Win32/Fareit Depacked Strings

Fareit Depacked Strings:
---
jjj
jjj
jjjj
jjjj
APv
APO
CEP
jjjjjj
kEP
jjjj
JEh
jjjj
jjjj
jjjj
jjjj
jjjj
AWb
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
AVM
jjjj
jjjj
AVQ
AWE
APc
jjjj
EPEPE
jjjj
jjjj
jjjj
Ejj
jjjj
EPE
jjjj
jjjj
EPE
EPE
EPEPE
PEPE
jjjj
EPEPE
EPEPE
EPEPE
EPEPE
Ejh
Ejjh
Ejj
EPE
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
jjjj
!This program cannot be run in DOS mode.
.text
`.rdata
@.data
VWSh
SVW
PRj
PWj
5FIA
t*PP
h"IA
v;PP
WVj
_h,IA
VSW
h)LA
huLA
h-LA
h!LA
hJIA
WVS
SWV
Ph1IA
5FIA
h"IA
h1IA
5FIA
h"IA
=iLA
=mLA
=ULA
iLA
Pj R
ULA
mLA
VWS
WSU
bNA
=ULA
=aLA
ULA
aLA
hUNA
=ULA
=YLA
hHNA
ULA
YLA
tEC
FIA
PSQRWV
^_ZY[X
VWPSQR
ZY[X_^
WVS
tTjZ
tgjZ
SWh
h"PA
B,Ph
B,Ph
h"IA
R,RP
t=h"IA
SVW+
=uLA
uLA
SVWh
h%QA
SWj
5FIA
h2RA
5FIA
5FIA
h"IA
5FIA
h$RA
5FIA
h-RA
5FIA
h4QA
hSQA
hsQA
h"IA
hWRA
hbRA
5FIA
hWRA
hbRA
hWRA
5FIA
hWRA
h7RA
hCRA
hCRA
hCRA
hLRA
hbRA
5FIA
hWRA
hbRA
5FIA
hLRA
5FIA
hWRA
5FIA
hLRA
hbRA
hWRA
hbRA
hLRA
hWRA
B,Ph
B,Ph
h"IA
R,RP
tFh"IA
Ph$IA
Ph$IA
5FIA
B,Ph
B,Ph
h"IA
h&TA
PhwTA
h;TA
PhwTA
hTTA
PhwTA
hnTA
PhwTA
PhwTA
h(SA
h^SA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
tch.UA
h?UA
hRUA
h#UA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
hZVA
hIVA
h8VA
h'VA
5FIA
@h"IA
haUA
haUA
5FIA
h$IA
htUA
5FIA
haUA
h$IA
htUA
VWj
tshkVA
hyVA
5FIA
5FIA
5FIA
h:WA
5FIA
hwWA
5FIA
tNh
PPPh
5FIA
5FIA
h"IA
h`XA
5FIA
hrXA
5FIA
hiXA
5FIA
h{XA
5FIA
5FIA
tSh
Ph%XA
5FIA
Ph4XA
5FIA
hDXA
5FIA
h"IA
5FIA
5FIA
5FIA
5FIA
5FIA
tSh
5FIA
h"IA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
h"IA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
tYh
h+YA
PhuYA
h9YA
5FIA
h}YA
h&ZA
5FIA
VWj
tKh2ZA
h;ZA
hOZA
hFZA
5FIA
h"IA
hlZA
5FIA
h\ZA
5FIA
hcZA
5FIA
PhuZA
5FIA
tEh
h}ZA
5FIA
h"IA
5FIA
5FIA
5FIA
5FIA
tlj
tKh
5FIA
h"IA
hM[A
hV[A
hD[A
tSh
hj[A
hj[A
5FIA
h"IA
tSh
5FIA
5FIA
5FIA
tNhJ\A
PPPh
he\A
hy\A
h"IA
PPh
VWj
PPh
PPh
5FIA
h"IA
hC]A
hL]A
hU]A
Phe]A
5FIA
Php]A
5FIA
h"IA
tgh
5FIA
VWj
tah.^A
Ph"^A
VWS
PVV
t)PP
QSV
t#hO^A
hW^A
tah`^A
hO^A
hW^A
B,Ph
B,Ph
h"IA
R,RP
t(h"IA
B,Ph
B,Ph
h"IA
Phg^A
hm^A
hw^A
5FIA
Phm^A
hw^A
5FIA
Phm^A
t$PP
Phm^A
h"IA
h"IA
tcP
tHh
5FIA
PPh
naA
hS`A
naA
=naA
5naA
5naA
naA
=naA
5naA
naA
=naA
faA
baA
hRaA
hRaA
hs`A
RaA
ZaA
=jaA
uRh`bA
Ph`bA
hgbA
PhgbA
tHhobA
PhobA
=jaA
hxbA
PhxbA
=jaA
VaA
=jaA
uRh`bA
Ph`bA
hgbA
PhgbA
t?hobA
PhobA
=jaA
hxbA
PhxbA
h\bA
B,Ph
B,Ph
h"IA
R,RP
=jaA
uFh
t-h"IA
t.h"IA
t.h"IA
h"IA
hraA
h$IA
tWj
tAPP
:h"IA
jaA
h9bA
h1bA
hKbA
5FIA
h9bA
h1bA
hKbA
t$h9bA
h}bA
jaA
h9bA
h1bA
hKbA
5FIA
h9bA
h1bA
hKbA
jaA
hKbA
5FIA
hKbA
jaA
hKbA
5FIA
hKbA
jaA
hKbA
5FIA
hKbA
5FIA
5FIA
VWj
tEh
VWj
tEh,cA
h<cA
h3cA
hxcA
=uLA
uLA
Ph-dA
h-dA
h2dA
5FIA
=uLA
uLA
tFh)dA
hmdA
=uLA
uLA
PPP
VWS
=uLA
uLA
h*eA
h=eA
hReA
hqeA
5FIA
5FIA
5FIA
5FIA
5FIA
5FIA
toh
5FIA
h"IA
5FIA
VWj
tEh
h-fA
h8fA
hGfA
VWh
=uLA
uLA
hVfA
PhVfA
h]fA
Ph]fA
hefA
PhefA
uEh
h&fA
hnfA
h}fA
5FIA
tYh
h4gA
h/gA
t)h gA
h/gA
t$hFgA
hYgA
tGhagA
hjgA
tGhogA
hxgA
hxgA
5FIA
5FIA
5FIA
5FIA
t$h%hA
t$h-hA
h;hA
PhK
ueh
=uLA
t5PP
=uLA
uLA
tQh
h"IA
PhQiA
hZiA
heiA
Ph}iA
hliA
tdh
Ph<iA
tkP
hFiA
5FIA
5FIA
VWj
=yLA
=ALA
=ELA
=ILA
=MLA
yLA
ALA
ELA
ELA
ILA
MLA
5FIA
h"IA
5FIA
5FIA
5FIA
5FIA
5FIA
tSh
h jA
h jA
h0jA
h2jA
h2jA
h0jA
Phw
h"IA
h^jA
hgjA
hpjA
PhyjA
tYh
h:jA
5FIA
h:jA
h"IA
Ph5kA
tYh
5FIA
VWj
tEhBkA
hKkA
hxkA
hXkA
5FIA
VWj
tEh
VWj
tEh
hZlA
hZlA
hblA
h6lA
h;lA
PhBlA
hIlA
hNlA
tGh
hUlA
5FIA
5FIA
hflA
VWj
tEhnlA
hulA
5FIA
hKmA
h.mA
hpmA
5FIA
5FIA
h"IA
tSh
PPh
h$IA
h$nA
5FIA
h$nA
h1nA
h"IA
hPnA
h]nA
hhnA
PhrnA
hznA
h;nA
5FIA
h;nA
h!oA
h3oA
hDoA
Ph>oA
hLoA
5FIA
WVS+
ToA
gpA
tZP
HpA
Eh"IA
Lh"IA
PPP
5FIA
h"IA
PPh3qA
5FIA
hyrA
hMrA
5FIA
h>qA
5FIA
h}qA
5FIA
5FIA
jaA
h,sA
h sA
hKbA
5FIA
h,sA
h sA
hKbA
jaA
h,sA
h sA
hKbA
5FIA
h,sA
h sA
hKbA
VWj
tEh9sA
hCsA
OsA
UPh
chVGA
SWU
bGA
WVU
u h"IA
jjjj
EPEP
SEPp
SEP
EPG
VEP
VEP
EPo
EPa
VEP
PEPw
VEPj
2http://www.facebook.com/
pSettings
@f@r@B@g@
jwN
xthpt/:w/wwf.cabeoo.koc/m
hzR
ang
=qLA
qLA
hAIA
@tkh<uA
Ph<uA
h uA
t"h.uA
hAIA
SWU
=YLA
=eLA
eLA
eLA
eLA
FIA
YLA
=QLA
QLA
FIA
hVGA
=QLA
QLA
FIA
UVW3
trS
tJO@
ri)D$
vGSQ
uFSQ
+L$PR
+T$PQ
L$\RQ
PSQ
9D$(ub
L$8WQ
D$ HP
QBR
D$LP
D$DPQ
D$@RP
v89l$D|0
L$(UQ
D$@RP
uM9l$D}G
D$@RP
L$(UQ
D$(UP
D$(UP
T$0PR
D$(UP
T$0PR
D$(UP
T$0WR
D$8WP
WSP
L$8WQ
WRP
D$8WP
L$8WQ
USP
L$(UQ
D$(UP
T$0WR
D$8WP
WUP
L$8WQ
D$TCH
T$8WR
+T$PQ
+L$PRQW
SVW
PwA
PwA
SVW
PPS
SVW
h(vA
PPS
h(vA
h(vA
h(vA
SVW
h(wA
SVW
h(wA
SVW
h(vA
h(vA
h(vA
h(vA
SVW
h(wA
PPSV
aPLib v1.01  -  the smaller the better :)
Copyright (c) 1998-2009 by Joergen Ibsen, All Rights Reserved.
More information: http://www.ibsensoftware.com/
HzS
password
phpbb
qwerty
jesus
abc123
letmein
test
love
password1
hello
monkey
dragon
trustno1
iloveyou
shadow
christ
sunshine
master
computer
princess
tigger
football
angel
jesus1
whatever
freedom
killer
asdf
soccer
superman
michael
cheese
internet
joshua
fuckyou
blessed
baseball
starwars
purple
jordan
faith
summer
ashley
buster
heaven
pepper
hunter
lovely
andrew
thomas
angels
charlie
daniel
jennifer
single
hannah
qazwsx
happy
matrix
pass
aaaaaa
amanda
nothing
ginger
mother
snoopy
jessica
welcome
pokemon
iloveyou1
mustang
helpme
justin
jasmine
orange
testing
apple
michelle
peace
secret
grace
william
iloveyou2
nicole
muffin
gateway
fuckyou1
asshole
hahaha
poop
blessing
blahblah
myspace1
matthew
canada
silver
robert
forever
asdfgh
rachel
rainbow
guitar
peanut
batman
cookie
bailey
soccer1
mickey
biteme
hello1
eminem
dakota
samantha
compaq
diamond
taylor
forum
john316
richard
blink182
peaches
cool
flower
scooter
banana
james
asdfasdf
victory
london
123qwe
startrek
george
winner
maggie
trinity
online
123abc
chicken
junior
chris
passw0rd
austin
sparky
admin
merlin
google
friends
hope
shalom
nintendo
looking
harley
smokey
joseph
lucky
digital
thunder
spirit
bandit
enter
anthony
corvette
hockey
power
benjamin
iloveyou!
1q2w3e
viper
genesis
knight
qwerty1
creative
foobar
adidas
rotimi
slayer
wisdom
praise
zxcvbnm
samuel
mike
dallas
green
testtest
maverick
onelove
david
mylove
church
friend
god
destiny
none
microsoft
bubbles
cocacola
jordan23
ilovegod
football1
loving
nathan
emmanuel
scooby
fuckoff
sammy
maxwell
jason
john
1q2w3e4r
baby
red123
blabla
prince
qwert
chelsea
angel1
hardcore
dexter
saved
hallo
jasper
danielle
kitten
cassie
stella
prayer
hotdog
windows
mustdie
gates
billgates
ghbdtn
gfhjkm
cryptimplus
http://64.13.172.42:8080/forum/viewtopic.php
http://20.anythinginternational.biz/forum/viewtopic.php
http://20.anythinginternational.com/forum/viewtopic.php
http://20.chelsiamd.com/forum/viewtopic.php
http://kfz-youngtimerservice.de/P81.exe
http://mtmedia.net/tJr4H.exe
http://cinemacityhu.iq.pl/iN5Vf.exe
YUIPWDFILE0YUIPKDFILE0YUICRYPTED0YUI1.0
MODU
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
UninstallString
DisplayName
.exe
Software\WinRAR
open
kernel32.dll
WTSGetActiveConsoleSessionId
ProcessIdToSessionId
netapi32.dll
NetApiBufferFree
NetUserEnum
ole32.dll
StgOpenStorage
advapi32.dll
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
CredEnumerateA
CredFree
CryptGetUserKey
CryptExportKey
CryptDestroyKey
CryptReleaseContext
RevertToSelf
OpenProcessToken
ImpersonateLoggedOnUser
GetTokenInformation
ConvertSidToStringSidA
LogonUserA
LookupPrivilegeValueA
AdjustTokenPrivileges
CreateProcessAsUserA
crypt32.dll
CryptUnprotectData
CertOpenSystemStoreA
CertEnumCertificatesInStore
CertCloseStore
CryptAcquireCertificatePrivateKey
msi.dll
MsiGetComponentPathA
pstorec.dll
PStoreCreateInstance
userenv.dll
CreateEnvironmentBlock
DestroyEnvironmentBlock
z%Y]I(Y
~shell32.dll
SHGetFolderPathA
LMA
qMA
My Documents
AppData
Local AppData
Cache
Cookies
History
My Documents
Common AppData
My Pictures
Common Documents
Common Administrative Tools
Administrative Tools
Personal
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
explorer.exe
SeImpersonatePrivilege
SeTcbPrivilege
SeChangeNotifyPrivilege
SeCreateTokenPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeIncreaseQuotaPrivilege
SeAssignPrimaryTokenPrivilege
POST %s HTTP/1.0
Host: %s
Accept: */*
Accept-Encoding: identity, *;q=0
Content-Length: %lu
Connection: close
Content-Type: application/octet-stream
Content-Encoding: binary
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
Content-Length:
Location:
GET %s HTTP/1.0
Host: %s
Accept: */*
Accept-Encoding: identity, *;q=0
Connection: close
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HWID
{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
GetNativeSystemInfo
kernel32.dll
IsWow64Process
Software\Far\Plugins\FTP\Hosts
Software\Far2\Plugins\FTP\Hosts
Software\Far Manager\Plugins\FTP\Hosts
Software\Far\SavedDialogHistory\FTPHost
Software\Far2\SavedDialogHistory\FTPHost
Software\Far Manager\SavedDialogHistory\FTPHost
Password
HostName
User
Line
wcx_ftp.ini
\GHISLER
InstallDir
FtpIniName
Software\Ghisler\Windows Commander
Software\Ghisler\Total Commander
\Ipswitch
Sites\
\Ipswitch\WS_FTP
\win.ini
.ini
WS_FTP
DIR
DEFDIR
CUTEFTP
QCHistory
Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar
Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar
Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar
\GlobalSCAPE\CuteFTP
\GlobalSCAPE\CuteFTP Pro
\GlobalSCAPE\CuteFTP Lite
\CuteFTP
\sm.dat
Software\FlashFXP\3
Software\FlashFXP
Software\FlashFXP\4
InstallerDathPath
path
Install Path
DataFolder
\Sites.dat
\Quick.dat
\History.dat
\FlashFXP\3
\FlashFXP\4
\FileZilla
\sitemanager.xml
\recentservers.xml
\filezilla.xml
Software\FileZilla
Software\FileZilla Client
Install_Dir
Host
User
Pass
Port
Remote Dir
Server Type
Server.Host
Server.User
Server.Pass
Server.Port
Path
ServerType
Last Server Host
Last Server User
Last Server Pass
Last Server Port
Last Server Path
Last Server Type
FTP Navigator
FTP Commander
ftplist.txt
\BulletProof Software
.dat
.bps
Software\BPFTP\Bullet Proof FTP\Main
Software\BulletProof Software\BulletProof FTP Client\Main
Software\BPFTP\Bullet Proof FTP\Options
Software\BulletProof Software\BulletProof FTP Client\Options
Software\BPFTP
LastSessionFile
SitesDir
InstallDir1
.xml
\SmartFTP
Favorites.dat
History.dat
addrbk.dat
quick.dat
\TurboFTP
Software\TurboFTP
installpath
Software\Sota\FFFTP
CredentialSalt
CredentialCheck
Software\Sota\FFFTP\Options
Password
UserName
HostAdrs
RemoteDir
Port
HostName
Port
Username
Password
HostDirName
Software\CoffeeCup Software\Internet\Profiles
Software\FTPWare\COREFTP\Sites
Host
User
Port
PthR
SSH
profiles.xml
\FTP Explorer
Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224
Buttons
Software\FTP Explorer\Profiles
Password
PasswordType
Host
Login
Port
InitialPath
FtpSite.xml
\Frigate3
.ini
\VanDyke\Config\Sessions
\Sessions
Software\VanDyke\SecureFX
Config Path
UltraFXP
\sites.xml
\FTPRush
RushSite.xml
Server
Username
Password
FtpPort
Software\Cryer\WebSitePublisher
\BitKinex
bitkinex.ds
Hostname
Username
Password
Port
Software\ExpanDrive\Sessions
\ExpanDrive
\drives.js
"password" : "
Software\ExpanDrive
ExpanDrive_Home
Server
UserName
Password
_Password
Directory
Software\NCH Software\ClassicFTP\FTPAccounts
FtpServer
FtpUserName
FtpPassword
_FtpPassword
FtpDirectory
SOFTWARE\NCH Software\Fling\Accounts
Software\FTPClient\Sites
Software\SoftX.org\FTPClient\Sites
.oxc
.oll
ftplast.osd
\GPSoftware\Directory Opus
\SharedSettings.ccs
\SharedSettings_1_0_5.ccs
\SharedSettings.sqlite
\SharedSettings_1_0_5.sqlite
\CoffeeCup Software
leapftp
unleap.exe
sites.dat
sites.ini
\LeapWare\LeapFTP
SOFTWARE\LeapWare
InstallPath
DataDir
Password
HostName
UserName
RemoteDirectory
PortNumber
FSProtocol
Software\Martin Prikryl
\32BitFtp.ini
NDSites.ini
\NetDrive
PassWord
Url
UserName
RootDirectory
Port
Software\South River Technologies\WebDrive\Connections
ServerType
FTP CONTROL
FTPCON
.prf
\Profiles
http://
https://
ftp://
opera
wand.dat
_Software\Opera Software
Last Directory3
Last Install Path
Opera.HTML\shell\open\command
wiseftpsrvs.bin
\AceBIT
Software\AceBIT
MRU
SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}
SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}
wiseftpsrvs.ini
wiseftp.ini
FTPVoyager.ftp
FTPVoyager.qc
\RhinoSoft.com
nss3.dll
NSS_Init
NSS_Shutdown
NSSBase64_DecodeBuffer
SECITEM_FreeItem
PK11_GetInternalKeySlot
PK11_Authenticate
PK11SDR_Decrypt
PK11_FreeSlot
sqlite3.dll
sqlite3_open
sqlite3_close
sqlite3_prepare
sqlite3_step
sqlite3_column_bytes
sqlite3_column_blob
mozsqlite3.dll
sqlite3_open
sqlite3_close
sqlite3_prepare
sqlite3_step
sqlite3_column_bytes
sqlite3_column_blob
profiles.ini
Profile
IsRelative
Path
PathToExe
prefs.js
signons.sqlite
signons.txt
signons2.txt
signons3.txt
SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins
Firefox
\Mozilla\Firefox\
Software\Mozilla
ftp://
http://
https://
ftp.
fireFTPsites.dat
SeaMonkey
\Mozilla\SeaMonkey\
Flock
\Flock\Browser\
Mozilla
\Mozilla\Profiles\
Software\LeechFTP
AppDir
LocalDir
bookmark.dat
SiteInfo.QFP
Odin
Favorites.dat
WinFTP
sites.db
CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32
servers.xml
\FTPGetter
ESTdb2.dat
QData.dat
\Estsoft\ALFTP
Internet Explorer
WininetCacheCredentials
MS IE FTP Passwords
DPAPI:
Software\Microsoft\Internet Explorer\IntelliForms\Storage2
Microsoft_WinInet_*
ftp://
Software\Adobe\Common
SiteServers
SiteServer %d\Host
SiteServer %d\WebUrl
SiteServer %d\Remote Directory
SiteServer %d-User
SiteServer %d-User PW
%s\Keychain
SiteServer %d\SFTP
DeluxeFTP
sites.xml
Web Data
Login Data
SQLite format 3
table
CONSTRAINT
PRIMARY
UNIQUE
CHECK
FOREIGN
logins
origin_url
password_value
username_value
ftp://
http://
https://
\Google\Chrome
\Chromium
\ChromePlus
Software\ChromePlus
Install_Dir
\Bromium
\Nichrome
\Comodo
\RockMelt
K-Meleon
\K-Meleon
\Profiles
Epic
\Epic\Epic
Staff-FTP
sites.ini
\Sites
\Visicom Media
.ftp
\Global Downloader
SM.arch
FreshFTP
.SMF
BlazeFtp
site.dat
LastPassword
LastAddress
LastUser
LastPort
Software\FlashPeak\BlazeFtp\Settings
\BlazeFtp
.fpl
FTP++.Link\shell\open\command
GoFTP
Connections.txt
3D-FTP
sites.ini
\3D-FTP
\SiteDesigner
SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32
EasyFTP
\NetSarang
.xfp
.rdp
TERMSRV/*
password 51:b:
username:s:
full address:s:
TERMSRV/
FTP Now
FTPNow
sites.xml
SOFTWARE\Robo-FTP 3.7\Scripts
SOFTWARE\Robo-FTP 3.7\FTPServers
FTP Count
FTP File%d
Password
ServerName
UserID
InitialDirectory
PortNumber
ServerType
fMY
Software\LinasFTP\Site Manager
Host
User
Pass
Port
Remote Dir
\Cyberduck
.duck
user.config
<setting name="
value="
Software\SimonTatham\PuTTY\Sessions
HostName
UserName
Password
PortNumber
TerminalType
NppFTP.xml
\Notepad++
Software\CoffeeCup Software
FTP destination server
FTP destination user
FTP destination password
FTP destination port
FTP destination catalog
FTP profiles
FTPShell
ftpshell.fsi
Software\MAS-Soft\FTPInfo\Setup
DataDir
\FTPInfo
ServerList.xml
NexusFile
ftpsite.ini
FastStone Browser
FTPList.db
\MapleStudio\ChromePlus
Software\Nico Mak Computing\WinZip\FTP
Software\Nico Mak Computing\WinZip\mru\jobs
Site
UserID
xflags
Port
Folder
.wjf
winex="
\Yandex
My FTP
project.ini
.xml
{74FF1730-B1F2-4D88-926B-1568FAE61DB7}
NovaFTP.db
\INSoftware\NovaFTP
.oeaccount
Salt
<POP3_Password2
<SMTP_Password2
<IMAP_Password2
<HTTPMail_Password2
\Microsoft\Windows Live Mail
Software\Microsoft\Windows Live Mail
\Microsoft\Windows Mail
Software\Microsoft\Windows Mail
Software\RimArts\B2\Settings
DataDir
DataDirBak
Mailbox.ini
Software\Poco Systems Inc
Path
\PocoSystem.ini
Program
DataPath
accounts.ini
\Pocomail
Software\IncrediMail
EmailAddress
Technology
PopServer
PopPort
PopAccount
PopPassword
SmtpServer
SmtpPort
SmtpAccount
SmtpPassword
account.cfg
account.cfn
\BatMail
\The Bat!
Software\RIT\The Bat!
Software\RIT\The Bat!\Users depot
Working Directory
ProgramDir
Count
Default
Dir #%d
SMTP Email Address
SMTP Server
POP3 Server
POP3 User Name
SMTP User Name
NNTP Email Address
NNTP User Name
NNTP Server
IMAP Server
IMAP User Name
Email
HTTP User
HTTP Server URL
POP3 User
IMAP User
HTTPMail User Name
HTTPMail Server
SMTP User
POP3 Port
SMTP Port
IMAP Port
POP3 Password2
IMAP Password2
NNTP Password2
HTTPMail Password2
SMTP Password2
POP3 Password
IMAP Password
NNTP Password
HTTP Password
SMTP Password
Software\Microsoft\Internet Account Manager\Accounts
Identities
Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
Software\Microsoft\Internet Account Manager
Outlook
\Accounts
identification
identitymgr
inetcomm server passwords
outlook account manager passwords
identities
{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
Thunderbird
\Thunderbird
FastTrack
ftplist.txt
Client Hash
STATUS-IMPORT-OK
%d.exe
true
%d.bat
ShellExecuteA
:ktk
del
exist
goto
ktk
del
shell32.dll
IugvO%gv
qUS
qUj
CreateFileA
ReadFile
CloseHandle
WriteFile
lstrlenA
GlobalLock
GlobalUnlock
LocalFree
LocalAlloc
GetTickCount
lstrcpyA
lstrcatA
GetFileAttributesA
ExpandEnvironmentStringsA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LoadLibraryA
GetProcAddress
GetTempPathA
CreateDirectoryA
DeleteFileA
GetCurrentProcess
WideCharToMultiByte
GetLastError
lstrcmpA
CreateToolhelp32Snapshot
Process32First
OpenProcess
Process32Next
FindFirstFileA
lstrcmpiA
FindNextFileA
FindClose
GetModuleHandleA
GetVersionExA
GetLocaleInfoA
GetSystemInfo
GetWindowsDirectoryA
GetPrivateProfileStringA
SetCurrentDirectoryA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetCurrentDirectoryA
lstrlenW
MultiByteToWideChar
Sleep
GetModuleFileNameA
LCMapStringA
ExitProcess
SetUnhandledExceptionFilter
kernel32.dll
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateGuid
CoTaskMemFree
CoCreateInstance
OleInitialize
ole32.dll
wsprintfA
user32.dll
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
IsTextUnicode
RegOpenCurrentUser
RegEnumValueA
GetUserNameA
advapi32.dll
ShellExecuteA
shell32.dll
InternetCrackUrlA
InternetCreateUrlA
wininet.dll
StrStrIA
StrRChrIA
StrToIntA
StrStrA
StrCmpNIA
StrStrIW
shlwapi.dll
inet_addr
gethostbyname
socket
connect
closesocket
send
select
recv
setsockopt
WSAStartup
wsock32.dll
LoadUserProfileA
UnloadUserProfile
userenv.dll
jHq
kdz
rqg
LhX
Qkkbal
Zjz
i]Wb
knv
owG
kaE
MGiI
wn>Jj
VsK
say
gJa
,UoVO
cnU
lX7[C
BDECP
LsAU
<]tnC"
Bks
@fjK
iOX
Adp
eVK
zdS
V}vi
dzbT
Wyj<
j4rx
CBC
Dlz
EQy
Jtg
HUp
Zbp
#:oql
Z`Xk
vq@J
Xjk
sCi
zJR
X:Rs
?SBK
nuL
kBv
5VPV
otL
ylV
jke
oGW
Jyp
WTt_
ExQ
sGE
EFFg
RUiS
oO4U
gzb
LXK
MZW
cMO
xDm
pn\n
aSg
ITn
NoQ
Cma
Mhm
L"JL
xbjM
DTg
Do.W
M6Be
fli8
O*Bq
QCO
PFa
wSa
zRF
usR
vHh
lGaS
8ZzD
ntGh
n\AH
csm
VDB5
guQ
ZJM
ocZ
unC
7AXiZ
,Rinm
HVJ
wi6M
EV(s
DUm
VfZ
xRz
"rIj
lwI
CTf
DVZ/
er"E
dCuc
Pf!s
wNZr
h|nh
FIl
Kol
Q-Yy
DJT
sYy
dTa
xXv
}TVC
zo+J
moO
oQl
lqM
----
@unixfreaxjp /malware]$ date
Fri Mar  8 00:35:35 JST 2013