[Global]
$LinkMoreDetails                    = "Details..."
$LinkTechnicalSupport               = "Support"
$LinkGetFullLicense                 = "Purchase license"
$LinkRenewLicense                   = "Renew license"
$LinkRestartComputer                = "Restart computer"
$LinkRestartProduct                 = "Restart product"
$LinkTreatAll                       = "Neutralize all"
$LinkDetails                        = "View detailed report"
$LinkFullReport                     = "Detailed report"
$LinkActivate                       = "Activate"
$LinkUpdateSubsriptionStatus        = "Update status"
$LinkProtect                        = "Enable Self-Defense"
$LinkAutoRun                        = "Enable autorun"
$LinkRetry                          = "Retry"
$LinkSettings                       = $Configure
$LinkUpdateNow                      = "Update now"
$LinkProductBundleDownload          = "Download now"
$LinkProtectionTurnOn               = "Enable Protection"
$LinkRestartService                 = "Restart service"
$LinkRepairInstall                  = "Start application repair"
$LinkSupport                        = "Support"
$LinkSendReport                     = "Submit report"
$LinkServicesTurnOn                 = "Resume all"
$LinkServicesResume                 = "Resume paused"
$LinkTrainNow                       = "Training Wizard"
$LinkScanMyComputer                 = "Scan computer"
$LinkShowMessages                   = "Show all messages"
$LinkLearnMore                      = "Learn more about security threats"
$LinkSkip                           = "Skip this message"
$LinkShowNext                       = "Show next message"
$LinkSomeSkipped                    = "Show skipped messages"
$LicensingSubsystem                 = $IsSubscription? "License manager" : "License manager"
$LicenseManager                     = "License manager"
$UnknownApp                         = "Unknown application"
$System                             = "System"
$BetaForumLinkCaption               = "Application Beta version forum"
$BetaForumLinkSuffix                = "16"
$LinkProdStateSomeSkipped           = "Restore hidden messages"
$LinkStartAntiSpamTrainingWizard    = "Training Wizard"
$LinkFirewallUnBlock                = "Unblock network traffic"
$UnlockFileMsg                      = ". Remove file write protection for further"
$KavDescr_prot                      = switch("kis", "ProductTitleLong", "") + " contains fully-functional versions of the " + $SystemWatch + ", " + $ids + " and " + $ContentFilter + " components, which together provide total control of both system and data."
CanDeleteArchive                    = "Are you sure you want to completely delete the archive file\n" + ArchiveObject + "?"
CanDeleteArchive.caption            = $ProductName
$LinkAutoUpdateTurnOn               = "Enable automatic update"
$VirusListName                      = "viruslist.com"
$VirusListLink                      = "http://www.viruslist.com/"

$ScanInfo = "Scanned, objects/sec."
$Threats="Threats"
$Reports="Reports"
$FileAntivirus="File Anti-Virus"
$FileAntivirusDesc="Protects computer’s file system against viruses and other malware"
$MailAntivirus="Mail Anti-Virus"
$MailAntivirusDesc="Scans incoming and outgoing mail messages for the presence of malicious objects"
$WebAntivirus="Web Anti-Virus"
$WebAntivirusDesc="Scans HTTP traffic for the presence of malicious and unwanted objects"
$IMAntivirus="IM Anti-Virus"
$IMAntivirusDesc="Scans incoming and outgoing IM messages for the presence of malicious and unwanted objects"
$AppCtrlDescription="Monitors activity of all applications and processes on your computer"
$Pdm="Proactive Defense"
$PdmDesc="Preventive protection against both known and unknown threats"
$Hips="Application Control"
$Firewall="Firewall"
$FirewallDesc="Filters all network activities to ensure security on local networks and the Internet"
$Ids="Network Attack Blocker"
$IdsDesc="Protection of your computer against all actual kinds of network attacks"
$Antispam="Anti-Spam"
$AntispamDesc="Scans incoming messages for the presence of spam"
$NetMonitor="Network Monitor"
$NetMonDesc="Gathers real time information about network activities"
$AdBlocker="Anti-Banner"
$AdBlockerDescr="Blocks advertisements presented as banners on web sites and user interfaces of some applications"
$ParCtl="Parental Control"
$ParCtlDesc="Restricts and tracks access to Internet resources, email, chat, and more."
$antiphishing="Anti-Phishing"
$antiphishingDescr="Filtering access to phishing web sites and preventing phishing attacks"
$antispy="Anti-Spy"
$OnText="On"
$OffText="Off"
$prot_ok  = "Your computer is protected"
$prot_no  = "Your computer security is at risk"
$notInstall = "Component is not installed"
$Databases="Application databases: "
$VkbdDesc  = "Virtual Keyboard protects personal information such as passwords from Keyloggers."
$ParctlDesc  = "The component controls other users' activity on your computer when you are absent"
$Extras     = "Additional"
$Sniffer = "Network packet analysis"

$Task_IeWizard = "Tune Up your Browser Settings"
$Task_TroubleshootWizard = "Microsoft Windows Settings Troubleshooting"
$Task_PrivacyCleanerWizard = "Erase Your Activities History"

$JoinKaspNet = "You can help us to fight against viruses "
$JoinKaspNetText = "Participate in Kaspersky Security Network"
$JoinKaspNetDesc = "Kaspersky Security Network is a service aimed at fast and effective detection and neutralization of new threats."

; перенос в зависимости от языка м.б. разным
$PersonalSecurity = "Files and private\ndata protection"
$SystemSecurity = "System\nSecurity"
$OnlineSecure = "Online Security"

ProductRepairConfirmation =  "Update of application databases and program modules can probably fix the problem. You are advised to run updates and then restore " + $ProductName + " if it does not help. To restore the application it is necessary to unload " + $ProductName + " and run setup wizard. Are you sure you want to restore the application?"
ProductRepairConfirmation.caption = $ProductNameLong

$KAVhint = "This component is included in " + switch("kis", "ProductTitleLong", "") + " only"

$RunningInSandbox = "Application is running in safe mode"

[MainWindow.Protection_WorkArea_Statistics_StatList]
DetectType  = "Threats type"
Treated     = "Processed"
Total       = "Total"

[MainWindow.Protection_Filters]
AllItems    = "Do not group"
ByTask      = "Group by task"
ByApp       = "Group by application"

;-------------------------------- Tasks --------------------------------

[Task.SecurityWizard]
@.Icon = "Security Analyzer"

[Task.IeWizard]
@.Icon = "Browser Configuration"

[Task.TroubleshootWizard]
@.Icon = "System Restore"

[Task.PrivacyCleanerWizard]
@.Icon  = "Privacy Cleaner"
@.Desc  = "Start this Wizard if the system continues to work unstable after malware detection and removal."

[Task.RescueDiskWizard]
@.Icon = "Rescue Disk"

[Task.TrainWizard]
@.Icon  = "Anti-Spam: training"
@.Desc  = "This Wizard will help you to increase spam detection rate and to decrease a number of false positives."

[Task.VKeyboard]
@.Icon  = "Virtual keyboard"
@.Desc  = "Virtual keyboard protects all information entered from it against keyloggers."

[Task.NetMon]
@.Icon = "Network\nMonitor"

[Task.Sniffer]
@.Icon = "Network packet analysis"

[s_ProtectionBannerText]
#eProtStateNormal   = "Your computer is protected"
#eProtStateCrit
#eProtStateWarn     = "Your computer security is at risk"

[s_ProductEventSeverityText]
#eNotifySeverityCritical
#eNotifySeverityError       = "Critical event"
#eNotifySeverityImportant   = "Important event"
def                         = "Information event"

[s_SubscriptionStatus]
#ssExpDateUnknown      = "To be defined later"
#ssHasExpDateActivated = "Subscription is activated"
#ssHasExpDateProlonged = "Subscription is renewed"
#ssHasExpDateCanceled  = "Subscription is cancelled"
#ssUnlimitedActivated  = "Subscription is activated"
#ssUnlimitedProlonged  = "Subscription is renewed"
#ssGracePeriod         = LicInfo.KeyInfo.KeyType == #ektSubscription ? "Subscription has expired. You have " + f_n_days_remaining(LicInfo.SubscriptionInfo.ToleranceDays) + " left to renew subscription" : "Subscription has expired. You have " + f_n_days_remaining(LicInfo.SubscriptionInfo.ToleranceDays) + " left until protection is disabled. To renew subscription, please contact your subscription provider."
#ssExpired             = LicInfo.KeyInfo.KeyType == #ektSubscription ? "Subscription has expired. Subscription renewal is unavailable" : "Subscription has expired. Protection is disabled. To renew subscription, please contact your subscription provider"
#ssNotYetSuspended     = "Subscription is suspended"
#ssSuspended           = "Subscription is suspended. Protection is disabled"
#ssUnlimitedResumed    = "Subscription is resumed"

[s_SubscriptionExpDate]
#ssExpDateUnknown      = "To be defined later"
#ssUnlimitedActivated  = "Active"
#ssUnlimitedProlonged  = "Active"
#ssUnlimitedResumed    = "Active"
def                    = date(LicInfo.SubscriptionInfo.ExpDate)

[s_SubscriptionStatus2]
#ssExpDateUnknown      = "Subscription status will be defined later."
#ssHasExpDateActivated = "Subscription is activated."
#ssHasExpDateProlonged = "Subscription is renewed."
#ssHasExpDateCanceled  = "Subscription is cancelled."
#ssUnlimitedActivated  = "Subscription is activated."
#ssUnlimitedProlonged  = "Subscription is renewed."
#ssGracePeriod         = LicInfo.KeyInfo.KeyType == #ektSubscription ? "Subscription has expired. You have " + f_n_days_remaining(LicInfo.SubscriptionInfo.ToleranceDays) + " left to renew subscription." : "Subscription has expired. You have " + f_n_days_remaining(LicInfo.SubscriptionInfo.ToleranceDays) + " left until protection is disabled. To renew subscription, please contact your subscription provider."
#ssExpired             = LicInfo.KeyInfo.KeyType == #ektSubscription ? "Subscription has expired. Subscription renewal is unavailable." : "Subscription has expired. Protection is disabled. To renew subscription, please contact your subscription provider"
#ssNotYetSuspended     = "Subscription is suspended."
#ssSuspended           = "Subscription is suspended. Protection is disabled."
#ssUnlimitedResumed    = "Subscription is resumed."

[KeysList]
Caption1 = "License information"

[AutoActivateError]
Error    = "Activation with the preinstalled code " + Ins_ActivationCode + "\nhas failed."
Activate = "Please activate manually."

[WaitingForKey]
Text1        = "Internet connection is required"
Text2        = "The following activation code is preinstalled - " + Ins_ActivationCode + ".\nIt will be activated automatically as soon as the Internet connection is available."

[SubscrBlock]
SubscriptionStatus  = "Subscription status:"
SubscriptionFailed.Name  = "Subscription status:"
SubscriptionFailed.Val   = SubscriptionTolerancePassed ? "Renewal is required" : "Renewal error"
SubscriptionExpDate = (SubscriptionStatus != #ssSuspended && SubscriptionStatus != #ssNotYetSuspended)? "Subscription expiration date:" : "Suspend date:"
SubscrTolerancePassed = "Automatic update of subscription status has not been performed.\nPlease update subscription status manually."
SubscrUpdateFailed    = "Automatic update of subscription status failed.\nPlease update subscription status manually."
SubscrFailedReason    = "View error description."

[LicenseExpireDate]
Text1 = "License validity period expires"

[LicenseExpireDays]
TextBefore  = 
TextAfter   = s_daysRemaining(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) +" " + s_LeftForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) + "."

[s_AgoForm]
1   = "Passed "
def = "Passed "

[s_LeftForm]
1       = "remaining"
default = "remaining"

[KeyLimitExceeded]
Text1   = "You have exceeded the maximum number of application copies that can be installed with one license."
Text2   = "Protection of your computer is disabled. You need to purchase a new license in order to resume your computer protection. Do not forget to specify the number of computers on which the application will be installed when purchasing the license."

[LicenseKeys_Body]
KeyLimitExceeded   = "You have exceeded the maximum number of application copies that can be installed with one license."

[LicenseKeys]
@ = "License information"

[LicenseManager]
@ = "License manager"

[LicenseManager_Header]
Caption = "License manager"
Desc    = "The License Manager provides you with current licenses info and helps to renew them or purchase a new one."

[MainWindow.License_Body]
SeeEula     = "View End User License Agreement"

[MainWindow.License_Body_NoKeys]
Desc          = $ProductName + " is not activated. You have to activate the application to enable its full functionality"

[MainWindow.License_Body_Actions]
ReasonsAndSolutions.Name  = "Error description and feasible solutions"
ReasonsAndSolutions.Descr = "Learn why an error has occurred and how to solve the problem"
Update.Name               = f_IsStateActive(Updater.state)? "Stop update" : "Update databases"
Update.Descr              = f_IsStateActive(Updater.state)? "Stop databases update" : "Run databases update"
BuyRenew.Name             = global.LicRenewStatus != 2 ? "Renew license" : "Purchase license"
BuyRenew.Descr            = global.LicRenewStatus != 2 ? "Visit online store to renew the license" : "Visit online store to purchase the license"
ActivateLic.Name          = (global.KeyState&#eKeyTrial)? "Activate commercial license":"Activate new license"
ActivateLic.Descr         = "Run " + $ProductName + " activation wizard"

[MainWindow.License_Body_ActionsSubscr]
ReasonsAndSolutions.Name  = "Error description and feasible solutions"
ReasonsAndSolutions.Descr = "Learn why an error has occurred and how to solve the problem"
Update.Name               = f_IsStateActive(Updater.state)? "Stop update" : "Update databases"
Update.Descr              = f_IsStateActive(Updater.state)? "Stop databases update" : "Run databases update"
UpdateStatus.Name         = "Update subscription status"
ContactProvider.Name      = "Contact your subscription provider"
ContactProvider.Descr     = "Visit subscription provider web site to renew subscription"

[MainWindow.License_Body_Status]
ActiveLicText  = $IsSubscription? "Active subscription:" : "Active license:"
ActiveLic.Name = f_KeyTypeDescription(LicInfo.KeyInfo) + if(!$IsSubscription," for " + LicInfo.KeyInfo.KeyLifeSpan + " " + s_daysRemaining(f_numdeclension(LicInfo.KeyInfo.KeyLifeSpan)))
ActiveLicSubscr.Name = s_LicKeyType(LicInfo.KeyInfo.KeyType) +"."
ReserveLicText = "Additional license: "
ReserveLic.Name = f_KeyTypeDescription(ResLicInfo.KeyInfo) + " for " + ResLicInfo.KeyInfo.KeyLifeSpan + " " + s_daysRemaining(f_numdeclension(ResLicInfo.KeyInfo.KeyLifeSpan))

[MainWindow.License_Body_InfoSubscr]
SubscrTolerancePassed = "Automatic update of subscription status has not been performed.\nPlease update subscription status manually."
SubscrUpdateFailed    = "Automatic update of subscription status failed.\nUpdate subscription status manually."
SubscrFailedReason    = "View error description."


[s_ActivatedSubscr]
#ssGracePeriod = "Grace period: "
#ssExpired = ""
def = "Subscription start date: "

[s_ExpiresSubscrDate]
#ssExpDateUnknown      = ""
#ssUnlimitedActivated  = ""
#ssUnlimitedProlonged  = ""
#ssUnlimitedResumed    = ""
#ssExpired             = ""
def                    = date(LicInfo.LicenseDurationInfo.ExpirationDate)

[s_ProgessSubscr_RT]
#ssExpDateUnknown      = "Unknown"
#ssUnlimitedActivated  = "Active"
#ssUnlimitedProlonged  = "Active"
#ssUnlimitedResumed    = "Active"
def                    = s_LeftForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) + " " + LicInfo.LicenseDurationInfo.DaysTillExpiration + " " + s_daysRemaining(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration))

[s_License_Body_Progress_LT]
#ekirKeyInstallDateInvalid = ""
def  = s_AgoForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysFromActivation)) + (LicInfo.LicenseDurationInfo.DaysFromActivation) + " " + s_daysPast(f_numdeclension(LicInfo.LicenseDurationInfo.DaysFromActivation))

[s_License_Body_Progress_RT]
#ekirKeyInstallDateInvalid = ""
def = s_LeftForm(f_numdeclension(LicInfo.DaysTillExpiration)) + " " + LicInfo.DaysTillExpiration + " " + s_daysRemaining(f_numdeclension(LicInfo.DaysTillExpiration))

[s_License_Body_ProgressSubscr_LT]
#ekirKeyInstallDateInvalid = ""
def = s_AgoForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysFromActivation)) + (LicInfo.LicenseDurationInfo.DaysFromActivation) + " " + s_daysPast(f_numdeclension(LicInfo.LicenseDurationInfo.DaysFromActivation))

[MainWindow.License_Body_Progress]
Activated.Name = "Activation date: "
Expires.Name   = (global.KeyState&(#eKeyExpired|#eKeyTrialExpired))? "Expired: " : "Expires: "
ExpiresSubscr.Name  = if(SubscriptionStatus != #ssExpired,"Expires: ")
Progess.LT = s_License_Body_Progress_LT(LicInfo.InvalidReason)
Progess.RT = s_License_Body_Progress_RT(LicInfo.InvalidReason)
ProgessSubscr.LT = s_License_Body_ProgressSubscr_LT(LicInfo.InvalidReason)

[s_DescrExpiredText]
#ektBeta
#ektTrial
#ektTest        = s_LicenseNoKeyHint(global.LicInfo.FuncLevel, global.KeyState)
;#ektBeta        = "Внимание! Срок действия бета-версии истек. Обновление программы отключено. Предлагаем вам <a onclick(buy(0))>купить полную версию</a>."
;#ektTrial       = "Внимание! Срок действия пробной версии истек. Обновление программы отключено. Предлагаем вам <a onclick(buy(0))>купить полную версию</a>."
;#ektTest        = "Внимание! Срок действия тестовой версии истек. Обновление программы отключено. Предлагаем вам <a onclick(buy(0))>купить полную версию</a>."
#ektOEM
#ektCommercial  = s_LicenseNoKeyHint(global.LicInfo.FuncLevel, global.KeyState)
;#ektCommercial  = "Внимание! Срок действия лицензии истек. Чтобы поддерживать защиту в актуальном состоянии, пожалуйста, <a onclick(buy(1))>обновите лицензию</a>."
#ektSubscriptionProtection
#ektSubscription= (AutoActivationError.ErrorCode == 0 && SubscriptionTolerancePassed)? "Attention! Automatic update of subscription status was not performed. Please update it manually." : ( (AutoActivationError.ErrorCode != 0)? "Attention! Automatic update of subscription status failed. Please update it manually.": "" + $ProductName_GEN +" license has expired.")

[s_DescrValidText]
#ektBeta        = "Attention! Beta license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You are advised to purchase a <a onclick(buy(0))>full-function version</a>."
#ektTrial       = "Attention! Trial license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You are advised to purchase a <a onclick(buy(0))>full-function version</a>."
#ektTest        = "Attention! Test license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You are advised to purchase a <a onclick(buy(0))>full-function version</a>."
#ektOEM
#ektCommercial
#ektSubscriptionProtection
#ektSubscription= $ProductName + " license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". To renew the license, please click <a onclick(buy(1))>here</a>."

[s_DescrTextForReason]
#ekirValid = (!global.KeyState || (global.KeyState & (#eKeyTrial|#eKeyWillBeExpired|#eKeyAboutExpiration)) )? switch(LicInfo.KeyInfo.KeyType,"s_DescrValidText") : ( (global.KeyState & #eKeyLimited)? "Attention! You have exceeded the maximum number of application copies that can be installed with one license." : "" )
#ekirTrialPeriodIsOver
#ekirExpired = switch(LicInfo.KeyInfo.KeyType,"s_DescrExpiredText")
#ekirKeyInstallDateInvalid = "Attention! The update feature is disabled"
def="Attention! " + s_KeyInvalidReason(LicInfo.InvalidReason)

[s_AboutExpirationText]
#ektBeta        = "Attention! Beta license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You can purchase a full-functional version."
#ektTrial       = "Attention! Trial license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You can purchase a full-functional version."
#ektTest        = "Attention! Test license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+". You can purchase a full-functional version."
#ektOEM
#ektCommercial
#ektSubscriptionProtection
#ektSubscription= "The license expires "+f_n_days_ex(global.LicInfo.DaysTillExpiration)+"."

[MainWindow.License_Body_Descr]
Text = switch(global.LicInvalidReason,"s_DescrTextForReason")

[MainWindow.License_Body_Activation]
ActLic.Name = "Activate new license"
ActLic.Descr = "Run the Activation wizard"

[s_ActivationSubscr_Caption]
;#ssExpDateUnknown = "Обновить статус подписки"
;def = "SubscriptionStatus: " + SubscriptionStatus
def = $IsContactSubscrProvider? "Contact subscription provider" : "Update subscription status"

[s_ActivationSubscr_Description]
#ssExpDateUnknown = "In order to define subscription type, please update its status"
def = "Manual update of subscription status"
;def = $IsContactSubscrProvider? "Посетите сайт постащика подписки для продления подписки": "Ручное обновление статуса подписки "

[MainWindow.License_Body_ActivationSubscr]
Descr = ($IsContactSubscrProvider)? "If you have already renewed subscription, please <a onclick(update_subscr_status())>update its status</a>." : "Contact the <a onclick(url($KeyProviderLinkForText)))>subscription provider</a> to get more information."

[MainWindow.License_Body_Bottom]
;BuyRenew    = global.LicRenewStatus != 2 ? "Продлить лицензию" : "Купить лицензию"
;MergeDelete = "Объединить или удалить лицензию"
;UpdateSubscr = "Обновить статус подписки"
;DeleteSubscr = "Удалить лицензию"
;DeleteLic    = "Удалить лицензию"

[f_KeyTypeDescription2]
p_KeyInfo
ret         = "for " + p_KeyInfo.LicenseCount + " " + s_ComputersForm(f_numdeclension(p_KeyInfo.LicenseCount))

[s_LicKeyType2]
#ektBeta         = "Beta license: "
#ektTrial        = "Trial license: "
#ektTest         = "Test license: "
#ektOEM          = "OEM license: "
#ektCommercial   = "Commercial license: "
#ektSubscription = "Commercial with subscription: "
#ektSubscriptionProtection = "Commercial with protection subscription: "
default          = "Unknown type"

[MainWindow.License_WorkArea_Home_Actions]
$LicDelete      = "&Delete"
$LicAdd         = "&Activate the\napplication"
$LicAddDelete   = "&Merge/delete"
$LicRefreshDelete = "&Update status\nor delete"

SubscrProvider.Name = "Subscription provider"
BuyRenew.Name   = global.LicRenewStatus != 2 ? "Renew\nlicense" : "Purchase\nlicense"
SeeEula.Name    = "View End User License Agreement"

[MainWindow.Protection_WorkArea_Home_Stat]
Summary = ctl.TotalCounter.ScannedTotal.value + " objects totally processed. Threats detected:"

[EulaInfo]
@ = "End User License Agreement"

[s_ProtState]
#ProdStateAllOk = "Protection is enabled"
def             = s_ProdState(@)

[s_ProdState]
#ProdStateKeyTrial                  = "Trial version of the application is installed"
#ProdStateProductNotActivated       = "Application is not activated"
#ProdStateProductNotAutoRun         = "Application autorun is disabled"
#ProdStateProductNotProtected       = "Self-Defense is disabled"
#ProdStateKeyAboutExpiration        = "License validity period expires"
#ProdStateProductIsBeta             = "You are using beta-version of the application"
#ProdStateKeyExpired                = $IsSubscription? "Subscription has expired" : "License has expired"
#ProdStateKeyWillBeExpired          = "License validity period expires soon"
#ProdStateKeyTrialExpired           = "Trial license validity period has expired"
#ProdStateKeyBlocked                = "Key blocked"
#ProdStateNoKeys                    = "Application is not activated"
#ProdStateKeyWaitActivation         = "Internet connection is required for activation"
#ProdStateKeyInvalid                = s_ProdStateKeyInvalid(LicInfo.InvalidReason)
#ProdStateKeyLimited                = "A license agreement has been violated"
#ProdStateKeyGracePeriod            = "Subscription has expired"
#ProdStateKeyUpdateFailed           = "Automatic subscription renewal has not been performed"
#ProdStateKeySuspended              = "Subscription suspended from " + date(LicInfo.SubscriptionInfo.ExpDate)
#ProdStateHighRiskTasksNotRunning
#ProdStateTasksNotRunning           = "Some protection components are not running"
#ProdStateTasksMalfunction          = "Some components cannot be enabled"
#ProdStateHighRiskTasksDisabled
#ProdStateTasksDisabled             = "Some components are disabled"
#ProdStateProtectionSafeMode        = "System runs in safe mode"
#ProdStateProtectionNotInstalled    = "Protection is not installed"
#ProdStateBasesNotValid             = "Databases are invalid"
#ProdStateBasesOutOfDate            = "Databases are out of date"
#ProdStateBasesNotActual            = "Databases are obsolete"
#ProdStateUpdateNeedReboot          = "It is necessary to restart the computer after update"
#ProdStateBasesCorrupted            = "Databases are corrupted"
#ProdStateBasesCacheResizeFail 		= "Not enough disk space for copy databases"
#ProdStateUpdateNotAuto             = "Automatic updates are disabled"
#ProdStateMyComputerNotScanned      = "Full computer scan has not been performed"
#ProdStateOnDemandTaskRunning       = "Virus scan task is running"
#ProdStateProtectionNotRunning      = "Protection is not running"
#ProdStateProtectionDisabled        = "Protection is disabled"
#ProdStateThreatsMalwareUntreated   = "Threats have been detected"
#ProdStateThreatsRiskwareUntreated  = "Potentially unwanted software detected"
#ProdStateThreatsNeedReboot         = "It is necessary to restart the computer"
#ProdStateAntiSpamNeedTraining      = "Anti-Spam: training required"
#ProdStateFirewallBlockAll          = "Block network traffic"
#ProdStateSomeSkipped               = "Some messages are hidden"
#ProdStateAllOk                     = $IsRD || $IsKAT ? "No threats detected" : "Your computer is protected"
def                                 = "PRODUCT_STATE(" + @ + ")"

[s_ProdState_Threats]
#ProdStateAllOk = "No active threats"
def             = s_ProdState(@)

[s_ProdStateKeyInvalid]
#ekirInvalidBlacklist       = "Black list is corrupted"
#ekirIllegalUpdate          = "Database date does not correspond to the license validity period"
#ekirInconsistentUpdate     = "Databases are corrupted"
#ekirKeyCreationDateInvalid = "Incorrect key creation date"
#ekirKeyInstallDateInvalid  = "Incorrect key activation date"
default                     = "Invalid key"

[ProdState_Description]
#ProdStateKeyTrial                  = "Attention! You are using a trial version of " + $ProductName_GEN + "." + f_n_days_remaining(LicDaysTillExpiration) + " are left till the end of the trial period. You are advised to purchase a commercial version of the application or " + $ProductName + " will stop working after the remaining days pass."
#ProdStateProductNotActivated       = $ProductName + " is not activated. It means that application database and modules updates are unavailable. You have to activate the application to enable its full functionality. Activate the product using the activation code provided to you during purchase. If you do not have the activation code, please contact your distributor, Technical Support service or purchase a new license."
#ProdStateProductNotAutoRun         = "Autorun of " + $ProductName_GEN + " at computer startup is disabled. It means that you will have to run the application manually after every computer reboot to ensure protection of your data. You are advised to enable autorun of the application."
#ProdStateProductNotProtected       = "Self-Defense blocks attempts of other applications to modify the files" + if(!$IsKAT, " and registry keys") + " created during " + $ProductName + " installation. The feature is currently disabled and therefore the application may be rendered inoperable. You are advised to enable Self-Defense."
#ProdStateProductIsBeta             = "Beta version of " + $ProductName_GEN + " contains full functionality but is not a finished version of a product and it can contain errors, failures or defects. Please report the detected problems to corresponding sections of our forum."
#ProdStateKeyAboutExpiration        = "Attention! Your license will expire in " + f_n_days_past(LicDaysTillExpiration) + ". You are advised to renew your license. Otherwise application updates and technical support will become unavailable after the remaining days pass."
#ProdStateKeyExpired                = "Attention! Your license has expired. It means that application database and modules update as well as technical support are not available. To resume full application functionality it is necessary to renew the license."
#ProdStateKeyWillBeExpired          = "Attention! Your license expires soon. You are advised to renew your license in advance. Otherwise application updates and technical support will become unavailable after the remaining days pass."
#ProdStateKeyTrialExpired           = "Attention! Your trial license has expired. Protection of your computer has been disabled. To resume protection of your computer, you need to purchase a commercial license from Kaspersky Lab or our distributors. The trial license cannot be reused."
#ProdStateKeyBlocked                = "Attention! Your key has been blocked. Only updates of the black list are available. The key might be blocked because you have purchased an illegal copy of " + $ProductName + ". You are advised to contact the Technical Support Service to check the reason for key blocking. Purchase a new license in order to restore the functionality of the application."
#ProdStateNoKeys                    = $ProductName + " is not activated. To run application in full-functional mode you have to activate it. For this purpose use the activation code provided to you during purchase. If you do not have the activation code, please contact your distributor or purchase a new license."
#ProdStateKeyWaitActivation         = "The following activation code is preinstalled - " + Ins_ActivationCode + ". It will be activated automatically as soon as the Internet connection is available."
#ProdStateKeyInvalid                = s_ProdStateKeyInvalid_Description(LicInfo.InvalidReason)
#ProdStateKeyLimited                = "You have exceeded the maximum number of computers on which " + $ProductName + " can be installed with your license. Protection is disabled. You need to purchase a new license in order to resume computer protection. Do not forget to specify the number of computers on which the application will be installed when purchasing the license."
#ProdStateKeyGracePeriod            = "Attention! Subscription has expired. Grace period is applied, during which you can renew subscription."
#ProdStateKeyUpdateFailed           = "Attention! Automatic update of subscription status has not been performed. Please update subscription status manually."
#ProdStateKeySuspended              = "Attention! Subscription is suspended from " + date(LicInfo.SubscriptionInfo.ExpDate) + ". Protection of your computer is disabled. In order to enable computer protection it is necessary to resume subscription and to update its status manually."
#ProdStateHighRiskTasksNotRunning
#ProdStateTasksNotRunning           = "Some protection components are stopped.  " + $ProductName + " cannot provide complete protection. You are advised to enable all protection components."
#ProdStateTasksMalfunction          = "Some protection components failed to start automatically. " + $ProductName + " cannot provide complete protection. Information about errors can be found in the report for the corresponding protection component. If you cannot find out the error reason yourself, please contact Technical Support Service for problem investigation."
#ProdStateHighRiskTasksDisabled
#ProdStateTasksDisabled             = "Some protection components are disabled. " + $ProductName + " cannot provide complete protection. You are advised to enable all protection components."
#ProdStateProtectionSafeMode        = "Some protection components were disabled to ensure normal computer operation in the safe mode. If you wish to resume the activity of all protection components, you should restart the computer and select normal startup instead of safe mode."
#ProdStateProtectionNotInstalled    = "Components providing protection are not installed. You can run scan tasks and update the application databases only. In order to provide full application functionality you need to install the protection components."
#ProdStateBasesNotValid             = "The databases that the application uses to protect your computer are invalid. " + if($IsRD || $IsKAT, s_BundleProductBasesStateText(env("ProductType")), "One of the databases corruption reason is incorrect update. It is recommended to update the databases again or roll back to their previous version.")
#ProdStateBasesNotActual            = "The databases that the application uses to protect your computer are obsolete. " + if($IsRD || $IsKAT, s_BundleProductBasesStateText(env("ProductType")), "You are advised to update databases as soon as possible.")
#ProdStateBasesOutOfDate            = "The databases that the application uses to protect your computer are out of date.  " + if($IsRD || $IsKAT, s_BundleProductBasesStateText(env("ProductType")), "You are advised to update the application databases as soon as possible.")
#ProdStateUpdateNeedReboot          = "Your computer should be restarted in order to complete the installation of new databases and application modules. Otherwise the updates will not be applied and will not be used in application operation."
#ProdStateBasesCorrupted            = " The databases that the application uses to protect your computer are corrupted. " + if($IsRD || $IsKAT, s_BundleProductBasesStateText(env("ProductType")), "One of the databases corruption reason is incorrect update. It is recommended to update the databases again or roll back to their previous version.")
#ProdStateBasesCacheResizeFail      = "Not enough disk space for temporary storing databases. Please clear up some space and restart " + $ProductName
#ProdStateUpdateNotAuto             = "Attention! The application could not be updated automatically. Please check the update parameters and proxy server settings."
#ProdStateMyComputerNotScanned      = "Your computer has never been scanned for the presence of dangerous objects since the moment of application setup. You are advised to perform full computer scan as soon as possible."
#ProdStateOnDemandTaskRunning       = "Task \"" + format_struct(profile(ScanningTaskId), "ProfileName") + "\" is currently being executed on your computer. You can view the report, created during task execution, in order to study the process of virus scan."
#ProdStateProtectionNotRunning      = "Protection of your computer is disabled. Information on the computer can be infected, damaged or stolen. You are advised to resume computer protection."
#ProdStateProtectionDisabled        = "Protection of your computer is disabled. Information on the computer can be infected, damaged or stolen. You are advised to enable computer protection."
#ProdStateThreatsMalwareUntreated   = "Malicious software has been detected on your computer. You are advised to neutralize it as soon as possible."
#ProdStateThreatsRiskwareUntreated  = "Legal software that can be used by criminals for damaging your computer or personal data has been detected on your computer. You are advised to neutralize it as soon as possible."
#ProdStateThreatsNeedReboot         = "Your computer should be restarted in order to complete the disinfection of malicious object. Please restart the computer. After restart the disinfection will be completed automatically."
#ProdStateAntiSpamNeedTraining      = "Training on " + (Anti_Spam.NeedMoreSpamToTrain ? (Anti_Spam.NeedMoreSpamToTrain + " spam emails is required") : (Anti_Spam.NeedMoreHamToTrain + " not spam emails is required")) + "."
#ProdStateFirewallBlockAll          = "All network traffic is currently being blocked on your computer..."
#ProdStateSomeSkipped               = if (Protection.state == #StateRunning, "Protection components are enabled on your computer. ") + if (HipsTask.state == #StateRunning, "Unauthorized attempts to access your data are being blocked. Modification of system objects is monitored by " + $ProductName_GEN + ". ") + "Databases release date: " + datetime(AVService.BasesDate) + "."
default                             = if (Protection.state == #StateRunning, "All protection components are enabled on your computer. ") + if (HipsTask.state == #StateRunning, "Unauthorized attempts to access your data are being blocked. Modification of system objects is strictly monitored by " + $ProductName_GEN + ". ") + "Databases release date: " + datetime(AVService.BasesDate) + "."

[s_BundleProductBasesStateText]
rd = "It is recommended to use the latest version of Kaspersky Rescue Disk."
kat = "It is recommended to use the latest version of Kaspersky Virus Removal Tool."

[s_ProdStateKeyInvalid_Description]
#ekirInvalidBlacklist       = "Attention! Black list of keys is corrupted. In particular, it can be damaged because of an incorrect update. You are advised to update the databases again or to roll back to their previous version."
#ekirIllegalUpdate          = "Attention! Database date is later than the license expiration date. In this case protection of your computer and application updates are unavailable. To resume application operation you need to purchase a new license from Kaspersky Lab or our distributors."
#ekirInconsistentUpdate     = "Attention! Application databases are corrupted. In particular, they can be damaged because of an incorrect update. You are advised to update the databases or roll back to their previous version."
#ekirKeyCreationDateInvalid = "Incorrect key creation date.\nSystem date has been changed."
#ekirKeyInstallDateInvalid  = "Incorrect date of application activation.\nSystem date was possibly changed."
default                     = "The license is no longer valid. Computer protection has been disabled. Please contact Kaspersky Lab Technical Support service or the distributor of the application."

;-------------------------------- AvzTroubleshootWizard --------------------------------

[Global]
$AvzWizardErr = state == #StateFailed ? ("Wizard failure: " + s_ProfileError(type, lastErr))

[AvzWizard_ProgressVul]
CurObject.Name = "Object:"

[AvzWizard_Error]
@           = a(lc) sz(p,a) ext(1)
Text        = state == #StateFailed ? "Wizard completed with error: " + s_AvzError(lastErr) : "Wizard completed successfully"
Exit.Name   = "&Exit"
Exit.Descr  = "Wizard completion"

[s_AvzSeverity]
0   = "Corrected"
1   = "Additional actions"
2   = "Recommended actions"
3   = "Strongly recommended actions"

[AvzTroubleshootWizard]
@ = "System Restore Wizard"

[AvzTroubleshootWizardPages]
Welcome.Name        = "General information"
Welcome.Descr       = "Welcome to System Restore Wizard!"
Search.Name         = if (Rollback, "Changes search", "Problems search")
Search.Descr        = "The system is being checked, please wait..."
Search.Body.Intro   = if (Rollback, "Search for damaged and irregular system settings is in progress. Such damaged settings can be caused by malware activity, system failures and incorrectly functioning system utilities or optimization software.\n\nSearch can take a few minutes. Please wait.")
Problems.Name       = if (Rollback, "Changes search completed", "Check completed")
Problems.Descr      = if (Rollback, "Select changes to be rolled back.", "Select problems to be fixed.")
Fix.Name            = if (Rollback, "Changes rollback", "Troubleshooting")
Fix.Descr           = if (Rollback, "Changes are being rolled back, please wait...", "System parameters are being restored, please wait...")
Fix.Body.Intro      = if (Rollback, "Rollback is in progress.", "Problems fix is in progress")
Finish.Name         = $AvzWizardErr : if (Rollback, (ScriptMode == 5 ? "Rollback completed successfully" : "No changes to be rolled back detected"), (ScriptMode == 2 ? "Troubleshooting completed" : "No troubles detected"))
Finish.Descr        = "Security Analyzer has finished system analysis."

[AvzTroubleshootWizard_Welcome]
Start         = "Search for problems related to malware activity"
StartDescr    = "System Restore Wizard searches for damaged and irregular settings. Such damaged settings can be caused by malware activity, system failures and incorrectly functioning system utilities or optimization software."
Rollback	  = "Changes rollback"
RollbackDescr = "Rollback of changes made previously by the System Restore Wizard"

[AvzTroubleshootWizard_Problems]
Fix.Name    = if (Rollback, "Roll back", "Fix")
Fix.Descr   = if (Rollback, "Roll back selected changes", "Roll back to default values")

[AvzTroubleshootWizard_Problems_List]
Trouble = "Problem"
SideEff = "Consequence"

[AvzTroubleshootWizard_Finish]
Intro           =  "The System Restore Wizard completed. If any problems occur visit our Support Forum or contact the Technical Support Service."
Reboot     = "Restart computer"

;-------------------------------- AvzPrivacyCleanerWizard --------------------------------

[AvzPrivacyCleanerWizard]
@ = "Privacy Cleaner Wizard"

[AvzPrivacyCleanerWizardPages]
Welcome.Name        = "General information"
Welcome.Descr       = "Welcome to Privacy Cleaner Wizard!"
Search.Name         = if (Rollback, "Changes search", "Activity signs search")
Search.Descr        = "The system is being checked, please wait..."
Search.Body.Intro   = if (Rollback,  "Search for various protocols, lists of recent commands and accessed files, cookies, caches, logs and other data, which can serve as traces of user activity on that computer.\n\nSearch can take a few minutes. Please wait.")
Problems.Name       = if (Rollback, "Changes search completed", "Activity signs search completed")
Problems.Descr      = if (Rollback, "Changes available for rollback detected.",  "User activity traces detected.")
Fix.Name            = if (Rollback, "Changes rollback",  "Activity traces cleanup")
Fix.Descr           = if (Rollback, "Changes rollback is in progress, please wait...", "Activity traces cleanup is in progress, please wait...")
Fix.Body.Intro      = if (Rollback, "Changes rollback is in progress.", "Removal of user activity traces is in progress.")
Finish.Name         = $AvzWizardErr : if (Rollback, (ScriptMode == 5 ? "Rollback completed successfully" : "No changes to be rolled back detected"), (ScriptMode == 2 ? "Activity traces cleanup completed" : "No user activity traces detected"))
Finish.Descr        = "The Wizard is about to complete."

[AvzPrivacyCleanerWizard_Welcome]
Intro			= "Privacy Cleaner Wizard searches for various protocols, lists of recent commands and accessed files, cookies, caches, logs and other data, which can serve as traces of user activity on that PC. You are advised to close the web browser before running the wizard.\n\nPlease note while using the wizard that removal of such activity traces can cause inconveniences for users. E.g., removal of cookies will reset all the settings saved by the web sites visited earlier."
Rollback		= "Changes rollback"
Start		=  "Diagnostics of user activity traces "

[AvzPrivacyCleanerWizard_Problems]
Fix.Name    = if (Rollback, "Roll back", "Clean up")
Fix.Descr   = if (Rollback, "Selected changes rollback", "Fixing selected problems")

[AvzPrivacyCleanerWizard_Problems_List]
Trouble = "Problem"
SideEff = "Consequence"

[AvzPrivacyCleanerWizard_Finish]
Intro           =  "Privacy Cleaner Wizard completed. If any problems occur visit Support Forum or contact the Technical Support Service."
RunOnAppExit = "Clean activity traces every time on " + $ProductName + " exit"
Reboot	 = "Restart computer"

;-------------------------------- AvzSecurityTweakerWizard --------------------------------

[AvzSecurityTweakerWizard]
@ = "Browser Configuration Wizard"

[AvzSecurityTweakerWizardPages]
Welcome.Name        = "General information"
Welcome.Descr       = "Welcome to Browser Configuration Wizard!"
Search.Name         = if (Rollback, "Changes search", "Problems search")
Search.Descr        = "The system is being checked, please wait..."
Search.Body.Intro   = if (Rollback, "Search for damaged and irregular system settings is in progress. Such damaged settings can be caused by malware activity, system failures and incorrectly functioning system utilities or optimization software.\n\nSearch can take a few minutes. Please wait.")
Problems.Name       = if (Rollback, "Changes search completed", "Problems search completed")
Problems.Descr      = if (Rollback, "Changes available for rollback detected.", "You are advised to perform the following actions fix problems.")
Fix.Name            = if (Rollback, "Changes rollback", "Fixing problems")
Fix.Descr           = if (Rollback, "Changes rollback is in progress, please wait...", "Browser configuration is in progress, please wait...")
Fix.Body.Intro      = if (Rollback, "Changes rollback is in progress.", "Browser settings troubleshooting is in progress.")
Finish.Name         = $AvzWizardErr : if (Rollback, (ScriptMode == 5 ? "Changes rollback completed" : "No changes available for rollback detected"), (ScriptMode == 2 ? "Configuring completed" : "No problems in browser settings detected"))
Finish.Descr        = "The Wizard is about to complete."

[AvzSecurityTweakerWizard_Welcome]
Intro       = "Browser Configuration Wizard analyzes browser settings estimating them first of all from security viewpoint. Please keep in mind that certain settings can result in troubles while browsing specific web sites (e.g., if the sites use ActiveX). To solve the problem, addition of such sites to the list of trusted servers can be used."
Warning     = "  Please close all running copies of the browser before starting the diagnostics."
Rollback	= "Changes rollback"
Start = "Microsoft Internet Explorer diagnostics"

[AvzSecurityTweakerWizard_Problems]
Fix.Name    = if (Rollback, "Roll back", "Fix")
Fix.Descr   = if (Rollback, "Selected changes rollback", "Performing actions on problems fixing")

[AvzSecurityTweakerWizard_Problems_List]
Trouble = "Problem"
SideEff = "Consequence"

[AvzSecurityTweakerWizard_Finish]
Intro           = if (Rollback,"Rollback completed. If problems were not solved visit our Support Forum or contact the Technical Support Service", "Browser Configuration Wizard completed. If any problems occurred during working in the Internet you can roll back changes. To roll back changes run the wizard again and select \"Rollback\" action.")
Reboot     = "Restart computer"

;-------------------------------- AvzSecurityAnalyzerWizard --------------------------------

[Global]
$AvzScriptUrl               = "http://avptool.virusinfo.info/en/AVPTool_helpdesk.htm"
AvzAlreadyRunning.caption   = "One of the Wizards is already running"
AvzAlreadyRunning           = "Please close the currently running Wizard before starting the new one."

[AvzSecurityAnalyzerWizard]
@ = "Security Analyzer Wizard"

[AvzSecurityAnalyzerWizardPages]
Welcome.Name            = "General information"
Welcome.Descr           = "Welcome to Security Analyzer Wizard!"
Search.Name             = "Application vulnerability analysis"
Search.Descr            = "Applications are being checked, please wait..."
Search.Body.Intro       = "Search for vulnerable applications is in progress.\n\nSearch can take a few minutes. Please wait."
Vulnerab.Name           = "Vulnerable applications"
Vulnerab.Descr          = "Scan for vulnerable applications completed."
Problems.Name           = if (RunMode == 2, "Changes search completed", "Problems search completed")
Problems.Descr          = if (RunMode == 2, "Changes available for rollback detected.", "Problems detected")
Fix.Name                = if (RunMode == 2, "Changes rollback", "Vulnerability elimination")
Fix.Descr               = if (RunMode == 2, "Rollback is in progress, please wait...", "Vulnerability elimination is in progress, please wait...")
Fix.Body.Intro          = if (RunMode == 2, "Rollback is in progress.", "Damages in system and browser fixing is in progress.")
Finish.Name             = $AvzWizardErr : if (RunMode == 2, (ScriptMode == 5 ? "Changes rollback completed" : "No changes available for rollback detected"), (Danger > 1 ? "Script execution completed" : "No threats detected"))
Finish.Descr            = "The Wizard is about to complete."

[AvzSecurityAnalyzerWizard_Welcome]
Intro       = "Security Analyzer Wizard performs system inspection including search for application vulnerabilities, damaged and irregular OS and browser settings. Such damaged settings can be caused by malware activity, system failures and incorrectly functioning system utilities or optimization software."
Scan     = "Start analysis"
LastScanResult  = "Last scan results" + if(Scan_Vulnerabilities.state != #StateNotStarted," (" + s_ProfileState(Scan_Vulnerabilities.state, #false) + ")")
Rollback  = "Rollback of changes in system settings"

[AvzSecurityAnalyzerWizard_Vulnerab]
Count           = Threats.size() ? "Number of vulnerable applications: " + Threats.size() + "" : "No vulnerable applications detected"
Rescan.Name     = "Repeated analysis"
Rescan.Descr    = "Rescan for vulnerable applications"
Next.Name       = "System analysis"
Next.Descr      = "Computer security diagnostics"

[AvzSecurityAnalyzerWizard_Vulnerab_AppList]
App     = "Application"
Todo    = "Solution"
Danger  = "Criticality"

[AvzSecurityAnalyzerWizard_Problems]
Fix.Name    = if (RunMode == 2, "Rollback", "Fix")
Fix.Descr   = if (RunMode == 2, "Rollback of the selected changes", "Fixing selected problems")

[AvzSecurityAnalyzerWizard_Solution_List]
Trouble = "Problem"
SideEff = "Consequence"

[AvzSecurityAnalyzerWizard_Script]
Web.Name    = "Find cure script"
Web.Descr   = "Obtaining a cure script from virusinfo.info forum"
Fix.Name    = "Run cure script"
Fix.Descr   = "Executing the script for eliminating security problems"

[AvzSecurityAnalyzerWizard_Script_Info]
Lable = "Enter the script text or paste it from the clipboard"

[AvzSecurityAnalyzerWizard_ScriptError]
Reedit.Name     = "Change script"
Reedit.Descr    = "Correct errors in the script and run it again"

[AvzSecurityAnalyzerWizard_Finish]
Reboot     = "Restart computer"

[s_VulDanger]
1   = "Highly dangerous"
2   = "Very dangerous"
3   = "Moderately dangerous"
4   = "Low-hazard"
def = "Not dangerous"

;-------------------------------- AvzCollectSysInfo --------------------------------

[AvzCollectSysInfoWizard]
@ = "Gathering system information"

[AvzCollectSysInfoWizardPages]
Scan.Body.Intro = "Security Analyzer Wizard performs comprehensive system inspection.\n\nDuring the procedure the wizard analyzes running processes, loaded modules, system services and drivers, as well as programs, launched automatically at computer startup. Search for vulnerable applications and heuristic scans are performed.\n\nAnalysis results are saved as logs in HTML and XML format."
Scan.Name       = "Gathering system information"
Scan.Descr      = "Please wait while the information about your system is being collected..."
Error.Name      = "Wizard failure"
Error.Descr     = "Gathering system information task failed."
Finish.Name     = "Finish"
Finish.Descr    = "Gathering system information is complete."

[AvzCollectSysInfoWizardPages_Finish]
Intro = "The Wizard completed successfully"

[AvzCollectSysInfoWizard.Scripts]
sa.avz.1 = "Main script of analysis"

;-------------------------------- AvzRunScriptWizard --------------------------------

[AvzRunScriptWizard]
@ = "AVZ script execution"

[AvzRunScriptWizardPages]
Script.Name     = "Script"
Script.Descr    = "Specify script to be executed."
Exec.Name       = "Execution"
Exec.Descr      = "Script is being executed, please wait..."
Error.Name      = state == #StateFailed ? "Failed" : "Completed"
Error.Descr     = state == #StateFailed ? "Script execution failed." : "Script completed successfully"

[s_AvzError]
0x99c63001  = "Incorrect kernel handle"
0x99c63002  = "Incorrect path to databases"
0x99c63003  = "Error loading databases"
0x99c63004  = "Abnormal termination"
0x99c63005  = "Incorrect stream - stream pointer is absent"
0x99c63006  = "Error reading data from stream"
0x99c63007  = "XML syntax analysis error"
0x99c63008  = "XML tag not found"
0x99c63009  = "Incorrect mask, defining conversion format"
0x99c6300A  = "Incorrect callback function code"
0x99c6300B  = "Invalid script handle"
0x99c6300C  = "Incorrect script startup mode handle"
0x99c6300D  = "Incorrect database handle"
0x99c6300E  = "Error in script"
def         = s_SystemError(@)

;-------------------------------- AlertDialog --------------------------------

[Global]
$AlertDefault           = " (recommended)"
$AlertTcpOut            = "outgoing TCP connection with remote computer " + f_NetAddr(Data.RemoteIP) + ", remote port: " + Data.RemotePort
$AlertTcpIn             = "incoming TCP connection from remote computer " + f_NetAddr(Data.RemoteIP) + ", local port: " + Data.LocalPort
$AlertUdpOut            = "sending UDP packet to remote computer " + f_NetAddr(Data.RemoteIP) + ", remote port: " + Data.RemotePort
$AlertUdpIn             = "receiving UDP packet from remote computer " + f_NetAddr(Data.RemoteIP) + ", local port: " + Data.LocalPort
$AlertIcmpOut           = "sending ICMP packet to remote computer " + f_NetAddr(Data.RemoteIP) + ", packet type: " + s_ICMPTypes(Data.IcmpType)
$AlertIcmpIn            = "receiving ICMP packet from remote computer " + f_NetAddr(Data.RemoteIP) + ", packet type: " + s_ICMPTypes(Data.IcmpType)
$AlertIcmp6Out          = "sending ICMPv6 packet to remote computer " + f_NetAddr(Data.RemoteIP) + ", packet type: " + s_ICMP6Types(Data.IcmpType)
$AlertIcmp6In           = "receiving  ICMPv6 packet from remote computer " + f_NetAddr(Data.RemoteIP) + ", packet type: " + s_ICMP6Types(Data.IcmpType)
$AlertSocketType        = "socket type: " + s_FwSocketType(Data.SocketType)
$AlertAppLinkWithGroup  = $AlertAppLink + if(strGroupPath, " belonging to group '" + f_AppRootGroupName(strGroupPath) + "'")
$AlertActiveDetect      = if(nActionID == #AlertActionActiveDetect, "\n\nA special disinfection procedure is required <b>which demands system reboot</b>. You are advised to close all other applications. \n\n<b>Perform disinfection?</b>")
$AlertProtoOut          = "outgoing " + s_Protocols(Data.Proto) + " connection with remote computer " + f_NetAddr(Data.RemoteIP) + ", remote port: " + Data.RemotePort
$AlertProtoIn           = "incoming " + s_Protocols(Data.Proto) + " connection from remote computer " + f_NetAddr(Data.RemoteIP) + ", local port: " + Data.LocalPort

[s_AlertDialogCaption]
oas
ods
avs
wmuf            = s_AlertDialogCaptionByDanger(DetectDanger)
pdm             = "Suspicious activity"
mc
httpscan        = capitalize(s_DetectTypeShort(DetectType))
antiphishing    = "Phishing attack"
firewall
hipstask        = "Prompt for privileges"
hips_group      = "Potentially dangerous program"
vul             = "Hosts file is modified"

[s_DetectTypeShort]
; no more then 35 chars!
#DETYPE_RISKWARE        = "Dedicated software"
default = s_DetectType(@)

[s_AlertDialogObjectL]
hipstask        = s_AlertDialog_HipsObjectL(Action)
vul             = "Modified file: "
antiphishing    = s_AlertDialog_AntiphishingObjectL(strInterceptor)
pdm             = (TaskType == "pdm") ? ("Process (PID: " + nPID + "):") : "Suspicious object"
default         = "Object:"

[s_AlertDialogCaptionByDanger]
1   = "Alarm"
2
4   = "Attention"
8   = "Information"

[s_VirwareCategory]
antiphishing    = "Threat:"
default         = s_VirwareCategoryByDetectType(@1)

[s_VirwareType]
antiphishing    = s_DetectType(#DETYPE_PHISHING)
default         = @1

[s_ActionInTime]
#PDM2_ACTION_BLOCKED_APP_START = " at previous session was trying to "
def = " is trying to "

[s_AlertDialogTrouble]
wmuf            = s_WmufDescr(strInterceptor)
antiphishing    = s_APhishingDescr(strInterceptor)
avs             = (sImagePath ? ($AlertAppLink + " performs disinfection of ") : "Performing disinfection of " ) + s_DetectGroupR(DetectType) + "." + $AlertActiveDetect
oas             = $AlertAppLinkWithGroup + " is trying to get access to " + s_DetectGroupD(DetectType) + "." + $AlertActiveDetect
ods             = (sImagePath ? ($AlertAppLink + " has detected " + s_DetectGroupV(DetectType)) : ("Detected: " + s_DetectGroup(DetectType)) ) + "." + $AlertActiveDetect
mc              = $AlertAppLinkWithGroup + " is trying to process mail message that "  + if(DetectStatus != #eExact, "possibly") + " contains infected objects."
httpscan        = "This web page or file contains "  + s_DetectGroupV(DetectType) + "."
firewall
hipstask        = (Data.SocketType==#fwstRaw)? ($AlertAppLinkWithGroup + " is trying to " + s_ActionV(Action, ObjectName, ObjectType) + " using raw socket. Such activity is similar of malware. Legal software usually do not use such methods.") : ($AlertAppLinkWithGroup + if(bRestrictionDerrived, " started by restricted application") + s_ActionInTime(Action) + s_ActionV(Action, ObjectName, ObjectType) + "." + if(IsTrusted, " Probably this trusted application is being used by restricted one to perform some operation."))
hips_group      = nFlags & #nafWasTerminated ? "Program " + $AlertAppLinkWithGroup + (ObjectName == "KLAppUntrusted" ? " was not launched. " + f_appDenyStartReason() + "\nDo you want this program to be launched in future?" : " was launched with high restrictions. " + f_appDenyStartReason() + "\nDo you trust this program?") : f_hipsIconText(Action, nPID)
pdm             = f_PDM2_AlertDialogTrouble(Action, EventType)
vul             = "The file hosts defines a parity of IP addresses and domain names. Malware programs change a file hosts with the purpose of blocking the anti-virus updates or user references to some sites."

[s_FromGroup]
#evtAddAppToGr = " earlier belonging to group '"
def            = "from group '"

[f_danger]
action, pid
ret = (#evtAddAppToGr == action && !pid) ? "Potentially dangerous change of program detected " : ("Potentially dangerous program " + (pid ? "is being launched " : "detected ") )

[f_hipsIconText]
$l_AlertAppLinkWithGroup  = $AlertAppLink + if(strGroupPath, s_FromGroup(@) + f_AppRootGroupName(strGroupPath) + "'")
ret = f_danger(@, @1) + $l_AlertAppLinkWithGroup + ". " + f_appDenyStartReason() + "\nDo you trust this application?"

[AlertDialog_Descr_RegInfo]
ObjectL = "Registry key:"

[AlertDialog_Descr_Object]
Threat = "Potentially dangerous program"

[f_appDenyStartReason]
ret = "This program does not have a digital signature" + if(ObjectName == "KLAppUntrusted", ", has a high danger rating") + "."

[f_BrowserOrApp]
ret = l_ShortName = objfile(f_AppInfo(@).sImagePath); ( stricmp(l_ShortName, "iexplore.exe")==0 || stricmp(l_ShortName, "opera.exe")==0 || stricmp(l_ShortName, "firefox.exe")==0 ) ? "downloaded by browser " : "created "

[f_appParentage]
ret = l_appParentage = appParentage(@); if(l_appParentage.EventCreated.AppID, "Executable file " + f_BrowserOrApp(l_appParentage.EventCreated.AppID) + s_AppName(l_appParentage.EventCreated.AppID) + " " + datetimeDT(l_appParentage.EventCreated.Timestamp) + "\n")

[AlertDialog_Descr_AppParentage]
Label   = "Application run sequence:"
Parent  = f_appParentage(sImagePath) + "Started " + Parents.format("f_appParenItem()", " > ")

[AlertDialog_Descr_CreateObject]
ObjectL = "File was created" + if(nOwnerCreated > 0, " " + datetimeDT(nOwnerCreated)) + " by the application"

[AlertDialogT_Header1]
Help = "Help"

[AlertDialogT_Footer]
ApplyToAll = (TaskType == "hipstask")? "Save rules changes" : ( (ApplyToAll & #APPLYTOALL_SESSION_ONLY)? "Apply to current session" : (ApplyToAll & #APPLYTOALL_USE_SESSION ? "Apply <a f(const(s_AlertFooterLink(DetectDanger))) onclick(iterate(bmask(ApplyToAll, #APPLYTOALL_SESSION)))>" + (ApplyToAll & #APPLYTOALL_SESSION ? "to current application session" : "forever") + "</a>" : s_ApplyToAllByTaskType(TaskType)) )

[AlertDialog_Body_Action]
Rename.Name         = "Make trusted"
Rename.Descr        = "Move application to the \"Trusted\" group"
RenameChain.Name    = "Make trusted"
RenameChain.Descr   = "Move application with such run sequence to the \"Trusted\" group"
Allow.Name          = (TaskType != "hips_group" ? ("Allow"+ if( TaskType == "hipstask", (ctl.ApplyToAll.value? " always":" now")) ) : "Yes") + $Def
Allow.Descr         = s_AllowDescrByTaskType(TaskType)
Restrict.Name       = "Limit"
Restrict.Descr      = "Allow program execution, block dangerous operations only"
Deny.Name           = (TaskType != "hips_group" ? ("Block" + if(TaskType == "hipstask",(ctl.ApplyToAll.value? " always":" now") ) ) : "No" ) + $Def
Deny.Descr          = TaskType != "hips_group" ? ("Action will be blocked" + if(TaskType == "hipstask",(ctl.ApplyToAll.value? " and a new blocking rule will be created":""))) : "Block application execution"
Disinfect.Name      = ActionsMask & #ACTION_DISINFECT ? "Disinfect" + $Def : "Disinfection is not possible"
Disinfect.Descr     = ActionsMask & #ACTION_DISINFECT ? "A copy of infected file will be saved" + if(NonCuredReason==#NCREASON_WRITEPROTECT, $UnlockFileMsg + " disinfection.") : "Reason: " + s_NotDisinfetedReason(NonCuredReason,1, " disinfection.")
Repare.Name         = "Restore" + $Def
Repare.Descr        = s_ActionObjectByTaskType(TaskType) + " will be restored to initial state"
Delete.Name         = ActionsMask & #ACTION_DELETE ? "Delete" + $Def : "Cannot be deleted"
Delete.Descr        = ActionsMask & #ACTION_DELETE ? (s_ActionObjectByTaskType(TaskType) + " will be deleted" + if(NonCuredReason==#NCREASON_WRITEPROTECT, $UnlockFileMsg + " deletion.")) : "Reason: " + s_NotDisinfetedReason(NonCuredReason, 1, " deletion.")
DeleteArch.Name     = "Delete archive" + $Def
DeleteArch.Descr    = ActionsMask & #ACTION_DELETE_ARCHIVE ? ("Archive file will be deleted" + if(NonCuredReason==#NCREASON_WRITEPROTECT, $UnlockFileMsg + " archive deletion.")) : "Reason: " + s_NotDisinfetedReason(NonCuredReason, 1, " archive deletion.")
Skip.Name           = "Skip" + $Def
Skip.Descr          = "Do not perform any actions"
Ok.Name             = s_OkNameByTaskType(TaskType)  + $Def
Ok.Descr            = s_OkDescrByTaskType(TaskType)
TryAgain.Name       = "Repeat"  + $Def
TryAgain.Descr      = "Try to perform action again"
Cancel.Name         = s_CancelNameByTaskType(TaskType)  + $Def
Cancel.Descr        = s_CancelDescrByTaskType(TaskType)
Terminate.Name      = "Terminate" + if(TaskType == "hipstask", " and place to\"Untrusted\" group" ) + $Def
Terminate.Descr     = "Terminate execution" + if(TaskType == "hipstask", " of application and move to \"Untrusted\" group" )
Quarantine.Name     = "Quarantine" + $Def
Quarantine.Descr    = ActionsMask & #ACTION_QUARANTINE ? "Move file to Quarantine" : "Cannot be moved to Quarantine: " + s_NotDisinfetedReason(NonCuredReason, 0)
CreateRule.Name     = "Create a rule"
CreateRule.Descr    = "Create a detailed rule"
Rollback.Name       = "Rollback" + $Def
Rollback.Descr      = "Attempt to roll back system changes made by the process will be performed."
ToExclude.Name      = "Add to exclusions"
ToExclude.Descr     = f_TaskTypeExcludable(TaskType) ? "Add to exclusions list" : "Add application to trusted zone"

[s_AllowDescrByTaskType]
hips_group  = "Allow program execution"
default     = s_AllowDescrByObjectType(ObjectType)

[s_AllowDescrByObjectType]
#eNetwork   = "Access to group " + capitalize(s_ResGroupName(ObjectName), 0) + " will be allowed"
default     = "Action will be allowed" + if(ctl.ApplyToAll.value&& TaskType == "hipstask"," and an allowing rule will be created")

[s_OkNameByTaskType]
oas
ods     = nActionID == #AlertActionActiveDetect ? "Yes, perform" : "OK"
default = "OK"

[s_OkDescrByTaskType]
oas
ods     = nActionID == #AlertActionActiveDetect ? "Special disinfection procedure will be performed and on completion system will be restarted." : "Action will be performed"
default = "Action will be performed"

[s_CancelNameByTaskType]
oas     = nActionID == #AlertActionActiveDetect ? "No, do not perform" : "Block"
ods     = nActionID == #AlertActionActiveDetect ? "No, do not perform" : "Skip"
default = "Skip"

[s_CancelDescrByTaskType]
oas		= nActionID == #AlertActionActiveDetect ? "Object will be processed according to the selected action. System will not be restarted." : "Object will not be changed or deleted"
ods     = nActionID == #AlertActionActiveDetect ? "Object will be processed according to the selected action." : "Do not perform any action"
pdm     = s_PDM2_CancelDescrByAction(Action)
default = "Do not perform any actions"

[s_PDM2_CancelDescrByAction]
#PDM2_ACTION_ROLLBACK = "Do not roll back system changes made by the process."
default               = "Do not perform any actions"

[s_ActionObjectByTaskType]
hipstask        = $ObjectTypeText
vul             = "File"
antiphishing    = "Website"
default         = "Object"

[s_ApplyToAllByTaskType]
firewall
hipstask    = "Always apply for this application"
default     = "Apply to all objects"

[s_WmufDescr]
msn
icq     = "Link to "  + s_DetectGroup(DetectType) + " detected."
default = "Attempt to download "  + s_DetectGroup(DetectType) + "."

[s_APhishingDescr]
msn
icq     = "Program contains link to web page, used to steal passwords, credit card numbers or other confidential data."
default = $AlertAppLinkWithGroup + " is trying to access the web page, used to steal passwords, credit card numbers or other confidential data."

[s_ActionReg]
#evtRead    = "read protected registry key belonging to group " + ResGroupPath.f_formatGrpPath()
#evtWrite   = "modify protected registry key belonging to group " + ResGroupPath.f_formatGrpPath()
#evtDelete  = "delete protected registry key belonging to group " + ResGroupPath.f_formatGrpPath()
#evtCreate  = "create subkey/parameter in the protected registry key belonging to group " + ResGroupPath.f_formatGrpPath()

[s_ActionFile]
#evtRead    = "read protected file belonging to group " + ResGroupPath.f_formatGrpPath()
#evtWrite   = "modify protected file belonging to group " + ResGroupPath.f_formatGrpPath()
#evtDelete  = "delete protected file belonging to group " + ResGroupPath.f_formatGrpPath()
#evtCreate  = "create file belonging to group " + ResGroupPath.f_formatGrpPath()

[s_ActionDef]
#evtRead    = "read protected resource belonging to group " + ResGroupPath.f_formatGrpPath()
#evtWrite   = "modify protected resource belonging to group " + ResGroupPath.f_formatGrpPath()
#evtDelete  = "delete protected resource belonging to group " + ResGroupPath.f_formatGrpPath()
#evtCreate  = "create " + $ObjectTypeTextLoCase + " on the protected resource belonging to group " + ResGroupPath.f_formatGrpPath()

[s_ActionV]
#evtRead
#evtWrite
#evtDelete
#evtCreate              = @2 == #eRegKey ? s_ActionReg(@) : (@2 == #eFile ? s_ActionFile(@) : s_ActionDef(@, @1, @2))
#evtRename              = "rename" + if(@1, " " + $ObjectTypeTextLoCase)
#evtProcessStart        = l_appName = f_AppNameEx(nDestPID > 0 ? f_ProcessInfo(nDestPID).Module : appInfo(@1) ); "start application <b>" + l_appName + "</b>"
#evtProcessStop         = l_appName = f_AppNameEx(nDestPID > 0 ? f_ProcessInfo(nDestPID).Module : appInfo(@1) ); "close application <b>" + l_appName + "</b> or get access to it with delete privileges"
#evtProcessStop         = "stop" + if(@1, " " + $ObjectTypeTextLoCase)
#evtImageLoad           = "load" + if(@1, " " + $ObjectTypeTextLoCase)
#evtImageUnload         = "unload" + if(@1, " " + $ObjectTypeTextLoCase)
#evtSend                = "send" + if(@1, " " + $ObjectTypeTextLoCase)
#evtReceive             = "receive" + if(@1, " " + $ObjectTypeTextLoCase)
#evtTerminate           = "stop" + if(@1, " " + $ObjectTypeTextLoCase)
#evtSetHook
#evtCodeInject          = "intrude " + (ObjectName ? "module " : "code " ) + (nDestPID ? "into process" : "into all processes by installing the global trap")
#evtOlePortAccess       = "use " + (ObjectName ? "program interface " : "program interfaces") + ObjectName + " of other process"
#evtCreateKnownDlls     = "change operating system modules (KnownDlls), which are used by all processes"
#evtWindowsShutDown     = "shut down the operating system or obtain shut down privileges"
#evtHiddenRegistry      = "create hidden " + $ObjectTypeTextLoCase
#evtKeyLogger           = "intercept keyboard input" + if(@1, " " + $ObjectTypeTextLoCase)
#evtSetHardLink         = "create link to " + $ObjectTypeTextLoCase + ". Link name (alias): " + Data.ObjectName
#evtSuspend             = "change operation of " + s_ObjectTypeHipsR(@2)
#evtSchedulerStart      = "start scheduler" + if(@1, " " + $ObjectTypeTextLoCase)
#evtWMSend              = "send windows message" + if(@1, " " + $ObjectTypeTextLoCase)
#evtDrvStart            = "perform hidden driver load. This load method is rarely used by legitimate applications. After driver installation " + $ProductName + " will not be able to control application activity"
#evtServiceStart        = "start service" + if(@1, " " + $ObjectTypeTextLoCase)
#evtScreenShots         = "take screenshot"
#evtSelfStart           = "start"
#evtLLDiskAccess        = "obtain low level disk access"
#evtLLFSAccess          = "obtain low level file system access" + if(@1, " " + $ObjectTypeTextLoCase)
#evtClipBoardAcceess    = "get clipboard access"
#evtCriticalCOMAccess   = "get access to critical system objects"
#evtADSAccess           = "obtain access to file streams" + if(@1, " " + $ObjectTypeTextLoCase)
#evtDirectMemAccess     = "get direct memory access"
#evtReadProcMem         = "read memory from another " + s_ObjectTypeHipsR(@2)
#evtSetDbgPrivilege     = "set debug privileges"
#evtChangeObjPrivilege  = "modify object rights" + if(@1, " " + $ObjectTypeTextLoCase)
#evtUseBrowserCL        = "use <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>browser command line</a>"
#evtUseBrowserAPI       = "use <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>browser program interfaces</a>"
#evtUseDNS              = "use <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>DNS requests caching service</a> for hidden sending of data through the network probably"
#evtUseBITS             = "use <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>system function</a> for hidden sending of data through the network"
#evtRegistrySave        = "save " + $ObjectTypeTextLoCase + " to file " + Data.ObjectName
#evtPrtStgAccess        = "get access to protected passwords storage"
#evtAddAppToGr          = "place to group " + s_AppGroupName(ObjectName)
#evtNetworkAccess       = "establish connection to the address included into group <b>" + capitalize(s_NetSeverity(Data.Severity), false) + "</b>"
#evtShellWindowsAcceess = "get access to internal browser data"
#evtUserAccountAccess   = "get access to user accounts settings"
default                 = if(@, "unk: " + @)

[s_ObjectTypeHipsR]
#eFile      = "file"
#eRegKey    = "registry key"
#eProcess   = "process"
default     = "object"

[s_AlertDialog_HipsObjectL]
#evtSetHook
#evtCodeInject  = (ObjectName ? "Module" : "Process"  + f_PIDValue(nDestPID) ) + ":"
#evtCreateKnownDlls = "Intrusion module:"
default         = ObjectType == #eNetwork ? "Address:" : $ObjectTypeText + ":"

[s_AlertDialog_AntiphishingObjectL]
msn
icq         = "Object"
default     = "Website: "

[s_AlertDialog_HipsDescr]
#evtUseDNS          = "using program interfaces"
#evtUseBITS         = "using file download service"
#evtUseBrowserCL    = "using browser command line"
#evtUseBrowserAPI   = "use browser program interfaces"
#evtPrtStgAccess    = "access to protected passwords storage"

;-------------------------------- MalwareInfo --------------------------------

[MalwareInfo]
@ = s_MalwareInfo_Title(p_TaskType)

[MalwareInfo_Tab]
Malware = "Result"
File    = "File"

[MalwareInfo_Tab_File]
File.Name = "Path:"

[MalwareInfo_Tab_File_Info]
Size.Name       = "Size:"
Created.Name    = "Created:"
Modified.Name   = "Modified:"

[MalwareInfo_Tab_Malware]
Category.Name   = "Category:"
Type.Name       = "Type:"

[MalwareInfo_Tab_Malware_info]
Text = "View full malware description on: "

[s_MalwareInfo_Title]
antiphishing    = "Threat description"
default         = DetectDanger == #DETDANGER_HIGH ? "Malware description" : "Description of potentially dangerous program"

[f_Alert2MalwareImage]
ret = (EventType != #PDM2_EVENT_HIDDEN_OBJ ) ? ObjectName : "hidden object"

;-------------------------------- HipsInfo --------------------------------

[HipsInfo]
@ = p_action ? "Information leakage methods description" : "Suspicious activity description"

[HipsInfo_Link]
Text = "Full description: "

[s_HipsInfo]
#evtPrtStgAccess    = "An attempt to access personal data or passwords saved in Microsoft Windows Protected Storage. That service provides for safekeeping of confidential data: local passwords, passwords for POP and SMTP accounts, Internet access passwords, passwords for automatic entry of closed sections of web sites, information and passwords for automatic substitution into web forms, etc. The data is entered into corresponding fields of email clients and browsers. As a rule, users can preserve the entered data by setting an appropriate flag. Microsoft Windows service preserves then the information in Protected Storage."
#evtUseDNS          = "Windows DNS API functions can be used to initiate a recursive request to an Internet domain name server. Additional information appended to the sent DNS packet may contain confidential user data. Criminals controlling one of domain name servers that process DNS requests will be able to retrieve the data from such specifically generated packet."
#evtUseBITS         = "BITS (Background Intelligent Transfer Service) – is an intelligent file download service used by Windows Update and Windows Server Update Services. It allows patches and updates to be downloaded in the background, without overloading communications channels. It also automatically resumes downloads if the connection is lost."
#evtUseBrowserCL    = "Attempt to launch browser with web page address specified as a command line option. If the requested page on the server side contains a script, the address string may be used to transfer parameters containing confidential data (for example, stolen by spyware)."
#evtUseBrowserAPI   = "Attempt to use programming interfaces for browser control. This method includes sending messages to browser windows, using DDE-interface of the browser, using browser as an automation server (OLE automation mechanism) etc. Malicious application can use these interfaces to perform its network activity \"on behalf\" of internet-browser."

[s_PdmInfo]
#PDM2_EVENT_P2P_SC_RDL
#PDM2_EVENT_P2P_SCN
#PDM2_EVENT_SC_MULTIPLE
#PDM2_EVENT_SCN                 = "Behavior typical of worms that use self-spreading via public network folders and email."
#PDM2_EVENT_SC_AR
#PDM2_EVENT_SC_ARsrc
#PDM2_EVENT_SC2STARTUP
#PDM2_EVENT_TROJAN_GEN          = "This malware category includes Trojan programs designed to corrupt data and destabilize computer operation."
#PDM2_EVENT_RDR                 = "RootShell"
#PDM2_EVENT_NEGATIVE_PID
#PDM2_EVENT_HIDDEN_OBJ          = "Reasons which can trigger the alarm:\n1. rootkit activity\n2. user action in specific programs\n3. activity of certain protection software."
#PDM2_EVENT_INVADER
#PDM2_EVENT_INVADER_LOADER      = "Behavior typical of Trojan programs injecting their malicious code into other processes."
#PDM2_EVENT_DRIVER_INS          = "Some malicious programs attempt to install in the target system their own drivers to receive low-level access to the operating system trying thus to hide their presence and hinder the procedure of their removal."
#PDM2_EVENT_KEYLOGGER           = "Malware of such type can also send information entered from the keyboard (logins, passwords, credit card numbers) to criminals. However, normal programs can also intercept keyboard input. Such interception is often employed to invoke program features from another application using hotkeys."
#PDM2_EVENT_IRP_TABLE_CHANGED   = "Some malicious programs attempt to modify low-level logic of operating system functionality by  \"redirecting\" the calls from standard drivers to themselves."
;#PDM2_EVENT_STRANGEKEY        = "Подозрительное значение реестра"
;#PDM2_EVENT_SYSCHANGE         = "Подозрительное поведение"
;#PDM2_EVENT_HIDDEN_INSTALL    = "Скрытая установка"
;#PDM2_EVENT_BUFFEROVERRUN     = "Переполнение буфера"
;#PDM2_EVENT_DEP               = "Data Execution"
;#PDM2_EVENT_HOSTS             = "Модификация файлов hosts"
;#PDM2_EVENT_DOWNLOADER        = "Загрузчик троянских программ"
;#PDM2_EVENT_HIDDEN_SEND       = "Скрытая отправка данных"


[s_HipsInfoVirusListLink]
#evtPrtStgAccess    = env("VirusListLink") + "/" + env("Localization") + "/analysis?pubid=204007556"
#evtUseBrowserCL
#evtUseBrowserAPI
#evtUseBITS
#evtUseDNS          = env("VirusListLink") + "/" + env("Localization") + /analysis?pubid=204007581"
default             = $ViruslistLink

;-------------------------------- RegAccessInfo --------------------------------

[RegAccessInfo]
$key    = "Key"
$param  = "Parameter"
$val    = "Value"
$old    = "Old value"
$new    = "New value"
@       = "Registry access"

;-------------------------------- ProtectStatus_Header.StatusMenu.menu --------------------------------

[ProtectStatus_Header.StatusMenu.menu]
StatusHide      = "Hide this message"
StatusShowAll   = "Show all messages"

[s_DetectTypeEx]
hipstask = "Attempt to load driver"
def      = s_DetectType(DetectType) + if(DetectName, " " + (DetectType == #DETYPE_VULNERABILITY ? f_VulnerUrl(DetectName) : DetectName))

[s_DetectObjectTypesEx]
httpscan
wmuf
adblocker
antiphishing
parctl          = "Web page"
sc              = "VB or Java script"
default         = s_DetectObjectTypes(@1)

[s_DetectObjectTypes]
#ObjectFile         = "File"
#ObjectLogSector    = "Logical disk sector"
#ObjectPhysSector   = "Physical disk sector"
#ObjectMemory       = "Memory"
#ObjectMail
#ObjectMailMessage  = "Mail message"
#ObjectMailBody     = "Mail body"
#ObjectMailAttach   = "Mail attachment"
#ObjectRunProcess   = "Running process"
#ObjectRunModule    = "Running module"
#ObjectStartup      = "Startup object"
#ObjectNetwork	    = "Network"
#ObjectDevice       = "Device"
#ObjectURL			= "URL"
#ObjectPhoneNumber  = "Phone number"
default             = "Object " + @

[s_DetectType]
#DETYPE_VIRWARE         = "virus"
#DETYPE_TROJWARE        = "Trojan program"
#DETYPE_MALWARE         = (ObjectType != #ObjectURL) ? "malware" : "malicious URL"
#DETYPE_ADWARE          = "adware"
#DETYPE_PORNWARE        = "auto-dialer"
#DETYPE_RISKWARE        = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_XFILES
#DETYPE_SOFTWARE        = "known software"
#DETYPE_UNDETECT        = "undefined"
#DETYPE_ATTACK          = "network attack"
#DETYPE_REGISTRY        = "registry access"
#DETYPE_SUSPICACTION    = "suspicious action"
#DETYPE_VULNERABILITY   = "vulnerability"
#DETYPE_PHISHING        = "phishing URL"
#DETYPE_ATTACHMENT		= "unwanted mail attachment"
default                 = "unknown threat"

[s_DetectTypeR]
#DETYPE_VIRWARE         = "virus"
#DETYPE_TROJWARE        = "Trojan program"
#DETYPE_MALWARE         = (ObjectType != #ObjectURL) ? "malware" : "malicious URL"
#DETYPE_ADWARE          = "adware"
#DETYPE_PORNWARE        = "auto-dialer"
#DETYPE_RISKWARE        = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_XFILES
#DETYPE_SOFTWARE        = "known software"
#DETYPE_UNDETECT        = "undefined"
#DETYPE_ATTACK          = "network attack"
#DETYPE_REGISTRY        = "registry access"
#DETYPE_SUSPICACTION    = "suspicious action"
#DETYPE_VULNERABILITY   = "vulnerability"
#DETYPE_PHISHING        = "phishing URL"
#DETYPE_ATTACHMENT		= "unwanted mail attachment"
default                 = "unknown threat"


[s_VirwareCategoryByDetectType]
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE
#DETYPE_PHISHING
#DETYPE_ATTACK
#DETYPE_REGISTRY
#DETYPE_SUSPICACTION
#DETYPE_VULNERABILITY   = capitalize(s_DetectType(@)) + if(DetectType != #DETYPE_MALWARE && DetectType != #DETYPE_PHISHING, ": ")
default                 = "Detected:"

[s_DetectGroup]
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE     = "malicious software"
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE    = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_URGENT      = "malicious object with Kaspersky Security Network service"
default             = "unknown software"

[s_DetectGroupR]
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE     = "malicious software"
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE    = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_URGENT      = "malware detected with Kaspersky Security Network service"
default             = "unknown software"

[s_DetectGroupD]
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE     = "malicious software"
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE    = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_URGENT      = "malware detected with Kaspersky Security Network service"
default             = "unknown software"

[s_DetectGroupV]
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE     = "malicious software"
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE    = "legal software that can be used by criminals for damaging your computer or personal data"
#DETYPE_URGENT      = "malware detected with Kaspersky Security Network service"
default             = "unknown software"

[s_DetectDanger]
#DETDANGER_HIGH             = "High"
#DETDANGER_MEDIUM           = "Medium"
#DETDANGER_LOW              = "Low"
#DETDANGER_INFORMATIONAL    = "Information"
default                     = if(@, "unk: " + @)

[s_DetectSureTypeName]
#DETYPE_VIRWARE = s_DetectType(DetectType) + " " + DetectName
default         = s_DetectType(DetectType) + " " + DetectName + if(DetectType != #DETYPE_REGISTRY && TaskType != "pdm", " (modification)")

[s_DetectObjectStatus]
#OBJSTATUS_INFECTED					= "Infected"
#OBJSTATUS_SUSPICION				= "Suspicious"
#OBJSTATUS_NOTDISINFECTED           = "Detected"
#OBJSTATUS_UNKNOWN                  = "Not found"
#OBJSTATUS_DISINFECTED              = "Disinfected"
#OBJSTATUS_DELETED                  = "Deleted"
#OBJSTATUS_QUARANTINED              = "Quarantined"
#OBJSTATUS_DELETED_ON_REBOOT        = "Will be deleted when the computer is restarted"
#OBJSTATUS_DISINFECTED_ON_REBOOT    = "Will be disinfected when the computer is restarted"
#OBJSTATUS_QUARANTINED_ON_REBOOT    = "Will be quarantined on system restart"
#OBJSTATUS_ADDEDBYUSER              = "Added by user"
#OBJSTATUS_ADDEDTOEXCLUDE           = "Added to exclusions"
#OBJSTATUS_ALLOWED                  = "Allowed"
#OBJSTATUS_DENIED                   = "Denied"
#OBJSTATUS_OK
#OBJSTATUS_FALSEALARM               = "Clean"
default                             = "unk: " + ObjectStatus

[s_NotDisinfetedReason]
#NCREASON_NONCURABLE        = "cannot be disinfected."
#NCREASON_LOCKED            = "is used by another application." + if(@1, " Unblock " + $ObjectTypeTextLoCase + " and select action.")
#NCREASON_NORIGHTS          = "write access is denied."
#NCREASON_WRITEPROTECT      = "is write protected" + if(@1, $UnlockFileMsg + @2)
#NCREASON_POSTPONED         = "processing postponed by the user."
#NCREASON_OUTOFSPACE        = "insufficient free disk space."
#NCREASON_NONOVERWRITABLE
#NCREASON_WRITENOTSUPPORTED = "write not supported."
#NCREASON_REPONLY
#NCREASON_CANCELLED         = "\"Skip\" action is selected."
#NCREASON_TASKSTOPPED       = "task interrupted."
#NCREASON_DEVICENOTREADY    = "device is not ready."
#NCREASON_OBJECTNOTFOUND    = "object not found."
#NCREASON_WRITEERROR        = "write error."
#NCREASON_READERROR         = "read error."
default                     = "disinfection failed."

[s_LicenseSubscrText1]
#ssExpDateUnknown      = "Subscription status will be defined later."
#ssHasExpDateActivated = "Subscription is activated. Expiration date: " + date(LicInfo.LicenseDurationInfo.ExpirationDate) + "."
#ssHasExpDateProlonged = "Subscription is renewed. Expiration date: " + date(LicInfo.LicenseDurationInfo.ExpirationDate) + "."
#ssHasExpDateCanceled  = "Subscription is cancelled. Expiration date: " + date(LicInfo.LicenseDurationInfo.ExpirationDate) + "."
#ssUnlimitedActivated  = "Subscription is activated."
#ssUnlimitedProlonged  = "Subscription is renewed."
#ssGracePeriod         = "Subscription has expired on " + date(LicInfo.LicenseDurationInfo.ExpirationDate) +"."
#ssExpired             = "Subscription has expired." + if(LicInfo.KeyInfo.KeyType == #ektSubscriptionProtection && !$IsBestBuyLink, " Protection is disabled.")
#ssNotYetSuspended     = "Subscription is suspended from " + date(LicInfo.LicenseDurationInfo.ExpirationDate) + "."
#ssSuspended           = "Subscription is suspended from " + date(LicInfo.LicenseDurationInfo.ExpirationDate) + "." + ((LicInfo.KeyInfo.KeyType==#ektSubscriptionProtection)? " Update feature and protection are disabled." : " Update feature is disabled.")
#ssUnlimitedResumed    = "Subscription is resumed."
def = "text1: " + SubscriptionStatus

[s_LicenseSubscrText2]
#ssExpDateUnknown        = "In order to define subscription type, please update its status"
#ssHasExpDateActivated   = s_LeftForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) + " " + LicInfo.LicenseDurationInfo.DaysTillExpiration + " " + s_daysRemaining(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration))
#ssHasExpDateProlonged   = s_LeftForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) + " " + LicInfo.LicenseDurationInfo.DaysTillExpiration + " " + s_daysRemaining(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration))
#ssHasExpDateCanceled    = s_LeftForm(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration)) + " " + LicInfo.LicenseDurationInfo.DaysTillExpiration + " " + s_daysRemaining(f_numdeclension(LicInfo.LicenseDurationInfo.DaysTillExpiration))
#ssUnlimitedActivated    = ""
#ssUnlimitedProlonged    = ""
#ssGracePeriod           = "You have " + s_remains(f_numdeclension(LicInfo.SubscriptionInfo.ToleranceDays)) + " " + f_n_days_remaining(LicInfo.SubscriptionInfo.ToleranceDays) + ($IsBestBuyLink? " left to renew subscription. " : (LicInfo.KeyInfo.KeyType == #ektSubscription? " left until update feature is disabled. " : " left until protection is disabled." ) ) + " To renew subscription, please contact your subscription provider."
#ssExpired               = $IsBestBuyLink? "Subscription renewal is not available." : "Your computer security is at risk. To renew subscription, please contact your subscription provider."
#ssNotYetSuspended       = ""
#ssSuspended             = "To resume subscription, please contact your subscription provider."
#ssUnlimitedResumed      = ""
def = "text2: " + SubscriptionStatus

[s_LicenseNoKeyText]
1   = "License validity period has expired."
2   = s_LicenseTrialOver($IsActiveKeyTrial)

[s_LicenseTrialOver]
1       = "Trial version of the application has expired."
default = "License is not found."

[s_LicenseNoKeyHint]
#eflNoFeatures              = "Protection is disabled. To enable protection, please " + s_LicenseRenewBuyText(global.LicRenewStatus) + " license."
#eflFunctionWithoutUpdates  = "The update feature is disabled. To enable the full functional mode, please " + s_LicenseRenewBuyText(global.LicRenewStatus) + " license " + if(global.KeyState & (#eNoKeys | #eKeyWaitActivation), "or activate the trial version") + "."
#eflFullFunctionality       = s_LicenseNoKeyHintByFF(@1)

[s_LicenseNoKeyHintByFF]
#eKeyExpired				= "Please " + s_LicenseRenewBuyText(global.LicRenewStatus) + " license " + if(global.KeyState & (#eNoKeys | #eKeyWaitActivation), "or activate the trial version ") + "in order to enable the full functional mode."
default						= "You can update the databases only once. To enable the full functional mode, please " + s_LicenseRenewBuyText(global.LicRenewStatus) + " license " + if(global.KeyState & (#eNoKeys | #eKeyWaitActivation), "or activate the trial version") + "."

[PauseProtectionRequestDialog]
@           = "Pause protection"
Info.Text   = "Protection will be paused"

[PauseProtectionRequestDialog_TimeButton_Time]
60      = "1 minute"
180     = "3 minutes"
300     = "5 minutes"
900     = "15 minutes"
1800    = "30 minutes"
3600    = "1 hour"
10800   = "3 hours"
18000   = "5 hours"

[Product_Threats_Report_Menu]
Treat           = "Process"
Scan            = "Scan"
GotoToVulDesc   = "Go to description"
AddToExclude    = "Add to exclusions"
GotoFile        = "Open folder where file was initially located"
Discard         = "Delete from the list"
Delete          = "Delete"
TreatAll        = "Disinfect all"
DiscardAll      = "Clear list"
QuarantineAdd   = "Quarantine..."
Restore         = "Restore"
SendToKL        = "Send..."
ViewOnWeb       = "View on " + VirusListName

[s_PasswordConfirmReason]
default = "To perform this operation, please enter the password."

[CheckProductPassword]
@ = "Password checking"

[CheckProductPassword_Body_EditBlock]
Pswd2CheckText  = "Password:"
Pswd2Save       = "Save password for current session"

[NewAppSniffer]
@       = "New application started"
Info    = "Please wait while new or modified application is being analyzed..."

[PauseProtectionRequestDialog_TimeButton]
Name = "Protection will be resumed in"

[PauseProtectionRequestDialog_Actions]
Time.Name      = "Pause for the next " + switch(ResumeTime,"PauseProtectionRequestDialog_TimeButton_Time")
Reboot.Name    = "Pause until reboot"
Reboot.Descr   = "Protection will be resumed after computer or application restart"
OnDemand.Name  = "Pause"
OnDemand.Descr = "Protection will be resumed on user's demand"

[Product_Threats_Navigator]
Save = "Sa&ve"

[Product_Threats_Navigator_Filter]
Active      = "Active threats"
Vulnerability = "Vulnerabilities"
Quarantined = "Quarantined"
Disinfected = "Disinfected files"
All         = "All detected malware"
AllButVuln  = "All"

[Product_Threats_Report]
Status      = "Status"
Time        = "Time"
Object      = "Object"
Detected    = "Detected"
Danger      = "Criticality"
row         = "Label"

[Product_Threats_Report_Footer]
CureAll = "Disinfect all"
AddToQB = "Quarantine..."

[Product_Threats_Report_Object]
Type    = "Type"
Sandbox = "Safe Run"
Path    = "Path"
Name    = "Name"

[Global]
$EventVerdictText            = if(Verdict, " " + (Verdict == #eDELETED ? "Deleted and backup copy is created" : f_VerdictDesc()) + ".")

[s_ProductNotifyTextHips]
#eHardwareAccess        = "Connecting device from group \"" + s_ResGroupName($ObjectText) + "\" is blocked according to the rules."
def                     = Action == #evtSelfStart ? ("Launch of " + $EventAppName + (Verdict == #eDENIED ? " denied " : " allowed ") + " according to the application rules." )  : ($EventAppName + if(Action, capitalize(s_Action(Action), false) + " ")  + f_MakeLink(s_IsEventObjClickable(Action), "ObjName onclick(f_EventObjClick())", $EventObjText) + "." + $EventVerdictText)

[s_ProductNotifyTextByTaskID]
#eTASK_SELFPROT         = $SelfProtection + ": " + $EventAppName + s_Action(Action) + " of our process." + $EventVerdictText
#eTASK_SCAN             = if($EventShow, "File " + $EventObjText + if(DetectType && DetectType != #eHidden, ": contains " + s_RepDetectTypeV(DetectType)) + if(DetectName && DetectType != #eHidden, " " + object(DetectName)) + if(DetectType == #eHidden, " is hidden") + "." + if(Verdict != #eDETECTED, $EventVerdictText))
#eTASK_FAV              = if($EventShow, $EventAppName + "Accessing the files " + $EventObjText + if(DetectType, ", containing " + s_RepDetectTypeV(DetectType)) + if(DetectName, " " + object(DetectName)) + "." + if(Verdict != #eDETECTED, $EventVerdictText))
#eTASK_MAV              = if($EventShow, $EventAppName + "Email message detected " + $EventObjText + if(DetectType, ", containing " + s_RepDetectTypeV(DetectType)) + if(DetectName, " " + object(DetectName)) + "." + if(Verdict != #eDETECTED, $EventVerdictText))
#eTASK_HTTP             = if($EventShow, $EventAppName + "Loading object " + $EventObjText + if(DetectType, ", containing " + s_RepDetectTypeV(DetectType)) + if(DetectName, " " + object(DetectName)) + "." + $EventVerdictText)
#eTASK_PC               = s_ProductNotifyText_ParCtl(Verdict)
#eTASK_AD               = if($EventShow, $EventAppName + "Dialing the number " + $EventObjText + "." + $EventVerdictText)
#eTASK_AP               = if($EventShow, "Application " + $EventAppNameNS + " contains link to web page " + $EventObjText + ", used to steal passwords, credit card numbers or other confidential data." + $EventVerdictText)
#eTASK_IDS              = if($EventShow, "Network attack " + object(DetectName) + ": " + $EventObjText + ". Blocked." + f_EventIdsBunReason(c_repser(ObjectID, objectdata(ObjectID))))
#eTASK_FIREWALL
#eTASK_HIPS             = if($EventShow || !Verdict, s_ProductNotifyTextHips(DetectType, @1))
#eTASK_PDM              = if($EventShow, $EventAppName + "Behavior similar to " + object(DetectName) + "." + $EventVerdictText)
#eTASK_TRAFMON          = $EventAppName + $EventVerdictText
#eTASK_IM_CHECK		= if($EventShow, $EventAppName + "Message " + $EventObjText + if(DetectType, " containing " + s_RepDetectTypeV(DetectType)) + if(DetectName, " " + object(DetectName)) + " has been detected." + if(Verdict != #eDETECTED, $EventVerdictText))
#eTASK_COMMON_BLTASK    = s_ProductNotifyTextCommonTask(NotificationId)
#eTASK_SANDBOX		= if($EventShow || !Verdict, s_ProductNotifyTextSandbox(Action, @1))

[s_ProductNotifyTextCommonTask]
#eNotifyStatisticsReportReady	= "Application report completed"

[s_ProductNotifyTextSandbox]
#evtCriticalCOMAccess	= "Functionality of safe run application on x64 platform is limited. Application \"" + $EventAppNameNS + "\" can malfunction."
defaulf = 0

[s_RepDetectTypeV]
#eVirware               = "virus"
#eTrojware              = "Trojan program"
#eMalware               = (ObjectType != #eURL) ? "malware" : "malicious URL"
#eAdware                = "adware"
#ePornware              = "auto-dialer"
#eRiskware              = "legal software that can be used by criminals for damaging your computer or personal data"
#eXFiles
#eSoftware              = "known software"
#eVulnerability         = "vulnerability"
#ePhishing              = "phishing URL"
#eDialing               = "hidden dial attempt"
#eAttack                = "network attack"
#eBanner                = "banner"
#eUnwantedWebContent    = "unwanted content"
#eSpam                  = "spam"
#eProbableSpam          = "probable spam"
#eHam                   = "not spam"
#eFileAccess            = "files access"
#eRegistryAccess        = "registry access"
#eNetworkAccess         = "network access"
#eHardwareAccess        = "hardware access"
#eSecurityAccess        = "security settings access"
#eSuspicionActivity     = "suspicious action"
#eHidden                = "hidden object"
default                 = if(@, "unknown threat")

[s_DetectBehaviour]
100     = "Trojan-ArcBomb (\"bombs\" in archives)"
101     = "Backdoor (remote administration)"
102     = "Trojan"
103     = "Trojan-AOL"
104     = "Trojan-Clicker"
105     = "Trojan-Downloader"
106     = "Trojan-Dropper"
107     = "Trojan-MSN"
108     = "Trojan-Notifier"
109     = "Trojan-Proxy"
110     = "Trojan-PSW"
111     = "Trojan-Spy"
112     = "Trojan-DDoS"
114     = "Trojan-IM"
115     = "RootKit"
116     = "Trojan-SMS"
200     = "Email-Worm"
201     = "Worms, using Instant messengers"
202     = "IRC-Worm"
203     = "Net-Worm"
204     = "P2P-Worm"
205     = "Worms"
206     = "Viruses"
300     = "Constructor"
301     = "DoS"
302     = "Exploit"
303     = "FileCryptor"
304     = "Flooder"
305     = "HackTool"
306     = "not-virus:Hoax"
307     = "not-virus:BadJoke"
308     = "Nuker"
309     = "PolyCryptor"
310     = "PolyEngine"
311     = "Sniffer"
312     = "SpamTool"
313     = "Spoofer"
314     = "VirTool"
315     = "Email-Flooder"
316     = "IM-Flooder"
317     = "SMS-Flooder"
400     = "not-a-virus:AdWare"
500     = "not-a-virus:Porn-Dialer"
501     = "not-a-virus:Porn-Downloader"
502     = "not-a-virus:Porn-Tool"
600     = "not-a-virus:Tool"
601     = "not-a-virus:Client-IRC"
602     = "not-a-virus:Dialer"
603     = "not-a-virus:Downloader"
604     = "not-a-virus:Monitor"
605     = "not-a-virus:PSWTool"
606     = "not-a-virus:RemoteAdmin"
607     = "not-a-virus:Server-FTP"
608     = "not-a-virus:Server-Proxy	= 608"
609     = "not-a-virus:Server-Telnet"
610     = "not-a-virus:Server-Web"
611     = "not-a-virus:RiskTool"
612     = "not-a-virus:NetTool"
613     = "not-a-virus:Client-P2P"
614     = "not-a-virus:Client-SMTP"
615     = "not-a-virus:AdTool"
616     = "not-a-virus:FraudTool"
700     = "X-Files"
1000    = ""
default = s_BehaviourByDetectName(DetectName)

[s_BehaviourByDetectName]
Keylogger               = "Keylogger"
Hidden.Object           = s_DetectBehaviour(115)
Heur.Trojan.Generic
Heur.Backdoor.Generic
Heur.Invader
Heur.AntiAV
Heur.Downloader
Heur.KillFiles
Heur.StartPage
Heur.Worm.Generic
Heur.Virus.Generic
Heur.Infector           = "Suspicious behavior (heuristic detection)"
Multi.Packed
Suspicious.Packer		= "Potentially dangerous program"
default                 = @

[s_BehaviourDetails]
100     = "These Trojans are archived files intentionally malformed to sabotage the de-compressor when it attempts to open such file. The affected machine will slow down or crash when the Trojan bomb is triggered, or its disk will be filled with garbage data. ArcBombs are especially dangerous for file and email servers, particularly when incoming data is initially processed automatically: in such cases, an ArcBomb can crash the server."
101     = "These Trojans are remote administration utilities that open affected machines to external control via networks. Their features resemble to a large extent various legal remote administration programs offered by legitimate software vendors."
102     = "This class includes a wide variety of programs that perform actions without the user's knowledge or consent: collecting data and sending it to a cyber criminal, destroying or altering data with malicious intent, causing the computer to malfunction, or using a machine's capabilities for malicious or criminal purposes."
103     = "Currently there is no description available for Trojan-AOL."
104     = "Trojans belonging to this family redirect target computers to specified web sites or other Internet resources without user authorization. Clickers either send the necessary commands to the browser or replace system files where standard Internet URLs are stored (e.g. the 'hosts' file in MS Windows)."
105     = "Trojans of this family download and install new malware, Trojans or adware to the target computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements. All these steps are performed without the knowledge or consent of the user."
106     = "These Trojans are used to install other malware on target computers without the knowledge of their users. Droppers install their payload either without displaying any notification, or displaying a false message about an error in an archived file or incorrect version of the operating system. The new malware is dropped to a specified location on local disk (to the root of the C: drive, to a temporary directory, to Windows directories) and then launched."
107     = "Currently there is no description available for Trojan-MSN."
108     = "These Trojans inform their 'master' about an infected computer. Notifiers confirm that a computer has been successfully infected, and send information about its IP address, open port numbers, email address etc. This information may be delivered by email, in a special request to the master's website, or in an ICQ message."
109     = "Trojans of this family function as proxy servers providing anonymous access to the Internet from infected computers. These Trojans are typically used to spread spam."
110     = "This family (PSW — Password-Stealing-Ware) includes Trojans that steal passwords, usually system passwords from target machines. When launched, PSW Trojans search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send that information to email address(es) coded in the body of the Trojan."
111     = "These Trojan spies collect various information about the users of infected computers including keystrokes, screenshots, lists of active applications, and user actions, forwarding the data to their masters. Trojans of this type are often used to steal user identify information related to banking and other online payment systems."
112     = "Currently there is no description available for Trojan-DDoS."
114     = "Currently there is no description available for Trojan-IM."
115     = "Rootkit is a software code or method designed to hide the presence of certain objects within a computer system (processes, files, registry keys, etc.)."
116     = "This type of programs infects mobile phones."
200     = "The category includes email worms that spread in infected messages. The worm may be in the form of an attachment or the email may contain a link to an infected (compromised or specifically designed by hackers) web site."
201     = "Known worms of this type have a single propagation method. They spread using instant messaging applications by sending links to infected web sites to everyone on the local contact list. The method is practically identical to the distribution approach used in email worms."
202     = "Just like email worms, these worms use the propagation methods listed above - sending links to infected web sites containing their copies or infected files sent to network users. Sending infected files is less effective as the recipient has to confirm receipt, save the file on disk and open (launch) it before the worm can infect the target machine."
203     = "Worms in that family are based on the method they use for infection of remote computers, for example, worm copying to network resources, penetration into target computers through security vulnerabilities of operating systems or applications, infection of public network resources or propagation along with other malware."
204     = "P2P worms copy themselves into a shared folder, usually located on the local machine. Once the worm has successfully placed a copy of itself under a harmless name in a shared folder, the P2P network takes over: the network informs other users about the new resource and provides the infrastructure to download and execute the infected file."
205     = "This category includes programs that propagate via LANs or the Internet with the following objectives: penetrating remote machines, launching copies on target computers, spreading further to other network machines."
206     = "This malware class covers programs that spread their copies throughout a single computer in order to: launch and/or execute this code once a user performs a designated action, infect other resources within the victim machine."
300
314     = "Virus authors use constructor utilities to create new malicious programs and Trojans. There are known constructor tools designed to create viruses for DOS, Windows, and macro viruses. They can be used to generate virus source code, object modules and/or infected files."
301     = "These programs attack web servers by sending numerous requests to the specified server, often causing it to crash under an excessive volume of requests. If the server is not backed by additional resources, it will signal the failure to process requests by denying service. This is why such attacks are called Denial of Service attacks."
302
305     = "These utilities are designed to penetrate remote computers in order to use them as zombies (by using backdoors) or to download other malicious programs to victim machines."
303
309     = "These are hacker utilities used by virus authors to encrypt malicious programs in order to prevent them from being detected by anti-virus software."
304
315
316
317     = "These hacker utilities are used to flood data channels (IRC, IM networks, email, etc.) with useless messages and garbage."
306
307     = "These programs do not cause any direct damage to computers. However, they display notifications informing that such damage is already caused or will be caused in certain conditions, or they warn users about non-existent danger. Hoaxes include, for example, programs that scare users with messages about drive formatting (although no actual formatting occurs in fact), detect viruses in clean files, display strange virus-like messages, and so on, depending on the sense of humor of their authors."
308     = "Hackers use these utilities to crash attacked machines by sending specifically malformed requests. These network requests exploit vulnerabilities in applications and operating systems to cause fatal errors."
310     = "Polymorphic generators are not viruses in the true sense of the word. They do not propagate by opening, closing or writing code into files or reading and writing sectors, etc. The main purpose of these programs is to encrypt the virus body and generate a corresponding decryption routine."
311     = "Currently there is no description available for Sniffer"
312     = "Currently there is no description available for SpamTool"
313     = "Currently there is no description available for Spoofer"
314     = "Utilities designed for easier development of computer viruses and their examination for hacking purposes."
400     = "Programs belonging to this class (Adware, Advware, Spyware, Browser Hijackers) display advertising, usually in the form of graphic banners. They also redirect search requests to advertised web sites."
500
501
502     = "According to Kaspersky Lab experts, the term auto-dialer denotes programs which are involved in causing pornographic content to be displayed to the user."
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620     = "Potentially unwanted software is the generic term used to describe programs that are legitimate in themselves (some of them are offered for sale and are widely used for legal purposes), but that have the potential for misuse by cyber criminals and to harm user and his data."
1000    = "It is a computer crime, fraud based on the principles of social engineering. A criminal creates a practically identical copy of a web site of the selected bank. Then spam technologies are used to send a message meant to look completely similar to real messages from that bank. Bank logos, names and last names of real bank managers are used."
default = s_BehaviourDetailsByDetectName(DetectName)

[s_BehaviourDetailsByDetectName]
Keylogger               = "A program integrating its code with keyboard driver and intercepting keyboard input. Malware of such type can send information entered from the keyboard (logins, passwords, credit card numbers) to criminals. However, normal programs can also intercept keyboard input. Such interception is often employed to invoke program features from another application using hotkeys."
Hidden.Object           = s_BehaviourDetails(115)
Heur.Trojan.Generic     = "Behavior, typical of Trojan programs."
Heur.Backdoor.Generic   = "Behavior typical of backdoor utilities."
Heur.Invader            = "Behavior typical of Trojan programs injecting malicious code into other processes."
Heur.AntiAV             = "Behavior typical of Trojan programs preventing operation of anti-virus solutions and firewalls."
Heur.Downloader         = "Behavior typical of Trojan programs designed for downloading of new malware versions and their installation to target computers."
Heur.KillFiles          = "Behavior typical of Trojan programs that destroy user data and/or operating system files."
Heur.StartPage          = "Behavior typical of Trojan programs that perform unauthorized modification of Internet browser settings."
Heur.Worm.Generic       = "Behavior typical of network worms."
Heur.Virus.Generic      = "Behavior typical of classical viruses."
Heur.Infector           = "Behavior typical of classical viruses."
Multi.Packed			= "File packed several times. Packing of files is a popular method used to decrease file size. However, multiple repacking of a single file in different packers is used in most cases by malware authors to complicate the detection of malicious programs for computer protection tools."
Suspicious.Packer		= "File packed using a potentially dangerous packer program. Packing of files is widely used to decrease file size. The number of existing packer programs is quite large but finite. However, there is a certain number of packer utilities extremely rarely used for legitimate purposes and in most cases employed by malware authors to complicate the detection of malicious programs for computer protection tools."
default                 = "Currently there is no description available for this set of programs."

[s_QBOperationsError]
1   = "System error. " + s_SystemError(ErrorCode) + "."
2   = "Cannot complete operation. " + s_QBStorageError(ErrorCode) + "."
3   = s_QBStorageError(ErrorCode) + "."
4   = "Cannon delete object " + objfile(ObjectName) + " from the Quarantine. " + s_QBStorageError(ErrorCode) + "."
5   = "Cannot send email message. " + s_MailError(ErrorCode) + "."
6   = "Cannot restore object to " + ObjectName + ". " + s_QBStorageError(ErrorCode) + "."
7   = "Cannot send file more often than once a day."
def = "Object " + objfile(ObjectName) + ". " + s_QBStorageError(ErrorCode) + "."

[s_QBStorageError]
0x81000001          = "Cannot delete source file " + objfile(ObjectName) + "."
0x800000D1          = "File with the name " + objfile(ObjectName) + " already exists."
0x800000C5          = "Object " + objfile(ObjectName) + " not found."
0x8000A001          = "Cannot delete source file " + objfile(ObjectName) + "."
0x8000A002          = "Unable to place an object to storage. Object " + objfile(ObjectName) + " is a folder."
0x8000005C          = "Storage size exceeded"
#warnACCESS_DENIED
#errACCESS_DENIED   = "Required rights are not granted"
def                 = s_SystemError(@)

[s_MailError]
0x80000043  = "In order to send an object to Kaspersky Lab you need a preinstalled email client that supports SimpleMAPI"
0x800000D0  = "Cannot attach object to the email message."
def         = s_SystemError(@)

[MainWindow.Protection_CommonStatistics_Info]
ActiveThreats.Name      = "Active threats:"
QuarantinedObjects.Name = "Quarantined objects:"

[MainWindow.Protection_CommonStatistics_Info2]
NetworksConnected.Name      = "Connected networks:"
ApplicationsFiltered.Name   = "Applications under control:"

[AlertDialogT_Bottom]
Text    = SubscriptionStatus==#ssExpired? "Subscription has expired." : $IsTrialKeyExpired? "Trial license has expired." : $IsKeyExpired? "Your license has expired." : $HasNoKeys? "The application you are using is not activated." : "You are using a trial version."
BuyLink = SubscriptionStatus==#ssExpired? "It is recommended to purchase a new subscription." : $IsTrialKeyExpired? "It is recommended to purchase a commercial version." : $IsKeyExpired? "It is recommended to renew license" : $HasNoKeys? "Please activate the application." : "It is recommended to purchase a commercial version."

[MainThreats]
@ = "Protection state - " + $ProductNameLong

[MainThreats_Tab]
Status      = "Status"
Threats     = "Detected threats"
Statistics  = "Report"

[MainWindow.Protection_CommonStatistics]
AVBasesStatus.Name = "Databases status:"

[MainThreats_Tab_Statistics_Switch]
Text      = "Period:"
All       = "Entire period"
Month     = "Month"
Week      = "Week"
Yesterday = "Yesterday"
Today     = "Today"

[s_MainThreats_Tab_Statistics_TimePeriod]
All       = "Entire period report. Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value
Month     = "Month report, " + date_notz(@1 - 60*60*24*30) + " - " + date_notz(@1-1) + ". Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value
Week      = "Week report, " + date_notz(@1 - 60*60*24*7) + " - " + date_notz(@1-1)  + ". Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value
Yesterday = "Yesterday report, " + date_notz(@1 - 60*60*24) + ". Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value
Today     = "Today report, " + date_notz(@1) + ". Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value
def       = "Undefined period. Total objects scanned: " + ctl.TotalCounter.ScannedTotal.value


[ProductStatesWindow_Body]
ShowSkipped = "Show hidden messages"

[ProductStatesWindow_Body_StatusesList_rowedit]
Enable = global.StateFilterMask & prodStateBit(depend(val)) ? "Restore" : "Hide message"

;------------- AskQbPathDialog -----------

[AskQbPathDialog]
@ = "Backup copies storage"

[AskQbPathDialog_Body]
Info = "Please select a location to store reserve copies of files that appear during disinfection and deletion"

[s_FwSocketType]
#fwstAll="any"
#fwstNormal="normal"
#fwstRaw="raw"

[MainWindow_Body.AddSvc]
Header = "Security+"
Descr  = "Extra tools and services that provide enhanced protection for your computer, as well as securing online activities such as banking and shopping, and protecting children on the Internet."
Extras = "Services:"

;-------------------------

[SchedulerView_SmallType]
Days                = "Days"
Weeks               = "Every week"
Monthly             = "Every month"

[MainThreats_Tab_Statistics]
Scheduler = "Notify about the report: " + f_MakeLink(NSettings.treeFind("Childs", "EventID == " + #eNotifyStatisticsReportReady).CheckTray, "onclick(dialog(\"StatisticsNotificationSchedulerDlg\", p_data(statistics_report_schedule)))", if(Type == #schtWeekly, noAmpersand(switch(Type, "SchedulerType")), tolower(noAmpersand(switch(Type, "SchedulerType")))))

[MainWindow_Body.Protection]
$UpdateInfoNormal   = "Databases are up to date"
$ThreatInfoNormal   = "All threats have been neutralized"
$ProductInfoNormal  = "Essential protection services are active"
Header                         = "My Protection Status"
Descr                          = $ProductName + " protects your computer against malicious programs and unauthorized access and provides secure access to the network."
DataSecurity.Caption           = "Files and private data"
DataSecurity.InfoLink.Text     = "How files and private data are protected"
DataSecurity.Description       = "Documents, spreadsheets, presentations, logins and passwords, credit card information, and more."
DataSecurity.DescrLink         = "Settings..."
SystemSecurity.Caption         = "System and applications"
SystemSecurity.InfoLink.Text   = "How system and applications are protected"
SystemSecurity.Description     = "Operating system files and applications installed on your computer."
SystemSecurity.DescrLink       = "Settings..."
OnlineSecurity.Caption         = "Online activity"
OnlineSecurity.InfoLink.Text   = "How online activity is protected"
OnlineSecurity.Description     = "Browsing web sites, banking and shopping online, email and instant messaging, and social networking."
OnlineSecurity.DescrLink       = "Network Monitor"

[MainWindow_Body.Protection.KAVWarning]
KAVWarn                        = "Some protection components are available in " + switch("kis", "ProductTitle") + " only. "
KAVWarnLink                    = "Details..."

[MainWindow.Protection_Radar]
Processed = "Total scanned: " + (ctl.DataCounters.ScannedTotal.value)
Detected  = "Threats detected:"
Detected1  = "Virus:"
Detected2  = "Trojans:"
Detected3  = "Malicious tools:"
Detected4  = "Adware:"
Detected5  = "Riskware:"


[StatisticsNotificationSchedulerDlg]
@ = "Report schedule"
Scheduler = "Notify about the report"

[SettingChoiceAntiphishing_Body]
Header      = "Anti-Phishing settings"
Description = "Anti-Phishing tracks attempts to open phishing sites and blocks them.\nThe " + switch(env("ProductType"), "ProductTitleLong", "") + " databases list all sites currently known to be used for phishing.\nYou can configure Anti-Phishing settings for Web Anti-Virus" + if($IsKIS, ", Anti-Spam") + " and IM Anti-Virus."
Prompt      = "Show Anti-Phishing settings for:"
Web = "Web Anti-Virus"
WebDesc = "Your computer is protected from phishing attacks via IM protocols"
Mail = "Mail Anti-Virus"
MailDesc = "Your computer is protected from getting phishing URLs via mail protocols"
IM = "IM Anti-Virus"
IMDesc = "Your computer is protected from getting phishing URLs via IM protocols"

[MainThreats_Tab_Statistics_FrameLegend_AV]
Header.Name = "Malicious objects"

[MainThreats_Tab_Statistics_FrameLegend_OS]
Header.Name = "Adware and other programs"
Riskware.Name.Text = "Riskware"

[MainThreats_Tab_Statistics_FrameLegend_CF]
Header.Name = "Other"

[f_ComponentFailErrorLink]
$Profile_Error_url= "\n\n<a Support onclick(url(\"http://www.kaspersky-help.com/?hl=" + env("Localization") + "&link=error&type=" + name + " &error=" + lastErr + "&syst=" + global.OSVersion + "&pid=" + env("ProductType") + "&version=" + env("ProductVersion") + "&hotfix=" + global.ProductHotfix + "&serial=" + f_KeySerNum(LicInfo.KeyInfo.KeySerNum) + "&ktype=" + LicInfo.KeyInfo.KeyType + "&kcount=" + LicInfo.KeyInfo.LicenseCount + "&kcreat=" + date(LicInfo.KeyInfo.KeyCreationDate) + "&kexp=" + date(LicInfo.KeyExpirationDate) + "&kinst=" + date(LicInfo.KeyInstallDate) + "\"))>" + $Click_msg + "</a>"
ret = msg(switch(name, "ProfileName") + ": " + s_ProfileError(type, lastErr) + $Profile_Error_url, #m_error)

[ProtectionComponents]
@ = "Protection components - " + $ProductNameLong

[Components_caption]
Text = "Components that protect your computer"
KAVWarn                        = "Some protection components are available in " + switch("kis", "ProductTitle") + " only. "

[component_caption]
AlarmSep   = ": "
Alarm      = "error!"

[SettingChoiceAntiphishing]
@ = "Anti-Phishing"