unixfreaxjp

Win32/Fareit Depacked Strings

Mar 7th, 2013
431
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Fareit Depacked Strings:
  2. ---
  3. jjj
  4. jjj
  5. jjjj
  6. jjjj
  7. APv
  8. APO
  9. CEP
  10. jjjjjj
  11. kEP
  12. jjjj
  13. JEh
  14. jjjj
  15. jjjj
  16. jjjj
  17. jjjj
  18. jjjj
  19. AWb
  20. jjjj
  21. jjjj
  22. jjjj
  23. jjjj
  24. jjjj
  25. jjjj
  26. AVM
  27. jjjj
  28. jjjj
  29. AVQ
  30. AWE
  31. APc
  32. jjjj
  33. EPEPE
  34. jjjj
  35. jjjj
  36. jjjj
  37. Ejj
  38. jjjj
  39. EPE
  40. jjjj
  41. jjjj
  42. EPE
  43. EPE
  44. EPEPE
  45. PEPE
  46. jjjj
  47. EPEPE
  48. EPEPE
  49. EPEPE
  50. EPEPE
  51. Ejh
  52. Ejjh
  53. Ejj
  54. EPE
  55. jjjj
  56. jjjj
  57. jjjj
  58. jjjj
  59. jjjj
  60. jjjj
  61. jjjj
  62. jjjj
  63. jjjj
  64. jjjj
  65. !This program cannot be run in DOS mode.
  66. .text
  67. `.rdata
  68. @.data
  69. VWSh
  70. SVW
  71. PRj
  72. PWj
  73. 5FIA
  74. t*PP
  75. h"IA
  76. v;PP
  77. WVj
  78. _h,IA
  79. VSW
  80. h)LA
  81. huLA
  82. h-LA
  83. h!LA
  84. hJIA
  85. WVS
  86. SWV
  87. Ph1IA
  88. 5FIA
  89. h"IA
  90. h1IA
  91. 5FIA
  92. h"IA
  93. =iLA
  94. =mLA
  95. =ULA
  96. iLA
  97. Pj R
  98. ULA
  99. mLA
  100. VWS
  101. WSU
  102. bNA
  103. =ULA
  104. =aLA
  105. ULA
  106. aLA
  107. hUNA
  108. =ULA
  109. =YLA
  110. hHNA
  111. ULA
  112. YLA
  113. tEC
  114. FIA
  115. PSQRWV
  116. ^_ZY[X
  117. VWPSQR
  118. ZY[X_^
  119. WVS
  120. tTjZ
  121. tgjZ
  122. SWh
  123. h"PA
  124. B,Ph
  125. B,Ph
  126. h"IA
  127. R,RP
  128. t=h"IA
  129. SVW+
  130. =uLA
  131. uLA
  132. SVWh
  133. h%QA
  134. SWj
  135. 5FIA
  136. h2RA
  137. 5FIA
  138. 5FIA
  139. h"IA
  140. 5FIA
  141. h$RA
  142. 5FIA
  143. h-RA
  144. 5FIA
  145. h4QA
  146. hSQA
  147. hsQA
  148. h"IA
  149. hWRA
  150. hbRA
  151. 5FIA
  152. hWRA
  153. hbRA
  154. hWRA
  155. 5FIA
  156. hWRA
  157. h7RA
  158. hCRA
  159. hCRA
  160. hCRA
  161. hLRA
  162. hbRA
  163. 5FIA
  164. hWRA
  165. hbRA
  166. 5FIA
  167. hLRA
  168. 5FIA
  169. hWRA
  170. 5FIA
  171. hLRA
  172. hbRA
  173. hWRA
  174. hbRA
  175. hLRA
  176. hWRA
  177. B,Ph
  178. B,Ph
  179. h"IA
  180. R,RP
  181. tFh"IA
  182. Ph$IA
  183. Ph$IA
  184. 5FIA
  185. B,Ph
  186. B,Ph
  187. h"IA
  188. h&TA
  189. PhwTA
  190. h;TA
  191. PhwTA
  192. hTTA
  193. PhwTA
  194. hnTA
  195. PhwTA
  196. PhwTA
  197. h(SA
  198. h^SA
  199. 5FIA
  200. 5FIA
  201. 5FIA
  202. 5FIA
  203. 5FIA
  204. 5FIA
  205. 5FIA
  206. 5FIA
  207. tch.UA
  208. h?UA
  209. hRUA
  210. h#UA
  211. 5FIA
  212. 5FIA
  213. 5FIA
  214. 5FIA
  215. 5FIA
  216. 5FIA
  217. hZVA
  218. hIVA
  219. h8VA
  220. h'VA
  221. 5FIA
  222. @h"IA
  223. haUA
  224. haUA
  225. 5FIA
  226. h$IA
  227. htUA
  228. 5FIA
  229. haUA
  230. h$IA
  231. htUA
  232. VWj
  233. tshkVA
  234. hyVA
  235. 5FIA
  236. 5FIA
  237. 5FIA
  238. h:WA
  239. 5FIA
  240. hwWA
  241. 5FIA
  242. tNh
  243. PPPh
  244. 5FIA
  245. 5FIA
  246. h"IA
  247. h`XA
  248. 5FIA
  249. hrXA
  250. 5FIA
  251. hiXA
  252. 5FIA
  253. h{XA
  254. 5FIA
  255. 5FIA
  256. tSh
  257. Ph%XA
  258. 5FIA
  259. Ph4XA
  260. 5FIA
  261. hDXA
  262. 5FIA
  263. h"IA
  264. 5FIA
  265. 5FIA
  266. 5FIA
  267. 5FIA
  268. 5FIA
  269. tSh
  270. 5FIA
  271. h"IA
  272. 5FIA
  273. 5FIA
  274. 5FIA
  275. 5FIA
  276. 5FIA
  277. 5FIA
  278. 5FIA
  279. h"IA
  280. 5FIA
  281. 5FIA
  282. 5FIA
  283. 5FIA
  284. 5FIA
  285. 5FIA
  286. tYh
  287. h+YA
  288. PhuYA
  289. h9YA
  290. 5FIA
  291. h}YA
  292. h&ZA
  293. 5FIA
  294. VWj
  295. tKh2ZA
  296. h;ZA
  297. hOZA
  298. hFZA
  299. 5FIA
  300. h"IA
  301. hlZA
  302. 5FIA
  303. h\ZA
  304. 5FIA
  305. hcZA
  306. 5FIA
  307. PhuZA
  308. 5FIA
  309. tEh
  310. h}ZA
  311. 5FIA
  312. h"IA
  313. 5FIA
  314. 5FIA
  315. 5FIA
  316. 5FIA
  317. tlj
  318. tKh
  319. 5FIA
  320. h"IA
  321. hM[A
  322. hV[A
  323. hD[A
  324. tSh
  325. hj[A
  326. hj[A
  327. 5FIA
  328. h"IA
  329. tSh
  330. 5FIA
  331. 5FIA
  332. 5FIA
  333. tNhJ\A
  334. PPPh
  335. he\A
  336. hy\A
  337. h"IA
  338. PPh
  339. VWj
  340. PPh
  341. PPh
  342. 5FIA
  343. h"IA
  344. hC]A
  345. hL]A
  346. hU]A
  347. Phe]A
  348. 5FIA
  349. Php]A
  350. 5FIA
  351. h"IA
  352. tgh
  353. 5FIA
  354. VWj
  355. tah.^A
  356. Ph"^A
  357. VWS
  358. PVV
  359. t)PP
  360. QSV
  361. t#hO^A
  362. hW^A
  363. tah`^A
  364. hO^A
  365. hW^A
  366. B,Ph
  367. B,Ph
  368. h"IA
  369. R,RP
  370. t(h"IA
  371. B,Ph
  372. B,Ph
  373. h"IA
  374. Phg^A
  375. hm^A
  376. hw^A
  377. 5FIA
  378. Phm^A
  379. hw^A
  380. 5FIA
  381. Phm^A
  382. t$PP
  383. Phm^A
  384. h"IA
  385. h"IA
  386. tcP
  387. tHh
  388. 5FIA
  389. PPh
  390. naA
  391. hS`A
  392. naA
  393. =naA
  394. 5naA
  395. 5naA
  396. naA
  397. =naA
  398. 5naA
  399. naA
  400. =naA
  401. faA
  402. baA
  403. hRaA
  404. hRaA
  405. hs`A
  406. RaA
  407. ZaA
  408. =jaA
  409. uRh`bA
  410. Ph`bA
  411. hgbA
  412. PhgbA
  413. tHhobA
  414. PhobA
  415. =jaA
  416. hxbA
  417. PhxbA
  418. =jaA
  419. VaA
  420. =jaA
  421. uRh`bA
  422. Ph`bA
  423. hgbA
  424. PhgbA
  425. t?hobA
  426. PhobA
  427. =jaA
  428. hxbA
  429. PhxbA
  430. h\bA
  431. B,Ph
  432. B,Ph
  433. h"IA
  434. R,RP
  435. =jaA
  436. uFh
  437. t-h"IA
  438. t.h"IA
  439. t.h"IA
  440. h"IA
  441. hraA
  442. h$IA
  443. tWj
  444. tAPP
  445. :h"IA
  446. jaA
  447. h9bA
  448. h1bA
  449. hKbA
  450. 5FIA
  451. h9bA
  452. h1bA
  453. hKbA
  454. t$h9bA
  455. h}bA
  456. jaA
  457. h9bA
  458. h1bA
  459. hKbA
  460. 5FIA
  461. h9bA
  462. h1bA
  463. hKbA
  464. jaA
  465. hKbA
  466. 5FIA
  467. hKbA
  468. jaA
  469. hKbA
  470. 5FIA
  471. hKbA
  472. jaA
  473. hKbA
  474. 5FIA
  475. hKbA
  476. 5FIA
  477. 5FIA
  478. VWj
  479. tEh
  480. VWj
  481. tEh,cA
  482. h<cA
  483. h3cA
  484. hxcA
  485. =uLA
  486. uLA
  487. Ph-dA
  488. h-dA
  489. h2dA
  490. 5FIA
  491. =uLA
  492. uLA
  493. tFh)dA
  494. hmdA
  495. =uLA
  496. uLA
  497. PPP
  498. VWS
  499. =uLA
  500. uLA
  501. h*eA
  502. h=eA
  503. hReA
  504. hqeA
  505. 5FIA
  506. 5FIA
  507. 5FIA
  508. 5FIA
  509. 5FIA
  510. 5FIA
  511. toh
  512. 5FIA
  513. h"IA
  514. 5FIA
  515. VWj
  516. tEh
  517. h-fA
  518. h8fA
  519. hGfA
  520. VWh
  521. =uLA
  522. uLA
  523. hVfA
  524. PhVfA
  525. h]fA
  526. Ph]fA
  527. hefA
  528. PhefA
  529. uEh
  530. h&fA
  531. hnfA
  532. h}fA
  533. 5FIA
  534. tYh
  535. h4gA
  536. h/gA
  537. t)h gA
  538. h/gA
  539. t$hFgA
  540. hYgA
  541. tGhagA
  542. hjgA
  543. tGhogA
  544. hxgA
  545. hxgA
  546. 5FIA
  547. 5FIA
  548. 5FIA
  549. 5FIA
  550. t$h%hA
  551. t$h-hA
  552. h;hA
  553. PhK
  554. ueh
  555. =uLA
  556. t5PP
  557. =uLA
  558. uLA
  559. tQh
  560. h"IA
  561. PhQiA
  562. hZiA
  563. heiA
  564. Ph}iA
  565. hliA
  566. tdh
  567. Ph<iA
  568. tkP
  569. hFiA
  570. 5FIA
  571. 5FIA
  572. VWj
  573. =yLA
  574. =ALA
  575. =ELA
  576. =ILA
  577. =MLA
  578. yLA
  579. ALA
  580. ELA
  581. ELA
  582. ILA
  583. MLA
  584. 5FIA
  585. h"IA
  586. 5FIA
  587. 5FIA
  588. 5FIA
  589. 5FIA
  590. 5FIA
  591. tSh
  592. h jA
  593. h jA
  594. h0jA
  595. h2jA
  596. h2jA
  597. h0jA
  598. Phw
  599. h"IA
  600. h^jA
  601. hgjA
  602. hpjA
  603. PhyjA
  604. tYh
  605. h:jA
  606. 5FIA
  607. h:jA
  608. h"IA
  609. Ph5kA
  610. tYh
  611. 5FIA
  612. VWj
  613. tEhBkA
  614. hKkA
  615. hxkA
  616. hXkA
  617. 5FIA
  618. VWj
  619. tEh
  620. VWj
  621. tEh
  622. hZlA
  623. hZlA
  624. hblA
  625. h6lA
  626. h;lA
  627. PhBlA
  628. hIlA
  629. hNlA
  630. tGh
  631. hUlA
  632. 5FIA
  633. 5FIA
  634. hflA
  635. VWj
  636. tEhnlA
  637. hulA
  638. 5FIA
  639. hKmA
  640. h.mA
  641. hpmA
  642. 5FIA
  643. 5FIA
  644. h"IA
  645. tSh
  646. PPh
  647. h$IA
  648. h$nA
  649. 5FIA
  650. h$nA
  651. h1nA
  652. h"IA
  653. hPnA
  654. h]nA
  655. hhnA
  656. PhrnA
  657. hznA
  658. h;nA
  659. 5FIA
  660. h;nA
  661. h!oA
  662. h3oA
  663. hDoA
  664. Ph>oA
  665. hLoA
  666. 5FIA
  667. WVS+
  668. ToA
  669. gpA
  670. tZP
  671. HpA
  672. Eh"IA
  673. Lh"IA
  674. PPP
  675. 5FIA
  676. h"IA
  677. PPh3qA
  678. 5FIA
  679. hyrA
  680. hMrA
  681. 5FIA
  682. h>qA
  683. 5FIA
  684. h}qA
  685. 5FIA
  686. 5FIA
  687. jaA
  688. h,sA
  689. h sA
  690. hKbA
  691. 5FIA
  692. h,sA
  693. h sA
  694. hKbA
  695. jaA
  696. h,sA
  697. h sA
  698. hKbA
  699. 5FIA
  700. h,sA
  701. h sA
  702. hKbA
  703. VWj
  704. tEh9sA
  705. hCsA
  706. OsA
  707. UPh
  708. chVGA
  709. SWU
  710. bGA
  711. WVU
  712. u h"IA
  713. jjjj
  714. EPEP
  715. SEPp
  716. SEP
  717. EPG
  718. VEP
  719. VEP
  720. EPo
  721. EPa
  722. VEP
  723. PEPw
  724. VEPj
  725. 2http://www.facebook.com/
  726. pSettings
  727. @f@r@B@g@
  728. jwN
  729. xthpt/:w/wwf.cabeoo.koc/m
  730. hzR
  731. ang
  732. =qLA
  733. qLA
  734. hAIA
  735. @tkh<uA
  736. Ph<uA
  737. h uA
  738. t"h.uA
  739. hAIA
  740. SWU
  741. =YLA
  742. =eLA
  743. eLA
  744. eLA
  745. eLA
  746. FIA
  747. YLA
  748. =QLA
  749. QLA
  750. FIA
  751. hVGA
  752. =QLA
  753. QLA
  754. FIA
  755. UVW3
  756. trS
  757. tJO@
  758. ri)D$
  759. vGSQ
  760. uFSQ
  761. +L$PR
  762. +T$PQ
  763. L$\RQ
  764. PSQ
  765. 9D$(ub
  766. L$8WQ
  767. D$ HP
  768. QBR
  769. D$LP
  770. D$DPQ
  771. D$@RP
  772. v89l$D|0
  773. L$(UQ
  774. D$@RP
  775. uM9l$D}G
  776. D$@RP
  777. L$(UQ
  778. D$(UP
  779. D$(UP
  780. T$0PR
  781. D$(UP
  782. T$0PR
  783. D$(UP
  784. T$0WR
  785. D$8WP
  786. WSP
  787. L$8WQ
  788. WRP
  789. D$8WP
  790. L$8WQ
  791. USP
  792. L$(UQ
  793. D$(UP
  794. T$0WR
  795. D$8WP
  796. WUP
  797. L$8WQ
  798. D$TCH
  799. T$8WR
  800. +T$PQ
  801. +L$PRQW
  802. SVW
  803. PwA
  804. PwA
  805. SVW
  806. PPS
  807. SVW
  808. h(vA
  809. PPS
  810. h(vA
  811. h(vA
  812. h(vA
  813. SVW
  814. h(wA
  815. SVW
  816. h(wA
  817. SVW
  818. h(vA
  819. h(vA
  820. h(vA
  821. h(vA
  822. SVW
  823. h(wA
  824. PPSV
  825. aPLib v1.01 - the smaller the better :)
  826. Copyright (c) 1998-2009 by Joergen Ibsen, All Rights Reserved.
  827. More information: http://www.ibsensoftware.com/
  828. HzS
  829. password
  830. phpbb
  831. qwerty
  832. jesus
  833. abc123
  834. letmein
  835. test
  836. love
  837. password1
  838. hello
  839. monkey
  840. dragon
  841. trustno1
  842. iloveyou
  843. shadow
  844. christ
  845. sunshine
  846. master
  847. computer
  848. princess
  849. tigger
  850. football
  851. angel
  852. jesus1
  853. whatever
  854. freedom
  855. killer
  856. asdf
  857. soccer
  858. superman
  859. michael
  860. cheese
  861. internet
  862. joshua
  863. fuckyou
  864. blessed
  865. baseball
  866. starwars
  867. purple
  868. jordan
  869. faith
  870. summer
  871. ashley
  872. buster
  873. heaven
  874. pepper
  875. hunter
  876. lovely
  877. andrew
  878. thomas
  879. angels
  880. charlie
  881. daniel
  882. jennifer
  883. single
  884. hannah
  885. qazwsx
  886. happy
  887. matrix
  888. pass
  889. aaaaaa
  890. amanda
  891. nothing
  892. ginger
  893. mother
  894. snoopy
  895. jessica
  896. welcome
  897. pokemon
  898. iloveyou1
  899. mustang
  900. helpme
  901. justin
  902. jasmine
  903. orange
  904. testing
  905. apple
  906. michelle
  907. peace
  908. secret
  909. grace
  910. william
  911. iloveyou2
  912. nicole
  913. muffin
  914. gateway
  915. fuckyou1
  916. asshole
  917. hahaha
  918. poop
  919. blessing
  920. blahblah
  921. myspace1
  922. matthew
  923. canada
  924. silver
  925. robert
  926. forever
  927. asdfgh
  928. rachel
  929. rainbow
  930. guitar
  931. peanut
  932. batman
  933. cookie
  934. bailey
  935. soccer1
  936. mickey
  937. biteme
  938. hello1
  939. eminem
  940. dakota
  941. samantha
  942. compaq
  943. diamond
  944. taylor
  945. forum
  946. john316
  947. richard
  948. blink182
  949. peaches
  950. cool
  951. flower
  952. scooter
  953. banana
  954. james
  955. asdfasdf
  956. victory
  957. london
  958. 123qwe
  959. startrek
  960. george
  961. winner
  962. maggie
  963. trinity
  964. online
  965. 123abc
  966. chicken
  967. junior
  968. chris
  969. passw0rd
  970. austin
  971. sparky
  972. admin
  973. merlin
  974. google
  975. friends
  976. hope
  977. shalom
  978. nintendo
  979. looking
  980. harley
  981. smokey
  982. joseph
  983. lucky
  984. digital
  985. thunder
  986. spirit
  987. bandit
  988. enter
  989. anthony
  990. corvette
  991. hockey
  992. power
  993. benjamin
  994. iloveyou!
  995. 1q2w3e
  996. viper
  997. genesis
  998. knight
  999. qwerty1
  1000. creative
  1001. foobar
  1002. adidas
  1003. rotimi
  1004. slayer
  1005. wisdom
  1006. praise
  1007. zxcvbnm
  1008. samuel
  1009. mike
  1010. dallas
  1011. green
  1012. testtest
  1013. maverick
  1014. onelove
  1015. david
  1016. mylove
  1017. church
  1018. friend
  1019. god
  1020. destiny
  1021. none
  1022. microsoft
  1023. bubbles
  1024. cocacola
  1025. jordan23
  1026. ilovegod
  1027. football1
  1028. loving
  1029. nathan
  1030. emmanuel
  1031. scooby
  1032. fuckoff
  1033. sammy
  1034. maxwell
  1035. jason
  1036. john
  1037. 1q2w3e4r
  1038. baby
  1039. red123
  1040. blabla
  1041. prince
  1042. qwert
  1043. chelsea
  1044. angel1
  1045. hardcore
  1046. dexter
  1047. saved
  1048. hallo
  1049. jasper
  1050. danielle
  1051. kitten
  1052. cassie
  1053. stella
  1054. prayer
  1055. hotdog
  1056. windows
  1057. mustdie
  1058. gates
  1059. billgates
  1060. ghbdtn
  1061. gfhjkm
  1062. cryptimplus
  1063. http://64.13.172.42:8080/forum/viewtopic.php
  1064. http://20.anythinginternational.biz/forum/viewtopic.php
  1065. http://20.anythinginternational.com/forum/viewtopic.php
  1066. http://20.chelsiamd.com/forum/viewtopic.php
  1067. http://kfz-youngtimerservice.de/P81.exe
  1068. http://mtmedia.net/tJr4H.exe
  1069. http://cinemacityhu.iq.pl/iN5Vf.exe
  1070. YUIPWDFILE0YUIPKDFILE0YUICRYPTED0YUI1.0
  1071. MODU
  1072. SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
  1073. UninstallString
  1074. DisplayName
  1075. .exe
  1076. Software\WinRAR
  1077. open
  1078. kernel32.dll
  1079. WTSGetActiveConsoleSessionId
  1080. ProcessIdToSessionId
  1081. netapi32.dll
  1082. NetApiBufferFree
  1083. NetUserEnum
  1084. ole32.dll
  1085. StgOpenStorage
  1086. advapi32.dll
  1087. AllocateAndInitializeSid
  1088. CheckTokenMembership
  1089. FreeSid
  1090. CredEnumerateA
  1091. CredFree
  1092. CryptGetUserKey
  1093. CryptExportKey
  1094. CryptDestroyKey
  1095. CryptReleaseContext
  1096. RevertToSelf
  1097. OpenProcessToken
  1098. ImpersonateLoggedOnUser
  1099. GetTokenInformation
  1100. ConvertSidToStringSidA
  1101. LogonUserA
  1102. LookupPrivilegeValueA
  1103. AdjustTokenPrivileges
  1104. CreateProcessAsUserA
  1105. crypt32.dll
  1106. CryptUnprotectData
  1107. CertOpenSystemStoreA
  1108. CertEnumCertificatesInStore
  1109. CertCloseStore
  1110. CryptAcquireCertificatePrivateKey
  1111. msi.dll
  1112. MsiGetComponentPathA
  1113. pstorec.dll
  1114. PStoreCreateInstance
  1115. userenv.dll
  1116. CreateEnvironmentBlock
  1117. DestroyEnvironmentBlock
  1118. z%Y]I(Y
  1119. ~shell32.dll
  1120. SHGetFolderPathA
  1121. LMA
  1122. qMA
  1123. My Documents
  1124. AppData
  1125. Local AppData
  1126. Cache
  1127. Cookies
  1128. History
  1129. My Documents
  1130. Common AppData
  1131. My Pictures
  1132. Common Documents
  1133. Common Administrative Tools
  1134. Administrative Tools
  1135. Personal
  1136. Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
  1137. explorer.exe
  1138. SeImpersonatePrivilege
  1139. SeTcbPrivilege
  1140. SeChangeNotifyPrivilege
  1141. SeCreateTokenPrivilege
  1142. SeBackupPrivilege
  1143. SeRestorePrivilege
  1144. SeIncreaseQuotaPrivilege
  1145. SeAssignPrimaryTokenPrivilege
  1146. POST %s HTTP/1.0
  1147. Host: %s
  1148. Accept: */*
  1149. Accept-Encoding: identity, *;q=0
  1150. Content-Length: %lu
  1151. Connection: close
  1152. Content-Type: application/octet-stream
  1153. Content-Encoding: binary
  1154. User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
  1155. Content-Length:
  1156. Location:
  1157. GET %s HTTP/1.0
  1158. Host: %s
  1159. Accept: */*
  1160. Accept-Encoding: identity, *;q=0
  1161. Connection: close
  1162. User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
  1163. HWID
  1164. {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
  1165. GetNativeSystemInfo
  1166. kernel32.dll
  1167. IsWow64Process
  1168. Software\Far\Plugins\FTP\Hosts
  1169. Software\Far2\Plugins\FTP\Hosts
  1170. Software\Far Manager\Plugins\FTP\Hosts
  1171. Software\Far\SavedDialogHistory\FTPHost
  1172. Software\Far2\SavedDialogHistory\FTPHost
  1173. Software\Far Manager\SavedDialogHistory\FTPHost
  1174. Password
  1175. HostName
  1176. User
  1177. Line
  1178. wcx_ftp.ini
  1179. \GHISLER
  1180. InstallDir
  1181. FtpIniName
  1182. Software\Ghisler\Windows Commander
  1183. Software\Ghisler\Total Commander
  1184. \Ipswitch
  1185. Sites\
  1186. \Ipswitch\WS_FTP
  1187. \win.ini
  1188. .ini
  1189. WS_FTP
  1190. DIR
  1191. DEFDIR
  1192. CUTEFTP
  1193. QCHistory
  1194. Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar
  1195. Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar
  1196. Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar
  1197. Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar
  1198. Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar
  1199. Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar
  1200. \GlobalSCAPE\CuteFTP
  1201. \GlobalSCAPE\CuteFTP Pro
  1202. \GlobalSCAPE\CuteFTP Lite
  1203. \CuteFTP
  1204. \sm.dat
  1205. Software\FlashFXP\3
  1206. Software\FlashFXP
  1207. Software\FlashFXP\4
  1208. InstallerDathPath
  1209. path
  1210. Install Path
  1211. DataFolder
  1212. \Sites.dat
  1213. \Quick.dat
  1214. \History.dat
  1215. \FlashFXP\3
  1216. \FlashFXP\4
  1217. \FileZilla
  1218. \sitemanager.xml
  1219. \recentservers.xml
  1220. \filezilla.xml
  1221. Software\FileZilla
  1222. Software\FileZilla Client
  1223. Install_Dir
  1224. Host
  1225. User
  1226. Pass
  1227. Port
  1228. Remote Dir
  1229. Server Type
  1230. Server.Host
  1231. Server.User
  1232. Server.Pass
  1233. Server.Port
  1234. Path
  1235. ServerType
  1236. Last Server Host
  1237. Last Server User
  1238. Last Server Pass
  1239. Last Server Port
  1240. Last Server Path
  1241. Last Server Type
  1242. FTP Navigator
  1243. FTP Commander
  1244. ftplist.txt
  1245. \BulletProof Software
  1246. .dat
  1247. .bps
  1248. Software\BPFTP\Bullet Proof FTP\Main
  1249. Software\BulletProof Software\BulletProof FTP Client\Main
  1250. Software\BPFTP\Bullet Proof FTP\Options
  1251. Software\BulletProof Software\BulletProof FTP Client\Options
  1252. Software\BPFTP
  1253. LastSessionFile
  1254. SitesDir
  1255. InstallDir1
  1256. .xml
  1257. \SmartFTP
  1258. Favorites.dat
  1259. History.dat
  1260. addrbk.dat
  1261. quick.dat
  1262. \TurboFTP
  1263. Software\TurboFTP
  1264. installpath
  1265. Software\Sota\FFFTP
  1266. CredentialSalt
  1267. CredentialCheck
  1268. Software\Sota\FFFTP\Options
  1269. Password
  1270. UserName
  1271. HostAdrs
  1272. RemoteDir
  1273. Port
  1274. HostName
  1275. Port
  1276. Username
  1277. Password
  1278. HostDirName
  1279. Software\CoffeeCup Software\Internet\Profiles
  1280. Software\FTPWare\COREFTP\Sites
  1281. Host
  1282. User
  1283. Port
  1284. PthR
  1285. SSH
  1286. profiles.xml
  1287. \FTP Explorer
  1288. Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224
  1289. Buttons
  1290. Software\FTP Explorer\Profiles
  1291. Password
  1292. PasswordType
  1293. Host
  1294. Login
  1295. Port
  1296. InitialPath
  1297. FtpSite.xml
  1298. \Frigate3
  1299. .ini
  1300. \VanDyke\Config\Sessions
  1301. \Sessions
  1302. Software\VanDyke\SecureFX
  1303. Config Path
  1304. UltraFXP
  1305. \sites.xml
  1306. \FTPRush
  1307. RushSite.xml
  1308. Server
  1309. Username
  1310. Password
  1311. FtpPort
  1312. Software\Cryer\WebSitePublisher
  1313. \BitKinex
  1314. bitkinex.ds
  1315. Hostname
  1316. Username
  1317. Password
  1318. Port
  1319. Software\ExpanDrive\Sessions
  1320. \ExpanDrive
  1321. \drives.js
  1322. "password" : "
  1323. Software\ExpanDrive
  1324. ExpanDrive_Home
  1325. Server
  1326. UserName
  1327. Password
  1328. _Password
  1329. Directory
  1330. Software\NCH Software\ClassicFTP\FTPAccounts
  1331. FtpServer
  1332. FtpUserName
  1333. FtpPassword
  1334. _FtpPassword
  1335. FtpDirectory
  1336. SOFTWARE\NCH Software\Fling\Accounts
  1337. Software\FTPClient\Sites
  1338. Software\SoftX.org\FTPClient\Sites
  1339. .oxc
  1340. .oll
  1341. ftplast.osd
  1342. \GPSoftware\Directory Opus
  1343. \SharedSettings.ccs
  1344. \SharedSettings_1_0_5.ccs
  1345. \SharedSettings.sqlite
  1346. \SharedSettings_1_0_5.sqlite
  1347. \CoffeeCup Software
  1348. leapftp
  1349. unleap.exe
  1350. sites.dat
  1351. sites.ini
  1352. \LeapWare\LeapFTP
  1353. SOFTWARE\LeapWare
  1354. InstallPath
  1355. DataDir
  1356. Password
  1357. HostName
  1358. UserName
  1359. RemoteDirectory
  1360. PortNumber
  1361. FSProtocol
  1362. Software\Martin Prikryl
  1363. \32BitFtp.ini
  1364. NDSites.ini
  1365. \NetDrive
  1366. PassWord
  1367. Url
  1368. UserName
  1369. RootDirectory
  1370. Port
  1371. Software\South River Technologies\WebDrive\Connections
  1372. ServerType
  1373. FTP CONTROL
  1374. FTPCON
  1375. .prf
  1376. \Profiles
  1377. http://
  1378. https://
  1379. ftp://
  1380. opera
  1381. wand.dat
  1382. _Software\Opera Software
  1383. Last Directory3
  1384. Last Install Path
  1385. Opera.HTML\shell\open\command
  1386. wiseftpsrvs.bin
  1387. \AceBIT
  1388. Software\AceBIT
  1389. MRU
  1390. SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}
  1391. SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}
  1392. wiseftpsrvs.ini
  1393. wiseftp.ini
  1394. FTPVoyager.ftp
  1395. FTPVoyager.qc
  1396. \RhinoSoft.com
  1397. nss3.dll
  1398. NSS_Init
  1399. NSS_Shutdown
  1400. NSSBase64_DecodeBuffer
  1401. SECITEM_FreeItem
  1402. PK11_GetInternalKeySlot
  1403. PK11_Authenticate
  1404. PK11SDR_Decrypt
  1405. PK11_FreeSlot
  1406. sqlite3.dll
  1407. sqlite3_open
  1408. sqlite3_close
  1409. sqlite3_prepare
  1410. sqlite3_step
  1411. sqlite3_column_bytes
  1412. sqlite3_column_blob
  1413. mozsqlite3.dll
  1414. sqlite3_open
  1415. sqlite3_close
  1416. sqlite3_prepare
  1417. sqlite3_step
  1418. sqlite3_column_bytes
  1419. sqlite3_column_blob
  1420. profiles.ini
  1421. Profile
  1422. IsRelative
  1423. Path
  1424. PathToExe
  1425. prefs.js
  1426. signons.sqlite
  1427. signons.txt
  1428. signons2.txt
  1429. signons3.txt
  1430. SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins
  1431. Firefox
  1432. \Mozilla\Firefox\
  1433. Software\Mozilla
  1434. ftp://
  1435. http://
  1436. https://
  1437. ftp.
  1438. fireFTPsites.dat
  1439. SeaMonkey
  1440. \Mozilla\SeaMonkey\
  1441. Flock
  1442. \Flock\Browser\
  1443. Mozilla
  1444. \Mozilla\Profiles\
  1445. Software\LeechFTP
  1446. AppDir
  1447. LocalDir
  1448. bookmark.dat
  1449. SiteInfo.QFP
  1450. Odin
  1451. Favorites.dat
  1452. WinFTP
  1453. sites.db
  1454. CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32
  1455. servers.xml
  1456. \FTPGetter
  1457. ESTdb2.dat
  1458. QData.dat
  1459. \Estsoft\ALFTP
  1460. Internet Explorer
  1461. WininetCacheCredentials
  1462. MS IE FTP Passwords
  1463. DPAPI:
  1464. Software\Microsoft\Internet Explorer\IntelliForms\Storage2
  1465. Microsoft_WinInet_*
  1466. ftp://
  1467. Software\Adobe\Common
  1468. SiteServers
  1469. SiteServer %d\Host
  1470. SiteServer %d\WebUrl
  1471. SiteServer %d\Remote Directory
  1472. SiteServer %d-User
  1473. SiteServer %d-User PW
  1474. %s\Keychain
  1475. SiteServer %d\SFTP
  1476. DeluxeFTP
  1477. sites.xml
  1478. Web Data
  1479. Login Data
  1480. SQLite format 3
  1481. table
  1482. CONSTRAINT
  1483. PRIMARY
  1484. UNIQUE
  1485. CHECK
  1486. FOREIGN
  1487. logins
  1488. origin_url
  1489. password_value
  1490. username_value
  1491. ftp://
  1492. http://
  1493. https://
  1494. \Google\Chrome
  1495. \Chromium
  1496. \ChromePlus
  1497. Software\ChromePlus
  1498. Install_Dir
  1499. \Bromium
  1500. \Nichrome
  1501. \Comodo
  1502. \RockMelt
  1503. K-Meleon
  1504. \K-Meleon
  1505. \Profiles
  1506. Epic
  1507. \Epic\Epic
  1508. Staff-FTP
  1509. sites.ini
  1510. \Sites
  1511. \Visicom Media
  1512. .ftp
  1513. \Global Downloader
  1514. SM.arch
  1515. FreshFTP
  1516. .SMF
  1517. BlazeFtp
  1518. site.dat
  1519. LastPassword
  1520. LastAddress
  1521. LastUser
  1522. LastPort
  1523. Software\FlashPeak\BlazeFtp\Settings
  1524. \BlazeFtp
  1525. .fpl
  1526. FTP++.Link\shell\open\command
  1527. GoFTP
  1528. Connections.txt
  1529. 3D-FTP
  1530. sites.ini
  1531. \3D-FTP
  1532. \SiteDesigner
  1533. SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32
  1534. EasyFTP
  1535. \NetSarang
  1536. .xfp
  1537. .rdp
  1538. TERMSRV/*
  1539. password 51:b:
  1540. username:s:
  1541. full address:s:
  1542. TERMSRV/
  1543. FTP Now
  1544. FTPNow
  1545. sites.xml
  1546. SOFTWARE\Robo-FTP 3.7\Scripts
  1547. SOFTWARE\Robo-FTP 3.7\FTPServers
  1548. FTP Count
  1549. FTP File%d
  1550. Password
  1551. ServerName
  1552. UserID
  1553. InitialDirectory
  1554. PortNumber
  1555. ServerType
  1556. fMY
  1557. Software\LinasFTP\Site Manager
  1558. Host
  1559. User
  1560. Pass
  1561. Port
  1562. Remote Dir
  1563. \Cyberduck
  1564. .duck
  1565. user.config
  1566. <setting name="
  1567. value="
  1568. Software\SimonTatham\PuTTY\Sessions
  1569. HostName
  1570. UserName
  1571. Password
  1572. PortNumber
  1573. TerminalType
  1574. NppFTP.xml
  1575. \Notepad++
  1576. Software\CoffeeCup Software
  1577. FTP destination server
  1578. FTP destination user
  1579. FTP destination password
  1580. FTP destination port
  1581. FTP destination catalog
  1582. FTP profiles
  1583. FTPShell
  1584. ftpshell.fsi
  1585. Software\MAS-Soft\FTPInfo\Setup
  1586. DataDir
  1587. \FTPInfo
  1588. ServerList.xml
  1589. NexusFile
  1590. ftpsite.ini
  1591. FastStone Browser
  1592. FTPList.db
  1593. \MapleStudio\ChromePlus
  1594. Software\Nico Mak Computing\WinZip\FTP
  1595. Software\Nico Mak Computing\WinZip\mru\jobs
  1596. Site
  1597. UserID
  1598. xflags
  1599. Port
  1600. Folder
  1601. .wjf
  1602. winex="
  1603. \Yandex
  1604. My FTP
  1605. project.ini
  1606. .xml
  1607. {74FF1730-B1F2-4D88-926B-1568FAE61DB7}
  1608. NovaFTP.db
  1609. \INSoftware\NovaFTP
  1610. .oeaccount
  1611. Salt
  1612. <POP3_Password2
  1613. <SMTP_Password2
  1614. <IMAP_Password2
  1615. <HTTPMail_Password2
  1616. \Microsoft\Windows Live Mail
  1617. Software\Microsoft\Windows Live Mail
  1618. \Microsoft\Windows Mail
  1619. Software\Microsoft\Windows Mail
  1620. Software\RimArts\B2\Settings
  1621. DataDir
  1622. DataDirBak
  1623. Mailbox.ini
  1624. Software\Poco Systems Inc
  1625. Path
  1626. \PocoSystem.ini
  1627. Program
  1628. DataPath
  1629. accounts.ini
  1630. \Pocomail
  1631. Software\IncrediMail
  1632. EmailAddress
  1633. Technology
  1634. PopServer
  1635. PopPort
  1636. PopAccount
  1637. PopPassword
  1638. SmtpServer
  1639. SmtpPort
  1640. SmtpAccount
  1641. SmtpPassword
  1642. account.cfg
  1643. account.cfn
  1644. \BatMail
  1645. \The Bat!
  1646. Software\RIT\The Bat!
  1647. Software\RIT\The Bat!\Users depot
  1648. Working Directory
  1649. ProgramDir
  1650. Count
  1651. Default
  1652. Dir #%d
  1653. SMTP Email Address
  1654. SMTP Server
  1655. POP3 Server
  1656. POP3 User Name
  1657. SMTP User Name
  1658. NNTP Email Address
  1659. NNTP User Name
  1660. NNTP Server
  1661. IMAP Server
  1662. IMAP User Name
  1663. Email
  1664. HTTP User
  1665. HTTP Server URL
  1666. POP3 User
  1667. IMAP User
  1668. HTTPMail User Name
  1669. HTTPMail Server
  1670. SMTP User
  1671. POP3 Port
  1672. SMTP Port
  1673. IMAP Port
  1674. POP3 Password2
  1675. IMAP Password2
  1676. NNTP Password2
  1677. HTTPMail Password2
  1678. SMTP Password2
  1679. POP3 Password
  1680. IMAP Password
  1681. NNTP Password
  1682. HTTP Password
  1683. SMTP Password
  1684. Software\Microsoft\Internet Account Manager\Accounts
  1685. Identities
  1686. Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts
  1687. Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings
  1688. Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
  1689. Software\Microsoft\Internet Account Manager
  1690. Outlook
  1691. \Accounts
  1692. identification
  1693. identitymgr
  1694. inetcomm server passwords
  1695. outlook account manager passwords
  1696. identities
  1697. {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
  1698. Thunderbird
  1699. \Thunderbird
  1700. FastTrack
  1701. ftplist.txt
  1702. Client Hash
  1703. STATUS-IMPORT-OK
  1704. %d.exe
  1705. true
  1706. %d.bat
  1707. ShellExecuteA
  1708. :ktk
  1709. del
  1710. exist
  1711. goto
  1712. ktk
  1713. del
  1714. shell32.dll
  1715. IugvO%gv
  1716. qUS
  1717. qUj
  1718. CreateFileA
  1719. ReadFile
  1720. CloseHandle
  1721. WriteFile
  1722. lstrlenA
  1723. GlobalLock
  1724. GlobalUnlock
  1725. LocalFree
  1726. LocalAlloc
  1727. GetTickCount
  1728. lstrcpyA
  1729. lstrcatA
  1730. GetFileAttributesA
  1731. ExpandEnvironmentStringsA
  1732. GetFileSize
  1733. CreateFileMappingA
  1734. MapViewOfFile
  1735. UnmapViewOfFile
  1736. LoadLibraryA
  1737. GetProcAddress
  1738. GetTempPathA
  1739. CreateDirectoryA
  1740. DeleteFileA
  1741. GetCurrentProcess
  1742. WideCharToMultiByte
  1743. GetLastError
  1744. lstrcmpA
  1745. CreateToolhelp32Snapshot
  1746. Process32First
  1747. OpenProcess
  1748. Process32Next
  1749. FindFirstFileA
  1750. lstrcmpiA
  1751. FindNextFileA
  1752. FindClose
  1753. GetModuleHandleA
  1754. GetVersionExA
  1755. GetLocaleInfoA
  1756. GetSystemInfo
  1757. GetWindowsDirectoryA
  1758. GetPrivateProfileStringA
  1759. SetCurrentDirectoryA
  1760. GetPrivateProfileSectionNamesA
  1761. GetPrivateProfileIntA
  1762. GetCurrentDirectoryA
  1763. lstrlenW
  1764. MultiByteToWideChar
  1765. Sleep
  1766. GetModuleFileNameA
  1767. LCMapStringA
  1768. ExitProcess
  1769. SetUnhandledExceptionFilter
  1770. kernel32.dll
  1771. CreateStreamOnHGlobal
  1772. GetHGlobalFromStream
  1773. CoCreateGuid
  1774. CoTaskMemFree
  1775. CoCreateInstance
  1776. OleInitialize
  1777. ole32.dll
  1778. wsprintfA
  1779. user32.dll
  1780. RegOpenKeyExA
  1781. RegQueryValueExA
  1782. RegCloseKey
  1783. RegOpenKeyA
  1784. RegEnumKeyExA
  1785. RegCreateKeyA
  1786. RegSetValueExA
  1787. IsTextUnicode
  1788. RegOpenCurrentUser
  1789. RegEnumValueA
  1790. GetUserNameA
  1791. advapi32.dll
  1792. ShellExecuteA
  1793. shell32.dll
  1794. InternetCrackUrlA
  1795. InternetCreateUrlA
  1796. wininet.dll
  1797. StrStrIA
  1798. StrRChrIA
  1799. StrToIntA
  1800. StrStrA
  1801. StrCmpNIA
  1802. StrStrIW
  1803. shlwapi.dll
  1804. inet_addr
  1805. gethostbyname
  1806. socket
  1807. connect
  1808. closesocket
  1809. send
  1810. select
  1811. recv
  1812. setsockopt
  1813. WSAStartup
  1814. wsock32.dll
  1815. LoadUserProfileA
  1816. UnloadUserProfile
  1817. userenv.dll
  1818. jHq
  1819. kdz
  1820. rqg
  1821. LhX
  1822. Qkkbal
  1823. Zjz
  1824. i]Wb
  1825. knv
  1826. owG
  1827. kaE
  1828. MGiI
  1829. wn>Jj
  1830. VsK
  1831. say
  1832. gJa
  1833. ,UoVO
  1834. cnU
  1835. lX7[C
  1836. BDECP
  1837. LsAU
  1838. <]tnC"
  1839. Bks
  1840. @fjK
  1841. iOX
  1842. Adp
  1843. eVK
  1844. zdS
  1845. V}vi
  1846. dzbT
  1847. Wyj<
  1848. j4rx
  1849. CBC
  1850. Dlz
  1851. EQy
  1852. Jtg
  1853. HUp
  1854. Zbp
  1855. #:oql
  1856. Z`Xk
  1857. vq@J
  1858. Xjk
  1859. sCi
  1860. zJR
  1861. X:Rs
  1862. ?SBK
  1863. nuL
  1864. kBv
  1865. 5VPV
  1866. otL
  1867. ylV
  1868. jke
  1869. oGW
  1870. Jyp
  1871. WTt_
  1872. ExQ
  1873. sGE
  1874. EFFg
  1875. RUiS
  1876. oO4U
  1877. gzb
  1878. LXK
  1879. MZW
  1880. cMO
  1881. xDm
  1882. pn\n
  1883. aSg
  1884. ITn
  1885. NoQ
  1886. Cma
  1887. Mhm
  1888. L"JL
  1889. xbjM
  1890. DTg
  1891. Do.W
  1892. M6Be
  1893. fli8
  1894. O*Bq
  1895. QCO
  1896. PFa
  1897. wSa
  1898. zRF
  1899. usR
  1900. vHh
  1901. lGaS
  1902. 8ZzD
  1903. ntGh
  1904. n\AH
  1905. csm
  1906. VDB5
  1907. guQ
  1908. ZJM
  1909. ocZ
  1910. unC
  1911. 7AXiZ
  1912. ,Rinm
  1913. HVJ
  1914. wi6M
  1915. EV(s
  1916. DUm
  1917. VfZ
  1918. xRz
  1919. "rIj
  1920. lwI
  1921. CTf
  1922. DVZ/
  1923. er"E
  1924. dCuc
  1925. Pf!s
  1926. wNZr
  1927. h|nh
  1928. FIl
  1929. Kol
  1930. Q-Yy
  1931. DJT
  1932. sYy
  1933. dTa
  1934. xXv
  1935. }TVC
  1936. zo+J
  1937. moO
  1938. oQl
  1939. lqM
  1940. ----
  1941. @unixfreaxjp /malware]$ date
  1942. Fri Mar 8 00:35:35 JST 2013
RAW Paste Data Copied