,bool)</char></char></class></struct></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp</pre><pre>%d / %m / %y</pre><pre>%I : %M : %S %p</pre><pre>%m / %d / %y</pre><pre>%b %d %H : %M : %S %Y</pre><pre>unsupported version</pre><pre>asio.misc</pre><pre>asio.misc error</pre><pre>Open/Key</pre><pre>Service/Create, Path=%s, Reg=%s</pre><pre>Args=%s</pre><pre>../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>IDdqdCtx/Connect, File=%s</pre><pre>Unsupported IDdqd version = 0x%x. Expected = 0x%x</pre><pre>IDdqd/Ctl Code = 0x%x</pre><pre>WStr::FromRsrc, ID=%u</pre><pre>%s*.%s</pre><pre>%s%u.%s</pre><pre>RegKey::%s %s, Access=0x%x</pre><pre>RegKey::%s %s</pre><pre>VMem/Alloc, Size=%u</pre><pre>HomoHeap/Init, Size=%u</pre><pre>HomoHeap/Alloc, Size=%u</pre><pre>Access violation. Address=0xX, access=%s</pre><pre>SEH Exception. Code=0xX, NumParams=%u, Addr=0xX</pre><pre>System error %u (0xX)</pre><pre>%s. Source=</pre><pre>[u/u/u u:u:u.u]</pre><pre>boost::too_few_args: format-string referred to more arguments than were passed</pre><pre>boost::too_many_args: format-string referred to less arguments than were passed</pre><pre>iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u</pre><pre>\Registry\Machine\System\ControlSetu\Services\%s</pre><pre>Cannot create HTTP request instance</pre><pre>Login to</pre><pre>Login request (not encrypted)</pre><pre>Login request (encrypted)</pre><pre>Update/patch exec timed out</pre><pre>Login successful, attempt to send stats to "</pre><pre>Url is empty, it means statistics will not be sent, but will be deleted</pre><pre>Exception in Login thread:</pre><pre>Unknown exception in Login thread</pre><pre>As I cannot login with url:</pre><pre>thread.entry_event</pre><pre>thread.exit_event</pre><pre>key does not exist. Attempt to create it</pre><pre>BrowserDefendert.job</pre><pre>BrowserDefender.job</pre><pre>BitGuard.job</pre><pre>RegOpenKeyTransactedW</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp</pre><pre>select url from keywords where short_name like '%s'</pre><pre>SQLite Error</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp</pre><pre>class std::vector<class std::basic_string>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string>,class std::allocator<wchar_t> > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></class></wchar_t></class></pre><pre>delete from engine_data where engineid = '%s';</pre><pre>update engine_data set value = '%s' where name = 'order' and value = '%s';</pre><pre>insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');</pre><pre>DELETE FROM addon WHERE id='%s'</pre><pre>INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)</pre><pre>INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')</pre><pre>unsupported exception</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp</pre><pre>Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/json_parser.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp</pre><pre>update meta set value = %s where key = 'Default Search Provider ID';</pre><pre>SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp</pre><pre>void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string<char>,class std::allocator<char> > &)</char></char></pre><pre>KeySize</pre><pre>: this object does't support a special last block</pre><pre>NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes</pre><pre>: this object doesn't support multiple channels</pre><pre>is not a valid key length</pre><pre>%Y-%m-%d %H:%M:%S</pre><pre>UrlEscape failed</pre><pre>UrlEscape succeeded</pre><pre>CMD_LIST_SETTINGS called</pre><pre>CMD_LIST_FOLDERS called</pre><pre>CreateThread failed, GLE=%d.</pre><pre>%s/[d-d-d d_d_d]%s</pre><pre>Crash detected > attempt to %s address %x</pre><pre>Last Error: %d. %s</pre><pre>: this object doesn't support resynchronization</pre><pre>StreamTransformation: this object doesn't support random access</pre><pre>Boost.Variant internal error: 'which' out of range.</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb</pre><pre>OLEAUT32.dll</pre><pre>RegCloseKey</pre><pre>ADVAPI32.dll</pre><pre>SHLWAPI.dll</pre><pre>WS2_32.dll</pre><pre>USER32.dll</pre><pre>GetProcessHeap</pre><pre>CreateIoCompletionPort</pre><pre>KERNEL32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>RegOpenKeyExW</pre><pre>RegCreateKeyExW</pre><pre>ReportEventW</pre><pre>RPCRT4.dll</pre><pre>SensApi.dll</pre><pre>WININET.dll</pre><pre>VERSION.dll</pre><pre>WTSAPI32.dll</pre><pre>GetCPInfo</pre><pre>ConnectNamedPipe</pre><pre>CreateNamedPipeW</pre><pre>DisconnectNamedPipe</pre><pre>WaitNamedPipeW</pre><pre>dbghelp.dll</pre><pre>PSAPI.DLL</pre><pre>ShellExecuteExW</pre><pre>SHFileOperationW</pre><pre>RegDeleteKeyW</pre><pre>RegQueryInfoKeyW</pre><pre>RegEnumKeyExW</pre><pre>RegOpenKeyW</pre><pre>UrlEscapeW</pre><pre>USERENV.dll</pre><pre>PeekNamedPipe</pre><pre>Coordinator.exe</pre><pre>??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ</pre><pre>??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51</pre><pre>?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A</pre><pre>?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A</pre><pre>?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A</pre><pre>?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ</pre><pre>?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z</pre><pre>?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A</pre><pre>.?AVwindows_file_codecvt@@</pre><pre>zcÁ</pre><pre>.?AVCppSQLite3Query@@</pre><pre>.?AVCppSQLite3Table@@</pre><pre>.?AVCppSQLite3Statement@@</pre><pre>.?AVCppSQLite3DB@@</pre><pre>.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@</pre><pre>.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@</pre><pre>.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@</pre><pre>.PAUErrorTag@SystemTools@Tools@@</pre><pre>.PAUPathTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@</pre><pre>.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@</pre><pre>.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@</pre><pre>.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@</pre><pre>.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.PAUMessageTag@ErrorInfo@KipodLogger@@</pre><pre>.PAUWhatTag@PTL@@</pre><pre>.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@</pre><pre>.?AUwincert_x64_token@detail@protection@kipod@@</pre><pre>.?AUwincert_x86_token@detail@protection@kipod@@</pre><pre>.?AUapcrtldr_x86_token@detail@protection@kipod@@</pre><pre>.?AUapcrtldr_x64_token@detail@protection@kipod@@</pre><pre>.?AVOperaStatistic@KipodStatistic@@</pre><pre>.?AVChromeStatistic@KipodStatistic@@</pre><pre>.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@</pre><pre>.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@</pre><pre>.?AVCppSQLite3Exception@@</pre><pre>.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@</pre><pre>.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@</pre><pre>.?AVFireFox@@</pre><pre>.?AVJsonParserExecption@Json@KipodTools@@</pre><pre>.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@</pre><pre>.?AVOpera@@</pre><pre>.?AVChrome@@</pre><pre>.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@</pre><pre>.?AVInvalidKeyLength@CryptoPP@@</pre><pre>.PAVBufferedTransformation@CryptoPP@@</pre><pre>.PAVRandomNumberGenerator@CryptoPP@@</pre><pre>.?AVsettings_pipe_failed@@</pre><pre>.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@</pre><pre>.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@</pre><pre>.?AVSimpleKeyingInterface@CryptoPP@@</pre><pre>.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@</pre><pre>.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@</pre><pre>4$8,4$8~@</pre><pre><!-- Windows 8.1 --></pre><pre><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" /></pre><pre><!-- Windows Vista --></pre><pre><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" /></pre><pre><!-- Windows 7 --></pre><pre><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" /></pre><pre><!-- Windows 8 --></pre><pre><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" /></pre><pre>P<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"></compatibility></assembly></pre><pre><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></pre><pre><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS></pre><pre><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS></pre><pre><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></pre><pre>4(5.585_5</pre><pre>4%4x5</pre><pre>5&505:5~5</pre><pre>24383<3><pre>6-6}6</pre><pre>7Œ8M8\8</pre><pre>!0(0/060;0</pre><pre>3(4,4044484 5</pre><pre>5#5*51585</pre><pre>9Â9</pre><pre>7x7U7h7</pre><pre>0%0X0</pre><pre>3 3$3(3,3</pre><pre>9 9$9(9,909</pre><pre>6}7H7L7P7T7X7\7</pre><pre>;6;;;#=2=@=</pre><pre>3#3'3-313L3Z3}7</pre><pre>4I4s4</pre><pre>4(4@4_4|4</pre><pre>0 2?3x3</pre><pre>6&7573888</pre><pre>9Â9J9P9V9i9</pre><pre>>#?2???[?</pre><pre>2 2$2(2,2</pre><pre>1%1U1g1</pre><pre>5#5'5 5/5</pre><pre>7}7</pre><pre>7!7%7)767,9</pre><pre>>0>4>8><></pre><pre>2034383</pre><pre>4#5,555}5</pre><pre>9(:,:0:4:</pre><pre>5&656^7}7</pre><pre>41484?4{4</pre><pre>4O5U5</pre><pre>7"8'8&:3:</pre><pre>4-585`5}5</pre><pre>3 3$3(3,3034383~3</pre><pre>; ;$;(;,;0;4;8;<;|;</pre><pre>0 0(01080</pre><pre>5%6U6</pre><pre>: :$:(:,:0:4:8:<:><pre>< <$<(<,<0><pre>6 6$6(6,6064686</pre><pre>8 8094989</pre><pre>0,080\0|0</pre><pre>;,;8;\;|;</pre><pre>;,;8;@;`;</pre><pre>7(747<7><pre>pKERNEL32.DLL</pre><pre>mscoree.dll</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>ADVAPI32.DLL</pre><pre>WUSER32.DLL</pre><pre>777705555443332</pre><pre>5555443332</pre><pre>5555443332</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>duser32.dll</pre><pre>%s\%s%X%X</pre><pre>\cmd.exe</pre><pre>Web Server Edition</pre><pre>%1%.%2%.%3%</pre><pre>\/:*?"<>|</pre><pre>_<>:"/\|?*</pre><pre>\\?\UNC\</pre><pre>FirefoxExtension</pre><pre>ChromeDS</pre><pre>FirefoxHomepage</pre><pre>FirefoxSE</pre><pre>FirefoxDE</pre><pre>FirefoxKeyword</pre><pre>ChromeStartPages</pre><pre>ChromeStartPages32</pre><pre>ChromeHomepage</pre><pre>ChromePrefs</pre><pre>ChromeNewTab</pre><pre>Firefox/ProtectionEnabled</pre><pre>Chrome/ProtectionEnabled</pre><pre>ff_nt_supported</pre><pre>ie_ds_supported</pre><pre>ff_ds_supported</pre><pre>chrome_ds_supported</pre><pre>ie_hp_supported</pre><pre>ff_hp_supported</pre><pre>chrome_hp_supported</pre><pre>chrome_nt_supported</pre><pre>Ask.com</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4</pre><pre>{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}</pre><pre>http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=</pre><pre>http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=</pre><pre>{AD130C31-2032-4F53-BB70-0BA27FBC95FB}</pre><pre>http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=</pre><pre>Firefox/Extension</pre><pre>http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>\extensions.sqlite</pre><pre>\extensions.sqlite-journal</pre><pre>Chrome/DefaultSearch</pre><pre>DefaultUrl</pre><pre>DefaultKeyword</pre><pre>\Web Data</pre><pre>\Web Data-journal</pre><pre>Firefox/Homepage</pre><pre>Firefox/HomepageAsked</pre><pre>user_pref("browser.startup.homepage", "$(Value)");</pre><pre>user_pref\("browser\.startup\.homepage", "([^"]*)"\);</pre><pre>\prefs.js</pre><pre>Firefox/SelectedSearch</pre><pre>Firefox/SelectedSearchAsked</pre><pre>user_pref("browser.search.selectedEngine", "$(Value)");</pre><pre>user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);</pre><pre>Firefox/DefaultSearch</pre><pre>Firefox/DefaultSearchAsked</pre><pre>user_pref("browser.search.defaultenginename", "$(Value)");</pre><pre>user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);</pre><pre>Firefox/UrlbarSearch</pre><pre>Firefox/UrlbarSearchAsked</pre><pre>user_pref("keyword.URL", "$(Value)");</pre><pre>user_pref\("keyword\.URL", "([^"]*)"\);</pre><pre>FFUrlbar search</pre><pre>DefaultSuggestionUrl</pre><pre>Chrome/Homepage</pre><pre>backup.homepage</pre><pre>Chrome homepage</pre><pre>Chrome/StartPages</pre><pre>backup.session.urls_to_restore_on_startup</pre><pre>Chrome Start Page</pre><pre>session.urls_to_restore_on_startup</pre><pre>Chrome/StartPagesFrom32Version</pre><pre>backup.session.startup_urls</pre><pre>Chrome Start Page Since 32 version</pre><pre>session.startup_urls</pre><pre>Chrome</pre><pre>Chrome/NewTab</pre><pre>404Url</pre><pre>DNSUrl</pre><pre>SearchUrl</pre><pre>NewTabUrl</pre><pre>RelatedSearchUrl</pre><pre>Firefox/BHO</pre><pre>Error404URL</pre><pre>DNSErrorURL</pre><pre>SearchURL</pre><pre>Firefox/BHO/NativeHelper</pre><pre>Firefox/BHO/DnsBHO</pre><pre>Firefox/BHO/SearchBHO</pre><pre>Firefox/BHO/MainBHO</pre><pre>Firefox/BHO/Error404BHO</pre><pre>Firefox/BHO/NewTabBHO</pre><pre>Firefox/BHO/SessionRestore</pre><pre>SOFTWARE\Mozilla\Mozilla Firefox</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe</pre><pre>SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}</pre><pre>Chrome.exe</pre><pre>http://</pre><pre>%d.%d.%d.%d</pre><pre>\FirefoxToolbar\</pre><pre>\profiles.ini</pre><pre>\Mozilla\Firefox\</pre><pre>\Google\Chrome\User Data\Default</pre><pre>chrome-extension://%1%/config/skin/new-tab.html</pre><pre>\ChromeExtension</pre><pre>JX</pre><pre>{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%</pre><pre>\\.\pipe\DatamngrPipe</pre><pre>backup.homepage_is_newtabpage</pre><pre>backup.browser.show_home_button</pre><pre>backup.session.restore_on_startup</pre><pre>backup.extensions.ids</pre><pre>lchrome.exe</pre><pre>\Google\Chrome\User Data\Default\Preferences</pre><pre>\Google\Chrome\User Data\</pre><pre>\Google\Chrome\User Data\Default\Web Data</pre><pre>search_url</pre><pre>"%1%" : "%2%"</pre><pre>chrome_url_overrides</pre><pre>chrome-extension://%1%/%2%</pre><pre>opera.exe</pre><pre>session.restore_on_startup</pre><pre>\Opera\Opera\operaprefs.ini</pre><pre>\Opera\operaprefs_default.ini</pre><pre>\Opera\Opera\search.ini</pre><pre>\Opera\locale\%1%\search.ini</pre><pre>\Opera\Opera\toolbar\standard_toolbar.ini</pre><pre>Home URL</pre><pre>\Opera\Opera\sessions\autosave.win</pre><pre>Search Panel Toolbar.content</pre><pre>firefox.exe</pre><pre>\Mozilla\Firefox</pre><pre>\search.json</pre><pre>\search.sqlite</pre><pre>\extensions.ini</pre><pre>user_pref("browser.startup.homepage", "</pre><pre>user_pref("browser.startup.page",</pre><pre>user_pref("browser.search.selectedEngine", "</pre><pre>user_pref("browser.search.defaultenginename", "</pre><pre>user_pref("browser.search.order.1", "</pre><pre>user_pref("keyword.URL", "</pre><pre>user_pref("general.useragent.extra.%1%", "</pre><pre>user_pref("%1%.Updater.Enabled", "</pre><pre>xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"</pre><pre>Url[@type='text/html']</pre><pre>windows</pre><pre>Software\Datamngr\Chrome\DS</pre><pre>Software\Datamngr\Files\ChromeHomepage</pre><pre>Software\Mozilla\Mozilla Firefox</pre><pre>http\shell\open\command</pre><pre>software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice</pre><pre>Software\Opera Software</pre><pre>Opera.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Settings</pre><pre>extensions.ini</pre><pre>\install.rdf</pre><pre>xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"</pre><pre>firefox</pre><pre>chrome</pre><pre>opera</pre><pre>G:Url[@type='text/html']</pre><pre>coordinator.cfg</pre><pre>lDatamngr\mgrldr.dll</pre><pre>Datamngr\x64\mgrldr.dll</pre><pre>Datamngr\x64\apcrtldr.dll</pre><pre>Datamngr\apcrtldr.dll</pre><pre>lcoordinator.cfg</pre><pre>general.cfg</pre><pre>DatamngrCoordinator.exe</pre><pre>DatamngrUI.exe</pre><pre>Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2</pre><pre>setmgrc2.cfg</pre><pre>\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622setmgrc2</pre><pre>F06DEFF2-5B9C-490D-910F-35D3A9119622</pre><pre>{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}</pre><pre>Service failed. %s</pre><pre>BInternet Explorer Settings.exe</pre><pre>new_chrome.exe</pre><pre>chrome.exe</pre><pre>ieuser.exe</pre><pre>iexplore.exe</pre><pre>ucsrss.exe</pre><pre>lsass.exe</pre><pre>services.exe</pre><pre>svchost.exe</pre><pre>Windows</pre><pre>Starting Datamngr Coordinator Service, version 5.0.0.13505 built Thu Jul 10 16:42:18 2014</pre><pre>stats.cfg</pre><pre>firefox/homepage</pre><pre>firefox/selectedsearch</pre><pre>chrome/homepage</pre><pre>chrome/defaultsearch</pre><pre><url>%3%</url></pre><pre>WinHttp.WinHttpRequest.5.1</pre><pre>5.0.0.13505</pre><pre>application/x-www-form-urlencoded</pre><pre>login_request</pre><pre>/login_reply/properties/node()</pre><pre>/login_reply/block_exec/file</pre><pre>/login_reply/auto_update/pack_url/node()</pre><pre>/login_reply/patch_update/patch/node()</pre><pre>target_statistics_url</pre><pre>.XML=</pre><pre>SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls</pre><pre>Wincert\win32cert.dll</pre><pre>Wincert\win64cert.dll</pre><pre>%s failed w/err 0xlx</pre><pre>hAdvapi32.dll</pre><pre>bandoobe.com</pre><pre>/login</pre><pre>http://preved.%s</pre><pre>t{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}</pre><pre>{d48c9ead-f59f-4dea-ac97-7065fea79f42}</pre><pre>{af6ac4f2-9825-4fb6-a600-92bc5361f209}</pre><pre>{23cd218f-af09-443f-bbb1-adb89fd5986d}</pre><pre>{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}</pre><pre>{99079a25-328f-4bd4-be04-00955acaa0a7}</pre><pre>{28387537-e3f9-4ed7-860c-11e69af4a8a0}</pre><pre>{b7b37500-99b4-46ad-8bf3-2480bcedc38c}</pre><pre>{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}</pre><pre>search.fantastigames.com</pre><pre>dts.search-results.com</pre><pre>www.gotsearch.com</pre><pre>www.insertsearch.com</pre><pre>www.mlsearch.com</pre><pre>www.searchsupreme.com</pre><pre>www.newsearchtab.com</pre><pre>www.adoresearch.com</pre><pre>www.searchsheet.com</pre><pre>www.searchqu.com</pre><pre>www.searchnu.com</pre><pre>www.searchcore.net</pre><pre>search.lphant.net</pre><pre>search.lphant.com</pre><pre>search.shareazaweb.com</pre><pre>search.shareazaweb.net</pre><pre>search.bearshare.net</pre><pre>search.bearshare.com</pre><pre>search.imesh.com</pre><pre>search.imesh.net</pre><pre>%1%.%2%.%3%.%4%</pre><pre>PathToExe</pre><pre>user_pref("extensions.lastAppVersion", "</pre><pre>user_pref("extensions.lastPlatformVersion", "</pre><pre>user_pref("extensions.extensions.databaseSchema",</pre><pre>%s|%d|%d|%d</pre><pre>backup.pinned_tabs</pre><pre>https</pre><pre>%d.%d</pre><pre>Hlogfile.txt</pre><pre>dwinlogon.exe</pre><pre>Msxml2.DOMDocument.3.0</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp</pre><pre>!valueName.empty()</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp</pre><pre>!value.empty()</pre><pre>!p.empty() && "Empty path not allowed for put_child."</pre><pre>.E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp</pre><pre>!"Boost.Variant internal error: 'which' out of range."</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp</pre><pre>!"#$%&'()* ,</pre><pre>{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}</pre><pre>{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}</pre><pre>Assertion failed: %s, file %s, line %d</pre><pre>m{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>%Program Files%\Music App\Datamngr\DatamngrCoordinator.exe</pre><b>DatamngrCoordinator.exe_736:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>t.hX*m</pre><pre>.hh=m</pre><pre>t.Pj:</pre><pre>3|$83|$0</pre><pre>3|$@3|$4</pre><pre>\$,3\$43</pre><pre>.QZ^&</pre><pre>~$)~()|$</pre><pre>T$DRSSh</pre><pre>xSSSh</pre><pre>FTPjKS</pre><pre>FtPj;S</pre><pre>C.PjRV</pre><pre>.GFy,</pre><pre>8sqliu</pre><pre>u.VWh|/l</pre><pre> 2 34 567</pre><pre><%u7j><pre>X<%u2j><pre>boost::filesystem::directory_iterator::operator </pre><pre>kernel32.dll</pre><pre>Visual C CRT: Not enough memory to complete call to strerror.</pre><pre>Broken pipe</pre><pre>Inappropriate I/O control operation</pre><pre>Operation not permitted</pre><pre>portuguese-brazilian</pre><pre>GetProcessWindowStation</pre><pre>operator</pre><pre>CPPSQLITE_ERROR</pre><pre>SQLITE_DONE</pre><pre>SQLITE_ROW</pre><pre>SQLITE_RANGE</pre><pre>SQLITE_FORMAT</pre><pre>SQLITE_AUTH</pre><pre>SQLITE_NOLFS</pre><pre>SQLITE_MISUSE</pre><pre>SQLITE_MISMATCH</pre><pre>SQLITE_CONSTRAINT</pre><pre>SQLITE_TOOBIG</pre><pre>SQLITE_SCHEMA</pre><pre>SQLITE_EMPTY</pre><pre>SQLITE_PROTOCOL</pre><pre>SQLITE_CANTOPEN</pre><pre>SQLITE_FULL</pre><pre>SQLITE_NOTFOUND</pre><pre>SQLITE_CORRUPT</pre><pre>SQLITE_IOERR</pre><pre>SQLITE_INTERRUPT</pre><pre>SQLITE_READONLY</pre><pre>SQLITE_NOMEM</pre><pre>SQLITE_LOCKED</pre><pre>SQLITE_BUSY</pre><pre>SQLITE_ABORT</pre><pre>SQLITE_PERM</pre><pre>SQLITE_INTERNAL</pre><pre>SQLITE_ERROR</pre><pre>SQLITE_OK</pre><pre>%s[%d]: %s</pre><pre>select count(*) from sqlite_master where type='table' and name='%s'</pre><pre>large file support is disabled</pre><pre>SQL logic error or missing database</pre><pre>foreign_keys</pre><pre>sqlite_compileoption_get</pre><pre>sqlite_compileoption_used</pre><pre>sqlite_source_id</pre><pre>sqlite_version</pre><pre>sqlite_attach</pre><pre>sqlite_detach</pre><pre>sqlite_stat1</pre><pre>sqlite_rename_parent</pre><pre>sqlite_rename_trigger</pre><pre>sqlite_rename_table</pre><pre>RowKey</pre><pre>3.7.3</pre><pre>SQLite format 3</pre><pre>CREATE TABLE sqlite_master(</pre><pre>sql text</pre><pre>CREATE TEMP TABLE sqlite_temp_master(</pre><pre>REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY</pre><pre>922337203685477580</pre><pre>SQLITE_</pre><pre>?API call with %s database connection pointer</pre><pre>%s\etilqs_</pre><pre>OsError 0x%x (%u)</pre><pre>2nd reference to page %d</pre><pre>invalid page number %d</pre><pre>%s(%d)</pre><pre>keyinfo(%d</pre><pre>%r %s BY term out of range - should be between 1 and %d</pre><pre>Expression tree is too large (maximum depth %d)</pre><pre>too many SQL variables</pre><pre>variable number must be between ?1 and ?%d</pre><pre>too many columns in %s</pre><pre>%s OR name=%Q</pre><pre>type='trigger' AND (%s)</pre><pre>SELECT tbl, idx, stat FROM %Q.sqlite_stat1</pre><pre>access to %s.%s.%s is prohibited</pre><pre>access to %s.%s is prohibited</pre><pre>object name reserved for internal use: %s</pre><pre>sqlite_</pre><pre>duplicate column name: %s</pre><pre>too many columns on %s</pre><pre>unknown column "%s" in foreign key definition</pre><pre>number of columns in foreign key does not match the number of columns in the referenced table</pre><pre>foreign key on %s should reference only one column of table %T</pre><pre>a JOIN clause is required before %s</pre><pre>cannot modify %s because it is a view</pre><pre>table %s may not be modified</pre><pre>foreign key mismatch</pre><pre>error during initialization: %s</pre><pre>no entry point [%s] in shared library [%s]</pre><pre>unable to open shared library [%s]</pre><pre>sqlite3_extension_init</pre><pre>unknown or unsupported join type: %T %T%s%T</pre><pre>RIGHT and FULL OUTER JOINs are not currently supported</pre><pre>%s:%d</pre><pre>no such index: %s</pre><pre>UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d</pre><pre>sqlite_master</pre><pre>sqlite_temp_master</pre><pre>vtable constructor did not declare schema: %s</pre><pre>vtable constructor failed: %s</pre><pre>no such module: %s</pre><pre>table %s: xBestIndex returned an invalid plan</pre><pre>database corruption at line %d of [%.10s]</pre><pre>misuse at line %d of [%.10s]</pre><pre>cannot open file at line %d of [%.10s]</pre><pre>failed to allocate %u bytes of memory</pre><pre>failed memory resize %u to %u bytes</pre><pre>Recovered %d frames from WAL file %s</pre><pre>foreign key constraint failed</pre><pre>DELETE FROM %Q.%s WHERE tbl=%Q</pre><pre>CREATE TABLE %Q.%s(%s)</pre><pre>%s %T cannot reference objects in database %s</pre><pre>default value of column [%s] is not constant</pre><pre>UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d</pre><pre>%s - %s</pre><pre>malformed database schema (%s)</pre><pre>cannot join using column %s - column not present in both tables</pre><pre>cannot have both ON and USING clauses in the same join</pre><pre>a NATURAL join may not have an ON or USING clause</pre><pre>%s: %s</pre><pre>%s: %s.%s</pre><pre>%s: %s.%s.%s</pre><pre>misuse of aliased aggregate %s</pre><pre>not authorized to use function: %s</pre><pre>too many terms in %s BY clause</pre><pre>invalid name: "%s"</pre><pre>Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)</pre><pre>Failed to read ptrmap key=%d</pre><pre>failed to get page %d</pre><pre>%d of %d pages missing from overflow list starting at %d</pre><pre>freelist leaf count too big on page %d</pre><pre>Fragmentation of %d bytes reported as %d on page %d</pre><pre>Multiple uses for byte %d of page %d</pre><pre>Corruption detected in cell %d on page %d</pre><pre>On page %d at right child:</pre><pre>On tree page %d cell %d:</pre><pre>unable to get the page. error code=%d</pre><pre>btreeInitPage() returns error code %d</pre><pre>Page %d:</pre><pre>Outstanding page count goes from %d to %d during this analysis</pre><pre>Pointer map page %d is referenced</pre><pre>Page %d is never used</pre><pre>INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')</pre><pre>%s-mjX</pre><pre>unable to use function %s in the requested context</pre><pre>zeroblob(%d)</pre><pre>database %s is locked</pre><pre>cannot detach database %s</pre><pre>no such database: %s</pre><pre>no such collation sequence: %s</pre><pre>%s.%s</pre><pre>unknown database %s</pre><pre>bind on a busy prepared statement: [%s]</pre><pre>%.*s"%w"%s</pre><pre>%s%.*s"%w"</pre><pre>UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q</pre><pre>Cannot add a PRIMARY KEY column</pre><pre>automatic extension loading failed: %s</pre><pre>B}Tunable to close due to unfinished backup operation</pre><pre>d-d-d d:d:d</pre><pre>d:d:d</pre><pre>d-d-d</pre><pre>database schema is locked: %s</pre><pre>SELECTs to the left and right of %s do not have the same number of result columns</pre><pre>LIMIT clause should come after %s not before</pre><pre>ORDER BY clause should come after %s not before</pre><pre>INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';</pre><pre>SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'</pre><pre>SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'</pre><pre>SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>PRAGMA vacuum_db.synchronous=OFF</pre><pre>cannot VACUUM - SQL statements in progress</pre><pre>BmTunknown database: %s</pre><pre>misuse of aggregate: %s()</pre><pre>indexed columns are not unique</pre><pre>PRIMARY KEY must be unique</pre><pre>%s.%s may not be NULL</pre><pre>no such vfs: %s</pre><pre>%s-shm</pre><pre>constraint failed at %d in [%s]</pre><pre>abort at %d in [%s]: %s</pre><pre>database table is locked: %s</pre><pre>cannot change %s wal mode from within a transaction</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid</pre><pre>cannot commit transaction - SQL statements in progress</pre><pre>cannot rollback transaction - SQL statements in progress</pre><pre>cannot %s savepoint - SQL statements in progress</pre><pre>no such savepoint: %s</pre><pre>cannot open savepoint - SQL statements in progress</pre><pre>statement aborts at %d: [%s] %s</pre><pre>sqlite3_get_table() called with two or more incompatible queries</pre><pre>%s ORDER BY</pre><pre>%s VIRTUAL TABLE INDEX %d:%s</pre><pre>%s USING PRIMARY KEY</pre><pre>%s VIA MULTI-INDEX UNION</pre><pre>%s WITH INDEX %s</pre><pre>cannot use index: %s</pre><pre>%s WITH AUTOMATIC INDEX</pre><pre>%s AS %s</pre><pre>TABLE %s</pre><pre>at most %d tables in a join</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid</pre><pre>unsupported file format</pre><pre>no such trigger: %S</pre><pre>unable to open database: %s</pre><pre>database %s is already in use</pre><pre>too many attached databases - max %d</pre><pre>sqlite_sequence</pre><pre>there is already an index named %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q</pre><pre>DELETE FROM %Q.%s WHERE name=%Q AND type='index'</pre><pre>index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped</pre><pre>no such index: %S</pre><pre>unable to identify the object to be reindexed</pre><pre>no such table: %s</pre><pre>sqlite_subquery_%p_</pre><pre>cannot create INSTEAD OF trigger on table: %S</pre><pre>cannot create %s trigger on view: %S</pre><pre>cannot open value of type %s</pre><pre>cannot open %s column for writing</pre><pre>no such column: "%s"</pre><pre>cannot open view: %s</pre><pre>cannot open virtual table: %s</pre><pre>indexed</pre><pre>foreign key</pre><pre>sqlite_altertab_%s</pre><pre>INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);</pre><pre>CREATE%s INDEX %.*s</pre><pre>table %s has no column named %s</pre><pre>sqlite_autoindex_%s_%d</pre><pre>index %s already exists</pre><pre>there is already a table named %s</pre><pre>virtual tables may not be indexed</pre><pre>views may not be indexed</pre><pre>table %s may not be indexed</pre><pre>AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY</pre><pre>table "%s" has more than one primary key</pre><pre>CREATE TABLE %Q.sqlite_sequence(name,seq)</pre><pre>UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d</pre><pre>CREATE %s %.*s</pre><pre>view %s is circularly defined</pre><pre>table %S has no column named %s</pre><pre>%d values for %d columns</pre><pre>table %S has %d columns but %d values were supplied</pre><pre>*** in database %s ***</pre><pre>unsupported encoding: %s</pre><pre>foreign_key_list</pre><pre>no such column: %s</pre><pre>there is already another table or index with this name: %s</pre><pre>UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;</pre><pre>UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q</pre><pre>UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');</pre><pre>UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;</pre><pre>view %s may not be altered</pre><pre>table %s may not be altered</pre><pre>-- TRIGGER %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q</pre><pre>DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'</pre><pre>DELETE FROM %s.sqlite_sequence WHERE name=%Q</pre><pre>use DROP VIEW to delete view %s</pre><pre>use DROP TABLE to delete table %s</pre><pre>table %s may not be dropped</pre><pre>the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>class std::basic_string<wchar_t>,class std::allocator<wchar_t> > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp</pre><pre>void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp</pre><pre>keywords</pre><pre>SELECT value FROM meta WHERE key = 'version'</pre><pre>SELECT %s FROM keywords_backup ORDER BY id ASC</pre><pre>UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'</pre><pre>Not supported chrome db</pre><pre>CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp</pre><pre>void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string<char>,class std::allocator<char> > &)</char></char></pre><pre>DROP TABLE %s</pre><pre>select %s from %s where key = '%s';</pre><pre>select * from %s where %s = '%s';</pre><pre>update %s set %s = %d where key = '%s';</pre><pre>DELETE FROM keywords WHERE short_name = '%s';</pre><pre>INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);</pre><pre>SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'</pre><pre>UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>keywords_backup</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp</pre><pre>{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}</pre><pre>void __thiscall PTL::Interprocess<struct KipodLogger::InterprocessName>::Event<class KipodLogger::NewLogEvent>::Notify(const class std::basic_string<char>,class std::allocator<char> > &,bool)</char></char></class></struct></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp</pre><pre>%d / %m / %y</pre><pre>%I : %M : %S %p</pre><pre>%m / %d / %y</pre><pre>%b %d %H : %M : %S %Y</pre><pre>unsupported version</pre><pre>asio.misc</pre><pre>asio.misc error</pre><pre>Open/Key</pre><pre>Service/Create, Path=%s, Reg=%s</pre><pre>Args=%s</pre><pre>../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>IDdqdCtx/Connect, File=%s</pre><pre>Unsupported IDdqd version = 0x%x. Expected = 0x%x</pre><pre>IDdqd/Ctl Code = 0x%x</pre><pre>WStr::FromRsrc, ID=%u</pre><pre>%s*.%s</pre><pre>%s%u.%s</pre><pre>RegKey::%s %s, Access=0x%x</pre><pre>RegKey::%s %s</pre><pre>VMem/Alloc, Size=%u</pre><pre>HomoHeap/Init, Size=%u</pre><pre>HomoHeap/Alloc, Size=%u</pre><pre>Access violation. Address=0xX, access=%s</pre><pre>SEH Exception. Code=0xX, NumParams=%u, Addr=0xX</pre><pre>System error %u (0xX)</pre><pre>%s. Source=</pre><pre>[u/u/u u:u:u.u]</pre><pre>boost::too_few_args: format-string referred to more arguments than were passed</pre><pre>boost::too_many_args: format-string referred to less arguments than were passed</pre><pre>iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u</pre><pre>\Registry\Machine\System\ControlSetu\Services\%s</pre><pre>Cannot create HTTP request instance</pre><pre>Login to</pre><pre>Login request (not encrypted)</pre><pre>Login request (encrypted)</pre><pre>Update/patch exec timed out</pre><pre>Login successful, attempt to send stats to "</pre><pre>Url is empty, it means statistics will not be sent, but will be deleted</pre><pre>Exception in Login thread:</pre><pre>Unknown exception in Login thread</pre><pre>As I cannot login with url:</pre><pre>thread.entry_event</pre><pre>thread.exit_event</pre><pre>key does not exist. Attempt to create it</pre><pre>BrowserDefendert.job</pre><pre>BrowserDefender.job</pre><pre>BitGuard.job</pre><pre>RegOpenKeyTransactedW</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp</pre><pre>select url from keywords where short_name like '%s'</pre><pre>SQLite Error</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp</pre><pre>class std::vector<class std::basic_string>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string>,class std::allocator<wchar_t> > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></class></wchar_t></class></pre><pre>delete from engine_data where engineid = '%s';</pre><pre>update engine_data set value = '%s' where name = 'order' and value = '%s';</pre><pre>insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');</pre><pre>DELETE FROM addon WHERE id='%s'</pre><pre>INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)</pre><pre>INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')</pre><pre>unsupported exception</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp</pre><pre>Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/json_parser.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp</pre><pre>update meta set value = %s where key = 'Default Search Provider ID';</pre><pre>SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp</pre><pre>void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string<char>,class std::allocator<char> > &)</char></char></pre><pre>KeySize</pre><pre>: this object does't support a special last block</pre><pre>NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes</pre><pre>: this object doesn't support multiple channels</pre><pre>is not a valid key length</pre><pre>%Y-%m-%d %H:%M:%S</pre><pre>UrlEscape failed</pre><pre>UrlEscape succeeded</pre><pre>CMD_LIST_SETTINGS called</pre><pre>CMD_LIST_FOLDERS called</pre><pre>CreateThread failed, GLE=%d.</pre><pre>%s/[d-d-d d_d_d]%s</pre><pre>Crash detected > attempt to %s address %x</pre><pre>Last Error: %d. %s</pre><pre>: this object doesn't support resynchronization</pre><pre>StreamTransformation: this object doesn't support random access</pre><pre>Boost.Variant internal error: 'which' out of range.</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb</pre><pre>OLEAUT32.dll</pre><pre>RegCloseKey</pre><pre>ADVAPI32.dll</pre><pre>SHLWAPI.dll</pre><pre>WS2_32.dll</pre><pre>USER32.dll</pre><pre>GetProcessHeap</pre><pre>CreateIoCompletionPort</pre><pre>KERNEL32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>RegOpenKeyExW</pre><pre>RegCreateKeyExW</pre><pre>ReportEventW</pre><pre>RPCRT4.dll</pre><pre>SensApi.dll</pre><pre>WININET.dll</pre><pre>VERSION.dll</pre><pre>WTSAPI32.dll</pre><pre>GetCPInfo</pre><pre>ConnectNamedPipe</pre><pre>CreateNamedPipeW</pre><pre>DisconnectNamedPipe</pre><pre>WaitNamedPipeW</pre><pre>dbghelp.dll</pre><pre>PSAPI.DLL</pre><pre>ShellExecuteExW</pre><pre>SHFileOperationW</pre><pre>RegDeleteKeyW</pre><pre>RegQueryInfoKeyW</pre><pre>RegEnumKeyExW</pre><pre>RegOpenKeyW</pre><pre>UrlEscapeW</pre><pre>USERENV.dll</pre><pre>PeekNamedPipe</pre><pre>Coordinator.exe</pre><pre>??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ</pre><pre>??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51</pre><pre>?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A</pre><pre>?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A</pre><pre>?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A</pre><pre>?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ</pre><pre>?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z</pre><pre>?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A</pre><pre>.?AVwindows_file_codecvt@@</pre><pre>zcÁ</pre><pre>.?AVCppSQLite3Query@@</pre><pre>.?AVCppSQLite3Table@@</pre><pre>.?AVCppSQLite3Statement@@</pre><pre>.?AVCppSQLite3DB@@</pre><pre>.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@</pre><pre>.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@</pre><pre>.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@</pre><pre>.PAUErrorTag@SystemTools@Tools@@</pre><pre>.PAUPathTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@</pre><pre>.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@</pre><pre>.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@</pre><pre>.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@</pre><pre>.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.PAUMessageTag@ErrorInfo@KipodLogger@@</pre><pre>.PAUWhatTag@PTL@@</pre><pre>.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@</pre><pre>.?AUwincert_x64_token@detail@protection@kipod@@</pre><pre>.?AUwincert_x86_token@detail@protection@kipod@@</pre><pre>.?AUapcrtldr_x86_token@detail@protection@kipod@@</pre><pre>.?AUapcrtldr_x64_token@detail@protection@kipod@@</pre><pre>.?AVOperaStatistic@KipodStatistic@@</pre><pre>.?AVChromeStatistic@KipodStatistic@@</pre><pre>.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@</pre><pre>.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@</pre><pre>.?AVCppSQLite3Exception@@</pre><pre>.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@</pre><pre>.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@</pre><pre>.?AVFireFox@@</pre><pre>.?AVJsonParserExecption@Json@KipodTools@@</pre><pre>.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@</pre><pre>.?AVOpera@@</pre><pre>.?AVChrome@@</pre><pre>.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@</pre><pre>.?AVInvalidKeyLength@CryptoPP@@</pre><pre>.PAVBufferedTransformation@CryptoPP@@</pre><pre>.PAVRandomNumberGenerator@CryptoPP@@</pre><pre>.?AVsettings_pipe_failed@@</pre><pre>.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@</pre><pre>.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@</pre><pre>.?AVSimpleKeyingInterface@CryptoPP@@</pre><pre>.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@</pre><pre>.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@</pre><pre><!-- Windows 8.1 --></pre><pre><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" /></pre><pre><!-- Windows Vista --></pre><pre><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" /></pre><pre><!-- Windows 7 --></pre><pre><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" /></pre><pre><!-- Windows 8 --></pre><pre><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" /></pre><pre>P<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"></compatibility></assembly></pre><pre><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></pre><pre><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS></pre><pre><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS></pre><pre><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></pre><pre>4(5.585_5</pre><pre>4%4x5</pre><pre>5&505:5~5</pre><pre>24383<3><pre>6-6}6</pre><pre>7Œ8M8\8</pre><pre>!0(0/060;0</pre><pre>3(4,4044484 5</pre><pre>5#5*51585</pre><pre>9Â9</pre><pre>7x7U7h7</pre><pre>0%0X0</pre><pre>3 3$3(3,3</pre><pre>9 9$9(9,909</pre><pre>6}7H7L7P7T7X7\7</pre><pre>;6;;;#=2=@=</pre><pre>3#3'3-313L3Z3}7</pre><pre>4I4s4</pre><pre>4(4@4_4|4</pre><pre>0 2?3x3</pre><pre>6&7573888</pre><pre>9Â9J9P9V9i9</pre><pre>>#?2???[?</pre><pre>2 2$2(2,2</pre><pre>1%1U1g1</pre><pre>5#5'5 5/5</pre><pre>7}7</pre><pre>7!7%7)767,9</pre><pre>>0>4>8><></pre><pre>2034383</pre><pre>4#5,555}5</pre><pre>9(:,:0:4:</pre><pre>5&656^7}7</pre><pre>41484?4{4</pre><pre>4O5U5</pre><pre>7"8'8&:3:</pre><pre>4-585`5}5</pre><pre>3 3$3(3,3034383~3</pre><pre>; ;$;(;,;0;4;8;<;|;</pre><pre>0 0(01080</pre><pre>5%6U6</pre><pre>: :$:(:,:0:4:8:<:><pre>< <$<(<,<0><pre>6 6$6(6,6064686</pre><pre>8 8094989</pre><pre>0,080\0|0</pre><pre>;,;8;\;|;</pre><pre>;,;8;@;`;</pre><pre>7(747<7><pre>pKERNEL32.DLL</pre><pre>mscoree.dll</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>ADVAPI32.DLL</pre><pre>WUSER32.DLL</pre><pre>777705555443332</pre><pre>5555443332</pre><pre>5555443332</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>duser32.dll</pre><pre>%s\%s%X%X</pre><pre>\cmd.exe</pre><pre>Web Server Edition</pre><pre>%1%.%2%.%3%</pre><pre>\/:*?"<>|</pre><pre>_<>:"/\|?*</pre><pre>\\?\UNC\</pre><pre>FirefoxExtension</pre><pre>ChromeDS</pre><pre>FirefoxHomepage</pre><pre>FirefoxSE</pre><pre>FirefoxDE</pre><pre>FirefoxKeyword</pre><pre>ChromeStartPages</pre><pre>ChromeStartPages32</pre><pre>ChromeHomepage</pre><pre>ChromePrefs</pre><pre>ChromeNewTab</pre><pre>Firefox/ProtectionEnabled</pre><pre>Chrome/ProtectionEnabled</pre><pre>ff_nt_supported</pre><pre>ie_ds_supported</pre><pre>ff_ds_supported</pre><pre>chrome_ds_supported</pre><pre>ie_hp_supported</pre><pre>ff_hp_supported</pre><pre>chrome_hp_supported</pre><pre>chrome_nt_supported</pre><pre>Ask.com</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4</pre><pre>{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}</pre><pre>http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=</pre><pre>http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=</pre><pre>{AD130C31-2032-4F53-BB70-0BA27FBC95FB}</pre><pre>http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=</pre><pre>Firefox/Extension</pre><pre>http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>\extensions.sqlite</pre><pre>\extensions.sqlite-journal</pre><pre>Chrome/DefaultSearch</pre><pre>DefaultUrl</pre><pre>DefaultKeyword</pre><pre>\Web Data</pre><pre>\Web Data-journal</pre><pre>Firefox/Homepage</pre><pre>Firefox/HomepageAsked</pre><pre>user_pref("browser.startup.homepage", "$(Value)");</pre><pre>user_pref\("browser\.startup\.homepage", "([^"]*)"\);</pre><pre>\prefs.js</pre><pre>Firefox/SelectedSearch</pre><pre>Firefox/SelectedSearchAsked</pre><pre>user_pref("browser.search.selectedEngine", "$(Value)");</pre><pre>user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);</pre><pre>Firefox/DefaultSearch</pre><pre>Firefox/DefaultSearchAsked</pre><pre>user_pref("browser.search.defaultenginename", "$(Value)");</pre><pre>user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);</pre><pre>Firefox/UrlbarSearch</pre><pre>Firefox/UrlbarSearchAsked</pre><pre>user_pref("keyword.URL", "$(Value)");</pre><pre>user_pref\("keyword\.URL", "([^"]*)"\);</pre><pre>FFUrlbar search</pre><pre>DefaultSuggestionUrl</pre><pre>Chrome/Homepage</pre><pre>backup.homepage</pre><pre>Chrome homepage</pre><pre>Chrome/StartPages</pre><pre>backup.session.urls_to_restore_on_startup</pre><pre>Chrome Start Page</pre><pre>session.urls_to_restore_on_startup</pre><pre>Chrome/StartPagesFrom32Version</pre><pre>backup.session.startup_urls</pre><pre>Chrome Start Page Since 32 version</pre><pre>session.startup_urls</pre><pre>Chrome</pre><pre>Chrome/NewTab</pre><pre>404Url</pre><pre>DNSUrl</pre><pre>SearchUrl</pre><pre>NewTabUrl</pre><pre>RelatedSearchUrl</pre><pre>Firefox/BHO</pre><pre>Error404URL</pre><pre>DNSErrorURL</pre><pre>SearchURL</pre><pre>Firefox/BHO/NativeHelper</pre><pre>Firefox/BHO/DnsBHO</pre><pre>Firefox/BHO/SearchBHO</pre><pre>Firefox/BHO/MainBHO</pre><pre>Firefox/BHO/Error404BHO</pre><pre>Firefox/BHO/NewTabBHO</pre><pre>Firefox/BHO/SessionRestore</pre><pre>SOFTWARE\Mozilla\Mozilla Firefox</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe</pre><pre>SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}</pre><pre>Chrome.exe</pre><pre>http://</pre><pre>%d.%d.%d.%d</pre><pre>\FirefoxToolbar\</pre><pre>\profiles.ini</pre><pre>\Mozilla\Firefox\</pre><pre>\Google\Chrome\User Data\Default</pre><pre>chrome-extension://%1%/config/skin/new-tab.html</pre><pre>\ChromeExtension</pre><pre>JX</pre><pre>{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%</pre><pre>\\.\pipe\DatamngrPipe</pre><pre>backup.homepage_is_newtabpage</pre><pre>backup.browser.show_home_button</pre><pre>backup.session.restore_on_startup</pre><pre>backup.extensions.ids</pre><pre>lchrome.exe</pre><pre>\Google\Chrome\User Data\Default\Preferences</pre><pre>\Google\Chrome\User Data\</pre><pre>\Google\Chrome\User Data\Default\Web Data</pre><pre>search_url</pre><pre>"%1%" : "%2%"</pre><pre>chrome_url_overrides</pre><pre>chrome-extension://%1%/%2%</pre><pre>opera.exe</pre><pre>session.restore_on_startup</pre><pre>\Opera\Opera\operaprefs.ini</pre><pre>\Opera\operaprefs_default.ini</pre><pre>\Opera\Opera\search.ini</pre><pre>\Opera\locale\%1%\search.ini</pre><pre>\Opera\Opera\toolbar\standard_toolbar.ini</pre><pre>Home URL</pre><pre>\Opera\Opera\sessions\autosave.win</pre><pre>Search Panel Toolbar.content</pre><pre>firefox.exe</pre><pre>\Mozilla\Firefox</pre><pre>\search.json</pre><pre>\search.sqlite</pre><pre>\extensions.ini</pre><pre>user_pref("browser.startup.homepage", "</pre><pre>user_pref("browser.startup.page",</pre><pre>user_pref("browser.search.selectedEngine", "</pre><pre>user_pref("browser.search.defaultenginename", "</pre><pre>user_pref("browser.search.order.1", "</pre><pre>user_pref("keyword.URL", "</pre><pre>user_pref("general.useragent.extra.%1%", "</pre><pre>user_pref("%1%.Updater.Enabled", "</pre><pre>xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"</pre><pre>Url[@type='text/html']</pre><pre>windows</pre><pre>Software\Datamngr\Chrome\DS</pre><pre>Software\Datamngr\Files\ChromeHomepage</pre><pre>Software\Mozilla\Mozilla Firefox</pre><pre>http\shell\open\command</pre><pre>software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice</pre><pre>Software\Opera Software</pre><pre>Opera.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Settings</pre><pre>extensions.ini</pre><pre>\install.rdf</pre><pre>xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"</pre><pre>firefox</pre><pre>chrome</pre><pre>opera</pre><pre>G:Url[@type='text/html']</pre><pre>coordinator.cfg</pre><pre>lDatamngr\mgrldr.dll</pre><pre>Datamngr\x64\mgrldr.dll</pre><pre>Datamngr\x64\apcrtldr.dll</pre><pre>Datamngr\apcrtldr.dll</pre><pre>lcoordinator.cfg</pre><pre>general.cfg</pre><pre>DatamngrCoordinator.exe</pre><pre>DatamngrUI.exe</pre><pre>Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2</pre><pre>setmgrc2.cfg</pre><pre>\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622setmgrc2</pre><pre>F06DEFF2-5B9C-490D-910F-35D3A9119622</pre><pre>{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}</pre><pre>Service failed. %s</pre><pre>BInternet Explorer Settings.exe</pre><pre>new_chrome.exe</pre><pre>chrome.exe</pre><pre>ieuser.exe</pre><pre>iexplore.exe</pre><pre>ucsrss.exe</pre><pre>lsass.exe</pre><pre>services.exe</pre><pre>svchost.exe</pre><pre>Windows</pre><pre>Starting Datamngr Coordinator Service, version 5.0.0.13505 built Thu Jul 10 16:42:18 2014</pre><pre>stats.cfg</pre><pre>firefox/homepage</pre><pre>firefox/selectedsearch</pre><pre>chrome/homepage</pre><pre>chrome/defaultsearch</pre><pre><url>%3%</url></pre><pre>WinHttp.WinHttpRequest.5.1</pre><pre>5.0.0.13505</pre><pre>application/x-www-form-urlencoded</pre><pre>login_request</pre><pre>/login_reply/properties/node()</pre><pre>/login_reply/block_exec/file</pre><pre>/login_reply/auto_update/pack_url/node()</pre><pre>/login_reply/patch_update/patch/node()</pre><pre>target_statistics_url</pre><pre>.XML=</pre><pre>SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls</pre><pre>Wincert\win32cert.dll</pre><pre>Wincert\win64cert.dll</pre><pre>%s failed w/err 0xlx</pre><pre>hAdvapi32.dll</pre><pre>bandoobe.com</pre><pre>/login</pre><pre>http://preved.%s</pre><pre>t{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}</pre><pre>{d48c9ead-f59f-4dea-ac97-7065fea79f42}</pre><pre>{af6ac4f2-9825-4fb6-a600-92bc5361f209}</pre><pre>{23cd218f-af09-443f-bbb1-adb89fd5986d}</pre><pre>{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}</pre><pre>{99079a25-328f-4bd4-be04-00955acaa0a7}</pre><pre>{28387537-e3f9-4ed7-860c-11e69af4a8a0}</pre><pre>{b7b37500-99b4-46ad-8bf3-2480bcedc38c}</pre><pre>{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}</pre><pre>search.fantastigames.com</pre><pre>dts.search-results.com</pre><pre>www.gotsearch.com</pre><pre>www.insertsearch.com</pre><pre>www.mlsearch.com</pre><pre>www.searchsupreme.com</pre><pre>www.newsearchtab.com</pre><pre>www.adoresearch.com</pre><pre>www.searchsheet.com</pre><pre>www.searchqu.com</pre><pre>www.searchnu.com</pre><pre>www.searchcore.net</pre><pre>search.lphant.net</pre><pre>search.lphant.com</pre><pre>search.shareazaweb.com</pre><pre>search.shareazaweb.net</pre><pre>search.bearshare.net</pre><pre>search.bearshare.com</pre><pre>search.imesh.com</pre><pre>search.imesh.net</pre><pre>%1%.%2%.%3%.%4%</pre><pre>PathToExe</pre><pre>user_pref("extensions.lastAppVersion", "</pre><pre>user_pref("extensions.lastPlatformVersion", "</pre><pre>user_pref("extensions.extensions.databaseSchema",</pre><pre>%s|%d|%d|%d</pre><pre>backup.pinned_tabs</pre><pre>https</pre><pre>%d.%d</pre><pre>Hlogfile.txt</pre><pre>dwinlogon.exe</pre><pre>Msxml2.DOMDocument.3.0</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp</pre><pre>!valueName.empty()</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp</pre><pre>!value.empty()</pre><pre>!p.empty() && "Empty path not allowed for put_child."</pre><pre>.E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp</pre><pre>!"Boost.Variant internal error: 'which' out of range."</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp</pre><pre>!"#$%&'()* ,</pre><pre>{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}</pre><pre>{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}</pre><pre>Assertion failed: %s, file %s, line %d</pre><pre>m{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>%Program Files%\Music App\Datamngr\DatamngrCoordinator.exe</pre><b>DatamngrCoordinator.exe_736_rwx_00030000_00001000:</b><pre>%Program Files%\Music App\Datamngr\mgrldr.dll</pre><b>DatamngrUI.exe_1308:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>8%uNP</pre><pre>tùX</pre><pre>SSSSh</pre><pre>3|$83|$0</pre><pre>3|$@3|$4</pre><pre>\$,3\$43</pre><pre>~$)~()|$</pre><pre>.QZ^&</pre><pre>.GFy,</pre><pre>8sqliu</pre><pre>u.VWhl</pre><pre> 2 34 567</pre><pre>T$DRSSh</pre><pre>xSSSh</pre><pre>FTPjKS</pre><pre>FtPj;S</pre><pre>C.PjRV</pre><pre><%u7j><pre>X<%u2j><pre>CPPSQLITE_ERROR</pre><pre>SQLITE_DONE</pre><pre>SQLITE_ROW</pre><pre>SQLITE_RANGE</pre><pre>SQLITE_FORMAT</pre><pre>SQLITE_AUTH</pre><pre>SQLITE_NOLFS</pre><pre>SQLITE_MISUSE</pre><pre>SQLITE_MISMATCH</pre><pre>SQLITE_CONSTRAINT</pre><pre>SQLITE_TOOBIG</pre><pre>SQLITE_SCHEMA</pre><pre>SQLITE_EMPTY</pre><pre>SQLITE_PROTOCOL</pre><pre>SQLITE_CANTOPEN</pre><pre>SQLITE_FULL</pre><pre>SQLITE_NOTFOUND</pre><pre>SQLITE_CORRUPT</pre><pre>SQLITE_IOERR</pre><pre>SQLITE_INTERRUPT</pre><pre>SQLITE_READONLY</pre><pre>SQLITE_NOMEM</pre><pre>SQLITE_LOCKED</pre><pre>SQLITE_BUSY</pre><pre>SQLITE_ABORT</pre><pre>SQLITE_PERM</pre><pre>SQLITE_INTERNAL</pre><pre>SQLITE_ERROR</pre><pre>SQLITE_OK</pre><pre>%s[%d]: %s</pre><pre>select count(*) from sqlite_master where type='table' and name='%s'</pre><pre>large file support is disabled</pre><pre>SQL logic error or missing database</pre><pre>foreign_keys</pre><pre>sqlite_compileoption_get</pre><pre>sqlite_compileoption_used</pre><pre>sqlite_source_id</pre><pre>sqlite_version</pre><pre>sqlite_attach</pre><pre>sqlite_detach</pre><pre>sqlite_stat1</pre><pre>sqlite_rename_parent</pre><pre>sqlite_rename_trigger</pre><pre>sqlite_rename_table</pre><pre>RowKey</pre><pre>3.7.3</pre><pre>SQLite format 3</pre><pre>CREATE TABLE sqlite_master(</pre><pre>sql text</pre><pre>CREATE TEMP TABLE sqlite_temp_master(</pre><pre>REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY</pre><pre>922337203685477580</pre><pre>SQLITE_</pre><pre>?API call with %s database connection pointer</pre><pre>%s\etilqs_</pre><pre>OsError 0x%x (%u)</pre><pre>2nd reference to page %d</pre><pre>invalid page number %d</pre><pre>%s(%d)</pre><pre>keyinfo(%d</pre><pre>%r %s BY term out of range - should be between 1 and %d</pre><pre>Expression tree is too large (maximum depth %d)</pre><pre>too many SQL variables</pre><pre>variable number must be between ?1 and ?%d</pre><pre>too many columns in %s</pre><pre>%s OR name=%Q</pre><pre>type='trigger' AND (%s)</pre><pre>SELECT tbl, idx, stat FROM %Q.sqlite_stat1</pre><pre>access to %s.%s.%s is prohibited</pre><pre>access to %s.%s is prohibited</pre><pre>object name reserved for internal use: %s</pre><pre>sqlite_</pre><pre>duplicate column name: %s</pre><pre>too many columns on %s</pre><pre>unknown column "%s" in foreign key definition</pre><pre>number of columns in foreign key does not match the number of columns in the referenced table</pre><pre>foreign key on %s should reference only one column of table %T</pre><pre>a JOIN clause is required before %s</pre><pre>cannot modify %s because it is a view</pre><pre>table %s may not be modified</pre><pre>foreign key mismatch</pre><pre>error during initialization: %s</pre><pre>no entry point [%s] in shared library [%s]</pre><pre>unable to open shared library [%s]</pre><pre>sqlite3_extension_init</pre><pre>unknown or unsupported join type: %T %T%s%T</pre><pre>RIGHT and FULL OUTER JOINs are not currently supported</pre><pre>%s:%d</pre><pre>no such index: %s</pre><pre>UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d</pre><pre>sqlite_master</pre><pre>sqlite_temp_master</pre><pre>vtable constructor did not declare schema: %s</pre><pre>vtable constructor failed: %s</pre><pre>no such module: %s</pre><pre>table %s: xBestIndex returned an invalid plan</pre><pre>database corruption at line %d of [%.10s]</pre><pre>misuse at line %d of [%.10s]</pre><pre>cannot open file at line %d of [%.10s]</pre><pre>failed to allocate %u bytes of memory</pre><pre>failed memory resize %u to %u bytes</pre><pre>Recovered %d frames from WAL file %s</pre><pre>foreign key constraint failed</pre><pre>DELETE FROM %Q.%s WHERE tbl=%Q</pre><pre>CREATE TABLE %Q.%s(%s)</pre><pre>%s %T cannot reference objects in database %s</pre><pre>default value of column [%s] is not constant</pre><pre>UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d</pre><pre>%s - %s</pre><pre>malformed database schema (%s)</pre><pre>cannot join using column %s - column not present in both tables</pre><pre>cannot have both ON and USING clauses in the same join</pre><pre>a NATURAL join may not have an ON or USING clause</pre><pre>%s: %s</pre><pre>%s: %s.%s</pre><pre>%s: %s.%s.%s</pre><pre>misuse of aliased aggregate %s</pre><pre>not authorized to use function: %s</pre><pre>too many terms in %s BY clause</pre><pre>invalid name: "%s"</pre><pre>Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)</pre><pre>Failed to read ptrmap key=%d</pre><pre>failed to get page %d</pre><pre>%d of %d pages missing from overflow list starting at %d</pre><pre>freelist leaf count too big on page %d</pre><pre>Fragmentation of %d bytes reported as %d on page %d</pre><pre>Multiple uses for byte %d of page %d</pre><pre>Corruption detected in cell %d on page %d</pre><pre>On page %d at right child:</pre><pre>On tree page %d cell %d:</pre><pre>unable to get the page. error code=%d</pre><pre>btreeInitPage() returns error code %d</pre><pre>Page %d:</pre><pre>Outstanding page count goes from %d to %d during this analysis</pre><pre>Pointer map page %d is referenced</pre><pre>Page %d is never used</pre><pre>INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')</pre><pre>%s-mjX</pre><pre>unable to use function %s in the requested context</pre><pre>zeroblob(%d)</pre><pre>database %s is locked</pre><pre>cannot detach database %s</pre><pre>no such database: %s</pre><pre>no such collation sequence: %s</pre><pre>%s.%s</pre><pre>unknown database %s</pre><pre>bind on a busy prepared statement: [%s]</pre><pre>%.*s"%w"%s</pre><pre>%s%.*s"%w"</pre><pre>UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q</pre><pre>Cannot add a PRIMARY KEY column</pre><pre>automatic extension loading failed: %s</pre><pre>B}Tunable to close due to unfinished backup operation</pre><pre>d-d-d d:d:d</pre><pre>d:d:d</pre><pre>d-d-d</pre><pre>database schema is locked: %s</pre><pre>SELECTs to the left and right of %s do not have the same number of result columns</pre><pre>LIMIT clause should come after %s not before</pre><pre>ORDER BY clause should come after %s not before</pre><pre>INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';</pre><pre>SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'</pre><pre>SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'</pre><pre>SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'</pre><pre>SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0</pre><pre>PRAGMA vacuum_db.synchronous=OFF</pre><pre>cannot VACUUM - SQL statements in progress</pre><pre>BmTunknown database: %s</pre><pre>misuse of aggregate: %s()</pre><pre>indexed columns are not unique</pre><pre>PRIMARY KEY must be unique</pre><pre>%s.%s may not be NULL</pre><pre>no such vfs: %s</pre><pre>%s-shm</pre><pre>constraint failed at %d in [%s]</pre><pre>abort at %d in [%s]: %s</pre><pre>database table is locked: %s</pre><pre>cannot change %s wal mode from within a transaction</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid</pre><pre>cannot commit transaction - SQL statements in progress</pre><pre>cannot rollback transaction - SQL statements in progress</pre><pre>cannot %s savepoint - SQL statements in progress</pre><pre>no such savepoint: %s</pre><pre>cannot open savepoint - SQL statements in progress</pre><pre>statement aborts at %d: [%s] %s</pre><pre>sqlite3_get_table() called with two or more incompatible queries</pre><pre>%s ORDER BY</pre><pre>%s VIRTUAL TABLE INDEX %d:%s</pre><pre>%s USING PRIMARY KEY</pre><pre>%s VIA MULTI-INDEX UNION</pre><pre>%s WITH INDEX %s</pre><pre>cannot use index: %s</pre><pre>%s WITH AUTOMATIC INDEX</pre><pre>%s AS %s</pre><pre>TABLE %s</pre><pre>at most %d tables in a join</pre><pre>SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid</pre><pre>unsupported file format</pre><pre>no such trigger: %S</pre><pre>unable to open database: %s</pre><pre>database %s is already in use</pre><pre>too many attached databases - max %d</pre><pre>sqlite_sequence</pre><pre>there is already an index named %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q</pre><pre>DELETE FROM %Q.%s WHERE name=%Q AND type='index'</pre><pre>index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped</pre><pre>no such index: %S</pre><pre>unable to identify the object to be reindexed</pre><pre>no such table: %s</pre><pre>sqlite_subquery_%p_</pre><pre>cannot create INSTEAD OF trigger on table: %S</pre><pre>cannot create %s trigger on view: %S</pre><pre>cannot open value of type %s</pre><pre>cannot open %s column for writing</pre><pre>no such column: "%s"</pre><pre>cannot open view: %s</pre><pre>cannot open virtual table: %s</pre><pre>indexed</pre><pre>foreign key</pre><pre>sqlite_altertab_%s</pre><pre>INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);</pre><pre>CREATE%s INDEX %.*s</pre><pre>table %s has no column named %s</pre><pre>sqlite_autoindex_%s_%d</pre><pre>index %s already exists</pre><pre>there is already a table named %s</pre><pre>virtual tables may not be indexed</pre><pre>views may not be indexed</pre><pre>table %s may not be indexed</pre><pre>AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY</pre><pre>table "%s" has more than one primary key</pre><pre>CREATE TABLE %Q.sqlite_sequence(name,seq)</pre><pre>UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d</pre><pre>CREATE %s %.*s</pre><pre>view %s is circularly defined</pre><pre>table %S has no column named %s</pre><pre>%d values for %d columns</pre><pre>table %S has %d columns but %d values were supplied</pre><pre>*** in database %s ***</pre><pre>unsupported encoding: %s</pre><pre>foreign_key_list</pre><pre>no such column: %s</pre><pre>there is already another table or index with this name: %s</pre><pre>UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;</pre><pre>UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q</pre><pre>UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');</pre><pre>UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;</pre><pre>view %s may not be altered</pre><pre>table %s may not be altered</pre><pre>-- TRIGGER %s</pre><pre>DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q</pre><pre>DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'</pre><pre>DELETE FROM %s.sqlite_sequence WHERE name=%Q</pre><pre>use DROP VIEW to delete view %s</pre><pre>use DROP TABLE to delete table %s</pre><pre>table %s may not be dropped</pre><pre>the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>class std::basic_string<wchar_t>,class std::allocator<wchar_t> > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp</pre><pre>void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &,const class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></wchar_t></wchar_t></pre><pre>unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string<wchar_t>,class std::allocator<wchar_t> > &)</wchar_t></wchar_t></pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp</pre><pre>keywords</pre><pre>SELECT value FROM meta WHERE key = 'version'</pre><pre>SELECT %s FROM keywords_backup ORDER BY id ASC</pre><pre>UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'</pre><pre>Not supported chrome db</pre><pre>CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'</pre><pre>UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp</pre><pre>void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string<char>,class std::allocator<char> > &)</char></char></pre><pre>DROP TABLE %s</pre><pre>select %s from %s where key = '%s';</pre><pre>select * from %s where %s = '%s';</pre><pre>update %s set %s = %d where key = '%s';</pre><pre>DELETE FROM keywords WHERE short_name = '%s';</pre><pre>INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);</pre><pre>SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'</pre><pre>UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid</pre><pre>keywords_backup</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\IETools.cpp</pre><pre>bool __cdecl KipodTools::IETools::`anonymous-namespace'::UnlockKey(struct HKEY__ *)</pre><pre>bool __cdecl KipodTools::IETools::`anonymous-namespace'::LockKey(struct HKEY__ *)</pre><pre>Only Internet Explorer code should write this user setting. See http://go.microsoft.com/fwlink/?LinkId=159651 for more details.</pre><pre>WTSAPI32.dll</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp</pre><pre>boost::filesystem::directory_iterator::operator </pre><pre>kernel32.dll</pre><pre>Can't terminate a sub-expression with an alternation operator |.</pre><pre>A regular expression can start with the alternation operator |.</pre><pre>Alternation operators are not allowed inside a DEFINE block.</pre><pre>More than one alternation operator | was encountered inside a conditional expression.</pre><pre>A repetition operator cannot be applied to a zero-width assertion.</pre><pre>Invalid alternation operators within (?...) block.</pre><pre>The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.</pre><pre>Found a closing repetition operator } with no corresponding {.</pre><pre>The repeat operator " " cannot start a regular expression.</pre><pre>The repeat operator "?" cannot start a regular expression.</pre><pre>The repeat operator "*" cannot start a regular expression.</pre><pre>right-curly-bracket</pre><pre>left-curly-bracket</pre><pre>0123456789</pre><pre>Unmatched quantified repeat operator { or \{.</pre><pre>Invalid preceding regular expression prior to repetition operator.</pre><pre>unsupported version</pre><pre>Visual C CRT: Not enough memory to complete call to strerror.</pre><pre>GetProcessWindowStation</pre><pre>Broken pipe</pre><pre>Inappropriate I/O control operation</pre><pre>Operation not permitted</pre><pre>portuguese-brazilian</pre><pre>operator</pre><pre>%d / %m / %y</pre><pre>%I : %M : %S %p</pre><pre>%m / %d / %y</pre><pre>%b %d %H : %M : %S %Y</pre><pre>backup.homepage</pre><pre>backup.homepage_is_newtabpage</pre><pre>backup.browser.show_home_button</pre><pre>backup.session.restore_on_startup</pre><pre>backup.session.urls_to_restore_on_startup</pre><pre>backup.extensions.ids</pre><pre>RegOpenKeyTransactedW</pre><pre>RegCreateKeyTransactedW</pre><pre>RegDeleteKeyTransactedW</pre><pre>RegDeleteKeyExW</pre><pre>unsupported exception</pre><pre>../../../../CGL/Libs\boost/property_tree_typed/string_path.hpp</pre><pre>Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag</pre><pre>../../../../CGL/Libs\boost/property_tree_typed/json_parser.hpp</pre><pre>../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_read.hpp</pre><pre>../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_write.hpp</pre><pre>../../../../CGL/Libs\boost/property_tree_typed/detail/ptree_implementation.hpp</pre><pre>%s|%d|%d|%d</pre><pre>backup.pinned_tabs</pre><pre>boost::too_few_args: format-string referred to more arguments than were passed</pre><pre>boost::too_many_args: format-string referred to less arguments than were passed</pre><pre>SELECT internal_id FROM addon WHERE id='%s'</pre><pre>INSERT INTO addon (id, location, type, visible, active, userDisabled, appDisabled, descriptor, softDisabled, pendingUninstall) VALUES ('%s', 'app-profile', 'extension', 1, 1, 0, 0, '%s', 0, 0)</pre><pre>UPDATE addon SET userDisabled='%i', appDisabled='%i', softDisabled='%i', active='%i' WHERE id='%s'</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp</pre><pre>{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}</pre><pre>../../../../CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp</pre><pre>void __thiscall PTL::Interprocess<struct KipodLogger::InterprocessName>::Event<class KipodLogger::NewLogEvent>::Notify(const class std::basic_string<char>,class std::allocator<char> > &,bool)</char></char></class></struct></pre><pre>../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodUI\KipodUI\Protector\KeyProtect.cpp</pre><pre>class std::basic_string<wchar_t>,class std::allocator<wchar_t> > __thiscall ProtectKeyInfo::GetDisplayRealValue(void) const</wchar_t></wchar_t></pre><pre>yahoo.com</pre><pre>ask.com</pre><pre>imesh web search</pre><pre>.default-search.net</pre><pre>.search-results.com</pre><pre>.search.ask.com</pre><pre>.unthreat.com</pre><pre>.fantastigames.com</pre><pre>.gotsearch.com</pre><pre>.insertsearch.com</pre><pre>.mlsearch.com</pre><pre>.searchsupreme.com</pre><pre>.newsearchtab.com</pre><pre>.adoresearch.com</pre><pre>.searchsheet.com</pre><pre>.searchqu.com</pre><pre>.searchnu.com</pre><pre>.searchcore.net</pre><pre>.lphant.net</pre><pre>.lphant.com</pre><pre>.shareazaweb.com</pre><pre>.shareazaweb.net</pre><pre>.bearshare.net</pre><pre>.bearshare.com</pre><pre>.imesh.com</pre><pre>.imesh.net</pre><pre>KeySize</pre><pre>: this object does't support a special last block</pre><pre>NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes</pre><pre>: this object doesn't support multiple channels</pre><pre>is not a valid key length</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp</pre><pre>Boost.Variant internal error: 'which' out of range.</pre><pre>%Y-%m-%d %H:%M:%S</pre><pre>UrlEscape failed</pre><pre>UrlEscape succeeded</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\DataMngrUI.pdb</pre><pre>GetProcessHeap</pre><pre>KERNEL32.dll</pre><pre>MsgWaitForMultipleObjectsEx</pre><pre>MsgWaitForMultipleObjects</pre><pre>USER32.dll</pre><pre>GDI32.dll</pre><pre>RegDeleteKeyW</pre><pre>RegCloseKey</pre><pre>RegQueryInfoKeyW</pre><pre>RegEnumKeyExW</pre><pre>RegOpenKeyExW</pre><pre>RegCreateKeyExW</pre><pre>RegNotifyChangeKeyValue</pre><pre>RegEnumKeyW</pre><pre>ADVAPI32.dll</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>SensApi.dll</pre><pre>WININET.dll</pre><pre>VERSION.dll</pre><pre>ImageGetCertificateData</pre><pre>CertGetCertificateContextProperty</pre><pre>ImageEnumerateCertificates</pre><pre>CertGetNameStringW</pre><pre>CertFreeCertificateContext</pre><pre>CRYPT32.dll</pre><pre>imagehlp.dll</pre><pre>UrlIsW</pre><pre>UrlEscapeW</pre><pre>SHLWAPI.dll</pre><pre>COMCTL32.dll</pre><pre>USERENV.dll</pre><pre>WaitNamedPipeW</pre><pre>GetCPInfo</pre><pre>PeekNamedPipe</pre><pre>RegOpenKeyW</pre><pre>ShellExecuteExW</pre><pre>SHFileOperationW</pre><pre>DataMngrUI.exe</pre><pre>??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ</pre><pre>??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51</pre><pre>??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51</pre><pre>?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ</pre><pre>?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ</pre><pre>?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ</pre><pre>?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A</pre><pre>?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A</pre><pre>?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A</pre><pre>?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ</pre><pre>?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z</pre><pre>?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A</pre><pre>?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A</pre><pre>.?AVCppSQLite3Query@@</pre><pre>.?AVCppSQLite3Table@@</pre><pre>.?AVCppSQLite3Statement@@</pre><pre>.?AVCppSQLite3DB@@</pre><pre>.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@</pre><pre>.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@</pre><pre>.PAUErrorTag@SystemTools@Tools@@</pre><pre>.PAUPathTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@</pre><pre>.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@</pre><pre>.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@</pre><pre>.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PBU_CERT_CONTEXT@@$0A@P6GHPBU1@@Z$1?CertFreeCertificateContext@@YGH0@ZVCloseResultPolicy@Default@HTL@PTL@@VCreatePolicy@456@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@</pre><pre>.PAUMessageTag@ErrorInfo@@</pre><pre>.?AVwindows_file_codecvt@@</pre><pre>zcÁ</pre><pre>.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@</pre><pre>.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@</pre><pre>.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@</pre><pre>.?AVJsonParserExecption@Json@KipodTools@@</pre><pre>.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@</pre><pre>.?AVCppSQLite3Exception@@</pre><pre>.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@</pre><pre>.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@</pre><pre>.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@</pre><pre>.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@</pre><pre>.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@</pre><pre>.PAUMessageTag@ErrorInfo@KipodLogger@@</pre><pre>.PAUWhatTag@PTL@@</pre><pre>.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@</pre><pre>.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@</pre><pre>.?AVProtectChromeDBInfo@@</pre><pre>.?AVProtectKeyInfo@@</pre><pre>.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@</pre><pre>.?AV?$_Ref_count@V?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@@tr1@std@@</pre><pre>.?AV?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@</pre><pre>.?AV?$sp_counted_impl_p@VProtectKeyInfo@@@detail@boost@@</pre><pre>.?AV?$sp_counted_impl_p@VProtectChromeDBInfo@@@detail@boost@@</pre><pre>.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@</pre><pre>.?AVInvalidKeyLength@CryptoPP@@</pre><pre>.PAVBufferedTransformation@CryptoPP@@</pre><pre>.PAVRandomNumberGenerator@CryptoPP@@</pre><pre>.?AVsettings_pipe_failed@@</pre><pre>.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@</pre><pre><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></pre><pre><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></pre><pre>5 6-636:6</pre><pre>4&484"5|5</pre><pre><4><pre>7%7s7</pre><pre>56N6</pre><pre>7|7c7j7</pre><pre>;!;.;3;};</pre><pre>0 2F2S2D3Z3a3v3</pre><pre>:$;1;7;>;</pre><pre>4&65648?8</pre><pre>1-262&383</pre><pre>1,2r2</pre><pre>3L4R4{4</pre><pre>9(939_9~9</pre><pre>1%2u2</pre><pre>5W5s5</pre><pre>2-3O3f3u3</pre><pre>668@8#9-9</pre><pre>4#5(545>5</pre><pre><"=*=9=@=</pre><pre>>'?.?8?>?</pre><pre>78U8v9</pre><pre>? ?$?(?,?0?4?8?|?</pre><pre>6o8U8</pre><pre>? ?$?(?,?0?4?8?\?</pre><pre>? ?&?,?2?8?`?</pre><pre><#=2=?=[=</pre><pre>4 5-526?6</pre><pre>5!5(5;5\5</pre><pre>7#82809=9</pre><pre>3-323}3</pre><pre>9&9,92999</pre><pre>?"?&?0?]?</pre><pre>5!5)5?5{5</pre><pre>2%3U3</pre><pre>: :$:(:,:0:</pre><pre>: :$:(:,:0:4:8:<:><pre>2 2$2(2,2</pre><pre>? ?$?(?,?</pre><pre>7 7$7(7,7074787<7><pre>1,141<1><pre>;,<8><pre>4,484\4|4</pre><pre>?,?8?\?|?</pre><pre>7$8<8><pre>777705555443332</pre><pre>5555443332</pre><pre>5555443332</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>duser32.dll</pre><pre>%s\%s%X%X</pre><pre>\cmd.exe</pre><pre>Web Server Edition</pre><pre>%1%.%2%.%3%</pre><pre>\/:*?"<>|</pre><pre>\\?\UNC\</pre><pre>SOFTWARE\Mozilla\Mozilla Firefox</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe</pre><pre>SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}</pre><pre>Chrome.exe</pre><pre>http://</pre><pre>%d.%d.%d.%d</pre><pre>\FirefoxToolbar\</pre><pre>\profiles.ini</pre><pre>\Mozilla\Firefox\</pre><pre>\Google\Chrome\User Data\Default</pre><pre>chrome-extension://%1%/config/skin/new-tab.html</pre><pre>\ChromeExtension</pre><pre>NX</pre><pre>FirefoxExtension</pre><pre>ChromeDS</pre><pre>FirefoxHomepage</pre><pre>FirefoxSE</pre><pre>FirefoxDE</pre><pre>FirefoxKeyword</pre><pre>ChromeStartPages</pre><pre>ChromeStartPages32</pre><pre>ChromeHomepage</pre><pre>ChromePrefs</pre><pre>ChromeNewTab</pre><pre>Firefox/ProtectionEnabled</pre><pre>Chrome/ProtectionEnabled</pre><pre>ff_nt_supported</pre><pre>ie_ds_supported</pre><pre>ff_ds_supported</pre><pre>chrome_ds_supported</pre><pre>ie_hp_supported</pre><pre>ff_hp_supported</pre><pre>chrome_hp_supported</pre><pre>chrome_nt_supported</pre><pre>Ask.com</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4</pre><pre>{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}</pre><pre>http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=</pre><pre>http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=</pre><pre>{AD130C31-2032-4F53-BB70-0BA27FBC95FB}</pre><pre>http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=</pre><pre>Firefox/Extension</pre><pre>http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=</pre><pre>http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab</pre><pre>\extensions.sqlite</pre><pre>\extensions.sqlite-journal</pre><pre>Chrome/DefaultSearch</pre><pre>DefaultUrl</pre><pre>DefaultKeyword</pre><pre>\Web Data</pre><pre>\Web Data-journal</pre><pre>Firefox/Homepage</pre><pre>Firefox/HomepageAsked</pre><pre>user_pref("browser.startup.homepage", "$(Value)");</pre><pre>user_pref\("browser\.startup\.homepage", "([^"]*)"\);</pre><pre>\prefs.js</pre><pre>Firefox/SelectedSearch</pre><pre>Firefox/SelectedSearchAsked</pre><pre>user_pref("browser.search.selectedEngine", "$(Value)");</pre><pre>user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);</pre><pre>Firefox/DefaultSearch</pre><pre>Firefox/DefaultSearchAsked</pre><pre>user_pref("browser.search.defaultenginename", "$(Value)");</pre><pre>user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);</pre><pre>Firefox/UrlbarSearch</pre><pre>Firefox/UrlbarSearchAsked</pre><pre>user_pref("keyword.URL", "$(Value)");</pre><pre>user_pref\("keyword\.URL", "([^"]*)"\);</pre><pre>FFUrlbar search</pre><pre>DefaultSuggestionUrl</pre><pre>Chrome/Homepage</pre><pre>Chrome homepage</pre><pre>Chrome/StartPages</pre><pre>Chrome Start Page</pre><pre>session.urls_to_restore_on_startup</pre><pre>Chrome/StartPagesFrom32Version</pre><pre>backup.session.startup_urls</pre><pre>Chrome Start Page Since 32 version</pre><pre>session.startup_urls</pre><pre>Chrome</pre><pre>Chrome/NewTab</pre><pre>404Url</pre><pre>DNSUrl</pre><pre>SearchUrl</pre><pre>NewTabUrl</pre><pre>RelatedSearchUrl</pre><pre>Firefox/BHO</pre><pre>Error404URL</pre><pre>DNSErrorURL</pre><pre>SearchURL</pre><pre>Firefox/BHO/NativeHelper</pre><pre>Firefox/BHO/DnsBHO</pre><pre>Firefox/BHO/SearchBHO</pre><pre>Firefox/BHO/MainBHO</pre><pre>Firefox/BHO/Error404BHO</pre><pre>Firefox/BHO/NewTabBHO</pre><pre>Firefox/BHO/SessionRestore</pre><pre>Cannot open key</pre><pre>Cannot unlock key</pre><pre>Cannot open key for writing</pre><pre>Cannot set key value</pre><pre>Cannot lock key</pre><pre>Cannot delete key value</pre><pre>{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%</pre><pre>mscoree.dll</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>nKERNEL32.DLL</pre><pre>WUSER32.DLL</pre><pre>ADVAPI32.DLL</pre><pre>dHKEY_CURRENT_CONFIG</pre><pre>HKEY_DYN_DATA</pre><pre>HKEY_PERFORMANCE_DATA</pre><pre>HKEY_USERS</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_CLASSES_ROOT</pre><pre>i\\.\pipe\DatamngrPipe</pre><pre>software\Web Assistant\script_storage</pre><pre>software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\%1%\Software\Web Assistant</pre><pre>{5727BA47-5FC5-44ab-B609-C0970CF15406}</pre><pre>{F13AD5CD-5344-4c96-B8FD-F6C662E1927B}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Ext\Settings</pre><pre>DependentKey</pre><pre>Software\Microsoft\Internet Explorer\Toolbar\WebBrowser</pre><pre>{2BD27A59-BA73-4145-81D5-CD090A36362A}</pre><pre>\Mozilla\Firefox</pre><pre>{6605194A-B02B-410a-9635-8A05D1C54AD2}</pre><pre>{9A3EF80D-A921-4ade-B08F-881B935E6E11}</pre><pre>{B9807B0E-54B5-4B8A-AB51-A450A8FA6572}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</pre><pre>{553E964D-8917-4D72-9D31-0456205A6BAF}L</pre><pre>{553E964D-8917-4D72-9D31-0456205A6BAF}R</pre><pre>Software\Mozilla\Mozilla Firefox</pre><pre>{7E27AA6B-B0FB-451E-8270-5488F8F09AC9}L</pre><pre>{7E27AA6B-B0FB-451E-8270-5488F8F09AC9}R</pre><pre>extensions.settings</pre><pre>\Google\Chrome\User Data\Default\Preferences</pre><pre>i{6326CE8F-6752-47CF-B20A-A0CF21154981}</pre><pre>Cannot create mutex to control KipodUI instance, error with code %d</pre><pre>@Advapi32.dll</pre><pre>https</pre><pre>Init %s</pre><pre>Current value changed to %s</pre><pre>%s: failed to get current value</pre><pre>\StringFileInfo\xx\CompanyName</pre><pre>Cannot get wow keys</pre><pre>GRiched20.dll</pre><pre>Received event: kn - %s, nv - %s, size - %i</pre><pre>%s: set enabled %i</pre><pre>ILoad in %s</pre><pre>Load vn %s</pre><pre>Load ii %s</pre><pre>Opera</pre><pre>FireFox</pre><pre>Enable %i for %s</pre><pre>IVBoxHook.dll</pre><pre>\\.\VBoxMiniRdrDN</pre><pre>Changes for %s</pre><pre>E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp</pre><pre>!valueName.empty()</pre><pre>e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp</pre><pre>!value.empty()</pre><pre>!p.empty() && "Empty path not allowed for put_child."</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp</pre><pre>!"Boost.Variant internal error: 'which' out of range."</pre><pre>E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp</pre><pre>%d.%d</pre><pre>logfile.txt</pre><pre>!"#$%&'()* ,</pre><pre>{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}</pre><pre>{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}</pre><pre>Assertion failed: %s, file %s, line %d</pre><pre>o{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>j{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}</pre><pre>%Program Files%\Music App\Datamngr\DatamngrUI.exe</pre><pre>Display the new toolbarIMusic App has detected an attempt to change your browser homepage settingJThis setting controls the website you see each time you open your browser.</pre><pre>%1%]Music App has detected an attempt to change your default search and browser homepage settingsrThese settings control the website you see each time you open your browser and the searches made via your browser.</pre><pre>add a new add-on or extension to your browser0Enable Music App Add-on or Extensions protectionKMusic App protects your browser from enabling unwanted Add-on or Extensions$Display the new Add-on or Extensions Do not display the new Add-on or Extensions\An Add-on/Extension is a piece of software which is added into another software application.UMusic App has detected an attempt to enable a new Add-on or Extension on your browserBMusic App has blocked an attempt to</pre><pre>add a new extension to FirefoxIMusic App has blocked an attempt to</pre><pre>add a new add-on or extension to Chrome Distributed by Bandoo Media Inc.</pre><pre>5.0.0.13505</pre><pre>DatamngrUI.exe</pre><b>explorer.exe_628:</b><pre>.text</pre><pre>`.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>ADVAPI32.dll</pre><pre>BROWSEUI.dll</pre><pre>GDI32.dll</pre><pre>KERNEL32.dll</pre><pre>NTDLL.DLL</pre><pre>msvcrt.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>SHDOCVW.dll</pre><pre>SHELL32.dll</pre><pre>SHLWAPI.dll</pre><pre>USER32.dll</pre><pre>UxTheme.dll</pre><pre>FTSSh</pre><pre>t0SSh</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system</pre><pre>SShwk</pre><pre>98~%SP</pre><pre>ExplorerStartMsgLoop</pre><pre>PSSh;</pre><pre>6SSSSh</pre><pre>SSSSh</pre><pre>SPSSSShL</pre><pre>u%SSh</pre><pre>t.WWWW</pre><pre>xpsp2res.dll</pre><pre>xpsp3res.dll</pre><pre>tbSSh</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\StartMenu\StartMenu</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\StartMenu\StartPanel</pre><pre>kernel32.dll</pre><pre>GetSystemWindowsDirectoryW</pre><pre>NetGetJoinInformation</pre><pre>WINMM.dll</pre><pre>SETUPAPI.dll</pre><pre>WINSTA.dll</pre><pre>OLEACC.dll</pre><pre>USERENV.dll</pre><pre>ntdll.dll</pre><pre>RegEnumKeyExW</pre><pre>RegNotifyChangeKeyValue</pre><pre>RegOpenKeyExA</pre><pre>RegEnumKeyW</pre><pre>RegCloseKey</pre><pre>RegCreateKeyW</pre><pre>RegQueryInfoKeyW</pre><pre>RegOpenKeyExW</pre><pre>RegCreateKeyExW</pre><pre>OffsetViewportOrgEx</pre><pre>GetViewportOrgEx</pre><pre>SetViewportOrgEx</pre><pre>SetProcessShutdownParameters</pre><pre>GetProcessHeap</pre><pre>GetWindowsDirectoryW</pre><pre>CreateIoCompletionPort</pre><pre>ShellExecuteExW</pre><pre>SHRegCloseUSKey</pre><pre>SHRegCreateUSKeyW</pre><pre>AssocQueryKeyW</pre><pre>SHRegOpenUSKeyW</pre><pre>SHDeleteKeyW</pre><pre>TileWindows</pre><pre>ExitWindowsEx</pre><pre>RegisterHotKey</pre><pre>UnregisterHotKey</pre><pre>EnumChildWindows</pre><pre>GetKeyState</pre><pre>GetAsyncKeyState</pre><pre>CascadeWindows</pre><pre>MsgWaitForMultipleObjects</pre><pre>EnumWindows</pre><pre>explorer.pdb</pre><pre>name="Microsoft.Windows.Shell.explorer"</pre><pre>version="5.1.0.0"</pre><pre><description>Windows Shell</description></pre><pre>name="Microsoft.Windows.Common-Controls"</pre><pre>version="6.0.0.0"</pre><pre>publicKeyToken="6595b64144ccf1df"</pre><pre>]]"```^]]\</pre><pre>3333333330</pre><pre>3333330</pre><pre>333333334</pre><pre>)@. '5 !*</pre><pre>.DEHHF>?/</pre><pre>2<===@@=</pre><pre>&$%Uooqkezs</pre><pre>['$$#%&(4</pre><pre>3333333333333333333</pre><pre>33333333333330</pre><pre>7'''')) </pre><pre>3'')))33.</pre><pre>222`444(555</pre><pre>%%%{///-</pre><pre>000000000</pre><pre>00000000</pre><pre>`[66...00</pre><pre>0000000</pre><pre>`]66./.000</pre><pre>/./././././././.</pre><pre>66///0000</pre><pre>0000000000000</pre><pre>0000000000</pre><pre>6666,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,0.010.010.010.010.010.010.010.010.010.010.001</pre><pre>4366666666K,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6.010.010.010.010.010.010.010.010.010.010.000</pre><pre>:;<;:;<;:;<;:;<;:;<0><pre>) ) ) ) )</pre><pre>|2222'2'2'2'2'2'2'2'2'2'2'2'2'2'2'2',),),),),),),),),),),),),),),),),),),),),),, </pre><pre>22222222222</pre><pre>3333333</pre><pre>.SB99;;;99twv}ut{oxt~</pre><pre>.SB;;;:::2:w}{{qddgghg</pre><pre>" """ """ """ """ "" #</pre><pre>""" """ """ "#</pre><pre>.SG>''';;9::p</pre><pre>:5:5:5:5:5:5:5:5:5:5#"</pre><pre># # # # # # # # # # # # # # # # # # # # # ##$</pre><pre>( # # # # # # # # # # # # # # # # # # # # ###</pre><pre>1232123212321232123</pre><pre>(&(((&(((&(((&(((&((&&)</pre><pre>&(((&(((&(((&()</pre><pre>`,''')))</pre><pre>'4,4'4,4'4,4'4,4'4,4)(</pre><pre>55///0000</pre><pre>5555-5-5-5-5-5-5-5-5-5-5-5-5-5-5-5-0</pre><pre>555555555</pre><pre>55555555</pre><pre>5555555</pre><pre>14441444144414441</pre><pre>4343434343434343</pre><pre>5555555555555</pre><pre>5555555555</pre><pre>-,-,-,-,-,-,-,-,-,-,-*.</pre><pre>..............................JFJFJFJFJFJFJFJFJFJFJ.-</pre><pre>{22*2*2*2*2*2*2*2*2*2*2*2*2*2*2*2*.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-../</pre><pre>|ujjjjuhF..BBBBBBBBBBBBT</pre><pre>~j|F.BB*BBB*BBB*Bwop</pre><pre>&!!!&!!!&</pre><pre>44466666</pre><pre>44444444416</pre><pre>4446666</pre><pre>66666666</pre><pre>|= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= </pre><pre>|= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= </pre><pre>DDDDE%CTDD@</pre><pre>A%US$</pre><pre>%UUUU</pre><pre>%%UUU</pre><pre>33U</pre><pre>""2222!!</pre><pre>!"!"%UUR""</pre><pre>!""!"#2"""</pre><pre>"!!"#3"!"</pre><pre>dnnnnn:n.nfCnmddddd</pre><pre>////;/;;88</pre><pre>;888;;!/</pre><pre>!//!!;;^</pre><pre>:;:!::!!!</pre><pre>.88.88.8</pre><pre>.N.NN.M</pre><pre>::8.8...</pre><pre>:::!;;:!</pre><pre>//!!;888</pre><pre>.8.8.88...</pre><pre>:;!::!!;!//!;</pre><pre>!!;:!!::</pre><pre>.88..8..</pre><pre>!!:::/^!</pre><pre>!;/;!;;;!!!:</pre><pre>.8:!!!!^</pre><pre>!!:;:::..</pre><pre>/:!^^!;{8{../</pre><pre>...:::.-</pre><pre>**6***66*6**6566*5666 ,</pre><pre>6*6666*6*6 655*65</pre><pre>6*65 56*5 55 555 *5 6</pre><pre>555( 55 (5 5( </pre><pre>76 5 66 555*677</pre><pre>6*6 5 5(5 (55( '5((5 (556 ('5</pre><pre>665**6(('S((((((S(((]('((@('SS((S(((((((6C-.NEC66S5sU</pre><pre>555(555(5((5(5(5(</pre><pre>5 5 5 5555 (555(555'(((5(5('55(((</pre><pre>((''('5'5(5('('('('('((''('(((@(((('&(((&</pre><pre>%&&%&&&&3>&3&3&33&3&3333&&3>3333</pre><pre>'(3&'&3&</pre><pre>3&33&&((</pre><pre>3323>33>%>3%>3>33>3%3&%</pre><pre>*5'(('((&@3(</pre><pre>,63%3>323>3%>&>33323>>%></pre><pre>3(3'(((@@'5('@(@(&('(</pre><pre>>2>323%>3</pre><pre>75((((@3&333&3&&&%&3&&3&33>33%3>23%>3</pre><pre>>2%$32%>2>%>2$3></pre><pre>3&%&&3&33>3>33</pre><pre>3>%>3%&3$23>23$2>2%$>2></pre><pre>)4433((&(&('*</pre><pre>('((((''(**6(('' *</pre><pre>32323>3></pre><pre>2$%>22%>%3' (</pre><pre>&(&''((5(5 *</pre><pre>'(&(&((&('''</pre><pre>&&%&3&&%3%</pre><pre>2%>22>22</pre><pre>5''3(((3(('&(&'&</pre><pre>3%%3%3%2#$</pre><pre>22$22$2%$22$2%2%$2%$2$222%$22</pre><pre>&>2$2$2$222$22$%%</pre><pre>:7'((('(3('(3(&(&</pre><pre>222222222222</pre><pre>22222222222222</pre><pre>222222222222222</pre><pre>22$22$22$22$</pre><pre>&(%3%&&&&3&&&3%3</pre><pre>222222222222222222</pre><pre>&&(&3(&(&'('((3'(&&</pre><pre>2222222</pre><pre>22$<$$2$22$%</pre><pre>&&(3(3('(&'</pre><pre>222"2212</pre><pre>22<2><pre>(&(3(3((</pre><pre>((565 ((( 6</pre><pre>333&33(&&</pre><pre>'(('('(('( </pre><pre> '&%%"$</pre><pre>2"2"22"2</pre><pre>2222<2><pre>2%('(3'32222?&'</pre><pre>2"2"2"121212<</pre><pre>2"2"2$"?</pre><pre>%%22%2</pre><pre>&3(3(3((&</pre><pre>"2"<"2<2<</pre><pre><2<"<"<"<</pre><pre>1"?((&21</pre><pre><?php<?22<$2</pre><pre>2%""22&&</pre><pre>2<2$$2222</pre><pre>'&('(3(''</pre><pre>((%%%"</pre><pre>5(3%"%</pre><pre>"2%5*67</pre><pre>))) ))))</pre><pre>""**<****"""</pre><pre>"*<<<<*"</pre><pre>#2#---2222-222442-</pre><pre>--&#-(-%</pre><pre>$/222(--444222!</pre><pre>#&-221269924999;</pre><pre>&$-22-($2%</pre><pre>#(2---222622212-</pre><pre>#2221299629968</pre><pre>#&--%#(2##!</pre><pre>-222422422426662-%</pre><pre>"2-##&</pre><pre>!##-#&#-&&#%---#---#&-219662%</pre><pre>$&-(151,44.9</pre><pre>&1242662-</pre><pre>-(..19.19</pre><pre>,4492.12</pre><pre>12-$-,-,</pre><pre>-, $$----</pre><pre>#%#-15/-&</pre><pre>-,(,,(,(,</pre><pre>$$11651566/,$&&</pre><pre>,2592&&&-</pre><pre>2466/!$$</pre><pre>""*<*"****""</pre><pre>) '????[</pre><pre>&&&$-556>>61,,5994511-</pre><pre>$(//$$$(6>6/,$,-$</pre><pre>#$-22692/,,$,-&</pre><pre>-266661..4514#</pre><pre>&,2-&&##</pre><pre>&-222,22--#</pre><pre>#&&---2-,-&$&(,,291.566..BNNNTNNNNNAABIAA88</pre><pre>&!#&!-##</pre><pre>&#--//11468>885882&</pre><pre>$266961$&--$&%</pre><pre>,1661,!-((#</pre><pre>&$,4255$,92</pre><pre>&$,44..&</pre><pre>""**""***""</pre><pre>"****<*<<**"</pre><pre>"**""""*""""</pre><pre>&-569./-,16522$</pre><pre>.BAA=86546888=AAAEAAEMNRMQQSWZZ\]gk__m__\</pre><pre>bTRHHHHHQQHQJQWJSSSSSSSSSSSSSSSSWWSSSS\\V]VZW8,.FW]\\]\]\]\\ZZ\\WFR>38(</pre><pre>.BTTkgn]ktvgmvvvvvmvvvsvzzzyzyzyzyyyzmkkkkkZSRA816;F87</pre><pre>yzyzyzym^Z]WN3 $&$.Wt\</pre><pre>""*"""****""""</pre><pre>"***"**""**<**"</pre><pre>$5612,.2,</pre><pre>&$$,,,5]</pre><pre>$]t.Ft</pre><pre>7%8U8</pre><pre>3 303<3]3</pre><pre>2<3</pre><pre>8 8$8(8,8084888<8}8</pre><pre>5%5,575{6</pre><pre><,<0<4<8<</pre><pre>7 7$7(7,70747</pre><pre>rundll32.exe</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</pre><pre>::{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>::{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>::{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>::{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>::{D20EA4E1-3957-11d2-A40B-0C5020524153}</pre><pre>::{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>{208D2C60-3AEA-1069-A2D7-08002B30309D}</pre><pre>{20D04FE0-3AEA-1069-A2D8-08002B30309D}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites</pre><pre>{450D8FBA-AD25-11D0-98A8-0800361B1103}</pre><pre>CLSID\{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>Software\Microsoft\Windows\CurrentVersion\RunOnce</pre><pre>Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\DontShowMeThisDialogAgain</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz</pre><pre>\\.\WMIDataDevice</pre><pre>Software\Microsoft\Windows\CurrentVersion\Run</pre><pre>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run</pre><pre>Software\Microsoft\Windows NT\CurrentVersion\Windows</pre><pre>ExplorerIsShellMutex</pre><pre>desk.cpl</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer</pre><pre>tourstart.exe</pre><pre>tourstart.exe,0</pre><pre>Microsoft.OfferTour</pre><pre>WINWORD.EXE</pre><pre>Software\Microsoft\Windows\CurrentVersion\Applets</pre><pre>Software\Microsoft\Windows\CurrentVersion\Applets\Tour</pre><pre>explorer.exe,9</pre><pre>Microsoft.FixScreenResolution</pre><pre>shell:::{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation</pre><pre>Software\Microsoft\Windows NT\CurrentVersion</pre><pre>shell:::{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage</pre><pre>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</pre><pre>DDEEXECUTESHORTCIRCUIT</pre><pre>http\shell</pre><pre>IEXPLORE.EXE</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop</pre><pre>Software\Microsoft\Windows\CurrentVersion\RunOnceEx</pre><pre>comctl32.dll</pre><pre>Software\Microsoft\Windows\Internet Settings</pre><pre>AutoConfigURL</pre><pre>system.ini</pre><pre>AppEvents\Schemes\Apps\.Default\%s\.current</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify</pre><pre>MSShellRunDlgReady</pre><pre>res://mys.dll/mys.hta /explorer</pre><pre>mshta.exe</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\Welcome</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Tips</pre><pre>SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\MYS</pre><pre>cys.exe</pre><pre>SOFTWARE\Microsoft\Windows NT\CurrentVersion\srvWiz</pre><pre>install.exe</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel</pre><pre>OUTLOOK.EXE</pre><pre>explorer.exe,16</pre><pre>iernonce.dll</pre><pre>WININET.DLL</pre><pre>UpdateURL</pre><pre>WindowsUpdate</pre><pre>HWND%x</pre><pre>Software\Microsoft\Windows\CurrentVersion\OemStartMenuData</pre><pre>fldrclnr.dll,Wizard_RunDLL</pre><pre>iexplore.exe</pre><pre>winbrand.dll</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Remote\%d</pre><pre>shell32.dll</pre><pre>nusrmgr.cpl ,initialTask=ChangePicture</pre><pre>NewExeName</pre><pre>Windows</pre><pre>ediskeer.dll</pre><pre>timedate.cpl</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Comdlg32\LastVisitedMRU</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Comdlg32\OpenSaveMRU</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU</pre><pre>Software\Microsoft\Internet Explorer\TypedURLs</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Calculator.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Games\Solitaire.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Paint.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\WordPad.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Windows Movie Maker.lnk</pre><pre>%USERPROFILE%\Start Menu\Programs\Accessories\Tour Windows XP.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Windows Messenger.lnk</pre><pre>%USERPROFILE%\Start Menu\Programs\Windows Media Player.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\MSN.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Get Online with MSN.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Get Going with Tablet PC.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Set Program Access and Defaults.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Windows Journal.lnk</pre><pre>%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Media Center\Media Center.lnk</pre><pre>%USERPROFILE%\Start Menu\Programs\Internet Explorer.lnk</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel</pre><pre>TSAppCMP.DLL</pre><pre>netapi32.dll</pre><pre>%SystemRoot%\system32\restore\rstrui.exe</pre><pre>RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ?0x%X?%s</pre><pre>RunDLL32.EXE</pre><pre>%s%d%s</pre><pre>Software\Microsoft\Windows\CurrentVersion\Policies\System</pre><pre>settings.dll</pre><pre>explorer.exe "</pre><pre>explorer.exe /e, "</pre><pre>WindowsLogon</pre><pre>WindowsLogoff</pre><pre>%s %s</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count</pre><pre>uAppWiz.Cpl</pre><pre>\explorer.exe</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu</pre><pre>::{20D04FE0-3AEA-1069-A2D8-08002B30309D}</pre><pre>taskmgr.exe</pre><pre>ShellExecute</pre><pre>Software\Microsoft\Windows\CurrentVersion\Explorer\AppKey\%d</pre><pre>\WindowsShell.Manifest</pre><pre>Get Online with MSN.lnk</pre><pre>Set Program Access and Defaults.lnk</pre><pre>Link%d</pre><pre>OEM%d</pre><pre>Software\Microsoft\Windows\CurrentVersion\SMDEn</pre><pre>::{D20EA4E1-3957-11d2-A40B-0C5020524152}</pre><pre>%WinDir%\explorer.exe</pre><pre>There is a file or folder on your computer called "%s" which could cause certain applications to not function correctly. Renaming it to "%s" would solve this problem. Would you like to rename it now?</pre><pre>Ca&scade Windows</pre><pre>Tile Windows &Horizontally</pre><pre>Tile Windows V&ertically</pre><pre>&Windows Security...</pre><pre>&Help and Support</pre><pre>&Log Off %s...</pre><pre>Windows Explorer</pre><pre>6.00.2900.5512 (xpsp.080413-2105)</pre><pre>EXPLORER.EXE</pre><pre>Windows</pre><pre>Operating System</pre><pre>6.00.2900.5512</pre><pre>Keep the &taskbar on top of other windows</pre><pre>To remove records of recently accessed documents, programs, and Web sites, click Clear.</pre><pre>Windows displays icons for active and urgent notifications, and hides inactive ones. You can change this behavior for items in the list below.</pre><pre>Select this option to use the menu style from earlier versions of Windows.</pre><pre>6There is not enough memory to complete this operation.8Unable to run command.</pre><pre>The folder '%1' has been removed.WMy Computer or Windows Explorer has not been properly initialized yet. Try again later.</pre><pre>&Undo %s</pre><pre>Windows is running in safe mode.</pre><pre>This special diagnostic mode of Windows enables you to fix a problem which may be caused by your network or hardware settings. Make sure these settings are correct in Control Panel, and then try starting Windows again. While in safe mode, some of your devices may not be available.</pre><pre>startRThere was an internal error and one of the windows you were using has been closed.</pre><pre>Restrictions{This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.</pre><pre>&Show Open Windows</pre><pre>Windows was unable to change the display settings for the new configuration. Return the computer to the previous state, shut down Windows, and restart the computer in the desired configuration.</pre><pre>There may be a problem with your display settings if you continue. To safely change to a new configuration, you should shut down Windows and restart the computer in the desired configuration. Do you want to continue anyway?</pre><pre>This pre-release version of "Internet Explorer 4.0" Desktop/Explorer has expired. Please update to the latest release of "Internet Explorer 4.0" from WWW.MICROSOFT.COM</pre><pre>helpctr.exe>-FromStartHelp</pre><pre>Take a tour of Windows XP</pre><pre>NOpens a window where you can pick search options and work with search results.aOpens a central location for Help topics, tutorials, troubleshooting, and other support services.</pre><pre>/Opens a program, folder, document, or Web site.</pre><pre>Provides options for closing your programs and logging off, or for leaving your programs running and switching to another user.lProvides options for turning off or restarting your computer, or for activating Stand By or Hibernate modes.RDisconnects your session. You can reconnect to the session when you log on again.</pre><pre>&Windows Security</pre><pre>iOpens the My Documents folder, where you can store letters, reports, notes, and other kinds of documents./Displays recently opened documents and folders.KOpens the My Music folder, where you can store music and other audio files.]Opens the My Pictures folder, where you can store digital photos, images, and graphics files.zGives access to, and information about, the disk drives, cameras, scanners, and other hardware connected to your computer.MGives access to, and information about, folders and files on other computers.8Connects to other computers, networks, and the Internet.</pre><b>rundll32.exe_1276:</b><pre>.text</pre><pre>`.data</pre><pre>.rsrc</pre><pre>msvcrt.dll</pre><pre>KERNEL32.dll</pre><pre>NTDLL.DLL</pre><pre>GDI32.dll</pre><pre>USER32.dll</pre><pre>IMAGEHLP.dll</pre><pre>rundll32.pdb</pre><pre>.....eZXnnnnnnnnnnnn3</pre><pre>....eDXnnnnnnnnnnnn3</pre><pre>...eDXnnnnnnnnnnnn,</pre><pre>.eDXnnnnnnnnnnnn,</pre><pre>%Xnnnnnnnnnnnnnnn1</pre><pre>O3$dS7"%U9</pre><pre>.manifest</pre><pre>5.1.2600.5512 (xpsp.080413-2105)</pre><pre>RUNDLL.EXE</pre><pre>Windows</pre><pre>Operating System</pre><pre>5.1.2600.5512</pre><pre>YThere is not enough memory to run the file %s.</pre><pre>Please close other windows and try again.</pre><pre>9The file %s or one of its components could not be opened.</pre><pre>0The file %s or one of its components cannot run.</pre><pre>MThe file %s or one of its components requires a different version of Windows.</pre><pre>UThe file %s or one of its components cannot run in standard or enhanced mode Windows.3Another instance of the file %s is already running./An exception occurred while trying to run "%s"</pre><pre>Error in %s</pre><pre>Missing entry:%s</pre><pre>Error loading %s</pre></div><div class="blog_tab" id="tab3"><p><strong class="font_20"><span style="font-size:medium;">Remove it with Ad-Aware</span></strong></p><ol><li>Click (<a href="http://lavasoft.com/thankyou.php?internal=true&inter=encyclopedia"><span style="color: #0000ff;">here</span></a>) to download and install Ad-Aware Free Antivirus.</li><li>Update the definition files.</li><li>Run a full scan of your computer.</li></ol><p><strong class="font_20"><span style="font-size:medium;">Manual removal*</span></strong></p><ol><li>Scan a system with an anti-rootkit tool.<br></li><li>Terminate malicious process(es) (<a href="http://www.lavasoft.com/mylavasoft/malware-removal-support/blog/how-to-end-a-process-with-the-task-manager"><span style="color: #0000ff;">How to End a Process With the Task Manager</span></a>):<p style="padding-left: 30px; font-size: x-small; color: #ff0000;">imapi.exe:440<br>mediabar.exe:816<br>patch_ff.exe:416<br>jZipMediaBar.exe:128<br>jZipMediaBar.exe:920<br>jZipMediaBar.exe:600<br>%original file name%.exe:1468<br>rundll32.exe:1276<br>DatamngrCoordinator.exe:676<br>DatamngrCoordinator.exe:1480<br>mscorsvw.exe:1912<br>regsvr32.exe:652<br>regsvr32.exe:1512<br>pack.exe:1528</p></li><li>Delete the original Backdoor file.<br></li><li>Delete or disinfect the following files created/modified by the Backdoor:<p style="padding-left: 30px; font-size: x-small; color: #ff0000;">%WinDir%\Temp\hscbwa8b.TMP (146970 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\jZipMediaBar.exe (17245 bytes)<br>%WinDir%\Temp\nsmAA.tmp\System.dll (11 bytes)<br>%WinDir%\Temp\nsmAA.tmp\registry.dll (784 bytes)<br>%WinDir%\Temp\nsgA9.tmp (3684 bytes)<br>%WinDir%\Temp\nsmAA\Helper.dll (15116 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)<br>%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)<br>%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (133 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\trackid.dat (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\xml.dll (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\toolbar.xml (14 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.xul (24832 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\widget.xml (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ocode.xml (390 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsProcess.dll (4 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\as_guid.dat (38 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\AccessControl.dll (9 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\music_logo.png (992 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\InetLoad.dll (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6584 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\nsisFirewall.dll (8 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\splash_icon.png (11 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\apnuserid.dat (16 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\install.ico (8 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\manifest.xml (2267 bytes)<br>%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\components\windowmediator.js (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\dtuser.exe (33888 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\guid.dat (38 bytes)<br>%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\sysid.dat (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.htm (716 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsjA0.tmp (140704 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\appid.dat (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\partner.xml (218 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\tb_icon.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\UAC.dll (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\external.js (24832 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\System.dll (11 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\uninstall.exe (6115 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\ioSpecial.ini (26 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsoA1.tmp\inetc.dll (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\geodata.xml (441 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\imeshjzipmusictoolbar-manifest.xml (9 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\geolocation[1].xml (441 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\{88d8ecb7-204f-4efd-8134-f6341f76c672}\geodata.xml (441 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\tb_icon.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\widget.jsw (784 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\Lyrics.png (518 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.TuneIn\tb_icon.ico (15 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\setupCfg.xml (579 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\install.ico (8 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\ocode.xml (390 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\System.dll (11 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\xml.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsbA3.tmp (140704 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\inetc.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\UAC.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\toolbar.xml (14 bytes)<br>%Program Files%\Music App\Datamngr\SRTOOL~1\uninstall.exe (6115 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsrA4.tmp\AccessControl.dll (9 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\UAC.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\inetc.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\xml.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\toolbar.xml (14 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsuA6.tmp (128244 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\System.dll (11 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nskA7.tmp\ocode.xml (390 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\92.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\91.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8B.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\98.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\pack.exe (112669 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\86.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8F.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\90.tmp (4545 bytes)<br>%Program Files%\Music App\Datamngr\x64 (4 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\9B.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\Starter.exe (4992 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8C.tmp (4545 bytes)<br>%Program Files%\Music App\Datamngr\Helper.dll (15116 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8D.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8A.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\95.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\97.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\install_statistics[1].xml (498 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\CHAppConfirm.exe (8184 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\9E.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\Helper.dll (66604 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\94.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\System.dll (11 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\87.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\93.tmp (4545 bytes)<br>%Program Files%\Music App\Datamngr\Uninstall.exe (3616 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\registry.dll (784 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\96.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\8E.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\9D.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\9C.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\88.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\9A.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\89.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsw7F.tmp (342492 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81\nst85.tmp\mediabar.exe (69435 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\99.tmp (4545 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)<br>%Documents and Settings%\%current user%\Local Settings\Temp\nsc81.tmp\UserInfo.dll (4 bytes)<br>%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg (2234 bytes)<br>%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg (2376 bytes)<br>%Documents and Settings%\All Users\Application Data\Datamngr\general.cfg (1 bytes)<br>%WinDir%\Temp\537f7e9a\patch_ff.exe (72036 bytes)<br>%Documents and Settings%\%current user%\Application Data\imeshjzipmusictoolbar\dtx.ini (15 bytes)<br>%Program Files%\Music App\Datamngr\Datamngr.dll (19394 bytes)<br>%Program Files%\Music App\Datamngr\x64\mgrldr_u.dll (22 bytes)<br>%Program Files%\Music App\Datamngr\mgrldr.dll (19 bytes)<br>%Program Files%\Music App\Datamngr\x64\apcrtldr.dll (8424 bytes)<br>%Program Files%\Music App\Datamngr\DatamngrCoordinator.exe (26869 bytes)<br>%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings Update.exe (9244 bytes)<br>%Program Files%\Music App\Datamngr\setmgrc2.cfg (34 bytes)<br>%Program Files%\Music App\Datamngr\x64\apcrtldr36.dll (8002 bytes)<br>%Program Files%\Music App\Datamngr\IEBHO.dll (16250 bytes)<br>%Program Files%\Music App\Datamngr\x64\Datamngr.dll (17442 bytes)<br>%Program Files%\Music App\Datamngr\x64\setmgrc2.cfg (41 bytes)<br>%Program Files%\Music App\Datamngr\DatamngrUI.exe (29743 bytes)<br>%Program Files%\Music App\Datamngr\x64\mgrldr.dll (22 bytes)<br>%Program Files%\Music App\Datamngr\favicon.ico (1 bytes)<br>%Program Files%\Music App\Datamngr\apcrtldr36.dll (3759 bytes)<br>%Program Files%\Music App\Datamngr\apcrtldr.dll (4487 bytes)<br>%Program Files%\Music App\Datamngr\Internet Explorer Settings Update.exe (8841 bytes)<br>%Program Files%\Music App\Datamngr\x64\IEBHO.dll (20723 bytes)<br>%Program Files%\Music App\Datamngr\Internet Explorer Settings.exe (9722 bytes)<br>%Program Files%\Music App\Datamngr\mgrldr_u.dll (98 bytes)<br>%Program Files%\Music App\Datamngr\x64\Internet Explorer Settings.exe (9489 bytes)</p></li><li>Remove the references to the Backdoor by modifying the following registry value(s) (<a href="http://www.lavasoft.com/mylavasoft/malware-removal-support/blog/how-to-work-with-the-system-registry"><span style="color: #0000ff;">How to Work with System Registry</span></a>):<p style="padding-left: 30px; font-size: x-small; color: #ff0000;">[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]<br>"AutoRestartShell" = "1"</p></li><li>Clean the Temporary Internet Files folder, which may contain infected files (<a href="http://www.lavasoft.com/mylavasoft/malware-removal-support/blog/how-to-clean-the-temporary-internet-files-folder"><span style="color: #0000ff;">How to clean Temporary Internet Files folder</span></a>).<br></li><li>Reboot the computer.<br></li></ol>*Manual removal may cause unexpected system behaviour and should be performed at your own risk.</div></di?></pre></pre></pre></2></pre></2></pre></0></pre></8></pre></8></pre></1></pre></7></pre></:></pre></4></pre></%u2j></pre></%u7j></pre></7></pre></0></pre></:></pre></3></pre></%u2j></pre></%u7j></pre></7></pre></0></pre></:></pre></3></pre></%u2j></pre></%u7j>