Gen.Variant.MSILPerseus.58052_3b5191070b

by malwarelabrobot on January 14th, 2017 in Malware Descriptions.

Susp_Dropper (Kaspersky), Gen:Variant.MSILPerseus.58052 (AdAware), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)
Behaviour: Worm, EmailWorm, SpyTool

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 3b5191070b3b7a2c0be8ee8435612110
SHA1: 0178ee9ce73a14644da961f98ff83ba13571c984
SHA256: 6ff9ae213e4c676484b18433b20e67d628a9a023b0e61de0d0f56ca4cbe18bc3
SSDeep: 49152:7A i5iuJNYXgifHLoL3wuyWdON d8QY9W6/PhaG8O0h3rV nzzGyr19q3a:85i0iXgdLA4LfJjhbV nzzbr
Size: 2793984 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2004-08-04 09:01:37
Analyzed on: Windows7 SP1 32-bit

Summary:

Worm. A program that is primarily replicating on networks or removable drives.

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Worm creates the following process(es):

Gerenciador de Janelas do Windows.exe:2300
%original file name%.exe:2472
Server.exe:1912
netsh.exe:3984
CSRKPR~1.EXE:1968

The Worm injects its code into the following process(es):

22.exe:1804
CDT.exe:2840
svchost.exe:816

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process Gerenciador de Janelas do Windows.exe:2300 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)

The process %original file name%.exe:2472 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe (6813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE (38124 bytes)

The process Server.exe:1912 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)

The process 22.exe:1804 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[1].js (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\scripts[1].js (4614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\errorPageStrings[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\iconx2-000000[1].png (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-ui.min[1].css (1070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.nicescroll.min[1].js (38922 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\navcancl[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.themepunch.tools.min[1].js (62820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245[1].jpg (1468 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\comment-reply.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[1].swf (125294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\b0d3c416d0b77963f7715cf086a6160a[1].png (4512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax-loader[1].gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.inview.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\hS2LLdHn7TpvEb4tLPbgig[1].eot (3844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[2].txt (34591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\5f47a8220dd01fa7ff45bdb7a1caedd5[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\mouse.min[1].js (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[2].js (3726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\11750400935445842881[1].gif (20620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\css[1].css (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\theia-sticky-sidebar.min[1].js (2488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\draggable.min[1].js (9202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\nm_mc_style[1].css (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PA3S2ON2.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\font-awesome-extended.min[1].css (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\register.min[1].css (875 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-hayvancilik[1].htm (10755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.themepunch.revolution.min[1].js (34044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\scripts.min[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\all.min[1].js (92305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\CDMJDZXU.txt (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\platform[1].js (23491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (151201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\settings[1].css (10846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\wp-1469792536870-273x182[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\wp-1469155132742-165x110[1].jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\waypoints.min[1].js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (642664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Tren-RaylarÄ±nda-Telefon-Åžarj-367x245[1].jpg (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Farming-Simulator-17-HayvancÄ±lÄ±k-Rehberi-273x182[1].jpg (1084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zrt_lookup[1].htm (4679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-Domuzlar[1].jpg (10520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\b0d3c416d0b77963f7715cf086a6160a[1].png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QUBHI6GC.txt (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\googlelogo_dark_color_84x28dp[1].png (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery[1].js (64921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-[1].jpg (5840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245[1].jpg (2089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Avatar-2-165x110[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[1].txt (42375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1470457551614-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Bedava-Ä°nternet-Paketleri-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zMZWJ0mPeKR6nQmYkwSS0vh35EUeMMG430EhqEnDKeI[1].js (11309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ErrorPageTemplate[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\styles.min[1].css (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-migrate.min[1].js (6611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\conditional[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.autotype.min[1].js (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[1].txt (106958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\wp-embed.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\vc_lte_ie9.min[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\styles[1].css (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\f[1].txt (27540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\11a138d4cd2c71069b982a474c6c2f1d[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\teknogezgini-logo[1].png (2783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\bullet[1] (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1469511914476-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Po-xXyh4cpm8TTuJGV1cyy5S0CjDLt-FLNVratqIZds[1].js (12672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-emoji-release.min[1].js (7075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\httpErrorPagesScripts[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\lq8Mim-yTjM[1].htm (5174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\foundation-icons[1].css (5376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\12303209505774623573[1].png (14873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-1[1].css (76657 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\s[1].htm (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\3KAd02OzFSDbt78HTOt2og[1].eot (12244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\dialog.min[1].js (3829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\5dff6dff908a697dfcc3c0331bc44ee8[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\fontawesome-webfont[1].eot (29081 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\ca-pub-9074486242767801[1].js (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt_likes[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\register.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ad_status[1].js (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\admin-ajax[1].htm (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\font-awesome.min[1].css (15152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (79837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\tablet-sifre-kÄ±rma-reset-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.form.min[1].js (11565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.tweet.min[1].js (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\login.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\hqdefault[1].jpg (19717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\x_button_blue2[1].png (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\HObEGlw4O0E[1].htm (5222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BS3FDFYX.txt (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\background_gradient[1] (453 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[1].htm (13799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\WMZUWJRG\teknogezgini[1].xml (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\xt_likes[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-3[1].css (51704 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[2].htm (15685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\position.min[1].js (1639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\hqdefault[1].jpg (4690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (121437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min[1].css (235985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt-socialshare.min[1].js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\login.min[1].css (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-Ä°nekler[1].png (37820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\jquery.visible.min[1].js (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\button.min[1].js (2733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-2[1].css (97587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\default[1].css (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\modernizr.min[1].js (14715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\widget.min[1].js (2251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\info_48[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\OZDIKCNB\www.youtube[1].xml (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\core.min[1].js (2359 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\galleria-1.4.2.min[1].js (41963 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\resizable.min[1].js (8261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[2].txt (46288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\7e5cc5fb8d2fd78d5ec9412ea4ffc50f[1].png (1 bytes)

The Worm deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (0 bytes)

The process CSRKPR~1.EXE:1968 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)

The process CDT.exe:2840 makes changes in the file system.
The Worm creates and/or writes to the following file(s):

C:\ProgramData\XKQ\CDT.004 (4972 bytes)

Registry activity

The process Gerenciador de Janelas do Windows.exe:2300 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Worm deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process %original file name%.exe:2472 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\"

The process Server.exe:1912 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
"AutoDetect" = "1"

[HKCU]
"di" = "!"

The Worm deletes the following value(s) in system registry:

The process 22.exe:1804 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\teknogezgini.net]
"(Default)" = "24"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"cFormatTags" = "2"
"aFormatTagCache" = "01 00 00 00 10 00 00 00 55 00 00 00 1E 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad]
"WpadLastNetwork" = "{24C5EDBC-2851-452A-B521-5DA992F6C1B5}"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Total]
"(Default)" = "91578"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com]
"(Default)" = "6"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1483395295"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecision" = "3"
"WpadDecisionTime" = "F0 69 00 4E D4 6D D2 01"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "22.exe"

[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"cFilterTags" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecision" = "3"

[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"fdwSupport" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 36 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadNetworkName" = "Network 2"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"EnableConsoleTracing" = "0"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 09 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecisionTime" = "F0 69 00 4E D4 6D D2 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Worm deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process netsh.exe:3984 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%SystemRoot%\system32]
"napipsec.dll,-4" = "1.0"
"eapqec.dll,-103" = "Microsoft Corporation"
"tsgqec.dll,-100" = "RD Gateway Quarantine Enforcement Client"
"tsgqec.dll,-103" = "Microsoft Corporation"
"napipsec.dll,-1" = "IPsec Relying Party"
"napipsec.dll,-2" = "Provides IPsec based enforcement for Network Access Protection"
"napipsec.dll,-3" = "Microsoft Corporation"
"eapqec.dll,-100" = "EAP Quarantine Enforcement Client"
"eapqec.dll,-101" = "Provides Network Access Protection enforcement for EAP authenticated network connections, such as those used with 802.1X and VPN technologies."
"tsgqec.dll,-101" = "Provides RD Gateway enforcement for NAP"
"eapqec.dll,-102" = "1.0"
"dhcpqec.dll,-101" = "Provides DHCP based enforcement for NAP"
"dhcpqec.dll,-100" = "DHCP Quarantine Enforcement Client"
"dhcpqec.dll,-103" = "1.0"
"dhcpqec.dll,-102" = "Microsoft Corporation"
"tsgqec.dll,-102" = "1.0"

The process CSRKPR~1.EXE:1968 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Worm deletes the following value(s) in system registry:

The process CDT.exe:2840 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe"

Dropped PE files

MD5	File path
a47463d5eb3261169b6d216579b0ceb5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe
b2f682de6f40f6917b3db2a2e8cd1253	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe
7d7a865c06dd16081a8568e0d8c29d7c	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE
fd4d5c819fe5a9f8b40d18c7d914c5cd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe
b1936b29dd260e0dc7d46a09df4134da	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01
c1df4e6fe747f2bdc8561b089804efad	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02
6a8ce42b097c7a3fdce00acf554a1c48	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe
fd4d5c819fe5a9f8b40d18c7d914c5cd	c:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: Microsoft Corporation
Product Name: HD Player
Product Version: 6.00.2900.2180
Legal Copyright: (c) Microsoft Corporation. Reservados todos los derechos.
Legal Trademarks:
Original Filename: WEXTRACT.EXE
Internal Name: Wextract
File Version: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
File Description: Win32 Cabinet Self-Extractor
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	39212	39424	4.55071	4e87890fefdd18aef9a1aa26fdf11116
.data	45056	7140	1024	2.94449	99858e86526942a66950c7139f78a725
.rsrc	53248	2752012	2752512	5.52931	baf4e86be20c9de434ec6e377063d2fe

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/easy-foundation-shortcodes/styles/foundation-icons.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/likes/css/xt_likes.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/fontawesome/css/font-awesome.min.css?ver=4.7.1	5.2.85.61
hxxp://googleadapis.l.google.com/css?family=Roboto:300,400\|Exo:700,300,400&subset=latin-ext&ver=1482346734
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/font-awesome/css/font-awesome-extended.min.css?ver=4.7.1	5.2.85.61
hxxp://pagead46.l.doubleclick.net/pagead/js/adsbygoogle.js
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/skins/default.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/jquery-ui.min.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/styles.min.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/common/css/styles.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-1.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-2.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-3.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/xt-mailchimp/nm_mc_style.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/jquery.js?ver=1.12.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/widget.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/js_composer_5.0.1/assets/css/vc_lte_ie9.min.css	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/02/teknogezgini-logo.png	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/wp-emoji-release.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.css?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/xt-galleria/galleria/galleria-1.4.2.min.js?ver=1.4.2	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/advanced-news/assets/widget.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/common/js/conditional.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/jquery.tweet.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/xt-mailchimp/js/ajax.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2017/01/Tren-RaylarÄ±nda-Telefon-Åžarj-367x245.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-HayvancÄ±lÄ±k-Rehberi-273x182.jpg	5.2.85.61
hxxp://gstaticadssl.l.google.com/s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot
hxxp://2.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g	192.0.73.2
hxxp://2.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g	192.0.73.2
hxxp://2.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g	192.0.73.2
hxxp://teknogezgini.net/wp-content/uploads/2016/08/wp-1470457551614-273x182.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469792536870-273x182.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/farming-simulator-17-Domuzlar.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-Ä°nekler.png	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469511914476-273x182.jpg	5.2.85.61
hxxp://gstaticadssl.l.google.com/s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/fontawesome/fonts/fontawesome-webfont.eot?v=4.4.0	5.2.85.61
hxxp://pagead46.l.doubleclick.net/pagead/js/r20170109/r20170110/show_ads_impl.js
hxxp://e6845.dscb1.akamaiedge.net/crls/secureca.crl
hxxp://2.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g	192.0.73.2
hxxp://2.gravatar.com/avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g	192.0.73.2
hxxp://2.gravatar.com/avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g	192.0.73.2
hxxp://teknogezgini.net/wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/11/Avatar-2-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469155132742-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2015/12/tablet-sifre-kÄ±rma-reset-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/02/Bedava-Ä°nternet-Paketleri-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110.jpg	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/likes/js/xt_likes.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-inview/jquery.inview.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/button.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/js/xt-socialshare.min.js?ver=1.0.0	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4	5.2.85.61
hxxp://e8218.dscb1.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg==
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4	5.2.85.61
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/scripts.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/comment-reply.min.js?ver=4.7.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/modernizr/modernizr.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-content/plugins/js_composer_5.0.1/assets/lib/waypoints/waypoints.min.js?ver=5.0.1	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-nicescroll/jquery.nicescroll.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/sticky-sidebar/js/theia-sticky-sidebar.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-autotype/jquery.autotype.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-visible/jquery.visible.min.js	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/js/all.min.js?ver=1.0	5.2.85.61
hxxp://teknogezgini.net/wp-includes/js/wp-embed.min.js?ver=4.7.1	5.2.85.61
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK
hxxp://teknogezgini.net/wp-admin/admin-ajax.php?action=refresh_likes&post_id=693	5.2.85.61
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/img/ajax-loader.gif	5.2.85.61
hxxp://teknogezgini.net/wp-admin/admin-ajax.php?lang=	5.2.85.61
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC	172.217.20.174
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/	172.217.20.174
hxxp://1.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g	192.0.73.2
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n	172.217.20.174
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK	172.217.20.174
hxxp://fonts.googleapis.com/css?family=Roboto:300,400\|Exo:700,300,400&subset=latin-ext&ver=1482346734	216.58.214.202
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu	172.217.20.174
hxxp://crl.geotrust.com/crls/secureca.crl	23.43.133.163
hxxp://pagead2.googlesyndication.com/pagead/js/r20170109/r20170110/show_ads_impl.js	172.217.20.162
hxxp://fonts.gstatic.com/s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot	172.217.20.195
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg==	23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7	172.217.20.174
hxxp://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js	172.217.20.162
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE	172.217.20.174
hxxp://1.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g	192.0.73.2
hxxp://fonts.gstatic.com/s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot	172.217.20.195
googleads.g.doubleclick.net	216.58.209.66
www.google.com	173.194.113.209
cm.g.doubleclick.net	173.194.113.217
www.youtube.com	172.217.20.174
s.ytimg.com	216.58.209.174
i.ytimg.com	216.58.209.174
www.gstatic.com	216.58.209.67
habbogerador.ddns.net	200.236.238.24
static.doubleclick.net	173.194.113.220
apis.google.com	172.217.20.174
tpc.googlesyndication.com	216.58.209.33

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /wp-content/plugins/easy-foundation-shortcodes/styles/foundation-icons.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:44:35 GMT

Content-Type: text/css

Content-Length: 4021

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
............K....... ...mX3=o{.H.E...&H6A6....[.eQ.....=.z.}.V..]...^.
.{j^}{xq....0..r..?.T.>...o_.....Gw........vxs....<M..W...c.....
.-.Ncj.Usm...L..~.......}...]...........)kw.............4..~$$....<
._..|I......K...o......k...o.......s]..Gw,....ipw.|G._..../.iDK...4x.d
.4...]<>..J/....:q.T....._.?..O.>=n...R....q.o/^.l|Q......Bx.
T9zE....u.dJ../..Nn.T.Lw...LM..\K.r...}}.....S99..X...-...8.Ko.T.w0...
.,...m..z...U..}.........E.........}4.d*"}..Ve..vM...........u..?.^...
..^q..F_.Ou....X...g..*].z.>.....t.\h.kKB\....~|.h*@j,}kop..T.../..
.2. .&..N-....Xj..j}.u*..g..~.B9.....r..u44.^..k.i....!..V.C..-<..M
...K...gs/[./3..V.......5.2h}(Mg..e....F=....iFs.c.....m.6...Nh.,.2j..
. .;.,.a..<......_8q.ytHN....>...p.m...H....rSt..P...~v.~..u..d.
.7..^....................UA..Z.n..../...c..m7my..44.1.P.....Yp..."x...
.X...2=|-....!]..I....W..N#....3u......]9...o"...>.N_.<u.{u..nS7
n....w4.......#.Z1.N..-.(......em.....T[ s. .`.zR...N?.R...h..q)..T...
.G.T./o....$]y.i..>...#SGWP.-= #.[=#......&2...;.....y..r.4~.fg...@
c.._ZK.U.5.>C.....&`*}..y7G...}._.....0*.]x....;.'.}.)...e...G.?..g
...|.Z.Ka.f..Z.....\.[]..5n8.e.z....Ece.......N~0.Zj.....fu.....Z/.R..
.O.H5.......h...j.r6..P.U.P>.Fe....y..Q.s......#...i.rfH;W....q....
.....-&3;...........i.gO e.}...kZ...V:N/`.........z......F..NE.j* ...H
.X.)_.......M .d.kt.X.f-......)1..X.i.si..x..O...|4..g..~!..0.A.2..ZA 
G.).yn..Z.....P..-....zu.U..P...Wt%-....k.....g..l..**w..:{....{H.N'..
...D_....iJ.%....4.../ix......?.1|..}UU..o1.]y_.....o.=.1m.r.8.6.F<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/jquery-ui.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:54 GMT

Content-Type: text/css

Content-Length: 1615

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........X.R.8.../.T.V.8.`..y...}....yPl...X.K&......X.I.......:.}..
..'..B6Ds-.....R.Y...J...6....h...*....T.=o....6 e..`.?...d.pw..e.f.M.
.Vr./.C..,......2...lyU..Xq......eo..-K....v.....6..%..Y!X.s...t.x..P.
.....Y....m.... ..@.Z.......U`..... eO....0Z*...E.}.=.......^.F...rZk.
.K0.ku~.^.^....c.....#.H.-.8h..........V..q.3.?..1..5.WO...x.p.=......
.^Zvh..,X...eGK...5..].Ct[z.......s........U.r......t..7..d.ik...>#
..]..x.......|b=.t..Rlh...rh .....[.F....0Mp...x..y..6...A..o=...'K.q.
li[.....LI....AU....).NO$t...n.tz...0..kx...(..1....wG..B>{.>...
0h0r.s.....KQ.K.Nk.{G.....d1 ....^.....<{/f.V.M...GR..FM.,.....c...
.T.....A...oA.....\.a.(...0....QI.z.....X..#.^C}..1..JYe..4..hc\.N.W..
DMr.....gk.K.........?&.<K......W.H`....PB.&=Q..6G..s...S....'.....
...&.c;(..,. .X....k...Fb...7n.".....I........8.... .8.._......KUO..s.
9W.@..q...=....QK....K6..l.1..4...0`t<.6vI).....zm.z.......>....
...... .]c.p.?.Ur... ;.B6...".z...w.fCo..>.....j...g^....}.o}.Ot.vA
.R.A...V|P9...qv)..w..\.>]..u.9g...,....Kgv...l..}.....c....r'....P
'p&.$.zq.....\..yW.y'.hT...H.NvC.....L?'.|T.9.5s..*mx}K.B.L.!......}J.
.......N.t...y....CtHV&N...9%n..-.....|7...v..v....w...f: ;t./..m7.xB1
.....1.g..Xr,......./&...%M.f......v5.gg...=...."....d...S?w.......AjW
...q.kz.2Y.Yp.(D...qa1%,X..&.d'.......sg.O~.2||....OkUU.E.6 ....%m.]@.
._.d.....;...i.......kU...r.R..HB.7|...#...]..[................b......
.K|..4...}.....S1%...E.;......#./2.....p*H...p....X>..'.....LVw_...
B....nV........5^.c:..*."..K..W.....P=.u..../?...c..x..........w..<<< skipped >>>

GET /wp-content/themes/goodnews/lib/widgets/assets/common/css/styles.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:26:31 GMT

Content-Type: text/css

ntCoent-Length: 91

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Vary: Accept-Encoding

Connection: Keep-Alive

Content-Encoding: gzip

Content-Length: 105

............A.. .@...Bp...Ez.m&...-2..g..... .1P..(T(x............cnVp
.......F......`1..5..B"....n...[.......

GET /wp-content/uploads/goodnews/style.min-1.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT

Content-Type: text/css

Content-Length: 25838

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.............sc..(.Wx....Dd..h..V^..8..M%..a....y$.C.Z...U.._?.n<..
53v.Of....F...h..._Oo...............~...lo..W..vx.....&.f..n....bx..n.
...f.];lf..o.....g..7.....R.x...{.m....d|.......=h6.Y{0k..|.9.._O...|.
.?.....j.m..7m3...^....n...`..>..S......w....n...\.V.W...l.:.6.....
n..^....khq.@...|....u.l5.a.._/'....Z.4Y....=...W..7.....`n.........|6
k...l.[`g.z.........,g....{.......4... .....yX.o.........|.h.y.\.A....
v..........vv.xy.......7...j.U..%.n....d..NN/.o....:9jo/TI..........,.
.]]./...j=.l<...m...A....9<n....;C.....H.ATw....8Y. '..EU.Hj....
..S`......PtDe..k...l...46Y..=.@y^-Vo&...G.0..C.....-.d.0.]}..}.V>_
^OP.. ,....>=....Xs.]]<NW`...g`..........]-W`... .uA......Z.....
...~{....8.....f.v...<.N.....["1...T%.9|=../.`....}.AN.y.Z.. q...:.
......]..g\...fP.a......v;.......]......&r1._o...Vs..Z....v.l..90.....
..W...F...LH.W...f8_.....yy...f6C......5.%..YH..sz.N_.U$]]7.|...^..}{.
."........7...S.z.../."} ...<.x... ...h.7 ..MY....y.~.k,(...=...Uz.
L..s.....].:]E.......jY./6a....*...f.....M../....x....1...xt......y.E{
..gJk../......5.......[.p!6...h.6-8...B..]...vv..y.<....tt....a.>
;o......_..NFg.|.......rqO.~.Z...6.u.....|.....6....l~..4g...r6.......
...}...."..D.m../.@....,.}.'..#O...I.M.l..>..9m.m3l....<B;\6.-M.
N<W.b.......^..(V{....'.-x...h..e..c...W..0Ue......p.%vL...........
..0qY...........:.@....F....G4...Cf....w...F...[.Z..w.P..1.Yw .fVK....
.....{...ms.w.F.@.`....-L.3..%.fu.-......N.......n..6.a........f;.?}..
CX...}5....j.VMg......O...]h(N>..MA....x.u...1....C....,.&.....<<< skipped >>>

GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Fri, 14 Oct 2016 12:09:50 GMT

Content-Type: application/javascript

Content-Length: 39407

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
............iw#....~>..k(.Y.Z...."....dk...eH.......H..E.......T..J
..{.s.#..Z.r..="..lo]......zs...t....V....?..N..r<....F..g...d. ..r
....l.n.=.h.Y.u..u/.........l.u5..N...G^....g...........z.W.t..R..a.]5
......U..r4.....o.^...y...5/on..r.Ul..O..y;^....7Z..ry;.n.J..m...F]...
.....p.w.O{9./..C...b...O..~....{..MW6..7...e6...v1.F\......l...g..x.9
{........Q........../.g.....n...4.w..F31..L.|.....f../.g...._~....O..w
Wk.....k..]-.....`.yz./.~=o....|sc]z..k...X.....Z......r&(......2&`...
...y{.-....e..M..p9j.f....y..Z....U.. &....u...eU.......v^t.O..J.....w
........zeZ.W..wY.RK.e$W.|XZ.Z.0.f  *.a...o..s......wK..7Y.> ....NX
.}..v..u..7.....7.^q.>....zqB.7k<.J.[.k.X..K.U\.......?.....*...
.d....7.C.L..,.wD..... ..;Y......M-e.}..z.....pg.{.....i...}z......z'.
.Z......g...0[...l`~........>..........u\.7.p"......."L....j.N..G..
...)X`..x <...&e1...pg.y..k..|e........V.....K.[.Us..i.z...o..v...:
....GT..u;.YV.;...Z.W.k<.*[E><...J.~..y.S.vv..V.......P...n./
l.....4..........e...Z.v|..eo.?5O.n...L2.......C.. .......5. >.d...
Ec.y..u........j....I. ..g/...F ././.....aV..T0...S"...l.l............
C.:....m.#...o...*...G..B....?........;;E..r$N.}....{.O.&e..H..ar...cK
.]..E..dV,......U....^.wP..j.....h..`/...:..._.c.Z.m....\....._.fB..p3
..U--...\.4 D...}..h.5...V.&.."}Y.M.....F..=...>....{.}.?{;.\..6Zm"
.b/..t..h;..h..UR.>....*..h% .)v..v.....Lc.............'|.V#.{..r2.
...o.I.(.RW.....X.?.l....7._/.(. o.6...._.g.......j. .U..z.5`_........
..7..|,........`.Jt...5{...Ml...R..@...c.s!.........r.;......I.KS.<<< skipped >>>

GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:41:26 GMT

Content-Type: application/javascript

Content-Length: 15707

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........}k{.F........LZ E..IHSZ.I..ubo...Y..."!.1.h.P.,.....S7....{
fz/...(....S.........y.....iy5.O...|..N.ezQ,.uV....N....`.....$.;.E...
..9Xd..dG.."- 4.w..F....`4.<.....m...2 ..vw1.|.A_..N.N.N.:.w..3.|.-
.e}...8......n......ct.Ev...]G.*.Tu...h....A..N.y...c..$........y.H...
..c......"}.^..j.d..'.EVeG."..L..G.'.....'.._..?.f.!>)..e6.O...y(O.
ivrZ.....Y....a....!*........:O.QU'.<)...urU,.q.FQ|.\,.fe.....W.M..
.,.......7...zs|\..."..,O.q.../..0.O../.s..y.:;...P../....@..<...E.
.,N.....c.R...y-...Q\......(. )9M..%...5p....{..E..&uR...n..E.......x{
...,.. .N.......,.|[...:.9...(.t..qt.d.A6z..&e...?..)......(.}...Y....
l...y../<|. }..T.C.@Uvv...../,<....(.~..5.......2@1.........5...
%.O>..kA...B...h...........a..i.d.?y.?..O..@.??...._?.....<...ev
R..4....,.....8>..N.`2..<...u.f..E~..r>..V._...G'.@....,*....
ljd...,........gEY.r..X...'8[.Y.C.m.%%.-.../.g...0!.........u6[/...,w.
.....w.|...}.....j...V........y*g.....)..G.M.........CV5....U.NRTI}...
(A...d..)..."..|..'.8!..>..T.gc.F.\d':............@..p.....<...B
...X,.MI...%7...Kgu..(......Ybu.....UuZ,.c`...*.>Z..x......hQ.>.
.}.9........,.q..... ...%.....L."M.p..`.*i......xh.x...9..0k....[...gX
{./.c..S.]|.n.G.l......1.........%.........@...?...[....{...".}.....l.
T.4.....~v......]...P.......6.O.gGy...nC...GD.{-......29?.14gm.(.%.bQ.
....)./r..H...#3.g5Zge1..z.......m.....7l3.@......Er...%.|t/...?. 9.o.
.....n..(......Tr..O....@A..`u/.;....6....>n..{.d.|..8..Ae......Y..
wz.<.....5....\.y'..........'=..........n.t.]..M...,..4.x6x{;..<<< skipped >>>

GET /wp-content/themes/goodnews/lib/widgets/assets/common/js/conditional.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:26:26 GMT

Content-Type: application/javascript

Content-Length: 628

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........T.n.0.=._...$-..^..../.9(...c..m.J. ....%...lA`....#).....g
Q...h.'Uotq.....m....4I.7.......`\..Ma..k.c#V.K.&.[.~pY.....?.-....\..
......50:....vz=T..-_V...la...2:...QK.CBLW.A*...BP...@.(..o.TI".......
.F.Q.'6.p...xLBp..K...w...G.|.....i....`...D.I...9.'3.`...DA.O.? ....4
.W.g..5#.&UZSc....Y.......>14..u..a:.....`.~S.^...1..J......-ta.s).
^.N.......4.1 .[.c^.X......!....*.:........"".B.<.;.7.(Y1.....o..9.
.HF ...VT.gT..?&N.^..)....../...Yr.e..P.8A.............J7..W.Q...~....
B..g.k.?x....../...L...........[.....^"!....d.`.O.8.(.>...,D...,. ,
..L17_.8.%..(I*N<......o...fs.. ~.AR.......S.....=....W{.j.nt.>.
jI.......9...HTTP/1.1 200 OK..Cache-Control: max-age=2592000       ..E
xpires: Fri, 20 Jan 2017 19:35:58 GMT..Last-Modified: Sat, 22 Oct 2016
 09:26:26 GMT..Content-Type: application/javascript..Content-Length: 6
28..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Dat
e: Fri, 13 Jan 2017 19:35:58 GMT..Accept-Ranges: bytes..Server: LiteSp
eed..Connection: Keep-Alive.............T.n.0.=._...$-..^..../.9(...c.
.m.J. ....%...lA`....#).....gQ...h.'Uotq.....m....4I.7.......`\..Ma..k
.c#V.K.&.[.~pY.....?.-....\........50:....vz=T..-_V...la...2:...QK.CBL
W.A*...BP...@.(..o.TI"........F.Q.'6.p...xLBp..K...w...G.|.....i....`.
..D.I...9.'3.`...DA.O.? ....4.W.g..5#.&UZSc....Y.......>14..u..a:..
...`.~S.^...1..J......-ta.s).^.N.......4.1 .[.c^.X......!....*.:......
.."".B.<.;.7.(Y1.....o..9..HF ...VT.gT..?&N.^..)....../...Yr.e..P.8
A.............J7..W.Q...~....B..g.k.?x....../...L...........[.....<<< skipped >>>

GET /wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Fri, 28 Oct 2016 20:10:32 GMT

Content-Type: image/jpeg

Content-Length: 22904

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$........o..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?.../.jVX0....X.WM
.|Gx........ ..a3J....^....<.F..^..=z.]...@...7q.T.Wn>....^n.zar
26...W.'.u>......Hnc...8."xe....X...f..:.d....Gn./..3}.]Z]>..t..
..}Ee.1.k....3M.....--...y.H:........L....&.h......\...=zU\....3..iv..
.S.|......[(..0...S...4ck.....".R.......i.Y..).. N2.<...3rh.a...:sS
..=....Di8..d...*..l...i.u.q..EU.,.k..gg....I..l....T:|.3.T.....|k....
...o....<D.`........?.[..I...n.MuF.4..7......!.<.&B.....*..rj\e)
_..R..;|..O#....\....i`...^.i......5........A..yv.....-F.....O..b...R]
.s.F@...W...z...8..w...I.5.\.....6....n..t..k...m..3g59].......a8_C...
.........*kUO.Fd.M.ug;HNVW=K.....z..~@....\.../....r...^..v.iz\.f..z..
..W...F9.........,...16....=v........#..UU#..V...,U.!i...0....G..^.z.`
....5.......> O.....61...~ai..P....e.............O.Q..c...k.o.^...U
.0 ...0..^......4..........$d...4....9k..e.. ..1.z..9<.~.....j.<<< skipped >>>

GET /wp-content/uploads/2016/08/wp-1470457551614-273x182.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT

Content-Type: image/jpeg

Content-Length: 19454

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$...........".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?....T][O.. ..X}..
...^.y...k.......a.*x%_.y.!.!..w9.{.......W%........r...IbH..........^
[..,.PQ...@.....u..c.c....X6U=dcizu..#[G$..~i$........Y..$tB]T..8.=qSE
$I......W<.>.Z. ..Cd..k.R:..\.....f...2..b>.....K...~........
n.co...g.......V)%RX.}..#..D......x.ew.....]..Q..S........../.....e...
0...............]68.<.... =~............{.4V......v^2.g...Z.0......
[..m...b...x......-r- .{t....,...X...)..s]\].o.."DZF.7..#....T..\J.8`.
......v....-.{[cmc5.Z}.'.....7....b....m....^.T..I..;....4g..F....?Z..
q^/..4."..<..i....H.....q.W.g...*...jb..B]f...{u.....^...yt.......L
....%.......^....Eh.gmk...X3.......q^m.x..M<.@..'9.F...H....J..()..
.b.U....O....F......G..k.......^..a..g.$f3....v.......M".C....B.f.f.0T
e?.q..=.8...'.ShZn.qsb......P&..pq.z...oVK;.r.3N........g...1L.......:
.{.WM..l.~"k.ZY}..cGs....1.=;~..wf.#.3m......{...~..|@......"..Ln.<<< skipped >>>

GET /wp-content/uploads/2016/10/Farming-Simulator-17-Ä°nekler.png HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:59 GMT

Last-Modified: Sun, 30 Oct 2016 21:02:44 GMT

Content-Type: image/png

Content-Length: 562412

Date: Fri, 13 Jan 2017 19:35:59 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.PNG........IHDR.....................IDATx.....$I.&...k.....L..EWUwUO.
.N....w...y. .....@..'x$....x......w...........U...U...../.t.f..0...2^
Vf...z..e...f.}...../..?......~... .0LS.l...W.....Ba...aZliu7SX..B..o.
.....O..l...R...~....V..L..9...9..e...s.K.U...-M../-Y.u||.qR.T.....[..
....zx...n.W,...OT.1.r./b.# .J..Z:..6...3%#..o.3.e..e..'..e..~....8V..
%.A..!.B.0.!.!......A.>...gl.k..s.@4.-....|.6B..?..|<..C...?GI..
1Lv...LoC.y.....O...t.~........W. ..2....f6.....h....O~..nQ..u........
.c...q...c...:3.;. hS.V..c..A....C.{.`..........g0h.t..Z1.{S.m....k..y
.].............8.o.^9..NX...1`..tOM.b...w....7V .&..E..E.A{;....5..>
;W.m*..'y....~........M.._K'.......<u|..X<.G.....gA'ap*....... .
..s..F2......e..'.-.OX...{..(>...\...W...Z..... .l.....[o...tJ.i...
=..eI.(J........`...f.b.z.`......J....,!....C.q,.:::.z.j.L.....O1.....
....I../...N....;;W...(.......`.@...m[F.c..[.n.....$..:..........Y...!
. .q.......AH.>."D...B....F_.j.. .dm%hX/<.}.......O.{...........
w>y...R_.hB...<0..ty............A....@.....~..Y..DD.....@5>..
.*Jr.|..Ba..7.....z...zt..=.q.......)8..$Bp..{...>....5@....;.TDt.}
...x...<t......C..'.. ........e.@.mcE1......i... 663.....i..._..7i.
.(y.................l>...{z...l..l..L~.... ..n...n....0|:...=U../0[
[;..n..0...Ok....7.._}.......KR.......v..(c..K.t:...c.!.....B.^#..,t..
.X....}....c....B..2... ..d...q.r.....#...A...e.x.=,..../....j#.;..X..
|{.o.t._.i9.,...B.... #....p...$..F.4.e".7B.Aqv6@.4.L.q._..K.....C.3.t
.......0....v....C.... B.....g. 0...8..9.......ihN...Y....r.?.;.\8<<< skipped >>>

GET /wp-content/uploads/2015/12/tablet-sifre-kÄ±rma-reset-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:04 GMT

Last-Modified: Sat, 22 Oct 2016 10:20:17 GMT

Content-Type: image/jpeg

Content-Length: 7586

Date: Fri, 13 Jan 2017 19:36:04 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?....4g.......K...
.c.w..[#y...`o\W..~..j......W._.|..x./>.4.Mp6FG. .....W.s3...Ue....
m..O... .P..=...<......}_.xCB.....i...>UX.U.B.4..-.NX.D.8.../. .
....$........k..y^OC.0XzxXr.k..7.,.M.!.Pm.^.z. ....o...E...%....*....!
...Ct$.......|Y.YYX.6..g*...'....N.t..rk....z......Vo...L..L...j......
.=B...l.p.!%.'.0..kQ.%(............#....u.`...$...e.X....3.....K......
.......#vd....\.H..U....f......t_.?..._....M.Q.CE&..%...X..Y..-._.hZ?.
.ne:...'.Z..w...f.~........Sv....~.&~{........}O.y4..|}...i.x..zkd ..t
........_4|T...Y....k...7...l...7......~..._<[.&O.jCT.'.5.......2..
......W.x/......d. .m.g.....y. z.Q..)..>?..,%..|....z~'=...[...../.
..o...fi....&..O...7#..<....=..g...W.X.)P.du!...zW.O.o.[........xkQ
|.i.(.g.L......v....|4..i.x...^...SPD.q.pVt!........I.<M7...{1.....
.....J....I.S..Cas.].<.\.NrWM.S...&.nQ.F>....O.7....._..F...<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/jquery-inview/jquery.inview.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Sat, 22 Oct 2016 09:21:18 GMT

Content-Type: application/javascript

Content-Length: 799

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........mT.n.8....(..f.d.n.2^..f..E..3. .F.....@]9.H..^J.S{..u..s..;
.........p..M\......[....z...I....z....q....W^....A...Cc.s(@r..5..k..Q
=..I..f..f..}..493.5....K..K.V.....&........Q.2..14.oc*..KY...P.6.....
.....F:(..)....;.].$.i..Y.....r. .o.hJP...~..W....Z...W4..M._...i.B.}.
.%G.&.y....%...T.0hT..r........Z..i.LQp.....>D..H.#...(C.A.a 8.Z..@
.....3...........t..A.....FV......B. 2(...JM.\......].z$!....G..L.y...
:..f...r........L........M.$....&qQ..d..u..=kn..=...,;..x.t.R.....5.9.
..(......!.HM/.Q.$.3..I......=.............F(..*..M.......52...X_.6..A
.c.|..t2.~$..!..^d...%.Y.D.E{;..F% .h.9...H..m .......{.[vB)a4...:;O..
m.......g ..f........mo...|y|"H.(..q....'....^....3...p...._zzk.a...cn
..dE?...Q7w`....DE.9Gk..........."..?X.R....Q..]O...u.xx.vvg[.z`7..!..
'...Y.%....,..q.O_;./b....<~....HTTP/1.1 200 OK..Cache-Control: max
-age=2592000       ..Expires: Fri, 20 Jan 2017 19:36:06 GMT..Last-Modi
fied: Sat, 22 Oct 2016 09:21:18 GMT..Content-Type: application/javascr
ipt..Content-Length: 799..Content-Encoding: gzip..Vary: Accept-Encodin
g,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:06 GMT..Accept-Ranges:
 bytes..Server: LiteSpeed..Connection: Keep-Alive............mT.n.8...
.(..f.d.n.2^..f..E..3. .F.....@]9.H..^J.S{..u..s..;.........p..M\.....
.[....z...I....z....q....W^....A...Cc.s(@r..5..k..Q=..I..f..f..}..493.
5....K..K.V.....&........Q.2..14.oc*..KY...P.6..........F:(..)....;.].
$.i..Y.....r. .o.hJP...~..W....Z...W4..M._...i.B.}..%G.&.y....%...T.0h
T..r........Z..i.LQp.....>D..H.#...(C.A.a 8.Z..@.....3.........<<< skipped >>>

GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT

Content-Type: application/javascript

Content-Length: 1926

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........W.r.F.}.W..-...@2.&6..%Kt.Z[Rd...([.`@.......$.}O...-....*a
n.=g..i...}.|.|..V.....9.......{F.........i..^..1M g.....U..~..Y, .g..
b'.V.p.<....U^.t.F.J.*v........uR...T.....X....q...h.8.a$ ....a.O".
b...ozI.E.. ........F....Dg....=..g..]0k....}.Z...m.......P.|{/.G.D,.*
..,...\ .....Uq...|Z...2&.%.H.....7.g.%..$P^.s...BoU.d.........Z}.2...
e ]...E]*l.............N.z.~?r..s.....lSW....U.J}.(......].~.4....TY. 
>C8..e...gM.m...#...............M.%:.TQz.......~O._.@.rO..K.../....
..V:.UF.I/*K.Z.R0cT..z`|..Te.j..^......v/(.Je.K3b{.`..>.Y.._.......
.g.zw}z6......oO.....|.f~;...(..~............n.7.x"...N....?..Wo...G.f
.....$.O......<.....d"..7.W....H.\...{_..y...=}......~..~..7..Q....
I..E.0.D......6y.....q.dX.i])./......(..........4."3.I...R_..y......u.
.#{....Q....B..J(........G...fN.._.}b..[...Z.,..TL..~?iRa...)2.....Tq.
G..........:.`....."*.QS....6#Af.[.hu..fR......>.I.'l....A.....Z...
.p.......Z[....F....y...>.....SY.,:..U.....-.[.M.F .J]......s.-..?.
....z.#.n$..{.!.........,........!....(.6.=]^.K....E.U2.P.J...($...8.f
.&.........q.R..`.(.;eqs........S...j..y.D..p..X0...{.H#......H7b..p.I
...$........I.. ..4...L.....O.l......v#.C...;..h..<h.4..H.~j-....\ 
.D.7B.4V.Ef..F%..|co./.m...e.1Y..A....e..........uca>-.GkvBt...nl..
..5;.....3.. ...0wi|.....V.ly...d.Z^.......y....H... )Qw........Pm...^
.x.^... .g. `...C.Fpr..U.FjAP..f...&.....fu.Bvg..M...L.`....6H.f.....a
.&OB..D!Y~:'.0.....F^...M]d.{...c.d....%~.H.zx...Uj.........#..4...VA.
7\.Z9.?>zw.!dXEn&..R....r..K...i.H...u...5:bl....F...:cU.^dZ..V<<< skipped >>>

GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT

Content-Type: application/javascript

Content-Length: 4207

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Z.r.F.}.WP.*.XA.T{y.B.....6..&.......C.1.0.hYK...t...BQv...
.\{.z.{..|............?o&.........2. u..v3;?..w..-...C3...6.u.\.:..j[.
.-.rb.|R. [O..l."..U...........E7.L...f..2[669.2.....u.;...H.d..L.9F..
u.......h...`>o.6.ZLr.(J;..ob..k.....h...yV..?..|i[..Y.....6..I.2..
.6.....6.A.m.......f&.nG.P.".k.nk0..............,7.D.A\mh.f.3..-..j..U
.....~....E,.6.w..l]5.m.....R.7..O.,xI}A,..\......G..."..r.^. K....O..
.O?H.w...E..d.]Q....]..'}....zvr. .f...Y..hm.C`..........8...B..( .mS.
...a..>.......h.$k.0..j.hl.FI[m..o.......A.R.Y........YU.r..h......
...0.....?..\.O._..Kk.......E.m...Hl.G...&.....V......2....Z..Iv" |u..
?".....?.C.zr.c.x.?..>..j.j;.E;..,.X..Y.l.../...<...>......}.
..k....X.|z......(...{..TeW.>=L....W...s.....8..X...Q.E....K.U..1..
..X....h......O`b...... r...$.(..c.....!xQ..D.kM.......l@fm.........sv
1......Q..O&h...f.%...or.m..}...Q.t......c?..)........ Y.I.?....|.....
g{..f..w..V...o.....NOF...>|O..Bz.EY......^}:...)x.r.?..`:....rA&.N
......4)... .F...S./.eds..d.....`....^...m..z.omb..Y.....{.8...)......
.....f.\s..T.?e...&....T......3Q...d .O..n.....'...:DM....D....31....b
3O.....,M..1"Y.r...\pw'.,..;.xm..;C...uE...=9J.V_XN.xy=..(.!.23P.j....
O..A..s&..X..N..on...K8.....r#...2..fu.........92..9......j...a..."...
.`..3 ....>....~.e.r5..:.P..u...t*...dl<.2w......./.n..PF.%.z...
.L....n/. <%.R.;mq.N...s.....,......x.cru.....o..`...B..b...u..8.h.
.l\TQ...H..aM.$.....|..0.@q...M.r........8..8O....-..4..s?.._?.,z...Z.
..2...2../...Lw.8......8.NO Ma..S...p......zL....#.E...."wV.YI. .x<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT

Content-Type: application/javascript

Content-Length: 737

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........U.n.0....-........%..K..}.....V6.J.H..k....".`')...$r9.3...
.-../.l ..H,B..e[K.L.Q.qo..0..|d.K..~...T.[.)......T.v.H.%j.m..G..r"..
8t..p..I....(E0...R..Y&.&......?.......4X......d...PB ........Q.2m..=V
...,..R...4.b...-......P.V.U...<.{.Y...!.j.cG5_...D~.`..}.9aQku....
N..........#.J....0b.. .e.V..Ae.=..E.Mvq..9..16....X........Z.K%.J....
......psqi.s.z.3..y..~..H.......'T.I....T...V).d`2.7......2eSS..9.RK.K
..)...g....u..i........V{......H-B..l.5..l.G..~......j.....Z.T....filq
.a.......KH...."b$......-.d.>.........<.Q9.j$.7.{f...UE-...A..'.
6.L.....,..7....0W...zH.k.....m.}C>/^..0.4.hv9.&......k..vR ...5..8
:..(.v...I..Y..`.f.!..L..#...*.Et..g..P.4...$W..1.....2.. .....b.. ..8
.[DwW....".C]h.......uc....}..."....y6b....Y.........


GET /wp-content/themes/goodnews/assets/vendors/modernizr/modernizr.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:21:24 GMT

Content-Type: application/javascript

Content-Length: 6890

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........[Yw.F.~._..3...!.Kw.4..d;q.Nrb..AQr.@......J...o..Va)RT:sf.
,....]....k.c.."K...S...3..X.U....I.9Vm}|..:..?.......Y..Zy...v.....(.
..\D.O..<.."..@.....YT&_...X-Y..}.D..K4..3....T....?...7.Y...r.V.*.
A\.....j3,.@. yW5........< .x..t..c,3Y.JF!.&...bZ...c!.t........X..
..YD#.{.;..*MB.b(....".........B.".."_.g...3.......6C...|x.D2.&Y$.d..x
Z. ....d9L.P.4.....j)qZ<.....4..........:.D%.QJz....,..9.GG..i...&.
..$....8L..JT.rX..pF.c4.....Z.6.%...@..{.=.UYmR|......D..sIg.7D.fH9..e
......Q"..`.LB..`.[.&../"..._.. R~.v..O...9[....}.n...s?w1.g../.].[...
..Z...e.<O2[..1sN....s......t!......}.o.>...m.N... .qj..t...`0.F
.Vd%.......et5N...[[r6d....R^.|?t.....V.;6..`....g.V...<.).........
&T.L.i#.hp6.F..=....s&S7.I.......X.{.&..N...l^.....V./..,.p..s"...#.3.
K.Hn.....D/.I..%....m.....p..K..9u.^.Y.|.....@-l....~|N..:.W.;.o....-.
....&nj/..a....,.f....G''..2.}].....h..vS........ p.BB..M..R`3.L.D7<
;......?......tr.zk3..r.X(.JZ.2..ui.Xk.B......Z.;k.M.....W..V!..I!#...
......# ......sn>.3..R..'........... i3.....a...K_.c.4!...Y.7"]K?..
M...P.....'..R.8.I.$H...o.D...........N]R/...kg....I...&.'........2..f
.j...3?p.9.&.....Fgn,.....F.hWGG........q...N8Md.1.O>..4..$.U....n!
...l7.x...%....J.N........Z.Eb.L..02......T..v>...b.z*:...qx..'6..d
...8K.oa}..Yj=.|).d)......Y.R...#=h.de.e..S7b......m.6`.^....-.c.r....
I..f....T0......>...4|...).e.O}.9./..t.'.3x.3....ch.........Z..y.3}
.@G_...e........x....m.........X..noo..gn^..OG..)....D........y.o.....
.....C.q....'|..8.>qX....K4.y..y....:...Sa^V.(.{.........!.h8t.<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/jquery-autotype/jquery.autotype.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:21:16 GMT

Content-Type: application/javascript

Content-Length: 1694

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........W.{....*x.rR=.J....\...i.4iz....GH.(.%EZ.P......v........}.
...].j...I.....1.z&......C......E.MS.....0..~..p2....@....c.we..yTk...
.J?f.e.yn.\X..wG.1....e..>m.............t~..@.ykB..[..%)...;Z.W.m.]
.....M$.^..v"6U.........<.v...4.....<.. ..).zm]Z..#....Ne{... ..
......Ds.)..Q..\R. ...-5...<|...?@".Y..l.&9..lq}m.K.j../..O...~_...
6q.....8..S..m.@2..tV...^ .....H/.....4..Wa......J.J....m...S7..Ti..&l
t;.d.S....d.e... ...En.".Bo...4..vW&r......eb....6.....Z!m............
%....:m....T.(..v.....3...N66Y.u1......'..p-.fR.7.E.m...M{.Rl8[.>..
..c!n.:4....c...#."R:G"......,.uyc.R8..<lV..}86~}..\.........Q...m.
v#q..i7n.GB...&...........8i.6..........=g..v..K.u......rh~...t].a.3.9
...........O.h...........3.#..@.~.p.<.......B....gF.MW..._WE.."y^.5
....."n>.$WK......Mj.5f.......(....W8.Qfu...z. {..tt?k..Q|.....]:n&
lt;.o.qC....9.y*U{v.......UY_.eE9E................l[..#...s.B"8=.]5kl(
.......I.Ys.....8.Qu.^.T..HE.)...%.I~....I>..Wf.uZ..j.....v.....,.6
....z......f]...].5...^..h.J'.....7..p .9...Y..j...K.o.3.N..Q..!....q.
O.V....ET%w..xQHd]....VD.....Dg..r...(C.>.4.....Y....mC........B.K.
.o.....uQ.N.x'...J..G......Rfox.......^.}e..#...oBe....).QY..%].<..
\5%...I..........*...i|..........NIn4..T.a4u\.hDy...t,..i r....!O."G..
.(>.O.1.|16....(.(-...O.8......)J....&.*.....:N...=..$}L...y.-=..-.
.CZ.!F.....%.#WKxG.....-...Y./...\H....8...-...Ix....Yv...z...)....L..
..........y<...}...{4b.@>.C..?..}.&..i.~@.V.G]A...J...Ax.s..~.}H
...#R}...%.........c....D...H.:.S..J.G.V..YP..CA...H,....,..x-..oD<<< skipped >>>

GET /wp-admin/admin-ajax.php?action=refresh_likes&post_id=693 HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

X-Powered-By: PHP/5.4.40

Content-Type: text/html; charset=UTF-8

X-Robots-Tag: noindex

X-Content-Type-Options: nosniff

Expires: Wed, 11 Jan 1984 05:00:00 GMT

X-Frame-Options: SAMEORIGIN

Content-Length: 170

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:17 GMT

Accept-Ranges: bytes

Server: LiteSpeed

nnCoection: close

............K..0......C.......Gr...h...........T.8tz?p....s).QYsiYV...
TG'E....g\.M0>.. D(?r4T..n..........}.jV.J>..2..!..........4....
..6.._.W.'..7.......!..4O.......3...HTTP/1.1 200 OK..X-Powered-By: PHP
/5.4.40..Content-Type: text/html; charset=UTF-8..X-Robots-Tag: noindex
..X-Content-Type-Options: nosniff..Expires: Wed, 11 Jan 1984 05:00:00 
GMT..X-Frame-Options: SAMEORIGIN..Content-Length: 170..Content-Encodin
g: gzip..Vary: Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:17 GMT..A
ccept-Ranges: bytes..Server: LiteSpeed..nnCoection: close.............
.K..0......C.......Gr...h...........T.8tz?p....s).QYsiYV...TG'E....g\.
M0>.. D(?r4T..n..........}.jV.J>..2..!..........4......6.._.W.'.
.7.......!..4O.......3.....

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 13 Oct 2016 09:30:22 GMT

If-None-Match: "b6a46da3cf1aa70c10b101b12c9733f4:1476351022"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "52869abfae9354140d8141083d09206c:1484335820"

Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT

Date: Fri, 13 Jan 2017 19:36:19 GMT

Content-Length: 325

Connection: keep-alive

Content-Type: application/pkix-crl

0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equi
fax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%
...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)..
.3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D
.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._HTTP/1.1 200 OK..Serve
r: Apache..ETag: "52869abfae9354140d8141083d09206c:1484335820"..Last-M
odified: Fri, 13 Jan 2017 19:30:20 GMT..Date: Fri, 13 Jan 2017 19:36:1
9 GMT..Content-Length: 325..Connection: keep-alive..Content-Type: appl
ication/pkix-crl..0..A0..0...*.H........0N1.0...U....US1.0...U....Equi
fax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170
123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H.......
.......P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv.
.....~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._..

GET /wp-content/themes/goodnews/lib/modules/likes/css/xt_likes.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:51 GMT

Content-Type: text/css

Content-Length: 457

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........S.n.0.<._.@.iP9Vk.6sI...^.J..E$..6.."..%)[...J.C........
~....%4{.../:.^-........h2.N.j......D.9......u.....6~E..z.}....V.....R
<U..u..G'......PjC.....j...M.FgEm...G..4. ....a>b...<a.'#]>
;.....5....E..u.SX...TG=I.E@.8.....D.;...h*...........C..r6...A......n
....|. &....P# ..`..O.....0.0.....:.'~.N....=.W...=..$'-gJ.OA..0w.:.q.
...s..dB.....ti.$..1c....$..aQ.W.....}..2.Tx&a..U.u.D...\l.q...V(...].
..*..?.....{..dX..3..hK..f..e.....c4...9....[8.\i.......


GET /wp-content/themes/goodnews/lib/modules/social-share/skins/default.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:13 GMT

Content-Type: text/css

Content-Length: 1730

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........X[o.6.~.~..b@ZD..4m.....v{I_.7Z.l..hPtm'....M"%Jv.6ER.....s
...h.d...%..=Yn.H......$g. ..P.......L7Q.v[.c..X.y...}#...>CkZ..y.O
q.]..-n.....WIC...M...=.%u...9,......N9....V....K......V.G.....E?..\J&
O....~.L @PQ....G..H..M[2^gh......<...U.g.......j.W.I.L..;n....yV..
KZ.L`......Z.Y?,.ziE......4..X*H.Z.H.i..Z...A.......,._h.e\.F.... 9.XP
.d.k@.h.Z..#N*..&..~..V..;.^.y.o.1.(h.J.....p-6.y..m..!.Ci._.hO......q
EWMf.~..}....D ....C.c?-.I,....@}.WS.7.8'K.6IE7......T\._...4.....`[..
x..c.E.4X. .........@...;c.<&U7*.....p|..Bs.Ag.h..c.`........?.....
....<..F..R.\.>.....'.[.l...~.b.^.3..qj .J....p..%.RzN.....l'}*[
.8~Q,..8...-...v4 .....p%g.......EAVo.......|d;...w.N!Y.h.f.>.Qb..!
....v..8........x....`....=............N%*>I.Y]...~'........o*.....
.%..3.7.2.. .vt......"v...3.\M.4..y..9....S..S!xhN!..9..C....`..M.....
..b.Oz..:.M.A.:.j.~.X.;.........:..n6-...`...P#`..o.nP...m..S......?'.
).!C..."...G.a.?Ww. _.F...U...|ti?....!......x.b....Q..2.Sp..@a.!Ga.5.
......N0.S_ej.%......J3I..Ng..;.04.:.....^:.S..j.vY.'.....%...O....*.t
f.......N).s1.. .$...!......A.....rb....Y.. .T..A~....0Vj...@.. .7O D!
..$....l.M......^.3I.'...@<..R{...[}Z"W.Xr..`?..[......h..7V.......
s.....&...V-...^k...... .8........f..l...j..n....."...sX....T.1..qA]Zc
.Idhw.......t(..5....A........u..s..qX.:.......Mwl:u.,.W.}....r.uw.|*.
...sn.p.Wh.*.ty...!....Q.;F1.N:.k.R:...../L..O<F$G......{.,..h...z6
............t.g....e..$.;·h......Y..4...~4`..F-..(.....)T.rF..P.....
d.v.J../...'.6f.J.....s...}./..M.O..l5..l%..fHVI...E.....M.O~..5{.<<< skipped >>>

GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:41:24 GMT

Content-Type: text/css

Content-Length: 9086

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........].o[Ir.L.....[...C.e....%..kK.K..I61..G....GY...r.@>...,
r.A..C.?.o....|.I9.A.Dc{..........f....c...Q.y.z>.Z...:...d....:JF.
.d..Wo'.:OV.tv...^?.,...RC6N.U..:Yf..).j.n4..x..Gz......ou...j<_.j.
.8.&...`\O.q:.7k.l4...5..i.:.g..U..V.........[..'....z...|..F. Q..J.O.
t....,...`>....)[.z.j9.{...O.e.M.....W?.......wv>..v...7wv..r...
.I..d8L..|..Vo....]`.?.....F...$=.A/.UY'..UrCt.......u..h...$\'..x.S3.
..X..3.G..}..~z0...g?....n.L......n...-Uh,... .U5.F..[.H.W..,!.a.-&1D(
.M.Y..'.. jX%oV.0...1i".0N.......j.S.dJ....2.EK.B.-O.>.....@.......
.{..|..x.IQ.....Z.K...g..Z.....3._.[u9y....|.dP.M..x.....<.j..2.IC.
..YU....J..<c.$fju............C03.=M.ts8K!.d..(`5..g.,...T6._M.....
.t....@:...d:...t.YX.Y.@i.Q.r..@.pR.};..~$j.q.Q..*.....1f.F0........$v
@.G<.)..w..A.}1COSb=..s...(..,$s4....5`.o...e?..j?.E...f...}C..F..$
^..QK..z..!.4qw~..7.w..{..;..._.C.[P.u.N*A;-...s..`u.L*a.....CX.. .T..
{.........r0I.U.#..wCp._6...i.....%......Co...AYg...{....B$fl. ...=...
a.er....G.......:`...0..g..$b......v...Ge.b...[C...Bh...^V..K....B....
...C.i|..*.l....!.B4...g./.....LS../......U...V._B.....b.....Z.._U....
8.o!.k......]..WC.x.._G...*..?...B[...im_..6.vJS.......n.i:K ho....a..
..z.........z..g..Cx..5.....a..@.......{...V..}..........o..#.b...5...
.../..VUI..m.&.M.9I.U.. .........y.u......I.t.b.*.}...U}...}..>...i
...a...N*q.].?...._!..&.r...".G....k.(.T.u.W._........i.x.5..k.S......
^.j....<V.._?=>....Z..d)^|.q...5..E.|W.-.X...e.L....j..M......j.
...............i.".f..j...h.b.;C.a.......x1K..I.U.. .......?2=....<<< skipped >>>

GET /wp-content/uploads/goodnews/style.min-3.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT

Content-Type: text/css

Content-Length: 21648

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.............s#.. .W...B.5......!....<^k. .dY..F.h.....pf(.#....._.
efeVe....cK.1-..].....|UVQ...xVu7[.u\.c.....'.....}r9....v._.....z8Zn.
..\.~UN&....]..<...Pl...wRzx].7..xZ.&^.....z...W...jU.;.~.X/.....M.
.r.P.~...U9..A.......8Z.....C.l..z.y^...l......Iw[og.q...P..v6#l...Q.P
.G.5.)..r{..&.Q9~s.^..&{..l..5...?W...m..ToW.M......Zla.^.u...j.......
...IX......uwU.K...)..5.G\n..x:......&...s^M...\..:......r1......fy\..
Z.?.oC..Q>.....wy....mw..z.Z...b.k..z1..5.....S.E.-G@..i..,KL..u...
/..V..(`.........z^.T].$...YW.r[...qY].....z2......{].`E......z2......
...bs.\.....z.Y^o..g.i...W....}.;zv.uK........]~....o...L.P..U.7......
....^q..T.....].nM...n.5.lU.M..m.q........c..6..D.'.*..T./e*..%.8....*
.nH.u.k....a~'.....t..4.....L......j}.....a...u.......2Z...E#.].R...G 
>.n . H.A.CIP,..Q...:.r...u..{.g.......e(4..g.t.?a..`.wS...Y..d{...
...bk....|p...Y....'.5...#!..hP..@WC..X......H..j.....q../.6......Cx..
x......?.......h...d.P.I......i.h.....(..4I.."JBW..<.a.e.....P.|.L$
 s6....E..vP.......$........6..v`.8.........-D...,w...i.rg-...........
.......[....Z......:....J..].....P.MLA....&..u..T...........z..)......
uS.....X.T*.*/*...2w.Ql..(. .B.&..Z../....Z.w..v;].mG.......y5....-(..
"....Q.?..Ev..9L.'.X....%6..&.f5 ......f...E.`....3..(\j'HA... .4.U...
U..a.S. .......F.l..Z.!......_......I.B]s.F.$..(.......Y...4. s'd2.g..
.T4N..........7.....^.....?..c7.x.........m..z.=2..........ur_XF....&g
t;'..b>..L`f.Y%...#n .F\h23T....`....z".vW.o*|Z.2.v...........s..$.
.)l80.).../.uf..-..%M.u......J<L.........K.....]n.N...gA.h.....<<< skipped >>>

GET /wp-content/plugins/xt-mailchimp/nm_mc_style.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Sat, 22 Oct 2016 09:44:05 GMT

Content-Type: text/css

Content-Length: 261

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........eP=o.0......-*.m....:.;2p.S.6................'k*.T.y#N fd.1g
..Q;..V.i.b......X||...9.5.......7...o..P..=.eC...N...dtV.U.G#C...;.T.
1.A.h..@s.*..5.n.....9.0p.x"...?IK....m'#~0...o!.....k.y.....!u...R...
5.e,.f..M..._...:...F.e..8..~.sc.D.[........A.c........


GET /wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/widget.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:17 GMT

Content-Type: application/javascript

Content-Length: 445

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........R.r. ........*%7.p...|.....-..F.vT...Z...%................F
.(T..>x;..>..b>.tg...3r..qw......#BbB....y&"..g.Z..........r.
.gS.......h.....Ar..D(..'..H...V..5..........1.5..8.p_5.....^...aa.V..
..=..xS.G=.....5........k.'...?P..&.......:....T.h.....X.#.@..0..rY.E&
md._....{.W|..@x.... ...;......../...3...5.c.^..s..,.....lr7..U1.O..e.
.[.WB&.G..Q,K..m..=...e..Fd#.mI.O.4@....D.f(......oy%(...<u.\.r....
..R.. n[.....P.|.A..;....N...~.0.C.......


GET /wp-content/uploads/2016/02/teknogezgini-logo.png HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Fri, 14 Oct 2016 11:46:19 GMT

Content-Type: image/png

Content-Length: 32498

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.PNG........IHDR.......B.......i....7iCCPsRGB IEC61966-2.1..x...wTS...
..7.P.....khR.H..H..*1..J..."6DTpDQ...2(...C.."...Q....D.qp...Id....y.
.....~k....g.}........LX....X.......g`......l..p..B..F...|..l....... .
.*.?.......Y"1.P......\...8=W.%.O...4M.0J."Y.2V.s.,[|..e.9.2.<..s..
e...'..9....`......2.&c.tI.@.o...|N6.(....sSdl-c.(2.-.y..H._../X......
..Z..$...&\S........M....0.7.#.1...Y..r.f..Y.ym..";.8980m-m.(..]....v.
^....D....W~.....e....mi..]..P....`/....u.}q..|^R..,g ...\K..k)/......
C_|.R....ax..8.t1C^7nfz.D....p.........u....$../.ED..L L..[.....B.@...
..............X..!.@~..(*. .{d ..}..G............}W.L...$..cGD2..Q....
Z.4 .E@..@...............A(..q`1.....D .........`'..u..4.6p.t.c.48....
`...R0...)...@......R.t C....X.....C.P...ËH..@..R......f.[.(t....C..
Qh...z.#0...Z..l..`O8.......28......p.|...O....X.?......:..0...FB.x$..
!.....i@.......H...[..EE1PL..........V.6..Q.P..>.U.(j...MFk......t,
:....FW.........8.....c.1...L.&.........9....a..X.:......r.bl1..{.{.{.
;.}.#.tp.8_\<N. .U.Zp'pWp...............e.F|.~.?..!(.....HB*a-...F8
K.KxA$...N.p....XI<D<O.%.%QHf$6).$!m!.'.".". ..Fd.r<YL.Bn&.!.
'.Q.*X*.(..V .(t*\Qx..W4T.T\...X.xDqH...^.H...QZ.T.tT....2U.F9T9Cy.r..
..G.,...C.Q.(.(g(cT..OeS..u.F.Y.8.C3...Ri..oh..)....J.J.J..q.)........
2.a.u.;U-UOU..&.6. .....y...J...F...3.}.....w...@i.i.k.j..8..t.m......
9.....5.4#4Wh..............:..T.......C.....U.MG..C...c.......d.1.t5u.
u%.....3z.zQz.z.z....,.$.....S.:.!.........,...].......b.6.u.=2V3.0.7n
5.kB6q7Yf.`r..c.2M3.mz..6.7K1.1.2.........-..N.B....L.....le.Z.-.-<<< skipped >>>

GET /wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/jquery.tweet.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:17 GMT

Content-Type: application/javascript

Content-Length: 2961

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Ykr.....4.%...H..n .t^U._[q6....3&.$l.....Z.U>FR.. G....
'..3..... .?.<zz.{...U..e...p..LX.....VV$Vq*z=...m4.C{...X....]...~
...9.m..F..RO...a.,...[.-\.............yn...Ye.Mcn...p......M..^.v._.;
.{..X....f.6..V1.....e..a.N..R...,....@......-..9.@f....p.K.y...O...e.
9poW..[.....S9...S..)...D.....].K..s..1-.....b............_..wS~..|...
'E!.D.........@.<.n..o.[.%"]...`.k...<.......!.......x..h.%H-<
;^....../.@.7or..U.......b... .sg.gc.qg.n}>fU.....f..\.o..B........
U....Z.h.M..{..YtxY9.~....{~y.....m.....!..!...V....1.M...h.....n.*J~.
J...Z.........#q.......Q.......-.i.....C...........:c.............R..u
..........=..<..Q...A.Gk..\v....d%,.n...ew.......f:k......inE.A..y8
...zN*.h|..d.g...K...g........yx....|.8.....I..Rf..Y...x/.d...9.;...l.
....."r...4...C"...._.{}.......#.e"[V......y.,.q.1. .V....eV.........t
...X@Yc..".Ud.....@..a..tJ.c)E......%..?.F>..~!.,.Qxo.,e.T.o.......
id.*7w....#..Gn...%M.l...b....R.....4..5.....H.....[...F1..C......gy..
..,5'.s..K_.@Me.i"O..^o...r^{./..<.O.[H......|.......W.<>.U.m
.6.0Dff3.....sj/.T.........E_?.g..1.F[ ..j.. ('....)..P:...l.'b.o.qD..
"^....Q'...H8.g>E.x..a.^U3...z....|.U..@.,........... ..pcT...gH..S
...).Z..HKT,R.......E..dgR...}z.#...PC.Yp...o.....z6.:^tnt..Xv....Yj:.
...Y..mO...-.Ce........]x...R..=..q.r.j.:L1..\r...'.u...=.M. 5....j.eK
.!xI...D.;.l.%...>,<-.z.y.6r.Pv..<,.H.Dd...K.....Q|..Q.6..O..
..l ..q.!.tS..............t.|.P...8........F..3@.9C^ix.#..xLV.. l..Ej.
0A...2..a......x'...x..D.....|.I..;...|.'..4...RG....".......mdF^.<<< skipped >>>

GET /wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Fri, 28 Oct 2016 20:10:32 GMT

Content-Type: image/jpeg

Content-Length: 28271

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$........o..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?........YS*..c.{W
5...&....M....N>...zkAv..`!.[.....W...._\..G.........{P...g.8(..B.s
w..122;.).q...a.[..8,...&..n.&@m.^9.n`.....A w.......3.1..TL.$..J.....
...t..jeS..r..1P...ITn.1..9......Qd.J.....k.w.(..z..#........Z".r1.OO.
.My..B.}.....N.....|.E'fd....f#.<.r..B.]..g..i....y"K..X..#.t..{W..
..5.$.......L.............,..K.....a u...9..tN..1.:$.......W$......k..
f..[.c.".a'...VG.w9.3^..i...}..,. .....X.;.Sge.H....D..9....C.~U....\.
........8.....Q...7.......y....f...s...O..._.....["W.A.. .0.>. ...n
.[Y...O)....F?.>..ZN....R....4.b. U...-......'..5H-..dm...@ .....q.
..w..2]E...G...c........-....J.N.D..9.7...EJ../..3.i..om..jg@...#...1.
c.5..f.Ok....g.Xcy ..l.{...^.R..y18.r..:.Uk[.|~......n..3....s..M.....
......0..Oj.......vU....z.....6,3.....<g...X.K. .......N*.......;k.
i..w..s./<..?.s....!n.^.v..9..?*}....A...:.B......|N.......o.iN<<< skipped >>>

GET /wp-content/uploads/2016/10/Farming-Simulator-17-.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:59 GMT

Last-Modified: Sun, 30 Oct 2016 21:00:02 GMT

Content-Type: image/jpeg

Content-Length: 69106

Date: Fri, 13 Jan 2017 19:35:59 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.....H.H.....C..............................................
......................C...............................................
........................}...."........................................
........................................r..|.w('w.w(s.S^.G*r.....&4gM.
..,Zf...S!T.... ..*.ww.9...r|.....TT/r./*;.....r8}..o9P...9_.5..d.t.._
.L@.....gj..Er.>h."Pe..Q.......:....s.b....r..{....... ...".....H..
...y....VW'......(..7..c..o/./("....>..^EB..D^.......EW$.w&.j.W.NV.
.>(u-a.....J.W..Gr."?.b...w&..>.......U.....~.%.;..&...Ui...y.|o
My.T...Z.>jNTF.... ........y.6..J.T5.....D.d......$.d5..R.t*..1..T.
N.s^.H.%...\...l.....:)...X..F5...5:...F.%"DM.p..r.....;.M>GA...#..
.A..zZm2..m6;........dw....".WtS9:.y..?N....Hd5....R.F.e2'*o*.$.UR":)\
..2B.g.8.x.....*...C>.B...Y..%...H........V..e....Y|...G7L..A1W..#.
.#....Z|.,.pz".............]8h.....O.y.....9^...K....U.i....h......y..
..l..\g|.9.....=r.......^.w*9...{....r*j.p".&...GF.O...V..7"H.g.......
s....rs.*..6.2..,.>D. S1Y.'7..R,._...:......tt;.....s.d0...L.]9.r.#
=\.#/......[...0.k....c.~.\.'FH..d...z".9......w]##J...}S..k..*.|..s..
]i...........9..1ZG'i......t."/NK.........m.9.....M..t...4...Nr.......
.|j..........Z>.px.....HT.....h]LD.,...U~.6.!.i.WB17/...T.J.%.`.I0.
....'g.C..w....3.Nr.E..M...m..?7.[....u.g..^......>#...m..~_g..gz.$
<G.>W..~..b?.../.....}~.Zew...D.....4......?.|...~......X.1S....
.,4...>N..X. :=.ir}8ys.3..vU......6<z..........d....,v.n.].<&
R...a......Hc....Uioz...]..7..#. ...@F..]J...y...W..e.;y..!..{.]".<<< skipped >>>

GET /wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:04 GMT

Last-Modified: Sat, 22 Oct 2016 10:18:57 GMT

Content-Type: image/jpeg

Content-Length: 10015

Date: Fri, 13 Jan 2017 19:36:04 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?.......G......*`.
...O..^.........C...~...$.....vJa..V.F~..9<z.W._...?.#k....b.....&l
t;.=v....v 9l.^...m.c.....O.<...X..tkI..g.Y~'.....5.....4w......>
;....|w}..v..BC.p..w0..J..#.9...X03.8..>....d|&O.."....w..i|)......
r.r1.p8>.........5.....6.i-..e3[.[L.^9..........).M;}.5.......[.L..
.[....-.~........U^2:... O0.0G..n..K.[.?.c.........@.`..|..........#..
...2.?..."....o.z....D.ZU..9n...v...p70....z.....{-K..,k[."..o...u..q.
..P.)!...0....*u..4..g.[....\.g..V>a.......V........e..;85M6.H...vt
...........V....X..8c2L.*...{.....QIlE.....1....q....g...8P........y..
...A..e..kj..d...C....j.....z..Ek%...<0.".9...o...c......%....~....
.W.].*......q....|/...J[.J.[ .X....a.....z..].{.^y.....sO.[.T..z..E..&
lt;1e..D.....'....c.^d.fE12.......$)..H....|..........H...d.....(.A.85
...e%..4l.89.........~<xr.......&.mB....f.H...7 ".....P]......3<<< skipped >>>

GET /wp-content/uploads/2016/02/Bedava-Ä°nternet-Paketleri-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Sat, 22 Oct 2016 10:14:15 GMT

Content-Type: image/jpeg

Content-Length: 7494

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...e...;.Z9.....m
;.Z9.....Q..N..}h..~.m.S.}h.....F..;.9......8.o...sFO..7m.i......3e.).
...@..F.~O....6R..d.....3e...Z(.6.6.....'..../..V.Y....:.Y..6.._8;....
...~k.......i..3J...F.....N-.......f.....].Aq....x./....c?g...R.{?..sj
.<E%y...=...i..g..._Pq.......>.....m?..5..5'..-..il...%.;.~`....
..>9.M...4V...WI...........Y|......?( ..z.p5k.u..........;..q...Td.
....._.c.qF .............>-=..f}-R.,.cT!.z....y........>!....E..
0Yy...>m..j..bgQ.Q.4.[.o..c....9h.{=............?|E.sq...B.k.......
{.=N9.&l..B.......].?.L...C...{[='H....... f=...P...Q<...{&...MY4..
.U.........Vi....y=O@...,.]....K...gJ.I.s..~......b1.p....'.......3.6.
..........{.;.......b.P....~V....5q..2...j.....j.....c..T..wz&.[...g..
4m5.....?j.<..?....:.....Kkk....TDB.HP.xA..V.........,~1..c...-....
jqN.`.U.....qY...i{Y...9$.m=/}.-c.......U...5...='i..k......./.{O.<<< skipped >>>

GET /wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT

Content-Type: application/javascript

Content-Length: 2733

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Y.o.F.....L\]n...\.......E.$.^.C. ..>..m.LQ..I..}.......
.h.;3;..s7.7g_...n....n......M..e1.z...--.......{...^T....we.......~,.
E.(....e... *..N.mS....Ef2..x.Z,.f.... K#Yl..bK..Wc.j66*.U....WF.1.._.
%.""e.........*Y&.X&i!.......\.....:K.0?p5>..Z!$........... t.....,
......2h.`1Y.7n.5rc...x:..S.O..'t..G.nylw...>.....\/.l...N..0.8b7d.
..v.!t..c.C..yE..k.3.?.q..CO....%...z..2I6...MY......'...x......G7b.VN
.m........J.....\.."....,..e.l...1.:NNT.y........ .=`.md.....J5..:sw..
.g&5.o....p..g...._..A.......0.7<.......1...o....?c~'...N.e....gb..
....7.....7.r.._..<....<.......2.%tI....,h.b.!..}J.....i.>.i&
lt;...!....N.....\."N...f.I.M.n.,..aVFw3...3..`.i....z...Q..A.IV>..
4.e1.../.P"...%.H.D5..._..D.^.N.....z..-.2.9...J...3...XK......XU..hX 
7zF.R(........e)L..0..e.!p.).Qt. ...|.}....]...p8..._F......hB...S.FO.
*.D.#..s..(f.F.9....i..e.....N...8%}........k.:VL61...;74.X/t.r....2.Q
a.[....3..nx8<..C..S..G...E....4Gg...jl..G.....Zk..&..M..|...J.G.q.
D.$.}.W...Z..3.vw.,..M. y-'."...3T.w.HG~..D..R...<..$..q^R.d;..nxP.
.Wn.L.?..P...\2...^.{^..o..iA... .Y.C tF.........~m..}`.I.4B.O7....$K 
D2.M.........&95"v..o...e.. .....d......F..c...5.:....Qk..e..Q...2D...
ha.US.v.. ....D..T..L..f.R.....}(.8i...X8:.;K...)..K.1.....'..T:f|K...
R..U...n=...,#W..|.~......".S..`......%7g...'.k....|/....O^...)..5..U.
(-..05...i..j....e.<~.n]"[.)...Cq..{....^%.B.....O#6............?&l
t;...q..@E....|..........0sr.ZZP..{6....0.Id.rx...5_..>.w.N......j.
........0.N.<..g..O./......8W....N.U...]~a.P.8W..H./..q.*1kIC..<<< skipped >>>

GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT

Content-Type: application/javascript

Content-Length: 1121

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........VMo.6.....t..]...^*W.!n..\t.....((....DU..5l....C..N..$293|
.f.......m..}/.}....d..`..s.=.l.j.....h..,..,...l.m..*.......R....@..h
.\..-.^..C...N.N....6........E..vv$..ffw....oJ...U.}.F.7...sD.sr...(M.
..r..b].....g.*..g.gdbF4b.......E9IxlH".....O...4./Z...2.......a.P....
..'B93...(.f.=<....Id...l0..9..........U......XU...P. k......'sZ...
'.'..>...U2.w.......A.......H....f.;.m .. A. ..M<c..%x.1'b..P..^
...C....4M9...q. ? .f.&<.]..V<..{..3~E.8.Y *.$.W...uJ6.U%.. .[ .
..M...k.s.J[%...%s):........64..N.64t..4..gB?...@.......c...L...u...a 
C~P.19[........ >..l*&..&.'Ic.......T....t.M...m.o.:...8..M.:......
......a.,.6.......|';(W|.....7jk...P.p=..........hb...e|..*.'q...%.3.k
e....J.i'.~.^...0sa<.d|~...j.....$..G..$..[0]. a...a..5.M...h..q)..
.)T.-I..X....e)C.....9.-.K*.0...&....}G!....=..j....Z.\.P*......r.. '.
c.r.1......T.......E%....9.....xt........F.3f.#7......,p..8Ge.ds2.<
.f....0y.5d.s.....|.e.7p6\#_.....\z..^....>/..........M..[.x.oI....
...0.....0.....\......9.....s..9.!.&8...k.'...G......1YP...?......c..x
w..m02:>pV\mY.....g...#Rx>.?..L.'......'B~2............M.=.n..n.
..m`.]ZGz...k..2....N..[......L.......


GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:16 GMT

Content-Type: application/javascript

Content-Length: 2833

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........YI........X).a...TN.....W\...d..4J.H.K[Mj.t."...{XHJ.q9.\$.
.{x...W...W...z....~.>.2W.w.........v..../t./..~.2...w.........J...
 OT...B5^ZW]S&}W7-A.]m.h..p..8....O..LU......n...k/.$.].N..1\........n
..UJ....|...q...:....J...?..re...op...X$.......0>..K.[..o.F..]Sw5..
["y...o .0...{..x.O..n.K..(...2.. .o.U....@..:..e.X....d,.{H[....IU].3
..J.....La...~...O..V5.o6}vJE..A...$H...L.d\X1N..)..@..s^.2>..C...n
[v...l}.q\'..w......._$\....S.N....J...Y...Y....\?...l%`...Nl...5..W..
..a......2..N6<wO#..G.wE...i.D..!.....h.....nU.w.|~}2 D,.....gP..:U
. ...O.ia{..........@.d.>-..|WWm..)yJ..../b...".wd.-.e..]..aSKP@...
..I;y.....s....ÔJ..wb..p:.6 B..m............a.. ....e..:.,....w..>
;'oo.r.8Y.....S..I,_&wz..x....^..k.....Z.GQ\........#.l.^~..Ua.6Y=..(9
....!....W.Q.;.....T..J......zA..l..U...6|iCS p.%.(c..)..p..N...\.....
.l.y...)...X..WT....03D.0i(@...bN.sf....I).R......b..].....o.g.K...b.#
B..........,....N.a!.O...M.....d.9.....1.&dZ.?nEY}J.T.!....C.....V...p
I.@P....F[X...s..#....LD0D\...\.Vg..$.2..<93~..>l...1.e..K.,..9.
....c\.h..H.....t.,Y ..!.*U.,.m....;.I.h.z(......ygaZ..m...U...{.[%/.O
q.9mPOJX..<...Uj..G'./A..t!.M..........W...i.=............l.CNZ... 
...1.MEU..G.h.[.u...5%pt5 .....?..Zz.....C.......i.EA1..$...L"..."..l.
,....1f".K.J........ ...x......} ..i.S..A..a ...D..Y.W.....V_...z3n.6.
.8.c.o....7....#.d..v?l.%...#..?..... .V$[%...7.<"q..V'i=.2..c`....
m....E*d....t....K.'....HOl...S..X.O.a...@$e%......X.^k..q)..^...$....
..]..2..P`ten.G.;..4....T..,..E.!...>.O..A.....BK..5$}.B.v..Z..<<< skipped >>>

GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Wed, 21 Dec 2016 18:53:04 GMT

Content-Type: application/javascript

Content-Length: 6419

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........[]w.F.}._.b..@..(g2........w...);..jr@.IB...hR....{....)...
.D.wWW..U]<........?...8..j.|..........,B.....`p.zp..`.....j.....J.
...<..) '......r....L9^.;.......^...r...9..E..e...B...:....R...l.S.
 ).g...".&X.....*.e..J..:Se...jt.fj..s7=.w.^..q..Y".Z...He...t.>..J
........@.yy.?&v............,....I..]...U.%......".Y.r..r.......x...G.
...w...C...fj..=.[..H...."-.....U.;.N.l...Q...Vq.T...X.C.d.;9....\..NF
....z*X......D....T~......x.)...]3C..A7.q$.h.M.^..<..d....N.o.<.
.;... .8H....:h..@.(.. ..T..J.eU.......h{Y.fYM3f..!........&.Q.*....p2
A9..R}.../..D..MS....q..~.le0).Xz.%.....lZ....V...X.Duf....X......Ge..
x....).Cl.&..r.Z....,.2...e....`.9..C....iO:H.x9.;S.{..5.{z..'.U.o.5.*
I..}..A......K_...g.6)...q....y9.=/.ZYu/....n.-.0...*.......QDO.a.L.\.
.,j......X,.......:{...............i.......;.5..c.A.....R.....-.^f....
.A.&A.X.....Fp>.*Y.I...Z...@..?..v........H..1.N..}.n ...S.^3....Y$
.E\.s....*N3..8..z..(....2....ut{7.8.8...7.0>9......?..>........
T..:..........z...2)S..O....EY..<B._..8......V..W....VDGXD.|dSI....
....Y.0.Z.:.Y.^|...E<..?..|)..T ....`....)........x..#............i
.....j..>........./.T.g_.%.p.P.np7.....%..ii.5.......K...O.7....X..
2N?W..4....:X..V%..*,.;'....)Wf.~.~..4.$..1..0Yy...S.....2m..dG..q*...
.F\......L...fZ...K...].*...,Hd. : .!.......pt......./...V..."N.:.Kh..
.....e.D$Fz....!..<j?..H..D.#.u.b...;`\.%..p.d.D.^..6O.....oL..i...
...x..$V....=7...T. .&.W..WC.B.;.............j7j..%.l..}.7.yZA.....>
;.....G.Xia$"...........S....>8.F..4.>hVV@..<.'.V....|...<<< skipped >>>

GET /wp-content/plugins/js_composer_5.0.1/assets/lib/waypoints/waypoints.min.js?ver=5.0.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Wed, 21 Dec 2016 16:50:34 GMT

Content-Type: application/javascript

Content-Length: 2896

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Y]....}....vAf)....A\.h.:-..ic ...P.H.......*...=w.....h`.X
...;..{...*...&...dqH..W .~YJ.S.M......o^|....C.ks..\.!.$w..kt~.....7*
..y....f...M.k:.H..~..^..~.tI..L..h/Z&..a.O.|...F...?.......v...j..f.(
....o....-....p..?d....v.........Wv..T...7W/..^,..E.?.5....K.S.....|..
.W..h....Qc....X.M.nE../.G..X...........u].\2.."aG....X0.i {.`.*.^F.v.
_%-[q..B.,I/.Lc.l....k....9-f..C:/..L..,......u.s..L..V...gt.hv!..x..]
..b_4....m. ..]q_..m.k...Z..\6].."...........u}]......w.4...X.1.8...c.
.o..~<V.:.j..`..&.M.].J6..Y..]..tX.....;.u./.&`.!... ....]}.]......
..`"..T....X..L.Z.o.9............N.......y[.............}|.....G.RY^.|
..~..G3.....Ve..&.......ff...0.T..".C.......2c%.fL{zZ..c.P ..Qc?..7...
r..K.G.].,....-...{!f[..)EH.>x...R...u.....-3.`..W..L.)C...e.tli|._
f).A....U...=!.{$..f#....1Z..7....o..>`. .Y>....F..T.tZ,..G..!..
....J.[..>..!.vj.{.o....9.hyq..T.....{z........9..5....a...\Uu.Z.Y.
~..2l.......*K.....q.LE|....I.....y....H.....B...{....~.d.]..D/.M..x..
.%.s.,.......$.X.)k.......>..J.....:.h{..v.IM....9 ...p....'.$...8.
...R!..Lf3>'.bSg...?O.I-d.pS..|tx. xb.Y...P!.n@$kQ..WpY..s[iY:...&l
t;.[W..4.".Rc Z.~..y*.\O...R...(....?/@h.|.r...z..{.....Oy....O..0....
w.........3......`.|c y.......F./.O.....;...ct .J.2.... ^..<.....lA
......87n...I_4.$.$....,.......bN...o... 4^......(.......9...p...f....
m.7*.....;......"P...Fm.%....i.}..n...Rw...W........8.s.....0}....Z...
<.S.f.1.X....u?..f.Q.S8 .A...Ow.2.....Vq..-.:[.,.z.....hA..x=x..pq.
.......Ij.a......!.).......[B..7z.V.Z.T....X.....6....fP....J.,M..<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/jquery-visible/jquery.visible.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:21:23 GMT

Content-Type: application/javascript

Content-Length: 291

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........m.=O.0..w~E....e1'\.2. !1'.96r...T.......b....Ww5U..d....(..
...... q..;.MX.@...L...c<..=...Kt4..G.3x.e..>..2.@.z...:.T.....a
A..h....R.........An...?s[.x.C........q. ....J.~....i...x.nv.../.Z.3=|
.QM.<@..j...7.Q4...X...[.[B....2. .r..KH..U......C2...........].3.t
_...>e.'V.|..&.(........


GET /wp-content/themes/goodnews/assets/js/all.min.js?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:18:14 GMT

Content-Type: application/javascript

Content-Length: 43306

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
............iw#..6.}~.Y...&..m....yeY...ei.....i..... @....$..}...\j!.
.4s_.c5Q..Kdd...;.]......w..Qg...n7..f........)Zy.n]lo..V...i6.l?....N
~......m.....y...k.....n...h...........}........oO~y0.dY....~..;......
.&.u.OG.aoQ,..Yg<.[....Y.x.........7.7......F.m.voo..on......u..wF.
|..d/....l...E..x.:.&...8'@...w7..b.uJO.......x...E.....u.1p......v[t.
.u.....s...!.-Z...|Y..]..?.......jo....7\.?...f=...f-}.~h......D......
.<.K~P...........(......n.Vt..?.......'y....o.E1..../......?z....{.
..l....ppv.G....nn7.VF.f..v6..<X.~.....v..v...O.Ws..n.......C...f1.
J.N....b..`0:....Y...~n.(}..o..l.c......h...^.... .....).....j..'.....
 .Z....u..z....h..8lg..L-.o.g.Y....m.y?....m..{..-....n...nAd6...Q....
..O.&....Q...L...v...........tA..Dt...K..1.Ac.h.'0lh.,s.K.8..........h
]8......r.g....TK........w..:W..@.AT......w.V.3.~...x..-.]-.V.X.......
o..r..v........z.b.m-.....g.....|.Mh ...f.6......g.:....oO....^..N....
 [....z.........[`...~7...#....:......F<.)W....V.7.b[....6.......o.
.......hy.......:..A.s.......7@. ...9.{.......rQ..p.Qo2_o.....b|..../.
..7.l......R.H......0<G%'..x..M.....3.m...Eo..|..4.nV.9OK?.nV......
..=:<,....|....k2.A..f..2L.ak..x)......\..?~..../.6....e......5.k=.
.........x;..|............Eg...5.....E..u..|...5..&.....S4\......Y....
.....#........4...-.>.X2e.......m.&.{[p..8.Q.16..[p.. .W.P.....yg.L
X..^....9F.|.....7... .-J/..:...>.^O...;=......lrV..g.......f ....5
.f....].OO[.k.L....4..|-.....XG$.}.. ....v.....]n.x.{..A.'..l........=
.T6....N.hPK7......g.}..s..nk.-@Y'.3 ....v....5...1.....Ig....x&.E<<< skipped >>>

GET /s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Date: Tue, 10 Jan 2017 21:15:55 GMT

Expires: Wed, 10 Jan 2018 21:15:55 GMT

Last-Modified: Wed, 14 Jan 2015 22:47:27 GMT

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Content-Length: 23623

Age: 253218
..........l.eP.L.5xq..;\.....N...........pqw...!X....[..v.Ou...S=5?.jZ
....4.....,...... .............Q..."(...8s)u...1 @...0..=.s.....%....p
.....S..:.)n.w...;..k..`........(..i.....:.....j..sa.1..)r.4,...k.,v.|
C....;o7_.V...c&..XW....'..{.\..<#.w.Ef.D..............'3R....-.8..
.3<z.D....*...>....I.=.v....7Jm.......S..R..$Wh.4..PvqL.~4....Q.
zI............!.......8v..5...>..................4G..}.V}PY....?._.
.E{.....U}..9...7...|x........@E.g..."......M!..$#...qU...jm^X...H....
0.....-|..........Q...<N.C.aVH...(......29(....f...x........ ....V.
..9.......(....{...*...r.1.V.[.,{:?SY..bD...bw.,.....b.N.U.....)..(e..
.....A..PV..>.".:.......d..m..........Zz..n....3L~[n....q*l..W<.
.d.W.pp&t5.._.!..!.....}D<^.ZO..N...._F..k.`M.!...D.H. .Da.!.....J.
.......V)..y..|..i-...\>...D.?_.. .....2..o(o.......8..a.._.I.-...w
 Bx..u..g.....1.#...X`x...pxq.8....?S..l..'.P2;>...oa..p9......O$..
....M$.u...I....x7...0.?.A...*h..e.2)h?....#..Bh...P.q.].x.a...Ai.2's7
.*.....X...9....".H..e..U...p)r.H.T.... ..c.._..L.F.Mf.'...l..?u;k....
..........n......@..F.\)..f.../.H....!.....QZ.....i..Q..8w.....P.G&y.N
..p.}.G.ur..1........\.[.H...b.d.R....7.....@2...>....r.......0N.V.
(S.fA ...".f..0...N.a........r.O.@....R]u\.j.....2B...I$F.?.,...)t..J.
........I.....%....TNQ.w.A...e.`.....H..&..U<{.X..U7...(.}..dP..>
;..N2.F.. "A4V.N. `...`.Cx..&.!....r))ui..=B...5.........Ki..p].V...$"
.h.? ..Q0.2..P..w..NuL...Ol...C..:[!..~...<o. ...&S.. "..vE........
.;........ .A....`k=.f.....l...>D....Ud.....ho.V...jV...:..k...<<< skipped >>>

GET /s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Date: Wed, 11 Jan 2017 06:43:15 GMT

Expires: Thu, 11 Jan 2018 06:43:15 GMT

Last-Modified: Wed, 27 Aug 2014 14:54:47 GMT

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

Content-Length: 15921

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 219179
..........e{UP.\..0.....>....ww'8...-.k..ww.. .C .......v_vO.......
......|..@..........`........?.....(U..$.........l....... ......a.....
{....`.../B.../....8.....6\.................{..P.........L...'-..~....
...Ns..Js.Q.[....2....{.....&a.9.5..d....t.....Q..9uTv....9..>.._0X
1/...Z..NFv../.....r..!.........I.wY X.........$........G.$...........
..0...........2........|R=<....m.3y.d...U$..\...T.ZG.2......H.9...c
.F......Ft..)c..L...........Zu..{.e.(..l...'.(.b........}....ErK..(.D.
c.....[...G.9R......OR....m.'y(M..E....&r. .L.[...TE.V....*...a..Ldm.&
Ix|..}].cB..&..#......{U..~.".6.L...f....?5.sG.)9bH@..4.. .........^..
..Y...7).Hag...$.T9...L..uT.A...t:'.P7......VEH...<..m0.R..#0...O..
.u...o.U......@..7...v4.E.....Z...A........H....#.3#=..b..<.q.A.DcR
C.......kr.ji)&k.,.A..8..s..A..........G~.g.ymv./c...B...T.x.._....f..
...........T_..Vb...J`....g'8.xT...IH{.:05.p....N<EA....m.-~...`\..
5oL....n...n.I.=|6..g.G.......9....!...Q&.9FSQ...O.t...0%......Y...r..
.Q|..gS.l..e.. .ZI..r.a.W....i.Z.D4t.0<p.....$......hZ....V.C..lw.h
TC.Y...0.....[..{.:..Y...........f.A.zp..qH......]....BK*.e..)"V.....6
.Ds.p....Y....r.....s...`..z..).\.....U............(X}......G..F.In..;
.z....3W..L./...jXU.".L...*..8.v....>-..Y..^ U..a...&.....L.v&2SA(.
..T./K.B.<..3.?....u~.F..6.....)...\.6..A...$....<...6k.^..cP..F
...Z......R.H...~^.....Q.U[&....~rr...X.8@.z.X....l.1`ZqD9'..N2.N2.N.w
I..&!W.x_.....B&C.n..|.N.Z..k. .`<.......[..'...l.D....'b.Q......Q.
.....j.gw.f..&..g.c".[...q......`~>...r>...v.f.....$n.~7....<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1

Cache-Control: max-age = 564348

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1377

content-transfer-encoding: binary

Cache-Control: max-age=569534, public, no-transform, must-revalidate

Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT

Expires: Fri, 20 Jan 2017 09:45:37 GMT

Date: Fri, 13 Jan 2017 19:36:21 GMT

Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..2017011
3094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:.....20170113094537Z....20170120094537Z0...*.H............
.;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf....
...7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d...
..Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....
t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s.
........... ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrus
t Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z021
00...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H..........
...0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..
D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.
....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3....
...F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0
...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......
0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...
*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i.
.3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\
.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.
J.....{.C\....G..0/.a.Eo.`z.<;IA...  #.''.CG..K@7z..7.\_..'.]q.f._.
WN....<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/fontawesome/css/font-awesome.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:23:18 GMT

Content-Type: text/css

Content-Length: 6840

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........]...Hr.. ...K.4.... ..~`..z0.....$.d.uY$...[...s2y.EJ..6z..
.V..|....8.z.......6..4..........\.\m7.i.Sn^....i.m...>.._@.L.We..?
-...~)3[.6.......J.6.....o..e._.?n..._.6........%..5D....W..v(.....=..
.C.eOcW.}su.../[..m.>....o/...|.......-....?..Mw0..7...<.y....N.
}........(.sC.....\B.....0...C7.....e'E.......n.L.... .b....m...O...jz
.........|...........QZ5.....f.Z......c.`.....-.....>..u.:[..U...84
..(.K..a.?4......4Uiz........_...u..g....Q..2..j.....=|...O}........%.
.P..~...?.2..E..=......|x.|x........^....|..M...}|.<..~(...N..y....
.<..D.-......ve=.J.../.w..x.Y..V0 .4.c..U..m.r(............I.......
......z44...~..U........?.q0....K'..0....C.....L....2.\m....k-.G....G;
X\;V.../E.................r.;....o..8...T.r.&.P..r...:.. \..}mhp....Y)
........&.7e].u9.....>..!...^(;^......>.SJ....$M~...3..o.3.?.u..
.{....f0.}.........x{....G.c......Gmq@...=n..e.=..v........>.......
_..k.......e...._..........{..4:.Q.]..G.[.?..&&.......m...5./..L..g ./
....[)/.k%_.V.U.F.. ?;S]..9...9.].t..{..6.?.......s......c.........Q..
|.mc.._.:.a.ZO?~..p..!fg........C1..~0...F...E.....)..\9)..TE..P.9.._W
.....;...2...].~.....p:../K?...G.\........N.........(......Sj...;.7.c.
....v../p...T.x..a...*.L..UW...F.....(gP.nX.`:....}...Ib......O.......
........*.(2.[#o....n..H....ZF6.t...H.<....W....\-#...&-j .h.......
u.. i..."l...b...xS........._.N.'b.a..>.11...\-.....`..3...9P.a.5&W
 !l..X...e....p....\."..Z$q......DTY...*@D...\.*H.......7~.:.Z8...b"..
Eg{UM$..[...j1...&C.&!$....I.......0...Q........9!2(.......>E.!<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT

Content-Type: text/css

ntCoent-Length: 137

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Vary: Accept-Encoding

Connection: Keep-Alive

Content-Encoding: gzip

Content-Length: 99

...........K.J....O...-JM.,.I-.rS2........T...$.pr~^Ibf^jQ5P.$.*..$.V.
hc..ru...........T.... .c........

GET /wp-content/uploads/goodnews/style.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT

Content-Type: text/css

Content-Length: 77624

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.............sc..0.W..Tj..K...mW.....lev...$.s.d..VZ.....q.._<I..s.
l.LO..t.M. .. H.<..^M..f;x......_.8.uZp..^.]......z..x..,7.M.._...7
.m.a;...k....n7.....gg.......R{...}..../......d..O...d3.5{.f;./6{.....
f;_-...u.w.Zm...U3...........|......4S...^...w...f1.xz.XM.B#...jo:Y..l
.n...u......W.t.\....1.5..d1.,........Z.t.\m..f..Y...o_.....\5...-....
.l.,...6............-ve9;..A.7.u..B3....;.......[.n.........|.h..;_.A.
...v..>...0.......|o..-/Y........f.K..l?.....:9=....RP..As}.J...j..
..(xkY...b|6]-V../.c..\O.b1h......7.....!...gg$. ...f..<]7 '..YU.Hj
..9..G..$..1P........".....%i.t.6....y.X.?e......M.C_..7.@ .....;.....
....u.....Jq.......Mn...............L.E*2..W.......?...#a.c..[..ro....
..n.<..:a...}...M.X'.....-.8._T.J*r.n.../....&zG....b...A.0..t.....
....W/........`k.I.h.z..w.-&77.....9e"g....,.f5.....o`hO....{..Px'X..b
r.....NOI.....f8_.....yy....l.:..".;k.K..d!5...U3}.V.tu=...=5.........
...>o./..........|9..[....1.3..;.L.D....O...@._....mcA.4}.1TX..ce".
.K........*......GV..}..S..0U..<7..|6.b:.?.......=........t5..W.q..
e..).q.?...28....^v..Co.......br.i....gb>.*.@.....]..\5L....XH.C.y.
...._..xt4:...........{z...r.q....f.X........1..nf....9.>.,g./.....
.cp./.Q..Hx..C......k.K...~.........I.L.d.....s....p........rr.....s1Y
l.c.....K...j.?....y.....&..2..1c.......2.i..e'8..;&..x.B........0qY..
.........:.@....F.....4...Cf....w...F....b.$C.V..Cc..nV.... ..Lk..-.=.
..zr.?......(...70.....X....p..d..p.>o....7..v...h.\l. ..lO.G_...Vj
.g_...d}1...3..lB..O_.^.i(N>..MA..)h... "Kc..p;...".Y0M..5.sW..<<< skipped >>>

GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Sat, 22 Oct 2016 09:41:27 GMT

Content-Type: application/javascript

Content-Length: 41437

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
............{w.....w.) ...C...,'.2..%.VbY.H9N(n.!8$`....D..w.......@.&
gt;{.{.....1......................7.^<{...'...^.....C1k....5._..?..
......y.(j....d2.......o...=..w4.....g..l..].....x........t...~.N.Z...
..b...j....% .......h..3-./....."_,j_.>..:X,......>./.......\.\.
.L3HM...|s2n..SB.....G......(?......w...-B.v...;....?i}.y:..T..;e!....
..lx9X.....vw..R..e>....b</.k..y1.-.E..........2~..}.o..........
...<..^4....#z^\..E.eu....e....<~n..$7..q\.N.O.<. F..&o.<w
we{....|V...u...4....E=.du.q=-..rZO..............Y}.$.UV.O.E=.guF.ROGY
}.$SO.Y}:...........'.ey6*....&.K}.%..&..z.L.f._&.E>......-.}y.....
Y...^..".....~5yO...^...........9p.u<-sm8.}...K.>...8.?....Y.j.j
2./...q.. ..Z.i%Gz.^K5...Z....O.zI.....8.a./!..^.........G.u.($...Q...
..w....hxU.i...|]..|.}.....X.............O..pGk..o.....pK..f..<....
.E.X.-A{..}...KW...y.0.; ...C..^]..E.../ m..r.8.6>.,f.".&.[....E...
.......8..&.Q.Q:.Ggy.....d9/../....U\.G.........:.......b1....t.Hks...
......<....x.B.~..R..."_..Q.w......._L3/!...G..!F..y.~.}.f...O.....
.-'^...2..........9Inf.b9.....O...ZO.x6.?......o.E..a.Q#.]....^...E...
&.F.E.|p^.7.i.k..b^.O...z....`"..............B:9..\..}.M.............h
j.. .X.^..)..g.j.t.....W.<>|vzx...Q.2.../.x.y.^.}..3p.O........W
.>....!O}.>...3M_?.....$}..S.O_....u...N?}....x..4P_v.....u..o^.
~.....=...,......Ox\.......W.;Y..H...../;...7..=.<L...mgH.7..>4.
2.`..j.P?t#3.LN.G. .>.Roo]..k.)a..k....l G.....j..q.R\.\n)..`..n...
. ...S@.....$.q.U.u.!.........y....r.......|..|..Q...gP...~..%w..O<<< skipped >>>

GET /wp-content/plugins/xt-galleria/galleria/galleria-1.4.2.min.js?ver=1.4.2 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:43:47 GMT

Content-Type: application/javascript

Content-Length: 28374

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
............kwS.....|..$D....UIEF0\@.NS.].N..7C...R....K......s..$S$..
.'......:....n.-.'..d.^Tu5....w...._wO''..z..&.E{..f..;...8..>v...b
..8..Q....~u._..u........g...........`1.u..zvxN......}={4...NuJg...@..
^....Y=..N...o~...Z.N5-.X.'.Qu..~.....i.....].sV/........X..D..{U..tOf
.`Q?...q.u:|G.C:=...t.........u.5lu.N'Wuw8........o....s4<.:_l={...
...^l.....>....o................n....;.a..._=\..i......>..Y.7...
....rT.....NN?R.?.E=8.y.....a..b.........[.=..X.[}.....z.o....-......b
y.v<...F...|1.-..l8../.....z.-..5...[l.....Y...r4......=......p.5&l
t;....?...O..Z.........o&.z..~..&..~..Z..r...u...`...'.....t4d.....B.j
.ag...E{.9...w..v..|...&....s.h..:.e.]{....X......l.fq[....O...U...:..
......t.4..:...r...3f0.~..g3..y...}.....{......b....;...L...n.w..^.D..
.q.ppZ..E.U......~nLN..,.fh.......4..Q....:M.z...8Y..o...p...X,.....v.
.m?.i..o....nu...yHQ..S.dr............*......v~z.S.x...rz@..t.v.....hq
pt....=_P.o....I]....;..tv.U}..>.....iih......w. 4.]....^\.....u...
.l....t...{...h...O....p......s[.....wo.F..?....p....N..9........[...;
...E....5^.>v/........r...1>.{.].F....FC......o/NS.6...yc6....w/
..8....`9Zt.1=o.............d#...?.2..AE.@...7.j..._.U..z..Vl[m/.T~m[.
...w}/........?.q .n..7....M{..H...`v^..O.../'...]..^\I[.....t<vo:.
..:.E.......S6....km....8....y?/.......U...] ...L.:..k.^lT..e.3.......
.Y..E_.&......w0...k5..z|..8.oo.....^.J.....]...@..a......Y.. ........
E.c.F.T.s....EU>,.X..U=:..T..%....?X.~...t.U2....[.~... ....\.N.2..
..hM....e..........*.7.....:f....9.A..=>j...p.......P4tl.c.....<<< skipped >>>

GET /wp-content/uploads/2017/01/Tren-RaylarÄ±nda-Telefon-Åžarj-367x245.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sun, 08 Jan 2017 14:00:43 GMT

Content-Type: image/jpeg

Content-Length: 41515

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$........o..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?......*K....iU.#.
.=G?..S.....'}.......I.K.bK..P.. S..#.~;.......:^..n.j..`2..B0}.o...6U
h.W-...*.....p...yJ......F}...M.x....x...8|..%.W.8.....L.y..# ;....=j.
...3nZQ.Z)e.Y.w....\o6...Vm..;\.t=n=Z..e`n%..3....y.H...l.....yq....Ld
u...W.Bt.M...........?.N.,`\.%..wu..g.W4..{....MI].f.\j..o.......1.O.s
..4.Y....X.T*.c.w.B...b.F.._$.S..i....[.@.......??...g.{.4Ta..q.ZW.'[d
.|...!.9.............!....?.c={Wqq..h...waG.R..=...........X.9.z@.F...
.x3Z..^.J.......Wa.&...y.J...#..4...-....4.....zT....o9..crP.O p?J.X..
<.#).Qz......-....$mf...Ig...............;q.g.:.VV..mJB...n9.W...3P
i:....V.L[.^\..q.....?..zy."..$.9.[....>....O.....H....V..5..[..30.
.*...Z.....Fm.[...bCv.;.....x..N.;{%..o-...*G-....t*.....1...a...I...B
...."2...w.H.c..t..wL...2....O..)...=..m..w......4^j.....H.G..`..#.V..
6..)f..D.w:..Z..v.@.....}z.W1>........O..!...1.l.X.-....5.`..'.<<< skipped >>>

GET /wp-content/uploads/2016/10/farming-simulator-17-Domuzlar.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sun, 30 Oct 2016 21:05:28 GMT

Content-Type: image/jpeg

Content-Length: 131751

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive

......JFIF..............Photoshop 3.0.8BIM..........g..HIXMYJLsr2V-X5l
I4T2H..(.bFBMD01000ac00300004f3100004a70000041750000307b000069a50000b0
18010078230100942d010087380100a7020200....ICC_PROFILE.......lcms....mn
trRGB XYZ .........).9acspAPPL...................................-lcms
................................................desc.......^cprt...\..
..wtpt...h....bkpt...|....rXYZ........gXYZ........bXYZ........rTRC....
...@gTRC.......@bTRC.......@desc........c2............................
......................................................text....FB..XYZ 
...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b...
......XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw
].kpz....|.i.}...0.....C.....................................#...!....
).!$%'('.. . &.#&'&...C...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
&&&&&&&&&&&&&&&&&&..........."........................................
.................................................................|"...
v6d*So.....=..z3.G.......3...e.U..a......w4sz8......YUU..... %..2..er.
Q........r.^.3l5..Y-..l.5.....`..q..4.]EjM...Xa..(..p.c..4..B.......g.
...........,.[FX....T........]..,5...)q...E..xI.|...K..`..."...j.TP.j-
...... GQ`...V%....J0t\...."........Fo..Mt.%.d...U.. Md.Mf...o..,H.J..
qW....O.[ ..aK:j...M.Q.....k.d2.U..c.h.c*3....CA..gXr......Q._.-9..&k.
.R...I.u.Z2..$..Yu(...Pd..o.........{$........]T...............K.JV...
.......5eH.....q.....s...Fyb].Ur.....MLa.I2K.R. 3^....M[.c:..hd.61.n.K
V....;...k..oE...{.56=IF..6~..... ib....,..!...,.; y.ib....R-])..f

<<< skipped >>>

GET /wp-content/uploads/2016/11/Avatar-2-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:04 GMT

Last-Modified: Sun, 27 Nov 2016 10:38:22 GMT

Content-Type: image/jpeg

Content-Length: 6901

Date: Fri, 13 Jan 2017 19:36:04 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$......n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...Y............n
..F..........D'".k.....6.u[...Z.....d....._M...,......5.7..0.?........
...<.e'.FK..jE.e...=...p.;1*.s.Ta..0...Z..L.. .m........E."5.....#.
.......A..I.....0.5!..<.Y[/.".s3...q.... ...,.H.Ky......w...u..]...
J..<.K1...D.v......b..6... .8Z...._5.ab.zy.X........6S.*pA=....O.=.
.]:.....14.1.=A...q.. ....45.o.n|.....=........tHy\.q....a:s...j.:....
Y.\w.2..X..8P[.....*....Z.[.^.s3.2.Pr#U..v......k....X........W..%.*}.
.$..e.#.....s.@... ..|egd..2.g.|.uO..ak.1..G.....XnS. ....H.C........l
_H.4.u.j.R........f.W..VtdQ.3`t..jKi... .qx..........N.v.u[.R.*..k....
.....LW.:.........N.L...^..1.?..d.T\Y..08R;q.W..[a.S8F.7......C....]C.
7....O...@.....5P.$...Fp. ..<,.q=.?/).......Q........4j...4......H.
...&..6...C.\...V"...=pkK_dc...."..s..6....|;..[n.z.[kl.......(....2.S
.H.V....V..Y....9?^.......w.~.&.|...nGm.B...e|.....r.......n\.....<<< skipped >>>

GET /wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Sat, 22 Oct 2016 10:15:55 GMT

Content-Type: image/jpeg

Content-Length: 9784

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..G.7.c........\ 
!H....3...s.k........bO1.L.>_^?.F.O.js....&.h"dH.>.F.I..Mfi..\.n
.. EI.)..8..g......s({....e;C.s..l#72&..C2...y...Y.%.Xk...M9.....K..0{
c9.{....L....Yr.2Y.w.....8....o..{F.N.ugm.Ki........$`.....w..{...Q \.
..j.. ..M..".:....Fcv...........\...q.ay^xn.lN72,. ..9.......$..As..9.
-m#.....Tmp...y.......?.|g........q?1#;.......=.s)..mjw...J.9.W.f.D..!
Vx.I#.....ry...=..r..1..7V.>.......1.r..8.*..I..].n.....\..K`.Dx..,
8...=...x....>...L~X.......}>c...J.q..twP......o.^[%.n..ee'.....
.\...Mq{i.i#.b....Bv>..Zf.....2c.E...1..u..s....HR.. ....M...#.{.u.
..R.o2I.Ia...y.5......'..^QO#.....Fi.s3`u&N....)~.X..6................
.)..J;._...i.0..g.<....W.~tQ0FeA...$.....7@.N.$zn..=...3..\uP..=9..
..s......[.]".i4mz5o6..R...Q....s.z.Z-F.z#.[}X.. E...\..8.{..-:x..S%.@
.730......^..........m.Y.z...7..6...6..`.W....<m..Gow..[...0...<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/social-share/js/xt-socialshare.min.js?ver=1.0.0 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:11 GMT

Content-Type: application/javascript

Content-Length: 442

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........}..n.0.._%.%......;........ P..!.1.G2$.k...G...]._._"..#_...
.x.t{46....'^.VGt...../b...........7...]....-.|...p...:8.P.C......#...
%gh...eB~}.N7.T...V..J.0.....m.....kU@......t......y.gl........x..s'22
.U..5_m5a1.z..."x...E.{...I...bu...k.....%..^..VB....Dk.z .......sx..&
.M....Xqr0.Mgb.....QO.7w?.&..5D].Jt.7..vy.O........$...Z_g...c.ej&c.v.
.L&Z.C...q.....K..dp?.u.).....,H.GT3..B...y.09,.....*..f.......u...x\.
....>A=|neR6....Uf....HTTP/1.1 200 OK..Cache-Control: max-age=25920
00       ..Expires: Fri, 20 Jan 2017 19:36:06 GMT..Last-Modified: Sat,
 22 Oct 2016 09:25:11 GMT..Content-Type: application/javascript..Conte
nt-Length: 442..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-E
ncoding..Date: Fri, 13 Jan 2017 19:36:06 GMT..Accept-Ranges: bytes..Se
rver: LiteSpeed..Connection: Keep-Alive............}..n.0.._%.%......;
........ P..!.1.G2$.k...G...]._._"..#_....x.t{46....'^.VGt...../b.....
......7...]....-.|...p...:8.P.C......#...%gh...eB~}.N7.T...V..J.0.....
m.....kU@......t......y.gl........x..s'22.U..5_m5a1.z..."x...E.{...I..
.bu...k.....%..^..VB....Dk.z .......sx..&.M....Xqr0.Mgb.....QO.7w?.&..
5D].Jt.7..vy.O........$...Z_g...c.ej&c.v..L&Z.C...q.....K..dp?.u.)....
.,H.GT3..B...y.09,.....*..f.......u...x\.....>A=|neR6....Uf....nt>....<<< skipped >>>

GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:14 GMT

Content-Type: application/javascript

Content-Length: 5800

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........\[s...~?.B....@H:...e...I.UI...:N..*..I.....lE..........d.v
_l.3.....4t.....O...{..7...>xY..E<[e.g..Y.o.]..f|rr.'M..QR\.5..(
67e.X....b.N.:/...:=(.eV.$.........V..........0.......*O.u.E.-..\..Q..
A).....I...`..?...uB..qp...7..7......<_gGG..._.S.......z.IR....*...
......>.q0.}._p...._....|.d...u.~^.Gxf...uVV.r....P..x....%..:.h...
."....i.b.WUV..O.x.....b.m.....k....._gI..xW.5.....|}....-...{1D...?=.
.E..4c.i..e..d.[@..:^ya>/...'....&N...~..2..o.*....He.eF.^nK.......
URl2......$TIY.VD..z....k.....&.R~\........)...~.....* .u...:N>...^
C..k..x.].......Yl..]x..Y\g.F........2."#.H8tt.//..V.@.A.u.......Y..A.
.t.Tg..Ngy.W$..Q.G:.3P..W,]V._!J......:...<..7.}-..p...:.P..^..h...
$>:.e.....l.NCH..iV.eq....J...w;..p-....p.Z...|....u.....~.~.sTN.O.
..(..ef. ..A...F*...1........_..~@...^..X.K.....v...sco..l.-...]g?.2..
....$Re..b..A.a..(Y.0 .0.G8...kd..D.l....N.....6..!R......../f."...Y..
O..~@_.O..<{ck...2?...N......x%..E....3....*..6Z.8....@.....4.~....
Tic..<@<.....0...|....E.....i..k.A.^e.,u.<..|..@..G.|<.tG.
.]..lN.M.r.~....@.P.:.=.g..=]qXki......s.Ll;....k.(....$.m-<:.UNo..
..3..a...Du.s.% _ D..b1T...D.0LR....O..;=)..z7V..s"..h...W..HyEu.q.)..
...H.d....e...%w....O..x./...r_D......5.......A0>PI.'....QU.A..[...
.....e..k..tQK.P... ..,}..Z!.s......<_.L..N....&K.G...Rp....N....9.
j...........}T.L..rO...0^k..u...Yxx....~......q....0C........Z..8..V.`
.SY\.]k'.....@.lb4e........8L..l.f.M.(^$..0.(.W.x}<.7....-....BC;..
)3.......= ...(..U.W..............D.E.....{.Q......=..'..kk..j3...<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:57 GMT

Content-Type: application/javascript

Content-Length: 790

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........U...6..Wr..J...^..E.C.....}....T..-..|.,..>.?.....^.8.L.
4..#.....A4..:.Q...9.=.:.g..........Z....}t;co..nW.]O.x..G....R...f.v&
D..k3Z.....d.RQ.l.1.z*..O_...|[TI\...@1....*_..#.G..,.u.T....H.<i..
.........z.f.4P=x...O..1z....b....P...#.(..]CY......dlS.B.....q..8K.U.
b.%.&.......7..r.q.1.....W.....KTOG...(2....`....k.2...TJ......x......
...zP./...`.........'s....5.mb.....EC=......t...!.C.E..{.d>b...7.a.
..B..ay..t....[.i.a.v&r..9...as.~e.9..B...01...<z_.K......o......b.
..Y.,.W.....7.w$..1...e.S.8_........l..=#...m%7....{.%\6....0......U.r
vz.9.q..B.l....w.......H.... /.\...o..C..d.WeI............\.....<\.
...~.2...;mZ.?...........P..R..be.#..?.F..5.V....g.s..y]..a.i.i...4&.r
[.....eB...Au.r;.a xz.Z......?).]w..x...'N.V.0.W.rg>AT.b.YG..7..m..
?G..C.Y.j...|.}..........B.m....k.L.......


GET /wp-includes/js/comment-reply.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Fri, 14 Oct 2016 12:09:08 GMT

Content-Type: application/javascript

Content-Length: 597

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........uSMo.0.. ....*Fzm*.h.a....;.E!K..Z.<[Ng8...?...7........9
S.......P.=|.Mu.u^G.<S".Z.>...D&rQ. ca[.$m.c..r.4.n..V^.[...u...
....pQ-%3.X..'c....6>..".d....9.wl...*.U.0.....o..6cO...:J J..l.@[.
ovF.......1.K..u..^..kc.........'$...a...T! .F....6...c...^..<.Q&.a
..`.o.......(9.O..%b...;."c9.C....d.\.k".K...q:.T..Y]...g..|UZ.R....'D
...GvSJ5o v.?.:.m_.[V".".Oo."....F.......h..'..N..2.9'V..ml..Ye.9k...W
!..(....b[..s. ...}. ..~ h,4..E0w.....g.Mx...9.....e...,.`.K..f4......
.]...%!.Z.......Pz......S..).1...2O....u6.....7\..V.'...JW..B.:@...>
;dI..n...h..x.*.....q..)<......E..Yo~.u.3....._#.FX6.......


GET /wp-content/themes/goodnews/assets/vendors/sticky-sidebar/js/theia-sticky-sidebar.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:23:32 GMT

Content-Type: application/javascript

Content-Length: 1437

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........WM..6.. ..Y..e*.B...^..J[.J{&`.....d&.........io`.....eq.3I
Y.Q|.aQ..$4}.4;\^iNv)Oz...../Xr.X-SZ..J*.I.c..4....V_S...w.....w&%;...
.SI..?...2^F...?h..8j72.!y...=.K..pFG..\..j..^..-.a.f|..):v....9.a.4..
.}..y....`qZH...H......"....K....".EV............}..cIEH...z...~....$,
.;._3...@N"..B. .....@. ..)..S..Z.h.a....].b$d......G...ZS.....\.o8.'^
/d....9.=<1.%_SY...."H=...%`...*.Hrm7...!..Y.2J$.v....'.......#..$.
P.<?..W `r"z.!..D....g.P(x#.....i-....G5....t.;H9...3A>;.^T.-Fg*
($.p[.;...y..C.v....p.(....|p..f.k...GA!}.L..#.f.$.H..e..X..8m$T.'G...
....msz~VU...T)d&...WT.H.PCtM...0....m.q.=...k.@...8...<..).,....T.
U..}....8]...e....Q.!T.....(..\...?.^....v.5z..2.YM...i.9.......D0..?.
..@.../P.c..fE...9.#..I.\>)..':.W...`=.d...a4..);....SU..L...H.I&.'
.Z9..Z..)K`....(.-...w$P`;._.........v.b.....jxl.h3,....i.-#..-z..G u"
B.%.r....6q..@."p)O.(Q..3.L.qG....M.A5.....5....y.. .._..y...M....._..
.N....{...<.Z..i..}.=0......"c.x]..-...u.77>7<.^..........Hk.
...h.......d..P9.._$M &....r....@........A]A!5.....aV...|.N..4].......
 .=..}..9X:.4.]..._..'.................M..u...:..3...L....bK0...[.L...
..../(..VAg.uD..B![..Z.60.Iz.03~G`?".FvA...6%..V.n....!..9....9...)S1.
...~O.6..5z[..~..i...."`:..#3....RM......gk.".]....8..n..Kw......?..#.
.d..k..>P..P.........vpw...Uv....8F..6..3x...~..W..........0....!T.
&...O....n....V...,UN?..4..p.m.Z9.]...Y.jG.<m..z...7;.c..].L.b"Z.*.
K.G0<....{H.#....,.......J..6.tO.....Q@.<-...]..l...>.~....";
'q........
<<< skipped >>>

GET /wp-includes/js/wp-embed.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Thu, 08 Dec 2016 17:13:47 GMT

Content-Type: application/javascript

Content-Length: 765

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
..........}TQo.0.. .y.M]..$$...F.&..a.$..\..xM..q:J..v..:.Qx.....|.}.(
mJ.mUR..lM...j...$...h..6...5.h.,.;P\s.S..~.IY......P...p5R.[..y.R2.:.
..C.x...O,fs...^...9.|v....n.......VN.m.nu..h.pZ.....9..E..S0.L_W.G,aI
Z9..0.'V.Pf>Ot....H;..<2".....i......... .K.X.\8U.jN....F..=~.D.
LQ!z..!.F.N.$y...K.K..?.y...2.lr.....J.T....).`^-.....q..P<#..a.!..
...p...`..k.64..(...8.y!..-%.1.%.\......2.........[.....`.0.*...U....3
.3..l.]G. n.....7.#..WX.U.lI......:.....^....?.X...s<....3.ag...~Jr
..e....C.g{............_......_...M.Z.~U.0....$)..8Ih..p.......Q\..j..
)e*.........6.c...=Ar.Y..".E.b2.f.....n%..6{..1.$~.(p........p...MR.Q.
..3R.r...ws..;.<.....(Qx.0.{.s.;H...3...0.....[...A.....B.....R....
.\.l....3.6...-...^...x.gm..y.3.9_L.%./.g..sQ)|q.>.!v_..#..[z..$7.n
.V,....[@v...HTTP/1.1 200 OK..Cache-Control: max-age=2592000       ..E
xpires: Fri, 20 Jan 2017 19:36:08 GMT..Last-Modified: Thu, 08 Dec 2016
 17:13:47 GMT..Content-Type: application/javascript..Content-Length: 7
65..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Dat
e: Fri, 13 Jan 2017 19:36:08 GMT..Accept-Ranges: bytes..Server: LiteSp
eed..Connection: Keep-Alive............}TQo.0.. .y.M]..$$...F.&..a.$..
\..xM..q:J..v..:.Qx.....|.}.(mJ.mUR..lM...j...$...h..6...5.h.,.;P\s.S.
.~.IY......P...p5R.[..y.R2.:...C.x...O,fs...^...9.|v....n.......VN.m.n
u..h.pZ.....9..E..S0.L_W.G,aIZ9..0.'V.Pf>Ot....H;..<2".....i....
..... .K.X.\8U.jN....F..=~.D.LQ!z..!.F.N.$y...K.K..?.y...2.lr.....J.T.
...).`^-.....q..P<#..a.!.....p...`..k.64..(...8.y!..-%.1.%.\...<<< skipped >>>

POST /wp-admin/admin-ajax.php?lang= HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept: text/html, */*; q=0.01

Content-Type: application/x-www-form-urlencoded; charset=UTF-8

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Content-Length: 48

Connection: Keep-Alive

Cache-Control: no-cache

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920

action=ajax_load_socialshare&post_id=693¶ms=
HTTP/1.1 200 OK

X-Powered-By: PHP/5.4.40

Content-Type: text/html; charset=UTF-8

X-Robots-Tag: noindex

X-Content-Type-Options: nosniff

Expires: Wed, 11 Jan 1984 05:00:00 GMT

X-Frame-Options: SAMEORIGIN

Content-Length: 976

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:41 GMT

Accept-Ranges: bytes

Server: LiteSpeed

nnCoection: close
...........W.n.6..v..P....b.Y..r...vY,.upDQ2c..H*.[.Y.4}.."...7.n-...c
.......,c..p.:.^...QP!.d.g4....a%k...2..G.}...*(....9...k........0Q`.%
..|0.1.Z;F...0)....l..4........b..|. .[P.$.8..4R-..w..`.[sr 4.r..2C.].
HA.j...E.!mV.&..\.........[..Y....=.!."a..1. ..Z(.'....&.....!..,c..EU
x..EuW'n.../g.{.3t)dA?.L..u.v.U-.#.U..jV...Tx|...z.A.g......q.K..;t...
.3.."#R.....A.F.........wK.#..y....L.....BX..`.X... .,8=..,.....x.#=.U
..#.....Z....{.s.U..le.w....FS....js$S.L...}L....\.m0.\.VL..C..6F.....
(V.j...4.>..h8...........c.....t.R.~...-i.........D... .!..mr>..
>.......}..{..`.O?..\L.GOU.b9.>..&.g n......q.....SN.....D.\.i:.
.L.m.0.?.d.E.)S......<x.?Y.{.. <.{. ..g.flE9..qN..x.wa...`...%.0
.i(5w.6...3.....C..!..Y.6u`r........VB.N....'#......-.~......^z.".(!N.
...#C7..[..t..V.~-..o]g.hqW.`...D(...k....9..a.:...Q.l....[PV....k....
..L../.y.....it._........Id.[a.BH.........^.....v.F.e..2........(A_..~
..o.Q......!..........xw.`.iE...VwC...... ..s........ .~.P..nwQ.).....
...B..BH..0...HTTP/1.1 200 OK..X-Powered-By: PHP/5.4.40..Content-Type:
 text/html; charset=UTF-8..X-Robots-Tag: noindex..X-Content-Type-Optio
ns: nosniff..Expires: Wed, 11 Jan 1984 05:00:00 GMT..X-Frame-Options: 
SAMEORIGIN..Content-Length: 976..Content-Encoding: gzip..Vary: Accept-
Encoding..Date: Fri, 13 Jan 2017 19:36:41 GMT..Accept-Ranges: bytes..S
erver: LiteSpeed..nnCoection: close.............W.n.6..v..P....b.Y..r.
..vY,.upDQ2c..H*.[.Y.4}.."...7.n-...c.......,c..p.:.^...QP!.d.g4....a%
k...2..G.}...*(....9...k........0Q`.%..|0.1.Z;F...0)....l..4......<<< skipped >>>

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 13 Oct 2016 09:30:22 GMT

If-None-Match: "b6a46da3cf1aa70c10b101b12c9733f4:1476351022"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "52869abfae9354140d8141083d09206c:1484335820"

Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT

Date: Fri, 13 Jan 2017 19:36:19 GMT

Content-Length: 325

Connection: keep-alive

Content-Type: application/pkix-crl

0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equi
fax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%
...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)..
.3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D
.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._HTTP/1.1 200 OK..Serve
r: Apache..ETag: "52869abfae9354140d8141083d09206c:1484335820"..Last-M
odified: Fri, 13 Jan 2017 19:30:20 GMT..Date: Fri, 13 Jan 2017 19:36:1
9 GMT..Content-Length: 325..Connection: keep-alive..Content-Type: appl
ication/pkix-crl..0..A0..0...*.H........0N1.0...U....US1.0...U....Equi
fax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170
123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H.......
.......P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv.
.....~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._..

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1

Cache-Control: max-age = 564348

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1377

content-transfer-encoding: binary

Cache-Control: max-age=569527, public, no-transform, must-revalidate

Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT

Expires: Fri, 20 Jan 2017 09:45:37 GMT

Date: Fri, 13 Jan 2017 19:36:21 GMT

Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..2017011
3094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:.....20170113094537Z....20170120094537Z0...*.H............
.;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf....
...7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d...
..Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....
t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s.
........... ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrus
t Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z021
00...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H..........
...0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..
D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.
....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3....
...F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0
...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......
0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...
*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i.
.3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\
.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.
J.....{.C\....G..0/.a.Eo.`z.<;IA...  #.''.CG..K@7z..7.\_..'.]q.f._.
WN....<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:31:25 GMT

Expires: Sat, 14 Jan 2017 12:31:25 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284697
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0071335Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.H4h.........20170110071335Z....20170117071335Z0...*.H..............,.
.P...<...0..2.j@Z6..Z.....0..3..'...)O.......A.2.....9_.i.@. 4.aq..
tb.I../=...1 ....o..3.e..`.k......)....US.q-3.....L.t......p^AM..i..u.
....a.Ln[.nCc............/....ys.R.0.p`.M|hU;U}^.-.j.O..8..$..........
...S>...(b....&....V..yU'..V.....dh.._^D.<..-e....


GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:31:49 GMT

Expires: Sat, 14 Jan 2017 12:31:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284673
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.e!d...G.....20170110070920Z....20170117070920Z0...*.H................
:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~.
.I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...&g
t;U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j
.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.dHTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:31:49 G
MT..Expires: Sat, 14 Jan 2017 12:31:49 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Cache-Control: public, max-age=345600..Age: 284673..0......
....0..... .....0......0...0......J......h.v....b..Z./..20170110070920
Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...
G.....20170110070920Z....20170117070920Z0...*.H................:......
....F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|
R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u..
....=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....
D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.d....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7 HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:51:29 GMT

Expires: Sat, 14 Jan 2017 12:51:29 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 283493
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070338Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.]`I...3.....20170110070338Z....20170117070338Z0...*.H................
..h'...?..v'..$.3.bn.4.8.....s..f".=.w ....r.P[U..?C0.`\...O0...~...p!
|b#Lk'...K...".Bl'.."Z.US.6o....88}.,%U]...-.Z.?......2T..d....%.t....
.F.{..!....Q.R.....Z.#j"..=D..*.9...Q..(x....#e|.......6. .....&@S.S..
{.F...hJ.....L.>k....:.N...z....3.....;3i.oHTTP/1.1 200 OK..Content
-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:51:29 GMT.
.Expires: Sat, 14 Jan 2017 12:51:29 GMT..Server: ocsp_responder..Conte
nt-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAME
ORIGIN..Cache-Control: public, max-age=345600..Age: 283493..0.........
.0..... .....0......0...0......J......h.v....b..Z./..20170110070338Z0k
0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..]`I...3..
...20170110070338Z....20170117070338Z0...*.H..................h'...?..
v'..$.3.bn.4.8.....s..f".=.w ....r.P[U..?C0.`\...O0...~...p!|b#Lk'...K
...".Bl'.."Z.US.6o....88}.,%U]...-.Z.?......2T..d....%.t.....F.{..!...
.Q.R.....Z.#j"..=D..*.9...Q..(x....#e|.......6. .....&@S.S..{.F...hJ..
...L.>k....:.N...z....3.....;3i.o....


GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:41:53 GMT

Expires: Sat, 14 Jan 2017 12:41:53 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284073

0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
........?....20170110070538Z....20170117070538Z0...*.H..............u.
e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z.
.....~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\Fh
zC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v
.o.......Fj.|r.'..L......p..?......j.....V...?...HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:53 G
MT..Expires: Sat, 14 Jan 2017 12:41:53 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Cache-Control: public, max-age=345600..Age: 284073..0......
....0..... .....0......0...0......J......h.v....b..Z./..20170110070538
Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./........
.?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.
YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~.
.c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3
.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.....
..Fj.|r.'..L......p..?......j.....V...?.......

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 14:10:02 GMT

Expires: Sat, 14 Jan 2017 14:10:02 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 278787
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070855Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.G....`......20170110070855Z....20170117070855Z0...*.H...............s
.....QO...CH..k..G...y.....@5..I....Z..JEU1wr.f.(M9...vh..4zn.. (!i.X.
...|wS.|g..qm%.` {......9<.5<H].{L....,...n.....Dq..9...'...&...
..T...$M.S.....ND.x.|i>G.^....V.W.[.9*.9.......S........f....FD.DgE
l......j.G..........GN-h.F...J.`V........$.U....<e(.HTTP/1.1 200 OK
..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 14:1
0:02 GMT..Expires: Sat, 14 Jan 2017 14:10:02 GMT..Server: ocsp_respond
er..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Opti
ons: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 278787..0
..........0..... .....0......0...0......J......h.v....b..Z./..20170110
070855Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..
G....`......20170110070855Z....20170117070855Z0...*.H...............s.
....QO...CH..k..G...y.....@5..I....Z..JEU1wr.f.(M9...vh..4zn.. (!i.X..
..|wS.|g..qm%.` {......9<.5<H].{L....,...n.....Dq..9...'...&....
.T...$M.S.....ND.x.|i>G.^....V.W.[.9*.9.......S........f....FD.DgEl
......j.G..........GN-h.F...J.`V........$.U....<e(...<<< skipped >>>

GET /avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 2.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:14 GMT

Content-Type: image/png

Content-Length: 4648

Connection: keep-alive

Last-Modified: Sat, 20 Sep 2014 10:58:46 GMT

Link: <hXXps://VVV.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g>; rel="canonical"

Content-Disposition: inline; filename="b0d3c416d0b77963f7715cf086a6160a.png"

Access-Control-Allow-Origin: *

X-nc: HIT arn 2

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:14 GMT

Cache-Control: max-age=300

Source-Age: 2858527
.PNG........IHDR...<...<.....:..r....IDATh....sT.y.?..gW ...,o..
....c..`..$.6.n..8.L...v..d.O4.B'?t:...I2m.:mb'6v.F..c.......X.... .,W
w.=O...JW...GI:.3sfW.{.=...... ,..6n.R......-O....uI>_..P.C..U.....
...x^. ..:...... .(.B...e..,."n.6....x^.. ..F..Gu.....2...<`.o..`.(
..F0.,Q4..."...i."..9.......7x^QE...m.....]`.c."bg.....D\r.S.p....TO.E
......aL.{.......|.D.*.^..S...x..`.....S].&t.x...uU..so.s/... .F|..-/.
......3...................@E...._d.d.}". .AU.`T.;...9..#&...._../.... 
..r...r..1.1._.0..&p..R........X..y>Qd...QT ..8.G5/..'.&. ...i.=O..
.W....I.;sf..7...@.......!.. 1..y&...4.N>_a..1-.G...Jgg...)J%...i..
...}F...r.Z.z. .....}\.V&....Bj.Mf.Td.0<.a.=...%...E..=....y.A#...\
....=).lE..@."..v.. ...9..5...;.....X.(.....B...Q....^.j.}#..A.Z.....;
w....\.< 33..E.y....H].{W.......%...Cg...t.g.z..H.........K.Ccm..6.
..V.....w...l.Z.\....mm,.E..\.lPu.J.....*\.......".O...g....wp..Fq....
3o0&T..h4.....$.GqnQM/.8:t.D.g<.....!"}8g.i...ko..u.......k...r@{.I
@.....:..}.......p........Q..m&..s..Wat.....q..^>.h....@.I.......cf
..R._4....].".e......K....X/....u...z...t......|\v....G...d]..T...Pj.&
lt;.>..7...SS...8-w...,. bhk......|...v^..q...%.:..$.H...1..HC..?._
_............5...s1.....9.sf.......*...b.....t$I.41l.o.sp.\....v......
......(.V.pf..*w.q\.{.c=r..|.. Q...$.......k.P. .w.vC.... .....'......
h.V...l...|.K.`..*......K4j...8.Y>.d..|.K................U5=|x..?&l
t; aX.$Z(.1f#..u.v4...e...`.B.SE ..`.......M......10.s.x....'.k...q..y
g5o..G.][-.FR.]..tt.y..1..........*.........x...........O<.mm]b<<< skipped >>>

GET /avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 2.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:20 GMT

Content-Type: image/png

Content-Length: 1908

Connection: keep-alive

Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT

Link: <hXXps://VVV.gravatar.com/avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g>; rel="canonical"

Access-Control-Allow-Origin: *

X-nc: HIT arn 1

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:20 GMT

Cache-Control: max-age=300

Source-Age: 3303016
.PNG........IHDR...<...<.......N%...;IDATh..Z_hSW...:.w.<..D.
.....V.I.&'.E..Vm)L..|.5t..8...i..Bp..>8:;......Qgn[.P..7.......v[.
..Y.....zss..^....r..........|.;...O`.a..M@..&....u...zd.....y.J....b.
.....o.;.x..mg. .S..m.>..U~*..9......U....x.....4Voi.kW(......,..{.
....`.0.....@l\.....nW....~..X.veVa..'.. .k$..i.=r.w(..9k.-..`q1..7...
O..gS.....G...........se.G|........{.\jo.`..;Iz]...]..#.......W.....?.
...v...... ..w...{.\.fI..C.F.. ..d....bf.Lf.vg.Q.E......z.^.4.sT..H.. 
`...0.wdx].l.fS....,..gU(.3k.3...v5..$.4M..5..F,..P..p.y c.0\.)_.Q./..
e&...K.8..7h.......A.q.'..a.....L.N..W=_..^..<.e........3*..M..,Z.E
.S.....j...~v.0..oBI.<......@... ."......@.......p.."...Z.........F
......<....H.B..*.1../*.Jk....mNq.j..b'`..n..l6BH.......6.s....L.t.
.[0...."#I.W..4.8.9^c..8.#...3Xc..g.9.q....`.....[w...7|.b..[SG..Jn=ul
..2..j.......Gk..9(K.8...l"..x<...9.,.q.P{..j[..d..u:.....j...nWc.l
.)..4a..._K>...`Q.T..t:...v{.[.B.v;...D"A...~a.....c... ..Z.4.-.O..
3)..8....,..l...JvH.....e.......*..nWcWQ.$..(@N....-A...'w....C5...?.u
iKdL..1.....>qMCkGh|].....w..Z.V..2]!.....Z.~...gI*.K.BLT....A..1o.
.......5.aX.gy...i....TL...6....lMW.~..H.U..5P.u..[I......b.'....m. ..
.............c....M.]J. .....6.v`.....[......I..#o.=......P{..8....7..
.\.....c..).4.........P...........]Nn.....4.v`|....l.....y20..<.p..
..m0_?...,.M...Y....,..${.c.E.........aw...z...c.#g....no.:6..>^ -.
..,...C...Q!S../..fg..8A.V\.v.......3.....J.. ,.JMx......D....m.<..
^&......}....-j.&A....Y.W6...y...[p..2u....<.....6.A.&.........<<< skipped >>>

GET /avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 1.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:14 GMT

Content-Type: image/png

Content-Length: 2925

Connection: keep-alive

Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT

Link: <hXXps://VVV.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g>; rel="canonical"

Access-Control-Allow-Origin: *

X-nc: HIT arn 4

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:14 GMT

Cache-Control: max-age=300

Source-Age: 773907
.PNG........IHDR...<...<.......N%...4IDATh....P.e.....#?.B.2....
.v..ViF........-.3.....S.bGo.(E(.F....z.z...a:......zW.ns...?.K...M...
0`H.P....e.I.B..;.#......'.......'.=.......$.....]_>.....V.o.....7.
b8.$V.F........?..9.kK.\...........`....X1..I.dCm.....C....$.e........
..$...L....Qr...s.C...b.....y2.r...s..h<.J..\.g.<^..P....!..\.B.
V%?....o.bN&..F..........wh..x04:9.>3C.J.o.E.P)...x..I...~N.!..!~~.
.x0.%7k"t....2..U.fKn....3........^.4&.B4.33..Z..........x0...I..z|C;.
y&L......l......".....&...O......... W.F.....5....$.......e.7;......s.
..=Z.x0tq..&.....rt.._....`.}...K.?......m9.P.......V...Z...g.D..J.[r.
..f...[...b..].Z...&...;c..O..K.]....$....DY.Z.....&L... ....|.[....=.
!.j...!bx.$UQX.kkQ..4...?XQX,.A...........a.....1..hR.@.0.('BWTJ9...`H
.Z......[X..C.$u..`....8.w.,..=.r...M....Go>i~....;x.V.Rr.,.Op>n
.......jU2.....Z..~.....&5.&)..Mx{7..MR...h4.........3.....B.~.kG. ...
.......CQ.....D.......>=...A.8..{....{...|.A.24.W..V.|z....|..2NXm.
}........h%[......F.....tS......6.H..&B.D...^..K..)9..L?..(C..;.......
$u..........&)..0.]....f...t..h5...E..._.mC...=.K.C.R..d.j..#.......WY
Yy....hEaq.......h..h......^..l.=.......L.S...N.j ))ill..g..`.....4...
.&sm4bn...OEu..A...K...~..L..zD.M..S...,..n...."{6{h4...o..MXm......8.
.r]{..}...............*..MF.../..u....H..L.z....N'.?.h.....n.t4.V[s...
/...z...t.\...d...(((...........H$......."......$4Iy.^.Z}..&.....lll|.
..a........YD<...a"c.....$B...^..Z!rys.i.........t.....^y..O...-...
;.i...]..T.*./...J-"h..e2..../......]..M...f.F......i5... i9.Q..=8<<< skipped >>>

GET /avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 1.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:20 GMT

Content-Type: image/png

Content-Length: 1873

Connection: keep-alive

Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT

Link: <hXXps://VVV.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g>; rel="canonical"

Access-Control-Allow-Origin: *

X-nc: HIT arn 2

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:20 GMT

Cache-Control: max-age=300

Source-Age: 1935565
.PNG........IHDR...<...<.......N%....IDATh....h......HsLF.O..C7.
.Lk........6......av.....6.........R..6$..2H...z..<F..?d....[...i..
.........i...M.....'A _....sz?z.........>.8..m.U..0F.XZ.\(..`l....1
t.....n.......c.......x<.`j..A..}..*...`.&.......W...i..\..|....=c.
......B.4k.0..\.4M.N........7o.]z:.._...J.DbX.......P.@.`.-k.H.JcYsD1"
...I....$P.%. 1...`....9Xb..M.1...U.....Q.......].....".\.....8.T....4
...4..K........if;..N$t ,_.u!..n&:}6  k...*=.l[...~.....FF......\3~u..
...y.k.......WU.9...X,..nY......k/....)......:M]^...(..1.T..PQ:...;.[.
-kN..I......5/..*..D.....\......p.w..x....S).......Z.*.m.....;.1*.....
...:3.. .|.H..]..|.$G)....;.R..^.;.|U. ..S.*=.....199y.....Db8.].]....
7......]b.....)].Jyg.. =...G\9XU.{....nYsCCC.T.%......C.....gk...?y...
Zn......]....d..<....U........d.........}}.h4..ZUU"R.*..5w3.d..^k..
d.4M|4.;..:&.Kyg....N..qw...2.*..f2.I...v4.....f*.e.......0B.p.4g...M.
.~=..q.......y&....S...2......>....m....L.Rr.7.#&..B....?.c..L#t...
....O.{m8@)..%'...q.k....S.2`..n@...t.wD$....d...ff..z..=$......?..a..
....k..M..Jy..;O.i##...%....*...l.8A.H....]/1Q.$.i&a..p...D..L.US.....
2^...R....b.~4..........R..l,.-.bq....c.X,.`....E...{:......h.d.&.5\..
*.w\V...ef].GF.}6.QL.!... ..-..m..r..H#.ef@.q D.P.....[...B......m...0
F.....j..M.P,.#G.d2.E.p.m....:3..n...io......Q.<....ff..\..v.......
....B.D..L....v.Fnhhhb.5wPr..g..{...?.W..g.....f.0F3....\e..=..Z....e.
...B...e......O..y.0F/_..........lc..l.......H.uoRV...d.(%.......O.g..
..^.u..o...!.1..a"b....^3.....w.}.....]..$.|.....B}..4.N..HUU.L...<<< skipped >>>

GET /css?family=Roboto:300,400|Exo:700,300,400&subset=latin-ext&ver=1482346734 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/css; charset=utf-8

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Expires: Fri, 13 Jan 2017 19:36:12 GMT

Date: Fri, 13 Jan 2017 19:36:12 GMT

Cache-Control: private, max-age=86400

Content-Encoding: gzip

Transfer-Encoding: chunked

Server: ESF

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

b9.................@.F.>...E..a....!.H_...../..i....e...w.8.'...Y..
rS.y...FFTw..~S.c%.i....C/...d......a..U...e.N....c,.-..J*...I.....k..
.]n...y.k.pn w...v......)..rMW.m...u..8Z./...o........a....}d.g9.....0
..HTTP/1.1 200 OK..Content-Type: text/css; charset=utf-8..Access-Contr
ol-Allow-Origin: *..Timing-Allow-Origin: *..Expires: Fri, 13 Jan 2017 
19:36:12 GMT..Date: Fri, 13 Jan 2017 19:36:12 GMT..Cache-Control: priv
ate, max-age=86400..Content-Encoding: gzip..Transfer-Encoding: chunked
..Server: ESF..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEO
RIGIN..b9.................@.F.>...E..a....!.H_...../..i....e...w.8.
'...Y..rS.y...FFTw..~S.c%.i....C/...d......a..U...e.N....c,.-..J*...I.
....k...]n...y.k.pn w...v......)..rMW.m...u..8Z./...o........a....}d.g
9.....0..

GET /avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 2.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:14 GMT

Content-Type: image/png

Content-Length: 52164

Connection: keep-alive

Last-Modified: Sat, 20 Sep 2014 10:58:46 GMT

Link: <hXXps://VVV.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g>; rel="canonical"

Content-Disposition: inline; filename="b0d3c416d0b77963f7715cf086a6160a.png"

Access-Control-Allow-Origin: *

X-nc: HIT arn 2

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:14 GMT

Cache-Control: max-age=300

Source-Age: 2864644
.PNG........IHDR...,...,.....y}.u.. .IDATx...]..X...bs..(J..'.tu.....'
......nO............c{....1..~....<J%EQ...>..r."%.9..NU..AJ&....
.. V.^o?......&..C.....ba0...............s.z.,.c"J@.0Q......!....\.$O.
_d....0."r ..."...k.. *.(.9.S...(r.HD.........sp...........%..G.zT.xn.
u....K@.z...Fn..L...O@.{.......9.l......s......w}..tn...3.._....G... k
.(2."...Zp..2...0....$.r.p].j...1>Z20....<.......H.0`.p......(..
)....~...c. .n....9...W....@.>'.@$..Q.c...............p0..|.|?".W..
...q....pN^C..w....... `..F...l@.D..4.... .,.1$.ea....."K......N@.z.. 
. ..Q....rYWA....kc.......u.YTt.`3.Qq.X'.Z...Gy^....'..8b.Y...Z...0 ..
...&.H".(.V.....h.y/f.1..$.."..%.......=...&...8.T.w.K......#. . ..s..
R.".cb0.]...(&.2.%".#......yD...... e..6.]....h.(.y.r.*"..0S@.u%..Y.(y
......WA.V.. ".H_.|6.5..gzp$..az..........[..P.N...1:...'fI.b0' ..$.$~
y..|. f.j....F]Ld.l.G^.D...(.H.Y......y(.1`..;......k.#.{.0.O...d*...p
..}.@..$.dY.d.&...=*."2]........... `..4W.a.....d.9Q...`NA......=>J
^...\...6M......s..z...._Z.K...........z...X.P...*....V..$.`.g.\9..M9=
..^_.....j......@.{M._9..'7.O.).Z.$1."....D.;....M.u..1)w.wBD1.(.Q.c.h
.@B.R..H%.$....Q.Fd.%...Q. .S.kS9.}A......v.._.....K..; [.[..0}..Y...Z
.b...P...$...D..C.&..k..8W..\....0..1.........su ..>..s ...........
..~xi..........,G..1.W...o...QT.....$*R....".8./.[.......K'm.vR.N>-
......[~.....n.........B.IU...._..}T..XU`.kT............#5M..U.,i.OO..
#...;....z....?..JN8.......a:....DI..%..&.2....,=PI..E^q.z............
.O....C.W.^..I....0.*..Z!.Mk}.Y. FD..OZ......T.._.=........#2&.4.K<<< skipped >>>

GET /avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: 2.gravatar.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 13 Jan 2017 19:36:20 GMT

Content-Type: image/png

Content-Length: 2236

Connection: keep-alive

Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT

Link: <hXXps://VVV.gravatar.com/avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g>; rel="canonical"

Access-Control-Allow-Origin: *

X-nc: HIT arn 4

Accept-Ranges: bytes

Expires: Fri, 13 Jan 2017 19:41:20 GMT

Cache-Control: max-age=300

Source-Age: 773913
.PNG........IHDR...<...<.......N%....IDATh....L........K0.Ih5.K.
a..6,.cFz.....P..2OS.eY.J3Z..e..#....V]..6...faA.......sa>...%,..!.
v..t.;..Y.....c..........=w.y.....w....g........X......?&T7......@.V..
..x..xe.q.y.6..7F..zS.1m9...K....?s..PS{(.........O..........@".Q.....
.....E.@....~.J.... *c.z.....)HM.t..NJ[..q.....L..H.~U.M..8v........7{
\..;&O...'K....\.....{|......J...7.#S.]#.]......dU,;.6....7...W......@
".en.bLi^6..=s....9....'...4.4.6..L.Mw....N.0.....N.X.......L....?1h/.
.7/......{..~.....S>"G..y...$x5...Y..JC.U.K.....3W..1...vd.=>n..
..N.-v..Q.../........zo...7..../..O.;...h44..|&...G....BQ..]..M_w~l..Y
A"...R~......WF%.....5...Ehb.4...T2Wy.7...6.....y.i\.s....(.J..4......
1..N..I.5.J...c...MK...c..'....W....2"..V..t/.._.l.=.Q.#S.....q..x..&.
b....y......O...;b].........I.()S....R..N8.'...%.....*./7}............
..T..R...w:8..2~..k.B.Y.9.:...H....FC..I.0..J.^.....H..Q.=.oz.,m.1....
......&. h.&I.5q%...fNS.M..Eutt =..$.m..a...&L.~.x..;.@Q.r.4..........
..)......f..EQ-....yE....ae,.....$.....p.F.....fH..h4......$Ib......8.
N...V..r..1...4M.;v.3M.D@.S[..N.$...EQf....H...t..........:.....Ye<
.F.......c.f..Db...aUu..3p."|>...H.E........g...w..1@r;...A...:::..
TeV... ..;.h.N.?M............=P....N.Q(.B..{.............;..A..C./.Vb\
.(... ........o.{......~..VSh..<me,..ka.9........ ....>..._.....
O.2......6.Y*1qWeV..aB............eR.O.u.....D...........X.....V..x...
..j.m~B.O.......2......H]<81...K....J..x...m44.tn.......t_h.Y...V..
?..C/.QM..OW;V.{pbx.d.B......^.f~....`..w........V..]...jzX"Z&.K.i<<< skipped >>>

GET /pagead/js/adsbygoogle.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Timing-Allow-Origin: *

Content-Type: text/javascript; charset=UTF-8

ETag: 12289576273709268109

Date: Fri, 13 Jan 2017 19:31:15 GMT

Expires: Fri, 13 Jan 2017 20:31:15 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 19050

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 297
...........}iw.H..w...7...6......8..8{.,.!.Ok.l...^b.....[."..........
..f8.{..dlZ.."...t0L..<M.2.....`...3.Mc.^...... .y.om8N.b.a..8.wV.L
g....0.r..T..Ts.l..2.q.O..l.1..M.....D.A[....A..p.Onz..O...V.F..\..1..
. ...R#....`c.... ....X.R..h...R..WA<.;I... .n.y...LCVfX.s.v...{...
fq2....Ue.. o,.(.j*v<.<..Ea_.\.........E/....M..SZ...~....So...\
...{.`~.".2O.....WW..)..l*&.>L.x.X..,..IX..t.Onj.q<.M.......U..&
gt;.-........u......N..G.-..k6N..p...1?m@.8..b...R....,....\q.qs..Tnll
..W%.......n.......:.y..NJ..v...v....\X.....'..Z.f...,...6.f. .....f.@
..s...LL..xr3./Mm}...0}.....P..../.?w.oG4..bD.. ..1.o..7.y.I.....6..Bh
..qn........X..N.....^..n....4...........Q...X....n.....`.i8.i.......J
.I.<..)....0y'.Ax>o...o..N...1..IiYf(J..J....k5...X..\L.....=x..
.....Yo.[...`i>.e....|._...f.W.......m....v....W.:..XT.VMtL.Ec$....
.....f.v.r....Ca..f.`.-..ex[.&...F..4,v..[....v!..2;{..kZl*.@`..&.d..x
...u...M...N..w.......(....41...a.Y....87C)~.....f...X..._@oh!........
r).D....._..J&..BZS6......?{.o.<.... :&G...Qg...(...Z...qp...J[.v.'
.oE.W.._....0. ..7>".7Bo7Mu..a..@..aml.......... .h.r.....0w4..|...
=f.We~h<,g.....&.u?\..#f....U...../.8..M..gg......)}......~........
.~...).b....>...qph<.m..O...Fm..w8y.w.>]...3..1}..3...?..9...
..../.I..~.n<.....?........[}H..!.e..8p;.-[.....\..U.YM!iae.......?
{..9.I.2. ..W@q>.....%A..b.-..9...S.)V.S......,.a1M...2..@...H.~j.i
...y...|'.<...R.....y,..=.2....r.G.j..j.*............G....q.a.}.G..
<..{<.M.!......h..*.... "<...Rb....~.d.M..p..1.......8AE.<<< skipped >>>

GET /pagead/js/r20170109/r20170110/show_ads_impl.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Timing-Allow-Origin: *

Content-Type: text/javascript; charset=UTF-8

ETag: 13370306465128178281

Date: Fri, 13 Jan 2017 19:36:19 GMT

Expires: Fri, 13 Jan 2017 19:36:19 GMT

Cache-Control: private, max-age=1209600

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 69554

X-XSS-Protection: 1; mode=block
...........}yW.....|....t....!I7.?BH .K.Y...^m...Kb...$UUw.b&...;.....
}S.$..2....v....3...,...~8......`.........vg.|.&E..{.Ng........ ...,.s
0...o...d..LM.fX....y......`.. ~-...3...M.s=d...Q......&....z. ......k
ow..iY.UIS|nzV....\..F..B6E.^,X.....`qvt...w....8...&S>.C.......?6.
.....Zhgk..{..~...U.t"..z..?5\.. .y..jG...v.c~o.f......9.Jd.U..v|W..F.
.t.m......3.k>...-......... ...Z.}sV.|...6...Y....PcJf....0........
.~.,.z:......>T.............Vqr.......[.,...P....Cj..E....2v0.<.
.`W.L...^.....E-...J.....ms.\.N. R.. ..4%@..]Z...vS...`L..`we.....u.z.
gH...C.*;O4.8.......^.n.Y%.....G....k.l...1!....W,..Y...=........h.5w.
rr.D...v..='..ro."...hUC:b..Iy......[...,H..2.c ..X..-..fd.v.3.......S
.....,KL..i. .......it.....6|....Z..]..\.....t.?.5.X6.......^m4..K&#?.
ttz8G}.....6...................xR.i.]/..S....H3b...S..p..g.t8v9......Y
.E..:s...y`^oZ,t.NX.s'.V.."\o^.I.Ex.`..'....j.....`.rS....O...!..xk.39
......;.../x.......V^...)u8.2.Q_Rl./&rm....>..M.........".._.l...~r
w.....v..zY.....M...K......j..m.qy[..e"...S.m....B....r.....i.k.......
...T.I.....[...i...w...^....y.W...{.._e..2.Y...l.....A6.m....%.-......
.O(.Y.b..d'...6D.o.....#..B.....]/SS..N|_.)4....t.....Ld.)...qRX..x.5.
.g. ...W$n.q..xZo....v......a.`...C!.......[.y...@|T~y......>C...%.
\.....p..B.Ljq-......awk.pj......#.C.fMT1.........c..^...[.R....ilG...
a..`.(.8.8..Df..5.n.gS.w.....%.. :.,.>.y&I....9@,Q....d.UL?.L...<
;...,.=..cT...k..6...5.f...O....D.&...EgN..~.lr)...vi.8..ph..\\N..x..:
O..m...u...p&L.g!.T.?x.X...cXI.G..M..3..3Q...s6.D~...6..q.)..Qb..`<<< skipped >>>

GET /oyun/farming-simulator-17-hayvancilik.html HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive


HTTP/1.1 200 OK

X-Powered-By: PHP/5.4.40

Content-Type: text/html; charset=UTF-8

X-Pingback: hXXp://teknogezgini.net/xmlrpc.php

Set-Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; expires=Sat, 14-Jan-2017 19:35:55 GMT; path=/

Link: <hXXp://teknogezgini.net/wp-json/>; rel="hXXps://api.w.org/"

Link: <hXXp://teknogezgini.net/?p=693>; rel=shortlink

Set-Cookie: PHPSESSID=a06b33c6a7af7b98654cfe39618ff920; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Pragma: no-cache

Transfer-Encoding: chunked

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Cneonction: close
2000.............}[o.G......H.a......l..t...[.....e4....K}...j.M.....`
..,...28o..y..H.#.K....UY}a_..5;.e..Y.......q9......o^>..h88....{..
....{&..;9...=...83.,.-.......1.G..L.X._e.8p;..q..6PS4n..~w....Q..X.4s
"..}......eQ.fc...........~s..Q...4t.....l...A.F..?.>..2...=t.3g.{&
gt;..(#..(rG(y.9Q..q...k.MV.\....Cy.....<{`.m{...s......p2L.eD~..ax
f.<...\.h.\8...?>8x\..V.O..<zV...=zT9|.......7w.?t0...{......
 ^......(..g.......4x.S_|..Zn.....w...i..E.E.._..yC..u....D.s.7..F....
b<.t..8......x.C...J...0.....#...l..]?/0.w.8Hl;n..<4...n.../..}.
/.v....~{..... ~.A..v.........,U...7..B.&";.z..q.?....O....h..~tG^..\.
NF../?F....zC..2......3b.....xng....~..0Gb....3.-.w.......f...d.......
QV..8.....OC[..;\g.=... ......GW...h..Q....E..C.$Rm....O...M}.,..C..7.
F}....L...#....=....b.....]..d..Fn.'...8V..U.[...7..9..D..h..?v.h.<
g..,3...MbK.KG..Y..".M_/)M3..z...9....hJ_..I......F.xR......AP.@|;..xY
.....Y....p0..7.I....J..q....\.n.-..33...r.tee..5jR.o./xfoP.....W....i
&.Z`.<....$.....q....bY..YSEz ..s.0.EoP~)3.....B.Z:WR.x..xa.u.X...E
..U,X..i..(....o..F.p%.C.......U...K.j.Q(_Q.d.....%PmP......e\.|l)....
....y.@.X...b..M... %@YJ....c./^B......g(V....P .....I..b.!...B...F...
.h8...`.....E(...a.$..u...t....a.&.sbv....G..u....m...../....|...0....
...^HK.}&.U_.....tg.g..Hl.Y..$=.g..x...XN>...^.p..?.....O.._'..-<
;..*1... p.aq'n....L..C....E......I\l........y.].".....o.3[>..`oz..
...<.<..C.i..(.&5....L...?@.l.n!l.... .|.........}..._.K.R..:_/]
.K...l.M...x..Mx...:|....3Y...>....L......?...e`gw7..X^.Q{0..}.<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/social-share/font-awesome/css/font-awesome-extended.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:26:12 GMT

Content-Type: text/css

Content-Length: 316

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........R.N.0....=lEK...D.......N.5....V..;)m..&.[b..|..J.....4....
W9.D.y....E.........j.'........o...Hu.F$:#h1......a......./Y".#;q.k...
............lt.O..7....;.* ..i:.=u...}..[.......0X...r(}l...z...:pX...
...N.K.nFp$FNX.o<0ie.U.....`W......C.T)[....V.C.1...}..7.t....pN..&
gt;Gl....58...B...\?.hBa..K.<.it...d......HTTP/1.1 200 OK..Cache-Co
ntrol: max-age=2592000       ..Expires: Fri, 20 Jan 2017 19:35:56 GMT.
.Last-Modified: Sat, 22 Oct 2016 09:26:12 GMT..Content-Type: text/css.
.Content-Length: 316..Content-Encoding: gzip..Vary: Accept-Encoding,Ac
cept-Encoding..Date: Fri, 13 Jan 2017 19:35:56 GMT..Accept-Ranges: byt
es..Server: LiteSpeed..Connection: Keep-Alive.............R.N.0....=lE
K...D.......N.5....V..;)m..&.[b..|..J.....4....W9.D.y....E.........j.'
........o...Hu.F$:#h1......a......./Y".#;q.k...............lt.O..7....
;.* ..i:.=u...}..[.......0X...r(}l...z...:pX......N.K.nFp$FNX.o<0ie
.U.....`W......C.T)[....V.C.1...}..7.t....pN..>Gl....58...B...\?.hB
a..K.<.it...d..........


GET /wp-content/themes/goodnews/lib/modules/login-register/assets/styles.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:56 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:59 GMT

Content-Type: text/css

Content-Length: 949

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:56 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........W.j.<.}.C.lP..].Uf.1......%'Ze.Hr....we..\7[..Shd...{t\(
..6..7........d....2.."..i.t..JZ.%.. ......d...............&.Y(....w.n
bX.57...(..%]........x...dx.jv......Y...=.0..,/I. .t....z..DJ\6.......
!.l....F=3}}FA....l8..`.......8.J..Y.I..E$....j. .....$...R<q.ZM...
 .6Z5L[.QT.<...3v.3........<p.j.2.........9}5.n...j..J.-..\.U .&
gt;$.Z.gQ..6....i.'vE1.....n..... ..Z.VR|UUU...a........4...P.....s..p
.`...iH...h...!....:.....i.....Yi......`.@_....B.R.!Tmq.....^..mv...z.
.a.w.....~}t.....I!..D...6@..A...`.Q\B.s...,.....K.!.H-#.R^.5._...#...
..=....R...@p.............k%..X...w...................m.mKb..1.a.\=>
;>...Cg"..2.....-h.y...(.!.,..p..AR).y..........~p....`.!~C.h].Z.&l
t;.>.......>?....6.z........F.......W-......B/;....,Ytt.L[....m/
.......0.9<.....>...V.....(........<*At.B.v."..Q..Ht.w....<
;.$R......x:...t....'.{9..{`....}...j.. d.f../O.....<..0.7.A.A8....
.8.. .....D.!...Kb..B..w@-O)'..d..@...5...).-..I..5|..d.?B^....Q?.....
..y...U...........


GET /wp-content/uploads/goodnews/style.min-2.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT

Content-Type: text/css

Content-Length: 30517

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.............n.I. . \7.m....z.2.>..{v/....fg..;..Q"K......e........
|...l...c.T.........,............8...a.\..........".5ns5......._.77.YP
.X...lq5[.6u.... ...v..KU.o....f..Nuo'x.. |}..L.c..jU....%.2..........
.........v..U.X..w.fv...W..p9.^.&.e...^.>*.Gg......99;...\..V..>
....1.4...L_..... W.x.s9=.e*.......9.....M.y.......M......D.$T.I.l.:..
Y......pR....-.....?.0y.zM.......}.....F~.*t.m.....Jw.`.Wic.k.\..g...^
......,o/..u.R..8.w...........]5.m..G...g....}. .......m.-d....0...LA~
...Qa&...Ts.M.!...)(x.I75G.3....H!U{s.. lb.`\K.qP..._s.%O ..T....L..j{
yY..G.....'-.p...;gJ.T-U1.:.<..`.$cz...If.y..Q.....2....wT..NO..W..
.!....n... >.ry..4..l....Rq..g.b\.P.....Y.T.iw........F.nA....M....
.F. ..KT.G.D...-...db.j..zv...zA..}..KFE...0d8....{..?...T[-7n........
b6]..IAe......#pU;l-.q.c.9C.Z.*Lg.....2K.....".....%...)..vG..k...2;..
.6.......%U..6.Y.n...V1B.t.m.i..Q.:"-.d..v...... @jq.......U.....l~.o.
B...6.1. ...g..4.i..[;n..R{.^8a4..sBI......X.....2........c.\.....)..8
J....W........Un.V(>.........!.to.x.>[@Hr.HV.a..V.sHw..<5..@D
wo.......dG...4...$.i!...i.`~....T.....#.}K.~.[....n..E.....|....}....
y..>..v.~.....>p..6'..;.d1.!..@.jKL).dqf. u.%... &.-S.].........
?...B.............O.C[H..D...}l..n.....1..;.xJn4G. .e.....h(d.......s.
d...4..._.....'.u.g..!...w4.....0...*....[bI.......{YKC.4[.SdJ.h...1..
...xa.....'l@_#s.h(..*lbE.1G,.T..3PN.a..WQd....6hI.....Q.gZ"..J/!.....
.w.>#..........|g.xo!..&mB..AZH....6.B...EHa.....&K./........(.#.F/
...W...K.U....c.4.....*.@..{K..>I. ..&.D.A.......X1..."..RNPqa.<<< skipped >>>

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Fri, 14 Oct 2016 12:09:48 GMT

Content-Type: application/javascript

Content-Length: 4303

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Zms....._.!.u0...v..i.# ._..N.6.....8.. ..@.D`.{......'.v.c
..........8zz.\.....s.&...ss...?v..E.}vV..X.i.;"...^.......p].e....I._
..(K#.W.y:.....".e..A}...........Z..Lk.....y|..#Z.....{..N...nD..A.C..
..d1..M........Y.y.'..ZWK.... .oqw08hg.M..........N>..;.....>.".
.._o...y.V?../.|.=......Q.kS./..,.{....JY....)...;K.y...i..E..1.&...l.
.Y.....2c.......Tx..~ 6.o..:Z..{..._..=/. ...C....sd..e.3.\.*...a.<
l&..k.`6.........d.r......I...Y....V>...u..s..K.....#. 7....wn..8..
-...Q.A....i.|....~.0b.31m....]?.yR/...w......^.....E...k.*.:/b. ....&
gt;..FH...g....:-.*.f..2s...>K....}...*.E..7./..d.]..` ..Y.......^.
.U...l.....-...4.}....Y....O.L.OF..W...........r..(.......7.'#~......F
....2q...>..h). .7.~..j...l......e..2o..X5...NW.l.pySJ..yv..g..s...
.Gf.N. ]r..]..l".C.Y.,wy.4..s.....2..R"....i4.... ............,OE%... 
...q.....c....4.../=....>yg.P....U.x.......eU......D`9.X.iu.b,....8
6.,.0....K.MN..Y..`.....o....._............K.'.A.p.I.... r,..v...~@..~
..u...7..P...\sv9...........a..B.k....W.. 4..-....Q..a..!r.....DKd..;.
...$m...V..T.A.....O.............b..h....Ky].HZF)7..Z...n.#..\.....8..
G...Z.X.wT...6..w.j..u.Cwx9t.=.X...5.4.....Z..: k..B.~..V)...G.......C
@.....8-rgr......f..j' '.../V........L.pV...gp`..n."b`..lTa.6....p....
Vv....f!...y..c.9.n.....\.?...&..~...~.F..j7A.....Q......Z.yZ...i....N
..|...[^......F|...f.....n.C.<6.w.....4.p...W......n^.G...}3.....O.
.X.........[...[.y2..0......./m.!h....'..$.$.{..4.D..j.$.....`6.r...hO
fG..V......}...5N.......@.\......u.>|vH..jX.......I.o...v..S.L@<<< skipped >>>

GET /wp-content/plugins/js_composer_5.0.1/assets/css/vc_lte_ie9.min.css HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Wed, 21 Dec 2016 16:50:26 GMT

Content-Type: text/css

Content-Length: 471

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........T.n.0.....[9.@wI...P....BeI...A../....%...dK".{|....[..t..`
R.&.~Z;..Z....7...Qyt%....6...4..).^.dCi....|.,.>....=.......uA..U.
).....S,.....R..Y........... th.;Z....o..!..t`.m.).4.#...2....J[|,.,,X
.....>.A..u...v......b.Hj. .:...\...sc...6J...1dK6xp.D..-..SL...b..
....C$.......U/Q......2............h=.Q.^.uy?.u<...F.>..[. 3..r{
k.'.....-s.u._..C..-.#.3.d.*).sw.P.o"......Z.A.s.....rT..1.f.DV ...g.&
gt;<q'HG....'...Y..h.u..}_.-d6...._....yn.q..1i.m...H.n....q..z...<
/font>....

GET /wp-includes/js/wp-emoji-release.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:57 GMT

Last-Modified: Thu, 08 Dec 2016 17:13:47 GMT

Content-Type: application/javascript

Content-Length: 4708

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:57 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Z{o.H...?..=.$LS.)......{..d2H..w...d?d9zE..d,}..U5I..... .
..]....".......R.....d<...T.....?...~.M.3.~.......J.z&..|f;..z..V.r
,r...?H..y\.|.....XO.,..R...........m.>..O..ZLR...{W[#...J.....L...
yY.Rn....(.j[..y...*.../mbC...I....D.- w.ho.f...ttrr..D..n]..o..../..&
I..2o.^....v....|.r..m...t...F.......v....`.v..gR}{...y...8_.......v..
..dA.#......gw.N..;w...w......[.]'y...xb.......=..)tt.LG. .q...f}.~N.Y
..J'k.N..t.,!^%...p..=K&..w..L[.....j&/I.vj..V.1..2..q.....u.$.^8@9;^.
t. .[..I.....0.<...z8x;MG..{..Z..K, z.[..<..f.\.....4.(..t:Y)...
...KV6....$G....v.w...?.~[..j...GN....Q..k>.0x8....h...#.,.9.{b..Vd
..T....$O.D.R$ ........v..4.R..q!..d..k.......~ p....H..).zy..f`>..
}j.#...Z11.SyP.z..I.... ....TS..`Oa.c.q.X....AuX.X..u..Erd...G...Bo4H.
...=B{t@"CgL.. .j.9F...*...V].U.......X.[.....t ....p5.........7.g..pN
.k^[.HG......./7...'..F.Y.vKa...@..z....$9\.\..g....:N.....R?Yb.O....0
..z........rO..^/........I...........^........?.;~..2..n..q..!.ZV..uX.
.m6v.<..{.m..~...P;@W[X9..F..S<.mR.%..r8....KQb.dC.=....&. x.9.l
6..$......D..fs..CC4M..[.o...4]=......G.E.n't..0w......'.^bv'.........
P..L.3.....VAhY_..B...mXF.....d..}>...._.e.q$G.ty._r.....q..b..D...
.V'l9.^.l.my...8^>/........Y..VK.J..38S....e..4X....3.&e........(..
...a{........O..r.R..-p0.R.8...VM..g=...."....r>%~........wO.m....q
......t[...R.e|.ix:....u...'n.....)s8."h>Z-kh.........'9u_Sw..#..=.
`..../.9&..2i....P..OD......gC..4.uF.Z......|_.|..z........ .=.~.z.z.&
T.%...p.v..b..*.V..YEQF.".he.sK}........I.`,B.X.$.1}z........w.9..<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.css?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT

Content-Type: text/css

Content-Length: 276

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
.............N.0.._..o...F-.'1{...j.m.!....* ..fw/.......I.....J......
.@@].Gk..A.:6.^....l,.j......J.q...)....|p.g.F..LP.............F...q.2
i\r.s....&_.....T...XkN-....L...d..13r...:.ic...^....p..........[_.~]|
......E....bsJ....)/[s.........j.>........wD..Vf.9.^.......`}.k...<
/font>....

GET /wp-content/themes/goodnews/lib/widgets/advanced-news/assets/widget.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:16 GMT

Content-Type: application/javascript

Content-Length: 2625

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Y[o.... 6.0...I......v.4.n....-.L.H...L....u......([......,
....~../.....y..b.?Dx..t)..... ...Q.b..yR...a\....E..-s..p..(...{...z%
...g2.Z.a.cQ.],K...p4...........j).;...V.4..Y......Z..B."........B../.
........J.5x...h......f.(.8...^....s.....At.iQY........(../Z$.2..a....
X.)..b...P^....D..a^.....X.R..:.d<..........w.U....2b.`.s...?....7.
...*...Y).T.eO..<=.f.y<O_.3<].?.\...7........ ..&OQH..W....`X
..........k...r..J.b!.H.t.w../.=R......g'..\.j..S....\%.....' A.RI...f
6|).7..FF...a.".{^.2.....;../..L\..z].C."........<s.B@.....i.....&g
t;y....... ...;......._..?..ak.....e:..c.4.X-)F ..> Z7....$.>.z.
.r%....;.M...-#.....m*........V^.......0.u.V.vs.-...k^ d<..?...4.y*
.>.-..`.......N..@.0.....p.Iu.g%.h.sR...q.J.y ...D:5..J..=n.,/..Y..
...X4.gUh.j..>\...re....w...W..8...@|M...Z..rzM.I.48../h.2Ej./eR...
..n..kK,-.......F9.FLgI&.{.5....."..q.[..U...TlU.-..i.../.......n...h.
.OO.......x.A..-:'zZ3v......0`...%.36&s5.c......l.....%9=... ..<.3.
8.j.Wo.g..^.^.u.....(.iw8..g....q.Q#...2..o.,6...a.t...r..l..:f.Ff#...
.##....?..@..$xf..9.r......7.....C{...>Z.... ...~.....*Es...u..m..'
fm..nD...6.......J.,f..T..[.o..p.u..K..i...I..JO...F.......!...~...}6.
Z..z.Bb.Z4....,1^..]l..A.7.[.6...M...}NN.o.7Zw..JQ.3...I.@.%...[...-..
.J.P....-.........0fN..M...}'.....s.A.L.&6y|..O.q..QJJ..|..v]u4B...5..
^.=...............M.\)\...i@.......:]..:.}....*,.E\..Fx.L...X.r.......
......-....T......@.*.8P.~.k...&.....:..1)'<. N....~...........}b.8
e../.....kKU.d.:..,\.G.^&L..XK5^.....\.4...>...&.2..)..8. .?.ic<<< skipped >>>

GET /wp-content/plugins/xt-mailchimp/js/ajax.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sat, 22 Oct 2016 09:44:14 GMT

Content-Type: application/javascript

Content-Length: 1008

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........VMs.8.=._..."..q....S3............(...D.o..}...0d...r1n....
.........7.t...U!...~U....R.I....k0.f.!.Tq_..T....T.$.U..............-
Y.H......_bI.O...nm.!.tK.V..h.M"L....X&.q..F..N.C)"._..i[!......#\e.q.
...e...7..i....|..l`..m..1.........0...dQ..)..0..p...E........e..j...U
...:.....6..!.....!.s.....0...o......$...y.pH..#.{[.........a......E.U
........R.|...Nl.F.....>._&..x.1......L.>sd.s.%...).#...M...1../
....lf...D.....t..V8...2Q.V..3%.....#.i.w.N.O...0.v?.=.&.g.7g.10...}.G
.C.]....f....o...q....IUV...f.......X...x...|..g.?.....s&.{.H. ..m....
V o.f.........n.2..I.:~.......~..^.j.V...A.4D_/...9.v.1...L..Q)....1..
.A....B.4.. ....3. ....0..I.".Gq...#..i..o.y.#..........@.[..... ..a..
 y. ..;.Ce.z.k.s.=L.9.c/.H...M.....(x..U... t.9}...'..4........P......
.r.. ..%..\.....[w.m...?..,.)E...w...v>x....XI.^..i^.....4f2.'.....
q...NJ.h.C.....g1.Dz...D..G...t<..3#.2x.PU.1~..T.h..gM~0.Ei.... x.\
.'...z..x...(..3....4....H..h.>....p..o.N;.n..m..v.if>...%c..U.&
gt;1G(..?.e..2U...........&j.7GJ..........0(a....HTTP/1.1 200 OK..Cach
e-Control: max-age=2592000       ..Expires: Fri, 20 Jan 2017 19:35:58 
GMT..Last-Modified: Sat, 22 Oct 2016 09:44:14 GMT..Content-Type: appli
cation/javascript..Content-Length: 1008..Content-Encoding: gzip..Vary:
 Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:35:58 GMT.
.Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive......
.......VMs.8.=._..."..q....S3............(...D.o..}...0d...r1n........
.....7.t...U!...~U....R.I....k0.f.!.Tq_..T....T.$.U..............-<<< skipped >>>

GET /wp-content/uploads/2016/10/Farming-Simulator-17-HayvancÄ±lÄ±k-Rehberi-273x182.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Sun, 30 Oct 2016 21:12:01 GMT

Content-Type: image/jpeg

Content-Length: 15029

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$...........".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...W.qJ....B..N.G
=i|.W...71..w....O.h..G ...g.).)........][.sK.......qJ.{..m.8#.sUu=V-.
......(#$.N.J.|..&....r.'.c.&.nPE#.#......z....Ws..3.....*3\......sLf.
73.=I.........#...-]...H$.2........5N.D......$...LAK....P..Ks.^Z..[...
...J.....p.....;X........o....y..}..@B6p23..uR)F.cs~.j.v..,......~....
v...`S...=......5 ...\yD.|.a.$......]..i...(y0z.|...C...*g.4.'X.~..._P
..........WV.[..~.cQl...2.......O..........]..K....b.#.....N[.N)H.;...
...;].;.jO#.O...J...N.W...%..*{.G_. jua7d...-.X......]V.... ks.......w
...j..9.[x.....~G.....n..R...&.t..8.Lj........tm>.......}...n....n.
kY.b.2..p......f...r...w.4..6....e......|.c.....EI..]..x....g........G
.Z....a{.tG]N.....{.).....m....v....z...a.. ...'.{.-.l*....$.'.Y.3....
......7V.....(T........}...Kj.1.......k.Z..5.IeYDy9.5.......U....qT.*5
.......~....|^.P~.O....*..Tf...yZlC.<..~B....U.V..O...mL.B7.Kz.<<< skipped >>>

GET /wp-content/uploads/2016/07/wp-1469792536870-273x182.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:58 GMT

Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT

Content-Type: image/jpeg

Content-Length: 13782

Date: Fri, 13 Jan 2017 19:35:58 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$...........".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?.........i.......
J.'.....I..idr).K~..E..`.K.u.G.a.Q..g.....H. ..".p([!..Q.X{...k.1M..*.
 ]X.\.......e{..-....i.`.........e..)....XX...X..k...$d)...o..N.J.9...
.H.\WE....M(.....P..0V..T.......uSG.c.p.:..4.Ao.1O....t.............. 
....;V..}...=*y.TJK.lT..:U..9.k.^.*h.....G....H..`~...cXG]MU..S.3.....
..........@G.Jx...h-.)..r..bQHjO'..".)\t..5.*.H.J"...I.B..............
;GZc..E.. X...F)..).......R..Q.;.&...vP..........I.......GJWCQ.K....AQ
....NH.v8.tZD.rj\.Q...*N}.E....O5b8..U.H......hEn...r.0.TVl2..Z..dpk9\
.D..dn>.?......m. ...{.xc....*..z.#m....`.y ..O...j.V.-..o..B.\I ].
:.OSS8.[.........!c.@.OAP.b..2...=.Z..1...7....'.o.......c..s^Mu.)....
..n;wI.?:j....Z c...."%........W5..i....8D..Y.......SD.4....uW......|*
-t.m,-...o0.9..3..5F]JX.......D#"..]..........iI.?....A.m.s..x.&...3..
2.$......F....y.....rk..e.0.*Oc...=:F.]..g..?.c.........K....nb...<<< skipped >>>

GET /wp-content/uploads/2016/07/wp-1469511914476-273x182.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:35:59 GMT

Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT

Content-Type: image/jpeg

Content-Length: 19202

Date: Fri, 13 Jan 2017 19:35:59 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 82....C.....................................!........'.."#%%%.
.),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$...........".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...4....}.A..z.9l
SX..H .....H..R..R... ......J....q.........%...V.....[oj.[{V..{T.i.E.c
)m}........."..JW......-=.dY{T.....c.Z{S"."yW.p......[.....x.a.....?.)
\v2...8Z{V..=../.' ..-G.8[{V...........Zh.].Z[.i..{b..R..,../......b.o
jp.....^..{.[.0..5)5 H.......T..T.N. ...l..........P.$..[...Z\.*.-}...
...Q.-$..5.8d...eS.N..&......e.1.>r...=}h...-.....<A.6v.....l}.G
..A.i.k.R...q....;..<.....4..a....-........<-......F...Cr...2cp.
e.....Z............[)...~s...<..is. ...l=(mb.b{...{X..k.-%.......s.
.3......qrmL.....6]ZK.e.27.....b.D....[{V..@.......o.N.....jQo.P.;...f
.....E.a..A..H.....T..v...*,.2[...zT....a.....a-...p{U.....;.....K_j..
!...tS}..B..9l1...^9.Z.. ..s.".Z.T.j1..$.= ...~../$..RW...<.D....0.
.K.,i...L....j_..r.....;v3B....YO.\...7.W.SH....g/=.H....?..x.P......j
O...#.E.;S...y..%?..#.um..........Z..]Z.L.]O^.....[w..a.2>]..ww<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/fontawesome/fonts/fontawesome-webfont.eot?v=4.4.0 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Last-Modified: Sat, 22 Oct 2016 09:23:21 GMT

Content-Type: application/vnd.ms-fontobject

Content-Length: 68875

Date: Fri, 13 Jan 2017 19:35:59 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
....%.............................LP.........................^ >...
.................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i
.o.n. .4...4...0. .2.0.1.5...&.F.o.n.t.A.w.e.s.o.m.e. .R.e.g.u.l.a.r..
...BSGP.........................!..........Y.D.M.F..x...>..........
)Y......h..D....pj.....K......*....0....~.71.^..{.. rAP..u;..3..K..?].
.:..y..f..`..o........&.d:..e.DgK...R..%......q..H...:........<Bt..
..]....Nbf..JH.%.....~..S...G....8.I.a.U.-&..q..1.....#`U.....W.L.g.E.
 q...y..:..g$8..eAV....3.e....u.j...z..i.@.......a.=%..0..O.\O... "3..
ef.0c..@....$.....*...qD..E.".(./.Jv.......,^&N?.'c....-.1f*.}........
......)..k\eL...e......86Qp...f.vX...*X..C.;Ve..P CKW.a.Z...d....?.pK.
U.<T......l......RT........$*.Q........YE............e....OI.....!.
.........FE].CE..r>.s..d.W.....*0#....Q.T.......:...b....#...@Ym...
.{..D.t.......!..Z.....d.......S..........Qv'...x...U.L.89......96....
.,.Be.....r.R... 5.....XW......N..J.._;.J......%.$...-n.pr..t.......pL
...V...{..@....L....."7.....B...|.......7J...c*...e...K..d...=..x.....
..|4.!.d...(.A...`_o...s..[.0H^..L.pa..)1P...8S.A..s6LD....o...K..$.SD
..RIU..W.,. u@:.5W.......NFG.g.i<.Y.F..P`1%..R...Ib..>.....s..g1
{.L.B..#..}aD0.`.C*..............'../a9.....H}...d...#."...4.z.@c1....
5n..@.r...6.7..&...Z..X.06...Ma]..b*....6.....Ql..|.....]..x<..E..D
0f'.B.._.....'.h...A.3...w...7...@o|.../J.[.s......e......../.".RB.mB.
....k>&l@.r....,...4.lg.....:eQ.......Z...<#...(t....8..PaL,n.r'
....n.p8...`:.*.C.(......H2....V.f......S......9..jK;..'".zJ..zY.=<<< skipped >>>

GET /wp-content/uploads/2016/07/wp-1469155132742-165x110.jpg HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:04 GMT

Last-Modified: Sat, 22 Oct 2016 10:13:18 GMT

Content-Type: image/jpeg

Content-Length: 4506

Date: Fri, 13 Jan 2017 19:36:04 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............n....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?.......c0.....<
;...i.t.<.Z.g..j&'.44...^h/.\..l..8.*.m..i...............Q@$C&}j.0.
y54..x...".....rI8.......c.S.......x.@...j..}....*.o.......j...y...1Y.
Hms.a1.s*r..7.8.8...j...c... ...w.E|~F.s.Z..4..........pjvl....#....X.
.{..'".IUg8\.h$..:..TN9..3..i...@'b.......S/.......x=sK..z.;....p.x..V
..~...R..........*E....t....c9.....r -n...;.C.h.u....^IB.I..I5\.g.....
..RK8%.......}>..^.h..G..eu.lB.Ez......X4....n&..[..O_...'._.u.Q..W
.H.....@8...x..Q...6.,.p.Ab~.W..h5.:.H5.x.....6.FE|.l]J....S.8,.$....d
....S..H..........$?.G}(;..............!6......J.6..my.\,..R.*......Ez
...j.[G.;mo.&.]....=Cw..:...|..O.eK}$,J....V.v>.6.0...h.~.xW.zW....
4........>.;..c.......u_......T..X..$L....8.....m;........R.<d..
q.O.........f..`j[tnH.<.i.MY.dc..Z>..S.{..s....N.....E.i.V .....
.T.OZ).....^.?...8.W05<.MN...;..%.:...H....W8...jAzO|.. :E..><<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/likes/js/xt_likes.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:50 GMT

Content-Type: application/javascript

Content-Length: 405

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........T.n.0... ...R k.:v...j.n..#.P....E.{..NH....x.........o.j..
.V.|...dN...C....G..|y~..hG...L...h=.S)v........\.E.hV.lC.".....& g...
..pmeKZe..X..z...c.R[...*....3&D..(.Z..$$........K]I...............(..
..J.f......6.u:....d.,S..i......r.}Z.(.W.<R.2WK.....o..OA.`..p8|.:.
k{C...w....{.."....z".V.0..5U.$....qP-.R...H.5...~.....u..Px.P....M.X.
...3.e...........o#.B.L].!..n.I...9....3=9....1:~._{.T....HTTP/1.1 200
 OK..Cache-Control: max-age=2592000       ..Expires: Fri, 20 Jan 2017 
19:36:06 GMT..Last-Modified: Sat, 22 Oct 2016 09:24:50 GMT..Content-Ty
pe: application/javascript..Content-Length: 405..Content-Encoding: gzi
p..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36
:06 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Ali
ve.............T.n.0... ...R k.:v...j.n..#.P....E.{..NH....x.........o
.j...V.|...dN...C....G..|y~..hG...L...h=.S)v........\.E.hV.lC.".....& 
g.....pmeKZe..X..z...c.R[...*....3&D..(.Z..$$........K]I..............
.(....J.f......6.u:....d.,S..i......r.}Z.(.W.<R.2WK.....o..OA.`..p8
|.:.k{C...w....{.."....z".V.0..5U.$....qP-.R...H.5...~.....u..Px.P....
M.X....3.e...........o#.B.L].!..n.I...9....3=9....1:~._{.T.....
...
<<< skipped >>>

GET /wp-includes/js/jquery/ui/button.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT

Content-Type: application/javascript

Content-Length: 2334

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Y[o.F.}....A&kzT..D...4..a...}r.`H.$&..%.n.I.}..H.DI....X..
w...4.....[...:..z.}..wBT..@...?..F.:....W..r.V[,...U........Yue.D....
.Jlx..U).<.D..../..........._..."Oy.rz..V.znv.c#..s:.k.&.}.S.onV].J
Q|....B.X...Zy._.%..._...R....&JBB.i.p...<[sA.C.D......%,....K.4&]~
.E..I_..Z.......B..x..{V.$.F..s......U..........}zt._...|.......r0.&v%
[...W.h.3_l.6X.\<.[^ubP?.%...|...H@..>i..........W..DSO...l.a...
.-.`..s.h....Kg3?.S...`)....uH~....8.-...F.'I(.%w...}~.......3..#....V
..'?Vi....$.....Z..i.%.!... '...>...O...oZ.bDt^..:.>.\...;m..IX.
2j.h..-K..EeW..t\t.]X...zIEI.3N.k.W...!..6.a....$G.J.4-....'...XW&..p.
..N.}...`...... 'B..$.*$zInl.)RF;j.[N..7..V...j..;.....n8I2...3.wn...U
.xDp.fo...\..r..1..L..'B. .B.z.KN.Z..F.p..t...I.'....!......b...%!.,..
<0...N.........~.)&yYw...............-v.96.BS...m..Fes.....C...O.c.
.~F...d....V]..6....p...>..{iQ...f..............ME.9f.E..0.V ....:_
..D...........G...-F[Q...[.......l..$.p..@...Pu..L=c.....,.I.5W..U=..i
6...\.........P.U...b.y0..........R.......C.M...........37.L..&g.....B
.....$.3j...w..........e.i....:<|b.J....i?..b3.H.. Z..SN..qZg..W.".
.............]U_.<.2..FL...D...&..NbY*...j.S.J.........{v_......s..
.P..Pe.&...l0_..?....lvv..O.........q0.h.1...d..j6...yt.u.W.......wOI6
.:.. ..0e. .*....b...o..F.!."..S.......Na.q9.=..@...BJ.4..}.8SW..=.2..
......K. .........Q.Q....J...I$....*=.b..X..@ .....(,...(..c.......s..
......L....k...!......3O..\C.....9F.._a..pbp.......[.^.x.m.,..=KS.sH..
...c...H9........vP...4.ukw.La=G.C.;.8.uE...O...*.Z.T....j....(...<<< skipped >>>

GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:06 GMT

Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT

Content-Type: application/javascript

Content-Length: 6150

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:06 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........\[s.F.~._!.....Aiv.a)....Sv.$....N.....$$.`...B...wn@...d /
"...}N.{.h...Og....k.........Y...O...Uxu...z...j4...B..y..K4S....q....
...r[..&/...H...<[.%e.Y....\W4..l..U..a,.1....?.-.$ .,<Z2,......
..x.....k......:.n..v....g/^.m.WY9=K.i^d......t,...O.z....r.....V.....
l....?.{B?..gK.z.l.].....y ].?/.C.3.`.9[W.....{.Ly.9 6.......S.x."....
^T%.W6:..."_.......Ob.U.......q..34>....*K6?.H..Sz.....-..j].yY..
:O.a.#^d....* ....*[S.2...#......^....\..B;...e^H...}...2...@....&^ .j
S...).Tl...r..u../6.8.....K.......vv<..}.w..,.s.q.1Y..E3i.$.....y..
Y.6........y%.pJt.}9.......,....o.M74>.{.C.'5.....r..Y...3......~..
...}....e....uF.^...h=l2H.,...h3..`.?...5.O.!d..6....EL.l.A..>.3...
.....O-F9...{...=%.C^......];..Z..rM../....:..........<..........Mg
...L.._..]...6,.4..^f!.&...?.....W....A.}^...}.J%.=...,..r..y....m2>
;..U/.y....YB....A.."..Y.y\d.W.%.3.......b..O.h.*....".p.uy>.....QX
n7..%..C.Y.....a..R......N....<.?.mR.w.7A..T=?...5Z,.:.F.......I..i
.y_.$.../[.L..2^..H.d...&Dk..1y...8.$.......%xT=..%.e..22..Q......P..4
.`..={../.!.l}d..s.Z.l.3..!.W..NL... ..m5.i.Z.ay.l.../......4.V..q.M.e
r.....E.."..Zw..g,..-.r. .e....n..@...o.." f..x.s..^@....j....U...m...
.d......c...8..8.[<xO....4.c..d ....$u.M....}.SW..i..yP.d....!..W.*
U......Cl..3iM.q....g..t.{....:y=Q.^'...Fq.],a'.[?.F-.3.......Z.6sz.g^
....U.d.a........@r..^\dm...6g`.......Z.&.4.gd...........v[:.l..p._s.'
.V8....WQm.'b..._O..~.....I...~vs.....u...`P[.'.|.bG".z.t..4_Wd..y...G
...c.m6.."....6.M...`3.....z..{.i.P.f.'~../..PcU.....p.V.}....s...<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/login-register/assets/scripts.min.js?ver=4.7.1 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:24:59 GMT

Content-Type: application/javascript

Content-Length: 990

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........VKo.6.. ....B.....(.....v.....8..J.ARv.^......Wub.E..dr...7
.....(.y...j%.........k."_vme.j.L.[....G(0[....c.V;.r.t....u...lQ....7
.....~...Z ...4.....?..C&.t..=....p.Lhp9...P..r5d......=$-.&..b....d.I
.kUy..Z...#.T...)7T.... ..v...............PwX...>.4.Z6d.Q...<.wm
."...Z.W..o.V.2..6Y........i......ycV..2..93]U.1..4...W.......x.?...P.
...F..|..JG....9.L...b..x|...Uu.%...@..!.w..j....Q.a.8...g...L.O..3..Y
...Wx-.f.#aN...3......../...;..&.D........\N.....ljB........i.x..Og...
`.ii..;c.ku...Y...#..=......M .j,A...@..M.@z<........fi.jW6..Xaq..'
.'x.u.:?.^9...Fm1RS....E...R.....N.....$.j`-.5..?~. /.tp..'...B.@.....
..E..s..!..F...8P.{.9.Q.T..5...=...~~5`c.vfF.f...&d.. ..oUs. r..v.....
4.W.L.*i....d}.3.....)..4...G.fi......K..i.3..L..~.m.|...Y.,.OE.F...DK
...z..5.!..I.|..&g6...{.;.8.$yI.}:3...'6.....Z'....O...p...g.W......F.
{...........$=.z3.9A....l. .x..S....:....y.3._...B......e.wx..)...U..Q
......jep./v....U.b..v.:9#O.xf....=..Z..V....-c.pT...d. {.......8.}'..
..!*..H(}..&Y..........


GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6 HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Wed, 21 Dec 2016 18:53:04 GMT

Content-Type: application/javascript

Content-Length: 3810

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........Zms..........`L@..N...N....d..v......#.......e..>.r...).
.f2&t......w....&-.`:.n..f......J...... /hnJS...Oe.............,}...~.
...YF.&..4m......X.Ro.......@.8.2..w...b....h.G..Oy..,.....(...UZG....
.........m/7i......{SLm.^Q.akA1.....<3q...%....).&.1..'P8.2...*..4.
.g....Eq.T....s._.Ym...Lr....T.z.|..u..i.....n.0.k..0.ws"F.h@E.~6.1..P
i/.81WE...#..dK.a ..cp:.r...4.g.N...8wz.q..q./.[..._...I."..._x.=9....
^-<.}].>..n.....j...........**...W.l..M[.=.TA[.?..g.;....L?z....
C"(d.....`..x.@3...6 "^....Uc.@.. .b.~.@..........x.....`.LT.Lb... ..L
.....HMX..........D{...e..y....,M>..V....A.Em.&..H...Tu'f.....$kk.n
..N>\.....;.\'....u....DWq..*cB..E$.X,/1........v.?{........5......
....BQ..eQ5.o6..#..q.*gOs....A...|..>..c....H.r. !....B.G#..b....&.
l..R.b2....._x....W`.....?....8.>..C>3.UmY~X-..g.vsi........q...
2...98.....s...;.tH.....y...1aW......6U..m...s;..F.*7G.H.>...*.z.a.
6{M........_ .9v.^5.2I\6@ju... .&w.V;..^.........Z9..tI-../.5.).__.7I.
.....4.bS67...E..p*0!.<....<4..H,...;......L..j .|.=Q....)......
 .TfS|4.~.[..M...X'...4.{u.o...........Fl". ..4............|g....6....
/......XI...R/....N..,....0.(..B.......=..2.G.$...9..>........#30..
4c.H=..:'....J. JrP.zaGO.rOE..IyJ|B..^.o..r.....C*..<.z''...d..Y...
y...G....o..4p.....<. ....#.K....%..O....3....X.U...j uP.um,.T.....
t.. .u.I...B3.:2.T..e]6..W....2 .b.8...1.....!Z8B1*k......m....".B..cG
7.<$......;...=N....6y..J...vn..x...".....{./.N..y..Q>Y..yu.....
|m.....9.{..z.i.......>.\.....q.v.^.pT..=a........b..X6..tNW=..<<< skipped >>>

GET /wp-content/themes/goodnews/assets/vendors/jquery-nicescroll/jquery.nicescroll.min.js HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:08 GMT

Last-Modified: Sat, 22 Oct 2016 09:21:21 GMT

Content-Type: application/javascript

Content-Length: 19471

Content-Encoding: gzip

Vary: Accept-Encoding,Accept-Encoding

Date: Fri, 13 Jan 2017 19:36:08 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive
...........}mw.F.... d...i..%;.....{<79.'..3...w.EB".....DZ....S.. 
$......nv,../.......'......E'..$.!I.z.....iv./..].;._NO.g.4......$.{Yw
.u~..>u.:...h...........i1Y]f.zp......V/7...../.NRM.|Y'.^.f..`.-..Y
....*'.j9..Nr.tO.....^......']S.xx..V.|.u...Aw.K./:.....Q..9..N. z5...
..-..Q.ea:=*...R..|....O.zy.....W........i.....e..........~.k.(..iz./.
........j._....(...[t..U&..$.o.8..;O.]..l'_.L...tr:{.4.....N.{..m.%...
.*..X.U.....[.....C......U-s..............{^o........P..%.U]$......X.'
y.....a.h.....I1/.Q./....m{.O..(.l..%gE9.P.`....y>.......m9....4.m.
.y.......wY......rt..W....,...r.......,_V..FO.=........,8 .......g..H.
W}...@..2s...L..-.gs@....,.f..4...._/.b....{.9).u...?H...H.e....=;.-..
....WfN......|^...jB....<.8.S.. ,Pv6....b9.N..M],.r..;......gE]c...
.4.8.bU..u...(......x._,F....TW.H{Kz.@P=...3A....]..l.!...lsV.K.U].E=.
..Ye.\.]...H7.b..x..T.z.....,.4/3a..8.....f...%...l>.....=.....ut..
.......$]r..P....u....L...R..Y...B&..b.b!....x.u...P.....y9.&.3..]..].
.{....;.c..I......... ...R...S..j2 .K.3O.....-...........#...3..A8../9
...=Y#....g..q....i.5.G~.?.U9..._b...Eq....<..=c/.....l1./....[.uW%
w...vxq....'...@....$...O8...........'R..$.41....4H....y{....mp......z
.-.S..D.p......a....&8...>.&..cV_..]..[|...<MN.._@.;...7(z..".^.
.........x[....d<.w..(....H.?M.6.. ...x2{..U.Ma(G..f.|*..$....o..e.
n.....RZ*...~.>....8.ux..................e...A.@'......|...F...yD.~
E..4 V....8..tp0..=..-.....p.../.....|P...8:..i._]`U........./.6......
.]U....]7...aW..9H.M....2...U..}/..}.&.< .._O.Q.._.f.D..ugX....<<< skipped >>>

GET /wp-content/themes/goodnews/lib/modules/social-share/img/ajax-loader.gif HTTP/1.1

Accept: */*

Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: teknogezgini.net

Connection: Keep-Alive

Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Expires: Fri, 20 Jan 2017 19:36:39 GMT

Last-Modified: Sat, 22 Oct 2016 09:25:09 GMT

Content-Type: image/gif

Content-Length: 723

Date: Fri, 13 Jan 2017 19:36:39 GMT

Accept-Ranges: bytes

Server: LiteSpeed

Connection: Keep-Alive

GIF89a..........DDD.........HHHDDDeee.........\\\zzz.........___FFF}}}
.........mmm...........................!..NETSCAPE2.0.....!..Created w
ith ajaxload.info.!.......,..........-  .di........@..8.5p.{..........
.@...s...E..B.!.......,..........$`a..`..i.................X/(...;....
.!.......,..........6  ..a,..$."..c.b.(......2.......[..K.......N..U.*
..N...!.......,..........5  ...E.T...4b$I..<...uy.;......>b.G...
..s9..y....*.R!.!.......,..........2  .di...X.DQ..H.bRUE..].:^....f._Q
.#......c.J......!.......,..........7  .di.$q]...b.i..a.h...m.]. ....a
.....M$..4._-.66....R..!.......,........../  .di..DQ.....r.%R...5....p
......q...^-.4.CY....!.......,........../  .di..DQ.....r.%R...5....p..
....q...^-.4.CY....;.........HTTP/1.1 200 OK..Cache-Control: max-age=2
592000       ..Expires: Fri, 20 Jan 2017 19:36:39 GMT..Last-Modified: 
Sat, 22 Oct 2016 09:25:09 GMT..Content-Type: image/gif..Content-Length
: 723..Date: Fri, 13 Jan 2017 19:36:39 GMT..Accept-Ranges: bytes..Serv
er: LiteSpeed..Connection: Keep-Alive..GIF89a..........DDD.........HHH
DDDeee.........\\\zzz.........___FFF}}}.........mmm...................
........!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....
......-  .di........@..8.5p.{...........@...s...E..B.!.......,........
..$`a..`..i.................X/(...;.....!.......,..........6  ..a,..$.
"..c.b.(......2.......[..K.......N..U.*..N...!.......,..........5  ...
E.T...4b$I..<...uy.;......>b.G.....s9..y....*.R!.!.......,......
....2  .di...X.DQ..H.bRUE..].:^....f._Q.#......c.J......!.......,.

<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1

Cache-Control: max-age = 564348

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1377

content-transfer-encoding: binary

Cache-Control: max-age=569527, public, no-transform, must-revalidate

Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT

Expires: Fri, 20 Jan 2017 09:45:37 GMT

Date: Fri, 13 Jan 2017 19:36:21 GMT

Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..2017011
3094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:.....20170113094537Z....20170120094537Z0...*.H............
.;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf....
...7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d...
..Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....
t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s.
........... ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrus
t Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z021
00...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H..........
...0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..
D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.
....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3....
...F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0
...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......
0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...
*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i.
.3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\
.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.
J.....{.C\....G..0/.a.Eo.`z.<;IA...  #.''.CG..K@7z..7.\_..'.]q.f._.
WN....<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:31:49 GMT

Expires: Sat, 14 Jan 2017 12:31:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284674
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.e!d...G.....20170110070920Z....20170117070920Z0...*.H................
:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~.
.I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...&g
t;U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j
.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.dHTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:31:49 G
MT..Expires: Sat, 14 Jan 2017 12:31:49 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Cache-Control: public, max-age=345600..Age: 284674..0......
....0..... .....0......0...0......J......h.v....b..Z./..20170110070920
Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...
G.....20170110070920Z....20170117070920Z0...*.H................:......
....F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|
R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u..
....=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....
D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.d....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:41:53 GMT

Expires: Sat, 14 Jan 2017 12:41:53 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284073

0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
........?....20170110070538Z....20170117070538Z0...*.H..............u.
e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z.
.....~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\Fh
zC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v
.o.......Fj.|r.'..L......p..?......j.....V...?...HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:53 G
MT..Expires: Sat, 14 Jan 2017 12:41:53 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Cache-Control: public, max-age=345600..Age: 284073..0......
....0..... .....0......0...0......J......h.v....b..Z./..20170110070538
Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./........
.?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.
YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~.
.c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3
.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.....
..Fj.|r.'..L......p..?......j.....V...?.......

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:47:26 GMT

Expires: Sat, 14 Jan 2017 12:47:26 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 283743
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070107Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.].7.Z..n....20170110070107Z....20170117070107Z0...*.H.............>
;.....K..Sg..!...!.3.. ....HY..lp.....gE..e..I4..{-...st <....K,4..
..q3:....o...._.u.."No}v.(..#..$#1..>..Sd....g....l..=.Ub..sO...ms.
.eQ.........u.._)H....I....:.f.. E....$....X...#..H....)...U.6m..en.0.
%].h..v\UJ..i*.j.$w.6...,.[...."u....!..4....v.g.]ndHTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:47:2
6 GMT..Expires: Sat, 14 Jan 2017 12:47:26 GMT..Server: ocsp_responder.
.Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options
: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 283743..0...
.......0..... .....0......0...0......J......h.v....b..Z./..20170110070
107Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..].7
.Z..n....20170110070107Z....20170117070107Z0...*.H.............>...
..K..Sg..!...!.3.. ....HY..lp.....gE..e..I4..{-...st <....K,4....q3
:....o...._.u.."No}v.(..#..$#1..>..Sd....g....l..=.Ub..sO...ms..eQ.
........u.._)H....I....:.f.. E....$....X...#..H....)...U.6m..en.0.%].h
..v\UJ..i*.j.$w.6...,.[...."u....!..4....v.g.]nd....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 10 Jan 2017 12:41:40 GMT

Expires: Sat, 14 Jan 2017 12:41:40 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 284122
0..........0..... .....0......0...0......J......h.v....b..Z./..2017011
0070026Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.h..l..Mg....20170110070026Z....20170117070026Z0...*.H............. ..
~......7N:B..Qc.<..6...S.......`"r...MZ7..h .k,...YV..M.O...i}....=
.....q..|Zw.......N9..MX........TW...Vk..|JK(O.q.4....=<.... %.p..(
p...._$.<.L..x..9..P....D.).l.......yk...B...,...I.\..?2s;0....V..A
..Dy..x.........1H5......H"h[*V.K83..T5....6..|...Q.HTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:4
0 GMT..Expires: Sat, 14 Jan 2017 12:41:40 GMT..Server: ocsp_responder.
.Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options
: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284122..0...
.......0..... .....0......0...0......J......h.v....b..Z./..20170110070
026Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..h..
l..Mg....20170110070026Z....20170117070026Z0...*.H............. ..~...
...7N:B..Qc.<..6...S.......`"r...MZ7..h .k,...YV..M.O...i}....=....
.q..|Zw.......N9..MX........TW...Vk..|JK(O.q.4....=<.... %.p..(p...
._$.<.L..x..9..P....D.).l.......yk...B...,...I.\..?2s;0....V..A..Dy
..x.........1H5......H"h[*V.K83..T5....6..|...Q...

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1

Cache-Control: max-age = 564348

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1377

content-transfer-encoding: binary

Cache-Control: max-age=569534, public, no-transform, must-revalidate

Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT

Expires: Fri, 20 Jan 2017 09:45:37 GMT

Date: Fri, 13 Jan 2017 19:36:21 GMT

Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..2017011
3094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:.....20170113094537Z....20170120094537Z0...*.H............
.;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf....
...7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d...
..Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....
t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s.
........... ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrus
t Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z021
00...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H..........
...0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..
D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.
....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3....
...F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0
...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......
0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...
*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i.
.3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\
.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.
J.....{.C\....G..0/.a.Eo.`z.<;IA...  #.''.CG..K@7z..7.\_..'.]q.f._.
WN....<<< skipped >>>

The Worm connects to the servers at the folowing location(s):

%original file name%.exe_2472:

.text

`.data

.rsrc

ADVAPI32.dll

KERNEL32.dll

NTDLL.DLL

GDI32.dll

USER32.dll

COMCTL32.dll

VERSION.dll

advapi32.dll

advpack.dll

wininit.ini

Software\Microsoft\Windows\CurrentVersion\App Paths

setupapi.dll

setupx.dll

IXPd.TMP

TMP4351$.TMP

FINISHMSG

USRQCMD

ADMQCMD

msdownld.tmp

wextract.pdb

PSSSSSSh

RegCloseKey

RegOpenKeyExA

RegCreateKeyExA

RegQueryInfoKeyA

GetWindowsDirectoryA

ExitWindowsEx

MsgWaitForMultipleObjects

rundll32.exe %s,InstallHinfSection %s 128 %s

SHELL32.DLL

Software\Microsoft\Windows\CurrentVersion\RunOnce

PendingFileRenameOperations

System\CurrentControlSet\Control\Session Manager\FileRenameOperations

wextract_cleanup%d

%s /D:%s

rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"

Command.com /c %s

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\

.XqX951

cËs

webjc<P

`f.iVZu1

CSRKPR~1.EXE

22.exe

%xd(1#3

%s'A8

%S"[Bf9

N.TFg

0}.rQ

%.x48

9{L%S

Dw%xW

Tle%S

-vs}a

SV%dr

.Gp I

l.ChE"

_#2iIM%2x

D.Av'

%cUZ7

.xE*S

bkc%D

r.Hym

2Sshb

t4|"-f.Rf

O.hi>

mH.AMn

.Eo{F

.rlG>

rM'w].zL

.jy/%

.ei`U

<;N

j*L.mLd

.QuP8

3-X}o

:".ay

*;1%s#u

2.DP'

1!L-.HH/f

vlcÓ.

%<%c!

.ioPz-

.bXv)

uM.wN

%,I%S

 1-h}h

.PeF!

.qmez

C;.Ja0

B.cPCgg

a%uv4

oÑX

}.oL*H

A#.GM

.crp

.Azc*

.tXt[P

&c}D%f

/s.MP

J|Z.nQ

%VI%F

lSQ^%s

;u%2x

fUdP

@x.wL

^ON%x

k$_%f$

;.wcv

`.eWRB

.lg]\

i2%f@ J

,v6%F

g.Mkl

 .Ttb

%UQN9:

FRÀ

%UXgV

7.Mq

W0%7U

.Sh\}

.vKhKv

V!%sb

Gr.CeO4R&b

c.yD.p

.n .jl

h%i-yK}

okeY#

CRt8eF

.spUyDRU\

N.wMw

.iYv(

]}SD.wI

F8.Kd

?!> %S

>`^~\"><

i1U.yU

"S-X}[d

jX.oT

.Rc26

-RtI}/

P%D}Y

~.LJ1

#FQG%F

8ÑL

.Ij/C!mm

.ws1^

S&k.CU

=4.uW\

1J.AZ

%4sfkHy

-5.QMh

.Ueu<4

s.Ki]

f%Ux'

.KI7*

.lXY~

M.Stg

.yG"7B

 d-%F"

Jz.WA

L6%fU

.EA|_Y

S'%XE,

4%C sD

9k.^%u

.Tbv1Yn}

%Xkd#

zh%xS)

j%DI(

owq-

iv7.mqx1

]k.Zn

W.EYW

=%X83EQX

.Zc2T

p%d%3Xv?n

a a%Xj

!".YR

<.zfJ

Y.HCd*

x.VX0

RV%CU

`]%FG2$=

.sJgL

wY.Ku

98.pL

7R3%C

$%UvP

Q.jEl

bD.MA

.Dd_q

\9lFu%F

%C]-K

.bw'y)

Oi%Dw^

%3U];

Ok.Ha

5t.dz

ez>l.GN

|.Sf%

;b.ip

.rW(T{uj

e.rds

H.Oh@Sc

.feK3

]6Q%F

.wuxs

&o=%xCdT

#^[%S

b%FG$

va.Nu

s{.pe_

;.xg'

ov.DD

..zjl

JG.jO

}wm:.UI>:`\

y,.Rz

.ZJX\

tr%UE:

.eSAn

.BL9?

W]Wrlpz%C

.GS_i

ERkeY

p.OXq

.jL?8i4zZ

w-#0%sy

#M..Be

.mNL|M

mA|%S`f

:.fz)a^

-eXvG}

p.ykZ

m.Xk.f

%dkk*

'XO.FE

|.jFZh

|.nsIG

l%I%U

{Y9õ

&kK%F

.LUV 2

.Ua]1[

&.OX4[

.LR4dL

n de espacio en: %s.

Mensaje de sistema: %s.5No se puede encontrar uno de los recursos necesarios.#

n del sistema operativo./Error en la solicitud de asignaci

n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio primero y presione Reintentar, o presione Cancelar para salir del programa de instalaci

n.XLa carpeta no es v

rese de que la carpeta existe y se puede escribir en ella.DDebe especificar una carpeta con la ruta completa o elegir Cancelar.

n de carpeta.DNo se puede cargar las funciones requeridas por el di

logo Examinar.\No se pudo cargar el archivo Shell32.dll, requerido por el cuadro de di

n del proceso <%s>. Causa: %s5El tama

ster en este sistema no es soportado.3Uno de los recursos necesarios parece estar da

ado.[Es necesario Windows 95 o Windows NT 4.0 Beta 2 o posterior para realizar esta instalaci

Error al cargar %s]Error de GetProcAddress() en funci

n "%s". Causa posible: versi

n incorrecta de advpack.dll.@Es necesario Windows 95 o Windows NT para instalar este producto No se pudo crear la carpeta "%s"

Para instalar este programa, necesita %s KB disponibles en la unidad %s. Es recomendable que libere la cantidad necesaria de espacio en disco antes de continuar.

n de la carpeta de Windows

)Apagar NT: Error en token de OpenProcess.*Apagar NT: Error en AdjustTokenPrivileges."Apagar NT: Error en ExitWindowsEx.

n del archivo. Probablemente se deba a un problema de memoria baja (poco espacio en disco para el intercambio de archivos) o un archivo .CAB da

ado.wEl programa de instalaci

n del volumen para la unidad (%s) .

Mensaje del sistema: %s.

n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio e int

ntelo de nuevo.hEl programa de instalaci

[Otra copia del paquete "%s" ya est

Desea ejecutar otra copia?$No se pudo encontrar el archivo: %s.

 No existe la carpeta "%s".

Desea crearla?lOtra copia del paquete "%s" ya est

lo es posible ejecutar una copia a la vez.OEl paquete "%s" no es compatible con la versi

n de Windows que est

ejecutando.^El paquete "%s" no es compatible con la versi

n del archivo %s que se encuentra en su sistema.

6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)

WEXTRACT.EXE

Sistema operativo Microsoft

Windows

6.00.2900.2180

22.exe_1804_rwx_003C0000_0000D000:

.MXh3

CDT.exe_2840:

.text

`.rdata

@.data

.rsrc

SSh8BS

udPhPqY

SSh@ S

PSSSSSSh

PSSSSSSh!

vSSSh

FTPjK

FtPj;

C.PjRV

tGHt.Ht&

.EKSWU

FTPG

FTPj

FtPS

=KNILw.tT=RCNEw

_0 _8 _4;_,

SHA1 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

SHA256 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

DlSHA512 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

Montgomery Multiplication for x86, CRYPTOGAMS by <appro@openssl.org>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <appro@openssl.org>

Camellia for x86 by <appro@openssl.org>

RC4 for x86, CRYPTOGAMS by <appro@openssl.org>

v9.uj#

FRegDeleteKeyExW

gmail.com

MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}</STYLE></HEAD><META http-equiv=Content-Type content="text/html; charset=utf-8"><BODY>

mail@domain.com

Date: %d %s %d %d:%d:%d

EHLO %s

,qop=%s

,response=%s

,digest-uri="%s"

,cnonce="%s"

,nc=%s

,nonce="%s"

,realm="%s"

charset=utf-8,username="%s"

smtp/

AUTH PLAIN %s

^%s^%s

AUTH LOGIN

LOGIN

--%s--

RCPT TO:<%s>

MAIL FROM:<%s>

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

portuguese-brazilian

ADVAPI32.DLL

kernel32.dll

UxTheme.dll

OLEACC.dll

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.0d 8 Feb 2011

Stack part of OpenSSL 1.0.0d 8 Feb 2011

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

Big Number part of OpenSSL 1.0.0d 8 Feb 2011

ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

keylength

keyfunc

EVP part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\pkcs12\p12_key.c

SHA1 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011

RSA part of OpenSSL 1.0.0d 8 Feb 2011

RAND part of OpenSSL 1.0.0d 8 Feb 2011

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

cert_info

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

NETAPI32.DLL

KERNEL32.DLL

value.single

value.set

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

%d.%d.%d.%d

EC part of OpenSSL 1.0.0d 8 Feb 2011

ECDSA part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0d 8 Feb 2011

Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\dh\dh_key.c

\X

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

ddddddZ

ddddddZ

pubkey

priv_key

pub_key

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

.\crypto\evp\evp_pkey.c

ECDH part of OpenSSL 1.0.0d 8 Feb 2011

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

X.509 part of OpenSSL 1.0.0d 8 Feb 2011

OPENSSL_ALLOW_PROXY_CERTS

x%s

%s - d:d:d%.*s %d%s

'() ,-./:=?

CONF part of OpenSSL 1.0.0d 8 Feb 2011

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

MD5 part of OpenSSL 1.0.0d 8 Feb 2011

PROXY_CERT_INFO_EXTENSION

D:/Projects/openssl-10.0d/ssl/certs

D:/Projects/openssl-10.0d/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

CONF_def part of OpenSSL 1.0.0d 8 Feb 2011

[[%s]]

[%s] %s=%s

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

%s.dll

PEM part of OpenSSL 1.0.0d 8 Feb 2011

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

?456789:;<=

!"#$%&'()* ,-./0123

Verifying - %s

OpenSSL 1.0.0d 8 Feb 2011

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

.\ssl\ssl_cert.c

SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011

TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

key expansion

client write key

server write key

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

RST%d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

Obtained EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC index %d

Unsupported color conversion request

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

Invalid component ID %d in SOS

Bogus message code %d

;Warning: highpass filter disabled. highpass frequency too small

hXXp://lame.sf.net

3.99.5

Opera

?INTERNAL ERROR IN VBR NEW CODE, please send bug report

@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report

INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report

maxbits=%d usedbits=%d

hip: invalid layer %d

hip: error audio data exceeds framesize by %d bytes

hip: bitstream problem, resyncing skipping %d bytes...

Sorry, layer %d not supported

hip: Can't rewind stream by %d bits!

hip: Bogus region length (%d)

ADVAPI32.dll

F%D,3

QVisual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

%S#[k

?#%X.y

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported version

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unknown operation

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

broken pipe

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

.pp@0

aEÐ

 (#EÚ

ÚE<<0

RC2 part of OpenSSL 1.0.0d 8 Feb 2011

IDEA part of OpenSSL 1.0.0d 8 Feb 2011

libdes part of OpenSSL 1.0.0d 8 Feb 2011

DES part of OpenSSL 1.0.0d 8 Feb 2011

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

RegDeleteKeyW

RegCloseKey

RegCreateKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

RegEnumKeyExW

ReportEventA

UrlIsW

SHLWAPI.dll

PSAPI.DLL

WS2_32.dll

COMCTL32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

FtpPutFileW

FtpCreateDirectoryW

FtpRemoveDirectoryW

FtpDeleteFileW

FtpSetCurrentDirectoryW

WININET.dll

MPR.dll

WINMM.dll

VERSION.dll

GetWindowsDirectoryW

GetCPInfo

GetConsoleOutputCP

GetProcessHeap

KERNEL32.dll

UnregisterHotKey

RegisterHotKey

GetKeyNameTextW

MapVirtualKeyW

EnumWindows

EnumChildWindows

UnhookWindowsHookEx

SetWindowsHookExW

GetKeyState

USER32.dll

GDI32.dll

COMDLG32.dll

ole32.dll

OLEAUT32.dll

1<2<?<><{<:<,<4<=<4<7<:<1<2<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<:<)<0<{<

<)<><2<1<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

/<4<6<{</<:<"<7<4<)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<><6<><(<2<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<5<0<2</<{<

<:<?<2<"<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<:</<3<7<><><5<{<

<)<4<,<5<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<)<<<><{<

<)<8<.<7<7<4<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<(</<)<2<9<.</<2<4<5<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<)</<><6<{<

<2<(</<)<4<-<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

?<:<?<:<{<(<:<(<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

?<:<{<(<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<5<8<><{<

<4<><7<7<5<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

1<2<?<><{<:<,<4<=<4<7<:<1<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<?<"<{<

<2<7<7<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<7<=<,<2<5<<<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

:<)<4<5<{<(<8<3<:<)<=<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4< <><(<8<.<{<

<:<)<2<:<5<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<9<><)</<{<

<2<7<7<><5<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<(<:<{<

<><2<9<><7<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<"<8<><{<

<.</<3<><)<=<4<)<?<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

(<3<><><5<:<{<(<:<5<?<><)<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<.<2<!<{<

<2<8<:<)<?<4<{<

<7<2<-<><2<)<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<:<(<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<5</<:<2<5<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<5</<><)<5<></<{<

<#< <7<4<)<><)<

<><)<-<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<5<-<><)<(<:</<2<4<5<

<4<5</<><5</<

<4<5</<)<4<7<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<:<9<9<><?<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4</<2<=<"<

<2<5<0<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<(</<{<

<2<><,<{<

<4<(</<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<5<?<4<,<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<5<?<4<,<{<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<5<2<8<4<?<><

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<7<:<(<(<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<><,<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<3<:</<{<

<:<3<4<4<{<

<><(<(<><5<<<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<><=<:<.<7</<{<

<4<6< <:<8</<{<

<2<5<?<4<,<(<{<

<2<-<><{<

<2<)<:<5<?<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<4<<<7<><{<

<:<7<0<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<=</<,<:<)<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

/<><8<3<(<.< < <

<)<:<6<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<#< <7<4<)<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<#< <7<4<)<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<!<2<7<7<:<

<2<)<><=<4<#<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<!<2<7<7<:<{<

<2<)<><=<4<#<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<3<)<4<6<><

<2<?<<<></<

< <><)<:<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<3<)<4<6<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

< < <7<2<8<:</<2<4<5<

<)<:<6<><

<2<5<?<4<,<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<2<8<)<4<(<4<=</<{<

<?<<<><[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

<4<8<:<7<

.?AVECSmtp@@

<2<><,<><)<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<[<

zcÁ

Jv.AKv

,i%f

\cmd'

.GL#!

*%S_A

nÂzj

<j%F,w

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity version="1.0.0.0" processorArchitecture="x86" name="Test" type="win32"></assemblyIdentity><description>

</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application>

<asmv3:windowsSettings xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">

</asmv3:windowsSettings>

\StringFileInfo\lx\%s

%Y-%m-%d_%H-%M-%S.mp3

smtps.uol.com.br

*@uol.com.br

smtp.comcast.net

*@comcast.net

smtp.aol.com

*@aol.com

smtp.gawab.com

*@gawab.com

mail.messagingengine.com

*@fastmail.fm

smtp.live.com

*@hotmail.com

smtp.hotpop.com

*@hotpop.com

smtp.ig.com.br

*@ig.com.br

smtp.gmx.com

*@gmx.com;*@gmx.us

smtps.bol.com.br

*@bol.com.br

smtp.mail.yahoo.com

*@yahoo.com

smtp.aim.com

*@aim.com

smtp.googlemail.com

*@gmail.com;*@googlemail.com

smtp.mail.yahoo.com.br

*@yahoo.com.br

Shell32.dll

RICHED20.DLL

WAdvapi32.dll

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

@uxtheme.dll

@()<>,;:\"[]

ASoftware\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion

test234.txt

TEST816.txt

TEST816.txt/test234.txt

All Files (*.*)

*.exe

Viewer.exe

\TEST996.txt

@USER32.DLL

4.5.1

®key=

4.5.1

\Install.exe

(*.exe)

S.ICO

\WinInit.Ini

wininet.dll

netmsg.dll

%Y-%m-%d_%H-%M-%S.jpg

@hXXp://

S%Y-%m-%d_%H-%M-%S

CWebcam_

Keys_

.html

comctl32.dll

DNSAPI.DLL

WTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalGetBarMsg

mscoree.dll

V*(%F@4 F7*

72.JA1'

[,'&"?4-

C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe

22.exe_1804_rwx_01690000_00007000:

.MXh3

svchost.exe_816_rwx_66382000_00002000:

KfVJKf.JKf>

Bf*9`f*.Df

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

Gerenciador de Janelas do Windows.exe:2300
%original file name%.exe:2472
Server.exe:1912
netsh.exe:3984
CSRKPR~1.EXE:1968
Delete the original Worm file.
Delete or disinfect the following files created/modified by the Worm:

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe (6813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE (38124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[1].js (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\scripts[1].js (4614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\errorPageStrings[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\iconx2-000000[1].png (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-ui.min[1].css (1070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.nicescroll.min[1].js (38922 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\navcancl[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.themepunch.tools.min[1].js (62820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245[1].jpg (1468 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\comment-reply.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[1].swf (125294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\b0d3c416d0b77963f7715cf086a6160a[1].png (4512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax-loader[1].gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.inview.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\hS2LLdHn7TpvEb4tLPbgig[1].eot (3844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[2].txt (34591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\5f47a8220dd01fa7ff45bdb7a1caedd5[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\mouse.min[1].js (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[2].js (3726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\11750400935445842881[1].gif (20620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\css[1].css (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\theia-sticky-sidebar.min[1].js (2488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\draggable.min[1].js (9202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\nm_mc_style[1].css (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PA3S2ON2.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\font-awesome-extended.min[1].css (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\register.min[1].css (875 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-hayvancilik[1].htm (10755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.themepunch.revolution.min[1].js (34044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\scripts.min[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\all.min[1].js (92305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\CDMJDZXU.txt (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\platform[1].js (23491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (151201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\settings[1].css (10846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\wp-1469792536870-273x182[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\wp-1469155132742-165x110[1].jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\waypoints.min[1].js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (642664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Tren-RaylarÄ±nda-Telefon-Åžarj-367x245[1].jpg (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Farming-Simulator-17-HayvancÄ±lÄ±k-Rehberi-273x182[1].jpg (1084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zrt_lookup[1].htm (4679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-Domuzlar[1].jpg (10520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\b0d3c416d0b77963f7715cf086a6160a[1].png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QUBHI6GC.txt (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\googlelogo_dark_color_84x28dp[1].png (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery[1].js (64921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-[1].jpg (5840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245[1].jpg (2089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Avatar-2-165x110[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[1].txt (42375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1470457551614-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Bedava-Ä°nternet-Paketleri-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zMZWJ0mPeKR6nQmYkwSS0vh35EUeMMG430EhqEnDKeI[1].js (11309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ErrorPageTemplate[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\styles.min[1].css (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-migrate.min[1].js (6611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\conditional[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.autotype.min[1].js (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[1].txt (106958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\wp-embed.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\vc_lte_ie9.min[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\styles[1].css (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\f[1].txt (27540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\11a138d4cd2c71069b982a474c6c2f1d[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\teknogezgini-logo[1].png (2783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\bullet[1] (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1469511914476-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Po-xXyh4cpm8TTuJGV1cyy5S0CjDLt-FLNVratqIZds[1].js (12672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-emoji-release.min[1].js (7075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\httpErrorPagesScripts[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\lq8Mim-yTjM[1].htm (5174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\foundation-icons[1].css (5376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\12303209505774623573[1].png (14873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-1[1].css (76657 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\s[1].htm (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\3KAd02OzFSDbt78HTOt2og[1].eot (12244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\dialog.min[1].js (3829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\5dff6dff908a697dfcc3c0331bc44ee8[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\fontawesome-webfont[1].eot (29081 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\ca-pub-9074486242767801[1].js (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt_likes[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\register.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ad_status[1].js (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\admin-ajax[1].htm (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\font-awesome.min[1].css (15152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (79837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\tablet-sifre-kÄ±rma-reset-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.form.min[1].js (11565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.tweet.min[1].js (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\login.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\hqdefault[1].jpg (19717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\x_button_blue2[1].png (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\HObEGlw4O0E[1].htm (5222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BS3FDFYX.txt (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\background_gradient[1] (453 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[1].htm (13799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\WMZUWJRG\teknogezgini[1].xml (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\xt_likes[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-3[1].css (51704 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[2].htm (15685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\position.min[1].js (1639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\hqdefault[1].jpg (4690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (121437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min[1].css (235985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt-socialshare.min[1].js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\login.min[1].css (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-Ä°nekler[1].png (37820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\jquery.visible.min[1].js (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\button.min[1].js (2733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-2[1].css (97587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\default[1].css (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\modernizr.min[1].js (14715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\widget.min[1].js (2251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\info_48[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\OZDIKCNB\www.youtube[1].xml (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\core.min[1].js (2359 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\galleria-1.4.2.min[1].js (41963 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\resizable.min[1].js (8261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[2].txt (46288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\7e5cc5fb8d2fd78d5ec9412ea4ffc50f[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)
C:\ProgramData\XKQ\CDT.004 (4972 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Gen.Variant.MSILPerseus.58052_3b5191070b

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Gen.Variant.MSILPerseus.58052_3b5191070b

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet