Analysis Date2018-05-03 07:29:01
MD5f828502f13d4bf9bb590fb3877062ab8
SHA1d05268662ccd5378a3f1bd78a51b672ba0bd0970

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 4b93270d2f4fce7a3bf2c98149cb0bb5 sha1: eaa590362037e1c171b3fbbef88472df86df131b size: 479232
Section.rdata md5: 3d855e6b4e1fa970482e201514415a1c sha1: a6eceb024cf5d5806552ce55858b4b705d34c5cd size: 114688
Section.data md5: 7fb2870c72e61650fa0b5bcc1d326614 sha1: c9ee988f0584f6cf1ad214bdac05d9711517a68d size: 12288
Section.rsrc md5: aab928a388eb593f818dc9dc18e95817 sha1: 3a92f2c2382c73f9a96b816f11bb95422b58af61 size: 102400
Timestamp2010-03-08 08:16:20
VersionLegalCopyright: Copyright(C) 2000
InternalName: CCProxy
FileVersion: 6, 6, 4, 0
CompanyName: Youngzsoft
ProductName: CCProxy
ProductVersion: 6, 6, 4, 0
FileDescription: CCProxy
OriginalFilename: CCProxy.EXE
PackerMicrosoft Visual C++ 7.0
PEhashd68811a8c6d19c0e6a328222b4ddc4271e12adcc
IMPhashadb28695f891f4f7749e9b42d9cb6541
AV360 Safeno_virus
AVAd-Awareno_virus
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)no_virus
AVBullGuardno_virus
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVWin.Trojan.Ccproxy-67
AVDr. WebProgram.CCProxy.102
AVEmsisoftno_virus
AVEset (nod32)no_virus
AVFortinetRiskware/CCProxy
AVFrisk (f-prot)no_virus
AVF-Secureno_virus
AVGrisoft (avg)no_virus
AVIkarusServer-Proxy.Win32.CCProxy
AVK7no_virus
AVKasperskyServer-Proxy.Win32.CCProxy.ii
AVMalwareBytesTrojan.Proxy.CC
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)no_virus
AVRisingno_virus
AVSophosno_virus
AVSymantecTrojan.Gen.2
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Users\Phil\AppData\Local\Temp\d05268662ccd5378a3f1bd78a51b672ba0bd0970.exe

Creates MutexGlobal\d05268662ccd5378a3f1bd78a51b672ba0bd0970 is running
Creates FileC:\Users\Phil\AppData\Local\Temp\web\authinfo-account.htm
Creates FileC:\Users\Phil\AppData\Local\Temp\web\authinfo-site.htm
Creates FileC:\Users\Phil\AppData\Local\Temp\web\authinfo-content.htm
Creates FileC:\Users\Phil\AppData\Local\Temp\AutoProxy.pac
Creates FileC:\Users\Phil\AppData\Local\Temp\AccInfo.ini
Creates FileC:\Users\Phil\AppData\Local\Temp\Log\data20180503.txt
Creates FileC:\Users\Phil\AppData\Local\Temp\CCProxy.ini
Creates FileC:\Users\Phil\AppData\Local\Temp\CCProxy.ini

Network Details:


Raw Pcap
0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 38333a35 3335370d 0a0d0a3c   00.183:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a316561 37373462 352d3663 64362d34   :1ea774b5-6cd6-4
0x00000280 (00640)   3630632d 61323637 2d303431 64623031   60c-a267-041db01
0x00000290 (00656)   65316563 353c2f77 73613a4d 65737361   e1ec5</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3635 33306232   >urn:uuid:6530b2
0x00000340 (00832)   65352d30 3938652d 34303162 2d383863   e5-098e-401b-88c
0x00000350 (00848)   622d3265 39333265 35343161 36393c2f   b-2e932e541a69</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 37363a35 3335370d 0a0d0a3c   00.176:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a303339 30356663 632d6534 62622d34   :03905fcc-e4bb-4
0x00000280 (00640)   6538382d 38393239 2d356563 63306639   e88-8929-5ecc0f9
0x00000290 (00656)   36303035 623c2f77 73613a4d 65737361   6005b</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6435 65346563   >urn:uuid:d5e4ec
0x00000340 (00832)   32342d36 3338342d 34376632 2d393564   24-6384-47f2-95d
0x00000350 (00848)   332d6536 36306139 38636338 30633c2f   3-e660a98cc80c</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>


Strings
.....
.....
.....
.....
.....
. ! .
"#$#"
%&'&%
()*)(
+,-,+
./0/.
12321
45654
78987
:;<;:
=>?>=
..
..
..
..
..
..
.
..
. 
!
"
#$
#
""
 
 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
!
 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
!
===
=
.
.......
.
...
.
...
.
.....
.
.....
.
. ! .
\
.
..
% 
BbmHpAadYySMI
 
-
.
e
. 
00-+ -E-0
-0
.
\
:\
:.
0
0
.
...........?- 
0
0
0 
?
.
A
u..cZckcc..
...
....
....
 (*.*)
01:00
02:00
03:00
04:00
040904b0
05:00
06:00
07:00
08:00
09:00
 %1 
10:00
11:00
%1: %2
12:00
13:00
14:00
15:00
16:00
17:00
18:00
19:00
 %2 
20:00
21:00
22:00
23:00
24:00
 255 
333f3
	 	4	H	Z	d	p	|	
6, 6, 4, 0
/"A	
&About CCProxy...oUser Name|IP Address|MAC Address|Connections|Bandwidth|Enable|Group|Belongs Group|Time|Web Filter|Time Schedule"Windows sockets initiation failed.
accChild
accChildCount
accDefaultAction
accDescription
accFocus
accHelp
accHelpTopic
accHitTest
accKeyboardShortcut
accLocation
accName
accNavigate
Account
Account auth failed message
Account Manager
accParent
accRole
accSelect
accSelection
accState
accValue
Add Client IP in HTTP Header
Admin Password
Admin Port
Admin service startup failed!
Advanced
Advanced DNS Filter
Always Load from Cache
Analysis
And the server said:
Anti Spam Check with RBL
Apply
Apply To:
Are you sure to close CCProxy?
#Are you sure to delete these items?
!Are you sure to delete this mail?
As Group
Auth Type:
Auto Detect
Auto disable at
Auto Hide
Auto Scan
Auto shutdown Windows at
Auto Startup
Auto update
Bandwidth Control Apply for
Bandwidth Maximum
Belongs to Group
below could not be delivered to one or more destinations.
Build on 20100308
&Buy Now
BUYNOW
Cache
Cache Path:
Cache Size(M):
Cache Update Time(minutes)
Cancel
Cancel All
Cascading proxy
CCProxy
CCProxy 
CCProxy5User already exists or User/IP/MAC length is illegal!
CCProxy can log every user's information. Please DON'T intercept user's mail without his/her permission.
CCProxy.EXE
CCProxy HotKey
CCProxy.ini
CCProxy permits local server to access Internet via other proxy.
Change Cache Options via IE
Clear Logs
Client IP Address: 
Close
&Close
Close CCProxy requires confirm
CompanyName
Computer Name
Configuration
Connection information
Connections:
Connections Maximum
&Copy
Copyright(C) 2000
Copyright(C) 2000-2010 Youngzsoft
Copyright(C) 2000-2010 Youngzsoft 
Current Connection Information
DateTimePicker1
Delete
Dest Host
Dest Port
\Device\PhysicalMemory
\Device\Tcp
\Device\Udp
&Dial-up
Dial-up
Dial-up Entries
Dial-up Password
Dial-up User Name
Disable External Users
D&isconnect
 DLL 
DNS service startup failed!
Domain
Download Bandwidth(KB/s)
Edit
Enable
Enable Auto Dial-up
Enable Cascading Proxy
Enable Flow Stats
Enable Multiple IPs Outgoing
Enable Remote Admin
Enable SOCKS4
Error in sending %s.
Export
Export Excel
f3fff
FileDescription
FileVersion
Filter
Filter/Time
Flow Stats
Flow Stats Time Interval(m)
Forbidden Content
Forbidden Sites
Forbidden URL
Friday
FTP proxy startup failed!
FTP(Web)
Get Address
Get MAC Address
Gopher
 GUID
                                 H
         (((((                  H
(&H)
         h((((                  H
        h((((                  H
Hide All
High IP Address
HOMEPAGE                                                                                          
HOMEPAGE;Start|Stop|Options|Account|Register|Monitor|Exit|Hide|Help|
Host
HTTP proxy startup failed!
HTTP/RTSP
Idle Disconnect Minutes
IE Cache Options
Import
I'm sorry to have to inform you that the message returned
 INI 
InternalName
IP Address
IP Address/IP Range
jjjh
jjjjj
k byte
Keep HTTP referer
Language
LegalCopyright
LINE_CHART_CTRL
Line Chart Options
List1
Local IP Address:
Local Port
Local Protocol
Log Analysis
Log File
Login
Log Session Selection
Low IP Address
MAC Address
MAC address retrive timeout(ms)
Machine ID
Mail
Mail Info
Mail proxy startup failed!
MAP service startup failed!$Type|Dest Host|Dest Port|Local Port|>Mail ID|Mail From|Mail To|Send Times|Begin Time|Last Response|
Maximum Connections
Maximum Lines
Message: 
Modify
Monday
msctls_hotkey32
msctls_progress32
msctls_updown32
MS Sans Serif
MS Shell Dlg
(&N)
Need Authorization
Need Password When Startup
Networks
Network Traffic Statistics 
New Log Daily
News
News proxy startup failed!
Note: Cache here is based on IE technology. You need to install IE version 4.0 or above.
Note: This function requires clients and server have stared "Messenger" service. You can go to "Control Panel -> Administrator Tools -> Services", start "Messenger". This function only supports NT/XP/2003.
NT Service
NT User Auth Domain:
(null)
on search ...8This operation will add all local users' info. Continue?$Are you sure to delete this account?)Another instance of CCProxy has been run!!Time|User Name|IP Address|Action|
Open
Open Logs
Options
OriginalFilename
Others
Outgoing Mails
Password
Password Protection
Permit Category:
Permitted Sites
Picture Info
Please select log file path:$Are you sure to delete all the logs?%Permit All|Permit Only|Permit All ButKIP Address|MAC Address|User/Password|User/Password + IP|User/Password + MAC2Congratulations. You have registered successfully!
POP3 Port
_POPUP_MENU
Port
Port Map
Port Type
ProductName
ProductVersion
Progress1
Property Sheet
Protocol
Proxy Address
Proxy Protocol
Proxy services
&Register
Register Code
Registration
Remote Dial-up
Request URL
Reset
Retrieve
 %s 
Saturday
Save
Save all stream data to \log\log.dat
Save Logs to File
&%s(Demo version only supports 3 users)
Secure
Select All
Send Message
Serial Number
Server Bind IP Address
Site Filter
SMTP Port
Socket creation failed!
Socket Idle Disconnect Minutes
SOCKS
SOCKS/MMS
SOCKS proxy startup failed!
Sorry. Registration Failed!
Spin1
Start
Startup proxy|Stop proxy|Options configuration|Account manager|Register CCProxy|Online monitor|Close proxy|Hide interface|CCProxy help|
Stop
Stop Scroll
StringFileInfo
Sunday
SysDateTimePick32
SysListView32
SysTabControl32
Telnet
Telnet proxy startup failed!1Some mails are in transfer. Are you sure to exit?
Thursday
Time Schedule
Time Schedule Name
Time Table
Tip: 01:00 denotes that Internet access is permitted from 00:00 to 01:00.
Tip: Each item is divided by semicolon. Eg. chat;travel
Tip: Each item is divided by semicolon. Eg. .exe;.zip
Tip: Show CCProxy when launch again.
Tip: Site filter supports wildcard character. Each item is divided by semicolon. Eg. *.yahoo.com;*.msn.com
Translation
Tuesday
t [W
Undelivered mail
Unknown
*Unlimited Bandwidth:-1
*Unlimited Connection:-1
Unselect All
Upload Bandwidth(KB/s)
User Count:
User/Group Name 
User name
User Name
Users:
V_=@
V9=6
VarFileInfo
VS_VERSION_INFO
Web authentication title
Web Cached
Web content filter message
Web Filter
Web Filter Name
Web site filter message
Web Sites for On-line Checking
Web Title Info
Wednesday
YaccDoDefaultAction
Youngzsoft
^(_^[]
^(_^][
_____***_______
!$$$$$$$$$$$$$$$$$$$$$$$
???????????
"/""/""/""
""""""""""
]?>=>===================>?[
$!!!!!!!!!!!
$$$$$$$$$
$$$$$$$$$$$$!
#																						#
						
								
											
																				
0.0.0.0
00:00-00:00
000000000000000000
00:00-24:00
 !"#$%&'()*+,-./0123
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
%02d:00
%02d:%02d
 %02d:%02d:%02d
%02x%02x%02x%02x%02x%02x
%04d%02d%02d
%04d-%02d-%02d %02d:%02d:%02d
0 AAAAAAAAAAAAAA 0
0?????EEEEEEEE???????0
0LLLLLLLLLLLLLL
0UUUUW
127.0.0.1
(((<>1<5iv
1k^<)%
1#QNAN
.;1s(N
1#SNAN
1Z8/LJRz|xmH/
[2004-08-30 13:25:36] 
.$-/+211231(#033-3
.,2$1\Kifeejmmmmfjejjaa!
>2222@222222222222J22228
2//2)L]H]
2322,BA
%2\CLSID
%2\DocObject
2```E2
2}F|I~L:
%2\Insertable
,/2J6ilNNNNNln
2``````````]O3
#2 OPQ
%2\protocol\StdFileEditing\server
%2\protocol\StdFileEditing\verb\0
#32768
#32770
444AiA>AAAm(Ap
?456789:;<=
4hbbbbbdb+ffffffffffffffffff8
4```]]```````U4
4``````````````U5
4`````````````W5
<54443A````O3
5hhhhhhhhhh
5RRRRRRRRRRR>7F
5RRRRRRRRRRRR?5F
5RTQRRRQQQRRRRRE5
	700000000000000000000008
7+BBBBBBBBBBBBBB!7
7ffffffffffffffffffffff8
7fffhhdhhhhffhhhhhhffff8
7fff'M<
>7fmmiif>7
7G7GGloYX%
7!IIKKIKKIIKIKII!7
>]]]]]]]]]]]]]]]]]]]]]]8
.................8
;85UHllllllln
9^0u3j
975557=RRRRA5F
*9:<8:
%9, %8
>99999999999999999999998
9~du"h
9~Ht]9~
9~Lu	P
9RRRRRRRRRRRRRB9F
9^@t83
9^@Wt;3
}*9X ~%
9ZZZZZZZZZZZZZZZZZZ:
<A|2<Z
AAA&fv47(f>
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/S
A buffer overrun has been detected which has corrupted the program's
access to the specified file.
AccInfo.ini
Account
Account File(*.ini)|*.ini|All Files (*.*)|*.*||
Action
AdjustTokenPrivileges
AdjustWindowRectEx
Advanced
Advanced Server 
ADVAPI32.dll
AfxControlBar70s
AfxFrameOrView70s
AfxMDIFrame70s
AfxOldWndProc423
AfxOleControl70s
Afx:%p:%x
Afx:%p:%x:%p:%p:%p
AfxWnd70s
AglujK4h
AL/3?,$
AllocateAndGetTcpExTableFromStack
AllocateAndGetUdpExTableFromStack
AntiSpamRBL
Apartment
AppendMenuA
^aRichY
^ar!yaP
A security error of unknown cause has been detected which has
A sharing violation occurred. 
</assembly>
<assembly 
 <assemblyIdentity 
    <assemblyIdentity
atxHtfHt'Ht
.?AU_AFX_PROPPAGEFONTINFO@@
.?AUCThreadData@@
August
.?AUIAccessible@@
.?AUIAccessibleProxy@@
.?AUIAtlStringMgr@ATL@@
.?AUIBoundObjectSite@@
.?AUIDispatch@@
.?AUIEnumVOID@@
.?AUIMessageFilter@@
.?AUINotifyDBEvents@@
.?AUIOleClientSite@@
.?AUIOleContainer@@
.?AUIOleControlSite@@
.?AUIOleInPlaceFrame@@
.?AUIOleInPlaceSite@@
.?AUIOleInPlaceSiteEx@@
.?AUIOleInPlaceSiteWindowless@@
.?AUIOleInPlaceUIWindow@@
.?AUIOleWindow@@
.?AUIParseDisplayName@@
.?AUIPropertyNotifySink@@
.?AUIRowsetNotify@@
.?AUISequentialStream@@
.?AUIStream@@
.?AUIUnknown@@
AuthenticAMD
AuthMethod
AuthModel
AuthModel=
Auth Result: %AuthResult%</h2>
AuthSamp
AuthType
AuthType=
AutoDetect
AutoDial
AutoDisable
AutoDisable=
AutoDisconnect
AutoHide
Automation
AutoUpdate
.?AV_AFX_BASE_MODULE_STATE@@
.?AV_AFX_HTMLHELP_STATE@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_OLE_STATE@@
.?AV_AFX_SOCK_STATE@@
.?AV_AFX_THREAD_STATE@@
.?AVCAccessibleProxy@ATL@@
.?AVCAfxStringMgr@@
.?AVCArchiveException@@
.?AVCArchiveStream@@
.?AVCBitmap@@
.?AVCBrush@@
.?AVCByteArray@@
.?AVCClientDC@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCComboBox@@
.?AVCCommandLineInfo@@
.?AVCCommonDialog@@
.?AVCComObjectRootBase@ATL@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AVCDataSourceControl@@
.?AVCDC@@
.?AVCDialog@@
.?AVCDWordArray@@
.?AVCEnumArray@@
.?AVCEnumUnknown@@
.?AVCException@@
.?AVCFile@@
.?AVCFileDialog@@
.?AVCFileException@@
.?AVCFileFind@@
.?AVCFont@@
.?AVCGdiObject@@
.?AVCHandleMap@@
.?AVCHotKeyCtrl@@
.?AVCImageList@@
.?AVCInvalidArgException@@
.?AVCListCtrl@@
.?AVCMapPtrToPtr@@
.?AVCMapStringToPtr@@
.?AVCMemFile@@
.?AVCMemoryException@@
.?AVCMenu@@
.?AV?$CMFCComObject@VCAccessibleProxy@ATL@@@@
.?AVCNoTrackObject@@
.?AVCNotSupportedException@@
.?AVCObArray@@
.?AVCObject@@
.?AVCOccManager@@
.?AVCOleBusyDialog@@
.?AVCOleControlContainer@@
.?AVCOleControlSite@@
.?AVCOleDialog@@
.?AVCOleDispatchException@@
.?AVCOleException@@
.?AVCOleMessageFilter@@
.?AV_com_error@@
.?AVCPaintDC@@
.?AVCPen@@
.?AVCProgressCtrl@@
.?AVCPropertyPage@@
.?AVCPropertySheet@@
.?AVCPtrArray@@
.?AVCPtrList@@
.?AVCResourceException@@
.?AVCRgn@@
.?AVCSimpleException@@
.?AVCStatic@@
.?AVCStringArray@@
.?AVCSyncObject@@
.?AVCTabCtrl@@
.?AVCTestCmdUI@@
.?AVCToolBarCtrl@@
.?AVCToolTipCtrl@@
.?AV?$_CTypedPtrList@VCPtrList@@PAUCOleControlSiteOrWnd@@@@
.?AV?$CTypedPtrList@VCPtrList@@PAUCOleControlSiteOrWnd@@@@
.?AVCUserException@@
.?AVCWinApp@@
.?AVCWindowDC@@
.?AVCWinThread@@
.?AVCWnd@@
.?AVexception@@
.?AV?$IAccessibleProxyImpl@VCAccessibleProxy@ATL@@@ATL@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVXAccessible@CWnd@@
.?AVXAccessibleServer@CWnd@@
.?AVXAmbientProps@COleControlSite@@
.?AVXBoundObjectSite@COleControlSite@@
.?AVXEnumVOID@CEnumArray@@
.?AVXEventSink@COleControlSite@@
.?AVXMessageFilter@COleMessageFilter@@
.?AVXNotifyDBEvents@COleControlSite@@
.?AVXOleClientSite@COleControlSite@@
.?AVXOleContainer@COleControlContainer@@
.?AVXOleControlSite@COleControlSite@@
.?AVXOleIPFrame@COleControlContainer@@
.?AVXOleIPSite@COleControlSite@@
.?AVXPropertyNotifySink@COleControlSite@@
.?AVXRowsetNotify@COleControlSite@@
<A|@<Z
Bandwidth
BandWidth
BandWidth=
BandWidth2
BandWidth2=
BBBBB#B
bbbbbbbbbbbbbbbbbb1b3b
BBB#L#CC
be completed because other DDE transactions
be completed because the request timed out.
BeginPaint
BelongsGroup
BelongsGroup=
BelongsGroupName
BelongsGroupName=
BitBlt
B#LL$D#C
Brop<>9%
btFHt+
Buffer overrun detected!
BugTrace
c[(#3y
CacheLimit
CacheTimeout
CallNextHookEx
CallWindowProcA
Cancel
Cannot connect to the control service.
CArchiveException
Cascading
CascadingOTHERS
CascadingPOP3
CascadingProxy
CascadingSMTP
CascadingSOCKS
CascadingWWW
/CBCD!Kgci
CBitmap
CBrush
CByteArray
*CCCCBWXQUPUSQVY
CClientDC
CCmdTarget
CComboBox
CCProxy
CCProxy Authorization
\CCProxy.dll
\CCProxy.ini
CCProxy %s
CCriticalSection
CDialog
CDlgAAdvanced
CDlgAdvanced
CDlgAdvCache
CDlgAdvDial
CDlgAdvLog
CDlgAdvMail
CDlgAdvNetwork
CDlgAdvOthers
CDlgAdvUpper
CDlgNetworkTraffic
CDWordArray
CException
CFileDialog
CFileException
CFileFind
CGdiObject
CharNextA
CharUpperA
CheckMenuItem
ChineseBig5
ChineseGB
CHotKeyCtrl
CImageList
CInvalidArgException
Client2Server
ClientToScreen
CListCtrl
CloseClipboard
CloseConfirm
CloseHandle
ClosePrinter
CloseServiceHandle
CLSID\%1
CLSID\%1\AuxUserType\2
CLSID\%1\AuxUserType\3
CLSID\%1\DefaultExtension
CLSID\%1\DefaultIcon
CLSID\%1\DocObject
CLSID\%1\InprocHandler32
CLSID\%1\InProcServer32
CLSID\%1\Insertable
CLSID\%1\LocalServer32
CLSID\%1\MiscStatus
CLSID\%1\Printable
CLSID\%1\ProgID
CLSID\%1\Verb\0
CLSID\%1\Verb\1
CLSIDFromProgID
CLSIDFromString
CMapPtrToPtr
CMapStringToPtr
CMemFile
CMemoryException
CMessageBoxDelay
CNotSupportedException
CObArray
CObject
CoCreateInstance
CoFreeUnusedLibraries
CoGetClassObject
CoInitialize
COleBusyDialog
COleDialog
COleDispatchException
COleException
combobox
COMBOBOX
COMCTL32.dll
COMCTL32.DLL
comdlg32.dll
commctrl_DragListMsg
commdlg_ColorOK
commdlg_FileNameOK
commdlg_FindReplace
commdlg_help
commdlg_LBSelChangedNotify
commdlg_SetRGBColor
commdlg_ShareViolation
CompareStringA
CompareStringW
Component Categories
Connections
CONNECT %s:%d HTTP/1.0
Connect Service Failed.
Content
ContentFilter
ContentFilter=
continue execution and must now be terminated.
Control
Control Panel\Desktop\ResourceLocale
ControlService
Control Service Startup Error
ConvertDefaultLocale
CopyAcceleratorTableA
CopyFileA
CopyIcon
CopyRect
CoRegisterMessageFilter
CoRevokeClassObject
CorExitProcess
corrupted the program's internal state.  The program cannot safely
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CPaintDC
CProgressCtrl
CPropertyPage
CPropertySheet
CPtrArray
CPtrList
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDialogIndirectParamA
CreateDirectoryA
CreateEventA
CreateFileA
CreateFontIndirectA
CreateHatchBrush
CreateILockBytesOnHGlobal
CreateMutexA
CreatePen
CreatePropertySheetPageA
CreateRectRgnIndirect
CreateStdAccessibleObject
CreateThread
CreateWindowExA
CResourceException
CStatic
CStringArray
CSyncObject
CTabCtrl
CToolBarCtrl
CToolTipCtrl
CTRL+ALT+%c
CTRL+ALT+C
CUserException
Customize
CWinApp
CWindowDC
CWinThread
d2r}MM
D:987$$5%
@.data
Datacenter Edition 
Datacenter Server 
: %d-%d-%d
%d-%d-%d
%d-%d-%d %d:%d:%d
dddd, MMMM dd, yyyy
December
DefWindowProcA
Delete
DeleteCriticalSection
DeleteDC
DeleteFileA
DeleteObject
 </dependency>
 <dependency>
  </dependentAssembly>
  <dependentAssembly>
 <description>CCProxy Application</description>
DestroyMenu
DestroyPropertySheetPage
DestroyWindow
DeviceIoControl
Dial-up
DialWhenStartup
diconnected
DisableDateTime
DisableDateTime=
DisableExternalUser
DisconnectWhenShutdown
DispatchMessageA
DISPLAY
DNSFilter
DNSFilter=
DocumentPropertiesA
Domain
DOMAIN error
Download
DrawIcon
DrawTextA
DrawTextExA
%d	%s	%s	%s
DuplicateHandle
%d User License
Dw=c:s
Dw=d:s
Dw=f:s
Dw=g:s
Dw=h:s
Dw=i:s
Dw=m:s
Dw=`:s
Dw=^:s
Dw=~:s
Dw=|:s
Dw=_:s
Dw=':s
Dw=]:s
Dw={:s
Dw=}:s
Dw=&:s
Dw=	:s
Dw=t:s
Dw=u:s
Dw=U:s
Dw=y:s
Dw=z:s
)E0IPPPPPPPPPPPPP
ea\PRCAZ
??"eb<???D
&Edit,0,2
EEEEEEE
??????EEEEEEEE????????
EEEEFE
eehmG4t4444444Zmje 
EFFFFFFFFEE
_e`j44mZZZZZZZZeaa!
Embedded Object
Embedding
Embed Source
EmptyClipboard
Enable
Enable=
EnableContentFilter
EnableContentFilter=
EnableHotKey
EnableIPAddress
EnableIPAddress=
EnableMACAddress
EnableMACAddress=
EnableMenuItem
EnableReferer
EnableSiteFilter
EnableSiteFilter=
EnableURLFilter
EnableURLFilter=
EnableUserPassword
EnableUserPassword=
EnableWindow
EndDialog
EndPaint
English
EnterCriticalSection
Enterprise Edition 
EntrySelected
EnumDisplayDevicesA
EnumDisplayMonitors
EnumFontFamiliesExA
EnumProcessModules
EnumResourceLanguagesA
EnumServicesStatusA
EqualRect
error open handlelist
error open physcalmemory
Escape
ExitProcess
ExitWindowsEx
ExtSelectClipRgn
ExtTextOutA
F@_^][
F09^4u-j
F4_]^[
F49^8u)j
f7(###((7i
F7R=7F
F7RR=7F
F8+F0W
;F8ve9^,ue
$f95\AK
F,98uX
f9=^AK
F\9~Lu)h
Failed to create Instance :-( 
Failed to Initialize.
February
F,+F(_;E
?!:ffffffffffff8
fffffffffffffffffff8
FFFFFFFFFFFFFFFFFFFFFFFF
ffffffffffffhh`hhhffff8
FFFFFX
fffffyrvmff
>ffffIffffffffffffLffff8
fffmmiAmp~
ff :N#ddhhf"/E dfffff8
F(@;F,v
F(@@;F,v
f\hhh`hf_fdhhhhhffff8
file://
FileName
FileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FileType
FillRect
Filter%03d
Filter%d
Filter File(*.txt)|*.txt|All Files (*.*)|*.*||
Filter Item: %Item%<br>
Filter Item: %Item%<br></h2>
Filter Name: %FilterName%<br>
Filter Type: %Permit%<br>
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindResourceExA
FindWindowA
- floating point not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
f--!/O:ddf%&D%=%C(hf8
ForceRemove
FormatMessageA
;F(r(8_
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
Friday
FVh,QH
GAIsProcessorFeaturePresent
GDI32.dll
"gdYDB
GetACP
GetActiveWindow
GetAsyncKeyState
GetBkColor
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClassNameA
GetClientRect
GetClipBox
GetCommandLineA
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDateFormatA
GetDesktopWindow
GetDeviceCaps
GetDlgCtrlID
GetDlgItem
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
GetIfTable
GetKeyState
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocalTime
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleFileNameExA
GetModuleHandleA
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetOpenFileNameA
GetParent
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetRgnBox
GetSaveFileNameA
GetStartupInfoA
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDefaultUILanguage
GetSystemInfo
GetSystemMenu
GetSystemMetrics
GetSystemTime
GetSystemTimeAsFileTime
GetTextColor
GetTextExtentPoint32A
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetTopWindow
GetUserDefaultUILanguage
GetUserObjectInformationA
GetVersion
GetVersionExA
GetViewportExtEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowsDirectoryA
GetWindowTextA
GetWindowTextLengthA
GFGGIGGGGG
-]g]j admm
Global\
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
GrayStringA
GWh,QH
GZZZZZZZZZZZZZZZZZZZZZZZZE
`h````
<h1>Unauthorized ...</h1>
<h1>Web content unauthorized...</h1>
<h1>Web site unauthorized...</h1>
<h2>Account Name: %UserName%<br>
<h2>IP Address: %IP%<br>
Hardware
HARDWARE\DESCRIPTION\System\CentralProcessor\0
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
hhctrl.ocx
#[HH_ ]eii
hhhhhhdhhhhhhhhhhhhhhhhh
>HHHHHHHHHHHHHHHHHHHHHH8
hhhhhhhhhhhShhd]8
>hhhhLhhhhhhhhhhhhKhhhh8
>hhhhUhhhhhhhhhhhhShhhh8
HH:mm:ss
HHteHHtPHt+H
HHt`HHt\
HHtjHHtF
HHtjHtHHt&H
%H:%M:%S
Home Edition 
Host%d
HotKey
HtMHt,H
HtmlHelpA
HTTP/1.0 200
HTTP/1.1 200
HTTPXFORWARD
HtvHt@H
HtyHtWHtOHt&H
_hypot
hZZZZZ
I[[[[[[[[[[[	
%I64d K
%I64d M
Identifier
  <!-- Identify the application security requirements. -->
IdleTimeout
i#>i4i
IIIIIIIIIIIIIIII
IIIIIIIIIIIIIJI
iiiio|rmi}prr
ijmmv}}}}}}}vvttjj 
IKI#R#
ImageList_Destroy
ImageList_Duplicate
im(#mi
incomplete or invalid.
inetcpl.cpl
InflateRect
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeObjectAttributes
InitSecurityInterfaceA
InstallNT
-installsvr
Interface
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
internal state.  The program cannot safely continue execution and must
IntersectRect
InvalidateRect
InvalidateRgn
Invalid DateTime
Invalid DateTimeSpan
invalid map/set<T> iterator
invalid string position
IP address
IPAddressHigh
IPAddressHigh=
IPAddressLow
IPAddressLow=
iphlpapi.dll
IP + MAC
>>>(iriA>Afi(
I#RR$#C
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsChild
IsDialogMessageA
IsGroup
IsGroup=
IsIconic
IsRectEmpty
 is running
IsWindow
IsWindowEnabled
IsWindowVisible
IsWow64Process
 IsWow64Process
It	Iu*
ivimrm
' i`Y"
j1h|vG
j8h0QH
j8h8_H
JanFebMarAprMayJunJulAugSepOctNovDec
January
jdbY^C
j`hHNH
j@hhOH
jjjjdd
jy}tOM
k9~8uDj
'K]]a\eaielajda]gKb5
kernel32
KERNEL32
kernel32.dll
KERNEL32.DLL
KillTimer
KKKKIIKK
.KLLLLLLLLLLL
k^]TV:*'
         language="*"
Language
LCMapStringA
LCMapStringW
LeaveCriticalSection
          level="requireAdministrator"
LINE_CHART_CTRL
LineTo
Link Source
Link Source Descriptor
ListWidth
-ll0$$
-LLLL(
+LLLLLLLLLLL
/LLLLLLLLLLLLL
llllllln
LoadBitmapA
LoadCursorA
LoadFromCache
LoadIconA
LoadImageA
LoadLibraryA
LoadLibrary( NTDLL.DLL ) Error:%d
LoadMenuA
LoadResource
LoadStringA
LocalAlloc
LocalFree
LocalIP
LocalReAlloc
 /LocalVersion=6.65 /RemoteURL=http://www.youngzsoft.net/ccproxy/update.php?v=6.65
LockFile
LockResource
LogAnalysis
\logo.bmp
LogPath
log%s.txt
log.txt
log*.txt
LookupPrivilegeValueA
LresultFromObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcmpW
lstrcpyA
lstrcpynA
lstrlenA
M[[[[[[[[[[[[
M[[[[[[[[[[[[_
 + MAC
MACAddress
MACAddress=
MAC Address: %MAC%<br>
   manifestVersion="1.0">
MapDialogRect
map/set<T> too long
map tcp faile
map udp faile
MapViewOfFile
MapWindowPoints
Mask%d
MaxConn
MaxConn=
MaximumBandwidthChart
MaximumConnectionsChart
MaxLine
MaxTimeSchedule
MaxUserCount
MaxWebFilter
MessageBeep
MessageBoxA
Microsoft Visual C++ Runtime Library
Microsoft Windows 2000 
Microsoft Windows NT 
Microsoft Windows Server 2003, 
Microsoft Windows XP 
MM/dd/yy
mmmmmmm
mmmmmmmmmm
mmmmmmmmmmm
MMMMMS
mmmmmz
mmmpk>lmhhfiim
ModifyMenuA
Monday
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveToEx
MoveWindow
~|m]RT</:%
        <ms_asmv2:requestedExecutionLevel
      </ms_asmv2:requestedPrivileges>
      <ms_asmv2:requestedPrivileges>
    </ms_asmv2:security>
    <ms_asmv2:security>
  </ms_asmv2:trustInfo>
  <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2">
mscoree.dll
msctls_hotkey32
msctls_progress32
MsgWaitForMultipleObjects
MS Shell Dlg
MS UI Gothic
MSWHEEL_ROLLMSG
MulDiv
MultiByteToWideChar
N8+F,+N0
    name="CCProxy.exe"/>
         name="Microsoft.Windows.Common-Controls"
Native
N$#C#D#
nc(P#%hkCI7@lNNNNNln
NeedAuth
netapi32.dll
Netapi32.dll
NetApiBufferFree
NetGroupEnumA
NetGroupGetUsersA
NetLocalGroupEnumA
NetLocalGroupGetMembersA
NetMessageBufferSend
NetQueryDisplayInformation
Networks
Network Traffic
NewLogDaily
_nextafter
NH;Alt
nl*1QMVXTllll
nllllfddD?>`llllllln
nlllllllllllllllllln
}|NN<9'
nnnnnnnnnnnnnnnnnnnn
N(;N,r
NoBackButton
NoClose
NoDrives
NoEntireNetwork
NoFileMru
NoNetConnectDisconnect
(non-Win32 .EXE or error in .EXE image).
NoPlacesBar
NoRecentDocsHistory
NoRemove
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
NotifyWinEvent
November
now be terminated.
ntdll.dll
NTDomain
NtQuerySystemInformation
NTService
NTUserAuth
_NT_USER_AUTH
(null)
Object Descriptor
ObjectLink
October
OffsetRect
OffsetViewportOrgEx
of memory or resources.
oG<-uK
OH;Alt
ok_]WL25'
ole32.dll
OLEACC.dll
OLEAUT32.dll
oledlg.dll
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
?OO>>=;;;
>OOOOOOOOOOOOOOOOOOOOOO8
&Open,0,2
OpenClipboard
OpenPrinterA
OpenProcess
OpenProcessToken
OpenSCManagerA
OpenServiceA
Others
OTHERS
OTHERSAuthMethod
OTHERSDomain
OTHERSNeedAuth
OTHERSPassword
OTHERSPort
OTHERSProtocol
OTHERSProxyAddr
OTHERSUserName
OwnerLink
"/"/ p
"""" p
p`;5lWK
 PageSize %d
Password
Password=
PasswordProtect
PasswordProtectStartup
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
.PAVCArchiveException@@
.PAVCException@@
.PAVCFileException@@
.PAVCInvalidArgException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCObject@@
.PAVCOleDispatchException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCSimpleException@@
.PAVCUserException@@
pd;5tCI
PDD#DD#C#SS$DDD#CP
PeekMessageA
PhF;t$
.PI0GTPPPPTPPPPPPPPPPPPG.GP
piA>>>>>AAAAAAAAAAAAAAAAA>>Aip
PicInfo
PlatformId %u
Please contact the application's support team for more information.
POP3AuthMethod
POP3Domain
POP3NeedAuth
POP3Password
POP3Port
POP3Protocol
POP3ProxyAddr
POP3UserName
PortIn%d
PortOut%d
PortPOP3
PortSMTP
PortType%d
PostMessageA
PostQuitMessage
PostThreadMessageA
PPPPhd
PPPPPPPP
ppxxxx
PQQQQQ
PreviewPages
         processorArchitecture="*"/>
    processorArchitecture="x86" 
ProcessorNameString
Professional 
Program: 
<program name unknown>
PropertySheetA
Protocol
ProxyAddr
Proxy-Authorization: Basic %s
psapi.dll
PtInRect
PtVisible
         publicKeyToken="6595b64144ccf1df"
- pure virtual function call
PWVWWW
qInitCommonControlsEx
QQSUVW
QQSVW3
QQSVWd
QueryPerformanceCounter
QueryServiceConfigA
QueryServiceStatus
RaiseException
rasapi32.dll
RasDialA
RasEnumConnectionsA
RasEnumEntriesA
RasGetErrorStringA
RasHangUpA
`.rdata
ReadFile
RectVisible
RedrawWindow
Referer: %Referer%<br>
RegCloseKey
RegCode
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
Register
RegisterClassA
RegisterClipboardFormatA
RegisterHotKey
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
Regserver
RegSetValueExA
ReleaseCapture
ReleaseDC
RemovePropA
Report Files (*.htm)|*.htm|All Files (*.*)|*.*||
RequestURL
-reset
RestoreDC
RestrictRun
RichEdit Text and Objects
Rich Text Format
R;=,@K
rOVUU'
rprrrprpppppppppppppppppprpr
RRRRRRRRRRRRRR
RtlInitUnicodeString
RtlUnwind
RunAsInternetProxyServer
runtime error 
Runtime Error!
RXXYYRXX
RzzzzzzzzzzzzzzR
???????S
S\_^[]
%s\AccInfo.ini
%s\analysis%s.htm
Saturday
%s\AutoProxy.pac
SaveDC
Save Debug Info to Log\log.dat?
SaveLogs
SaveUserData
SaveUserDataInterval
SaveWebTitleEx
ScaleViewportExtEx
ScaleWindowExtEx
%s\CCProxy.ini
ScreenToClient
%s\data%s.txt
%s(Demo version only supports 3 users)
%s.dll
SECURITY
security.dll
SeDebugPrivilege
SelectObject
SendARP
SendDlgItemMessageA
SendMessageA
September
Server 
Server2Client
Server 4.0 
Server 4.0, Enterprise Edition 
ServerBindIPAddress
Server Time: %Time%<br>
-service
ServiceMask
ServiceMask=
SeShutdownPrivilege
SetActiveWindow
SetBkColor
SetBkMode
SetCapture
SetClipboardData
SetCursor
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
SetMenuItemBitmaps
SetPropA
SetRect
SetStdHandle
SetTextColor
SetTimer
Settings
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowContextHelpId
SetWindowExtEx
SetWindowLongA
SetWindowPos
SetWindowsHookExA
SetWindowTextA
SHBrowseForFolderA
SHELL32.dll
ShellExecuteA
Shell_NotifyIconA
\shell\open\command
SHGetPathFromIDListA
SHLWAPI.dll
ShowWindow
ShutDown
ShutDownTime
SING error
SiteFilter
SiteFilter=
SiteFilterModel
SiteFilterModel=
Site: %HostName%<br>
SizeofResource
SlAllllllln
%s\Language\ccproxy.pdf
%s\Language\*.ini
%s\Language\%s.ini
%s\Log
%s\log.dat
%s\log%s.txt
%s\log.txt
%s\log*.txt
%s\MACAddress.txt
SMTPAuthMethod
SMTPDomain
SMTPNeedAuth
SMTPPassword
SMTPPort
SMTPProtocol
SMTPProxyAddr
SMTPUserName
S_]\\\NNLLJHFE,
SocketIdleTimeout
SOCKS4
SOCKS5
SOCKSAuthMethod
SOCKSDomain
SOCKSNeedAuth
SOCKSPassword
SOCKSPort
SOCKSProtocol
SOCKSProxyAddr
SOCKSUserName
software
Software
Software\
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Run
%s%s %s
SSSPQR
SSSSSSSS
SSSSSS}y}mm
Standard Edition 
StartAdmin
StartDNS
StartFtp
StartFTP
StartFTPWeb
StartGopher
StartHttp
StartHTTP
StartMail
StartMap
StartNews
StartNT
StartSecure
StartServiceA
StartSocks
StartSocks4
StartTelnet
STATIC
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
String
StringEx
string too long
StrTrimA
Sunday
SunMonTueWedThuFriSat
%s User License
sVS;7|B;w
SVWj ^
SVWj(3
SWVt,j
SysListView32
SysTabControl32
system
System
[System]
SYSTEM
SystemParametersInfoA
s*zy*s
t+#1-/4#4r
t2WWVPVSW
t;=4@K
t5Ht&-=
t5Ht&Ht
t6Ht*Ht
t	9ALu
t-9HLu
t	9p$u
t-9>u)
TabbedTextOutA
</table>
<table border="1" cellpadding="0" cellspacing="0">
tahTwG
tah|wG
tahX3H
taskmgr
tbh`wG
TCP    PID:%d;      PORT:%d
tD9wdt?
<td nowrap>&nbsp;
Telnet
TELNET
TerminateProcess
TerminateThread
te<%t4
TextOutA
;t,h4uG
The DDE transaction could not
The DDE transaction failed.
The .EXE file is invalid
The filename association is
The operating system denied
The operating system is out
There is no application associated
There was not enough memory to complete the operation.
The specified dynamic-link library was not found.
The specified file was not found.
The specified path was not found.
+t"HHt
- This application cannot run using the active version of the Microsoft .NET Runtime
This application has requested the Runtime to terminate it in an unusual way.
!This program cannot be run in DOS mode.
t<Ht0Ht$Ht
+t=Ht-Ht
Thursday
tIHt,Ht
Time%03d
Time%d
TimeoutMAC
TimeSchedule
TimeSchedule=
TimeScheduleCount
TimeScheduleCount=
TimeSchedule-%d
tj9~8u@j
Tllllllln
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
~]TN<:'
_]TN26'
ToolbarWindow32
tooltips_class32
t$ PUSVV
tQ9^(tLW
TrackPopupMenu
TranslateMessage
try to connect to service control on port %d
t!SS9]
t#SSUP
t.;t$$t(
t$<"u	3
Tuesday
tUhT3H
tvhd3H
t$$VSS
tW9qptR
TypeLib
         type="win32"
    type="win32"
u.;5PWK
uAh|1H
UDDDDDD#D$L$DDDD#U
UDP    PID:%d;    PORT:%d
>:u>FV
          uiAccess="false"/>
u;j0^V
- unable to initialize heap
- unable to open console device
Unable to open hyperlink:
Undefined RAS Dial Error (%ld).
Undefined RAS Enum Connections error (%ld).
Undefined RAS HangUp Error (%ld).
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UnhookWindowsHookEx
-uninstall
UninstallNT
-uninstsvr
Unknown Error (%d) occurred.
Unknown exception
Unknown security failure detected!
Unlimited
UnlockFile
UnmapViewOfFile
Unregister
UnregisterClassA
UnregisterHotKey
Unregserver
-update
\Update.exe
UpdateWindow
Upload
Upload and Download
URLFilter
URLFilter=
urolmyr/
User-%03d
User%03d
USER32
user32.dll
USER32.dll
UserCount
UserCount=
User-%d
User%d
UserInfo1
UserInfo2
UserInfo3
Username
User name
UserName
UserName=
UserPass
 + UserPass
u&SShe
@u';t$
UUOU1X
%u %u %s
%u,%u,%u,%u
ValidateRect
VC20XC00U
VDDDDDDDDD$DDDDDDV
vector<T> too long
VER_PLATFORM_WIN32_NT Major %d, Minor %d
    version="5.1.0.0"
         version="6.0.0.0"
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
v	N+D$
VVVVPVVVj
VVVVVj
VVVVVUWUUj
WaitForSingleObject
WDDDDDDDDD$DDDDDDW
web\authinfo-account.htm
web\authinfo-content.htm
web\authinfo-site.htm
WebAuthTitleEx
WebCached
Web Edition 
WebFilter
WebFilter=
WebFilterCount
WebFilterCount=
WebFilter-%d
WebSitesCheckInternet
Wednesday
were being processed.
WideCharToMultiByte
WindowFromPoint
WinExec
WinHelpA
\winhlp32.exe
WINSPOOL.DRV
with the given filename extension.
Wj(_Wj
Workstation 4.0 
WriteFile
WritePrivateProfileStringA
Wrong Password.
WS2_32.dll
WSAIoctl
WSOCK32.dll
wsprintfA
WSSSSSSSSSSSSSSSSY
WtuHHt
@wwp;0ww
WWWAuthMethod
WWWDomain
WWWNeedAuth
WWWPassword
WWWPort
WWWProtocol
WWWProxyAddr
WWWUserName
WWWWVSW
wwwwww
wwwwwwp
WWWWWWWWWWWWWWWWWWQWSWBW
wwwwwwwwwwwwwx
wwwwwwx
www.yahoo.com;www.icq.com;www.internic.net
xd;=tCI
   xmlns="urn:schemas-microsoft-com:asm.v1" 
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> 
xyxixw
xyyixw
YFFFFF7RRRA5F
yiiixx
%Y%m%d
}{yxy{{|
_^][YY
yyiixx
*Y*Y*RtRRtR
YYu/h(aH
y{{yVN3
yyyixw
yyyixx
:_^YZZ]l
Z_____________^
zsplnY
Zt(Ht Ht
ZwOpenFile
ZwOpenSection
ZZZZZZZZZZZZZZZZZZ