[Global]
$SystemWatch                    = "Application Control"
$SysWatch                       = "System Watch"
$Hips                           = "Application Control"
$Fw                             = "Firewall"
$Pdm                            = "Proactive Defense"
$SandBox                        = "Safe Run"
$NetworkWatcher                 = "Network monitor"
$Source                         = "Source:"
$Target                         = "Destination:"
$Protocol                       = "Protocol:"
$OtherNetworks                  = "Other networks"
$BrowseForExecutable            = "Executable module selection"
$PacketRules                    = "Packet rules"
$KavDescr_sw                    = switch("kis", "ProductTitleLong", "") + " also contains the " + $Hips + " and " + $Fw + " components which together provide total control of the applications. Network Monitor function is also available in the application."
CantCloseActiveNetStat          = "The window can be closed only after the task is stopped."
ErrResolvingIp.caption          = "Cannot resolve IP address"
ErrResolvingIp                  = "Cannot resolve computer IP address, possibly due to incorrectly specified computer name."
ErrPortsList.caption			= "Incorrect list of network ports specified"
ErrPortsList					= "Enter correct list of network ports"
WarnPortsList.caption			= "The list of network ports has been specified incorrectly"
WarnPortsList					= "The list contains duplicate entries"
AppIsRunning.caption            = "Rules for application"
AppIsRunning                    = "Rules for application, which is currently running, cannot be deleted"
ServiceNotMatch.caption         = "Incorrect network service"
ServiceNotMatch                 = "The selected network service does not correspond to the displayed network activity. Please specify the correct network service."
NeedService.caption             = "Network service is not specified"
NeedService                     = "In order to select a network service you should select one of the elements from the list."
NeedAddress.caption             = "Address group is not specified"
NeedAddress                     = "In order to select a group of addresses you should select one of the elements from the list."
NeedName.caption                = "Name is not specified"
NeedName                        = "Please specify the name."
NeedAddresses.caption           = "No network address specified"
NeedAddresses                   = "To add network address click the \"Add\" link."
WrongAction.caption             = "Incorrect action"
WrongAction                     = "\"Process according to application rules\" action is available for TCP and UDP protocols only. Please select network service using TCP or UDP protocol."
ConfirmDenyDevice               = "Attention! Turning off game devices may cause USB keyboard and mouse to stop working correctly. Do you wish to continue?"
ConfirmDenyTrustedApp           = "Attention! Restricting the rights of operating system components can lead to unstable system functioning. Do you wish to continue?"
ConfirmDenyTrustedApp.caption   = $ProductName
ConfirmDeleteNetResources	= "Removal of network service will also delete respective filtering rules.\nAre you sure you want to remove service(s)?"
ConfirmDeleteNetResourcesAddr   = "Removal of network address will also delete respective filtering rules.\nAre you sure you want to remove address(es)?"
$TipText_Hips_InBytes           = "Incoming traffic: "
$TipText_Hips_OutBytes          = "Outgoing traffic: "
$TipText_Hips_UntrustAppCount   = "Untrusted applications: "
$TipText_pdm_TreatsCount        = "Suspicious behavior: "
$NoDetailsAvailable             = "Detailed information is not available"
$AreYouRealyWantToCloseSettings = "Settings have been changed. \n\nIf you close the settings window, all modifications will be lost.\nAre you sure you wish to close the settings window?"
$ByUser                         = " (assigned by user)"
$ByParent                       = " (assigned by run sequence)"
$Search                         = "Search"
$CreateRule                     = "Rule created" 

#warnFLT_DEV_ERR                = 0x1bf8d001

$PDM2_RuleDescr                 = "Action: <a PDM2_ThreatAction onclick(dialog(\"PDM2_ThreatActionEdit\"))>" + s_PDM2_RulesAction(Action) + "</a>\n" + s_PDM2_ThreatDesc(EventTypeSetting) + "Report: <a Log onclick(iterate(bLog))>" + s_OnOff(bLog) + "</a>"
$PDM2_AlertDetailsLink          = " <a AlertDetails_Cmd onclick(dialog(\"PDM2_AlertDetails\"))>Details...</a>"
$PDM2_AlertDetails              = "Details"
$PDM2_AlertDetailsInfo          = "Information"

$CleanHistoryAtExit             = "Clear Safe Run data on exit"

HistorySaved                    = "Report saved to " + History.sHistoryPath
HistoryNotSaved                 = "Failed to save the report." + ErrorCode
SandBoxAppAlreadyExist          = "The application \"" + $AppName + "\" has been already added"
RunAppInSandBoxError            = "Running application error. " + s_ProfileError("SandBox", ErrorCode) + "."
SandBoxCleanError               = "Unable to clear safe run environment. " + s_ProfileError("SandBox", p_Err) + "."
SandBoxCleanConfirm             = "Do you really want to clear data in Safe Run environment?"
SandBoxAddWarn	                = "To run application in Safe Run environment double-click on its icon"
SandBoxAVPPath					= "Applications located in " + $ProductName + " folder cannot be run in safe mode"
SandBoxSystemPath	            = "System applications can operate in safe mode incorrectly. Are you sure you want to add " + $AppName + "?"
SandBoxAfterRestart				= "Application can be run in safe mode after restart"
SandBoxShortcutError			= "Failed to create the shortcut. " + $AppName + " executable file not found."
SandBoxBlackList				= $AppName + " cannot be added to Safe Run applications list"

ConfirmChangeStatusWithChild    = "Changing application status will cause status change for applications which were run in it.\nAre you sure you want to change status of this application?"
ConfirmChangeCustomStatus       = "All changes in Firewall Activity Control rules for application will be lost if status is changed.\nAre you sure you want to " + (p_CtlVal == #HIPS_APP_ID_DEFAULT ? "restore the default status?" : "assign \"" + s_AppStatusName(p_CtlVal) + "\" status?")
KillProcessConfirm              = "Are you sure you want to terminate the application \"" + s_AppName(Id) + "\"?"

#errSTATE_INVALID		= 0x8000006a

#WEEK_FROM_SUNDAY               = 1

$AddedByUser					= "Added by user"
$NoInfo							= "Information is missing"

[s_ResGroupName]
KLRoot                      = "All resources"
KLSystemData                = "Operating system"
KLPrivateData               = "Identity data"
KLPublicData                = "Public data"
KLStartupRegKeys            = "Startup settings"
KLInternetSecRegKeys        = "Online Security"
KLPrivateUserFiles          = "User files"
KLSystemFiles               = "System files"
KLSystemSecRegKeys          = "Security settings"
KLSystemServicesRegKeys     = "System services"
KLStartUpFolders            = "Startup folders"
KLIESettingsRegKeys         = "Microsoft Internet Explorer settings"
KLIEPlugInsRegKeys          = "Microsoft Internet Explorer plug-ins"
KLExplorerSettingsRegKeys   = "Explorer settings"
KLNetwork                   = "Networks"
KLTrusted                   = "Trusted networks"
KLLocal                     = "Local networks"
KLPublic                    = "Public networks"
KLPrivileges                = "Rights"
KLPermissionShell           = "Runtime environment modification"
KLPermissionAppAccess       = "Access to other processes"
KLPermissionSystem          = "System modification"
KLPermissionProcManage      = "Processes control"
KLPermissionProcEmbed       = "Intrusion into other processes"
KLPermissionSysObjAccess    = "Access to system objects"
KLPermissionStrange         = "Suspicious system modifications"
KLPermissionMemoryAccess    = "Memory access"
KLPermissionPrivileges      = "Edit permissions"
KLPermissionHiddenNetAct    = "Hidden network access"
KLStartProc                 = "Starting other processes"
KLStopProc                  = "Stopping other processes"
KLSuspend                   = "Pausing other processes and threads"
KLSchedulerStart            = "Scheduler start"
KLWMSend                    = "Sending windows messages to other processes"
KLSetHook                   = "Hooks installation"
KLCodeInject                = "Code intrusion"
KLDrvStart                  = "Start driver"
KLOlePortAccess             = "Using program interfaces of other process"
KLCreateKnownDlls           = "System modules change (KnownDlls)"
;KLServiceStart              = "Запуск сервиса"
KLKeyLogger                 = "Keylogger activity"
KLScreenshots               = "Taking screenshot"
KLSelfStart                 = "Start"
KLLLDiskAccess              = "Low level disk access"
KLLLFSAccess                = "Low level file system access"
;KLClipBoardAccess           = "Доступ к буферу обмена"
KLCriticalCOMAccess         = "Access to critical system objects"
KLCreateRegHiddKey          = "Creating hidden registry keys"
KLSetHardLink               = "Creating hard link to file"
;KLADSAccess                 = "Доступ к файловым потокам"
KLDirectMemAccess           = "Direct access to physical memory"
KLReadProcMem               = "Reading another processes memory"
KLSetDbgPrivilege           = "Setting debug privileges"
KLChangeObjPrivilege        = "Changing object access rights"
KLUseBrowserCL              = "Use command line of browser"
KLUseBrowserAPI             = "Use browser program interfaces"
KLUseDNS                    = "Using system program interfaces (DNS)"
KLUseBITS                   = "Using system program interfaces"
KLWindowsShutDown           = "Exiting Microsoft Windows"
KLSaveRegKey                = "Saving registry keys to file"
KLPrtStgAccess              = "Access to password storage"
KLWebServices               = "Network services"
KLIPRanges                  = "Network addresses"
KLShellWindowsAcceess       = "Access to internal browser data"
KLUserAccountAccess         = "Access to user accounts settings"
KLOtherSoft                 = "Program settings"
KLInternetBrowsers          = "Internet browsers"
KLFileBrowsers              = "File managers"
KLMail                      = "Email clients"
KLMessengers                = "Instant messengers"
KLDownloadManagers          = "Download managers"
KLFTPManagers               = "FTP managers"
KLOnLineMoney               = "Electronic purses"
KLProtected applications    = "Protected applications"
<empty>                     = "Unknown"
default                     = @

[s_AppGroupName]
KLAppRoot           = "All applications"
KLAppTrusted        = "Trusted"
KLAppSecurity       = "Security"
KLAppRestrictedLow  = "Low Restricted"
KLAppRestrictedHi   = "High Restricted"
KLAppUntrusted      = "Untrusted"
default             = @

[s_AppStatusName]
#HIPS_APP_ID_TRUSTED        = "Trusted"
#HIPS_APP_ID_LO_REST        = "Low Restricted"
#HIPS_APP_ID_HI_REST        = "High Restricted"
#HIPS_APP_ID_UNTRUSTED      = "Untrusted"
#HIPS_APP_ID_DEFAULT        = "Restore default status"
#HIPS_APP_ID_HIPSNOTRUNNING = "Not controlled"
#HIPS_APP_ID_UNKNOWN        = ""
default                     = "Custom settings"

[s_AppStatusDetails]
#HIPS_APP_ID_TRUSTED        = s_AppGroupDetails("KLAppTrusted")
#HIPS_APP_ID_LO_REST        = s_AppGroupDetails("KLAppRestrictedLow")
#HIPS_APP_ID_HI_REST        = s_AppGroupDetails("KLAppRestrictedHi")
#HIPS_APP_ID_UNTRUSTED      = s_AppGroupDetails("KLAppUntrusted")
#HIPS_APP_ID_HIPSNOTRUNNING = "The application is not being controlled because \"" + $Hips + "\" is disabled."

[s_AppGroupDetails]
KLAppTrusted        = "The \"Trusted\" group contains applications signed with digital signatures of trusted vendors and the applications present in the centralized database of known software.\nNo special restrictions apply to the activity of such applications, though they are monitored by the components \"Proactive Defense\" and \"File Anti-Virus\"."
KLAppRestrictedLow  = "The \"Low restricted\" group contains applications without digital signature missing in the centralized database of known software, which however have low value of the heuristically calculated threat rating.\nThese applications are not allowed to access personal user data and settings or modify public data, and upon an attempt to modify system data or perform privileged operations the user will be prompted to confirm such operations. Network activity of applications in this group is also restricted."
KLAppRestrictedHi   = "The \"High restricted\" group contains applications without digital signature missing in the centralized database of known software, which have high value of the heuristically calculated threat rating.\nThese applications are not allowed to access personal user data and settings, public and system data. At an attempt to perform a privileged operation the user will be prompted to confirm such operation. Network activity is blocked for applications of this group."
KLAppUntrusted      = "The \"Untrusted\" group contains applications without digital signatures of trusted vendors missing in the centralized database of known software, which have very high value of the heuristically calculated threat rating.\nOperation of such applications on user's computer is blocked entirely."
;KLAppSecurity       = "Безопасность"
default             = ""

[s_AppRule]
#HIPS_FLAG_ALLOW    = "Allow"
#HIPS_FLAG_DENY     = "Deny"
#HIPS_FLAG_ASK      = "Prompt for action"
#HIPS_FLAG_BYAPP    = "According to the application rule"
#HIPS_FLAG_INHERIT  = "Inherit"
#HIPS_FLAG_LOG      = "Log events"

[s_RuleStateTxt]
#HIPS_RULE_STATE_DENY
#HIPS_RULE_STATE_INH_DENY   = "Deny"
#HIPS_RULE_STATE_ALLOW
#HIPS_RULE_STATE_INH_ALLOW  = "Allow"
#HIPS_RULE_STATE_ASK
#HIPS_RULE_STATE_INH_ASK    = "Prompt for action"
#HIPS_RULE_STATE_MIX
#HIPS_RULE_STATE_INH_MIX    = "Mixed state"

[s_NetDirection]
#wsIn           = "Inbound"
#wsOut          = "Outbound"
#wsInOut        = "Inbound/Outbound"
#wsInStream     = "Inbound (stream)"
#wsOutStream    = "Outbound (stream)"

[s_NetSeverity]
#znAll          = "All networks"
#znUntrusted    = "Public network" + if(@1, ", stealthed")
#znNetBIOS      = "Local network"
#znTrusted      = "Trusted network"

[f_NetConnected]
ret = @ ? "Connected" + if(@1, " through " + @1) : "Disconnected"

[s_NetType]
#If_LoopBack    = "LoopBack"
#If_Ethernet    = "Wired network (Ethernet)"
#If_WiFi        = "WiFi network" + if(@1 != null, "\n(" + s_WiFiSecLevel(@1) + ")")
#If_Tunnel      = "Tunnel"
#If_PPP         = "PPP connection"
#If_PPPoE       = "PPPoE connection"
#If_VPN         = "VPN connection"
#If_Modem       = "Modem connection"
#If_Internet    = "Internet"
def             = "Other"

[s_WiFiSecLevel]
0   = "unsecured"
def = "security enabled"

[HipsRules]
@ = p_fwTabs ? "Firewall" : "Digital Identity Protection"

[HipsRules_Tab]
Rules       = "Applications"
ConfRes     = "Identity data"
OSRes       = "Operating system"
Packets     = "Filtering rules"
Nets        = "Networks"
Resources   = "Resources"

[HipsRules_Tab_Resources_GrpList]
Group    = "Resource"
Resource = "Path"

[HipsRules_Tab_Resources_GrpList.Footer]
Add         = "Add"
Edit        = "Edit"
Delete      = "Delete"
AddCategory = "Add category"

[HipsRules_Tab_Resources_ResList]
Group    = "Resource"
Resource = "Path"

[BrowseForNamedRes]
@ = "User resource"
Name.Name = "Name:"
Value.Name = "Path:"
Browse = "Browse..."

[HipsRules_Tab_NetResources_Srv]
Resource = "Network service"

[HipsRules_Tab_NetResources_Addr]
Resource = "Network address"

[HipsRules_Tab_Rules]
Name = "Applications"

[HipsRules_Tab_Rules_Name]
Name    = "Name"
Path    = "Path"

[HipsRulesList.Footer]
Add         = "Add"
AddGroup    = "Add group"
Edit        = "Edit"
Delete      = "Delete"
Move        = "Move to"

[HipsRules_Tab_Nets]
Name        = "Name"
Status      = "State"
Severity    = "Status"

[HipsRules_Tab_Nets.Menu]
Trusted     = "Trusted network"
Local       = "Local network"
Untrusted   = "Public network"
Separator
Stealth     = "Stealth mode"

[HipsGroups]
@    = p_fwRules ? "Firewall settings" : "Activity Control settings"

[HipsGroups_Rules]
Name = "Application status"

[HipsGroupsList.Footer]
Edit  = "Edit"

[MainWindow.Hips_Filters]
AllItems    = "Do not group"
ByApp       = "Group by application"

[Hips_ResListAddMenu]
File        = "File or folder"
Registry    = "Registry key"
WebService  = "Network service"
IpRange     = "IP address(es)"

[Hips_GroupNameEdit]
@ = "Edit resource group name"

[Hips_AppGroupNameEdit]
@ = "Name of program group"

[HipsRuleColumn.Menu]
Inherit = "Inherit"
Allow   = "Allow"
Ask     = "Prompt for action"
Deny    = "Deny"

;---------- WebServiceEdit ------------

[WebServiceEdit]
@                   = "Network service"
Name.Name           = "Name:"
Protocol.Name       = "Protocol:"
Direction.Name      = "Direction:"
IcmpType.Name       = "ICMP type:"
IcmpCode.Name       = "ICMP code:"
RemotePorts.Name    = "Remote ports:"
LocalPorts.Name     = "Local ports:"

[IpRangeEdit]
@           = "Network addresses"
Name.Name   = "Name:"
LocalAddrs  = "Local addresses"
RemoteAddrs = "Remote addresses"

;---------- AddressEdit ------------

[AddressEdit]
@           = "IP address or DNS name"
@.Example   = "Example: kaspersky.com, 1.2.3.4(/24), 1234::cdef(/96)"

[IpEdit]
@           = "IP address"
@.Example   = "Example: 1.2.3.4(/24), 1234::cdef(/96)"

[ResolveIp]
@       = "Resolving IP address"
Text    = "Resolving IP address. Please wait..."

;---------- PacketRuleList ------------

[HipsRules_Tab_Packets]
Service     = "Network service"
Action      = "Action"
Area        = "Address"
Zone.Name   = "Display rules for networks with the following status:"
DefRule     = "Display default rules for applications"
Extra       = "Additional..."

[HipsRules_Tab_Packets_View]
All = "All networks"

[AppRulesEdit_Tab_Rules]
Inherit = "Inherit restrictions of the parent process (application)"
Service = "Network service"
Action  = "Action"
Area    = "Address"

[PacketRuleList]
Service = "Network service"
Action  = "Action"
Area    = "Address"

[PacketRuleList_Service]
Name    = "Name"
Direct  = "Direction"
Proto   = "Protocol"
RPorts  = "Remote ports"
LPorts  = "Local ports"

[PacketRuleList_Area]
LocalAddr  = "Local address"
RemoteAddr = "Remote address"

;---------- PacketRuleEdit ------------

[PacketRuleEdit]
@       = "Network rule"
Action  = "Action"
Service = "Network service"
Address = "Address"

[PacketRuleEdit_Action]
Allow   = "Allow"
Block   = "Block"
Skip    = "Process according to application rules"
Log     = "Log events"

[PacketRuleEdit_Address]
Any     = "Any address"
Net     = "Subnetwork addresses with status:"
Group   = "Addresses from group:"

;---------- PacketRuleCreate ------------

[Global]
$TcpOut = " is trying to establish outgoing TCP connection with remote computer " + f_NetAddr(RemoteIP) + " to remote port " + RemotePort
$TcpIn  = " is trying to accept incoming TCP connection from remote computer " + f_NetAddr(RemoteIP) + " to local port " + LocalPort
$UdpOut = " is trying to send UDP packet to remote computer " + f_NetAddr(RemoteIP) + " to remote port " + RemotePort
$UdpIn  = " is trying to receive UDP packet from remote computer " + f_NetAddr(RemoteIP) + " to local port " + LocalPort
$IcmpOut = " is trying to send ICMP packet to remote computer " + f_NetAddr(RemoteIP) + ", packet type: " + s_ICMPTypes(IcmpType)
$IcmpIn  = " is trying to receive ICMP packet from remote computer " + f_NetAddr(RemoteIP) + ", packet type: " + s_ICMPTypes(IcmpType)
$Icmp6Out= " is trying to send ICMPv6 packet to remote computer " + f_NetAddr(RemoteIP) + ", packet type: " + s_ICMP6Types(IcmpType)
$Icmp6In = " is trying to receive ICMPv6 packet from remote computer " + f_NetAddr(RemoteIP) + ", packet type: " + s_ICMP6Types(IcmpType)

[PacketRuleCreate]
@ = "Rule Creation Wizard"

[PacketRuleCreatePages]
Action.Name     = "Action"
Action.Descr    = "Select action"
Service.Name    = "Network service"
Service.Descr   = "Selecting the network service, to which the rule will be applied"
Address.Name    = "Addresses"
Address.Descr   = "Selecting IP address or addresses range for the rule"

[PacketRuleCreate_Action]
Next.Name   = "Next"
Next.Descr  = "Go to the next step"

[PacketRuleCreate_Service]
Filter      = "Show services, corresponding to the current network activity only"
Next.Name   = "Next"
Next.Descr  = "Go to the next step"

[PacketRuleCreate_Address]
Next.Name   = "Finish"
Next.Descr  = "Wizard completion"

[FwSettings]
@           = "Additional"
FtpTracking = "Allow active FTP mode"
NoGuiAction = "Block connections if there is no possibility to prompt for action (application interface is not loaded)"
OnShutdown  = "Do not disable Firewall until the system totally stops"

;---------- FileInfo_Tab ------------

[FileInfo_Tab]
File.Name       = "Path:"
FileNotExist    = "General information"
GroupPInfo      = "General information"
GroupSign       = "Protection status"

[FileInfo_Tab_IfFileNotExist]
Descr = "File information is not found."
;File.Name   = "Путь:"

[FileInfo_Tab_GroupProductInfo]
File.Name       = "Path:"
Version.Name    = "Product version:"
Vendor.Name     = "Vendor:"
Product.Name    = "Application:"
Size.Name       = "Size:"
Created.Name    = "Created:"
Modified.Name   = "Modified:"

[FileInfo_Tab_GroupSignature]
Group.Name      = "Group:"
Rating.Name     = "Rating:"
ScanResult.Name = "Detected:"
KLDataBase.Name = "Database:"
Origin.Name     = "Source:"
Sign.Name       = "Digital signature:"
SignDate.Name   = "Signature date:"

[s_PMRating]
default = if( (@ <= 40), @ == 0 ? "Not dangerous" : "Low-hazard") + if( (@ > 40 && @ <= 80), "Suspicious") + if( (@ > 80 && @ <= 100), "Potentially dangerous") + "\n(danger index: " + @ + ")"

[f_KLDbStatus]
ret = ( s_AppGroupName(strKLSRLGroup) == "" ? "Does not exist" : "Exists in group '" + s_AppGroupName(strKLSRLGroup) + "'")

[f_SignStatus]
ret = Signature.sSignerOrganization ? (Signature.sSignerOrganization + if(Signature.sSignerCommonName != Signature.sSignerOrganization, ", " + Signature.sSignerCommonName)) : (Signature.sSignerCommonName ? Signature.sSignerCommonName : "Is missing")

;---------- AppExecuteChain ------------
[AppExecuteChain]
@ = "Application run sequence"

[AppExecuteChain_List]
StartTime = "Start time"
PID       = "Process ID"
Program   = "Application"
Status    = "Status"

[AppExecuteChain_List_Program]
Description = "Description"
File        = "File"
Folder      = "Folder"
Vendor      = "Vendor"
Product     = "Application"
Version     = "Version:"
Size        = "Size"
Created     = "Created"
Modified    = "Changed"


;---------- AppRulesEdit ------------

[Global]
$AppGroupByUser = if(AppDFlags & 0x02, "\n(added by user)")

[AppRulesEdit]
@ = appID & #HIPS_APPID_FLAG_GROUP ? "Rules for a group of applications" : (!p_OnlyFileInfo && f_isInstalled("Hips")) ? "Rules for application" : "Application summary"

[AppRulesEdit_Tab]
Image       = "File"
Runtime     = "Start time"
Rules       = "Rules"
Group       = "General"
History     = "History"
Excludes    = "Exclusions"
SandBox     = "Safe Run"

[AppRulesEdit_Tab_Runtime]
ExecInf     = "Application monitoring"
Changes     = "Application modification"
LParents    = "Application run sequence (list of parent processes)"

[AppRulesEdit_Tab_Runtime_OpenProcesses]
PID     = "Process ID"
User    = "User"

[AppRulesEdit_Tab_Runtime_Parents]
Name    = "Application"
Group   = "Group"

[AppRulesEdit_Tab_Runtime_GroupExecute]
ExecCount.Name  = "Executions count:"
LastExec.Name   = "Last execution:"

[AppRulesEdit_Tab_Changes_Created]
Created.Name = "Created:"

[AppRulesEdit_Tab_Changes_Modified]
Modified.Name = "Modified:"

[AppRulesEdit_Tab_Changes_Deleted]
Deleted.Name = "Deleted:"

[AppRulesEdit_Tab_Rules_Select]
Files   = "Files and system registry"
Permiss = "Rights"
Net     = "Network rules"

[AppRulesEdit_Tab_Rules_Files]
Name    = "Resource"
Read    = "Read"
Write   = "Write"
Remove  = "Delete"
Create  = "Create"

[AppRulesEdit_Tab_Rules_Permiss]
Name    = "Resource"
Allow   = "Permission"

[AppRulesEdit_Tab_Group]
Name.Name   = "Name:"
Descr       = "Description"

[AppRulesEdit_Tab_History_Events]
@ = "Events"

;---------- SnifferStatistic ------------

[SnifferStatistic]
@ = "Network packet analysis statistics"

[SnifferStatistic_Filter]
RunFilter = " Filter "

[SnifferStatistic.Footer]
Close = "&Close"

[SnifferStatistic_RunPanel]
Start   = "Run"
Stop    = "Stop"
Clear   = "&Clear"

[SnifferStatistic_Splitter_Frames]
TimeOffset  = "Time"
Source      = $Source
Target      = $Target
Etype       = "Type"
Protocol    = $Protocol

;---------- AdapterEdit ------------

[AdapterEdit]
@ = "Network adapter"

[AdapterEdit_Tab]
General = "Main"

[AdapterEdit_Tab_General]
NewNetwork = "New connections"

[AdapterEdit_Tab_General_Info]
Type.Name   = "Type:"
Status.Name = "Status:"

[AdapterEdit_Tab_General_NewNetwork]
Legend      = "Perform the following actions if computer is connected to the new network through this adapter:"
Ask         = "Prompt for group"
AssignTo    = "Automatically add new networks to the group:"
Stealth     = "Stealth mode"

;---------- NetworkEdit ------------

[NetworkEdit]
@ = "Network connection"

[NetworkEdit_Tab]
General     = "Properties"
Addresses   = "Addresses"
Settings    = "Additional"

[NetworkEdit_Tab_General]
Type.Name       = "Type:"
WiFiName.Name   = "WiFi name:"
Status.Name     = "State:"
LastConnect     = "Last connection:"
Created.Name    = "Created:"
Name.Name       = "Name:"
Severity.Name   = "Status:"
Stealth         = "Stealth mode"
Area            = "Additional subnetworks"

[NetworkEdit_Tab_Settings]
ArpPoison   = "Protection against network attacks of ARP poisoning type"
Notify      = "Notify"
Action      = "Action when connection is established"

[NetworkEdit_Tab_Settings_Notify]
Connect = "When network connection is established"
ChgMac  = "When the correspondence between MAC address and IP address is changed"
NewMac  = "When new MAC address appears"

[NetworkEdit_Tab_Settings_Action]
UsePrnt = "Select default printer:"

;---------- NewNetwork ------------

[NewNetwork]
@.Caption.B = "New network"

[NewNetwork_Descr]
Adapter.Name    = "Adapter:"
Type.Name       = "Type:"
Network.Name    = "Name:"

[NewNetwork_Body_Actions]
Public.Name     = "Public network" + $Def
Public.Descr    = "Block external access to computer"
Local.Name      = "Local network" + $Def
Local.Descr     = "Allow access to files and printers"
Trusted.Name    = "Trusted network" + $Def
Trusted.Descr   = "Allow any network activity"

[MainWindow.SystemWatch_WorkArea]
Home.Group2.Header = "System performance"

[MainWindow.SystemWatch_WorkArea_List]
Application = $Application
TrafficIn   = "Incoming traffic"
TrafficOut  = "Outgoing traffic"

[s_HipsError]
#warnFLT_DEV_ERR    = "Rules for devices will not be applied"
def                 = s_SystemError(@)

[s_SandBoxError]
#errSTATE_INVALID   = "Unable to perform the operation while there is at least one application running in safe mode"
0x800000D0
0x80017005          = "Safe Run environment is not started"
0x80000042          = "Safe mode for this application is not supported"
0xA000010B          = s_SystemError(0x8000004c)
def                 = s_SystemError(@)

[MainWindow.SystemWatch.Hips]
Sett = "Settings"

[MainWindow.SystemWatch.Fw]
Mode.Name       = "Mode of operation:"
NetPackets.Name = "Network packets:"
NetPackets.Val  = "Settings"

[MainWindow.SystemWatch.pdm]
DetectMethods.Name  = "Detection methods:"
DetectMethods.Val   = &(!(nFlags  #vfSkipTrojGen) + !(nFlags  #vfSkipWormGen) + !(nFlags  #vfSkipWormP2P) + !(nFlags  #vfSkipKeylogger) + !(nFlags  #vfSkipSuspDrvInst) + !(nFlags  #vfSkipIrpTableChange) + !(nFlags  #vfSkipHiddenObj) + !(nFlags  #vfSkipNegativePID)) + " (8 total)"

[MainWindow.SystemWatch.SysWatch]
Descr = "Collecting detailed information about applications activity"

[WebServiceEdit_Prot_ComboDiz]
Undef = "Not defined"

[s_HipsSubSystemState]
#ehsssAllow = "Allow"
#ehsssDeny  = "Block"
#ehsssApp   = "Default rules"

[s_FwWorkMode]
#fwAllowAll = "Allow"
#fwAllow    = "Default rules"
#fwBlockAll = "Block"

;------------- System Monitor -----------
[SystemMonitor]
@ = "Application Activity Control"

[SystemMonitor_Tab_Programs]
CategoryLbl = "Category"

[SystemMonitor_Tab_Programs_Lists]
All     = "Show " + $ProductName + " processes"
System  = "Show system processes"

[SystemMonitor_Tab_Programs_Category]
Running     = "Running"
Startup     = "Started at system startup"
Network     = "Network"
SandBox     = "Running in Safe Run environment"
Trusted     = "Trusted"
Restricted  = "Restricted"
Banned      = "Blocked"
Today       = "Started today"
ThisWeek    = "Started this week"
ThisMonth   = "Started this month"
All         = "All"

[Programs_RunList]
Program  = "Process"
Status   = "Status"
State    = "State"
PID      = "Process ID"
UserName = "User name"
CPU      = "CPU"
Memory   = "Memory"
History  = "Run sequence"

[Programs_RunList_Menu]
Properties   = f_isInstalled("Hips") ? "Rules for application" : "Application summary"
ShowHistory  = "Run sequence"
ChangeStatus = "Change status"
KillProcess  = "Terminate process"

[Programs_Program]
Description = "Description"
File        = "File"
Folder      = "Folder"
Vendor      = "Vendor"
Product     = "Application"
Version     = "Version:"
Size        = "Size"
Created     = "Created"
Modified    = "Changed"

[Programs_State]
StartTime = "Start"
ExitTime  = "Close"

[Programs_LastRun]
LastRun  = "Date"
RunCount = "Run count"

[Programs_RunList_Memory]
WorkingSet = "Memory"
PageFile   = "Virtual memory"

[Programs_RunList_Status]
Default = "Default"
Current = "Current"

[Programs_AllList]
Program = "Application"
LastRun = "Last execution"
Status  = "Status"
Parents = "Run sequence"

[Programs_AllList_Menu]
Properties   = f_isInstalled("Hips") ? "Rules for application" : "Application summary"
ChangeStatus = "Change status"
Delete       = "Delete from the list"

[Programs_AllList_Status]
Default = "Default"
Current = "Current"

[SystemMonitor_Tab_OS]
CategoryLbl = "Category"

[HipsRules_Tab_Resources]
CategoryLbl = "Category"

[s_AppWorkState]
0 = "Running"
default = "Closed"

;------------- Network Monitor -----------

[NetworkMonitor]
@ = "Network Monitor"

[NetworkMonitor_Tab]
Conn    = "Connections and ports"
Packets = $Fw + ": rule processing log"
Traffic = "Network traffic"
Banned  = "Blocked computers"

[NetworkMonitor_Tab_Conn]
All = "Show connections established by " + $ProductName_INS

[NetworkMonitor_Tab_Conn_List]
App             = "Application"
Proto           = "Protocol"
Direction       = "Direction"
LocalIP         = "Local IP address"
LocalPort       = "Local port"
RemoteIP        = "External IP address"
RemotePort      = "External port"
Duration        = "Duration"
BytesRecieved   = "Bytes received"
BytesSent       = "Bytes sent"

[NetworkMonitor_Tab_Packets]
ViewLbl = "Show"

[NetworkMonitor_Tab_Packets_View]
All         = "all events"
Blocked     = "blocked"
BlockedIn   = "incoming blocked"
BlockedOut  = "outgoing blocked"
Allowed     = "allowed"
AllowedIn   = "incoming allowed"
AllowedOut  = "outgoing allowed"
CreateRule	= "created rules"

[NetworkMonitor_Tab_Packets_Log]
Time        = "Time"
App         = "Application"
RuleName    = "Rule"
NetSeverity = "Zone"
Verdict     = "Status"
LocalAddr   = "Local address"
LocalPort   = "Local port"
RemoteAddr  = "External address"
RemotePort  = "External port"
Proto       = "Protocol"

[NetworkMonitor_Tab_Packets_Log.Menu]
Rule = "Create a rule"

[NetworkMonitor_Tab_Traffic]
Application = $Application
TrafficIn   = "Incoming traffic"
TrafficOut  = "Outgoing traffic"

[Grid.Groups]
FwAddrR = "External address " + ip(c_ipHash(val))
FwAddrL = "Local address " + ip(c_ipHash(val))
FwPortR = "External port " + (val ? val : "is not available")
FwPortL = "Local port " + (val ? val : "is not available")

;------------- PdmSettings ---------------

[PdmSettings]
@       = $Pdm

[PDM2_Settings_Body_ThreatList_Group]
RuleLabel   = "Rule description (click underlined parameters to edit):"

[PdmSettings_Rules]
Event   	= "Event"
Action  	= "Action"
Log     	= "Write information to report"
Probability	= "Probability of false positives"

[s_PDM2_ThreatFAProbability]
#PDM2_SET_IrpTableChange
#PDM2_SET_DNSQuery          = "high"
#PDM2_SET_WorpP2P
#PDM2_SET_TrojGen
#PDM2_SET_Keylogger
#PDM2_SET_SuspDrvInst
#PDM2_SET_HiddenObj
#PDM2_SET_InvaderLoader
#PDM2_SET_HiddenDataSend
#PDM2_SET_PrtStgAccess
#PDM2_SET_BssDetect         = "medium"
default                     = "low"

[s_PDM2_Rollback]
#PDM2RollBack_off	= "do not roll back"
#PDM2RollBack_auto	= "roll back automatically"
#PDM2RollBack_ask	= "prompt for action"

[s_PDM2_RulesAction]
#PDM2_ALLOW     	= "Allow"
#PDM2_ASK       	= "Prompt for action"
#PDM2_BLOCK     	= "Deny"
#PDM2_TERMINATE 	= "Terminate process"
#PDM2_QUARANTINE 	= "Move to Quarantine"

[s_PDM2_ThreatType]
#PDM2_SET_WorpP2P           = "P2P worm-like activity"
#PDM2_SET_TrojGen           = "Trojan-like activity"
#PDM2_SET_Keylogger         = "Keyloggers"
#PDM2_SET_SuspDrvInst       = "Hidden driver install"
#PDM2_SET_IrpTableChange    = "Operating system kernel modification"
#PDM2_SET_HiddenObj         = "Hidden object"
#PDM2_SET_NegativePID       = "Hidden process (with negative PID)"
#PDM2_SET_WormGen           = "Worm-like activity"
#PDM2_SET_HostsChange       = "Hosts file modification"
#PDM2_SET_RootShell         = "Input/output redirection"
#PDM2_SET_Invader           = "Intrusion into process"
#PDM2_SET_InvaderLoader     = "Intrusion into all processes"
#PDM2_SET_StrangeKey        = "Suspicious registry activity"
#PDM2_SET_HiddenDataSend    = "Suspicious data transfer using trusted applications"
#PDM2_SET_StrangeBeh        = "Suspicious system activity"
#PDM2_SET_DNSQuery          = "Suspicious DNS request"
#PDM2_SET_PrtStgAccess      = "Attempt to access protected storage"
#PDM2_SET_BssDetect         = "Updatable heuristics (BSS)"
default                     = "PDM2_ThreatType: " + @

[s_PDM2_RulesAction]
#PDM2_ALLOW     	= "Allow"
#PDM2_ASK       	= "Prompt for action"
#PDM2_BLOCK     	= "Deny"
#PDM2_TERMINATE 	= "Terminate process"
#PDM2_QUARANTINE 	= "Move to Quarantine"

;------------- PDM2_ThreatActionEdit ----------------------

[PDM2_ThreatActionEdit]
@		= "Select action"

[PDM2_ThreatActionEdit_Body]
ActionAllow			= "A&llow"
ActionAsk 			= "Prompt for ac&tion"
ActionTerminate		= "Terminate &process"
ActionQuarantine	= "Move to &Quarantine"
ActionBlock			= "De&ny"

;------------- PDM2_RollbackActionEdit ----------------------

[PDM2_RollbackActionEdit]
@			= "Action"

[PDM2_RollbackActionEdit.Dlg]
Text		= "Select action:"

[PDM2_RollbackActionEdit_Body]
ActionOff	= "&Do not roll back"
ActionAuto	= "&Roll back automatically"
ActionAsk	= "Prompt for ac&tion"

;-------------- PDM2_RootKitPeriod ------------------------

[s_PDM2_ThreatDesc]
$ThreatTimeout			= "Period: <a PdmRootKitPeriod onclick(dialog(\"PDM2_RootKitPeriod\"))>" + Timeout + " min</a>\n"
#PDM2_SET_HiddenObj		= $ThreatTimeout
#PDM2_SET_NegativePID	= $ThreatTimeout

[PDM2_RootKitPeriod]
@	= "Hidden processes detection"

[PDM2_RootKitPeriodDlg]
Period	= "Scan every"
Min	= "min"

;------------------ PDM2_AlertDetails ---------------------

[PDM2_AlertDetails_Body]
DllList         = "Modules"
ChildProcs      = "Child processes"
HostsOld        = "Old file"
HostsNew        = "New file"
History         = "History of process activity"

[PDM2_AlertDetails_ChildProcs_List]
ImagePath       = "Path"
PID             = "PID"
CommandLine     = "Command line"

[PDM2_AlertDetails_History]
Save            = "Save"

;---------------- PDM2_AlertDetails_History ---------------

[PDM2_AlertDetails_History]
@     = "History of process activity"
Save  = "&Save"

[s_PDM2_HistoryEventType]
0   = "Empty"
1   = "CreateDir"
2   = "RenameDir"
3   = "DeleteDir"
4   = "CreateFile"
5   = "ModifyFile"
6   = "DeleteFile"
7   = "CreateRegKey"
8   = "DeleteRegKey"
9   = "CreateRegValue"
10  = "ModifyRegValue"
11  = "DeleteRegValue"

[PDM2_AlertDetails_History_List]
Type         = "Operation"
ObjectName   = "Object"

[s_PDM2_AlertDialog_Description]
def =  (Action == #PDM2_ACTION_BLOCKED_APP_START && ActionsAll & #ACTION_TERMINATE) ? s_PDM2_AlertDialog_DescriptionPast(@) : s_PDM2_AlertDialog_DescriptionNow(@)

[s_PDM2_AlertDialog_DescriptionPast]
#PDM2_EVENT_P2P_SC_RDL         = "At previous session process seemed to be a network worm"
#PDM2_EVENT_SC_AR              = "At previous session process was trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
#PDM2_EVENT_SC_ARsrc           = "At previous session process was trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
#PDM2_EVENT_SCN                = "At previous session " + $AlertAppLinkWithGroup + " showed suspicious activity typical of worms (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Worm.generic</a>)"
#PDM2_EVENT_P2P_SCN            = "At previous session " + $AlertAppLinkWithGroup + " showed suspicious activity typical of P2P worms (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Worm.P2P.generic</a>)"
#PDM2_EVENT_SC2STARTUP         = "At previous session process was trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
#PDM2_EVENT_SC_MULTIPLE        = "At previous session process seemed to be a P2P worm"
#PDM2_EVENT_RDR                = "At previous session process was trying to redirect data input/output. Probably it was an attempt of remote access to your computer"
#PDM2_EVENT_HIDDEN_OBJ         = "At previous session " + $AlertAppLinkWithGroup + " showed itself as a <a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>hidden object</a>. Such behavior can be a result of user actions or can be caused by a malicious program - rootkit."
#PDM2_EVENT_INVADER            = "At previous session process was trying to inject into another process. This behavior is typical of some malicious programs"
#PDM2_EVENT_INVADER_LOADER     = "At previous session process was trying to inject module into all processes. This behavior is typical of some malicious programs"
#PDM2_EVENT_STRANGEKEY	       = "At previous session process was trying to access registry value with unreadable name"
#PDM2_EVENT_HIDDEN_INSTALL     = "At previous session there was an attempt of running hidden installation into system"
#PDM2_EVENT_BUFFEROVERRUN      = "At previous session there was detected an attempt to overrun buffer. This behavior is typical of some malicious programs"
#PDM2_EVENT_DEP                = "At previous session there was detected an attempt to execute data as program code. This behavior is typical of some malicious programs"
#PDM2_EVENT_HOSTS              = "At previous session there was detected an attempt of hosts file changing. This file defines network address mapping"
#PDM2_EVENT_DOWNLOADER	       = "At previous session a recently downloaded module was attempted to run. This behavior is typical of Trojan Downloader malware"
#PDM2_EVENT_TROJAN_GEN         = "At previous session " + $AlertAppLinkWithGroup + " showed suspicious activity typical of Trojan programs (<a onclick(dialog("HipsInfo", p_eventtype(EventType)))>Trojan.generic</a>)"
#PDM2_EVENT_DRIVER_INS         = "At previous session " +  $AlertAppLinkWithGroup + " was trying to <a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>download driver</a> in a hidden way" + if(AdditionalInfo, " " + AdditionalInfo) + ". " + $ProductName + " will not be able to control application activity after installation."
#PDM2_EVENT_HIDDEN_SEND        = "At previous session process was trying to send data using a trusted application"
#PDM2_EVENT_PSTORE             = "At previous session process was trying to get access to personal data or passwords"
#PDM2_EVENT_DNS_QUERY	       = "At previous session process was trying to get access to DNS-cache"
#PDM2_EVENT_KEYLOGGER          = "At previous session " + $AlertAppLinkWithGroup + " was trying to intercept keyboard input (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Keylogger</a>)" + if(AdditionalInfo && !nPID, " Driver file: " + AdditionalInfo)
default                        = "At previous session process was performing suspicious actions"

[s_PDM2_AlertDialog_DescriptionNow]
#PDM2_EVENT_P2P_SC_RDL         = "Process seems to be a network worm"
#PDM2_EVENT_SC_AR              = "Process is trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
#PDM2_EVENT_SC_ARsrc           = "Process is trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
;#PDM2_EVENT_SCN               = "Процесс пытается скопировать себя на сетевой ресурс"
#PDM2_EVENT_SCN                = $AlertAppLinkWithGroup + " shows suspicious activity typical of worms (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Worm.generic</a>)"
;#PDM2_EVENT_P2P_SCN           = "Процесс проявляет активность, характерную для P2P-червей"
#PDM2_EVENT_P2P_SCN            = $AlertAppLinkWithGroup + " shows suspicious activity typical of P2P worms (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Worm.P2P.generic</a>)"
#PDM2_EVENT_SC2STARTUP         = "Process is trying to register its copy as an autorun startup object. This behavior is typical of Trojans"
#PDM2_EVENT_SC_MULTIPLE        = "Process seems to be a P2P worm"
#PDM2_EVENT_RDR                = "Process is trying to redirect data input/output. Probably it is attempt of remote access to your computer"
;#PDM2_EVENT_HIDDEN_OBJ        = "Обнаружен скрытый процесс. Сокрытие в системе вредоносных программ и их процессов является результатом работы программ-маскировщиков (rootkit)"
#PDM2_EVENT_HIDDEN_OBJ         = $AlertAppLinkWithGroup + " shows itself as a <a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>hidden object</a>. Such behavior can be a result of user actions or can be caused by a malicious program - rootkit."
#PDM2_EVENT_INVADER            = "Process is trying to inject into another process. This behavior is typical of some malicious programs"
#PDM2_EVENT_INVADER_LOADER     = "Process is trying to inject module into all processes. This behavior is typical of some malicious programs"
#PDM2_EVENT_STRANGEKEY	       = "The process is trying to access registry value with unreadable name"
#PDM2_EVENT_SYSCHANGE          = "Suspicious system activity detected"
#PDM2_EVENT_HIDDEN_INSTALL     = "Running hidden installation into system"
#PDM2_EVENT_BUFFEROVERRUN      = "Attempt to overrun buffer detected. This behavior is typical of some malicious programs"
#PDM2_EVENT_DEP                = "Attempt to execute data as program code detected. This behavior is typical of some malicious programs"
#PDM2_EVENT_HOSTS              = "Hosts file has been changed. This file defines network address mapping"
#PDM2_EVENT_DOWNLOADER	       = "Recently downloaded module was attempted to run. This behavior is typical of Trojan Downloader malware"
;#PDM2_EVENT_TROJAN_GEN	       = $(EventSubType,AlertDialog_Description_PDM2_TROJAN_GEN)
#PDM2_EVENT_TROJAN_GEN         = $AlertAppLinkWithGroup + " shows suspicious activity typical of Trojan programs (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Trojan.generic</a>)"
;#PDM2_EVENT_DRIVER_INS        = "Процесс пытается получить полный доступ к системе путем установки драйвера. Дальнейший контроль над этой программой будет невозможен"
#PDM2_EVENT_DRIVER_INS         = $AlertAppLinkWithGroup + " is trying to <a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>download driver</a> in a hidden way" + if(AdditionalInfo, " " + AdditionalInfo) + ". " + $ProductName + " will not be able to control application activity after installation."
#PDM2_EVENT_HIDDEN_SEND        = "The process is trying to send data using a trusted application"
#PDM2_EVENT_PSTORE             = "Process is trying to get access to personal data or passwords"
#PDM2_EVENT_DNS_QUERY	       = "Process is trying to get access to DNS-cache"
;#PDM2_EVENT_KEYLOGGER	       = $(ObjectName,!!,AlertDialog_Description_PDM2_KEYLOGGER)
#PDM2_EVENT_KEYLOGGER          = $AlertAppLinkWithGroup + s_ActionInTime(Action) + "intercept keyboard input (<a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>Keylogger</a>)" + if(AdditionalInfo && !nPID, " Driver file: " + AdditionalInfo)
;#PDM2_EVENT_IRP_TABLE_CHANGED = "Обнаружены подозрительные изменения в ядре операционной системы: изменен порядок обработки запросов $(AdditionalInfo,!!,AlertDialog_Description_PDM2_IRP_TABLE_CHANGED). Такое изменение может быть следствием работы драйвер-руткита или же программ-эмуляторов CD/DVD."
#PDM2_EVENT_IRP_TABLE_CHANGED  = "Suspicious modifications to the system kernel detected: normal <a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>order of processing requests</a> by a system driver has been modified" + if(AdditionalInfo, " " + AdditionalInfo) + ". Such modification can be a result of driver-rootkit or CD/DVD emulators operation."
#PDM2_EVENT_NEGATIVE_PID       = "Process with <b><a onclick(dialog(\"HipsInfo\", p_eventtype(EventType)))>suspicious PID value</a></b> " + f_PIDValue(nPID)+ " detected. Such behavior can be a result of user actions or can be caused by a malicious program - rootkit."
default                        = "Process is performing suspicious actions"

[s_PDM2_AlertDialog_EventEx]
#OBJSTATUS_OK                  = "Rollback completed successfully."
#OBJSTATUS_NOTBACKUPPED        = "Rollback failed."

[s_PDM2_ByEventType]
#PDM2_EVENT_P2P_SC_RDL
#PDM2_EVENT_P2P_SCN
#PDM2_EVENT_SC_MULTIPLE         = "Worm.P2P.generic"
#PDM2_EVENT_SC_AR
#PDM2_EVENT_SC_ARsrc
#PDM2_EVENT_SC2STARTUP
#PDM2_EVENT_TROJAN_GEN          = "Trojan.generic"
#PDM2_EVENT_SCN                 = "Worm.generic"
#PDM2_EVENT_RDR                 = "RootShell"
#PDM2_EVENT_HIDDEN_OBJ          = "Hidden object"
#PDM2_EVENT_INVADER             = "Invader"
#PDM2_EVENT_INVADER_LOADER      = "Invader (loader)"
#PDM2_EVENT_STRANGEKEY        = "Suspicious registry value"
#PDM2_EVENT_SYSCHANGE         = "Suspicious behavior"
;#PDM2_EVENT_HIDDEN_INSTALL    = "Скрытая установка"
;#PDM2_EVENT_BUFFEROVERRUN     = "Переполнение буфера"
;#PDM2_EVENT_DEP               = "Выполнение"
#PDM2_EVENT_HOSTS             = "Hosts file modification"
;#PDM2_EVENT_DOWNLOADER        = "Загрузчик троянских программ"
#PDM2_EVENT_DRIVER_INS          = "Suspicious driver installation"
#PDM2_EVENT_HIDDEN_SEND       = "Hidden data sending"
#PDM2_EVENT_KEYLOGGER           = "Keylogger"
#PDM2_EVENT_IRP_TABLE_CHANGED   = "System function address modification"
#PDM2_EVENT_NEGATIVE_PID        = "Process with negative PID"
#PDM2_EVENT_PSTORE              = "Access to identity data"
#PDM2_EVENT_BSS_DETECT          = DetectName
#PDM2_EVENT_DNS_QUERY           = "DNS request"
default                         = if(@, "unk: " + @)

[s_PDM2_AlertDialog_Event]
;#PDM2_ACTION_ASK               =
;#PDM2_ACTION_DETECT            =
#PDM2_ACTION_ROLLBACK           = "Forced to terminate the process. You are advised to roll back the changes made to the system."
#PDM2_ACTION_TERMINATE_FAILED   = "Process cannot be terminated: " + s_SystemError(Error)
#PDM2_ACTION_ROLLBACK_RESULT    = s_PDM2_AlertDialog_EventEx(ObjectStatus)
#PDM2_ACTION_TERMINATE_INFO     = "Forced to terminate the process."
#PDM2_ACTION_QUARANTINE_FAILED  = "Error moving to Quarantine."
#PDM2_ACTION_FILE_DELETED       = "Source file deleted."
#PDM2_ACTION_FILE_DELETE_FAILED = "Error deleting file: " + s_SystemError(nError)
#PDM2_ACTION_QUARANTINED        = "File quarantined"
default                         = s_PDM2_AlertDialog_Description(EventType)

;----------------------------------------------------------

[MainWindow.SystemWatch_WorkArea_SysPerf_Legend]
Legend1.Text    = "Incoming traffic"
Legend2.Text    = "Outgoing traffic"

[MainWindow.SystemWatch_WorkArea_SysPerf_Legend_Detected]
Legend1.Text    = "Untrusted applications"
Legend2.Text    = "Suspicious behavior"

[MainWindow.SystemWatch_WorkArea_SysPerf]
Traffic.Name    = "Scanned, " + f_SizeType(ctl.Chart.MaxVal()) + "/sec."
Detected.Name   = "Detected, objects/sec."

[SystemWatchChartMenu]
SwitchToTraffic     = "Traffic scanned"
SwitchToDetected    = "Detected"

[AppRulesEdit_Tab_SandBox]
Use = "Run application in safe mode. Application will be listed in the Security Zone window"
AlwaysRunInSandBox = "Always run in safe mode. Application will be run in safe mode regardless of run method"
CleanHistoryAtExit = $CleanHistoryAtExit + ". All changes made during this application operating will be rolled back"

[SandBoxSettings_Tab]
Boxes   = "Profiles"
Apps    = "Applications"

[SandBoxSettings_BoxList]
Name    = "Name"
Apps    = "Applications"

[SandBoxApps]
@ = "Options " + Name

[SandBoxApps_Tab]
General = "Settings"

[SandBoxApps_Tab_General]
BoxName.Name        = "Name:"
CleanOnInactive     = "Clean on inactive"
DeleteOnInactive    = "Delete on inactive"
EnableSharedFolder  = "Use Shared Folder"
DenyAccessProcesses = "Deny access processes"
BorderColor         = "Select border color and width: <a BorderColor onclick(dialog(\"SandBoxApps_Tab_General_ColorEdit\"))>" + s_SandBox_Colors(BorderColor) + "</a>"

[SandBoxApps_Tab_General_ColorEdit]
@			= "Border color"

[SandBoxApps_Tab_General_ColorEdit.Dlg]
Text		= "Select color:"

[s_SandBox_Colors]
0xff0000 = "Red"
0xff8000 = "Orange"
0xffff00 = "Yellow"
0x00ff00 = "Green"
0x00ffff = "Blue"
0x0000ff = "Dark blue"
0x8f00ff = "Purple"
def = "Custom (" + @ + ")"

[SandBoxApps_Tab_Apps_AppList]
Application = "Applications"
Box         = "Profile"

[SandBoxApps_Tab_Apps_AppList_Application]
Name    = "Name"
Path    = "Path"

[AppCtrl_ApplicationsSandList]
footer.Other = "Clear"

[s_SandBoxName]
1 = "Common"
2 = "Secure Internet"
def = @1.Name

[MainWindow_Body.AppCtrl]
Header.Text = "Application Control"
Descr	    = "Prevents applications from executing actions which can be harmful for the system, monitors access to your personal data and provides a protected environment for applications to run safely."

[AppCtrl_WhiteListing_Stat]
Summary.Name      = "Applications:"
Leg1.Text.Name    = "Trusted"
Leg2.Text.Name    = "Low restricted"
Leg3.Text.Name    = "High restricted"
Leg4.Text.Name    = "Untrusted"
AppMon            = "Application activity"

[AppCtrl_Sandbox]
Header.Text = "Safe Run (Sandbox)"
Descr       = "Safe Run lets you run applications in a virtual, protected environment, providing better security and preventing access to your private data."
NotAvailWarn = "Safe Run is not available on computers running Microsoft Windows XP x64"

[AppCtrl_Sandbox_Params]
ParametersBlockLabel = "Safe Run applications"

[AppCtrl_cdp]
Header.Text = "Digital Identity Protection"
Descr       = "Controls access to your private data. "
DescrLink   = "Settings"

[AppCtrl_SandboxRun]
SharedFolder = "Shared Folder"
SharedFolderDescr = "Use this folder to save files and documents when using Safe Run"

[AppCtrl_ApplicationsSandList_Menu]
$CreateShortcutNameSuffix = ""
Run                = "Run"
CreateShortcut     = "Create shortcut..."
AlwaysRunInSandBox = "Always run in safe mode"
FileInfo           = "Properties"
