Gen.Variant.Barys.2015_36890a0059

by malwarelabrobot on April 18th, 2015 in Malware Descriptions.

Gen:Variant.Barys.2015 (B) (Emsisoft), Gen:Variant.Barys.2015 (AdAware), GenericInjector.YR (Lavasoft MAS)
Behaviour: Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 36890a0059a678ff1ee89e5e1af84867
SHA1: 0aa2ad931a42b04e40956e2bcf2f7a5c0ffa52ee
SHA256: ba9a0ab2ef56ad21fa51b25e62ff1d9c50f7653e9e2ee23111d75bc67ea73f95
SSDeep: 49152:sD2k5i3Ck2UBv3chF7GrMy4S0vwzo60 L7/RWGmf2cKRjgYbc1c8L6hNc5XS1:Qh5i2UBECjdE60 UGmfL8kW85W
Size: 2646528 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: no certificate found
Created at: 2014-11-29 22:30:04
Analyzed on: WindowsXP SP3 32-bit

Summary:

Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Payload

No specific payload has been found.

Process activity

The Malware creates the following process(es):

2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe:424
Ã¥Ë†Â°Ã¦Å¾ÂÃ¦â€¹â€°CÃ¦Å¾ÂE9AÃ¥Â¼â€”Ã¥Â¼â€”HÃ§Å“â€¹Ã¥Â¾â€žÃ¨Âµâ€ºKUÃ¦Â¸Â B2HCÃ¥Â¾â€žKOD9Ã¨Âµâ€ºÃ¥Â¼â€”Ã¥Â¼â€”Ã¨Âµâ€ºWÃ§Å“â€¹Ã¥Â°Â±Ã¨Âµâ€ºÃ§Å“â€¹.exe:372
%original file name%.exe:1508
netsh.exe:128

The Malware injects its code into the following process(es):

3MtVNt2RL9.exe:1212
Firewall.exe:1648

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process 3MtVNt2RL9.exe:1212 makes changes in the file system.
The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\www-embed-player-vflVo6OU8[2].css (11291 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Button[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\suarez-neymar-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fb[1].htm (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\_uninsep.bat (136 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\SwanseaCity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\www-embed-player-vflVo6OU8[1].css (9067 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\arsenal-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\arsenal-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\manchester_city-50x50[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[2].txt (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Block-v[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CAJH5YPG.htm (907 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\5YB-ifwqHP20Yn46l_BDhA[1].eot (7414 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Stokecity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CA6B47BW (277 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[1].txt (4092 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\rooney-640x360[1].jpg (6390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PES-2014[1].jpg (20596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\google-logo[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\jquery.fancybox-1.3.4.pack[1].js (3716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery-migrate.min[1].js (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\brasilfc[1].png (4456 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_nav_right[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\BlockHeader[1].png (1068 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sddefault[1].jpg (12707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancybox[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fancy_nav_right[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Sheet-c[1].png (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\jquery.evenHeights.1.0.0-min[1].js (932 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\www-embed-player[1].js (26031 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fancy_close[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[2].js (3543 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\QueensParkRanges-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (22264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\OLffGBTaF0XFOW1gnuHF0WfQcKutQXcIrRfyR5jdjY8[1].eot (6354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\OLffGBTaF0XFOW1gnuHF0WfQcKutQXcIrRfyR5jdjY8[1].eot (8835 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\manchester_city-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\cristianoronaldo-realmadrid-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\rooney-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CAD007LX.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\s[1] (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CA6BO96B.htm (982 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\icon[1].png (344 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\www-embed-player[2].js (27969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\liverpool_fc-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery.fancybox-1.3.4[1].css (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\HullCity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\SwanseaCity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancy_nav_left[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Sheet-s[1].png (641 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\pt-br[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\huntelaar-schalke-ap-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery[1].js (46059 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (342 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\chelsea-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\nav[1].png (1149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_loading[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style[1].css (38 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (864 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\huntelaar-schalke-ap-640x360[1].jpg (6039 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\RxZJdnzeo3R5zSexge8UUfY6323mHUZFJMgTvxaG2iE[1].eot (7426 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\soundData.sxx (186 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[1].txt (1221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\all[1].js (5128 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_close[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\OiNnAEwKzzJkQCr4qZmeq_esZW2xOQ-xsNqO47m55DA[2].eot (7061 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Stokecity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\item-center[1].png (297 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\burnleyfc-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\responsive[1].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\fancy_nav_left[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Everton-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[3].txt (2120 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\subitem-bg[1].png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\script[1].js (1413 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Header[1].jpg (5176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\RxZJdnzeo3R5zSexge8UUfY6323mHUZFJMgTvxaG2iE[1].eot (5768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\crossdomain[1].xml (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\adminbar[1].css (195 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Champions-League-Stadium-Hd-Desktop-Wallpaper[1].jpg (38387 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\pt[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\west_bromwich-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\item-right[1].png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Southampton-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[3].txt (861 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PostAuthorIcon[1].png (341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\uolsigainit.min[2].js (346 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\s[1].htm (143 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Footer[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Astonvilla-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\leicester-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancy_loading[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\html5[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\gen[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\item-left[1].png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\manchester_united-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\BlockHeaderIcon[1].png (635 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\uolsigainit.min[1].js (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\f[1].txt (784 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\videostats.sxx (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fontello[1].eot (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\html5shiv[1].js (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Newcastle-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[2].txt (1348 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Astonvilla-50x50[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\suarez-neymar-640x360[1].jpg (7198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\5YB-ifwqHP20Yn46l_BDhA[1].eot (6508 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAUZCHQJ.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\fontello[1].eot (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Southampton-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolsigaretarget.min[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jquery.mousewheel-3.0.4.pack[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\CAEVM9AP.htm (1022 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\suarez-barcelona-640x360[1].jpg (4152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jquery.themeboy-rotator[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\f[2].txt (436 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Block-s[1].png (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CACHAV8T.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Sunderland-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\HullCity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\blp[1].css (794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Sheet-v[1].png (814 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\crossdomain[1].xml (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fb[1].js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Page-BgGlare[1].png (5513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Sheet-h[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Crystal_Palace-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\cristianoronaldo-realmadrid-640x360[1].jpg (5734 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CA81EF4H.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\burnleyfc-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Everton-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Page-BgGradient[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\blp[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\17981107690478385190[1].gif (11872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zrt_lookup[1].html (491 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\spacer[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Westham-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\OiNnAEwKzzJkQCr4qZmeq_esZW2xOQ-xsNqO47m55DA[1].eot (8835 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\liverpool_fc-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\footer-bg[1].png (955 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAMELXQZ.htm (1820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAA3WXAF.htm (2728 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[1].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\all[1].js (5163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\brasilfc_pb[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fb[2].js (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\style[1].css (30 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\brasilfc[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\west_bromwich-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\zrt_lookup[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[2].txt (6096 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Block-c[1].png (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Newcastle-50x50[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\rssIcon[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CAT3DOAK.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[1].js (3211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\BlockContentBullets[1].png (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\sddefault[1].jpg (15711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Page-BgTexture[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (342 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\gen[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tottenham-25x25[1].png (982 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\x_button_blue2[1].png (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style.ie6[1].css (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\header[1].jpg (2055 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\3841_211[1].gif (9510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\watch_as3[1].swf (125565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAT9NN28 (7644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery.easing-1.3.pack[1].js (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Block-h[1].png (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\suarez-barcelona-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\blank[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CA2BOH2V.htm (1000 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolaf[1].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CAW5ERSZ (752 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\restore.sxx (87 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolsigaretarget.min[2].js (10 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\s[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\www-embed-player-vflVo6OU8[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancy_nav_left[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\uolsigainit.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\f[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[1].txt (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\videostats.sxx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_nav_right[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_loading[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[1].js (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\soundData.sxx (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolsigaretarget.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\gen[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_close[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\www-embed-player[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\blp[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fb[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CAW5ERSZ (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\restore.sxx (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)

The process 2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe:424 makes changes in the file system.
The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\Firewall.exe (29 bytes)

The process Ã¥Ë†Â°Ã¦Å¾ÂÃ¦â€¹â€°CÃ¦Å¾ÂE9AÃ¥Â¼â€”Ã¥Â¼â€”HÃ§Å“â€¹Ã¥Â¾â€žÃ¨Âµâ€ºKUÃ¦Â¸Â B2HCÃ¥Â¾â€žKOD9Ã¨Âµâ€ºÃ¥Â¼â€”Ã¥Â¼â€”Ã¨Âµâ€ºWÃ§Å“â€¹Ã¥Â°Â±Ã¨Âµâ€ºÃ§Å“â€¹.exe:372 makes changes in the file system.
The Malware creates and/or writes to the following file(s):

The process %original file name%.exe:1508 makes changes in the file system.
The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\Ã¥Ë†Â°Ã¦Å¾ÂÃ¦â€¹â€°CÃ¦Å¾ÂE9AÃ¥Â¼â€”Ã¥Â¼â€”HÃ§Å“â€¹Ã¥Â¾â€žÃ¨Âµâ€ºKUÃ¦Â¸Â B2HCÃ¥Â¾â€žKOD9Ã¨Âµâ€ºÃ¥Â¼â€”Ã¥Â¼â€”Ã¨Âµâ€ºWÃ§Å“â€¹Ã¥Â°Â±Ã¨Âµâ€ºÃ§Å“â€¹.exe (39950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe (29 bytes)

The process Firewall.exe:1648 makes changes in the file system.
The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Start Menu\Programs\Startup\a910f565008f3da5ebe024c8ddd769d7.exe (29 bytes)

Registry activity

The process 3MtVNt2RL9.exe:1212 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 28 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "3MtVNt2RL9.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1424804519"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BC 69 4A C8 7E 60 C8 4F 82 11 0E B0 F9 B7 C5 36"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"_uninsep.bat" = "_uninsep"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process 2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe:424 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BE 94 88 80 7B F2 B0 95 62 EB FE 08 5E 0D 63 AA"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"Firewall.exe" = "Firewall"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process %original file name%.exe:1508 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A1 06 B7 D5 10 46 56 41 C2 A1 9B 61 5D 31 52 A6"

The process Firewall.exe:1648 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C8 73 9E 28 C0 AA 45 D8 25 22 D2 52 59 4E DF 9F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"

"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Environment]
"SEE_MASK_NOZONECHECKS" = "1"

To automatically run itself each time Windows is booted, the Malware adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"a910f565008f3da5ebe024c8ddd769d7" = "%Documents and Settings%\%current user%\Application Data\Firewall.exe .."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"a910f565008f3da5ebe024c8ddd769d7" = "%Documents and Settings%\%current user%\Application Data\Firewall.exe .."

The process netsh.exe:128 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr]
"BitNames" = " NAP_TRACE_BASE NAP_TRACE_NETSH"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr]
"Guid" = "710adbf0-ce88-40b4-a50d-231ada6593f0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\traceIdentifier]
"Guid" = "b0278a28-76f1-4e15-b1df-14b209a12613"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7E 17 F3 98 31 AD EE 78 F1 92 A8 37 C9 B0 11 1A"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Tracing\FWCFG]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Documents and Settings%\%current user%\Application Data]
"Firewall.exe" = "%Documents and Settings%\%current user%\Application Data\Firewall.exe:*:Enabled:Firewall.exe"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ^9;-*7.,,-`*-^,^`^5;.*;`4-^*`9`,1.*,.,;^.,7*,;^8141,
Product Name: ,^,*.*.*^`^,4*^1,;^**;,.*36**``,^3*.;*`^*8`*^;^05^5.
Product Version: 2.0.8.2
Legal Copyright: ^*`**,;^;;^.8;..^7_^**`-..;^;378;-.0,:`1`-8`-;,`^51,
Legal Trademarks: 4^4_5--^9..78*97.;5^1;`.`,`;`-;*.-^^;17;`**.*.`06.;^
Original Filename:
Internal Name:
File Version: 2.0.8.2
File Description: ^***3*``^^;-^-021^*.;1,`_*^^.;;*^.9;*;;4_*`*;^0*;^^^
Comments: Modified by an unpaid evaluation copy of Resource Tuner 2 (www.heaventools.com)
Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	8192	175177	175616	5.31426	bc6b22bdb4355add33618dc1148abb29
.rsrc	188416	2469736	2469888	5.54396	559933f9922a872fec747bce3f351032
.reloc	2662400	12	512	0.070639	93eef65d42995dffaa24ef9754324b27

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://gamesbr.me/ads/forceadaf.txt
hxxp://gamesbr.me/ads/forcead2.txt
hxxp://gamesbr.me/ads/porc.txt
hxxp://gamesbr.me/ads/ads2.txt
hxxp://gamesbr.me/ads/ads3.txt
hxxp://path.pointblankonline.com.br/HSUpdate/HStest/x86/ahn.ui	201.77.235.23
hxxp://gamesbr.me/chkhs.txt
hxxp://expertgh.com/counter/online3.php
hxxp://expertgh.com/fb.html
hxxp://brasilfc.com/
hxxp://expertgh.com/pt-br/
hxxp://star.c10r.facebook.com/plugins/like.php?locale=pt_BR&href=https://www.facebook.com/pages/Expert-GH/565095496889408&width&colorscheme=dark&layout=box_count&action=like&show_faces=false&share=false&height=65
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/script.js
hxxp://googlecode.l.googleusercontent.com/svn/trunk/html5.js
hxxp://brasilfc.com/wp-content/themes/brasilfc/style.css?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/responsive.css?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.css?ver=4.1.1
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/style.css
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/style.ie6.css
hxxp://brasilfc.com/wp-includes/js/jquery/jquery.js?ver=1.11.1
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgTexture.jpg
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGradient.jpg
hxxp://adrequisitor-af.lp.uol.com.br/uolaf.js	200.147.67.184
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGlare.png
hxxp://brasilfc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/spacer.gif
hxxp://expertgh.com/pt-br/wp-content/uploads/2013/07/PES-2014.jpg
hxxp://youtube-ui.l.google.com/embed/YemiMC0twSQ
hxxp://youtube-ui.l.google.com/embed/vqPM2vpPwTM
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/PostAuthorIcon.png
hxxp://e3821.dspe1.akamaiedge.net/en_US/all.js
hxxp://youtube-ui.l.google.com/embed/I2SCNf-45LQ
hxxp://adclient.siga.uol.com.br/format2.html?adBlockCount=0&page=0&urlReferer=http://www.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&	200.147.41.203
hxxp://adclient.siga.uol.com.br/format2.html?adBlockCount=1&page=1&urlReferer=http://www.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&	200.147.41.203
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockContentBullets.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-left.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-right.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-center.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Header.jpg
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-c.png
hxxp://adclient.siga.uol.com.br/stc/font/fontello.eot?	200.147.41.203
hxxp://adclient.siga.uol.com.br/stc/blp.css	200.147.41.203
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-s.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-c.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-h.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-v.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/nav.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-s.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-h.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-v.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Button.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeaderIcon.png
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeader.png
hxxp://expertgh.com/pt-br/none
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/html5shiv.js?ver=4.1.1
hxxp://adclient.siga.uol.com.br/format6_d.html?adBlockCount=2&page=2&urlReferer=http://www.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=6_d&numads=2&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&	200.147.41.203
hxxp://adclient.siga.uol.com.br/format2.html?adBlockCount=3&page=3&urlReferer=http://www.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&	200.147.41.203
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/rssIcon.png
hxxp://adclient.siga.uol.com.br/stc/gen.js	200.147.41.203
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Footer.png
hxxp://star.c10r.facebook.com/plugins/like_box.php?app_id=&channel=http://static.ak.facebook.com/connect/xd_arbiter/KvoNGODIqPG.js?version=41#cb=f3f57aed19c7214&domain=www.expertgh.com&origin=http%3A%2F%2Fwww.expertgh.com%2Ff3762ccc680f19e&relation=parent.parent&container_width=164&header=true&href=http://www.facebook.com/pages/ExpertGH/317402498295251&locale=en_US&sdk=joey&show_faces=true&stream=false&width=184
hxxp://expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/subitem-bg.png
hxxp://platform-eb.twitter.com/widgets.js?ver=4.1.1
hxxp://adclient.siga.uol.com.br/stc/fb.js	200.147.41.203
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/jquery.themeboy-rotator.js?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/jquery.evenHeights.1.0.0-min.js?ver=4.1.1
hxxp://adclient.siga.uol.com.br/stc/uolsigainit.min.js	200.147.41.203
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.easing-1.3.pack.js?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=4.1.1
hxxp://adclient.siga.uol.com.br/stc/uolsigaretarget.min.js	200.147.41.203
hxxp://brasilfc.com/wp-content/uploads/2014/05/brasilfc.png
hxxp://pagead46.l.doubleclick.net/pagead/show_ads.js
hxxp://brasilfc.com/wp-content/uploads/2014/07/Champions-League-Stadium-Hd-Desktop-Wallpaper.jpg
hxxp://brasilfc.com/wp-content/themes/brasilfc/images/header.jpg
hxxp://pagead46.l.doubleclick.net/pagead/js/r20150414/r20150409/show_ads_impl.js
hxxp://pagead46.l.doubleclick.net/pagead/html/r20150414/r20150409/zrt_lookup.html
hxxp://pagead46.l.doubleclick.net/pagead/osd.js
hxxp://pagead46.l.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://www.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=\|\|\|&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390
hxxp://brasilfc.com/wp-content/uploads/2015/04/suarez-neymar-640x360.jpg
hxxp://pagead46.l.doubleclick.net/pagead/js/adsbygoogle.js
hxxp://pagead46.l.doubleclick.net/simgad/17981107690478385190
hxxp://pagead46.l.doubleclick.net/pagead/js/r20150414/r20110914/abg.js
hxxp://brasilfc.com/wp-content/uploads/2015/03/rooney-640x360.jpg
hxxp://pagead46.l.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://www.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d\|\|\|n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360
hxxp://brasilfc.com/wp-content/uploads/2015/03/huntelaar-schalke-ap-640x360.jpg
hxxp://brasilfc.com/wp-content/uploads/2015/02/suarez-barcelona-640x360.jpg
hxxp://pagead46.l.doubleclick.net/pagead/images/abg/pt.png
hxxp://pagead46.l.doubleclick.net/pagead/images/abg/icon.png
hxxp://pagead46.l.doubleclick.net/pagead/drt/s?v=r20120211
hxxp://brasilfc.com/wp-content/uploads/2015/02/cristianoronaldo-realmadrid-640x360.jpg
hxxp://brasilfc.com/wp-content/uploads/2015/04/suarez-neymar-50x50.jpg
hxxp://pagead46.l.doubleclick.net/pagead/images/x_button_blue2.png
hxxp://pagead46.l.doubleclick.net/pagead/images/google-logo.png
hxxp://pagead46.l.doubleclick.net/pagead/adview?ai=C_OojQ1IwVaSgDYrAyAPXxYDYDZTpp7MHlKW26OsBwI23ARABIABgpZ6khpgjggEXY2EtcHViLTYzOTI0OTIzMTMxOTM5OTbIAQmpAqNurT3Bn1U-qAMBmAQAqgR4T9CJiH2QjxBAgmAbZtOyZ0TnI1fjEid2alEB3I4xQhk7Y_NxXR3jQ395UoDNdjgQA5uIloLBImsev0e8Rm8kBrFSe_avmJsIy8n5EIpsHqQlQvo3fbUE0uL8VciK_ykozZFUKB7epzdMgd7CAeb25_e_DaR2zc9vgAaU5cPylO63yZEBoAYh2AcA&sigh=JzQGVuFpaRA&vis=0
hxxp://ssl.luxcdn.com/rtb_bn_show/?banner_id=7710&system_id=1&site_id=46024011&slot_id=1&group_id=100&width=300&height=250&no_tagging=1&slot_visibility=2&psid=0&real_cov=1&geostr=157,0&cmf_system_id=1&url=hxxp://adclick.g.doubleclick.net/aclk?sa=L&ai=C_OojQ1IwVaSgDYrAyAPXxYDYDZTpp7MHlKW26OsBwI23ARABIABgpZ6khpgjggEXY2EtcHViLTYzOTI0OTIzMTMxOTM5OTbIAQmpAqNurT3Bn1U-qAMBmAQAqgR4T9CJiH2QjxBAgmAbZtOyZ0TnI1fjEid2alEB3I4xQhk7Y_NxXR3jQ395UoDNdjgQA5uIloLBImsev0e8Rm8kBrFSe_avmJsIy8n5EIpsHqQlQvo3fbUE0uL8VciK_ykozZFUKB7epzdMgd7CAeb25_e_DaR2zc9vgAaU5cPylO63yZEBoAYh2AcA&num=1&sig=AOD64_317Ohv0Lze0ueuORXndSXiW0MzZg&client=ca-pub-6392492313193996&adurl=&rtb_cost=VTBSQwADUCQKciAKAAAi11S5MiBBThn-HjVejQ&scheme=http:	62.152.53.218
hxxp://brasilfc.com/wp-content/uploads/2015/03/huntelaar-schalke-ap-50x50.jpg
hxxp://brasilfc.com/wp-content/uploads/2015/03/rooney-50x50.jpg
hxxp://brasilfc.com/wp-content/uploads/2015/02/suarez-barcelona-50x50.jpg
hxxp://is.luxup.ru/images/i/b19/3841_211.gif	109.248.237.34
hxxp://brasilfc.com/wp-content/uploads/2015/02/cristianoronaldo-realmadrid-50x50.jpg
hxxp://brasilfc.com/wp-content/uploads/2014/12/arsenal-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/manchester_city-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/chelsea-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/liverpool_fc-25x25.png
hxxp://pagead46.l.doubleclick.net/bg/PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg.js
hxxp://brasilfc.com/wp-content/uploads/2014/12/manchester_united-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/tottenham-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/SwanseaCity-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Southampton-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Westham-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Stokecity-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Newcastle-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Everton-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Crystal_Palace-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Sunderland-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/HullCity-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/west_bromwich-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/QueensParkRanges-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Astonvilla-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/burnleyfc-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/leicester-25x25.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Newcastle-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Astonvilla-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/west_bromwich-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Southampton-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Stokecity-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/SwanseaCity-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/burnleyfc-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/HullCity-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/arsenal-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/Everton-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/liverpool_fc-50x50.png
hxxp://brasilfc.com/wp-content/uploads/2014/12/manchester_city-50x50.png
hxxp://brasilfc.com/wp-content/themes/brasilfc/css/adminbar.css?ver=4.1.1
hxxp://brasilfc.com/wp-content/themes/brasilfc/images/footer-bg.png
hxxp://brasilfc.com/wp-content/uploads/2014/05/brasilfc_pb.png
hxxp://e3821.dspe1.akamaiedge.net/pt_BR/all.js
hxxp://platform-eb.twitter.com/widgets.js
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/fancybox.png
hxxp://brasilfc.com/wp-content/themes/brasilfc/js/fancybox/blank.gif
hxxp://brasilfc.com/fancybox/fancy_loading.png
hxxp://brasilfc.com/fancybox/fancy_loading.png/
hxxp://brasilfc.com/fancybox/fancy_close.png
hxxp://brasilfc.com/fancybox/fancy_close.png/
hxxp://brasilfc.com/fancybox/fancy_nav_left.png
hxxp://brasilfc.com/fancybox/fancy_nav_left.png/
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Astonvilla-25x25.png
hxxp://www.expertgh.com/pt-br/	192.169.80.222
hxxp://googleads.g.doubleclick.net/pagead/adview?ai=C_OojQ1IwVaSgDYrAyAPXxYDYDZTpp7MHlKW26OsBwI23ARABIABgpZ6khpgjggEXY2EtcHViLTYzOTI0OTIzMTMxOTM5OTbIAQmpAqNurT3Bn1U-qAMBmAQAqgR4T9CJiH2QjxBAgmAbZtOyZ0TnI1fjEid2alEB3I4xQhk7Y_NxXR3jQ395UoDNdjgQA5uIloLBImsev0e8Rm8kBrFSe_avmJsIy8n5EIpsHqQlQvo3fbUE0uL8VciK_ykozZFUKB7epzdMgd7CAeb25_e_DaR2zc9vgAaU5cPylO63yZEBoAYh2AcA&sigh=JzQGVuFpaRA&vis=0
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-c.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Everton-25x25.png
hxxp://www.gamesbr.me/ads/forcead2.txt	64.31.20.51
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockContentBullets.png	192.169.80.222
hxxp://www.brasilfc.com/fancybox/fancy_nav_left.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/nav.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/burnleyfc-50x50.png
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Stokecity-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Stokecity-50x50.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-h.png	192.169.80.222
hxxp://www.gamesbr.me/ads/porc.txt	64.31.20.51
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Newcastle-50x50.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-v.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2015/02/cristianoronaldo-realmadrid-50x50.jpg
hxxp://www.brasilfc.com/fancybox/fancy_close.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/burnleyfc-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/HullCity-25x25.png
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/jquery.evenHeights.1.0.0-min.js?ver=4.1.1
hxxp://www.brasilfc.com/fancybox/fancy_nav_left.png/
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Southampton-25x25.png
hxxp://pagead2.googlesyndication.com/pagead/images/abg/pt.png	173.194.113.217
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Everton-50x50.png
hxxp://www.facebook.com/plugins/like_box.php?app_id=&channel=http://static.ak.facebook.com/connect/xd_arbiter/KvoNGODIqPG.js?version=41#cb=f3f57aed19c7214&domain=www.expertgh.com&origin=http%3A%2F%2Fwww.expertgh.com%2Ff3762ccc680f19e&relation=parent.parent&container_width=164&header=true&href=http://www.facebook.com/pages/ExpertGH/317402498295251&locale=en_US&sdk=joey&show_faces=true&stream=false&width=184	31.13.93.3
hxxp://www.brasilfc.com/fancybox/fancy_loading.png/
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.css?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/manchester_united-25x25.png
hxxp://www.gamesbr.me/ads/ads2.txt	64.31.20.51
hxxp://www.brasilfc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
hxxp://www.expertgh.com/pt-br/none	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Astonvilla-50x50.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGlare.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/rssIcon.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-center.png	192.169.80.222
hxxp://www.facebook.com/plugins/like.php?locale=pt_BR&href=https://www.facebook.com/pages/Expert-GH/565095496889408&width&colorscheme=dark&layout=box_count&action=like&show_faces=false&share=false&height=65	31.13.93.3
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgTexture.jpg	192.169.80.222
hxxp://connect.facebook.net/en_US/all.js	23.64.223.139
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Newcastle-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2015/02/suarez-barcelona-640x360.jpg
hxxp://www.youtube.com/embed/I2SCNf-45LQ	173.194.113.192
hxxp://platform.twitter.com/widgets.js
hxxp://www.expertgh.com/pt-br/wp-content/uploads/2013/07/PES-2014.jpg	192.169.80.222
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/html5shiv.js?ver=4.1.1
hxxp://www.youtube.com/embed/vqPM2vpPwTM	173.194.113.192
hxxp://www.brasilfc.com/wp-content/uploads/2015/04/suarez-neymar-640x360.jpg
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/fancybox.png
hxxp://www.brasilfc.com/wp-content/uploads/2015/03/rooney-640x360.jpg
hxxp://www.brasilfc.com/wp-content/uploads/2015/02/cristianoronaldo-realmadrid-640x360.jpg
hxxp://www.expertgh.com/counter/online3.php	192.169.80.222
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/blank.gif
hxxp://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js	173.194.113.217
hxxp://www.brasilfc.com/wp-content/uploads/2015/03/huntelaar-schalke-ap-50x50.jpg
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/arsenal-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/chelsea-25x25.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-s.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Header.jpg	192.169.80.222
hxxp://www.brasilfc.com/fancybox/fancy_loading.png
hxxp://www.brasilfc.com/
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/manchester_city-50x50.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/QueensParkRanges-25x25.png
hxxp://googleads.g.doubleclick.net/pagead/html/r20150414/r20150409/zrt_lookup.html
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/jquery.themeboy-rotator.js?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Crystal_Palace-25x25.png
hxxp://pagead2.googlesyndication.com/pagead/osd.js	173.194.113.217
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Sunderland-25x25.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/script.js	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-h.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/images/footer-bg.png
hxxp://pagead2.googlesyndication.com/bg/PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg.js	173.194.113.217
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/images/header.jpg
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/leicester-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Westham-25x25.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGradient.jpg	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-v.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-left.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Button.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-right.png	192.169.80.222
hxxp://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
hxxp://www.gamesbr.me/chkhs.txt	64.31.20.51
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/responsive.css?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/css/adminbar.css?ver=4.1.1
hxxp://pagead2.googlesyndication.com/pagead/images/abg/icon.png	173.194.113.217
hxxp://www.brasilfc.com/wp-content/uploads/2015/04/suarez-neymar-50x50.jpg
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Footer.png	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeaderIcon.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/manchester_city-25x25.png
hxxp://html5shiv.googlecode.com/svn/trunk/html5.js
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/subitem-bg.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/west_bromwich-50x50.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/tottenham-25x25.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/style.ie6.css	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/PostAuthorIcon.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/05/brasilfc.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/SwanseaCity-25x25.png
hxxp://platform.twitter.com/widgets.js?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/west_bromwich-25x25.png
hxxp://www.gamesbr.me/ads/forceadaf.txt	64.31.20.51
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-c.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/SwanseaCity-50x50.png
hxxp://www.brasilfc.com/fancybox/fancy_close.png/
hxxp://pagead2.googlesyndication.com/pagead/js/r20150414/r20110914/abg.js	173.194.113.217
hxxp://pagead2.googlesyndication.com/pagead/js/r20150414/r20150409/show_ads_impl.js	173.194.113.217
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/style.css?ver=4.1.1
hxxp://www.brasilfc.com/wp-content/uploads/2014/07/Champions-League-Stadium-Hd-Desktop-Wallpaper.jpg
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/Southampton-50x50.png
hxxp://pagead2.googlesyndication.com/pagead/show_ads.js	173.194.113.217
hxxp://www.brasilfc.com/wp-content/uploads/2015/02/suarez-barcelona-50x50.jpg
hxxp://www.brasilfc.com/wp-content/uploads/2015/03/rooney-50x50.jpg
hxxp://pagead2.googlesyndication.com/pagead/images/google-logo.png	173.194.113.217
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeader.png	192.169.80.222
hxxp://www.brasilfc.com/wp-includes/js/jquery/jquery.js?ver=1.11.1
hxxp://www.gamesbr.me/ads/ads3.txt	64.31.20.51
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/liverpool_fc-25x25.png
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/arsenal-50x50.png
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/spacer.gif	192.169.80.222
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-s.png	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/HullCity-50x50.png
hxxp://www.youtube.com/embed/YemiMC0twSQ	173.194.113.192
hxxp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://www.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d\|\|\|n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360
hxxp://www.brasilfc.com/wp-content/uploads/2014/12/liverpool_fc-50x50.png
hxxp://pagead2.googlesyndication.com/simgad/17981107690478385190	173.194.113.217
hxxp://connect.facebook.net/pt_BR/all.js	23.64.223.139
hxxp://www.expertgh.com/pt-br/wp-content/themes/the_world_is_listening_ote049/style.css	192.169.80.222
hxxp://pagead2.googlesyndication.com/pagead/images/x_button_blue2.png	173.194.113.217
hxxp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://www.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=\|\|\|&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390
hxxp://www.brasilfc.com/wp-content/uploads/2014/05/brasilfc_pb.png
hxxp://www.expertgh.com/fb.html	192.169.80.222
hxxp://www.brasilfc.com/wp-content/uploads/2015/03/huntelaar-schalke-ap-640x360.jpg
hxxp://www.brasilfc.com/wp-content/themes/brasilfc/js/fancybox/jquery.easing-1.3.pack.js?ver=4.1.1
i1.ytimg.com	216.58.209.206
fonts.gstatic.com	173.194.113.216
www.google.com	173.194.113.209
s.ytimg.com	216.58.209.206
i.ytimg.com	216.58.209.206

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /fb.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:28 GMT

Content-Type: text/html

Last-Modified: Mon, 18 Aug 2014 04:05:09 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Content-Encoding: gzip
180............]R...0.|/.?........$v...k.\..dim..Z!.....^Ii...4;.;...*
N.x......... qu.h.K.D.45.~'....<z..|.h.......#....mKx....:...d....z
T./60....X...]...Q.....~<....H....Z.e3p.=.y#p...GmCe..6N./..7.\<
....'.)..S1.......[..OI..#...].....G.uSo......./.]..h.UA.. .L.$..B....
Y...H..Br.-by.R...)..6p.n$..O. ..... <.....EJ.!=z...mjg'..2.E.2.w..
..UZJ....k.:[email protected].\R.bM.....P].N ._....?....4.....0..HTTP/1.1 200 O
K..Server: nginx..Date: Thu, 16 Apr 2015 23:57:28 GMT..Content-Type: t
ext/html..Last-Modified: Mon, 18 Aug 2014 04:05:09 GMT..Transfer-Encod
ing: chunked..Connection: keep-alive..Vary: Accept-Encoding..Content-E
ncoding: gzip..180............]R...0.|/.?........$v...k.\..dim..Z!....
.^Ii...4;.;...*N.x......... qu.h.K.D.45.~'....<z..|.h.......#....mK
x....:...d....zT./60....X...]...Q.....~<....H....Z.e3p.=.y#p...GmCe
..6N./..7.\<....'.)..S1.......[..OI..#...].....G.uSo......./.]..h.U
A.. .L.$..B....Y...H..Br.-by.R...)..6p.n$..O. ..... <.....EJ.!=z...
mjg'..2.E.2.w....UZJ....k.:[email protected].\R.bM.....P].N ._....?....4.....0.
.....


GET /pt-br/wp-content/themes/the_world_is_listening_ote049/script.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: application/javascript

Content-Length: 6575

Last-Modified: Wed, 06 Mar 2013 01:35:12 GMT

Connection: keep-alive

ETag: "51369d50-19af"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/* begin Page */..var artEventHelper = {..  'bind' : function (obj, ev
t, fn) {..    if (obj.addEventListener)..      obj.addEventListener(ev
t, fn, false);..    else if (obj.attachEvent)..      obj.attachEvent('
on'   evt, fn);..    else..      obj['on'   evt] = fn;..  }..};..var a
rtLoadEvent = (function() {..  var userAgent = navigator.userAgent.toL
owerCase();..  var browser = {..    version: (userAgent.match(/. (?:rv
|it|ra|ie)[\/: ]([\d.] )/) || [])[1],..    safari: /webkit/.test(userA
gent),..    opera: /opera/.test(userAgent),..    msie: /msie/.test(use
rAgent) && !/opera/.test(userAgent),..    mozilla: /mozilla/.test(user
Agent) && !/(compatible|webkit)/.test(userAgent)..  };..  var list = [
];..  var done = false;..  var ready = function () {..    if (done) re
turn;..    done = true;..    for (var i = 0; i < list.length; i  ).
.      list[i]();..  };..  ..  if (document.addEventListener && !brows
er.opera)..    document.addEventListener('DOMContentLoaded', ready, fa
lse);..  ..  if (browser.msie && window == top) {..    (function () {.
.      try {..        document.documentElement.doScroll('left');..    
  } catch (e) {..        setTimeout(arguments.callee, 10);..        re
turn;..      }..      ready();..    })();..  }..  ..  if (browser.oper
a) {..    document.addEventListener('DOMContentLoaded', function () {.
.      for (var i = 0; i < document.styleSheets.length; i  ) {..   
     if (document.styleSheets[i].disabled) {..          setTimeout(arg
uments.callee, 10);..          return;..        }..      }..      <<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/style.ie6.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: text/css

Last-Modified: Wed, 06 Mar 2013 01:35:08 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip
667.............Zmo.6........Dqc)vR.../h:...t..b.*..DT.5.N....#)J".bK.
..n....r.=...<....A.....B..d.... ........}............,k.........}.
0..x......G.C.E.!E....>.....\....m...v.|.._b.?....L...9..xA..~....-
.............Q....?.!.#>...W....B....3...H=<..Ljd.{}....{(pS=.T.
.).7.q4z.........K.<.d.'[email protected]<...)cQ............9..m
qd....1G.U..."..L.X...a..l.68....=c.tX....A.m..-.G.....E./....W....]./
 a..$.......-%lI.B.#.Mrd,..l..............JR.j.uV...Ef.%.O....s..5.._.
.... ..../.....z.pq>...W..8..Q"6.nR_.X...L..z.1_mx`.W./.)^..r.I..&g
t;\.....i..9......?9.........|0Gw_{......BQ.5...D.G....... ..)..p{..q.
:.....!..5..Q..........7.{'..}7..........j`[email protected]...
S.{..>T...C..Ov)...2......u...X.. .yt..5......;.:.gS\...!.W.....V..
C1.!...IR.a..b.cS.(..v.U... )W........?...m...T9_)..J.Z........A...N.~
9.......]...6.TZj.V[^.0e.j%.b\#.gd,.....i.d3..Y..Z,..0(.c`...m.GvX...h
.........3..G!...y....to5#.#...,....0..'-.T.W).pO......w......!...PE..
b..n..y.M1I>#...i]=.EH.i.....T.Y.K...i:......&..i.6|.$AO.y......C..
e.@[email protected]..^.......~3.V...I..z.......*..v3..;
..Ntj....wu....7.T.V.....Yz...-Ooo.hW.m..n.......Eg)....t.];&'z5..JVu.
.....yv/...<]..k`...v.W.......%..h.n....1../....V...E.W.......T../.
a.&....D...rY.dv..*..n|...(Q..*.[.B.*M......&.].9....B....-..eW....dlb
..|U..9k..9........2.....{.0..]-}..F..Rp........u^.G[......:u&o$e.6a..
0.... .....:......GZ..b.u:.:.K.....:.Zggy..g.....K........[P......KL..
..8A...k.3...%\fj.DM.&w.%.8..3Q.....e..-.G15..Ar..o1_.I.".3/...~i.<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGradient.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:30 GMT

Content-Type: image/jpeg

Content-Length: 3414

Last-Modified: Wed, 06 Mar 2013 01:35:30 GMT

Connection: keep-alive

ETag: "51369d62-d56"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.....`.`.....C..............................................
......................C...............................................
........................K.u.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?........
.A.m. .n.*.../....X.....a...`....c@."....A.R......I....C.....{....."q.
.....z..:x...S.(.q...A'.5...$.*dn...6..F....~S...#@.mb.y...:{..L|...[.
Y'Ue<18...%.)..;......%.'...x...=....m...h.`.... X....a....a.......
~..-. m..u....wI..%.c..{.j.....ar>..0..J....}i...;Bs...[.....:1....
.BI~E...F?.@. b../n......1..p..T.....{ #;.m...>l.....-..qM.........
u.[f.) (.1....E=l6./.9...NFS...4.v....&@<........D....c...<V...l
..$A.,a}.d..{..|I...A.M..........0...1......`...........NB.....[.i.') 
.......r3.....a ...uC.=N.....a.5..D.r.O..9...=.i...v..W.#..N..........
. ..........~..0..G.n..].9..?..}...i.b..|.(?/C.>.d.....s..<...IG
 ...W.w{.O.Q.:[email protected]......`.....y<SWO`....).....,.f..D.. 
....?.K........ ..z.....a5..CDz7<.{...t...s.........J.m>....e|.c
.A..}=.J.L.tRH..b...._A....s..#?8..k...x.....(.i..5#i w...6.M.8....Q(|
(......)...k.....W.........t..9.9........9...O.N..K(...I.....s....<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/spacer.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=0


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:31 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Wed, 06 Mar 2013 01:35:22 GMT

Connection: keep-alive

ETag: "51369d5a-2b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/PostAuthorIcon.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:31 GMT

Content-Type: image/png

Content-Length: 341

Last-Modified: Wed, 06 Mar 2013 01:35:28 GMT

Connection: keep-alive

ETag: "51369d60-155"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.............V..W....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDAT8Oc.../.U.. ...`b..dOF.%....1PL.Y..^.! 
[email protected]@..`........ .Q..... ..c.o`Cc....,(Q.2.$.......i....O...u
P...Y,(.$......E...X...^...6.`. 9..t.................4..Q......b.....y
0...=.x1H.^.....@... .8......Y..6J`...]-........z.......IEND.B`.HTTP/1
.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 23:57:31 GMT..Content
-Type: image/png..Content-Length: 341..Last-Modified: Wed, 06 Mar 2013
 01:35:28 GMT..Connection: keep-alive..ETag: "51369d60-155"..Expires: 
Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Accep
t-Ranges: bytes...PNG........IHDR.............V..W....sRGB........ cHR
M..z&..............u0...`..:....p..Q<....IDAT8Oc.../.U.. ...`b..dOF
.%....1PL.Y..^.! [email protected]@..`........ .Q..... ..c.o`Cc....,(Q.2.$
.......i....O...uP...Y,(.$......E...X...^...6.`. 9..t.................
4..Q......b.....y0...=.x1H.^.....@... .8......Y..6J`...]-........z....
...IEND.B`.....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockContentBullets.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:32 GMT

Content-Type: image/png

Content-Length: 145

Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT

Connection: keep-alive

ETag: "51369d68-91"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.............../3....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDAT.Wc`....c...5.l..y.Xu./......%..B.F....
IEND.B`.HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 23:57:3
2 GMT..Content-Type: image/png..Content-Length: 145..Last-Modified: We
d, 06 Mar 2013 01:35:36 GMT..Connection: keep-alive..ETag: "51369d68-9
1"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315
360000..Accept-Ranges: bytes...PNG........IHDR.............../3....sRG
B........ cHRM..z&..............u0...`..:....p..Q<....IDAT.Wc`....c
...5.l..y.Xu./......%..B.F....IEND.B`.....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-left.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:33 GMT

Content-Type: image/png

Content-Length: 248

Last-Modified: Wed, 06 Mar 2013 01:35:24 GMT

Connection: keep-alive

ETag: "51369d5c-f8"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.......Z.....y\<.....sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<....IDAT(S..I..0.D....`4Q.<.....jZz.Gp...
*...!....o.$.0..&.....{1....I..,.e....m....".(....y...D...Z .,.y......
..(DY......u]..iD....a..W.......".n....IEND.B`.....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Header.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:33 GMT

Content-Type: image/jpeg

Content-Length: 32780

Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT

Connection: keep-alive

ETag: "51369d66-800c"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.....`.`.....C...........................#.%$"."!& 7/&)4)!"0
A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".........................
...................................}........!1A..Qa."q.2....#B...R..$3
br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...............
......................................................................
.........................................w.......!1..AQ.aq."2...B.....
#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz........
......................................................................
......?...x........eqR.:........G.=)[email protected].....
..^..a.............q.......5`........cc.....e....^q..y.....A....^..t.Y
.A.....B.T.0=..p.A..K.#.....|.{....r2....{.!R...X.:.p...h...,...:[...S
P..s..nhZ... .....z..Q)r..;_DK.X.p#..M9...*..;=.$..b....gN.........s..
...R....B.c.A..Q6..$..w.RH...Fi.\......SY.1..?.b..).JN.1S.4w*d.m......
..?.>v...:U..m...h..s..K.B.....I.....|.....c...JrZ../..*O...B.|,N.5
N....).....n%.....N...Z...4.s.E;.2..AV....y.rk>y.dSm....U^.4..koR=.
#]..tk#sp.-.q.W>....vBi!.....?J.<.h~b....6..z...L.D_..#.=.SKgj']
.w}Nk.P...g...a....{....%[email protected]..... ...%........c..I.. ..m....ED.1...}
...V../*F.\}......x.L...i....(.f..aP.R.C.......1...j..H....-...Fy$..W=
.......PZD..r........%...<...^..,..... ....N.IdgrrK...._....=..kM..
[email protected]?..........Z.u.....?e)kb..I.`...,26.I...._.j.F$q.l..y
9..uz]..,#.V.P|..2kR&R.......-....^...g.}NI..E.c.o..V...G.xo..G...<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-c.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:35 GMT

Content-Type: image/png

Content-Length: 457

Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT

Connection: keep-alive

ETag: "51369d5e-1c9"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...d...d.....p..T....sRGB........ cHRM..z&............
..u0...`..:....p..Q<...WIDATx^[email protected]=K.D....{.s>._
..< ..op..`.......2....P @Z.].P....yK..H..HH,[email protected].. ....R...
[email protected]{cX@..|..K.. j.;d(.*k...........X...QK.!C)PYCX..... ....R...
Z...J....r.....1.6$.. @..w.P.T....7......!.......C.R......1, @........
...2...5....a..b.mH,.@..%......!,go.....oCb)[email protected]{cX@..|..K.. 
j.;d(.*k...........X....|...B.........IEND.B`.HTTP/1.1 200 OK..Server:
 nginx..Date: Thu, 16 Apr 2015 23:57:35 GMT..Content-Type: image/png..
Content-Length: 457..Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT..Con
nection: keep-alive..ETag: "51369d5e-1c9"..Expires: Thu, 31 Dec 2037 2
3:55:55 GMT..Cache-Control: max-age=315360000..Accept-Ranges: bytes...
PNG........IHDR...d...d.....p..T....sRGB........ cHRM..z&.............
.u0...`..:....p..Q<...WIDATx^[email protected]=K.D....{.s>._.
.< ..op..`.......2....P @Z.].P....yK..H..HH,[email protected].. ....R...Z
[email protected]{cX@..|..K.. j.;d(.*k...........X...QK.!C)PYCX..... ....R...Z
...J....r.....1.6$.. @..w.P.T....7......!.......C.R......1, @.........
..2...5....a..b.mH,.@..%......!,go.....oCb)[email protected]{cX@..|..K.. j
.;d(.*k...........X....|...B.........IEND.B`.....
<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-v.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:36 GMT

Content-Type: image/png

Content-Length: 5534

Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT

Connection: keep-alive

ETag: "51369d5e-159e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...<............F....sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<...,IDATx^...M*a.E....Ll..k...PF.X.>Q."..
.vr3|...........|~........r...v......>.......?...:..1.m.c........~.
.a.ih.....3..;.w...Z........BR....4.).......%k.Z...%k......a{..._..3..
;..........)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS....t
...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP..
..4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...
E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)M
iJ......4.)M...E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS......
.)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS....t...AiJS...
^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS
....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h
.jP....4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.
)M...E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l.
.4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS.
......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS....t...Ai
JS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W
..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....
4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJSz%l..4.)MiJ...
...4.)M...E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)MiJS.......)MiJ
Sz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS....t...AiJS...^.[t)
MiJS.......)MiJSz%l..4.)MiJ......4.)M...E....4.)]h.jP....4.W..]JS.<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-s.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:36 GMT

Content-Type: image/png

Content-Length: 458

Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT

Connection: keep-alive

ETag: "51369d68-1ca"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.............;0......sRGB........ cHRM..z&............
..u0...`..:....p..Q<...XIDATHK...J.P...bK........!...I .I./..{..y|.
..$vU..UD..g..ll!A......../wr.'.Z.c.eZ...j......iC[P......A.6..6.<@
.4.~...q...y.\.E.D.&I..0.ol.>.t..B.....y.E.ec,.h.[T......8.%.....m.
-..c.O..\.~..W..H8yF..a..@'.P..........K..p..cD...S.(.n.:.f....t....i.
>.u...1C=\|..S..N.....U@%....].-9.t..P........{..\.\l.Me..j.D.W....
...Q%.....r$/..N....H.2.Q._..9.I....Kt....IEND.B`.HTTP/1.1 200 OK..Ser
ver: nginx..Date: Thu, 16 Apr 2015 23:57:36 GMT..Content-Type: image/p
ng..Content-Length: 458..Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT.
.Connection: keep-alive..ETag: "51369d68-1ca"..Expires: Thu, 31 Dec 20
37 23:55:55 GMT..Cache-Control: max-age=315360000..Accept-Ranges: byte
s...PNG........IHDR.............;0......sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<...XIDATHK...J.P...bK........!...I .I./..{..
y|...$vU..UD..g..ll!A......../wr.'.Z.c.eZ...j......iC[P......A.6..6.&l
t;@.4.~...q...y.\.E.D.&I..0.ol.>.t..B.....y.E.ec,.h.[T......8.%....
.m.-..c.O..\.~..W..H8yF..a..@'.P..........K..p..cD...S.(.n.:.f....t...
.i.>.u...1C=\|..S..N.....U@%....].-9.t..P........{..\.\l.Me..j.D.W.
......Q%.....r$/..N....H.2.Q._..9.I....Kt....IEND.B`.....
<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-v.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:36 GMT

Content-Type: image/png

Content-Length: 2785

Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT

Connection: keep-alive

ETag: "51369d68-ae1"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR..............r......sRGB........ cHRM..z&............
..u0...`..:....p..Q<...oIDATx^...i.P...gR...,`...4......<u!.'pq.
.w?\...m..1..m...q.....e...?...y.<.5....z.s......vX.i...qZ..oC.R...
.....L..Z.K.. K.'..2yW...NY.8....:...NY.8....:...NY.8....:...NY.8....:
...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8...
.:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8.
...:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.
8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...N
Y.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:..
.NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:
...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8...
.:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8.
...:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.
8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...N
Y.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:..
.NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:
...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8...
.:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8.
...:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.
8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...N
Y.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:..
.NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8....:...NY.8.

<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeaderIcon.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:37 GMT

Content-Type: image/png

Content-Length: 635

Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT

Connection: keep-alive

ETag: "51369d66-27b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.....................sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDAT8O.SMH.Q..B...D.t.I ..r.2h...BX.0.hc-..
M....BE.B...D..E..Ba&.EGgj.q.4....N...| .i.4..x..s..9.......ps.....-A"
.....m.}y..... H....x.d^B.Sp;.p....]..W.>.Ol{o..9._..4...Y......". 
U_\....)..3p.?.m~......e. N...."...,.m.1..F.}........m....'N....0$?...
.,m.H....l.1.3Wx....X.'.)^yJNIq..E.....7..FUe...>D....^/.*.....CK.\
?.[./i.............t..@q. .... ....{$.#.........0...E..G...YzH........
........&..\.S5GQ....m..YU.#.z.i..Z..>j..y..7...=..<.........iG{
..s.s{;......}.&......=.....}..t.Z.*.hi....9.....\.9.vt........]......
.....x......IEND.B`.HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 
2015 23:57:37 GMT..Content-Type: image/png..Content-Length: 635..Last-
Modified: Wed, 06 Mar 2013 01:35:34 GMT..Connection: keep-alive..ETag:
 "51369d66-27b"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control
: max-age=315360000..Accept-Ranges: bytes...PNG........IHDR...........
..........sRGB........ cHRM..z&..............u0...`..:....p..Q<....
IDAT8O.SMH.Q..B...D.t.I ..r.2h...BX.0.hc-..M....BE.B...D..E..Ba&.EGgj.
q.4....N...| .i.4..x..s..9.......ps.....-A".....m.}y..... H....x.d^B.S
p;.p....]..W.>.Ol{o..9._..4...Y......". U_\....)..3p.?.m~......e. N
...."...,.m.1..F.}........m....'N....0$?....,m.H....l.1.3Wx....X.'.)^y
JNIq..E.....7..FUe...>D....^/.*.....CK.\?.[./i.............t..@q. .
... ....{$.#.........0...E..G...YzH................&..\.S5GQ....m..YU.
#.z.i..Z..>j..y..7...=..<.........iG{..s.s{;......}.&......=<<< skipped >>>

GET /pt-br/none HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 404 Not Found

Server: nginx

Date: Thu, 16 Apr 2015 23:57:38 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Pingback: hXXp://VVV.expertgh.com/pt-br/xmlrpc.php

X-Powered-By: W3 Total Cache/0.9.2.5

Expires: Wed, 11 Jan 1984 05:00:00 GMT

Cache-Control: no-cache, must-revalidate, max-age=0

Pragma: no-cache

Content-Encoding: gzip
ca9.............[.n.6..{....*...[I.J6Nl.m..... .v.P..Z.m&........S....
.K\^...d.....`..q..".......5j}..n...G.0.....;..w.q}.C}...N.....7...U.D
.X1.DL....u..j.l.....w^....'.......y....^.C....../".....j....;.I<h;
.v.N.....H.g.....d`{^.c.Z.....L.K.H.....X.X.'..u .......7..!....n.?9p7
..g.|t..twE...z..t....RN4=...w.Ls..8..y.b.../.hl.H..... ..$K4h......HV
.......EB....@D>j.'....E...FT..O.B...S.8S....'.i...3h.T9.V~a..,>
.Iy.Q..S5....%........r.......A..Ii... .....p.6..|q1...S..W..8d..]wZ..
k*c\...I...b../....Y.vA..} 8|C"..Hp...q..........~..9. ZD. .K$ZT..le..
.)q.D.!.|X(.L./.&7...2...p.j..A.w..e.W.0,....yDb..J..Zj....6Y..4.UY..,
.j/.G1.G....J..,...B.G.*....U3.}c4;V.=.^.........(..Gd@wp".R.q...'...4
 Q..vjN$u..5....M..d..........s.......j......v*..l.y/...8.....MK.C...k
....lb. .8..g.....@.!S.'.*5.O.-....z.....7.....^.Y}....7...../dD.a.vj.
v.F$T.....l..d..0..8..J........../..,3.....n....\..S..F.ssVm...d.o..Ha
.2...{|..E.u...".."2.......\...k3...x.R^...#..........!.JH.......b ...
.....M.....4.SrM..9s2.qC..#.....[....Z..v......n;...6.>zit.abld....
...6..y..-E.d.aL.8..Dv.<....,.M<.............eOFlD..K........C..
.F...c...<...-KC..EC...'/....._P9..gm.iB..y...b........r....&."....
b!..Y..~........3.e..4c9.|.7#...... .i.r.E..4c9."2.e.rAg.1.....:q.....
.T...P.&8B....(....9@.....%..n.....7..}.N..".H.-...i..;-.'i.3;0"<..
'..T..SX.s....4......&6K...x....,U......1Y.XCY...8S.T....M......2.7..F
)......^.&-c.#;......'O...C..3.l.=.w.f.C....._.U3P\......l ..z.PU...f.
.;<.......J........2...!Q.R.....L..b.....?.;...s./...;.\..8..FB<<< skipped >>>

GET /pagead/show_ads.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 11237470037412986401

Date: Thu, 16 Apr 2015 23:26:02 GMT

Expires: Fri, 17 Apr 2015 00:26:02 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 8200

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 3383

Alternate-Protocol: 80:quic,p=0.5
...........\yw.6................N..M.m.4.J...I.$R!)/.......&.i..7.....
.pqw..V...qdZ.."9..l..L.^T.U...f.......4b...f...."....a.f"r...$.7V.g.$
2...{..[9.nt..4.....L.,.9[Y.!K.h.r.|..$.C....0...10q..4n.f...j.6......
.%..~4......<?.#.3...t9.]..Z .....ez...D8s.=._a.j0.......z.s|.NK...
...U"............m..."\.V ...........aN....\.VW..-.\.oL.rp.L$. .e..a.n
O.t$.l..W..I.'.$..i.O...f.K...YJ..),..zV...=q.Q...n...i.dzi.......j6..
Yw.U6d.....xNE..i'.....]..]3.....[.u$...?tc.d;8pD..9..............W..E
.[...}..>...V5.#.R$..b......<L..7(...S.^w......vU[m.7...d...ne~J
...:.._...V..>h.....9.].....uO}....2G.a....i.~j3_l...m.e..Bd...J...
;..1.l...2.N.....D.:]..yA..Z.....=...4h..;.Xl......Y)......-.l..um....
.....!..?.9..l...M1..-.]..8[..K......E...0Z.].d.....L.v.{.....Cc\9~...
.W......3Kn... ...#.h.,G8.y..I....,.......ql.h.....3...3..l..n.N..~Ng.
...{.....<8{-.i ..J...rvQ.....S".s.'..(.>.,...]I..r..e...y/..!. 
?.:..}.X......i$=.vk.Mq....c..{/?Xk\0..\.......[.".......N.....ir..h45
...~........ .J............96...'..\.Gp.i.".d..l.#.........9..o.Ms.e.t
...[.{..5.k.....G^...[.Qd..F.63~....j.Qtx.=a4.U....MI>..g..]...9W'.
~a.....W....|.K.........A[p.p.a._.._.5.D._.y..;.._.7!gJ....)..)~3...w.
_....=...~G...>_.[.>..1.u.,....}..30.".3..D~&.....>.;Oe.~..q.
?...cT.$.?...&;..cC...[w)?2.....v...H.^E..*.e...wTA...;f....^..Y.bb.U-
&.Z.'.).d...q..w..TX....@b[..{.....4.U:-5....n.......K.x......`.d.....
F...G}..1.M..Z..z..b....mL.x2./T.. L.......z{*...1..p.;.v6.&|"...$..y.
c...V.E........D.....)....t.....c..r...A....?bJ.9..lZ._.<....4.<<< skipped >>>

GET /pagead/js/r20150414/r20150409/show_ads_impl.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 8831366049881790590

Date: Fri, 17 Apr 2015 00:22:25 GMT

Expires: Fri, 17 Apr 2015 00:22:25 GMT

Cache-Control: private, max-age=1209600

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 63021

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.5
............y....0..>.....E!......$...v .F8......di...3.,/...}....4
.G..h4....7..#..u.L..{..f.ql......|1....._(o..."..A\.....).&.h.k%..<
;.[.....w.Q..7.R..x-o.M.....5.\ ".a....a.rJ.`.....t.K.G.\7....S.Gw....
;.kB..AC&...Z.Oi..kE.d..R/.7F..3....w.).{U.c..{.<..(5H...v...$.....
B]....o...k@.`.o!.5.Xm:u..V..`@..0....Tp-...Yli2...Xgi>n....W......
.h...>G#.....x.6.6kC....`..6Z..`...'9..b..a4.|m3N....u...I0.?5fu(8.
:..`7..t........=../..[-....&aQq...k.`0..<v.....`S%[email protected]..."..
u......"W$.CD.f.2.0L.)7.I.&yE&y5.(.). ..#..rW.......:^8....mV.qE.,.. .
G..L&.'.)......`.G.....lN..M......B}:..C......G......Q......:...../...
.W.. ...Q....._V..8..j..5...........[.,.~........DI.t...............}X
...1........IN..]r...a#.u.........&.Y_..2....;...4...yP........qC....g
..u....rv......Y..,B... /......9~......Q..S....L..|<.7.Hr.Y.V.....{
o....^.......V?.@.~.h.....eZ....,nK...EJz0.tS.....3..'..3..Y!.]8..g,..
. ..w^........-.1..H..).e...2...a..g;.y0..T7.......^...@........}...oK
....k.....l...v.F......bD(........>....cS.@]...c..Z.T..H. S...... 4
<.a...!.y/._..C...*.)N.).XJ..l...c...lB....S..d.:...I2.}2x..6...".G
..S.?.G.ZH....2z.t.\yY...k r..Ag..R1.e&.*..O&...i%......\..h orZY....z
.qo.8... ....(.....(.k@m>.r.NU.8=..[b.gO#?..J...P3y...2..~v.....S(.
...)li.p...e....Z...9..p..hX.k7M.....8.&...........S......N.h8$_......
.....C0=......)n*E.....].#..W.f.X!7..]..E.....m9....2.q!n0W.\..%.<.
...'"}....[5..qe..|(.-. H. 2..{..o.[....5m5...........~.);.`....<..
v=S..L...d.o...L.x...?...........;.....;...W._.~..o..X,|.......w..<<< skipped >>>

GET /pagead/osd.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 14343074723909371761

Date: Thu, 16 Apr 2015 23:26:04 GMT

Expires: Fri, 17 Apr 2015 00:26:04 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 19494

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 3382

Alternate-Protocol: 80:quic,p=0.5
...........}iW.H..w~...0Rh..d....I [email protected]....;.,..
........^2n.{~.{"...>n.G..m..~...z.[....ru.s1cB8)X.2'\TF.N{.{./`).D
.y...-...JZ..29M...x:u.|.s{k.8.....o.%...5...U_..2j.....Q...t.8......0
..B_!....X,.}..6..b.aID.P.DA;.{.......F..#...\.....~.g,-V.J...d?[.....
._2.{..X8....vo4.........PEz.?.h>.1...z#5.*.2...}..2.....^...N.....
..,.m...M.Z...t..%7....M.^....!|.>.9..{...=.z y,.r"......p|w0....P.
.H.R..{.0/X....}=......h..5....d...9 [email protected].., ..T...F.*.
!...j{h.fl.....7".q.....-,.;c.e...S.g....S....Z..z........%.g......s..
J...............0Q "...........-....O..jq.i.8Ko.......6..-.a.._....T.=
.T.k.Km.B.aof..Z..-9#2c..#r...r...\]]..<.iQ..T.S......q{"..~.....a.
L...n.Nra.~..5.j.k..{....... ..Q...3.sCE{c..DX.nnc...H.w.b./.........i
m....B...P.\.~.{.J.6...W .'[email protected]. 7f..62...aEc.7.3.^.G.....
....I0. .p.Fi..=&.....K..n.. ......4r(.............6.....F.y...."...w#
T .......D.G.^.T.n...[..U..D...S.,.....qY.....1q.,._._..w1..u......~..
.g........B.W..J.......^.!....<................<.Xx...s|_.y....`
K....PG...57..^.01..'......#1nU...O5.d..O........js'..kkjm...k6..{..K.
..'..w;.=.."}........&.3.Cd..........`5.C.........,.#.....(...|...A<
;[email protected]..*..3..f7.6P#8........O......^
....^..3.F8{....6L!P....X....}#..)-8.t.e.d. 1..:....l{.."6".;.O^......
............LY.?; ..T.wq....N.n..U8.xA./#/Z@A=y.l..?....=...x.k.y! .5/
.=..U..e..5..SB......so.k8;. }....W...3..wj...c..",.S...A.mk([email protected]
...^.W...%T.)...;...k3KF...t..f..<. &.k{../h...........B...N.7=<<< skipped >>>

GET /pagead/js/adsbygoogle.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 8641232773608072604

Date: Thu, 16 Apr 2015 23:25:59 GMT

Expires: Fri, 17 Apr 2015 00:25:59 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 13415

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 3387

Alternate-Protocol: 80:quic,p=0.5
...........}yw.H.......b).1`;.Hn....&.s8..`.... $"..1|...C..g~.;ob....
......2t.i........h:.&dI.t&2l.....o0k..Zd...T..6..`.oc.&)...{......t..
........J$P........"........4.............4.MC7..AO....[..w.C.VZ...^./
jH..............s.f..,.......]xqz.69.......6.3tMT...s.u...{...fq2.?u..
.;.V^[{A.5dj...k.'a_3(@.R7h...EQ..&.=.d.b...B.2..b.kb. "6q.;...B.-....
:6..a..F....&.fI.[...$...'q..:...aVN"...K9f..5..........^.o..*oXU.e.L.
~*...7k..4..z....XaB..zcB..B.B.8....N.y_n.ku...... M.....p".6..f....q-
...\..'...z.]7^..3:c/=..=X...-a....'.. b)..Y.4..>..j.;.....A.dk...@
....4^z.v;..`[email protected]........./.wF....X<...../.aw...m....q.-.j.
..:s.:...;...aw.mq.........4.L.K../?...........9...5..F.]1..H.c...A.j.
.[.Fa..I.....)[email protected]...%.$E6..b.L.i.j.NSO.. [[email protected];
....Ya...S&.PW..3&..."_..._.....$-.%m.T.!....`.O5.x.ky..........D...7.
y!.G...Q..J...........b.3a..u.Q.w....=j.....e."....>. .">..Z05.%
.S.\..ad]ZW......0.l..f..j_.Y.][email protected].&..5....m.?.....
.m|.....!...1..1>..1........v...&)l.........7.H.Cl.Jtw.nz..........
......SX....,..L.xf..[......"..rQ#..A..ld...Ll..c...S......Y.'G..oS...
....U3.......'h.)..R.m.....X.Y.....,..bWA....A...3...X...j..?.........
.......3>...H...".jb..<..,..!.3..r...b...8[.>...A. ..>...E
.q.0.[..7..ZF.uoo........:h..../x...W.......Sz....{..G...~5.}......w.T
..W.8......=.%[/a?.Fq.t.?l>.%.[|M.Cc..u..N.Yr.........{fwM^........
.......v.!..=2`..U.n....y.......u.p.=L4k..Q2...On.......=.VC.m..Q....m
..].9..u-.L?.H....../J.y1.... ...%.J...|S.H.....Pk.f.eru'...%.I...<<< skipped >>>

GET /pagead/js/r20150414/r20110914/abg.js HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 11565900544675843682

Date: Thu, 16 Apr 2015 18:26:02 GMT

Expires: Thu, 30 Apr 2015 18:26:02 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 14375

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=1209600

Age: 21384

Alternate-Protocol: 80:quic,p=0.5
...........}g{.J..w.........#.\...[\...].0..0.W..wf..*.q.y.....-......
3..6.]'h.]U{.#...~c....N..f..a..E.A...T.P4..nL..Xous.h4......9.V/.....
`i%......*.=.6.^..\....e...V#P5..D.ht...\..,..Z..W.............L..L.OJ
...^0.ws...U.S.?V.....Xw...6...{......P....s.... .0.7.....u.l..'...F!.
Q.$.1E..r..8.R.^..|........6....P.%..Q......}.(.Em....%.B.FJw...>DD
.B. ...5Z].U...0......a.P......`.0{}b..v:;CU.2EK3'.v.3_..Y-r.?".QE...W
.^{..xjw.0&MARC ....V..d......1..`........,@.~..c...P....)1H..~T.a....
...w...l.JN....i...}.>......rW^..r.a.....IR;.^." ..eM0 .f.?*..I.a..
..6[w...O.....ZS`.G.z?.KKH.T=.rv.P.....^U3 .=...tI...r...0.z.. ..>'
..-.GCk......G.T ...0..7.jZ.r6....>...&......D....S...5..:........Z
[o@.\.7Y..I.).5.m..vJ..v>.5/..r......p.D.\.u!.z.:...kbq.)).~.SM.#..
.Q.q%3...........A.....Q.z?....:.6>Dq....7. *.;1QNH$........Zn....N
..e..^OA....d.o..;.....S...].......R.}......]{([email protected].....
.......*..........B...K...o(s.y}.........J...TK..X.di....D.:.VP/I...Au
...el...=.U....A.y....[...ZU.-.z......k..q...x_.=. ...k5Z.R../)2]..U..
.E.@`..)...{.5w.z...V..SUF.J.. ..R... .o.. M..b.......TK.p..[;$.JN....
....e....#..;t..w.=.fh.}J.q}b...#Z.L.&...........4;......1@?..y...0y&l
t;[email protected]]._M'...O.4..I.........`,v..8...=.K..g.Nw.58.M:n..
..\....".IkNL1.....).$.Ag>Nd....U2....@.>......F..w5d!X.v=4..V.l
.?.;.l...z ....G...~RC.8.?e.....kK..cv$3.B.......d..1..........;......
.z......Yon......{@[email protected].%L;L..k._.zU....=<..T1.T.V.6.R
...s|x..x].S}'[email protected](...l.e..0....Q.G..a'..d..F%p.6<<< skipped >>>

GET /pagead/images/abg/icon.png HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: image/png

ETag: 6766994032117382215

Date: Thu, 16 Apr 2015 18:26:39 GMT

Expires: Fri, 17 Apr 2015 18:26:39 GMT

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 344

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=86400

Age: 21348

Alternate-Protocol: 80:quic,p=0.5
.PNG........IHDR.............;..J....gAMA......a.....IDAT([email protected]..
......,l..;.....A....hPDD...`r..A....M..-.......UI...O.%.QB.[D......;.
nA....:..^S..].....].B0..mH]..I..f.F./.4H... .g...*....C...Q..T..]..B.
..8..0.....#....(...N.80\.t../.SA...i..O.N~2.B.t.....6..#.6.(.......w.
.... ....`..3.Q......md.A._.O.mC.L........}O"...........IEND.B`.>....

GET /pagead/images/x_button_blue2.png HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: image/png

ETag: 291775052866240956

Date: Thu, 16 Apr 2015 18:26:02 GMT

Expires: Fri, 17 Apr 2015 18:26:02 GMT

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 145

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=86400

Age: 21385

Alternate-Protocol: 80:quic,p=0.5
.PNG........IHDR.............b..x...XIDAT(.c.....3g.G........#.*."@q..
..9#..E.4...#[email protected][email protected].%..ap.%.V.2}\.......IEN
D.B`.....


GET /pagead/images/google-logo.png HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: image/png

ETag: 13513653691308934734

Date: Thu, 16 Apr 2015 18:26:09 GMT

Expires: Fri, 17 Apr 2015 18:26:09 GMT

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 4114

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=86400

Age: 21378

Alternate-Protocol: 80:quic,p=0.5
.PNG........IHDR...j...$......t......IDATh..[.\SG.......Q ...*`D.r..E.
C.'...D..x"...Q.z..(...R.bD.r..T....e..6.Z/ /.w....~;.......Zw..g>$
/.f.w}.........cI.'.....58...X..}Yq....t..Z.....<(5....u..F......./
..g...........O.oHqL.a.E.6c..,......Z..M.U..>........".SE.I..H..n..
.)...w..O`...r...5..".H..u.$.:.P........\.8.L.Q..._....._..."fk..`?...
........~|J [email protected],.?.0. RX.Q;SS%.....s....n. ..{.'p.....< 
.z"..g`xr..Qw..5s.~s[...........4.... .Z{....(b_u..._..9o.b..M.li!bya.
.-.p.L..m 7..j1..o.y..g6.J.......B7\Fs..zM..}B.H(...j.4-.<i......Bc
n/....z..........x5C...@$......A..Xt...f`Z[.....g.......{`t.e...5_....
=.D....J..{X*7.PG;.m.`..K..KW......$.x...- .?\[.....}.....#.{..p......
\.E..g(!.I.wD........%.... x.~.-.Zj..\...r.%V.~.5......?q.. f...0[..o.
[email protected].......%o.0...2kyc.Z.u..#.H[..j.t...c.....<C...N..........
..G....xh*.%|~....... [email protected].>.....W.......`GG.*X.1..d.#..
...'[email protected];..q.NY.r.5....r..=.=f..@...')6H..&..
..##.o:..@{A3-.;.#.......F..e......u.|.k.F.2.....V# ..Q....C.@.....'..
.....x....I.^o......p..g.W.>.......C.ps......XU....._b.........f.p.
?Tk3l.4^...../.6q..l...VZ..<8...[...Q...,.f-..8r.7#..<7n_E<7.
O.a..0...=Q*!B.."...s.......SJLI... ..v...X.^'b.E..........Q......PZ..
..s..&....M...ve....7...5.,...x.^.F$....T...e.........%.....Q.........
.j.%N."...sX.....=....0......7.Q....fK.[O..?....~..!..........V.......
.LI.......2.P.... I.n..ymw_.. ..Q..zM.q...B%l.;..u..y..ta.L7..^h.e..{K
%x...r}....#.A.l.'.`...xP..d..},.(.\]..B[M....p...&.....).L...i"..<<< skipped >>>

GET /counter/online3.php HTTP/1.1

Host: VVV.expertgh.com

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:28 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.4.12

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 23:57:28 GMT
..Content-Type: text/html..Transfer-Encoding: chunked..Connection: kee
p-alive..Vary: Accept-Encoding..X-Powered-By: PHP/5.4.12..0..

GET /ads/forceadaf.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:26 GMT

Content-Type: text/plain

Content-Length: 1

Last-Modified: Thu, 16 Apr 2015 22:52:29 GMT

Connection: keep-alive

ETag: "55303d2d-1"

Accept-Ranges: bytes

0....

GET /ads/forcead2.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:26 GMT

Content-Type: text/plain

Content-Length: 1

Last-Modified: Thu, 16 Apr 2015 10:04:32 GMT

Connection: keep-alive

ETag: "552f8930-1"

Accept-Ranges: bytes

1....

GET /ads/porc.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:26 GMT

Content-Type: text/plain

Content-Length: 1

Last-Modified: Thu, 16 Apr 2015 11:35:44 GMT

Connection: keep-alive

ETag: "552f9e90-1"

Accept-Ranges: bytes

2HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 23:57:26 GMT..
Content-Type: text/plain..Content-Length: 1..Last-Modified: Thu, 16 Ap
r 2015 11:35:44 GMT..Connection: keep-alive..ETag: "552f9e90-1"..Accep
t-Ranges: bytes..2..

GET /embed/YemiMC0twSQ HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.youtube.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Date: Fri, 17 Apr 2015 00:22:05 GMT

Server: gwiseguy/2.0

P3P: CP="This is not a P3P policy! See hXXp://support.google.com/accounts/answer/151657?hl=en for more info."

Cache-Control: no-cache

Expires: Tue, 27 Apr 1971 19:44:06 EST

Location: hXXps://VVV.youtube.com/embed/YemiMC0twSQ

Content-Type: text/html; charset=utf-8

X-XSS-Protection: 1; mode=block; report=hXXps://VVV.google.com/appserve/security-bugs/log/youtube

Content-Length: 0

X-Content-Type-Options: nosniff

Set-Cookie: VISITOR_INFO1_LIVE=aBk9Gmke8kE; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Set-Cookie: VISITOR_INFO1_LIVE=aBk9Gmke8kE; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Set-Cookie: YSC=c7zhgWqmZOc; path=/; domain=.youtube.com; httponly

Alternate-Protocol: 80:quic,p=0.5
HTTP/1.1 301 Moved Permanently..Date: Fri, 17 Apr 2015 00:22:05 GMT..S
erver: gwiseguy/2.0..P3P: CP="This is not a P3P policy! See hXXp://sup
port.google.com/accounts/answer/151657?hl=en for more info."..Cache-Co
ntrol: no-cache..Expires: Tue, 27 Apr 1971 19:44:06 EST..Location: htt
ps://VVV.youtube.com/embed/YemiMC0twSQ..Content-Type: text/html; chars
et=utf-8..X-XSS-Protection: 1; mode=block; report=hXXps://VVV.google.c
om/appserve/security-bugs/log/youtube..Content-Length: 0..X-Content-Ty
pe-Options: nosniff..Set-Cookie: VISITOR_INFO1_LIVE=aBk9Gmke8kE; path=
/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponl
y..Set-Cookie: VISITOR_INFO1_LIVE=aBk9Gmke8kE; path=/; domain=.youtube
.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly..Set-Cookie: YSC
=c7zhgWqmZOc; path=/; domain=.youtube.com; httponly..Alternate-Protoco
l: 80:quic,p=0.5..<<< skipped >>>

GET /ads/ads3.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:27 GMT

Content-Type: text/plain

Content-Length: 1

Last-Modified: Thu, 13 Nov 2014 20:54:15 GMT

Connection: keep-alive

ETag: "54651a77-1"

Accept-Ranges: bytes

1..

GET /pt-br/ HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:28 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Pingback: hXXp://VVV.expertgh.com/pt-br/xmlrpc.php

X-Powered-By: W3 Total Cache/0.9.2.5

Content-Encoding: gzip
11e8.............<]s.8.......S.'u.....-Yw.cO..'^.....T."[email protected].
.N...\.=]..=...u..DY.-E.leKN.&.F...O..../........t(.....G..q=.}c..^..$
..:;~Mj.*9S4J..2.....8..h.o{...E..Q.....z......KW.FV..8...Zf..PD.N....
.....A....k....d4 ..=..hl?..f.e/.j5..2M.......w.}.i.i..*f.........p.&.
.T%L..;;t7......}....0..wE.....A.......l..Z...e..&....W....~..]......h
. #....muH....1..?..2../].].nF...,d...p!..>..........f..-....'N... 
..G..bb.I..`..1...X...@..?I....}..N.._1.eL..u..=rt@6~h..dr.1#....gQ.{?
..$?..LE .9........SI.o.(.F v..a!...9d,.m.=..2..H..2...]....Dlh!..M...
.. .....b.....u..\.;=*gm0.....y..w..S.g...!.x.%.l.B..}F.../......b...2
K..~.8}.1..U...^..D.$!k.Z.fi..\....2.2W.~Z..._.......=....i.|.h..!....
co..T1g...x.B....).)........w...@<[email protected],.
.hlllmAc?k84?N...F./..'..WI......j..F....X_.mll.u..j/6.j.......'UH.Q..
..f..4H..]^.i>~d.Gn..p.4P....J..^E..T......\B...oy..'..c.j{zWM...x.
o.P.....n....x......<..<4......1.U...c.... .y U:dQ...l.....|.f2L
04.i..~%C..c..?..#v.s.1....YH... ....3...Rp....b.-.?...W..d.....5..9..
.&.......h2m4...*....TW..V.V... ..%../).|j......|*|9d. ..>(&3..!.Rh
......!<JR..}VX.....uS..h.o..................T...}.y...9.!.r<...
^......c{M.d.oJ{.....v{.h.B....o.0.t.i.2......h.2.y0.h.2....h.2.yh...e
..X5..%n.n\........\.d....H......`.C....>KdE.%h...C...s/M|...T....5
..v.GqZt...R....EnIF..[.....6.Z.C.F....Z.h.Fs...I.....3k2.1.2....e.D..
..L.....O..)8.(y....Y......<4......~..Rm.4.-.....9t`}..}......J..F.
.nWi...db&rM.vk%~...Y....E.....8........!Q.Zkx...`..BP....Q.......<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/style.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: text/css

Last-Modified: Wed, 06 Mar 2013 01:35:08 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip
1406.............=ks.....3..p.I.................M?v(...P.JB......../..
%;]..$....s......o>.......x.......S..(.j...X.....BU.._?...77.N.lC..
..K...J7..k...........).P......Z...9Fq..w.UY.....qU.........-Y....H.\.
..).P$.X@."d3;;{xx...VBk..r}......-*....U....(...f...()...8E9^.Te..Au.
.y\......S... .......8.....i.o..}..x.....Q].'\.*&8....ft/.Ci...{..h.Nv
1/...o....B.....P..[R.gE.8M).h...Sx.U.-.."..{2.b...sk..U....}}.......g
..p........Ux.c2C...6&$NVk...Q.)....).L..)7.'....f..8 $.M.x^S....y.R..
.A....f. .is.V4.p....). |..?0...:......-$...Py.......p..B<..e......
...".j.%..j|.Y.T"1....3.d.RD...7.FA.#*....b...g......U.f..'.B~.E....1.
'.u.KB.....|......0.;....C.W.$9.....Q......OJ.L..i....*?... ..........
;.....,Mq!...H0u<P,.E....c..LW8.Iv/`.W..)..p..s1..T.pE..tkM..X ."y.
.y...G.S.LU.8...k.P.."'.....`W.....u......};,.ne..^..K.=...>.f.C..j
$).{p..dO.5t..|...B.L.. j.}E.&....I:..)fE.^Y..MC.}54$g....\ ....\>.
..b.}).....Z......6...J..C.d_...2G'5.....O....3.ZmY....6.d..A.g).0(bA.
........r`...q0..Y.?.zSV$.d@'.c.....O...2Z.f.5....<e.^\..">E..,.
._....R..F...P.Jh<..y.,f2..e)NJ..3.h7.....n.rL.."..%,<(.j......n
...:.i..1<o$.vH..h.V...G.q.A4.f.&..i4....v....w.4.#(M.].....EE.8.=.
k.Y}.. .PNZ.......K3.3.i.31.gyF...j......X.........q..4..L.f....t./...
B(.d#rJj...}m...D...uY.x....h.]0..T...i...T.e......3P#..{......Wd.,M..
..Q.=....H7:0.... bw.2......_.....{'......H... ..2..<..)..M.o......
....../.{..T.J....J.}>..>..!leI.K...w..OAS..c....}..=....p..j...
.^.y( ...:..._..VD.LM.:./.a.....V5.....5A.wLnF;.lH...E..(.B......I<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgTexture.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:30 GMT

Content-Type: image/jpeg

Content-Length: 5891

Last-Modified: Wed, 06 Mar 2013 01:35:30 GMT

Connection: keep-alive

ETag: "51369d62-1703"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.....`.`.....C..............................................
......................C...............................................
........................s.u.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?...LD.kt
P..X.. ....a.x.....#=.Iq....t...;.~^.8..../....1.....2..r.h..B.?......
#..H.m.......?a...@1.&..e0.?z..A....G... z..e.......o...N:..L.f.F....!
.S.......,}B.....B.e.-...%..X......$V..F-.....O..0q.....<.R-.......
..y[$|.f.c.8...........C? )!TE..PN.o.q.)[email protected]$.gT...&
lt;............b....b....e.;|......>a.j}..v/..1d..P..6...Oc.N..d..M
.J...2..!pp.3........n...2F.-...... .wd(......#...Q..)8\.....\.:c..lwF
'...k.C~9.l.;.z.I..U.L..DB....9q......O...#.sJL3&.v..0..G.].....g.RZJ.
.qZI(..3...a...$d....o.k..2..L.r2.0~`.pp{w=j._.G...5H..s...OO......EY.
.K(vH...X.%..a.H....{s...5..rH,;l......:S..SC:.....,I$3.z...H... .._b.
..B....E.. ...y..Z...h..D)....y.R~..RK....1H.m.`....l...3...@.<.-.I
,.5..UM...0q.O.>...>...s#*...|.B.!.8...oNq...Be&.....y.3..Q.=.G.
.SG#F.g..7%D..df".`O ry$u......D.......Hr@.?x........;.|...x.E#.......
.c..'5!..F.2).$.<p.w....Cz...3[..J......b.mb03.....A.^@....d,..<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Page-BgGlare.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:30 GMT

Content-Type: image/png

Content-Length: 49988

Last-Modified: Wed, 06 Mar 2013 01:35:30 GMT

Connection: keep-alive

ETag: "51369d62-c344"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.......~........K....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^..Y.m]v....h."...h..A'Pb'.TV. D."....
....B.!:...5...T.j..B.Q......../.p Q.G.G..Zkw...<..D...5.5...s.....
........}.?....7..9....?..........~`..y...wY.....y.............?6.....
.....0...e...kR....o._....._.R....??6.b...r..8..<....X....F..P...X.
.............^.aJ.T....K...}..q2..?........^y....gm.z.u...........D...
3../..>Y.E...g......?.......y.....z...X{:.5....m....{8~.rm...i.uq..
..........a......?...d..4..>,m...?2...l?0....t.A........a........u.
............a....I}}c..o.....K.o...-....i.j.1....~i,.~......}s..n*..0.
..C...X.........;..3.y..3..............g.........a..P.?5.......m2..W..
.c......um.....f...a...\..H.O...#.0....d..._.s...r....X.\...2y...0m.G.
}.X.c...ii_5...u.^.....?<L........H......U.7....'...a.w...........|
...y.=.....x.. ?....D....A0.j......a.{.ry.8E......q=........^R.5.#.`..
..y.'p.r...2...p._._.Ae.{&..2q...'...??...;.........~.R.z~..a...ph..-P
...O..m.l.a..z.-.|1.0S.....A:...........4d..8..}....m....yC..8...:....
.=..#....W...@`.J0..j..(...a.4xt4....0j.R%.........^..v.......r.(.'$.{
(..A*......I..z..o.....q_..?8.CEy~...P..[@..c.n.....]..(V...V....YU. .
.....xkex..]`..Gg..D..j.6a.8N............0j.;..........!.CJ.C.`g.(.y..
.j...1.....a...S.F..a..C.A..._..C....0.....P.]../...4.*...L(X{....9]..
...srO...q...e.......9..?..[C0.P.:..4.j...v.`.`....=..aTaU...2<....
...k9W"...C..r........[z8...a`..q.........8.N...B...0y......`..km.....
v..{......1....I.j..L..yYq_....].7N.....A!.D........s..a...vLpV...<<< skipped >>>

GET /pt-br/wp-content/uploads/2013/07/PES-2014.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:31 GMT

Content-Type: image/jpeg

Content-Length: 250871

Last-Modified: Thu, 25 Jul 2013 23:22:56 GMT

Connection: keep-alive

ETag: "51f1b350-3d3f7"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

......JFIF.....H.H..../.Exif..MM.*.............................b......
.....j.(...........1.....&...r.2...........i....................'.....
..'.Adobe Photoshop Elements 10.0 Windows.2013:06:04 14:57:43.........
.................l...........^...............................&........
.....(.....................6...........w.......H.......H..........JFIF
.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMS
FT....IEC sRGB.......................-HP  ............................
....................cprt...P...3desc.......lwtpt........bkpt........rX
YZ........gXYZ...,[email protected]....
view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...
<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Comp
any..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1.......
...........................................XYZ .......Q........XYZ ...
.............XYZ ......o...8.....XYZ ......b.........XYZ ......$......
...desc........IEC hXXp://VVV.iec.ch............IEC hXXp://VVV.iec.ch.
.............................................desc........IEC 61966-2.1
 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB 
colour space - sRGB......................desc.......,Reference Viewing
 Condition in IEC61966-2.1...........,Reference Viewing Condition in I
EC61966-2.1..........................view.........._...............\..
...XYZ .....L.V.P...W..meas................................sig ....CRT
 curv.......................#.(.-.2.7.;[email protected].^.c.h.m.r.w.|.

<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-right.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:33 GMT

Content-Type: image/png

Content-Length: 248

Last-Modified: Wed, 06 Mar 2013 01:35:24 GMT

Connection: keep-alive

ETag: "51369d5c-f8"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.......Z.....y\<.....sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<....IDAT(S..I..0.D....`4Q.<.....jZz.Gp...
*...!....o.$.0..&.....{1....I..,.e....m....".(....y...D...Z .,.y......
..(DY......u]..iD....a..W.......".n....IEND.B`.....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/item-center.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:33 GMT

Content-Type: image/png

Content-Length: 297

Last-Modified: Wed, 06 Mar 2013 01:35:24 GMT

Connection: keep-alive

ETag: "51369d5c-129"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.......Z.....y\<.....sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<....IDAT(S.....`...y!..Ca.9a.g....=.....V..)
.|p..!.m.......8...y.?#...u].eY.y..UU?.4........C....,..$.Ui..Y..EQ.eY
.UU.u].M..m..]..}...0..8..4..a..i..e..m.............A...3Q..q..I....&l
t;._U.[y.I:g.8....IEND.B`.....


GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-c.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:33 GMT

Content-Type: image/png

Content-Length: 257

Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT

Connection: keep-alive

ETag: "51369d68-101"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR...2...2......?......sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDAThC.....0.C.2].....p.,J..8&Rl..r.9...s..
.;v..I.A..$GV.$G8R..h..h.......#v._7G.B-.B-......./../..oBB..D.F-G..&=
9.....HC..'G.....i....H.^.v.G./...R<......IEND.B`.HTTP/1.1 200 OK..
Server: nginx..Date: Thu, 16 Apr 2015 23:57:33 GMT..Content-Type: imag
e/png..Content-Length: 257..Last-Modified: Wed, 06 Mar 2013 01:35:36 G
MT..Connection: keep-alive..ETag: "51369d68-101"..Expires: Thu, 31 Dec
 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Accept-Ranges: b
ytes...PNG........IHDR...2...2......?......sRGB........ cHRM..z&......
........u0...`..:....p..Q<....IDAThC.....0.C.2].....p.,J..8&Rl..r.9
...s...;v..I.A..$GV.$G8R..h..h.......#v._7G.B-.B-......./../..oBB..D.F
-G..&=9.....HC..'G.....i....H.^.v.G./...R<......IEND.B`.....

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-s.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:35 GMT

Content-Type: image/png

Content-Length: 641

Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT

Connection: keep-alive

ETag: "51369d5e-281"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...<...<.....:..r....sRGB........ cHRM..z&......
........u0...`..:....p..Q<....IDAThC..ok.0..........&....".....r. g
L.......-i./...Z/.........Dz..h!...Qj......=...5....fh..!.3...9?..9.9.
..gC.,~.........8V...P`qQvAct......!8.t1.])..%.p..F. mW.....F/.A......
~..'.Fs7....|7.`V....c...<..o.4i..*..;3.I.c.........F8.Y..U..}.c...
..Lui.t..._K......m........pP.u.i.i.i.i.iI.}T.V...............u]_..J..
A[...j...eY~J....m./6p.......3.....^.V.$!..........d...s.u?R#.4......L
....J..x.........g.<...@[X......h.M...Z:.dY."9.!g..7.z..9m..$.v/%..
...hP>..5.....V.Kz.V....po...=...l.F......v..J;....i-..."aK..d.....
.;.5g.C._.8N.........IEND.B`.HTTP/1.1 200 OK..Server: nginx..Date: Thu
, 16 Apr 2015 23:57:35 GMT..Content-Type: image/png..Content-Length: 6
41..Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT..Connection: keep-ali
ve..ETag: "51369d5e-281"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..Cach
e-Control: max-age=315360000..Accept-Ranges: bytes...PNG........IHDR..
.<...<.....:..r....sRGB........ cHRM..z&..............u0...`..:.
...p..Q<....IDAThC..ok.0..........&....".....r. gL.......-i./...Z/.
........Dz..h!...Qj......=...5....fh..!.3...9?..9.9...gC.,~.........8V
...P`qQvAct......!8.t1.])..%.p..F. mW.....F/.A......~..'.Fs7....|7.`V.
...c...<..o.4i..*..;3.I.c.........F8.Y..U..}.c.....Lui.t..._K......
m........pP.u.i.i.i.i.iI.}T.V...............u]_..J..A[...j...eY~J....m
./6p.......3.....^.V.$!..........d...s.u?R#.4......L....J..x.........g
.<...@[X......h.M...Z:.dY."9.!g..7.z..9m..$.v/%.....hP>..5..<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Sheet-h.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:35 GMT

Content-Type: image/png

Content-Length: 3881

Last-Modified: Wed, 06 Mar 2013 01:35:26 GMT

Connection: keep-alive

ETag: "51369d5e-f29"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.......<......3.M....sRGB........ cHRM..z&.........
.....u0...`..:....p..Q<....IDATx^...m.Q..... Hc........ei%.X5.....Q
@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]
@[email protected]@[email protected]@[email protected]@[email protected]@.....x._=.0....0....0....0...
.0....0....0....0....0....0....0....l.....{4`....`....`....`....`....`
....`....`....`....`....`.....60...{4`....`....`....`....`....`....`..
..`....`....`....`.....60.3p.h....0....0....0....0....0....0....0....0
....0....0....0.m........`....`....`....`....`....`....`....`....`....
`....` a ... ........`....`....`....`....`....`....`....`....`....`...
..7`.......`....`....`....`....`....`....`....`....`....`....` a .....
/.|.....`....`....`....`....`....`....`....`....`....`.....6`.......`.
...`....`....`....`....`....`....`....`....`....` a ... ........`....`
....`....`....`....`....`....`....`....`.....7`.......`....`....`....`
....`....`....`....`....`....`....` a ...../.|.....`....`....`....`...
.`....`....`....`....`....`.....6`.......`....`....`....`....`....`...
.`....`....`....`....` `....G...`....`....`....`....`....`....`....`..
..`....`....`..m....>.....0....0....0....0....0....0....0....0....0
....0....0.......`.?.3....0....0....0....0....0....0....0....0....0...
.0....... & ..qq....0....0....0....0....0....0....0....0....0....0....
......0....0....0....0....0....0....0....0....0....0....0.@...;....m\.
0....0....0....0....0....0....0....0....0....0....0.......;..0....0...
.0....0....0....0....0....0....0....0....0.0`..b..k..6.0....0....0

<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/nav.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:36 GMT

Content-Type: image/png

Content-Length: 1149

Last-Modified: Wed, 06 Mar 2013 01:35:24 GMT

Connection: keep-alive

ETag: "51369d5c-47d"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.......&......t.F....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^..;N.q...3;.t......>...!\..t'....K
[.h.......?Jc"....<...0a&.<.I&3.g.]..i.z7.......{.. ....(....(..
..(...|y...........^....F..m[...0....0....0.../...v....q;.L..x.oK.....
`....`....`..............-M...`....`....`...n.....;n.?~<...mi.0....
0....0.....0.}>.?~7..G...-M...`....`....`..B.........X,.4`....`....
`....(h.&.....}...0....0....0.....|[email protected].....
[email protected]`....`....`.....j ..m...0....0....0...U....q...
0....0....0...U....I...0....0....0...U....i...0....0....0...U..n.K....
.`....`....`...8;;K.....`....`....`...8??O.....`....`....`......H.....
`....`....`......L.....`....`....`......J.....`....`....`...888H.....`
....`....`...8<<L.....`....`....`...8::J.....`....`....`......M.
..`....`....`[email protected]..`....`....`.......x.....
[email protected]`....`....`.....j ..i...0....0....0...U..l6K.....`
....`....`......i.0....0....0....T5..."M...`....`....`.......4..`....`
....`[email protected]`....`....`.....j ..u...0....0..
..0...U....u...0....0....0...U....n.L...'....IEND.B`.HTTP/1.1 200 OK..
Server: nginx..Date: Thu, 16 Apr 2015 23:57:36 GMT..Content-Type: imag
e/png..Content-Length: 1149..Last-Modified: Wed, 06 Mar 2013 01:35:24 
GMT..Connection: keep-alive..ETag: "51369d5c-47d"..Expires: Thu, 31 De
c 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Accept-Ranges: 
bytes...PNG........IHDR.......&......t.F....sRGB........ cHRM..z&.<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Block-h.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:36 GMT

Content-Type: image/png

Content-Length: 2044

Last-Modified: Wed, 06 Mar 2013 01:35:36 GMT

Connection: keep-alive

ETag: "51369d68-7fc"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR..............WSp....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^.....1.D..H`-. ......".n.]..P..y=.f.}
...(....(....(....(....(....(....(....(....(....(....(......<..x4`.
...`....`....`....`....`....`....`....`....`....`.......{....0....0...
.0....0....0....0....0....0....0....0....0...i....>.?...0....0....0
....0....0....0....0....0....0....0....0......_.....0....0....0....0..
[email protected].  ..qq....0....0....0....0....
0....0....0....0....0....0..........0....0....0....0....0....0....0...
[email protected].  ..qm....0....0....0....0....0....0....0....0
....0....0..........0....0....0....0....0....0....0....0....0....0....
[email protected].  ..qm....0....0....0....0....0....0....0....0....0....0......
....0....0....0....0....0....0....0....0....0....0....0.@..Yk....0....
0....0....0....0....0....0....0....0....0....0...i........`....`....`.
...`....`....`....`....`....`....`....`...... V@L_z.|.F.0....0....0...
.0....0....0....0....0....0....0............3....0....0....0....0....0
....0....0....0....0....0.......A....%....x..0....0....0....0....0....
0....0....0....0....0...i........0....0....0....0....0....0....0....0.
[email protected].  ./=|.k#..`....`....`....`....`....`....`....`..
..`....`............`....`....`....`....`....`....`....`....`....`....
`...... [email protected]......`....`....`....`....`....`....`....`....`....`...
..w.w.w..`....`....`....`....`....`....`....`....`....`....`....;.....
.>.....0....0....0....0....0....0....0....0....0....0...y......

<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Button.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:37 GMT

Content-Type: image/png

Content-Length: 2720

Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT

Connection: keep-alive

ETag: "51369d66-aa0"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.......`.............sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^..]hT.....2JHp.y.....C.D..I.$L....5.M
"b..nK\ku....L.IBh6....^,t)...R.].n.m....B)...*..Vm.......p&H._gz.....
.$.......33._z.-S......g.......H6...&.:V..r%.."I1...`...H.@.</_.F..
, nz..<q.D.x..7.G/=...5..0...` ...c.>........S.'......k.|wh`j...
....&.......o"t...`..)..............u........d.>}.....=...7....`...
.c...7.|....26...N..g.....?....)!t...`......e.LD.u_.%$)....j..F...../.
./...`.....o..:..K..L.& ...\......0...81..MX6fKrl..c..u..0...`........
,.:...0.....c...k....`...pa..c. cC.............k.sB.....0... .&G.&t...
`.......WY.9...`...p`..c.Z.&t...`.........yN...............!t...`....X
.........`...pa.:6O>..B.....0...ul.3.0..0...`.....<.E..:...0....
.c........0....0`....<`..`...........O.....0....0.........(...'.B..
...0.........,.......o.{?.$t...`.......<3...H.e.k.3......V....~...3
....`....c...p..o.5'.R#.,I.r%e...n.te...|.c...LB.....0.....O....F.....
..-U........%....rm4zyA...:...0.....~......;dSB.-.....}..X.GR..g.sm..0
...` .....M...H./..>.....zk..D........5.....f..,...Y.T.'.:...0..T..
Eg).V..r.C."....^#t...`...3P({./Y......]...3g:'&&n...<...5..0...` .
.....e?n....=....d-_...K..b..|......2.....0...` %......h.....u.....![.
.....w........B.....0........g....$.HK.......u..q...J.......|....6SSS.
e_B...:.... W.,ttt....B.....0.....#....)...K.6./.....`.........,}...M.
........0...81`..H$b..`.........ill4..0...`.....444.B.....0...ul......
.`...pa.:6.p..:...0.....cSWWg..`............5..0...`.........B....<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/BlockHeader.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:37 GMT

Content-Type: image/png

Content-Length: 1068

Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT

Connection: keep-alive

ETag: "51369d66-42c"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR..............]......sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^[email protected]..
p.&.M.L..FbH.y.>././.....iO.Y.'...9.v..............n.e.|...c.h@....
[email protected]>......F?......U.......l.'''qtt$:`....`....`....x
r.u...z~~~W......7...z.......q......`....`....`....[..&l..e..}......v.
.........`....`....`..........E...;;;[email protected]..
}.wk........`....`....` ...W..i.t.m..u.N&.....0....0....0.@*.e.F.....'
:`....`....`....Hg........0....0....0....d3.....N...`....`....`.....h.
v<.......`....`....` ..6l...Ct....0....0....0...ak..A....`....`....
Hm........0....0....0....d3.....f...`....`....`.....h.vcc#D..0....0...
.0......a........`....`....`..l...]\\[email protected]
....0....d3.....R...`....`....`.....h.vyy9D..0....0....0......a...Ct..
..0....0....0..@.... D..0....0....0......a........`....`....`..l...]]]
[email protected]...`....`....`.....h
.v4.......`....`....` ..6l...Ct....0....0....0................`....`..
..` ...i..g.O.P=......IEND.B`.HTTP/1.1 200 OK..Server: nginx..Date: Th
u, 16 Apr 2015 23:57:37 GMT..Content-Type: image/png..Content-Length: 
1068..Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT..Connection: keep-a
live..ETag: "51369d66-42c"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..Ca
che-Control: max-age=315360000..Accept-Ranges: bytes...PNG........IHDR
..............]......sRGB........ cHRM..z&..............u0...`..:....p
..Q<....IDATx^[email protected].&.M.L..FbH<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/rssIcon.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=3


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:41 GMT

Content-Type: image/png

Content-Length: 2717

Last-Modified: Wed, 06 Mar 2013 01:35:22 GMT

Connection: keep-alive

ETag: "51369d5a-a9d"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR... ... .....szz.....sRGB........ cHRM..z&............
..u0...`..:....p..Q<... IDATXG.W.p.....H6..!...B4..h...u...k..N....
.P.......$...$7A..T....H..$!...n....$$.a7{.O..Op@....;..w......|..&...
O.Q...i..z...ns......_. ...|..Gqsk..Qq*.....h.h.(.............^!.`_C{.
.[G...y{ ..3.Og.&.-l......>.f....-.Zw.-.$Ww.Q ..*&j.j....W......@ ;
.H..$N.b...c.M~.......;...OG.Gc..e.wO.".._ ...@c...{.N.-e..D.[...n.:..
.....(.6..o4..'.q/...dL.P..DOEu..WEo.G....X.f...$..rfsG..).:..........
..NW.......M`6.L.7..... [email protected]..,....K
....p............IF6....&..#.._(..1.......?.D. b.v....S.............~.
...K.f#...a [email protected]... .cbIJ....]#...W~....
(X.0M...F... -..H...O..@..\Z..t..r..f.o.=.G c"..d..Ev......p.S....p...
}.p(.}........0....E...5.....L.t.-......nUK<W.&L.....{..Q.6N.".mr72
.#&C...4../...d..q .....g....F.............2.U.5.C...E....5Efh7w......
.N.. d<i....-#`..d.......#.r.V.=......1t.-.kg...'..5c....9...Q.6...
..}...`.&.y..g...KP.B.\..R..%.=(G.K:)>...%.e=..R.,.......H..5.."...
....I({..M.]...H.wa?.H...........?.im..C4......f8...:.. ..1t.EK...}..8
.p.....:.u..!.v*..NA...v.W......|J.....F..d|. V....l..6.8t..;.`o....O.
[email protected]. .}....q..........~6.. ..B.JS.<.......~5..HQq.}....._
....;p.Y..a'....rq.4.t....#...N..\.......'.*..~...d*.....w.\_..>.. 
.A.-8N..bL..Xj.z..nP..........J..m.....S.UF.b...[.HG.....IJ...F...lW`!
}..N8..~.o.7...N..>..[.Vx.b...[M:.&AH..".>d....K.......a..S.H V.
6*.L^.p.1.vW`@[email protected]*..]^..V..\...QB=`.....^.e..p<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/Footer.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=3


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:41 GMT

Content-Type: image/png

Content-Length: 2548

Last-Modified: Wed, 06 Mar 2013 01:35:34 GMT

Connection: keep-alive

ETag: "51369d66-9f4"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.......d........!....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDATx^.. rTk.F.....Z.E#.... q..CAF".Bddd.;.
P..}.....*.PG....X.irs<....\..\..\..\..\..\..\.z.-l}....0....0....0
[email protected]}.w..c....`....`....x..2. 0....0....0.......[...Qt..`....`....` m
@....\^...*....0....0....a l.-..0....0....0.6 l.N..p.,\....0....0...e.
.V..[..`....`....` m@....\^...*....0....0....a l.-..0....0....0.6 l.N.
.p.,\....0....0...e..V..[..`....`....` m@....\^...*....0....0....a l.-
..0....0....0.6 l.N..p.,\....0....0...e..V..[..`....`....` m@....\^...
*....0....0....a l.-..0....0....0.6 l.N..p.,\....0....0...e..V..[..`..
..`....` m@....\^...*....0....0....a l.-..0....0....0.6 l.N..p.,\....0
....0...e..V..[..`....`....` m@....\^...*....0....0....a l.-..0....0..
..0.6 l.N..p.,\....0....0...e..V..[..`....`....` m@....\^...*....0....
0....a l.-..0....0....0.6 l.N..p.,\....0....0...e..V..[..`....`....` m
@....\^...*....0....0....a l.-..0....0....0.6 l.N..p.,\....0....0...e.
.V..[..`....`....` m@....\^...*....0....0....a l.-..0....0....0.6 l.N.
.p.,\....0....0...e..V..[..`....`....` m@....\^...*....0....0....a l.-
..0....0....0.6 l.N..p.,\....0....0...e..V..[..`....`....` m@....\^...
*....0....0....a l.-..0....0....0.6 l.N..p.,\....0....0...e..V..[..`..
..`....` m@....\^...*....0....0....a l.-..0....0....0.6 l.N..p.,\....0
....0...e..V..[..`....`....` m@....\^...*....0....0....a l.-..0....0..
..0.6 l.N..p.,\....0....0...e..V..[..`....`....` m@....\^...*....0....
0....a l.-..0....0....0.6 l.N..p.,\....0....0...e..V..[..`....`...<<< skipped >>>

GET /pt-br/wp-content/themes/the_world_is_listening_ote049/images/subitem-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.expertgh.com

Connection: Keep-Alive

Cookie: UOLAFpg=3


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:44 GMT

Content-Type: image/png

Content-Length: 137

Last-Modified: Wed, 06 Mar 2013 01:35:22 GMT

Connection: keep-alive

ETag: "51369d5a-89"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

.PNG........IHDR.......,......'.a....sRGB........ cHRM..z&............
..u0...`..:....p..Q<....IDAT.Wc.....@7....?....c.U.D.......IEND.B`.
HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 23:57:44 GMT..C
ontent-Type: image/png..Content-Length: 137..Last-Modified: Wed, 06 Ma
r 2013 01:35:22 GMT..Connection: keep-alive..ETag: "51369d5a-89"..Expi
res: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..
Accept-Ranges: bytes...PNG........IHDR.......,......'.a....sRGB.......
. cHRM..z&..............u0...`..:....p..Q<....IDAT.Wc.....@7....?..
..c.U.D.......IEND.B`...

GET /format2.html?adBlockCount=1&page=1&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1& HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:06 GMT

Server: Jetty/4.2.24 (Linux/2.6.18-238.19.1.el5 amd64 java/1.6.0_21)

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Language: en-US

Content-Type: text/html; charset=ISO-8859-1

Set-Cookie: numpage1=1|153627;Path=/;Expires=Fri, 17-Apr-15 00:39:06 GMT

Set-Cookie: clkct=/dQeJw2lvT15UOaCEq90jA==;Path=/;Domain=.siga.uol.com.br;Expires=Sat, 18-Apr-15 00:22:06 GMT

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 12267

Connection: close
...........}......s....5......b'.....;$..S&$!.B.Z...........4.p#B.....
.1.v/].....w...w.....b.0.vK.R.._..../ww..........3,.h.R.\.g1..`.....&P
".....\.|...3 2........X.({...0......./.Q..x.....K.b....(..&..[.....I.
XQ...2..h.W........1zI)*..xU..d..;".....k..e.i~.....7..:...0.5p.......
...)....f.R.e ......d.`..$.......n1p.j.r.CW....SMK..WX....en.h.#u..E.Q
,.y....4Vi..hDj.....P.o.N..'..4..o].?(...:..9....sD;......p.yF[..v....
.q.."[email protected].>...8....b....1.7.p|.... .R..
.P.....!....U..!.nA................A....BAv3g..e.$.0..:..u0^G.........
Zj.......t......r..b.$.h.,.-.....H.....U..q....cH ..a.>s....e.....Q
.F15. ......GT.).....a./.6............B........H...[,@ ,.......Aa<.
.>C.E)H4..t.y...v..Ra..ef.L)@..eI.Z...K...:.{USx......w.6.... 4~.2Q
..z.b...[j...ym(.$.."F......wK..........h.i..b.(.l8..~.a...X.=.....|..
..~...7Pt.EI`.o.v...."9.X..h................d`0..*....OP...i.4p......a
@.@[..)...x. ........s..K.._..^.e_._....G..:`)...s8..DEU& e..M.U}n.G..
....k....8/...`.>.}.x....^`EN[[email protected]..=....{.-.5
g\~......_1...a.....s....s....`.~. .W$d$f....q...$...[0wHE...gD..yc.w.
..$3...........~....e........ ."^.d...b..........3.b........}.S.t...h.
..`=.=...v...5.......s.=hd..7k...w..E3I:E...l4....."...T"...D4..u.r...
..3.........&.;N...zQ.....;..|.Yi.}r....Vn....:.............5...l|P...
........[... ..$..(>mOk.mc..Q.Cv.SK..NWd...R.....Q.Y.6.E*]\....1...
.....b..L<*..*&.7.X....|....5.-I.....3..Q.).J..i....D......U.t...!.
..f].....[...2Z1 ..!!..{B..T...0...Q.,J.6...Q.?...<..$..t.l...;<<< skipped >>>

GET /simgad/17981107690478385190 HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Mon, 13 Apr 2015 11:33:24 GMT

Date: Thu, 16 Apr 2015 21:11:06 GMT

Expires: Fri, 15 Apr 2016 21:11:06 GMT

Access-Control-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 132543

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 11480

Alternate-Protocol: 80:quic,p=0.5
GIF89a..Z........iPzzz................vj...y.....eee...<........[.&
...T..e.....T.".....hQ.....111VVV.........}...YMGGGe.2J....L!!!u......
.x...................Y..............je.VO......~................n..y.t
i.ke..............U....)........lj..y....cM..........M..kZ........'...
rS....U!...........v...............y...Cq..SQVL...b0i.......l..zf2.'..
.....[)#.Z.?,.....1-................|s....y..E<.g.. (..............
j.....uZ...,*.......kh.......zz....ub......aK$>..zw..S0............
.#......j......................x@..........................^rY`..o....
.....G..w........P.....P5Cd...........:[email protected]}.........d..)\....a.
=....!...\....@;..?I..........~O...........R..............pppl..q..v..
J..v..............<<<......f^:...R...........2,@...^=W0..C ).
.................gNbE........!...x...!..NETSCAPE2.0.....!..xmp dataxmp
.?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmta 
xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2
012/02/06-14:56:27        "><rdf:RDF xmlns:rdf="hXXp://VVV.w.org
/1999/02/22-rdf-syntax-ns#"> <rdf:Description rf:about="" .xmlns
:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.
com/xap/1.0/sTpe/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/
" xmpMM:OriginalDocumentID="xmp.did:0680117407206811822AA8243A6AE65" x
mpMM:DocumentID="xmp.did:112900AAD6D511E.4940C313B75A05FB" xmpMM:Insta
nceID="xmp.iid:112900A9D6D511E4940DC313B75A5FB" xmp:CreatorTool="Adobe
 Photoshop CS6 (Macinosh)"> <xmpMM:DerivedFrom stRef:instanc<<< skipped >>>

GET /pagead/images/abg/pt.png HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: image/png

ETag: 7735524722462771930

Date: Thu, 16 Apr 2015 17:21:44 GMT

Expires: Fri, 17 Apr 2015 17:21:44 GMT

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 2886

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=86400

Age: 25243

Alternate-Protocol: 80:quic,p=0.5
.PNG........IHDR.............s.."....IDATx..........w.VVV... pw..%....
.......dqX...K.~....OA6=5===..h.........|3...../_.(_|......../> |.C
.c.W...._)W?.....j@|... Ie........:> ~q....z...z...JMM..$BIHIS....b
..=..............CU.b.TLL.%...S.:uRG...-..}...\.r...s?.~.....w.,c.y?I.
.OV..)...4-....D.1.....%%%E..?>..u..U.J..8..wo....[._..5...?~<..
5.y.e.E.$.]..GWt..q....'J..=-..6l.z..A.Mz....<y...-...2e.....A....d
.*%.zZ.....%....cd|.H..".e....X.g....8...m.6.[.P!......F. 4..v........
....(..)..0 n...&M...n.......U...W..=...}...~......c)_..6.Q.FEd\...s..
....k,Y.Dm..A].rE%''.."?~T'O.T V.Pk..Q..\.I....o...;w.E..........}>
..N].x1.........`..{..bB..(.4...."..~.E.v.a..'... .....^.....G.x.={.r.
.....2P....6.....^P!h..17o.T....:..Z.|.......]..6T..x..%K..!.>{.lH.
.?.....c.^..X......=..."[email protected]...]....{...#K.
J.{..i.....>}.^.z..ez.".s...S........].v.|[email protected]....;v
,`..I...3FG#"......'.'@....&M.... V...(.r.JU.B.}.[.n.X..T......C.E.o.'
..4 .._._.....q..z..<.aW.G...W...{bb..c...?}....{.p,..@.}.?..Z..N..
.m>.I3.?4..!..P....!..[.....u...O..p...m..$`6.{....>...#.[.hQ}~.
..As..1.2V.O.....iS..o.......Bl.r..A......t.....H.u....).F.Y1.s2w....i
S...^y.K......w..&..B...T..3=v...u..Wj:t.....K....kP.:n.8M.D.R.J..9Q&8
.|T...v..7.....SG..};.:...9r..u.Rur..S.Zz..M......8......:..D[.1b.18..
e.j...=..^[email protected]`...i:e.:=.p.F.Y{...W.........u.....3..1....[h'\..
...l.'N....I..H."..D.....r....S.O..l.2K.:......Sm .........x...S.^.Z..
t...#....P#:.I1......-[.N.{.r.......9..u..]...C.C.......1`.5.5Fg..<<< skipped >>>

GET /bg/PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg.js HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pagead2.googlesyndication.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript

Last-Modified: Mon, 16 Mar 2015 16:50:38 GMT

Date: Thu, 16 Apr 2015 18:26:13 GMT

Expires: Fri, 15 Apr 2016 18:26:13 GMT

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 5890

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 21375

Alternate-Protocol: 80:quic,p=0.5
...........;.w.....|.r."\..6..$i.v.~'%t.l.G..bL.[..wF.c.....g.X.F#i.3r
.>(.D..2..K...GI!.....0.a8....Q...`{|...R8...~.........."xz.=8>.
..~.=........=\D~2.F6.!.yh......K..9...,3..d.G.....I...7C.:.F." ..5(..
[email protected].$.-."4`#....IT...b..[.....,Y..o......L..il.}'..(..J.`.3.O..
MH.....z:..U....X.........X......V.....Xr7..a.Sk.}.~b...#\...$.'<..
. ...Q..8.X.M.7...*x8.3....i2...d.!.'...y..R....._.......7 .}!..LnEB-.
V...D./.,)...pl8.D`....._.7....8.{>?..".^........Yd...fO4..~w......
....2\.V".........=..........p.'.. .s&...2].$..R.w.^.m...s[...n.......
......'..I......,..b........0t..o{.....Z]0.Z!...f..,l#.`......x.~5.DKi
...e.....w..W.o..Mz.Q..............C........s...^}x~...I.U...o....p6&l
t;...8...c....;hY`&...:....m...yw...8..<.....)..!.>....g.p.y.={T
...#E.tLC.. :...."X.....,...cU....8qb1../........[^........(.$o.4...|.
^.d.\.[.X<....CVmW...;.=,....L.p.Zf.1.M3b....vf[.....".O...Z#X..'..
`.4..H1pL..> ...h..T..............;..k{[email protected]....;Ab..kk
L5..f.....)v...x...IHV.....w.V...nh.$.^rV......TB.Pj......>|p...3.^
.;X..F...{.................)d\...u..........#..'..AF...n.uy..........'
.'O.=....W...}....O....}....m4.|../...*.'.......n...k>z._~.,.... A.
...H......y./'..Y.0............R......`...!`I...<>?.P.....X..z..
....[...Z.4\..8.......]...~.<`.e...lG..\......pk.Z.A3..f}.xH.g:2...
..r..a..NA(.$=.2..Z.#..0.s.7./e._.1...<....a....../..m,..N....3W.&g
t;."&..T.32...`p%i.%.X..0d...y.0...../....[$.4R......e_N."...8.....p8.
fD...B..K....N...3}....'q./.,j.....N.........c..<.4........r.a\<<< skipped >>>

GET /plugins/like.php?locale=pt_BR&href=https://VVV.facebook.com/pages/Expert-GH/565095496889408&width&colorscheme=dark&layout=box_count&action=like&show_faces=false&share=false&height=65 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/fb.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.facebook.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXps://VVV.facebook.com/plugins/like.php?locale=pt_BR&href=https://VVV.facebook.com/pages/Expert-GH/565095496889408&width&colorscheme=dark&layout=box_count&action=like&show_faces=false&share=false&height=65

X-Content-Type-Options: nosniff

X-UA-Compatible: IE=edge,chrome=1

Content-Type: text/html

X-FB-Debug: zdMJ2OkR9dhkOSl04aHUDaw4hPwk2PGIiRD2rdmBD8mmatUh4iZmbvkeIyfo2eVkcMQsepue4u7jZqcZp0F3CA==

Date: Fri, 17 Apr 2015 00:22:02 GMT

Connection: keep-alive

Content-Length: 0
HTTP/1.1 302 Found..Location: hXXps://VVV.facebook.com/plugins/like.ph
p?locale=pt_BR&href=https://VVV.facebook.com/pages/Expert-GH
/565095496889408&width&colorscheme=dark&layout=box_count&action=like
&show_faces=false&share=false&height=65..X-Content-Type-Options: nosni
ff..X-UA-Compatible: IE=edge,chrome=1..Content-Type: text/html..X-FB-D
ebug: zdMJ2OkR9dhkOSl04aHUDaw4hPwk2PGIiRD2rdmBD8mmatUh4iZmbvkeIyfo2eVk
cMQsepue4u7jZqcZp0F3CA==..Date: Fri, 17 Apr 2015 00:22:02 GMT..Connect
ion: keep-alive..Content-Length: 0......


GET /plugins/like_box.php?app_id=&channel=http://static.ak.facebook.com/connect/xd_arbiter/KvoNGODIqPG.js?version=41#cb=f3f57aed19c7214&domain=VVV.expertgh.com&origin=http%3A%2F%2FVVV.expertgh.com%2Ff3762ccc680f19e&relation=parent.parent&container_width=164&header=true&href=http://VVV.facebook.com/pages/ExpertGH/317402498295251&locale=en_US&sdk=joey&show_faces=true&stream=false&width=184 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.facebook.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXps://VVV.facebook.com/plugins/like_box.php?app_id&channel=http://static.ak.facebook.com/connect/xd_arbiter/KvoNGODIqPG.js?version=41#cb=f3f57aed19c7214&domain=VVV.expertgh.com&origin=http%3A%2F%2FVVV.expertgh.com%2Ff3762ccc680f19e&relation=parent.parent&container_width=164&header=true&href=http://VVV.facebook.com/pages/ExpertGH/317402498295251&locale=en_US&sdk=joey&show_faces=true&stream=false&width=184

X-Content-Type-Options: nosniff

X-UA-Compatible: IE=edge

Content-Type: text/html

X-FB-Debug: YITrtUl6N97iHveXqd4C8JlVm46NJ7c0m91IXRP56RfHHJEs5YKO20tCCiPfq6sQF54nzxmFHbB6PjdQ52gk8g==

Date: Fri, 17 Apr 2015 00:22:16 GMT

Connection: keep-alive

Content-Length: 0

HTTP/1.1 302 Found..Location: hXXps://VVV.facebook.com/plugins/like_bo
x.php?app_id&channel=http://static.ak.facebook.com/connect/x
d_arbiter/KvoNGODIqPG.js?version=41#cb=f3f57aed19c7214&dom
ain=VVV.expertgh.com&origin=http%3A%2F%2FVVV.expertgh.com%
252Ff3762ccc680f19e&relation=parent.parent&container_width=164&hea
der=true&href=http://VVV.facebook.com/pages/ExpertGH/31740
2498295251&locale=en_US&sdk=joey&show_faces=true&stream=false&width=18
4..X-Content-Type-Options: nosniff..X-UA-Compatible: IE=edge..Content-
Type: text/html..X-FB-Debug: YITrtUl6N97iHveXqd4C8JlVm46NJ7c0m91IXRP56
RfHHJEs5YKO20tCCiPfq6sQF54nzxmFHbB6PjdQ52gk8g==..Date: Fri, 17 Apr 201
5 00:22:16 GMT..Connection: keep-alive..Content-Length: 0..

GET /images/i/b19/3841_211.gif HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d|||n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: is.luxup.ru

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 17 Apr 2015 00:21:48 GMT

Content-Type: image/gif

Content-Length: 109791

Last-Modified: Thu, 19 Mar 2015 10:50:11 GMT

Connection: keep-alive

Expires: Sun, 17 May 2015 00:21:48 GMT

Cache-Control: max-age=2592000

Accept-Ranges: bytes
GIF89a,......M(....MG/....tL5J.4&$l7*mG2..m#G ...&$.%hClOK........... 
NSj5..D..H7E..q....,..P(.gPjt..pO.^3...lkq.#...U..J..3GM....'#".. Gl..
..V.....I.......J..w3%.(.!...E5564%...Wh.s..55.....WG..s...D6#f#. ...r
1X56-.M..n.rd...........GSq%F&%Wdt.yg!6#744.N......U.J.....1%.j.fYi..)
.....]...g..FED....j3.J.WDE.4#o.Z..wG...S..DCWf. ....o.mdT.G%V..0f.Z
VW'3.V4%nN.........Tw7.g...5!{..5(3..(.p......(.V4V.....VGV.#.q..6..G.
.x...U5$..WUD...H)2...V'!.E$!..y%...fe...ZC#e.U.%$..oo.!..h!...-#'.%..
lc-..i!..WfP6....hG."(4.)...H4%(/..f.W(37.....Uo.u.c2.8$...y4.........
.N..v..r$27f..)..OZ...m.L..u".. .....!.Z&...)..v./y#...FS(3GTZC..P.*..
z..Q..lHTC.....7....F5r]....h|..:M...{..T.0!.......U..-g.(..W.....g...
.."U..)..B.....{9.....Xv...k.H.........^;...[..y............f..3.)....
.#{.......{!..NETSCAPE2.0.....!...2...,....,.......e.8%#.A....:q.....N
.x..D...bH...IF../b\[email protected]#..
0e..j`[email protected]&.I.'..(c......v @...*Tq.:(a.M..%..(....7.^.y...
..i. [email protected]..@. ....g....9G..p.,..... p.l..u..%.i..m.A.S1|...c`..&.'Tn
.....O1h...H.T.l...@#......5.`A.US.4.s"..'......U.5.F.....%J..SD..rU*{
L.]*..W...`..H.td!....E.5....p....o9@....@.\([email protected]. ..a.H&...
...(.Y..4Hv...O.`V..px..>..E....Z..a...;]..EdN..t....L....In&..M.p.
.E4}$...i...4..Gq)...M.U5.q.-:..455g.,.XU.l&..x..wiS{.$... h.&....U...
..[U.W.}N.....v..2...."$......h.].|"......`o@C#b.D.B.=J....=f.c.\.....
F.......4. G..\..W...D#...%.....o..<.Cn......4_..IW....i.E{b...4.;_
Q.N'[email protected].&t.J/....S..(Og..!..~4U........@.....$.<<< skipped >>>

GET /HSUpdate/HStest/x86/ahn.ui HTTP/1.1

Host: path.pointblankonline.com.br

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Fri, 17 Apr 2015 00:20:55 GMT

Content-Type: application/octet-stream

Content-Length: 2830

Last-Modified: Thu, 16 Apr 2015 01:26:36 GMT

Connection: keep-alive

ETag: "552f0fcc-b0e"

Accept-Ranges: bytes
[UPDATE]..EngineDate=2013.03.01.00..BuildDate=2015.04.16.01..V3_ENGINE
=2013.03.01.00..BRAHMA_ENGINE=2013.03.01.00....[AUTOUP]...BASE=....COD
EPAGE=0...OS=0..ahni2.dll=102248,2013-05-27 17:54,.\,,7.9.0.56(i386a),
0E4AFD47..ahnupctl.dll=167816,2013-09-26 17:53,.\,,6.100.1.160,AA3D64D
C..autoup.exe=267264,2013-09-30 16:43,.\,,6.1.1.553,5E5A1619..v3bz32.d
ll=88824,2010-03-03 14:18,.\,,2.0.0.6,9F6E6377..[EAGLEHORN]...SUBSET_W
ARP=_WDZ_HS_HEURISTIC_STT...SUBSET_WARP=_WDZ_B_BRAHMA_HS_ALL...SUBSET_
WARP=_WDZ_B_SCD_PATTERN_HS_ALL....[_WDZ_B_BRAHMA_HS_ALL]...BASE=win\e\
b\b_echo_hs_all...CODEPAGE=0...OS=0..asc_com.dl-=66818,2013-10-31 11:4
2,.\asc,asc_com.dll,2.17.1.8686,6FE50E36,163752,B715E913..asc_dh.dl-=8
5902,2013-10-29 12:35,.\asc,asc_dh.dll,2.17.1.8677,EE09E574,196520,710
9BC2D..asc_fse.dl-=9994,2013-10-29 12:35,.\asc,asc_fse.dll,2.17.1.8677
,07B435AA,32680,A61D5E80..asc_intg.dl-=36465,2013-10-29 12:35,.\asc,as
c_intg.dll,2.17.1.8677,4A8E427E,81840,40DA18E8..asc_mmgr.dl-=54768,201
3-10-31 11:42,.\asc,asc_mmgr.dll,2.17.1.8686,95711FE6,126896,BF4FD925.
.asc_unp.dl-=201392,2013-10-29 12:35,.\asc,asc_unp.dll,2.17.1.8677,CAE
650B0,397224,308D8823..fse_base.dl-=15633,2013-10-29 12:35,.\asc,fse_b
ase.dll,2.17.1.8677,29F8A8C1,57264,F7EF56A8..fse_fact.dl-=13571,2013-1
0-31 11:42,.\asc,fse_fact.dll,2.17.1.8686,C71AF305,36784,ED32EF9E..fse
_pe.dl-=69049,2013-10-29 12:35,.\asc,fse_pe.dll,2.17.1.8677,70202723,1
55560,57E2E582..gfs_base.dl-=10895,2013-10-29 12:35,.\asc,gfs_base.dll
,2.17.1.8677,31B816A4,36784,04F20F1D..gfs_fact.dl-=9439,2013-10-29<<< skipped >>>

GET /rtb_bn_show/?banner_id=7710&system_id=1&site_id=46024011&slot_id=1&group_id=100&width=300&height=250&no_tagging=1&slot_visibility=2&psid=0&real_cov=1&geostr=157,0&cmf_system_id=1&url=hXXp://adclick.g.doubleclick.net/aclk?sa=L&ai=C_OojQ1IwVaSgDYrAyAPXxYDYDZTpp7MHlKW26OsBwI23ARABIABgpZ6khpgjggEXY2EtcHViLTYzOTI0OTIzMTMxOTM5OTbIAQmpAqNurT3Bn1U-qAMBmAQAqgR4T9CJiH2QjxBAgmAbZtOyZ0TnI1fjEid2alEB3I4xQhk7Y_NxXR3jQ395UoDNdjgQA5uIloLBImsev0e8Rm8kBrFSe_avmJsIy8n5EIpsHqQlQvo3fbUE0uL8VciK_ykozZFUKB7epzdMgd7CAeb25_e_DaR2zc9vgAaU5cPylO63yZEBoAYh2AcA&num=1&sig=AOD64_317Ohv0Lze0ueuORXndSXiW0MzZg&client=ca-pub-6392492313193996&adurl=&rtb_cost=VTBSQwADUCQKciAKAAAi11S5MiBBThn-HjVejQ&scheme=http: HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d|||n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; 
HTTP/1.1 200

Server: nginx/1.1.19

Date: Fri, 17 Apr 2015 00:22:27 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip
2f0............ES...H.<._.J*w..6I..z.=J...6`0^H......f1.....4..^...
Iq.........tU..?...........i...)..4.....E....[[email protected].@%
.B=._..dK.*...N.gv..b....HT.HK<O.........o}.v...-...T-..[*.[....D7.
.,(..8.!U...n..Y..&Z.F........... ......T..2{.a....q1al@.;.....@\...NT
.:.3.of|"V.C..{.....9Y)...H.{...Qf.......'....[q..O_.......9.#..}z.."r
..}..s.cY,....C....`TGt.ti>s X....=...Z...........hH~(j..q...9....B
....a>"~[..... yc..D>.3...I..$m...O.".NE2.3......K...r.`.......3
x.A_.......K.......p).W...r._:a........LgZ./.1......`.]w.Ss#!....u...C
.99....l..v..Vtu......>?.k......&).MV.-F............q...<1..E...
........?...5.......*.ONl[.T.... [email protected]:fn..3..D..@]...cF....K
C*.4._.)...._....(./u........-'U;.2B.z.M] L!?.....F...._V...>.S..._
......v......0..HTTP/1.1 200 ..Server: nginx/1.1.19..Date: Fri, 17 Apr
 2015 00:22:27 GMT..Content-Type: text/html; charset=utf-8..Transfer-E
ncoding: chunked..Connection: keep-alive..Content-Encoding: gzip..2f0.
...........ES...H.<._.J*w..6I..z.=J...6`0^H......f1.....4..^...Iq..
.......tU..?...........i...)..4.....E....[[email protected].@%.B=.
_..dK.*...N.gv..b....HT.HK<O.........o}.v...-...T-..[*.[....D7..,(.
.8.!U...n..Y..&Z.F........... ......T..2{.a....q1al@.;.....@\...NT.:.3
.of|"V.C..{.....9Y)...H.{...Qf.......'....[q..O_.......9.#..}z.."r..}.
.s.cY,....C....`TGt.ti>s X....=...Z...........hH~(j..q...9....B....
a>"~[..... yc..D>.3...I..$m...O.".NE2.3......K...r.`.......3x.A_
.......K.......p).W...r._:a........LgZ./.1......`.]w.Ss#!....u...C<<< skipped >>>

GET / HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:28 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Content-Encoding: gzip
1b25.............][s.8.~.....JO..1........Lg./.$3.[]]...$.$.&H_&..}...
..S.U......l..x....$.v......>... x..W.....W..$t....).O.....~h<{]
..N..1.e!%.....g...}a..I.cB.:l.,..;.E...p.....1...s../.b3/...G......%.
.Y.x......g.%.6.\(.......J.b..V'......0.......M....#..n.j}f.?..y..'..s
*...!........._.c!.....LK.My.5. ..t..RBC4..%.G..|..aL.....ZWS.....C.&l
t;#K..u...L....f".D.....C.,.s...........lvZ.^..o:b,....o..[m...u......
]:f.[C.2....yGS...D_sv.d..$..V..v89..5.........S...u.Y{..........F1...
....KzMu.J. ..;uB.x4d.....n.....H.......g......J.....#q..!....3.......
.<..I....I......)..0.4*4l...ar.X. ...7,).D..X.C...L6....d../.Yp.3.f
..[...T.]fsz....X..%.....Q......jw).....m...f..mN..I_x._3cs...]U.|.jLu
.........D6h....-i.K....jd.vk%......L.{Y....>.>..s.o.......D....
..f...=f.......C.b....DHC.|<M.5..f|<[email protected]..&...F.
.$.....]h......u..U6.>.y.../..O.0~.~...../!..h}.....#&...r.......t.
..*[email protected],....4. ....yIT.im.........jCa...L53Kz ._/.I..I.N.'@.... $
=....2....Rw,....h....z*-...F..sihM.4$..... n]....r.>Y......_{|[email protected]
..1._".X2.X.4.0y....\X %.j;.pDpL.w....V....A{.....c.csg(&......upR.L.!
...Vw..a.c..t$...@.'d.6=&Q.....Tn.f.d......v....e..I...o..?v).t.&....b
...O..%.S-.S.a.-.A.S.*.E.|.....r.2.W`i.fU..A.......Q2.N.H.._U}=\ <.
.Jl....rx.,.?..t........a.M...I..f...Tz.$%.Yh...._Qa...Zj6C.a...K.Sj..
..V..S.[M7Pu3&(Wt8....xh......nmg..<..>~b#....~......J6L........
...t...O.....U..............K.. ...oZ$..~..f.P-.......~...!....X.4R./.
..q....'.b..Z.M.....V..u.....F.?...b....:AM.D.._...........3.....8<<< skipped >>>

GET /wp-content/themes/brasilfc/style.css?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: text/css

Last-Modified: Mon, 19 Jan 2015 20:58:41 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip
1c7a.............=ks........N<w....%Y.....$N.Y...J;....$R.o(R......
...x......C........8o..~x..b.........MY6K.......E.....m....=......tY.E
.r.l.!V..uZ..l.deq.\..UZ....._.*.Wi].....f.f[Vg....N<..........G.$.
...M}...f....m...`S..A...............Y..Q5....4.o.......n.].D.O..<.
.|.....?.)J.J....a..I..UX7w9nz...Pa...mR..?....<g..M.......4,).p..B
E.K........&.sTl..y}.......u.!..L...=.....M....tUV.MFQ......,..mZe....
...6.b.g(.DE\p..A...<[email protected].... ~..P......5h.....`..5...^..z.V...
|....]>[email protected].<...K.. .jL...`...O.....er.....G.
....G.".....?.....,.....'...&.-..2=.O..|@~ ?..........*KP...\B j<.a
.I......,..`...q?...yV......T.....I.c.....]@.z.....YGx..R.&.B..y......
.B'...m.....&..yy..a.$iA......4.(,CO....O!.h...._.l.2.;....0....V.p)..
'.....58.P./..u...MVg.,..;ep.a.C..]......9..~.\/~.8......Ib.0.....y...
j.D........bZnx.:"D>}...*..._.w...bqu).....pyh..7..Z......._.y..G.^
."%r.."....a*S.....G.@PJ>.@(/<...X~...s.$...=.E..f..k.n....?.|b.
K.Sb`.T.1-D;O..!.z...).y.....-d..}Y./x-...F....'CL..@.:T5..}..P.....z.
.t..}..J.C....2.)...X.y......8........]!Gd..y9......E.sF.w..M....,....
......x..p..e)V..c...}YgL"U).n7..?&.\..b3.#...$..fE.(.c.mN.....xJ.*-..
..d....tV..bw..h....3...ICP.T.J:...xe......^.Y........1!.....N<....
D..1(........./0M...J,..:M^....../.A0.a..u.7.......3./.2.</......! 
QE/..........g.......j..GN..'o..}.. x..}....\...U.........5#\..e..MEtT
.[.............m.i....d.5.....R.......Yp .s...7.H...S.FPP....ad....F#.
.$q....9{...E.9n.".......m..5*S...^...r..%.v.......M.^..........&-<<< skipped >>>

GET /wp-content/themes/brasilfc/responsive.css?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: text/css

Last-Modified: Wed, 11 Dec 2013 06:04:10 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip
636.............Y...6.... \...P...vIN.*U.c..=2....F.......1.`..s.J}.M.
xf........._.T!......I)OaY.?.Kz........0...o.91...$.. .........o......
........f....xT |........w!.3a.!/..^..k.V .^!&%...f].*..%.bb..ZK.....q
|*.j..7....r_.....p 24.r.:qL.r..19.5."..H..]^R(..P../..).....C.{. ..@X
A~*.LrjX.,^...<....B........)..\....o..J.@0..}.D`9..J....0.4.oQ .A.
E<..o..7..\N............~..8.q]w.2A../.TM*K....H)/.{.^\..@\v.....g.
w...Wfl.:,.....>. a..Q.Q%B.Q ...A]......)Hi.....\P.\h.,.....%.6M^..
...I..h..U.(..2KZ.2.....q..Q^.p)A.W...8..!..f..V...5[O...0-....KT:.8Ya
..6.6o..L...Q.q..).f.9u..rN .kU.JI....8..[[ELc.9.9...........C..4...o.
.....]$R.D.....T40........L.e...G...f....g...........D{..oQ.."..8...n.
.b..a..j..s..si_..6.3.y...4..W....0).uG....{R.....{g.hy...<.#......
.q7...q.D...0}.-.v..j..4&LY..D.......,. ./....W...........tr.r..f.0..!
A....T.nL...3..m.....dh... oy...F..0.n.{-....|.....0>}....4..M;J.t.
....(..........O....aM......C0{Y...{q...'...h..z=.p..E...z.....F....'G
1...(.q..JKz.....M....8.5...s...q...F..qc)..RP....: ......s..5Y...k_..
.N... .s.x.d<...V^et.]..`....-%.w.8....<L..<.(."o.:..c.rdj...
9......Mc;....1.7....Y.W."^.......r...........T..........^.C.....x.dLc
:MGA...9.sm..uN ..v..3.e..M...U)....3J..$.NI...?L.:1........h6#Y.,...%
..A.....G..N\*...(i.h`.......8...a..(..E[....}.(.H...B/.1:G..b....i...
...&......c.]......DJ..D_..0ZR..s3.6..........N..Ge.L.f...b4.=. ..<
n.........r...2Dn..Z....Q..!....:....q....Pc.~..n`.8V#n..v*..v..,c....
.Q.......0......)...2..7......1.......$....3.......?......8..e....<<< skipped >>>

GET /wp-includes/js/jquery/jquery.js?ver=1.11.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: application/javascript

Content-Length: 95807

Last-Modified: Sat, 20 Dec 2014 17:15:07 GMT

Connection: keep-alive

ETag: "5495ae9b-1763f"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*! jQuery v1.11.1 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.o
rg/license */.!function(a,b){"object"==typeof module&&"object"==typeof
 module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.do
cument)throw new Error("jQuery requires a window with a document");ret
urn b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){v
ar c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=
h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(
a,b)},n=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,o=/^-ms-/,p=/-([\da-z])/g
i,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,c
onstructor:m,selector:"",length:0,toArray:function(){return d.call(thi
s)},get:function(a){return null!=a?0>a?this[a this.length]:this[a]:
d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a
);return b.prevObject=this,b.context=this.context,b},each:function(a,b
){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map
(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return t
his.pushStack(d.apply(this,arguments))},first:function(){return this.e
q(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.le
ngth,c= a (0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]
:[])},end:function(){return this.prevObject||this.constructor(null)},p
ush:f,sort:c.sort,splice:c.splice},m.extend=m.fn.extend=function(){var
 a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boole
an"==typeof g&&(j=g,g=arguments[h]||{},h  ),"object"==typeof g||m.<<< skipped >>>

GET /wp-content/themes/brasilfc/js/html5shiv.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:40 GMT

Content-Type: application/javascript

Content-Length: 9318

Last-Modified: Sat, 09 Nov 2013 03:57:16 GMT

Connection: keep-alive

ETag: "527db29c-2466"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*! HTML5 Shiv v3.6RC1 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 L
icensed */.;(function(window, document) {./*jshint evil:true */.  /** 
Preset options */.  var options = window.html5 || {};..  /** Used to s
kip problem elements */.  var reSkip = /^<|^(?:button|map|select|te
xtarea|object|iframe|option|optgroup)$/i;..  /** Not all elements can 
be cloned in IE (this list can be shortend) **/.  var saveClones = /^&
lt;|^(?:a|b|button|code|div|fieldset|form|h1|h2|h3|h4|h5|h6|i|iframe|i
mg|input|label|li|link|ol|option|p|param|q|script|select|span|strong|s
tyle|table|tbody|td|textarea|tfoot|th|thead|tr|ul)$/i;..  /** Detect w
hether the browser supports default html5 styles */.  var supportsHtml
5Styles;..  /** Name of the expando, to work with multiple documents o
r to re-shiv one document */.  var expando = '_html5shiv';..  /** The 
id for the the documents expando */.  var expanID = 0;..  /** Cached d
ata for each document */.  var expandoData = {};..  /** Detect whether
 the browser supports unknown elements */.  var supportsUnknownElement
s;..  (function() {.    try {.        var a = document.createElement('
a');.        a.innerHTML = '<xyz></xyz>';.        //if the
 hidden property is implemented we can assume, that the browser suppor
ts basic HTML5 Styles.        supportsHtml5Styles = ('hidden' in a);..
        supportsUnknownElements = a.childNodes.length == 1 || (functio
n() {.          // assign a false positive if unable to shiv.         
 (document.createElement)('a');.          var frag = document.crea<<< skipped >>>

GET /wp-content/themes/brasilfc/js/jquery.themeboy-rotator.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:49 GMT

Content-Type: application/javascript

Content-Length: 2754

Last-Modified: Sat, 09 Nov 2013 03:57:16 GMT

Connection: keep-alive

ETag: "527db29c-ac2"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
// ThemeBoy Image Rotator.;(function($){..$.fn.rotator = function(opti
ons) {...var defaults = {....delay: 4000...};...var options = $.extend
(defaults, options);...var self = this;...var timeInterval = options.d
elay;...var z = 0;...var slide = 0;...var autoSlide = 0;...var busy = 
0;...var queue = null;...$(self).find(".main_image .desc").show();...$
(self).find(".main_image ul li:first").show();...$(self).find(".main_i
mage ul li:first").siblings().hide();...$(self).find(".image_thumb ul 
li:first").addClass('active');...$(self).find(".image_thumb ul li").cl
ick(function(){....if ($(this).is(".active") && queue != $(this).attr(
'data-slide')) {.....return false;....} else if (busy) {.....$(self).f
ind(".image_thumb ul li").removeClass('active');.....$(this).addClass(
'active');.....queue = $(this).attr('data-slide');....} else {.....win
dow.clearInterval(slideTimer);.....busy = 1;.....z  ;.....$(self).find
(".image_thumb ul li").removeClass('active');.....$(this).addClass('ac
tive');.....thisSlide = $(this).attr('data-slide');.....//pauseRotatin
g();.....var imgDescHeight = $(self).find(".main_image ul li[data-slid
e=" slide "] .block").height();.....$(self).find(".main_image ul li[da
ta-slide=" slide "]").css('z-index', z 1);.....$(self).find(".main_ima
ge ul li[data-slide=" slide "] .block").animate({ opacity: 0, marginBo
ttom: -imgDescHeight }, 300, function() {......$(self).find(".main_ima
ge ul li[data-slide=" slide "]").fadeOut(1000, function() {.......slid
e = thisSlide;.......autoSlide = thisSlide;.......$(self).find(".m<<< skipped >>>

GET /wp-content/themes/brasilfc/js/jquery.evenHeights.1.0.0-min.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:50 GMT

Content-Type: application/javascript

Content-Length: 932

Last-Modified: Sat, 09 Nov 2013 03:57:16 GMT

Connection: keep-alive

ETag: "527db29c-3a4"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*. * jqEvenHeights. * Version: 1.0.0. * @requires jQuery v1.4 or abov
e. *. * Copyright (c) 2011 VVV.webdesigner506.com. * @author Michael G
utierrez Lara. *. * Dual licensed under the MIT and GPL licenses:. * h
ttp://VVV.opensource.org/licenses/mit-license.php. * hXXp://VVV.gnu.or
g/licenses/gpl.html. *. */.// This will even heights of elements of th
e same type or with same class name, comparing each other to.// find t
he major height and applying that height to the rest of elements..// W
orks for Windows PC and Mac on all major browsers..(function($){$.fn.e
venHeights=function(){var element=this;var maxHeight=0;var totalElemen
ts=$(element).length;var count=0;function compareHeights(){$(element).
each(function(){count  ;var elemHeight=$(this).height();if(elemHeight&
gt;maxHeight){maxHeight=elemHeight;}if(count==totalElements){setHeight
();}});}function setHeight(){$(element).css('height',maxHeight);}compa
reHeights();};})(jQuery);....


GET /wp-content/themes/brasilfc/js/fancybox/jquery.easing-1.3.pack.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:50 GMT

Content-Type: application/javascript

Content-Length: 6717

Last-Modified: Sat, 09 Nov 2013 03:57:20 GMT

Connection: keep-alive

ETag: "527db2a0-1a3d"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

/*. * jQuery Easing v1.3 - hXXp://gsgd.co.uk/sandbox/jquery/easing/. *
. * Uses the built in easing capabilities added In jQuery 1.1. * to of
fer multiple easing options. *. * TERMS OF USE - jQuery Easing. * . * 
Open source under the BSD License. . * . * Copyright .. 2008 George Mc
Ginley Smith. * All rights reserved.. * . * Redistribution and use in 
source and binary forms, with or without modification, . * are permitt
ed provided that the following conditions are met:. * . * Redistributi
ons of source code must retain the above copyright notice, this list o
f . * conditions and the following disclaimer.. * Redistributions in b
inary form must reproduce the above copyright notice, this list . * of
 conditions and the following disclaimer in the documentation and/or o
ther materials . * provided with the distribution.. * . * Neither the 
name of the author nor the names of contributors may be used to endors
e . * or promote products derived from this software without specific 
prior written permission.. * . * THIS SOFTWARE IS PROVIDED BY THE COPY
RIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY . * EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF. 
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 IN NO EVENT SHALL THE. *  COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE F
OR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,. *  EXEMPLARY, OR CONSEQ
UENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTIT
UTE. *  GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSIN

<<< skipped >>>

GET /wp-content/themes/brasilfc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:50 GMT

Content-Type: application/javascript

Content-Length: 1279

Last-Modified: Sat, 09 Nov 2013 03:57:18 GMT

Connection: keep-alive

ETag: "527db29e-4ff"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*! Copyright (c) 2010 Brandon Aaron (hXXp://brandonaaron.net).* Licen
sed under the MIT License (LICENSE.txt)..*.* Thanks to: hXXp://adomas.
org/javascript-mouse-wheel/ for some pointers..* Thanks to: Mathias Ba
nk(hXXp://VVV.mathias-bank.de) for a scope bug fix..* Thanks to: Seamu
s Leahy for adding deltaX and deltaY.*.* Version: 3.0.4.*.* Requires: 
1.2.2 .*/..(function(d){function g(a){var b=a||window.event,i=[].slice
.call(arguments,1),c=0,h=0,e=0;a=d.event.fix(b);a.type="mousewheel";if
(a.wheelDelta)c=a.wheelDelta/120;if(a.detail)c=-a.detail/3;e=c;if(b.ax
is!==undefined&&b.axis===b.HORIZONTAL_AXIS){e=0;h=-1*c}if(b.wheelDelta
Y!==undefined)e=b.wheelDeltaY/120;if(b.wheelDeltaX!==undefined)h=-1*b.
wheelDeltaX/120;i.unshift(a,c,h,e);return d.event.handle.apply(this,i)
}var f=["DOMMouseScroll","mousewheel"];d.event.special.mousewheel={set
up:function(){if(this.addEventListener)for(var a=.f.length;a;)this.add
EventListener(f[--a],g,false);else this.onmousewheel=g},teardown:funct
ion(){if(this.removeEventListener)for(var a=f.length;a;)this.removeEve
ntListener(f[--a],g,false);else this.onmousewheel=null}};d.fn.extend({
mousewheel:function(a){return a?this.bind("mousewheel",a):this.trigger
("mousewheel")},unmousewheel:function(a){return this.unbind("mousewhee
l",a)}})})(jQuery);....
<<< skipped >>>

GET /wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:50 GMT

Content-Type: application/javascript

Content-Length: 15624

Last-Modified: Sat, 09 Nov 2013 03:57:18 GMT

Connection: keep-alive

ETag: "527db29e-3d08"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*. * FancyBox - jQuery Plugin. * Simple and fancy lightbox alternativ
e. *. * Examples and documentation at: hXXp://fancybox.net. * . * Copy
right (c) 2008 - 2010 Janis Skarnelis. * That said, it is hardly a one
-person project. Many people have submitted bugs, code, and offered th
eir advice freely. Their support is greatly appreciated.. * . * Versio
n: 1.3.4 (11/11/2010). * Requires: jQuery v1.3 . *. * Dual licensed un
der the MIT and GPL licenses:. *   hXXp://VVV.opensource.org/licenses/
mit-license.php. *   hXXp://VVV.gnu.org/licenses/gpl.html. */..;(funct
ion(b){var m,t,u,f,D,j,E,n,z,A,q=0,e={},o=[],p=0,d={},l=[],G=null,v=ne
w Image,J=/\.(jpg|gif|png|bmp|jpeg)(.*)?$/i,W=/[^\.]\.(swf)\s*$/i,K,L=
1,y=0,s="",r,i,h=false,B=b.extend(b("<div/>")[0],{prop:0}),M=b.b
rowser.msie&&b.browser.version<7&&!window.XMLHttpRequest,N=function
(){t.hide();v.onerror=v.onload=null;G&&G.abort();m.empty()},O=function
(){if(false===e.onError(o,q,e)){t.hide();h=false}else{e.titleShow=fals
e;e.width="auto";e.height="auto";m.html('<p id="fancybox-error">
The requested content cannot be loaded.<br />Please try again la
ter.</p>');.F()}},I=function(){var a=o[q],c,g,k,C,P,w;N();e=b.ex
tend({},b.fn.fancybox.defaults,typeof b(a).data("fancybox")=="undefine
d"?e:b(a).data("fancybox"));w=e.onStart(o,q,e);if(w===false)h=false;el
se{if(typeof w=="object")e=b.extend(e,w);k=e.title||(a.nodeName?b(a).a
ttr("title"):a.title)||"";if(a.nodeName&&!e.orig)e.orig=b(a).children(
"img:first").length?b(a).children("img:first"):b(a);if(k===""&&e.o<<< skipped >>>

GET /wp-content/uploads/2014/05/brasilfc.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:51 GMT

Content-Type: image/png

Content-Length: 29502

Last-Modified: Wed, 21 May 2014 06:52:58 GMT

Connection: keep-alive

ETag: "537c4d4a-733e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR..............I`.....pHYs................ cHRM..z%....
..........u0...`..:....o._.F..r.IDATx...w.d.Y..=..{ wu...<..6.....V
[email protected] ..e.....?.6..6.`.`.$.. .d...aw.9.N............7..........VwuMu
...}..}.$..\.K..?|...9>.....k-.?..........@..=....../.t.".......4..
.x..1...7.-....)....^.#k!l...W..I....w..9...%.b5...t....5.k[.zy\..c..c
...Vg.D.A...k..... G.e.k......l.0m!i...h;[email protected]
...3^.RWK......v.j?..nQMxE..H..(!..R..DH.X..X..h....o..A......!....>
;.~:<...7NDO.M.j".X../...}.w..C....K<..2.). ..J..tu..ih.{.[.7.Eu
e.T.-zeYRU*.....%.B.P...q].G...B"..wh,......?...M..:..*M..V.F'l..Fg...
....~....4y.=..FmcMd7...Ft.....L.IKW......pw...]..........tY.......q..
Q*.*.....(. .@H.@ .([email protected].".\B .?/[email protected][ ,...[=.Jw....7...
a.~.yR..3...,.9.X......7...F....Ty.b............q.......W...F...0V..R.
Qp.........%.L. S).(......r..AI........m4Z..&..U...t...?..F..Z. ....k-
..5....[=...S.t.Ls.}...........{.....V%...8. ..?....T...RA}....M...C..
.%o.Pa.....C...Cx^..W.V.f.:...$....R..[BJ....&.....t.6...X..*=>R..=
J......a..V.A.o..ZD:B QBa. .YX;...#.^<.Rs............?.^......\..ZK
....A %.P(..n...k.?\.v...*.....C....P.JTK5....<.......#x...1.Z....7
..-..C....0.`.I.{zl@....%.J8H.p..u..........r.A...A.f.A..N7.b.EI..t.-.
.......]?I..:.v4.?..u.....$.r.}.p...^....u!...4.M......U.q.....6U.1U..
R.Q*.......K.6.....RH:A........Z.4;[email protected]/..-..8.."
.*RtK...1...f..F.. ....(..F!s.g8t..N,...Z=.v.......:..\..q..e..X....n.
JGDC......?2.]...;4:]....fJ.2...vN.e.. .....\Z.u..s,....\..]'...kb<<< skipped >>>

GET /wp-content/themes/brasilfc/images/header.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:51 GMT

Content-Type: image/jpeg

Content-Length: 18275

Last-Modified: Sat, 09 Nov 2013 03:55:12 GMT

Connection: keep-alive

ETag: "527db220-4763"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P.....mhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:606CB4191A86E0119
98CAAE17B28D7C3" xmpMM:DocumentID="xmp.did:E2EBA084E6B811E2A96FE4BFBEC
43A0F" xmpMM:InstanceID="xmp.iid:E2EBA083E6B811E2A96FE4BFBEC43A0F" xmp
:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom s
tRef:instanceID="xmp.iid:8B62F96B0188E0119125DBAF32C8F65A" stRef:docum
entID="xmp.did:606CB4191A86E011998CAAE17B28D7C3"/> </rdf:Descrip
tion> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
....Adobe.d...........................................................
......................................................................
................h...............p.....................................
..........................!1.AQ.aq...........".2B..R..................
...............?...)....7.....p&..............=_o..W.....r.....?..G`.I
...bmP%.........V.  t.0.c...).....e(..M\j.e.yL../>.'...W..).t...f..
]......Svi.P.I.@j...!...D.Mt.Iq.*[email protected][email protected]
w.......n..5....Z9..?.....^....]......`b.[T.......0._P..J|y.<..<<< skipped >>>

GET /wp-content/uploads/2015/04/suarez-neymar-640x360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:52 GMT

Content-Type: image/jpeg

Content-Length: 58662

Last-Modified: Wed, 15 Apr 2015 22:46:12 GMT

Connection: keep-alive

ETag: "552eea34-e526"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............h....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..v.9........4.R9
.....]..W.....>/..&U... .....l_*G..\2.<.........dU..l*...}.;....
.......8....F3.5.Tj.....d.s[.|$c.w..DU=.r..Fq....(.....p.....t..NEIn..
<z.w..S.z..H..e.`.<n.. ...V..)$VT....>....l.h...1o|b..-......
....[6..=*.r.:.k`..FH.w .<~5..6..Z..q..].QH..3z.z..5.y&I.5.|..y5.q.
8.^.*h.p.h..u.....J.D'<d.eI<...=.lK...?._......F*.....\.........
..9O.`U^.ER..S"......iaZ..'cOL...5.....T..y.>.O.....@.*...:....@..#
.~\.......sX.j......k...*E...k7..F...m...<. .u.. WY...e/.$.........
Q........wqQ1ea.....>...2*.W ..r9...,......=ht...;..... ...v.Z.C...
m...hZw(.n.*[email protected]. .&B..I9...J"POJ......5..........[6...R..
7..c`. ...X...\.3..|U..4E.<..u4.[......R*........s.....<....J...
.P..6.\t.?P.t.`W}=..... ...\.$.3.' ......\.Vlm..;Wg{.pA.VBh.v...K.d..)
...O.%.-kb...l...w...#...a.7c?OZ. .....u @....7q.r8.t.:.^..I.E..'n<<< skipped >>>

GET /wp-content/uploads/2015/03/rooney-640x360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:52 GMT

Content-Type: image/jpeg

Content-Length: 69930

Last-Modified: Sat, 28 Mar 2015 23:30:18 GMT

Connection: keep-alive

ETag: "5517398a-1112a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............h....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?....E../1..a...g6
.8..k.4..I X..c.4.o..{......*.E...)lp0.V.b.9.$.F.v...nh.7...r 9N..9o.S
..q..G.Vt.8.3.....&6.v...Y.{.;.oJ.UJ75...Bj~..mC.A..rF2..o..W......N..
7.-...9<....7...lK..u7....&.X...:....C...l...#..$ZSi....`....!5...Y
[email protected]...?...f.s.9.X_.G.\....Tl.<.U..,@e...=k..4.f..FH.j.....
.....ET.......g..(.%IP$.. .Em..lm(.C...[a....j..e=...<. ........0zU
..]...2c.....7...T. 6:.E...p...CW.w.=.. ..j.V...1!.2I... .......jiTR.u
i....1ZZz.r._$......V..dY.......9.....x..m..sWv..fV.`zW..j.{p.a[..`kZ.
.. .?J............-.$K...v.......M7...q.i..!...k......[.<;.=/..V.Zb
C....x...6q....g......I...j.....!Q..W4b.;.....8.`...?J....Ase...d.3..n
lE.....]_..skj0?*....a........6...b....n[..3Pk..]\..{=...4........6%G.
...P.@}.{.f..Z..w.....nq..>. ..w.. 9.......|a.h...T...........w1...
O|...&...I.sv>[email protected]_h.wp(..%eo.\g..x....%. .g....4<<< skipped >>>

GET /wp-content/uploads/2015/02/suarez-barcelona-640x360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:53 GMT

Content-Type: image/jpeg

Content-Length: 59441

Last-Modified: Tue, 24 Feb 2015 22:23:46 GMT

Connection: keep-alive

ETag: "54ecf9f2-e831"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............h....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..WH.. .wW.xkTS.g
$.....s......D....'.3. ..U.9jx........ex.*....{....n6...=.....X..}....
[gc.N3....1..A4..g...f.%./..9...!....3.z...n...].A.a......j.......ff..
.....W.../..\..}b..L22Gz...._/..c.._5V.m.}....;...s`.......].........r
*.JI$.= .t..\.GGw.9g./~.........#.<.?.O..YH<U..b.2..Z.~...2k...(
..GC\=..G..z.............4.G.U..R.m...1bp{q\../..hO.......9.9..xX.....
...a...**..>G#..K./....'...?......\iX.....#'.NK.0.Y.6.....w..$.(j. 
...Zl.m..........J$.D.$.Q.l.=,S.u.\..*.;...L...c.Q..[8...e..>|.v:..
..C2..c...?....rG.^-f...c...h.a.Q.0.J.1X(V~.:..t%....^Yc..s.= ...q..[.
.........%.N....eG/.A.#.Vm].....f,......Ws.2..{..]iJU...q..u.'........
C..'S.g..\[email protected].:...x.J...G....]>.'......7.....t:g..h.(.9
[email protected].,..w.kX.m...v`3.PH. ...v.`VM2u.x.[..3m..Pd..n
C..b....4.5...../5..\.k|..'........$...<.#....Q.....h..^.m...&p<<< skipped >>>

GET /wp-content/uploads/2015/04/suarez-neymar-50x50.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:53 GMT

Content-Type: image/jpeg

Content-Length: 2395

Last-Modified: Wed, 15 Apr 2015 22:46:12 GMT

Connection: keep-alive

ETag: "552eea34-95b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............2.2..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?.......i0.2.$...M
Io...'..k.....r.'.......w...f..;.... p....'.q...y{.7...[C.J3..^.`.h.-.
....q....I.3^e*....e...u....t.].y..GVI#h.I....{......]4...`J..W..!.Wg.
/.[x.......S*m....$Q..H.s...c.x.........c..?..ia..f....@."...m.....P.B
st.....8ANL...^*..M2.}K\.,.<..O%.#....3Z3.%...q...hr]..Q(.H..5..*..
..#.7..E...W....H.d....H3...$....q..8..o"..;..n.;.yu......8Tg..Y.S.3.L
....q...Yw....h..<....,...`..........j......j.dc.Nh.a#...s..K.A...V
w:...]].0.h<...I.v....~D..$.W..8...|...|V. .....CY...........QN....
.W..w....y..oV...l,...M.0.k.TS J...65`..p..Il..&....._I.^.J...'E!q*...
n.p.#...~W.Z..C......oC.....{4.~...)...izRM.Z]j.wRyb...7...s.. ..^..&g
t;....{q#..D.....Q^*d.M.....?:........jK..q......k7Dao.b...2.8...W../.
}: ...Z..h........A..;..N.....J.I......my_...|{.V.<.}....o.I5.).eO9
..df.ns.$.$....{.?..O.|X.t..mOZ..U..9..L.....2#.a...P....}g...]...<<< skipped >>>

GET /wp-content/uploads/2015/03/huntelaar-schalke-ap-50x50.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/jpeg

Content-Length: 2394

Last-Modified: Tue, 10 Mar 2015 21:49:25 GMT

Connection: keep-alive

ETag: "54ff66e5-95a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............2.2..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..n.o.....h......
....h..>IS.v.Qx.]....t.|.......GC....}..~ ...... .:.{]Z.ty..~W.7.s^
..*.4]eWR.O......71.......x.o(I.i.=...Tj5.oG.u]O"...k._....5.#M.....s8
......3.B{..v.N.E...........O...C\..>.|9._..........W.}..W.....c&..
.~8.Ak.x........zD..M..:..3..)..r...~]...B.;JVR.C........<Wa..h..f.
7f.?.1..u. .a.7[.B..pi.!W.@H....?...3.....[h!.l50VXB..l`..^8.5k?...6..
Myw.LM....K3..".$...{W&....../.......Z../->.o.:..\..,s..W..~...o,..
o...4...7..e.....#..E/k....U.........o....c../l....M...@c.|..m.\W..&..
..y.ZYZ[x.P...u"H.n8.bP..u.....;..W...<.F..w......P....1;Y..e..}.q.
.z......;'.....$.G...d(.c.z.W.d..k...|.. .Wg..m...zu 2.kO up.}^...M.ko
e...C......G...<.gsk..Yy[[email protected]..~>...^......Lo.xcJM6.....v5.l.
...s.9 ...*...... ...K.5......,...y...l.....RG..F21^S....&.....?...G[E
.k.(d..}.,_79. q.8....C).P.o.(....Z..............UHRu\.'...._.t...<<< skipped >>>

GET /wp-content/uploads/2015/03/rooney-50x50.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/jpeg

Content-Length: 2532

Last-Modified: Sat, 28 Mar 2015 23:30:18 GMT

Connection: keep-alive

ETag: "5517398a-9e4"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............2.2..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...... .T2K..1...
w;......V4..^s,.....l]...$u._C.5...A.<...z.\.:v./|..F!.'vfTL...e...
......Q..<#.x...^......h.N.".!.P...o... >8X.=ia..TeM....Y..UQ..w
....>.x......]..n..........ol..d..C..c.G'......-.E......Q....[..$..
.C.....0.G\..P~.|r.\.5X.....&......YfQ.M.d......ch....y.........u.n,oM
.I.X.j...8....Npy.>...]...G.R..,qq...O.=v.....u......n..^.A.# ....Z
.6..1...s ..;..*1^v.=....g...?.x....E.Is..N.`...kU..r.e........rBq.`.\
~.....>......9|Of.Vw..Ap<......r.>B.x..^|..q...:.....Z\.....$
B.b!..T./j)...vce.I$.......7.V.>....z.._..........-..'..*.}..0H..}.
.X....xw.M......2h:dz&.5.V.V..B.n....1..$....<.X..?..m|..%..o>.|
.-..f?:...A....A....'.>..H....l|G..ai...,.1..e..........0..#....lV.
.......M....{#|MZ..*.v..5.......|............m.....`.;.(..UQK...N.v.s.
Z?.<.m.......k..4.w.W.-3F..............w....^....C...F..$,.V...<<< skipped >>>

GET /wp-content/uploads/2015/02/cristianoronaldo-realmadrid-50x50.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/jpeg

Content-Length: 2368

Last-Modified: Thu, 19 Feb 2015 07:27:04 GMT

Connection: keep-alive

ETag: "54e59048-940"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............2.2..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?....G.,|Q..*.R.}.
..'..q..q... `.....hm/.:7..i.xc..../>8.E.c......(G8..S.~.M*.u....Fe
u.(....f.gR..#.'p.H$./..5W.......X.:e.kb.g.....i..'.!..%.....##.5..>
;...J......x.....U!...^.Q...6.6.Y....._.T>0.....x-.l..]..O..q.m.M)$
...|.W...:[..Z.P4(.j....H.........s\.^..c8K.....k... \F.g..|..y.si....
Z.nP.....r.?.v..< ....i....~.71..i.;,.i."2...<...'...t..&.%....;
A...N~...5......u.OM..& t.........8 .G.....h....i.o6..n}.\...\0.$.:..z
'....%.jQ..c.2..x.D...$e3$...q.69..h.c...V.SC.....n.. ......7..QS....w
.?C^....X.......o..S...]...Ot..-...H........Q...E.Kq<Q]..F!.....=J.
.E&....{8.l0.M.F.;......2Il..q......f..*.ke.*.. .D........{b.....-"...
......j8z.S......j.S.-....E..>.j^../.1....m....y.>@F.`.s..k.K..P
....(..A.8..cw^............_..A.f.5..nd.d.y.PB..{..y..o..qhT....C.5.r|
...J.i.W.;O....x..1U(.~.n../..........Nb....[.(..-..FNrx....}g..W.<<< skipped >>>

GET /wp-content/uploads/2014/12/manchester_city-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/png

Content-Length: 2149

Last-Modified: Mon, 08 Dec 2014 15:54:47 GMT

Connection: keep-alive

ETag: "5485c9c7-865"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...,IDATH...kpT.....?.s..g.n6.d.....b
0.D...X[...Z.l...:2.X[....N.xE.i.............(....M .$..f.f7{...s..K?t
.t.~......w~3...a._z....B...U..y...F.5U..QW.....~.........<........
.........}.....2Q}.v........n.......K.....b..#r.I...\......s..........
/.T_g......y...e..\....M..c[l* ...................?...~~...5U>v....
...L=s]..t.^.......ib2-V(.....9o.".S...$J...Y....J!.??......sI.....H..
`....g}.r&...}.....[..k.......6.za....8.6|n{m<U.......`..q...Y..rT.
_.NMQ....f0.M.a.H\....R..\[email protected]*.m..u.....dB.|o..UW
......~.m[%.<..<5. <.K.,..~......{.,..l^...<.b|2'...J...0S
t.....G..9J...&.9..S..&........O.....\..x2...J...,}.`.......s.,K ....B
8.}w.R_.S.|.=..Q........|D.[{..).'..u....ZQC..a8....K.......D.X%B.9$.E
.... ...NQ.h.]X....8.......%@...z.U.....$...o..P....VP[.....V@!.......
.........O|.'.{....p<.Z..x....\.E>_..8...V.I4.)L......F...ixH...
^..0-..t..A..%.l.........l.m.Y.\...(G.\....T.%.. @TP8..e....d..c..h...
.......p..K..K.D..`...-.~2N......pD.v.vq0J.l..>=..(c..1..E..L.p..03
H..$ ...CQ .S..Q.!..,....w..x.7.... ~~..H.N..1.....q0]....z..e..)_....
....bbj..5^.F3..z.L......v.....W:.%k...b.'...'....#.b3.....q.r.s,.....
....s....W"T.F(..i.h...#.4....E..m..D.P..x....~..h..}*z..ztP.]...|....
M.)...2...Lx.|._.XU=B>.....P..........]..*....HJEfl W../U..d.)..#.V
..?..a....|....nu5G,I.,e*.........<6Z.uE.c.......O...* P.m.q....,a.
.g...o........b.....w........d.=$......O.G..."........g.........8xf ..
O.........Y......iT.,n....77.......yE........;..A.}...~..c...Xq5O.<<< skipped >>>

GET /wp-content/uploads/2014/12/liverpool_fc-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/png

Content-Length: 1659

Last-Modified: Mon, 08 Dec 2014 16:00:32 GMT

Connection: keep-alive

ETag: "5485cb20-67b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...BIDATH...yl.W...........^^........
....FiA.R.......H......B./."[email protected]}.W......w3......y..
..........~~....q8..Z-901.BZ/.i..6..l...........~.L..D?zw.y....M.e..P.
?py.\.q..u.......#>.Z..c..G.6]^I..7........}.(.l...MA...'...?UE....
._<..G..4.o....2v."x93.V.....q8...U.N...S..$.C).....G>.....8G...
.1HT..VD.^...e...X..p.9..r,.&...Y...<.....vG.............cc...l...Q
A...G.0Q...Et.U.[, .(hS..^)Ce".J_.....)...!.s|..k......X.L.u.........Q
w9.e/..&.* g....|.!$y0o.s..wl7..._.5cH...`.%\..S..O...;.'.Z.>......
..~WwFHD.r.. [email protected]..<v..;_.2k.^.".A..Y.y.....sK.k..
RG.2k..u9..V.o....!g.~.......BQ&....ym...L..........)V ........._...sK
.U.J......!..h..JC.....pk.d..........H.I.....S..0.'...MC.......9.._..&
gt;.T..xep.@ub.. [email protected]......[.u.!t!...~^....;......P..n.u8.G......
..:....B......b._...... {...B8.........iB9....@(..=p...$...J`g.`..Hm[.
...AU?..<....X^...B......Gj.u8 .*U|.t&!mM....[b..!67.t.M.W.!u.A.l..
T.b[S..s=.'?..VV!..Y..GO.YK: .q8.uk*u..u....k..y.$..>.k......@=....
9^...F ........z...s...U|...,..4..o.C...4..&..........B....`..$/.. ..W
.vQY^...N....x.j'......2..w.....m6....P.........@d.\7._......o..3.Zm.6
....8.6.R...?..N.Xg.a.3m...7.......<t.B8.Og.........#....,..{>..
....>..RV...{^..m..].......f..U.pd`j.....;J...;_.U.h..c....k...I..J
(?.7.....vb.UE..&..............^..<=z...K...i.A..L......W...4.!..55
....B.. ....G{B..5.....4.?.{..#.-o. ..9.).|....5 ..h..`.?`.h..":t.K...
9<.(...CK.prO..F"._....c..,4y}..9(.k3q8g.r.........F.;.....(i..<<< skipped >>>

GET /wp-content/uploads/2014/12/SwanseaCity-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 1610

Last-Modified: Mon, 08 Dec 2014 18:06:45 GMT

Connection: keep-alive

ETag: "5485e8b5-64a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH..VmlS..~......b.q. 9N..;8..
....[[(.Z.T...I...........KL.Jii%.*.k.......R.~....$._.JL.p...!q.....{
......Gzu.{..s.{.s.{..A...~4..T.T..K%....t:p:.fd.[g...v{.v..R..\.b ../
.y~..lv.....j.T*[email protected]&2B..?..j.x...w..,./^.......H....(DD..|...(.
....~30.....HD...zGGG...n...J........].I0...q.F.h.sN..b.n||[email protected]
.....Z........u...........N.w[..... =..,.....C<.{vug...a8.....g.F8?
R""I.h.._.#.m......^...r......>.........Wme'..P...K9 ".K...l..>.
....v..o.F_.;Wa...(......H$.:.n..`(.gn.O......F....czz.D.&.......b...y
.z.~s4...v......e.^..I...9..d....!.H...?..K.....&..j.........E1'../U..
.y..j..r.".ru..Y...{.#.N...S...........j.iQPD.L&..v....V_..V.....@...~
.w......Q_..?{b.<....B...9...Ih4...Z..JUQ.....j....8.....o...q.....
..E.r..............S...............].....0.6......x...-....?'ws.578...
n........O.....a...qR.......mOP.....:EQ.T*.....,...e..;.0.....?...$...
..m...^~.. ............z.^....../@.$d2.r&$I...C........F#...D.g.:.C.."
...`0...[[email protected]....;[email protected]..."fd...X,...I.j.:%IB
:....8~...0.eF}.r...[P....a..../[email protected].._.....C.e.T*.,.L&#...
....`.'5.......}>""J..t.....i..&'=p....#=.v..... ...B. ).B.,.y.....
.8......z.......X...,[email protected]...*:. .H..
0.L....$. .nwR.. [email protected]>*I.......PSS......x......Xw.ztvuU.......
.a4.Qg.!..uwvu-.)...I._.}...t..e*...R.yjj..A.|.Gg...E.Q.. ......V...H.
.../.........F`....y8...q.J..R...\..e..H.R...h[..X,.7c.q.|.[.......M..
,....KH&. "d.Y.\..Y.fJ.1....Z[..dR.d&......B.%...P.6==.......-s..E<<< skipped >>>

GET /wp-content/uploads/2014/12/Southampton-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 1662

Last-Modified: Mon, 08 Dec 2014 18:10:57 GMT

Connection: keep-alive

ETag: "5485e9b1-67e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...EIDATH...{l.U....|.7w...z...-.0.(.
....A.D....5.. [email protected]....................*[email protected]...)..f.a.|...XB...
.........}^.cT....cG.*2.O-...r(U..a...Q..0.....:l2.H.1...)..x.pCf.....
7p...~....s.uRoBZ.9.........!c4.1.O..;.....a..]...Kx.r.T1 .~..R...c0F.
a.FR.Gk...B...S.L...3`.Z......0..?...D.T.I*uq$a...(.)[.........S.t....
........R..H........=...`1.c.6n<.*%..NQ....=.S.g...'.\T.....r.P^^..
.....%.jWWIdj.6.....x..~r^VG{.A..F.p@N..<.T..R......e.j.....?....$.
....;?....uuu..i.j.nE.......Oz...<.H....<...p.<)>E..D.O...
....>().[^Rbso..Q...-*.HGZ...F.1....q....v.^.-.......y.y.l..d..4"dM
..?.E.*V..m_P7......I<}......i...@{.`|..5.. .x...?....X..bn\.V....t
..W~Bn.l|s..........3.!.......>E...3.o)....[]..........)^8...y.X..2
x.......K..C.z.q..Ap.aW...O....t....>$.B7~3V/h...Y`.j.2[[[.PJ..(..p
........izU>..f:.........R*.2..o.{......}.@.)..;"....7.H...i..... ^
iX.....Nw. ...P....d~..^.J)..'...t.... .....O.....N."[email protected]..!.
.....D,..#...............C<6/....c!~.Az.. .D. (^....Jq2.8xC<.<
;_..I.P.\.%.0..Q...... hu..................... ..R@.@|X..E....ep7$...2
.(B.8(,....E..e9(T.....]...;F.Z...<0t8 ...!..........0H........,...
.,.D.$.Z.....a|}}..f.....\[email protected]../........
.....T5w.........z....D0SQ .....3...8...E..*F..<...`..R...W..<..
.Jd...:.k....O....|[.V...!........J.A.A.(...B.@?...E.....q".sh.4.#..=.
.Fk....e.q.......566...........}......9.....K.........1.bZ0.N.FH.pT.BK
.:$...*.....`H..)..?..z.2;;[.!..N.SU]..5..CUY.......$......Pd..#-:<<< skipped >>>

GET /wp-content/uploads/2014/12/Stokecity-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 1465

Last-Modified: Mon, 08 Dec 2014 17:57:17 GMT

Connection: keep-alive

ETag: "5485e67d-5b9"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...ml[W.......c;N..$....IK..
..dR....v..6.Q`.....BL....b.|@blL*[email protected];...-..QV....YR....W....ys....
s......P..HW.......<..n..#...y%....q..'...5L..k.>..._...........
V,d9.nO....&........D..h.E.6...u.0..;.dFs.9 &..8&X..bwl...x.........x.
".@^.F..N..f....}..XQ...J <...V..6R<y.#.DD.`;.P.3.B~|......`...}
.V.!...(.Q.i.U...FDcX.W.e .i.....q..-.{z0. P#W...Rj....J.g...U...`._.7
8....B [email protected]."F........F)....c.....
QJ"[email protected]!..1oi*u...t.....>JJ.%.Z-...".JJ....Z.......~n..
.}X..R...A../.J.i..D...H.d.fI... .()....>.B....8....Z.].Th)..x.i.x.
...5Z..9%.55hQ.V..9ee.}.K..f....|.].`..X.1"..8h)QJ!..]~..ox...}...}.*.
...AI..y.X.....;[email protected].^io...P..4%.'s.."....BB...f}...Wn..db.@(..
..........&'g1V.B-.$.........~..G.E..I...........S.........x...G......
....m..Pha.m...w.dj....L..K............C].....-|......g.T].I.(..n.f..z
.y. ..q4 ......cU..!.-...80....'g.y...z...C_..............hU<:.L_..
5...=\........z..7.~..........8...KP......{..Y.1'F..E.."(...|@......wt
............-- .\..._.O{.*.{.(.!..O.....Cs.g..x3.|. ..O...........c..-
&".S[.nU.E.....k...\....i...Lf..?.&Q..?=N>W ...FB..._>.:.T..D...
,....];....w.zl....Jc..w.7.~.'O..Msc.u..f.UA.z.0.H.5kV...361..`..i...&
..}5...p...z....hM...8..J..O......G~^,jg.].x...xhg7..........h........
.......}...rw.O...n...R.....d[kS....;.>..w.".X...Q.K..)..9f.f9q..5.
........m..vvvV..K*.......j..N.w...z..\.:c..Ia..~e....t.../n.....X`...
}.<.........0....IEND.B`.....
<<< skipped >>>

GET /wp-content/uploads/2014/12/Everton-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1848

Last-Modified: Mon, 08 Dec 2014 18:04:09 GMT

Connection: keep-alive

ETag: "5485e819-738"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...yl.......[.......66^..!.p
.......(EMs..B.RU!..m%......(I.....J..4.p8....p..|......{.^...=....M[S
[email protected]=.M...@:Q5.3..T.."......Z...... ..lQv.].T.}...
|y4......U..l...l.=Y.....q&..Bg..hCQfv.`p.. _.7.}..N..Jr.&.......[.qJb
..1....L_D..l...O.^.7..46..........{6.......IK..w..8..Rc.,...7..e.2..$
......I...d......H..Gr;;.l..&.._..U..&.,..A.y......\..h......ffi.....9
..i.j|[email protected]. .|g....[.1K.DOX..H...0l[.... .{4...
~.c.t....g.Qc?>....j.R........=......!4 ...h0.&2[n.=*bM...`k...Q%6Z
eE..d...Qek.......8.z.J.g....%.$..Vs_.M.q..>)..{._.Ow..*..T.!EPh3p.
."..ra$Li......C1...Q.pj...)9..].<......j......e...g:GS..E..!.....5
@..KFB.Hygh.......N..np4wWm~..........#Ca...E".K7.kR........... Ba.P._
...<.tWm....^..!.!.g.7.j.&..4...Z.....D$.C... ...c......A.d<. ..
S..K{.;n..l..3.o...{..a[.f.B'.*.....vj,Y.(.&.P.>4..9<....W....q9
ai.'q..0......)/.T.n...:......QZ...xw.{~..'......).H.....>?.]n..*/.
....!..b.u.....N6..P.7...9O..|.{..Fp.....e...feJ....q...O._.....d.m..2
. Q9|f...CS..5......F...._Zq...E.._..v..p..=....HYN..~..........0.5.,.
.2`..nn]}d....O.nq<w..=.. 7*.......l..]p........m.2.==.~..'.-.Z...?
.....p..w,[(JI..G.]'...m|".....bf.....*..v...f......{....~..... k.gyNm
sb.....Dc..OZJ3W...T..Jr..........[\....z.....-H.H......g...9.m.e.....
)./........._`..-......9......x[..|N..68..k<k...-#........Y.P......
../W,n........F......b2&.........=."B<.v .Yvn......(..s.3...4s.....
..h....*XW.^[email protected]........^aY.P.....]C.H.6 .b......g4.N<<< skipped >>>

GET /wp-content/uploads/2014/12/Sunderland-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1549

Last-Modified: Mon, 08 Dec 2014 17:52:16 GMT

Connection: keep-alive

ETag: "5485e550-60d"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...Yl\g.......3w...L....Y..$
[email protected].!.p*TZ)..Ri.P.."...HPEB.......i.* .T.ZE..6Di...8..x..........}
<.T.Er.....?.'.......{5....x4.s.....{..|.~.....t/.S.|.e.......p....
...........=......C.Mk...]...S.....}_jzx`.9%...7...h.'E.XJ./......C...
......<......g<..p.Z..n...0A.)..G..8c..m%.../..uCF>...%......
.....c....jQ,..,....h0.v.CC..........Z.F...n....uA..7...{*M..r33.s..B.
..~.....}8s.=W.....|..;....$W...M=....i.wA...~rp.3~.CM..<.}.>>
;\.......Yr....9....5...dE... .I...1.f../M..W_{aw`r"..S....O'|........
y...}.....m..........f..s.".k....B$..TY..4.1..L..6..<.......{.6....
.>..O.......r1].B.`...}..2...2z......`..Y.....P..(8..g`\.TU.{...\.h
..u#.....N|Z..G....._..SG4.........O)[email protected] ..D....6"...-..A?x..\T..
....o..*....L.Ny..C.._~ .....I...FVr..9..e.a.b.d2. ....j.t.....p14,..Y
.......S..<../..:m3-."..`.["..^......J..[.X6..H.....W.....C...{...C
u'L.R....*....sQ.0....(.........G..V..<.....2....(d......uc.Z......
....G`~..?_2.....Q..r..\.iv...........%..k.:?2pq..]...k..q.t..aM..W..L
...a..M8...{......R.$.....(.....A.q.F8..... .1p......*`1%.......i.I*..
..h?.v...t....O._.-. UMC.......{.z....`....a.o .g.4.Qs ......-........
M...'..[....C...%..M..f..G.S.>.-?...~.....r.Pv.....C.1.2...).w(....
...e.../[O..CG..O.......]...~.b... ..'cA.;^.W...z.....{$..y{...z.z...%
 ... ...f).U...L...|{..)%..R...........*..!..[.....-..f.[....7..,...Q.
`.z% ...Y.s...-g.......lNz....... ....`.`.Z.......c;....(/l.....>I.
..ry.P............'i ....,W...ZY~..................}.H........).-.<<< skipped >>>

GET /wp-content/uploads/2014/12/west_bromwich-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1769

Last-Modified: Mon, 08 Dec 2014 17:50:22 GMT

Connection: keep-alive

ETag: "5485e4de-6e9"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH.}.Yl.........>.x;>...
.b...i\Uj.I#%....I.-..W.ZUU..(m..T.R....]...%.%P!"A..b....6x.......o.2
......w9.....}?..A.i=.Q...6..V.4.......Z......2.....u....r.*...3-'c.*.
82..[3S.....9`...ljz.....x...6..#.7...........C.4! P.&...5..k..Sf..B.4
.l[Q(...s..&...y.\o........dm]0.....G......>..".&.....;&p.:n.FY...T
..v....B.....H.......ece.....,APJ...QY....|^[email protected]..(.z..=..y..#t..
...v6..O..RR.T...Il&.....$%>......L.ZK..7.....B....4.A.(.......U.b3
....\.5...!Z^.......7...m.!(..........f.(.@)..t...}g...C2]DJ.W.6...mg,
.."..0....e.tM.. !.....J.Hg-.{.(..'.d.&.k.h.v.=}1.>.T.bxt...)....6.
.... ..<[email protected]..?E.....A.6D.W.0t.....`>.....S...,qq.
.......u..C.R(....D.......7:[email protected].....#...Q.3......n..=LE..C..`v&
gt;....Q.. .d.EntE..1.Nj%$6........>B.....&.$7r.l2......N..M....!0-
..W....o1=....h,..k..........DIr.<...rq........_.'..C).(.r.9).%Y.z.
r..&.yL.!............D.4^..B..]|....F..T..v......H. ....P0MY4M..x.$...
.e.p..zW.... [email protected]..,L......%.Y.....^..!.c.8..BQZ..2]......A.D)......
d-.'@C.n.:>....W...QB..(...Y..0.....6.m..~...b........x#`r&.p4Ou.Mx
}#.t.wh...Zn....U.u.j...... Ja...B~RS.Oy4...tlK*.#.......|.dM...].Z...
.8...wo....$.%...Nbv.P.3Y..p'....H.nw.DnyR..t..clFQ.YG.R..m.tu=z...-G.
.i.p{.O.r.._..E....(^..?....i.... ..[..H..I}.....r_....p.....(.-w>.
..jx.i.P.O............be..N.........R(..5...ss|.4......Q.s.6...f.i....
.<.Y..m{h~....I..}..?=8...eS..k.....S...,.D...R.J....`4...w....1...
....}.K....bUU....f.O....m......?..J...|4...EK.s...0.-@*..RX..S.j.<<< skipped >>>

GET /wp-content/uploads/2014/12/Astonvilla-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1330

Last-Modified: Mon, 08 Dec 2014 18:07:52 GMT

Connection: keep-alive

ETag: "5485e8f8-532"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...[l\....}...q<3.lg.:$$.
..A(...B.B.P.."......*.L U.C..7.V.T.......TQ..........8.8.....>.\..
k.>.......s.^......u.ql.7nzz....`Ou...].....j,..Z{..C?....s......G.
.e.....z.N..a.v.7<.A0'Hs....pC......U.dN...o.#...i..............I..
..7..^Fs1...du.5O.....n.".6".^"[email protected]#...D..N....L..,.9........
..ec,.C....$...7;..M2....... ..*R....N.u.V. :4B..I.d.0.DT..(..IjB.....
.;...3....<...x...w.~.z....U.....bf.s....l6....Io.....`f..D ./..'m.
C.....o>.Y..p.f..B.7%[email protected].=..Q...........{q.E...k....*.A..X
h.2.h..&....oF...a.....Q.~H!..T...k.......,.@.(..?....:.....:..^k.]...
...?....h.]..$EA.......g...3F..!.:T....UZ...n...2.........E..R.:..K.T.
....../.....A5..)...g...B2....}(..E.<.W....((..8.7~.G.?@5.......[.)
........Ad..B1........cp.....m.....u..)..i...p...i......._6...b....;. 
V}...}.j.F.W0 qm.l.3K..b..K......\b..*.....ad.K...r...J.F...."..C.....
.O[J..E.P.N".F.Y7.}.g.]@4a.....hL1.eGn..._.....-H.!k$._....?...;K!...w
...2......6..^.....'(.J$...W0...Yvr}..w.....h.2......_i.7..c.O....L.|.
%......J(..,.*....}.$...E,....mb.l\...n....{.D{G...i....t?..O~...`z...
/.....\.....L.}...~.\...i.zE....p[a...c...?..E.....B....X_?......db4..
.-0..g.z....c.|..n......q.W..s. .~;..~ .w........_.8T.......4>~..&l
t;..[..S.T...L....UI.....XM.\....Qy"{..............D3'..[............_
.Z.2u..Vz....En....IEND.B`.....
<<< skipped >>>

GET /wp-content/uploads/2014/12/leicester-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 2035

Last-Modified: Mon, 08 Dec 2014 17:08:45 GMT

Connection: keep-alive

ETag: "5485db1d-7f3"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...[p........!..Y6...$.I ...
$D....i..N..Rk...eZ.Z.......ju,m.)..0..(jP.V....9..d..d7..=......`...w
.w.<w.....<.....Wf.D..^.....b*%[email protected].[V.^}.....c.7[..... =.Agx.
g>..../.)...E......N.q....'4.....W.^...J.W...?I......./o.[...TI....
...'..L..U .........1.\!....l.....B.......<...g.>T..=........ ..
1c/1S.k.x.8..,.&#.sar..H.d..T.g..._..kT/m~....x.....Sg......7..).[.q..
.p.I.d..:4J...., ..5...... ...rn....O..%.........:./HFG%....nY.....-..
.:.&=..l.&<.T..i..?.K(.....t.V.XY..JEA..O...O.Y^f.mf..m.?z...i...s.
...A...}.U....hU.Nv..Xc%.....OI$Rl\.GCu......gx.........y...vm]..2.R:-
.........|t.....[....|......%..qr..EL:g.x.#.......m..H&%..,.Y.......!(
u...8..8..^l...`R.3.Qx??........z...CmUU.o...s..G.....q..?#.B..N.y.Uz.
4&&B....Qa.._.8sA%;Z .4.c..!.Ip.c..}S.-..u].N..s..M...LN.}.. ...<..
...:..\p.F.I..O....d=I..,[email protected].%.|...........'|V.%qee.I{.c.
.P.L..I.y...RU.........C$Ica.j!NQ....\...m...f'.......7..P..Ri.=.X.(Kr
..R3...3.0 .V..w.)w..a/.65..adYF.A.A.dd...^.:/[email protected].].....?ZC.2.6..
`4.H...d...BI..............d@.<B .A.X....#...p=...p.r....R..r... .V
.B.R..'.,Z.Q..(A..Ny...x...MKs.4J.|r.AT...........'..._.^..n.b:..jz7..
......$.......b....F..._..../.b..E...%.K....F!2...[P...m.4a&.Y.e.I...:
A..z.....F......f....N.P(......QQ.U.^..$.:.c.a<..VW[...P.....K...).
..s~!v......h m.....v64.sm&...<tj%.-......(!........^...O.p.2[.K.j.
.3...\.. @$......q.)u%G.4c...7<.,[email protected].^..3C.L.{..s....
.}<w.7s5jqM(....1...Rk.{.Mi...A.J. .4...h......d:I0........b1..<<< skipped >>>

GET /wp-content/uploads/2014/12/Astonvilla-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 3800

Last-Modified: Mon, 08 Dec 2014 18:07:52 GMT

Connection: keep-alive

ETag: "5485e8f8-ed8"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...kl\.u..3..]..KR$EJ.(....d
Y.-?.;...R.v..N.4.....E.......4(..).6u........p..u\? [j...-.zX.(.!Q.w.
...s...]R.M:.2....swf....3.%......d..w.u.b...O..|.jf..... ....f.s..p.w
....|.Z....0.........{[email protected].....:...~....jq.....L...........Z.I
....d...AEA...M...54...t...?Cz..T...}F..X-.j".......H......=......wo.(
!~......n.I..[.9.g.......'........0k...*vm...>t>DN....t..f..u...
...E...].S.Ai.YUQcp..4.......X......y.=dl...(..H0.Ch.`z;q..Q.a7.`....4
..^x.Wk`o..........t>.Q].0........)...........&q...utw..[..... .:.Z
E;<.....j....t...i.P...4.......Y........./..?5.iiD@4{....S....7f...
@.ED........~...4f..b=D.4*....y..>DEpSs`:...i .:..b......e.(.....1.
.."..)t...A...H...u....C....OMb.W#.d R.......{p......'...!.D."..Iz..2V
.#&s3..P...r....xwn&...4..!z.x............"y?..*".6.H..I..........~...
!Q...B...Tj...,........kr|...$nj.iF.Z......'H.*.S.u.....s.h..D..t.).p.
Aja...........=F|.......(6.......7&...h.~...../.Np".m....{ .j...E._{..
E5"0sxv...A. ...9.........-.$i..|...A..(n..,..eZ...lR'mu)@.|..0X.6....
..h..i............6#.. Q........T........2.wB.Rb....B....}.'.....t.-..
$s....:.<..?d ...M. &..6...W...8e!j.....K9n^...................g...
.3C.?.....3....L..!.R.........I..r..4.B...'....4b..R.Yj..8.3...'X..4..
T-.)...N.m@5..*..I.Iwzo............\ ..4j.E..8.L82. ...M..{... 9;.b...
...ESb...'x.r4.hp91.0....D...FR.LD.da ..14............a.L..bg..`i\..U.
.h."&5.U..v.o....~..dy..,....b.Y..l.../PO..n..j2.J.......V.....YTs.6Z&
[email protected].(N....k%/M._.....-...O..s.{.L........<<< skipped >>>

GET /wp-content/uploads/2014/12/Southampton-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 5169

Last-Modified: Mon, 08 Dec 2014 18:10:57 GMT

Connection: keep-alive

ETag: "5485e9b1-1431"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...y|......2k.I&.,d%,...%.H.
`.. (EQ...j....zm..]....-\...bUjE.4.....&..Y.....N.L&.,3...=..........
|&..}.y~..s.s.s.._...}.w.....R..j.....0...k.. .j....u..&.X..>..H...
o ..9.C..._..t...!...H......z....rbz....h.0. .....Bc....h_........_...
;cb....C........g.._...K....j....B.............:`..A..*..../..U9......
...bb.....g..B~..-?_."$pb.A<.. &f$.Y.....9.b....$!bc....|1-k..0..^.
.*>x.(V|cz......^,......{.......A..u .<....6.....{7;w..f..f.....
pu..E...._....X..B]..|...'..ttt.C..l#.....mo3o.<.......Y.p!.......r
.x...HOO'n...U....`6.{.....4.$._X........dxm.&JJJ....h4...........l6c6
..x...hm..bPu.cQ......J.`v.........Wfm.._...!!!......;....X.n.'N..l63z
.h$I...}..d..Yw.]tsa....:&.....!....~.`....."...#.x.....(..."77WTVV...
z.i.F...u....<_.1...}]..W.....w3L..HY...Abb.........]..3.<#L&.%"
......J.!.....6l8c.Z3F.eLR..e.,....q.!..5srr............XB...n.TQ.....
..3g..)?...C.7&../n...O\...j.p8..Y.t..GB.u....M.%._.%%.XPX.Dzzz...j4.{
..=.>%[.....a...V.u.H.]n..<.G.l...}...h...s.(..r.-';...&...V..z.
ck.^.;.h.\G_.4WT.)%3.>....X...)))dee.b.....q:..zz8........W.Y:s....
o..\..vG.....9a.....f>.....F5WW....}.C...^3.Z%y.\........Z......gRX
8_..8.~...... dE.h..FrG....}.<y.Y.rssy...P..I.p:..Y.....j4.hO.<#
"...S...fR.=q.......r..... [....`b...l..U1..i...m_E$..ycTC.15yb...o{..
.}..XUE...(...<p..HF........8...F....I9.twPv.0%%%L.2.. W.....i.EEEX
.V..j.........s..0..dw.....v<....uQ....E...k......9.mnC.......E..5x
g..eLT.y...6...G3../...;....CgN....y.RnU....hC>,3.cL.M...x?)%lR<<< skipped >>>

GET /wp-content/uploads/2014/12/Stokecity-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 4481

Last-Modified: Mon, 08 Dec 2014 17:57:17 GMT

Connection: keep-alive

ETag: "5485e67d-1181"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?.....HIDATh...yt.......W.RkC Z.......0.
1f..8...x.xf..d.93.9..d.'q.I.q...gw.6......l...&.H ....Z-!uwU.;.Tw#.
...:G..U........}.[q.KD."..c...W...\j.e...tG...~e....?.Q...3Z..C......
.?.~...q......r....$...1......d.^..K> "h-d.....b.........B)./......
.?>..."./5.D"..x.(..Q..#....0F(....{..P).b.B.I....bY...L$.C..`de.2B
....O`[email protected]'N.K.Q*.n...U...w.fI1NV.*/...Qt[.*3.YR.QQ.t....Q
.0...o.B..K........g.{.....x..gt..HO.fY)[email protected]@w..Y..
_......7......(..~...X...[v%..Wb.2I..*.&*;...bOn.(*..b.FF...s.L._.<
...]'"...dB@.....{.J..d...Nb.A....%i.....220..Q..FY..............q...@
eLr.P...:............L...#..FD0.a2..%<.\E........X.........GF..A...
....n...r%....>.8Ng..)...?...?..?..F. B.I.....W...z..v }..S.Q.0h.$.
..0.&...1&.......1...x.,BY.N.Ypl.w....2..f.`...A75a..#.m.22.0....ji...
.YZ..-....5WaN..$.xW,.\.....o...\....z.fI.24L..[1J.1...~..pZ...._s.2&l
t;.>.*#.|~.A.V...q.F.ADP.?F8.....Cw.`....7....:s.....21ssQ.?N{.....
.yx.f`...twc..1KK..Nb.&....rs....$..2...H..:u.......e.Z......D].fN.*..
x...;._s5........_..p....L..%KpZ[...=........ w....e..d.A.Q$[..(..]..2
L..k..........5..l.f.4|UU..[.......>.]'.........L..G..$.D.e.2.C.h@0
.&.?p....A...H<.N.........EE.E.(.7]h...\C.D..h&..M,GD....fH.d...\.;
k&..Xg.P~?f^..k....W.C.|iC}..b....;nB ...S]D.UO.3.X.$.#. *.W%..(..o.4.
...Xg.......r..h......%If..2I....!...q....s$i...$.v&.L./~.......5...Cp
.'..T.6.I..... .t [email protected].
:rI...7..v.8.D...C!..N........Q.....0..~?L..c\.1.zxi J).#.Q.w..8X.<<< skipped >>>

GET /wp-content/uploads/2014/12/burnleyfc-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 4340

Last-Modified: Mon, 08 Dec 2014 17:56:03 GMT

Connection: keep-alive

ETag: "5485e633-10f4"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...wtT...?.....UPA..j.....b.
.........7...89)'Y.NB..&..99...O....8!.Cll..#..1..#D..F.>.......Q.9
._.Is............o......?C V..tjT.a.C.%.....[.0o..k...p...Ko..c.g....k
.C.Zk..$.. D.;.8 t........Q...ER\..N-.".;:...".\.HJ.....9.E. I.....B&.
.2..&.kz, Y....,.....2i...^[....Y.!.. ..X.K.6>O[.n..nC.a.6f....h.d.
L.."I.$.......).J_.......V.....y....z>...n..Hj. W.p...F"..T9t ...j.
....<:c..Iq2..M.r`O.O..Ca...d.i......{....2x.U..F..U......2....V.6*
...|...|...3H......A h..nj,...|..........2...UkM.'.'.(a` ..;.DO.....%.
F..).5z......;...y...lChx.h24.V......8%A..N.)-..oQf..3U.9wt>e...-.0
u'q..b %x?.t.........X..@.&..v1..R..A.q....8.......O.P.x......|Id:O:..
...H........8R..\ 3.e.F.C.p..-..h}....C..9Nz.....iX..H...q.V.Ik.z.V.$\
....2....id..)..7lf..d.........b...x..y....}........1.&S...a......L...
.:.g..F.s...3.........d........}'..*...g..C....~t..[_...hY>.Y..... 
.6.u.F..T....F!1.N..Hg..h...-2f....`............8...C3.>N.m.$(.....
C.r31v...:T.8...x.z............A....%9.P.4...........V...).. ..l..O*fN
.) K..fr..AkH..........v....[..0.X.lq..f...hn./9.Sn.G.a.B.. C..TV..W.A
.H)...q>...n.M<.g.a.'.r.....k.....gs...U.c|..>..lb.AcS..?.&a.
Tb.". c,).X.}pw9...c.D..-.X......$...iBi....6.v..z..V..6I.G..%...p.@J9
.vZW.u0...1F....O{...5$l..7Y.9#.:...Y.Z.Eg..i.[....hN.0Q..T...yXqS..f.
[email protected]}.GI....F.....`.3.b.....a.9g..*i..HS.......,.W.tt.r.).P.(..
.A,*[email protected]._..R..Z|. ......t..;..S.H/...CfZ...I....%]X...G....Z.EE
.bM1v....V/F..#4.c'!4n?.8n..O.t..~.......G~.....c.7....\..t..V..._<<< skipped >>>

GET /wp-content/uploads/2014/12/arsenal-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 5072

Last-Modified: Mon, 08 Dec 2014 16:02:34 GMT

Connection: keep-alive

ETag: "5485cb9a-13d0"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...y..Uy........3.Y..$..B...
.... ....h..v..Z.W.O............"...E....A.N2.Lf_....}.s...53AP.......
=.y...<.y...W..........R.A;P.kK......... ........M..$..... -.ia...b
.....^-E?0.=]....){:.}...^56.j:....A-E..,..\..o....r.NQ..t.x..I..b.}.e
... }.JS...(C..l....4p..n.T.md.){..qJ...B.\..G(.....w.q~%"w....PlA..].
o...6...E'J..XQ.G.....E.`..Qv1\..t....L.....!..@..~....8..J.....P.V..p
...{]..7...-...p...'..}MD........L.o.....mm..p.C..:.&.)a.\..7=...97..&
gt;.K>[email protected]#.hC?`Z...~......K>...k!.>\.
.......7..U.x.........p.44....Y.U.swW....FV<...=Q"..........p.g..KZ
K.kB......<{>f...`..f .l...6..^h...RB..G.>.......13.K..R.Bbs.
r=.C..]........o..s..Z../.y.....-.......#E.#b..9....iD.....s?s...f....
.[,..&(.?.......H.b(.@i..[w...."...:.1..g...A}]...O..c....bi|S......d.
%.-..)[email protected]..;..HP.;.%....x...:j..x.......l.]....?...S
(d...3.z....F.Q.~..../...X..{#V2...c.O...\..p..l.O..t.N`. .Q..$.h...@.
......h.. .Q../bG...d....-...@K.....`..p...>.d...`..... .4i.....!.$
..[I~.....9.}gY..../.f(. _6eK.....|..;1q6N."L.M0......}..!.-[...Dc....
..2q.....uu..,...!:..>...{.#..m...F..1..C..~...a..8.Qd.{?r.... .SY.
cO..L.L............Se..c.........m...-I.Q*l..e.&.'..... b`.R}...M...qj
.........5.....[....3..y...~.oq......hx.;9..?......=1j.:0.A.......r.s(
M. .6u.....Z&..........s.]...ZT<.L.._.W.h..g./pvS. a.T.._...h......
..#...?0......q..1\........{.O)[email protected][email protected].
.C.....s$Vt..Q.B.s.J..gh.Hb. ...E.C...n>..D.AR..c...&.... .&F.7<<< skipped >>>

GET /wp-content/uploads/2014/12/liverpool_fc-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 5212

Last-Modified: Mon, 08 Dec 2014 16:00:32 GMT

Connection: keep-alive

ETag: "5485cb20-145c"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?.....#IDATh...i.\.u......^U.......")Q..
...;Z..5......A.....g....0...O>(.cL.O...'.D.l...h1$..%q_.l...{WW...
....RJ4")J..P_......s...{...`h.QJI...oy.......k.m......Q.Ti.....).. .s
.8].......U...4...N.W..#!.......r9.oY.Zk.).g...}.4.......{..>?."B.u
.^....n.{. c.*.8Z/S.j....O.A...R)uA.0I. a.#..v...v3.R.7gN.&.G..3-.J..j
.]w.......%..A..Ka.1....c...l....Nc.Q.e1h=4.j./.....Zk?.f....?>....
...a..2.V..U..F....t...Y..........?9...P......J..S.......:..~.D.$v.TV.
....7r....?..R.N?=u..W....MSf.`S['.R...l(..W.....2Y.i...4...o..P.....w
v..g`..7t..}ya..S...7t..p4_...b[.r.].F.a...V...*.7R............vt....f
.k.<_z.E.j.dGw/.eR...q..L.!.h....}|c..l,......|fj......F}o..n.Uj...
..L..R.......w......G.-..=o..R..kEFJ.q...}.*.......N.....2...J..f..z.Q
Z1Q....r....8b.W`..<.. .Jk.m..N.y.W.^5x.."x?|.%.0M.z..m.)3...B.[.:p
[email protected]..@ih..}....K......v.F"...n7.i.......I.."4.gZI I...
.....F.c.^........G.4.k...f='jU.VW...Z..7-.U.|u..,[email protected].#9...F..S
.Y.C.s9.IB_&K.4y.....SDJ...3.l"........l...2.PD.R..0..~:{.?O....^...E.
..x.B.#..i.T..r..>_..vh.....R@%.)..9...q...`..k..grt8..R$ZS.C.I.P6.
\[email protected]._).=7w.[./...<.. L.'.UZqL..H!....L...%,.
..H!(.6..u.(......ejqL.........n.d..islR`8..Du..X.Z.t.....6]r#..UK.I.-
%E....1...WX..I-.Xl.....t\.q. .,i..m.r9.U ...4..D..E..R..f...Y[(...0..
.'....e.H.@...}A^....n7.<..T....Rjcj.....E..Z..j...h.)KI.c......2".
yie.S)H5..h..>...He..4..$P).iLTO.I..5....%..bO...0..=5X~....4U._x.{
.....u.p.....J...*D........7_}..p..5.../[email protected] .l....<<< skipped >>>

GET /wp-content/themes/brasilfc/css/adminbar.css?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: text/css

Last-Modified: Sat, 09 Nov 2013 03:55:08 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip

95............U....0....)..ha..S..M6.....4ED|wc.....afT........)..$...
Z..`5,W.l..N .. ..0../.34.l.K..y..a.........ZWp}.).....8..b..C..2'..!.
?....H.........0......

GET /wp-content/uploads/2014/05/brasilfc_pb.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 13331

Last-Modified: Wed, 21 May 2014 06:59:18 GMT

Connection: keep-alive

ETag: "537c4ec6-3413"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...r...j.....`X......pHYs................ cHRM..z%....
..........u0...`..:....o._.F..3.IDATx...i.d.u.....{..KUum]K.L..t..a.0$
.3..f....!3........M.G"[email protected]:....a3........0DOk.{z.^.........
.......\.|....g..:#2* .ry...}.;.2....1..#r;.B....U~D...Bc...C....d?L.V
~.. (...X,.X,.Y..T*.I...<.v..m..m4.....B............g.,..$Ip]..\..,
.{{{...x<^L$.......lF.$...8c...[...$I=.4..al..YUUu.P(.u..N.V.<.s
[email protected]..(~..E.PH....z.~*.J..F.'2..T,...u=..F..i.$...@
.$......<X...0..v..a.....n.{..j.....UUoV......,.0MS.|'.....k .."...
..4MK.r.s.....x.\&.Y....L&#'.ID.QD.Qh..UU.(..E.,.C.U..8.<..i....h.Z
..j.......Ym..o...o.Z.oE...^..Z......_...2(<IQ..q.LOO ..K.R.Q2..[.T
.d.P...<R....$...R......?F".......u...e..i.p....4M4.MT.U........o..
7....jY.w.....a..<9D.._GA2Q..,{.x.K$.z&.y)....R....L&...P(.P(....Q*
.....L&..*.....m.q...k.$..,.;c....q....~..^.._k.6..:......5oss.{..._.&
lt;.k.ju.1&Y...p..._.A.. u]w3.L$....i.?*.J..T*.\..b....ILMM.T*!.H.u]..
m4...Z-.z=.Y.u1.B....,CUUh..H$.UU...m..v..v..=...666.....7o^m...s.Z...
..Z...L.7...GY.,..;.b....X.R.g.t.S...j.X.......1??.L&.......j..F..n...
u.PDm#.*........t..S...[I.`.&..6....ukk.W.\.....V....j....,...(.0?....
.9$@I...(....c...r.R./..B.\.cjj..=...{.1.b1........V..t:.<..$AUU..A
....M*.M..x.<...<...!mu.....vuu.W.^.......v.}uu..m.2.9`n..vA.o(.
..,.............?],.q..1<..S8u....(..............F)..Z... %I..6....
.:..*. [email protected].]..y...]..s.......7......"h...... ..1.....$.......
.M.TJ..e<...8w....<666p..mT.UX....i.i..R.b.4R...k.jfXj.y...u<<< skipped >>>

GET /wp-content/themes/brasilfc/js/fancybox/blank.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:59 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Sat, 09 Nov 2013 03:57:28 GMT

Connection: keep-alive

ETag: "527db2a8-2b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Server: ng
inx..Date: Thu, 16 Apr 2015 23:57:59 GMT..Content-Type: image/gif..Con
tent-Length: 43..Last-Modified: Sat, 09 Nov 2013 03:57:28 GMT..Connect
ion: keep-alive..ETag: "527db2a8-2b"..Expires: Thu, 31 Dec 2037 23:55:
55 GMT..Cache-Control: max-age=315360000..Accept-Ranges: bytes..GIF89a
.............!.......,...........D..;....

GET /fancybox/fancy_loading.png/ HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:59 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Content-Encoding: gzip
1b25.............][s.8.~.....JO..1........Lg./.$3.[]]...$.$.&H_&..}...
..S.U......l..x....$.v......>... x..W.....W..$t....).O.....~h<{]
..N..1.e!%.....g...}a..I.cB.:l.,..;.E...p.....1...s../.b3/...G......%.
.Y.x......g.%.6.\(.......J.b..V'......0.......M....#..n.j}f.?..y..'..s
*...!........._.c!.....LK.My.5. ..t..RBC4..%.G..|..aL.....ZWS.....C.&l
t;#K..u...L....f".D.....C.,.s...........lvZ.^..o:b,....o..[m...u......
]:f.[C.2....yGS...D_sv.d..$..V..v89..5.........S...u.Y{..........F1...
....KzMu.J. ..;uB.x4d.....n.....H.......g......J.....#q..!....3.......
.<..I....I......)..0.4*4l...ar.X. ...7,).D..X.C...L6....d../.Yp.3.f
..[...T.]fsz....X..%.....Q......jw).....m...f..mN..I_x._3cs...]U.|.jLu
.........D6h....-i.K....jd.vk%......L.{Y....>.>..s.o.......D....
..f...=f.......C.b....DHC.|<M.5..f|<[email protected]..&...F.
.$.....]h......u..U6.>.y.../..O.0~.~...../!..h}.....#&...r.......t.
..*[email protected],....4. ....yIT.im.........jCa...L53Kz ._/.I..I.N.'@.... $
=....2....Rw,....h....z*-...F..sihM.4$..... n]....r.>Y......_{|[email protected]
..1._".X2.X.4.0y....\X %.j;.pDpL.w....V....A{.....c.csg(&......upR.L.!
...Vw..a.c..t$...@.'d.6=&Q.....Tn.f.d......v....e..I...o..?v).t.&....b
...O..%.S-.S.a.-.A.S.*.E.|.....r.2.W`i.fU..A.......Q2.N.H.._U}=\ <.
.Jl....rx.,.?..t........a.M...I..f...Tz.$%.Yh...._Qa...Zj6C.a...K.Sj..
..V..S.[M7Pu3&(Wt8....xh......nmg..<..>~b#....~......J6L........
...t...O.....U..............K.. ...oZ$..~..f.P-.......~...!....X.4R./.
..q....'.b..Z.M.....V..u.....F.?...b....:AM.D.._...........3.....8<<< skipped >>>

GET /fancybox/fancy_close.png/ HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:58:00 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Content-Encoding: gzip
1b25.............][s.8.~.....JO..1........Lg./.$3.[]]...$.$.&H_&..}...
..S.U......l..x....$.v......>... x..W.....W..$t....).O.....~h<{]
..N..1.e!%.....g...}a..I.cB.:l.,..;.E...p.....1...s../.b3/...G......%.
.Y.x......g.%.6.\(.......J.b..V'......0.......M....#..n.j}f.?..y..'..s
*...!........._.c!.....LK.My.5. ..t..RBC4..%.G..|..aL.....ZWS.....C.&l
t;#K..u...L....f".D.....C.,.s...........lvZ.^..o:b,....o..[m...u......
]:f.[C.2....yGS...D_sv.d..$..V..v89..5.........S...u.Y{..........F1...
....KzMu.J. ..;uB.x4d.....n.....H.......g......J.....#q..!....3.......
.<..I....I......)..0.4*4l...ar.X. ...7,).D..X.C...L6....d../.Yp.3.f
..[...T.]fsz....X..%.....Q......jw).....m...f..mN..I_x._3cs...]U.|.jLu
.........D6h....-i.K....jd.vk%......L.{Y....>.>..s.o.......D....
..f...=f.......C.b....DHC.|<M.5..f|<[email protected]..&...F.
.$.....]h......u..U6.>.y.../..O.0~.~...../!..h}.....#&...r.......t.
..*[email protected],....4. ....yIT.im.........jCa...L53Kz ._/.I..I.N.'@.... $
=....2....Rw,....h....z*-...F..sihM.4$..... n]....r.>Y......_{|[email protected]
..1._".X2.X.4.0y....\X %.j;.pDpL.w....V....A{.....c.csg(&......upR.L.!
...Vw..a.c..t$...@.'d.6=&Q.....Tn.f.d......v....e..I...o..?v).t.&....b
...O..%.S-.S.a.-.A.S.*.E.|.....r.2.W`i.fU..A.......Q2.N.H.._U}=\ <.
.Jl....rx.,.?..t........a.M...I..f...Tz.$%.Yh...._Qa...Zj6C.a...K.Sj..
..V..S.[M7Pu3&(Wt8....xh......nmg..<..>~b#....~......J6L........
...t...O.....U..............K.. ...oZ$..~..f.P-.......~...!....X.4R./.
..q....'.b..Z.M.....V..u.....F.?...b....:AM.D.._...........3.....8<<< skipped >>>

GET /fancybox/fancy_nav_left.png/ HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:58:01 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Content-Encoding: gzip
1b25.............][s.8.~.....JO..1........Lg./.$3.[]]...$.$.&H_&..}...
..S.U......l..x....$.v......>... x..W.....W..$t....).O.....~h<{]
..N..1.e!%.....g...}a..I.cB.:l.,..;.E...p.....1...s../.b3/...G......%.
.Y.x......g.%.6.\(.......J.b..V'......0.......M....#..n.j}f.?..y..'..s
*...!........._.c!.....LK.My.5. ..t..RBC4..%.G..|..aL.....ZWS.....C.&l
t;#K..u...L....f".D.....C.,.s...........lvZ.^..o:b,....o..[m...u......
]:f.[C.2....yGS...D_sv.d..$..V..v89..5.........S...u.Y{..........F1...
....KzMu.J. ..;uB.x4d.....n.....H.......g......J.....#q..!....3.......
.<..I....I......)..0.4*4l...ar.X. ...7,).D..X.C...L6....d../.Yp.3.f
..[...T.]fsz....X..%.....Q......jw).....m...f..mN..I_x._3cs...]U.|.jLu
.........D6h....-i.K....jd.vk%......L.{Y....>.>..s.o.......D....
..f...=f.......C.b....DHC.|<M.5..f|<[email protected]..&...F.
.$.....]h......u..U6.>.y.../..O.0~.~...../!..h}.....#&...r.......t.
..*[email protected],....4. ....yIT.im.........jCa...L53Kz ._/.I..I.N.'@.... $
=....2....Rw,....h....z*-...F..sihM.4$..... n]....r.>Y......_{|[email protected]
..1._".X2.X.4.0y....\X %.j;.pDpL.w....V....A{.....c.csg(&......upR.L.!
...Vw..a.c..t$...@.'d.6=&Q.....Tn.f.d......v....e..I...o..?v).t.&....b
...O..%.S-.S.a.-.A.S.*.E.|.....r.2.W`i.fU..A.......Q2.N.H.._U}=\ <.
.Jl....rx.,.?..t........a.M...I..f...Tz.$%.Yh...._Qa...Zj6C.a...K.Sj..
..V..S.[M7Pu3&(Wt8....xh......nmg..<..>~b#....~......J6L........
...t...O.....U..............K.. ...oZ$..~..f.P-.......~...!....X.4R./.
..q....'.b..Z.M.....V..u.....F.?...b....:AM.D.._...........3.....8<<< skipped >>>

GET /wp-content/uploads/2014/07/Champions-League-Stadium-Hd-Desktop-Wallpaper.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:51 GMT

Content-Type: image/jpeg

Content-Length: 353302

Last-Modified: Tue, 22 Jul 2014 09:29:17 GMT

Connection: keep-alive

ETag: "53ce2eed-56416"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), qu
ality = 90....C.......................................................
.............C........................................................
...............8.|..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..... ..0(...Jp4.
...u...-0.([email protected].@.:R.E.8t...)i.QE....-&sKL..(....-4.S....(.
E&)GJZ.(.....([email protected]..
QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE
..QE..QE..QE..QE..QE..QE..(..`.QE..QE..QE..QE..QE..QE..QE..QE..QE..QE.
.QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..Q
E..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE...Ni..M#....
........i(...(...(...(...n.......`:.([email protected]..@.
..(.3..=h#.P.E.R..S...QE..)[email protected]@..M.....(...(...([email protected].(...
(...:R.....(...)V.4....E.P.E!.)h...- .KH..KE..S.Si....Q@.>.:....4Q@
.)[email protected]..@...(...(...(...(..^..P...ih......(...(...(.
..JZ(...(...(...(........(.)h.....(...(.)h...(...(...(...(...(...(...(
...(...(...(...N)h...(......(...J)h....Q@.%-..RR.@.%-..QE...R.E..Q<<< skipped >>>

GET /wp-content/uploads/2015/03/huntelaar-schalke-ap-640x360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:53 GMT

Content-Type: image/jpeg

Content-Length: 55286

Last-Modified: Tue, 10 Mar 2015 21:49:25 GMT

Connection: keep-alive

ETag: "54ff66e5-d7f6"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............h....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?...N...1....h...t
..Zv............:..0..oZ..........Nx.kZ(|c....j........z.]5.bA....s.r.
*G.....@.<.j%.q.....x8....bwt.Yq.U...H....N..3.W.Y.zt-b..L.....l..Y
6.'<. $.....{WC..,I....&.=.MI.....h......X...............q.Wcmd..##
. ..i.{....Q.....m?.v~.X.x...2..n."n.}.Z.................h.G...F..J.aT
#. .t.....ch... _..`8.{..%}O...K...y......W... .:.Z........w5..$.:H...
.z. .3..9o..;.....A5...."{.....=k.<Q.y..7_z.{.Y..6I<..y..m.B.9.M
 Bi.I......'.{..^?..g.l"%.....O.....9....kD}.....f%........4..L...V...
..q.1W.m.'.0}.j..Nw....]Q.f.....Tu./..-.5..-..=).X4..I.......R.Z3....n
Cc8.<W.k.I..d.....~,.......t..^8.c.v...9.f...4.....{...5F. .....k..
.N..... ..L.u.!...*......?.....^79.... >....$x.n'....5.2.7..Z.....b
Q..d...n....g$.`u...........S..Re`H ..../.&..6.)............X....x..l.
..@>.....H...j......Y.|.I...NA.p.;.jaQC.U.6...R....a8..T6...l..<<< skipped >>>

GET /wp-content/uploads/2015/02/cristianoronaldo-realmadrid-640x360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:53 GMT

Content-Type: image/jpeg

Content-Length: 61697

Last-Modified: Thu, 19 Feb 2015 07:27:04 GMT

Connection: keep-alive

ETag: "54e59048-f101"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............h....".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..<.9..M..d...
.y....9....*....B..S.F$....#...<..Z...lcoSN......K.$.L...9=...9....
..".1....x.i..#...7..6..y8.....c....b.0G.......s.P..;..c.E9..P-..8...i
..}h...j..bc..B...#.#.4c......A4.....G,d::..a.?.}.......g....b.^...m!!
p........|DzzW...S.>".#.qc.8....5...A.kX.}&C....{(|3..`iW..@-....%.
...h^9.$.#.]..z.........Em..9....7U. x.l....0._6..j..Vh..u...9....#P..
n...>.3.3... ...&'.|/=.....Ah....4Ye.....c5.w..j.?....:....E..v.*.x
=NG&........c....._.5.F)Z.T.V..Yz..zq.:T...<.D.....7...<#....q..
.x!.r|....7].W........k..i...o.v:J:.z\.0.<....P.Ex.?.~....0.S...6.N
X..j..$d.g$.N$.....\.7..zN......<g..L.......&.n.=.Ov......O.2z.c.3.
{....e.I.#=.. ..5.|)$x.6Q.:.OX.-.}=..25...0x...m.jQ.l....VU.hX.8.O. .Z
\..b.....<..(O......9.q$....O../..[...9..~Xrz.t.......Y....(..*....
...@.\.=e.X.\.f......yc...X.q..1..........`.j..C...Z...!....[Kszqm<<< skipped >>>

GET /wp-content/uploads/2015/02/suarez-barcelona-50x50.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/jpeg

Content-Length: 2484

Last-Modified: Tue, 24 Feb 2015 22:23:46 GMT

Connection: keep-alive

ETag: "54ecf9f2-9b4"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 90....C.......................................................
.............C........................................................
...............2.2..".................................................
...........}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
......................................................................
.................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*
56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz................................
....................................................?..N...6.le..H....
s...|C..xK..yR..>..H...rVZ-..s.w...._.....b. ...<.....,....hq$..
8= ...!.i.....:p...:>.i..G......<..._......4KI/....\H.h....#nJ..
g.x^......$....Vgl...#. .. ..>...[..x[M..z_....4..m.....*<...a..
....F. ............3Es..5....[cj.8PJ.gC..I.dW.G.............xuV.M.....
.V.{.\C.......bs.J.}gT.|7,..Y .D.......Ms....o.....vHg.<s.:.r.C.Y.H
..-.)..Y...r......Q....%k;4..|.p...j.I...........#...L..'n.T#N...>.
...}N........_.z^.?......|...l4X$...4.....b..cv..`H...J}.....2........
..e..Y..#.K...S....|...........5.....d..{..._.....X...M~...;|.........
......./&O.4B..\......@...~.....:........m9......$....NmE;..&......os.
...6.C.............O..2 ..1..!......#8...<(.~..%..b...mZ..f*.l@fQ..
.6.M..*r}>...|>7...,l.[m.w..2. ....d..0F:.p9<..~....3]:E.>
.|.Gu.J....H....L.._...3..c#>{.n......m..F..85.U.{ ....yO..)...<<< skipped >>>

GET /wp-content/uploads/2014/12/arsenal-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/png

Content-Length: 1682

Last-Modified: Mon, 08 Dec 2014 16:02:34 GMT

Connection: keep-alive

ETag: "5485cb9a-692"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...YIDATH...klT.....s..]... .`j..1.PB
).&.A..P..6M"..R.O.6.T.!j.*UQ/[email protected]."5i.....M.i....Hh...7.b......9g.
?..sQ.o..F..gf.......wn...5.rA..,.E.........Y..Jk.......g.. U.3.m.wm._
z...#...V35..d...J....r[j...?qqNj0k..KX..........-%..xa.R,.Ds..[...O.#
R.....=.._..9.1....t...j....=x=.'.!.....&Bi..G:%.L..@.\h65o....j..}Q}~
5.. ..][email protected]
a.h......B..4..Q.......vJ.....fh,HE.......O.....>..hs.Q...m.(v.....
.."..-..|.{.]..#[email protected]=.1......0%........d...l..
.&..Ax.<.._....}.a.D...>B....A.W.B...u.........M........HD|..0#a
..rpO....}..?.81.aUQH.....:..C....q/]@....Q.<..X..<.....iI!...K.
h..f$....4..{...?.t.I....G ).}..d.....LZ.x.A.B..}!Q:8..r.4$..A.4 f...2
...G12cx...;.....".y..'.Dg-Cy..P..X5.w..s.q.....[...H.8J4...?..p..-33.
.....S[.zJS..(.h*.:.y...]....8.(.......[0....0v(.........F..:.R...E.6_
..QZd..Dh.....|[email protected]...|.J)..G.:.J.0..Q)..6...p<..G
..4......z...<g...~.......P......R~...h...c..H0A..Y.o...=J......p.|
.!t.w.~..Q.H&........W.^H.GO ..-kA6.c.!.<|........k"0.!.J.....q....
!OUH...Yqr.w....9xr....a...s'...T*EZOg...=..\...fxV.K.....O.`......b..
........0..I.^../....s..N.:k...s[...EQ.......2\...%...'..}.W.,_R.q....
..b.....-u."..^.m....o..;~.a.\}p#..zr.@.....#B/w.J.....lk..k..=57Y...S
.........{.....M5-......;iM...(.c.3c......d.b...sx......}.[?|.{....b..
_.n...k..C...z.'...|..0...`....._f_f..y#...d.o..q.....#..u.....Re..5..
..48)...!.....X...>..7...<7...m.z......A.....S.H..h..%R.N...<<< skipped >>>

GET /wp-content/uploads/2014/12/chelsea-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/png

Content-Length: 2059

Last-Modified: Mon, 08 Dec 2014 15:44:36 GMT

Connection: keep-alive

ETag: "5485c764-80b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH.}.ktT......yf&3yO.oB.!B..0.
.H.P...,.XH...*ZE]...........$(K.K...b$.&..."..c..d..L.u.N...(....O...
{...>k...3.......W....<..g.y.t.>d....f..#).]..$~8..|...m.?.#|
.a...E..........h.y&k....f..'....=.5...8.#..[...1x.8s............x..nT
...U..n.z....9[Ko.......a...Lb.*.63i1!.b.R.v..b......]y...{g..m.f...7.
H...B}.....7k..2&............^..|..2^. a..q..l&.A.....hq:y.SE.Vb.;z|..
.>j.>.~..^z.F.j.>V........Jn..CXU..I.r.eS..QRLbJ.z..E.....gu.
t....k"3..}.s..p...../......]...8..n...|.._.O..=......l...... ......].
.........H.;v...<.1'.G_..Q.".J. k..L... .dd%<..D..!U'....S...*r.
..x./.T.......$.cu.....|...v...)...bP.....`...F.....k.....ub.....u..vT
1....r....k..M\[email protected].>?...;.Y....P.......K..?.
..N.V\.....5%qzF5=...vm^.)2..Q...^2...Y^..M.~...F...... .9~....v3. ...
l>:VCp..m......gq..}...Xi...[...3.MM...3.8U..P.h};.....;..!DA..U..O
.#.....N0.(..S2Ywg*....o...2fR..VHi..nT...b.......3IH....(b4.XL...[..t
....j.l.`.M...i#3.....1..D...>.....I9..E.t#~9..Y...S03....qg..M...[
X\.Mt....\..yP..w/.Hg......er.~Y.b........*Et..1-y0U.e...4:.CHR......i
.......].........$..vy(.O. 3....tv.#....0......U%...3.t~I.L.f.4.JXF...
[email protected],*.%&..M...@X..).Y..." ..K7..=.@'.o..'..
.)q.;....I.....$?.MO.3..q.D..=n..2.Q..k..A?.f."..]...9u.....X...5.....
...fA!N....<.}#...:.....).....y.,(M. .......d......UN.7. Y..c.Y.a..
.'e....9..=...-......t.K&@S. .z=$.[..........E<_9.-..`2H.lV......N^
w.y....ZD.R........h...v=N....D..."[email protected]}2;.4r...9...%....0..0.<<< skipped >>>

GET /wp-content/uploads/2014/12/manchester_united-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:54 GMT

Content-Type: image/png

Content-Length: 1537

Last-Modified: Mon, 08 Dec 2014 15:57:30 GMT

Connection: keep-alive

ETag: "5485ca6a-601"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...ip.......rs....$.$.bYR.X.
.Q"J..)..U..[...*3...U.i3.0.Q.V[q:.Q.........Y.EY*.h..@C.!.%...C..:...
...>.y.....`.....0...R..(*R...._....:p..N.9.............i.W].......
..o../...d/V^.t.H...|....n.W.G.....b]..W........W........o\...`!..B...
...B.,.EB8U.c.......?.I|..g.*@........e...&..p.h(..h.!.z..0h.........l
.R.N...$...r....-.W..Qw.....D....4..d.......Y<1.y.d.S...e..#.._..EE
..vy.!..3T..g...R.o.-..E..1..Y.......s.7>...x...........R.;.....e..
.Qb.g.,Yb..O{*......h...T. 1.......].}NrA.u..u. C...]..Md...W.....e?..
.Z..5A........,B.*i..E.m..Y......o...Q.k.B..TWy.....J..g.3..(uW.".A2-.
..%...d.....U/.5'...[.]..>h%.&...VY.T.....>"l`.....u.k..-...1...
.V.V.h.kr.4.M.6..W.o.5.:..p.......B.....m.xM.V[........=..i.e..#5.~`..
...g.....{rq%.C....x..w..3....y8.ibM....LY............S(.....[,\.I....
.M...=Q..D...O,.-.l]....&XY}.S2..fXRe... ...r.p.@y..........$...=....}
.*J.w.(..,}....R.k..;J.z....C...g..&..!......'..EmC.lH...oW..t...x...F
....I...\a.#.U...!.........R.<.?~.l.L....mb'...........]..r_..B .W.
.y..J.wV...Bv...).IB.&do.......s....u..o:.ß.?..c..Nw..c`.X^c.....w..
m.,.....=.elB~OV=.z.&.xl...f...}~u.....h.$-....Vn..UZC..M ..&<7..9.
..DRk.P!. ._#<.td..V..kK..O}.a.TG&U:...'.~_..yc...W..'.'~%.6.7..0e.
..D.....C D..6l<.s.PL.....n.?,[.....!..<9*....x..gf..=.).Rr...~O
T.....3..DyW.l....Z.x.._......O.....z.- .&S.c......#P.>....X..{Z.n.
uh{`.....&....E....[..1a....eS.......F.....q.C.l......[^...k..........
.k...&.>....H..K......~.'.P...f.=b{O.S..l..HPR..o_....JKM^...%%<<< skipped >>>

GET /wp-content/uploads/2014/12/tottenham-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 982

Last-Modified: Mon, 08 Dec 2014 18:00:37 GMT

Connection: keep-alive

ETag: "5485e745-3d6"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...]l.U...9s.ggg..]....E[...
.hA.P.@...i.h....X..JP4....x.F...j.W...R...4...HL.H...P..........wn...
......y.}'......q~2=.I.......>}...it..h.....#K.........`9.j........
.I.a.%.A..9..q}..!~\U......wQK.k.......4.....O.d..y.}..$.........o.Y..
..bz.......... .`.6:x..~"6.s}r.....XD:?71<....$........n..={.......
@.Xj....S.d.C.geI... ...fv...=...,_.X.`t...d....D...n............Z....
d&.7[w..44.slw....C..!.F[...|~....#!._[.."K. .e...HX.6.G.. (.M..(....h
5T#......|.......s5...J!a..b4.>....U..M.^.B.bX.K..=J.....n......!.f
.M.f4(..5.v..lzd...d...w...j..DB|)...a.a..d..{h.Y.'..9...?.R/....TV...
.UW..a........Izz/@O. ....].Z...m.......r.2....v..M........Cm.O.......
....|i.....W.:.....u....9.o........^L..........c..........YK.Q ....n%M
.n.*Z.n..XD..t..w..U.'k.jG~..J1...KR..#.zu..9...4.,...C..Hx2Y...e.....
....`...e.!.d9.g6....E.../p.4..8.:..$64.~:....?...E.........rX4\..r...
.`..@.!$.........[...9<...i...5...D...vSH.. ...a......3.)........I.
......IEND.B`.HTTP/1.1 200 OK..Server: nginx..Date: Thu, 16 Apr 2015 2
3:57:55 GMT..Content-Type: image/png..Content-Length: 982..Last-Modifi
ed: Mon, 08 Dec 2014 18:00:37 GMT..Connection: keep-alive..ETag: "5485
e745-3d6"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-
age=315360000..Accept-Ranges: bytes...PNG........IHDR................c
....IDATH...]l.U...9s.ggg..]....E[[email protected]...
j.W...R...4...HL.H...P..........wn.........y.}'......q~2=.I.......>
}...it..h.....#K.........`9.j.........I.a.%.A..9..q}..!~\U......wQ<<< skipped >>>

GET /wp-content/uploads/2014/12/Westham-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 1763

Last-Modified: Mon, 08 Dec 2014 18:05:25 GMT

Connection: keep-alive

ETag: "5485e865-6e3"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...Yl......?.Y=..6...=....kH
(T..JH!4J U..U...TQ.J}h.CUEj..VQ.J..VQ.6j. T.(..P...5../`..x..=...s.&g
t;......v......... ./....S.M..R~.4.....F.......=..{i..=........y......
 XS.........s..=..I..X..V!........)[email protected]%X./...
5.h.........0.Ai..#~6.........f.......l...c.~........F...L...J..,.J"M.
'.W.....C...[.Bi.....l...Zk.6 4......"..|...<..."X.%.i..QJ....I-...
.Ow......h.c....."..t.t.i.(....hXo.......mX.Shm.w.}..j..R......M..y..,
.....".......,>:[email protected].`.fz.Hm..\....h...E..`..h.j
a..>....,...(.1.....J...MeD..(QUgQUmQV&..UX^M..4....,........V'....
.Fi.T.P...S..h..I|..T..$Bh..J.....hj.. @*.....h.%c.Z...J.I!o.f.q.>.
...`)2IC.m.m..-.Z...;.k.k......eS^...-,..M.S...X.&.R8....q....XB....uP
..'T....W?Q..w........Q.3.;.R..=3..... ..V.n..#jq....Q().o.(.. I.....6
...ry5>..d&.....Xvq..........xN^.x.TS.n=....s.a.....,..* ...(..<
.W..X.LIb1Iu...........M...........J;.z..u..[:O......"4~.r...l.M86...\
.*Q,h.q...y..=.-....t...;........{....fn..b_..7v....w.~..I.......u....
.M].Ub...Qc..Q...Y..9(......C<!.z. i..X....N.............,.4.......
..?............r). ...............)7Jb......z.R2;.b.W/.n.{"....W.... .
..w...8....E.......F.....;_......z.g..yao[.......o3..Uv&.n..,...esL...
..sa:.........c....j=.."6nha..ef..'.......Z....Z..T....R...u.....*rW.&
gt;..2;..uW.[..fk..2.....WNl..ZDZ.k........}..ox..n.Z\......A.9.......
.}.#....o..i.F.9.FW_/..".L...<...$<.d.#..!...e.e.U......z)..$.KD
..p...N......?/....@. .-........]{.....tn.......9..'.R...E.H'ST.Fx<<< skipped >>>

GET /wp-content/uploads/2014/12/Newcastle-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:55 GMT

Content-Type: image/png

Content-Length: 1898

Last-Modified: Mon, 08 Dec 2014 17:10:00 GMT

Connection: keep-alive

ETag: "5485db68-76a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...1IDATH...{l[W.......~..~..8.:v.M.$
},q.........(.Z.`.*....j.E.14:.:!.T...EC-.A'....6M......8u.......{...\
...vl.9......}.........??....=.F.C.m>..8.........6p... ,~f.X)b6...R
5..`.7..........P........\.......b. .f.G.%.2r..!.M#....2..9...t....#..
.n..[..E>..2.2..3lM......b E..J&..Go...Y...../..B.$..N......]....|5
1..i<[email protected]...>.|e,...s.6G..f./..>{.?..E6.G..}...m..
.\..sb.tM.f..)...bY.......|mv&... [email protected]. ....z..k...
.....-.n;.hl.?.UE.(&-V...6...C..k......R.c..&K=Xh_.......p....dz......
...3.j.X7n.F,..0A.w.SI.........{r;...k1..._......R1-W91.h]......>.%
W...........x..a..M..k..|T...q....z.........9...../.....d......l.(}...
{....|...]<..#l3....:.......u.......#.k.jt...|A.{LsnJ._..v..lA356..
.nl.....p....J.>q'.z._.wS.}=}..Do.....Z......l.l!.-.u[N...r.......X
b:)M..B.,6.....vZ.w9L..v.........v.x..(jW..Z-4.-I2.'c ..V.........x^..
H...(...0F.*.R.r.,.\..)h....V....<...>.Fi..k.=...-o.F.VVd(...T*.
?...@UA}........Pb..l:..V.C.....wlU..[.:M........hX,...oe.......d.2...
..J.T75]z..Cl!.A..S...{..........j....^d0..@v.#..#..p......:...7[...;.
...G....T......T..R....UN..B.K...,......]-U'~....*.|[email protected].......
Y.p"A......?r...|&...U4..a...}.t...:....w.......YA...)O..N"I.uw4j1} ..
...'|...v...T..1.._7.-..........z.a'[email protected]...\2.o.V..`..|&....]k..x..&g
t;?l..{.....H...!sW0.........ox..c. ....W..n....<...*H...........o1
l......v..x"v.gU.5)|..H.6.w. .a..'.MQk........t......b...W>3...H...
...%.n:...`7..1..BYx......x..y.w."S8..j.H..wF..j.m..!Q..N.`R.z6...<<< skipped >>>

GET /wp-content/uploads/2014/12/Crystal_Palace-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1806

Last-Modified: Mon, 08 Dec 2014 18:02:04 GMT

Connection: keep-alive

ETag: "5485e79c-70e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH.}.{PT....s..xXXva....rQ....
.h.i4..0......T.....k.c:...b..3Q..5:..&.Q ..D. ...$"wP.e.e............
...<.....G!H...{VF..l...x.Ol..~.. .....&.99>{......G...8{..Nq..!
.Sk6Q..W..^y..eq."..G....y.._h70. V..*...........D...`WBP..(R.;.h.!..U
..<.].....dD..._....GT.cL.....c..L...Y..4........B..Mi...x.]m....."
2...........l...u.t...]"...=c..7ut_...~.y>.'.......&io../....F(T6H.
y.....u.N.`.U.#.4@...&rt......\..[.....q.R.f..C......4..|V.(.. ....$..
g....W!a.......O .._.v.....g..!.R.hT5*q.f~.c!!!^r..%....p.*T..)8S.C...
.fpH..`.B.&=.E..J....a 6......6..OK3.&....}.9=.. >.vI....J.!..fs`.!
L..$./....*..%.~...JQ.8....|..N.........s(..0...Xkv.].=....j.>F..5.
.=|v<}M..:=../..|...Uz.4..............%6........... .4......O...z.*
..3..k.,..r2=....Z.....B...^...|:;Q<....y....LJ.^z.O...(y..*.[^s.}u
..pO..Q.....#.M........KgK.;.Q...t..F...*oy.<..yNm............w...}
...,#.....]k......l..].A.X.b.o......a.A.-....}p._...X........\...c....
.....Y....{]c.wlD.x]..;..l.....y.<u...=..y........&...?<.....K.4
.....s[.6....H.<.W0/.G..#[email protected]>.].*.K.B8..U..c#..[.y/...vA
..0z.$.N....0..^.1[....FY].X. P.....F.h.,..:...p{B..'WC...s0..7.z=....
..'.N...w.Vr.>.jKrr&...I..$6..#..8.. .PV...._....?*....HX....xP....
.....w}>.........:6.........B.......\..-i2I$.........*Q\h.i.W.-R.[.
.I.js.#.... ............%^ .F6]..[.A.|.T.4.p<.......~..&ZACe#SS..U.
.....)Y...h.....`T..n...X.3$.tT...o.*......$.....=^?Z^.........k4..4..
.z$....[Ah.m.. ..4;[email protected]...<..*.G.a..|.=..4.A<<< skipped >>>

GET /wp-content/uploads/2014/12/HullCity-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1579

Last-Modified: Mon, 08 Dec 2014 17:07:44 GMT

Connection: keep-alive

ETag: "5485dae0-62b"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...]l.g.....G..8v.&m......k.
..e.....".*..q...@B.!!!.`HE.i...b..h.H.I.0F..:....%].4M[.v....I.....{.
(..d....{....<.......DG.m\...X...8..J%J...H......pj5....`qq........
`..... .0..J.-..v......._=...tz..ap`.sg.r.K.Q,......R..e..v._?...y..g.
.....O...c>31>e..]....*.......*..........R.\n.sg...xh.v.{.VR..&l
t;.:T.h{.S..|..............Z.. .....~......MJ.............&.z...)..D#.
W.UQ{..jM..d......P..y.......z.ZBJa.KKC..17.Y.*M.*..U.M...)a</<.
.24!l.C......5...].9..../.Z.....!.......^.?.e...Yx......L.cy!{C(,..w.&
gt;6...>#k.......e.s...$K.q..*..#...8.w.m.......GZ.t/..?.z..N.`d=f.
&e.F.......7Hn.Q..bNz.zo....6.....\...g..yF...=..,^.Y..pjp.h.Z.Cls....
hJ~...}..}u?......v..Om...04!.d]..n..d.;B....N.o.Q...s..${...y.....l..
s...0....B...fekTq..*.;aE..V...e>z.n... .-{.?...C...a......\.....lp
..`..5.V..;@D...s.....an.8......3d.)......H.K..N..)!...|.......M..X..v
.2i{mF..T!..D.....44......).........A.......|.).T..2.%w..Y..Z.<u.j_
'...*"...(..Cj4K1w.........m..n...Y.........}$3...C&..x...........4...
.sln.".....}....Bs.l...d!.....R.Z.u...y..4..w..]-H.....5H.*....i),._..
rO.b..O..E....c.'.j..gWg.I..."....:...z.5/..Cc..j.J}}=..2..PY......0UL
..g.}!...W...F[\nO.XS.T*C.AQ.,T|...G..4.........~....=.T.U.j..7...7.~.
.A(=..[=.d.:....Ss&.;.. 4... ...Ze^a...;.ho#...x3O!?K..CGg............
9..QD$kD.@.. .^T$'.x.X.....<......l.p........&Z..?:\.........y../..
.Y..7>-..5..H..5...$w...c\..pC....]...67.q.;&...*o..5O.F'.~.T...W..
..m[.......?._.6.9...^..[.O..tuZ.u...,Q...9.j...u..J.j6.t.E.....#.<<< skipped >>>

GET /wp-content/uploads/2014/12/QueensParkRanges-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1802

Last-Modified: Mon, 08 Dec 2014 17:54:09 GMT

Connection: keep-alive

ETag: "5485e5c1-70a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c....IDATH...Yl\W...w..;3........c....
.$MB...2B...TE...5......xB....."P.P...RT..E"RT...BH...c'...=.x.;s..C..
....9/......-G.3..........z...jC....@[.hcM`"....?....VV7..L. .%...(v..
..T$..c.Z..>.$.-TnE....S...S.....:.6.Twun..nsv...`.t4...\...*.J..,a
9..=M}....>.?w..\.gR...t...s....C$W6..dJ.K.p.:..,R..i..PE..n.......
.....=-W>.2....{f.oG.Z..?.Fk".J..g..b|.... .s.)"{...~...,..6.-1&..c
.....{....yk|..Z@..$.t7....Y.-..]....%........}o..y.....5......(..?.;.
..O@.>\..-.zLS4..Y..2>...cK.M..$ .#;..i*...Y........B.Gz..k2.;..
...=m.n)...q...m.dq.`Q.|^~o.....'.n..S{.|......^.b..;.x. cK......"/m..
.t.......#......L...w...k.`2S..B...<...t..\......t..T]..\I....(...#
..L...i.'.!.{f].P...\b.d.O............|r.U.../...4..wr.P...di..a.P5m5.
.'.@f7..\.J4..."..E:...so.W{lV.r...(.-.M...}.e..C)r.......07.r....3.|.
,...qs)...:"......_...a9...U...H...u.Og..L.V0.|g..f....B.["$k.4.......
......;....RO......0.:bL,..0...@#..q~f.........].ab.LK"...P.V./l.L.sDT
...0....d |}8E.2B..2......%.|g_3...o|..`_W..|........z...h...pP.-V...d
...o.h..V...\X`z.....AQ.....(.}3......q.#...z2%[email protected]
.8.........."..9..|.J{\Er...E.(Vy..........".....It........P.~.j./o...
...T.p.....$.\..........X00,....h.8.........v|..k....,..l.#}..O.&{..Hm
..\[email protected].`b~.._.....=.>........%...Cm.....K......o{....;~...r
1..w{..RS..k....JU.7.....<...X....t..<{d;#.)V.e...B....o<....
[email protected])g....x_.....4".......U.....j*..?J..Y.=.FQ$G....jC
?I6........M..B. Y.eW{...<g/.f.3AW......6..a.t5EIo.12.Wg.i...t4<<< skipped >>>

GET /wp-content/uploads/2014/12/burnleyfc-25x25.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:56 GMT

Content-Type: image/png

Content-Length: 1393

Last-Modified: Mon, 08 Dec 2014 17:56:03 GMT

Connection: keep-alive

ETag: "5485e633-571"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR................c...8IDATH...klTE...s..g....'m.... ...
......."QQb..5H.`..Q..b..c !&$..."j...[.GIQ...R........n...w..v...x...
.s..w......P^9.l..LY.4...@J._qu]...RRn..].:fd......<.....d...<7.
"...^Wn...1X.....v..."o...lS...#.oeT.H..'.@Gax...*E.^2iC..E..._q.O`..&
[email protected]......... .........N6.R.%.k...$2.E..F....V7..:...EI&1"...
...6.vyL2.........&D$.....R..w.%...d=.....W...K.9.Id.#?. .ny..I.v?..UJ
 .x...>...c..7....'.>..QeJMyT..Ntk...~m.u.....q.-....i.u...F...Q
6..P....D......=L......R....'....S..>..;..8...........-~GH.9..S?...
......k...dCm..sc..... 8.t..y.)Wx...n...4j...|[email protected]...\o'...vAE(....
..VI.j..!sf.,.W...BfUFX.....7...|...5.c......] B$T...{....c.... g.|...
......QwZ.Y.`..^......6.T,..~.Y........4....v...1%...A/1...-.,|!.#UA.!
....!%.......}#.P....3..F...... [.. .T....-..g.......},z.........vAK..
..sf.<.....1z......j.D.P].Z...wc...t.....R.X.E.y.Z...|.#b...%......
V..Ib.......x....r..ESr(....x...(..~.......L..0..*..:...8G[."......mk.
."...........v....E..,f.6..n......N...=T.3`.~.{...../.p....,...?......
o.j.:.2.....o.r....\3s..F.l.O..r.../P.u]i!C............}}\...N1.>.5
..T&.O ..s.7A.1...<._.........bk.r..t8U3..2B. ...O.w.....D...n.AD.t
L.|".>...EY..=S.j.Y..jt...M..}..zi!.p%...(......s...E..a......C.e`/
.J.QB...Kr....n.(..S..h./H.t.Y...~p5.`uCp....@"......p.df...4....%gM.C
iu.....j....a...{.w.?..k. Qb9...h;%.....o<..B...<E..DAO...7(..9.
. >b....&ba.t.....IEND.B`.....
<<< skipped >>>

GET /wp-content/uploads/2014/12/Newcastle-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 6086

Last-Modified: Mon, 08 Dec 2014 17:10:00 GMT

Connection: keep-alive

ETag: "5485db68-17c6"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh..zi.\.y.y..Wk.....Fv.M...i.
.$..B.... ^..vFv.#cd.. .<..12...1.'.$.h`G....djg......{Wo..u.o.....
$%R.5.M_....w.s...{....6./>.px..._.......c{J....`..}.0w..........@.
.C..`[email protected].......~..i...jg........i3.`l.....~..on"....w....
.v.'.;...I.%.ia.p.w........).........nmKtno...l.6.6.......n"...?....b.
?Z..x.4...j.W..].{.nv......V..V.A.f........?..~.".].......Z.`..4..z...
'.%..H....ras.g.......&......R/,./=.\.~a~V.M1.'D.W...-.v........d...g$
....7~l.k....iPB*.)......X....0.'DBJ^q.........h..V3..t9......F.......
.....m...z.......c=......Z......BA...vy|j..]...z...a.{fV.L...).n...C..
WwmK.{........)!....;!...fs...(q.....:...>....s..#...G...k..._.Z..v
....g...\A.M.IUj.....{...{....9.f.].......DL).g....s....).G.. .s.k.C..
..Cz..........G'....H..i...MO.....v..\..r.|..{.PJ...a..O....=bp.W".op.
.K..3.N...!d.VXn...9...#.7....{.....gS.........Fv...9...h.b=!.:q.#....
..R..2!K.?U .b[..#.q%`NN.......>............5'...H.1........j5.....
t....S...?(..G... [email protected].....;...$.O$.m......X...,...
'._9{..7....[.=....H,..`$~_{w?...AvmQ..zs.d..8.j.Vy.{?P.Y.:......yB.N.
.......d`mm.?....l...w.n.)...X...WI$[...V."QBl..X.}..................P
J.n.F..8..(..X./.x...@"<...P9W...........&.2..5G9..j$.?.. .w.b....D
..TJm`..c9.....>..w....F$...x. .j..0;G......K...aXI..<.....Uk.Ai
...F.S)...........hKkrK...uM..::...I-...4..i.P|.e.....$)..B..37bt$...U
..e. ......,/[email protected]...*..~.....Z..y..
c.X....$....~...H$...s...c.Z.$.....d.. .. ..q,9..~:...x...R.5.{oWG<<< skipped >>>

GET /wp-content/uploads/2014/12/west_bromwich-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 5482

Last-Modified: Mon, 08 Dec 2014 17:50:22 GMT

Connection: keep-alive

ETag: "5485e4de-156a"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?.....1IDATh...ip..y.....~........wJ.h..
%Y...M\).X..L.v........I..n....'.k.vR[...R$9....f...}.@...............
..L{f.....}...Y...Wp.u....].....&..,=..=.......f].......h..Q.. ..B.CJ.
}_.......y.p....U..U....R* .s........4..ij...hW.|... ...../. . V.....E
.T.nS...F..DK(..6.......H.....p8lj..A8l.P@[email protected].:..$JI.......4
....G..5..5...j.3*.oT..V.=Y..r.......l...T.)..R..r13......=\]..X.D....
 _.~........d....e$l...Z(hh..A.a.]........EH......B..R.)...p....iU..W.
^.Tv..e.t.*....sC...c..]r~..xU ./.{..o.....-K.z.$.2).]l...}L.bv.D<.
.Xv...D.....*....,.\.!.51........a...O<. ....t"..b..44*U..2p.>..
...4..B)4.....J..~w^;[email protected]{.....\.u...%.....[....c..mlfn.D.\
!...v|.....!.i..K..K..L"a..L.r.#..2.....y.Ma...S..hID...Tv.....A.F.L..
....7&.EC.n.....om5.!..RV,bi.\...9yv..d......H4..FL2.2M.!.....&J.ij...
........$.a,SG(E$....I...P....G.....P..Xr.G-.z..BP,....J^^.j..k....I..
}..D.&u....#d...%..z.........X.....X..&...x,@.\K...,u...mu..O0h.h..l..
cs....r....a......o..e..u.....W.....J-..U..B).5.u}..R..A.f.\.........2
.... F..X..d"...8.O....%......v.........^...Y.........J....&...U...g.-
[email protected]...;........./.v.r.^.P.../_8..G.8q6...
...WO0>...?x..t...<...{<.....UF'........OP.:.yp.o|.U~..[dse.R
....l..@ ....#.!.B..)s~d...8.....3..k(.....V..K..w......W....s........
x....M..._.........h...<@_w......q.B.........8.[k....V...FjER....c.
gh....s......3.&...J..N.....0o.;....l..A.2QR...r....}..:...F.......n..
[email protected][email protected] ....U.....W..].......Z&..g...b.<<< skipped >>>

GET /wp-content/uploads/2014/12/SwanseaCity-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 4655

Last-Modified: Mon, 08 Dec 2014 18:06:45 GMT

Connection: keep-alive

ETag: "5485e8b5-122f"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...yp....?=.3..f$.h<.S.n.
.[...1..H.q...!..,.....).P.!.....r..BR.Sl........6G..ll.eK....C.u.=}..
...I#'....J..7.......^.|.....F.a".....LLL.`6..?.>Ef3EEEx<.......
......h$.)..b.....*..,....tH..6u..........].[e......{...n...N....j.a2.
.u:$...^.$J .".$S).T.EU....\..........\n.>....?.H0.........../^4;.N
c......(.... ._.i....!;.i....*...}.C....4......\mn.........%.T..EQ.-..
......d... 3.;>sL....$.=.LL....N..x...K[>v ..\x>../q8.Wx<.
...,af........D".......s.\-.uuM......BEQ^...........(.yy.i|..3.2.k....
....v.....S/I./.....@z{z........mZ.fM:....\.5S....w..*G..)...Ud6.]UU..
?................(,,......._J..bh...4.x<...g...].......y-....,./...
dA.Z!73....i...h......||F....z&..7....\...HWW........V!IR^W..6s.i.....
..=...299A...2....E....f.h4NSN.;.E....8.........4s...c.@(......^?M....
..|. .2..;./..9G..0>>..(....d......j.X....^...F.z..y ..4,j...}..
3g.444LK..T....CCC........lv.T..'|.X...l{....<IQQ.K........v.~....^
...............(tuv...O8...:..l..f....EhZ...F...>s.|....2..p.._z..'
NPd6.......^. .LNL..[o..o^....(...s.y..w.z..Y.A.4DQ.......8<4..._..
.....?.......(.{._....G......1_.m.......688.=..'...Vk>.K{.7..9G.:;:
.....\..j....gtd.. /.e....4.2...##\.....KJ..e....w}....qV_..#...(.,...
.>.c...P(t., .##7..v..`.&d.]f..Lp.|3..$......d..z..k6l.....f .?.;s.
.....n............ ...|...[..........p. /G..:;.x..'....f....(..zy.....
z.<s%....@(.......I...l6.*Q.giv...3.L..l6>}..S..^...y...8....].U
H.X>>.(2..X..D6e..B!.V..f0..rifE.g....[6mf..W..*.D....=..{/.<<< skipped >>>

GET /wp-content/uploads/2014/12/HullCity-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:57 GMT

Content-Type: image/png

Content-Length: 4867

Last-Modified: Mon, 08 Dec 2014 17:07:44 GMT

Connection: keep-alive

ETag: "5485dae0-1303"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh...yl\........H.WUq...lj.$K.
e;r...8n.;...D...{..`...{.....i..A.0I:. .-.tg...w.....,o.%..-k1Iq.w..,
..V.{...%..bQ.1..r.........9.9..W.[...?1......Z......dgW.n.B.T".....j-
.r...p....9....T..S..#a....... T\.P.KYJ.......i...I$....0::J}}=......P
,.....yU.0<:<:.."V.Z4=.....7}........./.s.N...)W.......@<^...
.U>...|..{9r.....d....c.}}}...$.......y._..7....o...........6......
..?e.....o.......`...jiujn!.K$..Z.SU.........#.jkk....Ec.B!....P...X..
E..?.o.SSS...(..4G.{...)..0./..L$......cQ..0...$[...=.Bz...qU.........
.....e.P,.X\\.Z.1....D.... .p.....z.......(...Y..\... #.#,f.imk%.....I
ss.b......A.*.d.D2Am]..oay7s.t.!..T..>.`g.........'..00x.........."
..M.=s....z6^....`q)...CT<..3g).K.....O...C:.arj...v.."C...zz..8IcS
3....R).....yr)..... ........d.?.Z...J.\[email protected](.VQ.DcQJ.E....
.1..J.E.q(.....*.#..j......G(..TZe..ch..#.>72::.nX.,v...w].q..e.B.G
.T.!.j.......)..[.N...B2n.............z ....P......O.,..C~........(.5.
W...VI....r%8;).:e({..Ni. [email protected][email protected].#..(....J...;.
]..e.r..\...3.4 ..!....D...2>/.1!.z.2..B...gH.....{.%.....B......E.
.......m..%...".1!`..Aw.......K.......g..o..sB.*F..V....adNx..._....?.
8....{.............G.......p..!_.........<..Cw.2....,-.P,..?....at^
.. T<.....G....6>.'.g.....Vxc.1J...k..4"?.p..*...6u.x..2.3...Ld.
......7iYW.. .m.J.".z..7.q.rrL..*Cs..J-w...\..b&.1B.TF......9S.A.&....
....%^.:K....n..z%Yo..TH.KPWW...a..:....9H..U....qk...p...........3g..
...i.U.]e....U5....>.k;(:Q..(.e....)Y...........M.....=-.....3.<<< skipped >>>

GET /wp-content/uploads/2014/12/Everton-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 5740

Last-Modified: Mon, 08 Dec 2014 18:04:09 GMT

Connection: keep-alive

ETag: "5485e819-166c"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?.....3IDATh...y...u.?.......}o.Z..7$!.$
V.......O.....`L&3.x<.....q...d<[email protected]@K#.VKj......}y..
.Uu......#<....W..~.......K....y".X....,...;......s;1P0.q/...C}TNL.
.........J.............G.... .I.=.w.m*.,.....Q..c z.B.n.H.=.1j._8.K...
....|...[...l.....=.z....d.4...?.....{.....sMt*..ho.._[sx....&.|.4BB..
.....ub..H ..n.....:.A....Dx...%..;..z_{.U_2\..=.o]u,.t......~..e...@.
.JF...W7...............i(.qW...#.$....=_c...0.....>wye.]..dh...sUV.
[email protected]{%..u..!.O.#.F..1../".Nsn.`....{....[.w....'.'..bx| ..l.
[email protected]..^!eg..Y$...N..l. .K.....w.9.....'.Zz/...1....../}....`.
.u...(s.Ki.H#~/.*...I0.q...7...v.wz&.......E.........&.g.....5]..>.
?|e..y..k.G.......BD._Y.... ..!`..h.5Kj().0ay....$....... .`mC....A.OQ
a...%......1...<[email protected][email protected].&*...}..._ZV.k'.K~I&g
t;5.Q.2..a..<L....|B.!...,-.cee.eEaB...%a:....0.....VE. .../.-;....
..-.N...&s....d......RQHd|...o....gn]|..........k.4M..E}.&1...`..l...9
m...li(`WO..2..@.>\.)............MC...I..$.6.X.D...].G.K#U.v...-.G*
.H.....k.o .,......)1.w`...*.BT..XY......^6...B_.wFR.S....2..7.....Q[.
...<.meRMJ.........9x......<Q.iG.%5R.iGPa3.AT...F.9A..[.W....T..
..^....8.....M%$...M..w.uV..c.N.]..n.*.gEh.L.6...[...Kszd.S...E...U#..
....7_.ZD..x..U.CD..1U}..R`.R.e.\'"...G...........S.uY{v.$.x.X>....
.O<.s`0..I....E~.l.azM.2.=.fc........C).T..H..........(..e...|8...W
-W.B.R.. o......V.S..Y"..1 ,"..J.9A..lp\.TlV.8_.%.G<&....x....z=...
.P....CB......\.".... O..qz*...$.Y,....HZy....|.k/..._....a...m...<<< skipped >>>

GET /wp-content/uploads/2014/12/manchester_city-50x50.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 7167

Last-Modified: Mon, 08 Dec 2014 15:54:47 GMT

Connection: keep-alive

ETag: "5485c9c7-1bff"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...2...2......?......IDATh..yy.U.....;.7..^.P.EU1..P..
.b .....h'1..F.LwV....m.i../S mL...."A"..Q.Q...*...........~....Mw...V
...?..}.o.}~{.s6..!........r...t^.v,]......W*._..G.eO.....|...-....0..
......f.s..u.Q..sk..0v!......FW.../Q9#Oo.Nad.5....... ......Q.S..?.a..
_.B..z.-}A.H.f.S.%...s.n..7{.../.z.1...f..$%.5...9..!0....n..9FLN..;{.
.m..7......*U.x..?h.m;/..:..2d....a.......x......A...U.3...,6?...}].c.
.[.N-.v?<...w...........P.<1R..........C.........^[email protected]...
..KM.eM.AP.0<....M7}........I.D0R...o&C4:>S...i.[...D.!.X.V.~...
Gu.....-.v.....4d...i.N.q.......L......A. ..$...:gl......,P.|.I...?.n.
.\.Xvl.....e.)4..2.=.....c.....s....6...J.r.4...P.d....K~...g.a...b...
.......9.H...96..L..Se..P.....RY.wm.M.Z.>..WO|lr#.M...J...."W.a..*.
.....6....c-..!;~...V~c8.C3l8...d.....r...p./\..................68...Z
_.>n.....4.\v.|[email protected]*.G..B.tV.....P...."[email protected],......0
m.1.'r.....!Z%..... .#SeLe.. :..f...$...U/..B..y.4.z....8...w.P~.Pf.p)
....=LY.......l.CU..q...R.......g..Z..C........`:.bl..xXBY5P(.........
....Gu?...T.N. Wu.J....n/...t.A.G.o.F..M....V...C.L.....c-I.N._...a;3y
.&LA'..M.PV.(U.....A.$.,0Q......B2.M.EI1P...R...!W...HH..E.J....O....;
i..../...(#........d.'.f...|..9....ZYt...E.....DN....Z....o...e^Z..7D\
.R7..`X6..!...`...~.G%3~."..5Q....9...q.{[email protected]...)^.S.~.....
9T..W..Z..F...(.u=Lf.p..Y..........c.......=;........}.?V.....O3.y....
..G..<.z.6.S.|a.........!pD.P^...o...#`.o..D^5,.......T..d..C...89.
C&..SBf..g....!..[..L..{J.b...O..z.....X..v..?.lQ.(.....U.....7...<<< skipped >>>

GET /wp-content/themes/brasilfc/images/footer-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:58 GMT

Content-Type: image/png

Content-Length: 955

Last-Modified: Sat, 09 Nov 2013 03:55:14 GMT

Connection: keep-alive

ETag: "527db222-3bb"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR.............Z"......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:CF401CF7BC0E11E194E7BE114E
680E9C" xmpMM:DocumentID="xmp.did:CF401CF8BC0E11E194E7BE114E680E9C">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CF401CF5BC0E11E194E7
BE114E680E9C" stRef:documentID="xmp.did:CF401CF6BC0E11E194E7BE114E680E
9C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>].]....1IDATx......0.........@n.&M.......$w6Q
.K.....~x..........>....IEND.B`.HTTP/1.1 200 OK..Server: nginx..Dat
e: Thu, 16 Apr 2015 23:57:58 GMT..Content-Type: image/png..Content-Len
gth: 955..Last-Modified: Sat, 09 Nov 2013 03:55:14 GMT..Connection: ke
ep-alive..ETag: "527db222-3bb"..Expires: Thu, 31 Dec 2037 23:55:55 GMT
..Cache-Control: max-age=315360000..Accept-Ranges: bytes...PNG........
IHDR.............Z"......tEXtSoftware.Adobe ImageReadyq.e<... iTXtX
ML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTcz
kc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe X<<< skipped >>>

GET /wp-content/themes/brasilfc/js/fancybox/fancybox.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:59 GMT

Content-Type: image/png

Content-Length: 15287

Last-Modified: Sat, 09 Nov 2013 03:57:20 GMT

Connection: keep-alive

ETag: "527db2a0-3bb7"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
.PNG........IHDR...F...............;~IDATx....x\[email protected].. 
...Vd... "XvdS@A@...].].A.Q.%.i.&..=M.%]........y...............O...I.
w.{..|.yc.....M..........[.7......GZ...#.(...>.w.}..........~Uq....
.g...9...Z_.oH{WZ..zi.[....~W..L..J. .|.=..|.......;v....w....'....>
;....?.....{.9......v....1...kK3.t...i3.%.M.........iD....M~.._.}.]w..
..o..d..[?......z|...../_..........o..q..G.@...<.....zS.[......v..%
z#.v.i.a'.t..?.....^..9....-.....c... W.Y,l...8`........=K..\!.)$....?
].a)......o..../~...?n...R6I..@,h.<g...;.....?X.~.&}.t.......:t.p..
.r..V."QL..z.%..!C..8..#w}...O.{......k...?~.[.w.s.=.N.:.#c=.....N*...
8ojW.....U.X....,U.0........./..........~.......D1.....?.h...o.{...o?.
[email protected]...'W.....GG.A.l.........H_6..D...w.}......U_...C.VI
....|._..........6#G..V.7..r...>....y..s...k.~,..[.9.....v.a.....G.
.<y.....&....ougg.....o..3y.......K...........K..........P..../.?..
.c..k......_[QQQ.Ca*....Q.....G...........w...{\......]v.e.._...9.....
....K......Iic.j.....3f.tDH$. .."B..A.j..\\WW..._....WRRR...;......#F.
...a...?....c.9j..u...O....,.. ...-.n........7...9r...U......9....a...
...:Ug.}v.....<.."..j1.j....]m....4...2....=..Oo...n...'.0..X.j..^~
C.u.-.</).|..z.#...G|.e.]8x..=..6..2.#..Z&C5:.$..L.u....zk.....|...
g.q...G.=W.pB. u2...O:[email protected]|...".....M.R.B{...6
..t.t.....:tg...?.q......7V).p..o......[*&Y#.w .t.............o..... .
...#>......M..9..ts....lan........./8....)?.(m{|..a.._|q......._|.5
.t|....gX...K.n...N..i8`n\>....qz.rC5eee.............^.>.qR.<<< skipped >>>

GET /fancybox/fancy_loading.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 16 Apr 2015 23:57:59 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Location: hXXp://VVV.brasilfc.com/fancybox/fancy_loading.png/

0..HTTP/1.1 301 Moved Permanently..Server: nginx..Date: Thu, 16 Apr 20
15 23:57:59 GMT..Content-Type: text/html; charset=UTF-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.4.12..X-Pin
gback: hXXp://VVV.brasilfc.com/xmlrpc.php..Location: hXXp://VVV.brasil
fc.com/fancybox/fancy_loading.png/..0......

GET /fancybox/fancy_close.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 16 Apr 2015 23:58:00 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Location: hXXp://VVV.brasilfc.com/fancybox/fancy_close.png/

0..HTTP/1.1 301 Moved Permanently..Server: nginx..Date: Thu, 16 Apr 20
15 23:58:00 GMT..Content-Type: text/html; charset=UTF-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.4.12..X-Pin
gback: hXXp://VVV.brasilfc.com/xmlrpc.php..Location: hXXp://VVV.brasil
fc.com/fancybox/fancy_close.png/..0......

GET /fancybox/fancy_nav_left.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 16 Apr 2015 23:58:01 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.4.12

X-Pingback: hXXp://VVV.brasilfc.com/xmlrpc.php

Location: hXXp://VVV.brasilfc.com/fancybox/fancy_nav_left.png/

0..HTTP/1.1 301 Moved Permanently..Server: nginx..Date: Thu, 16 Apr 20
15 23:58:01 GMT..Content-Type: text/html; charset=UTF-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.4.12..X-Pin
gback: hXXp://VVV.brasilfc.com/xmlrpc.php..Location: hXXp://VVV.brasil
fc.com/fancybox/fancy_nav_left.png/..0..

GET /chkhs.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:28 GMT

Content-Type: text/plain

Content-Length: 23

Last-Modified: Thu, 16 Apr 2015 01:57:08 GMT

Connection: keep-alive

Vary: Accept-Encoding

ETag: "552f16f4-17"

Accept-Ranges: bytes

BuildDate=2015.04.16.01..

GET /stc/blp.css HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format2.html?adBlockCount=1&page=1&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=0|153627; clkct=/dQeJw2lvT36J9Ez6eZLig==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:09 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:22:32 GMT

ETag: "12680c0-95f-513c33d53b600"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 794

Connection: close

Content-Type: text/css
...........VMo. .=.R....*.....#rN.Uo........Q.ca..[../`.O..Q....7o.q..
_^ =.Xn.H.M.XbB..v.P .....=....$V.D"@Pm.....(.......;j.S....jA..8..-.&
lt;......s.g.-AX2.wWXTaE%.^.......Ta..e..$T&qyB.pF.".2..T.r..k...B9P.s
8&.#[email protected]...../..O8.......(i.7....XK.r.v..`.IP.....r.Q.
wuiC.Z...a...L3.l*..........U%.....Po..........L..h.\^..9L..E.9.?.B.C.
.\D.z.E..@...&....8...SI.N.o~B.'..tF....#?............Xg.....sP.w8.9..
.......}.Ra..2.*.......H.?.......F4K/P:..v..<a.g<..^>C.=~....
J...wz...w.s....m.......kA8.].V.^.....[A..NG:...~.B.....4.....j...i...
...0.b.j...O..n.T..........^....QE.V.]..9a....@..,.\.;WgPP&.9..,.]#...
.....2......re.(.p5.V..S.<..k=.p.6..K.L........]...1Q..u..2.t......
..r...%.2...!..i.bJ..QR_.\/.x.<.E.....X.>....fKV...!(....\f ..L.
.jt........W....Q..M.....8..Qb........n.._.....

GET /pagead/html/r20150414/r20150409/zrt_lookup.html HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: googleads.g.doubleclick.net

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Content-Type: text/html; charset=UTF-8

ETag: 8281997907193036559

Date: Thu, 16 Apr 2015 18:26:04 GMT

Expires: Thu, 30 Apr 2015 18:26:04 GMT

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: cafe

Content-Length: 5099

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=1209600

Age: 21381

Alternate-Protocol: 80:quic,p=0.5
...........;.w...... z}.UT..~..(.n.~l.6.t..^`sd[....mB....f$..@.{?.9..
....f<..q{...?....Yc....#..S.z.)..^[.yIp....Hr......2..<.q....s.
H.(..'....^LS..<]J....2?....#k...|......ic...4c.^......v!.qC...E...
.s..Ga.0.oc.g..}.{.....2_.1.8 ...{u..jx.......i.'.....<.....(.\....
...4....(..l...."GA..$^.=...x$;.q.O.M....i,.r.]...............38X.....
...E.a....$...}A.A.....Ix......FF.l..x.0...BZK(.....N......a. 2.<-e
>W.U....en>...8.X.......}....g/.....Etky..]..fMI.G7.%.iM...i...]
.i..9^A.w...yz.I......h6.....-.....T.i.(....8I.p~.q.T.Y#...?.|....M.&g
t;=...j..4.... J....;.s..G].9..G....T......'N......e......P.UL*m.A....
...4:....x.(.........p.u.Ij!x..c..4...A.\D...mY.<_d}g.....6..1l;...
0hY}.^.c...O..<..dle.0n<[email protected][& j.y..Jt.....Q.7.....J..~M
|.I...n...%M.....FtF.u.....$...})......#N.~..h.........6......._...8.m
cx!....21.G.g.hyZ...x..V j......x.IWro..Z#...lP.\^.}...S..H...).[F..&.
.2......=0........v[..z.8.c... ......k....6..."[email protected].&..*g.J=.K
[email protected]`..)..P1.NP7......1p.....2@..*"...N....GTQ...
...g.Y<[email protected] ...=...$..M....3..Y..X1#ZI...V..B.-......4...
.1w7..@..=...)(y.....l...ka.M...pohU.:CZa..!:..s..6...*[z...........#.
....n...1.........i..._>....N.Ac.....4..>.'.:......s.w6...^..?..
...-H.F.,o..;]ZxD.^.=.A;[email protected]@.4....D};..W['...O.>!...
...6g..a....n.`j..d...........=..........T~^.,..k.....Z.$.TXR......H..
".y....}.s.>.....k...0O..x.5...K.vTa9.8..._..h.....I..*|^..E.p.....
a...h._..V3...\P./.... ....Q.E..$..E8^r%.2....$..|x.,./..h..O.BGf.<<< skipped >>>

GET /pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d|||n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: googleads.g.doubleclick.net

Connection: Keep-Alive

Cookie: test_cookie=CheckForPermission


HTTP/1.1 200 OK

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Date: Fri, 17 Apr 2015 00:22:27 GMT

Server: cafe

Cache-Control: private

Content-Length: 2635

X-XSS-Protection: 1; mode=block

Set-Cookie: id=22a540be080200b8||t=1429230147|et=730|cs=002213fd484c668d2fff9051f6; expires=Sun, 16-Apr-2017 00:22:27 GMT; path=/; domain=.doubleclick.net

Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; Max-Age=0; expires=Mon, 21 Jul 2008 23:59:00 GMT

Alternate-Protocol: 80:quic,p=0.5

Expires: Fri, 17 Apr 2015 00:22:27 GMT
...........X.r...~...CIA......J.8&^.x..-.h4H2.,.Xlx..#....:u...0{.t..u
..[[email protected]..]..r|$.B...J.K.c.d.J...e3>..0&..... ..
s._..F8*X..N,.h9.e#.". q.:L..A.Md.......s6.2.:..*=u6[....-..b.>."..
i.(..-f.."ED.mg.DI.K...l.8fAE..........4......1..5me".E.%._......0t."V
..7e.D.Q...\.76:.q.K...q..E..T....r[.\f...Q..J..,.NSb.!4. ...U..k.....
./.?.J..\...l...|..f>....l..s9.0H.N........ve.o....X...()....@.|...
-......4..s. .'.....t..U.`<.m....q.........Iw.1...`....P^.....X....
...m.w...(.i...'.....u2-...Ld.J.?......K...-...KBc..f._f...."...PHD.n-
...(8.%H.3qD.Q..IJ.....O...(.0.......ZE.....V...F...i5..9t.....2...a.|
..q?.b..l../x.dt.qH..f3u.O......l..0...............g..m.....,.X...#3..
Z...B.BQ=m.Q.5..V%k9..!k......9q.x..E/."..i..k.M..`)..-..1......@.....
.`:.6"....2)!....e...M......fk..9wbF}.56..8..U.4.b..;..@_..B..ys..Wh.2
..z.H..&..)~.>.|.........G|..=....c..O..$.=...?._eQ)I.@... 7.......
C.L..s....q..;..z.dHXY...S....N.3... L.i.3...D...KD.~...b.. .n....y.&l
t;I..}...f.hd..CN....555.x...M3.io,....8.......<kGt .t1....d..6A'.(
|......x.S<.Z.v..8.:..4.h..6...b...6.....f.\<w..]_V..A....."9.st
..........z...#..Q..R..G....u3.f./....bQB.) ..R. .l.../.mC..?7..x.=...
>.(.wP.,.Y6.Qa...A...pj.q....%.X.........3.....g.........xR.v %..n.
.. ....Y.L.1..9C..*.E.f,........,=.y,kO_.G.$64e..K_..jY....7........%s
aR..*...,.....>T.P..6..L.................D?..b..n ............Zh..k
\[email protected]_.."."J....|&...?....QP...n...v.w.:........j..pE;.5..k
F.pM.3Q... w........B...v....gt.4......-.d.......*<..1/..s.L.b.<<< skipped >>>

GET /stc/gen.js HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format2.html?adBlockCount=0&page=0&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=0|153627; clkct=/dQeJw2lvT36J9Ez6eZLig==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:15 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:22:33 GMT

ETag: "1be009f-1292-513c33d62f840"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 2240

Connection: close

Content-Type: application/javascript
.............R.........*X..D=.m.(..... !d.[... lc.``|..t. ...q........
...S....[.FCc.;...y.{...~...n....J...WV...qg2.....}.a.....t.u.K..{....
'....">.L.Q/7.-.............=...m6.'...ts....^....>.......z.P`..
....R$/..o?....k.........S....Vs....h?J..PVv7..?.......$....;n...."o.4
..!..=u.0.........Q............((c.....%...-F.....g....!.s..._.....p..
1JgZ.a.<E....x])7q...D.o.p...z}..G.Q..Z.H..5.j.......iu.p^....1.7..
b.........R...M.h.Y5....m=2...i.....#c../....?.M..s>.W..........m`|
.....8.7h.2~.[g...>v.O.g....Sl....?..-m.~#l..... G..`...@.^...3..{.
.)...[.......2..k....L....81.7..]...k..3.....Z~..g......2.....wg...l..
.?...W:.U.......U......>v<.}v.]...`e...>^..6.....`#.....n....
<..{....M..J...Ej..{...h.....Opfk...8.....L..._....O....8. ..BC*.N.
~c.........F7........#vW..t=.{....5./.G...f..~.Q..aJ.e...U.3.9.Bz....&
gt;...B....ck.. ..ZS...f...&...........q........!P....K....H.1..G.....
.......@X.}.8.S.&...._...q...F8m.v'.a.8..t.|......y..<...,.[..Wr.t.
0...0..m..z.....v.2.9x\...\...V..h9...!.. ...E...\L..qQ]_h".u.?sx.j..)
..N. ..:...a...E\.)^E.X....S......1....:.D.:X24K.D..$.._..l..C..S.!...
%.........(....y.E.(.'.l.#..:...~.B.A.....).:E....._S.%..).:...q...V..
....Y."4d^.....!..H.$....{...A..@...\l....*..xM.....4z\..1.1o...1...WS
v.P...i.....:....u.E...c.M.d..................u....#L........).`p2.8|!
JQ.*....R<. . ..u......:."......r]...$u..!.....R..)...,.XD..:E.....
...:Eh.M......B._0#..]@O.....%.r$..[...0....k..X.....'5.....-....|....
'..>....a.SW..R.....T[[Jmo.,S...CM.{.*..2.G.a.)fe....*>.&.p2<<< skipped >>>

GET /svn/trunk/html5.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: html5shiv.googlecode.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:20:00 GMT

Server: Apache

Last-Modified: Thu, 26 Sep 2013 10:05:28 GMT

ETag: "32//trunk/html5.js"

Accept-Ranges: bytes

Expires: Fri, 17 Apr 2015 00:23:00 GMT

Content-Length: 2429

Content-Type: text/javascript

Cache-Control: public, max-age=180

Age: 123

Alternate-Protocol: 80:quic,p=0.5
/*. HTML5 Shiv v3.7.0 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 Li
censed.*/.(function(l,f){function m(){var a=e.elements;return"string"=
=typeof a?a.split(" "):a}function i(a){var b=n[a[o]];b||(b={},h  ,a[o]
=h,n[h]=b);return b}function p(a,b,c){b||(b=f);if(g)return b.createEle
ment(a);c||(c=i(b));b=c.cache[a]?c.cache[a].cloneNode():r.test(a)?(c.c
ache[a]=c.createElem(a)).cloneNode():c.createElem(a);return b.canHaveC
hildren&&!s.test(a)?c.frag.appendChild(b):b}function t(a,b){if(!b.cach
e)b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumen
tFragment,b.frag=b.createFrag();.a.createElement=function(c){return!e.
shivMethods?b.createElem(c):p(c,a,b)};a.createDocumentFragment=Functio
n("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shi
vMethods&&(" m().join().replace(/[\w\-] /g,function(a){b.createElem(a)
;b.frag.createElement(a);return'c("' a '")'}) ");return n}")(e,b.frag)
}function q(a){a||(a=f);var b=i(a);if(e.shivCSS&&!j&&!b.hasCSS){var c,
d=a;c=d.createElement("p");d=d.getElementsByTagName("head")[0]||d.docu
mentElement;c.innerHTML="x<style>article,aside,dialog,figcaption
,figure,footer,header,hgroup,main,nav,section{display:block}mark{backg
round:#FF0;color:#000}template{display:none}</style>";.c=d.inser
tBefore(c.lastChild,d.firstChild);b.hasCSS=!!c}g||t(a,b);return a}var 
k=l.html5||{},s=/^<|^(?:button|map|select|textarea|object|iframe|op
tion|optgroup)$/i,r=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|lab
el|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,j,o="_h<<< skipped >>>

GET /format6_d.html?adBlockCount=2&page=2&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=6_d&numads=2&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1& HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=0|153627; clkct=/dQeJw2lvT36J9Ez6eZLig==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:14 GMT

Server: Jetty/4.2.24 (Linux/2.6.18-238.19.1.el5 amd64 java/1.6.0_21)

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Language: en-US

Content-Type: text/html; charset=ISO-8859-1

Set-Cookie: numpage1=3|153627;Path=/;Expires=Fri, 17-Apr-15 00:39:14 GMT

Set-Cookie: clkct=/dQeJw2lvT1r1Vvu85a6dw==;Path=/;Domain=.siga.uol.com.br;Expires=Sat, 18-Apr-15 00:22:14 GMT

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 12430

Connection: close
...........}......s.....}..&3%v.,.G....d.-....!.-lu.........>O....d
fUw_.1;TY."<<.=<<.=B....Na8............wwO.........3,.h.R.
\.g1..`.....&P".....\.|......~.|w.B.i,D....}.>.j.0h..3...O;...z.R..
....8..;v...\. .. jw.Qf..m\...{.p........Z.W..L&....0...xM`..:.....5.M
@.Nq.>.z.\g.&w#.. mdJ....Y..c...r..E/.;.."..f.tG..[..R5I....P......
.. ..j..2....H..b.A`D.S,.)..*....Hm.\`....m..4.d...S..K.....B..%..|.t.
h..{YR4..=.h....x..C.../..O.w*M.l.zO.b..*...r....(.[..h.1.._...nA.,..(
...p...OX.^.. ....U.?a.".......8..-.{V.........]..`.t.l(-.d7s.aX.N...@
...[..ud{i.p.1...R...5Eg..[u..bK....=.@...<..>.%[email protected]...
CZ.e....S|E.(.4`...R0....).$...<..O.=..X.{z~.......e]].....d$.)..E.
.h6p..h..p;..F..d<.........b..y..L&u../JA........io../.va0o....T.^.
T...*0v.....W5..9~q.yp.o...A.../B&.PC/[,.Sakf...^...AcY..D...m..%...Nu
.R..P4.4|{.R.D6..c.s.....v....?...z...F.......$...-.m`..H.3V.(.pi.....
.....c4...0.).......T..p.,...4.../.(8h.C ..S...$AR.~...z"...]..{.._...
K..8.``V.,..^s.'[email protected]...,.Z(.[.N}.'!.......}......iKP....
 o....Y.O.3h|.T...".......w......._......W..ex...1...g9....3...Z.1....
..9..z.._J{..r.[0wHE...'D..yc.....$3..._....2......6...tOK....k.,....b
......`..5.b...e....}.S.t...h...`....5.....5.....{...{....o.....<..
......!._$..D6.IP...H'...|..F.r..#A...|....a1Y..d...\.G.......VirZ[..I
B....B....9O...a..j.ue=......~....<.6..Cd..z.ON.r.#l....%..s.$.'...
..r.........S.To8U5JS.nv/B..F.P.pu...'..J.). .A....LiN...d.Ua.........
#X.vR....|~P......M.....d.*.i2`[..t..3jiI1K}Q(...).......s8l......<<< skipped >>>

GET /en_US/all.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: connect.facebook.net

Connection: Keep-Alive


HTTP/1.1 200 OK

ETag: "636f4f91c0c9263cd22ff9357a16c714"

Content-Type: application/x-javascript; charset=utf-8

Timing-Allow-Origin: *

Vary: Accept-Encoding

Content-Encoding: gzip

Content-MD5: WPSke/wCmeY72IAAMPhlPg==

X-FB-Debug: x8F49j09Jwp6BoqCQRdwPNKjOElArMBaC69gtr xa4PDOgWZusTb3/ cwtb4llNzQrtyfgEADkdAfQYVYAGMxQ==

Content-Length: 53577

Cache-Control: public, max-age=1200

Expires: Fri, 17 Apr 2015 00:42:05 GMT

Date: Fri, 17 Apr 2015 00:22:05 GMT

Connection: keep-alive
............}..H.?..y...k.A...#D./.....Ir......|.. ..#.....~.[..j.a;3s
..w..X.sWWWWUWU..p........'/<.??|..I&.|....d..\.<}q.88..I...?...
......T~.b..,.....A7.$...a..S.r....$.{.....*.AXy=...G.x...........1...
......z.%.....K.t...o.}..nOJ...|.....I/......^W......*.ne........y..H.
W.%..8..MR]...8.|.Mh.~.2.z......[4...U3K...a2.g.A. ...n....&.T)..J....
..o....."4:=.J8....5.h..2.v{>.&.y2...I7^....f..d...y2..G'.-....i8..
WH'.d vW..|..z..*:.>.ww....p..M*.E,.....e...09...|.1.v.~..~h.9.(.F.
[email protected].. TVP.............0.WC.8lVeQ].|w.Z=.O.Y0Nww.W=.'...]....T
..;...f...*.`...o.P.?=.w..>5r.....4..S._...M..[.&.5..OJ.9...z?v.N..
B.3.....M...*(..-.....*C.I......y.T.Iiu7..._.F.Z.TB_.]..t{%........&..
Z...V..a.M`@S2C..z..Q.o.^.h.4^2.0>F.C...E.....Zj....e............VO
..I8s5..[.-k...Vn..=B.....j!.H...I..[.*.m..>./..,...^ [email protected];..i...
8.8..1a...}.]..E.,...fI..Io..\x=Mf..9k...D.[.......YB....\.R.....{.)).
.y.2.....$......Y....Qqja..P...i.........P..u..h.z.4.".8.....".....'g-
B.*j.~....Zq.....h..T.'.....)u. .$Dhufa0jI...2..G...6...t.{.P.e.zA....
DE.j.O....<.W..q\E.........tP..g..A....-..5)..t...."..`6z...Q.Z..].
o...}..:.qWX7..F..{X.f..M&.`N......[>s.D....9.4.0&..,h.....(.......
...l.,.........y...:^..y.....ww.)U!.|..qdds.x.=..#{.....lAsEq.?1^....R
<.*-..vH8;|9j.jC.:.........?.hD..(.0^...2na...;b....)H}...(...8.?br
4!{zc..eR...V........H....>..Sf.c./.........3..sA$Z...~.....P.1F..x
d.<......P....T..1.!.:M..q..g........c&.6..t^....Z.V......e..j..G..
^.[..!.....k...6...#....u.j..].a.[[[email protected]<<< skipped >>>

GET /pt_BR/all.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: connect.facebook.net

Connection: Keep-Alive


HTTP/1.1 200 OK

ETag: "17ae88257f52c2340ee164539e818fd6"

Content-Type: application/x-javascript; charset=utf-8

Timing-Allow-Origin: *

Vary: Accept-Encoding

Content-Encoding: gzip

Content-MD5: 41lybBJHUjJ22vOCoCCBRA==

X-FB-Debug: a/ybKD5NmctPkE92Ib/gZIoSSp2OgPpNSV6K75dav5dbTQBUEAcaUpTYwKkK4d66SkFnsz/ZJwvGw0ncRXAmVA==

Content-Length: 53582

Cache-Control: public, max-age=1200

Expires: Fri, 17 Apr 2015 00:42:32 GMT

Date: Fri, 17 Apr 2015 00:22:32 GMT

Connection: keep-alive
............}..H.?..y...k.A...#D./.....Ir......|.. ..#.....~.[..j.a;3s
..w..X.sWWWWUWU..p...............U.$.t>[t.Q2iV....8j..x.y../?......
...T~.b..,.....A7.$...a..S.r....$.{.....*.AXy=...G.x...........1......
...z.%.....K.t...o.}..nOJ...|.....I/......^W......*.ne........y..H.W.%
..8..MR]...8.|.Mh.~.2.z......[4...U3K...a2.g.A. ...n....&.T)..J......o
....."4:=.J8....5.h..2.v{>.&.y2...I7^....f..d...y2..G'.-....i8..WH'
.d vW..|..z..*:.>.ww....p..M*.E,.....e...09...|.1.v.~..~h.9.(.F.I@.
..yK..o.z.. TVP.............0.WC.8lVeQ].|w.Z=.O.Y0Nww.W=.'...]....T..;
...f...*.`...o.P.?=.w..>5r.....4..S._...M..[.&.5..OJ.9...z?v.N..B.3
.....M...*(..-.....*C.I......y.T.Iiu7..._.F.Z.TB_.]..t{%........&..Z..
.V..a.M`@S2C..z..Q.o.^.h.4^2.0>F.C...E.....Zj....e............VO..I
8s5..[.-k...Vn..=B.....j!.H...I..[.*.m..>./..,...^ [email protected];..i...8.8
..1a...}.]..E.,...fI..Io..\x=Mf..9k...D.[.......YB....\.R.....{.))..y.
2.....$......Y....Qqja..P...i.........P..u..h.z.4.".8.....".....'g-B.*
j.~....Zq.....h..T.'.....)u. .$Dhufa0jI...2..G...6...t.{.P.e.zA....DE.
j.O....<.W..q\E.........tP..g..A....-..5)..t...."..`6z...Q.Z..].o..
.}..:.qWX7..F..{X.f..M&.`N......[>s.D....9.4.0&..,h.....(..........
l.,.........y...:^..y.....ww.)U!.|..qdds.x.=..#{.....lAsEq.?1^....R<
;.*-..vH8;|9j.jC.:.........?.hD..(.0^...2na...;b....)H}...(...8.?br4!{
zc..eR...V........H....>..Sf.c./.........3..sA$Z...~.....P.1F..xd.&
lt;......P....T..1.!.:M..q..g........c&.6..t^....Z.V......e..j..G..^.[
..!.....k...6...#....u.j..].a.[[[email protected].<<< skipped >>>

GET /uolaf.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adrequisitor-af.lp.uol.com.br

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:04 GMT

Server: marrakesh 1.9.8

Last-Modified: Thu, 16 Apr 2015 14:14:17 GMT

Content-Type: application/javascript; charset=utf-8

Cache-Control: max-age=600

ETag: 7c9847fca239a88ddf0af1dd2a329f87

Expires: Fri, 17 Apr 2015 00:32:04 GMT

Vary: Accept-Encoding,User-Agent

X-UA-Compatible: IE=edge

Content-Encoding: gzip

Content-Length: 4273

Connection: close
...........[.o.G.. 21...".}.....f..l...`....S..bkI..X...U.<d..(...]
].........v.._......7.Y...67...?TM.t2.,..f...z6......vd~3.i......x9.I.
r.......xs..|8|...cx.....x.dt...0.u..J..i...'itF.G.....r...u_........N
.[....].%.cE.........\[email protected]?........d..
c.._'...{....3.|1..o.3D....L...t..h..ZW...C.41/.r....M..$....x iJQj.r.
.'.).4Z...\9UI...A....D9..L.....V5D<Xg.v....w...Yf.0.X.......aB:...
6kHks$.!....i.!.P.;F.2JPar..V.:.|...(..^d...\gb.v.H.)P.L.Y0.%.J.hcB.V.
....G.$.66.0W..@....%D..Xp..g....."C...^.E..QF..t....FH.\..JB..D3..T"Y
g...X.y...X.,.Qx.....Q......u.!..r,g,PB.k.LZ...3.1T....Q{*Dt...=.1#...
..Q3M..0H..Xf#..8..............sL.,..K(%.!.@#)....;...)....I. &.]..h..
.).`.d..>...-......B.1..7....T.3W....0.7B../6Y.-.m..u0?...?0".....i
..k^q(n.........-..).g."..li..8....zN..3w:..?.ID.w.....v..2.D"4...".3.
".........:.y-.6.B....K..)z......dF.6....UT.{...{b.W.*.g'...3...*..I..
K.37...}.....d`.HaU.BL.A{......y.b...AL3)J......5..f[).$.)Z..P...."...
[email protected]...^...;QSi&...y...*:.8!...b...D...!........#......Vpw..
..q ........$.shv.s...yN......0.n9..D..J.......\..:.j.5.q6.4|([o4.C.G.
..Jk..F........`.s.UQ.s0D..Tc.l.-..|."X.".c...,S.*.%..!*...N...N...cB7
..e..K!...u.x......H..(........'u.I....).5.....-.&TE...a.N..U.se....*.
.c.V"....Af..:........\J......pc..... .. v...h59..1M..H...D..$2..$....
[email protected].... ............;!.$D....S...#"}.gH.........qA.q
.n..2.Z&O.h5..j.M..q..Jb.... 5D.vP......<.<._C1......u.W`..Y.,Y.
!h.#.........|..F.3..B.D.......,....J.. .P..Gro.-s..W...Y.{.`I\*..<<< skipped >>>

GET /widgets.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: platform.twitter.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: public, max-age=1800

Last-Modified: Wed, 15 Apr 2015 17:57:30 GMT

ETag: "1fc8f0a24e94b00e97523b7689273884"

Content-Type: application/javascript; charset=utf-8

Content-Length: 118102

Accept-Ranges: bytes

Date: Fri, 17 Apr 2015 00:22:32 GMT

Via: 1.1 varnish

Age: 1252

Connection: keep-alive

X-Served-By: cache-tw-fra1-cr1-17-TWFRA1

X-Cache: HIT

X-Cache-Hits: 647

X-Timer: S1429230152.922239,VS0,VE0

Vary: Accept-Encoding

P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
!function(){var t;Function&&Function.prototype&&Function.prototype.bin
d&&(/MSIE [678]/.test(navigator.userAgent)||!function e(t,n,i){functio
n r(s,a){if(!n[s]){if(!t[s]){var c="function"==typeof require&&require
;if(!a&&c)return c(s,!0);if(o)return o(s,!0);var l=new Error("Cannot f
ind module '" s "'");throw l.code="MODULE_NOT_FOUND",l}var u=n[s]={exp
orts:{}};t[s][0].call(u.exports,function(e){var n=t[s][1][e];return r(
n?n:e)},u,u.exports,e,t,n,i)}return n[s].exports}for(var o="function"=
=typeof require&&require,s=0;s<i.length;s  )r(i[s]);return r}({1:[f
unction(e,n,i){(function(){"use strict";function e(t){return"function"
==typeof t||"object"==typeof t&&null!==t}function i(t){return"function
"==typeof t}function r(t){return"object"==typeof t&&null!==t}function 
o(){}function s(){return function(){process.nextTick(u)}}function a(){
var t=0,e=new W(u),n=document.createTextNode("");return e.observe(n,{c
haracterData:!0}),function(){n.data=t=  t%2}}function c(){var t=new Me
ssageChannel;return t.port1.onmessage=u,function(){t.port2.postMessage
(0)}}function l(){return function(){setTimeout(u,1)}}function u(){for(
var t=0;O>t;t =2){var e=U[t],n=U[t 1];e(n),U[t]=void 0,U[t 1]=void 
0}O=0}function h(){}function d(){return new TypeError("You cannot reso
lve a promise with itself")}function f(){return new TypeError("A promi
ses callback cannot return that same promise.")}function m(t){try{retu
rn t.then}catch(e){return B.error=e,B}}function p(t,e,n,i){try{t.call(
e,n,i)}catch(r){return r}}function g(t,e,n){F(function(t){var i=!1<<< skipped >>>

GET /format2.html?adBlockCount=0&page=0&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1& HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:06 GMT

Server: Jetty/4.2.24 (Linux/2.6.18-238.19.1.el5 amd64 java/1.6.0_21)

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Language: en-US

Content-Type: text/html; charset=ISO-8859-1

Set-Cookie: numpage1=0|153627;Path=/;Expires=Fri, 17-Apr-15 00:39:06 GMT

Set-Cookie: clkct=/dQeJw2lvT36J9Ez6eZLig==;Path=/;Domain=.siga.uol.com.br;Expires=Sat, 18-Apr-15 00:22:06 GMT

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 12261

Connection: close
...........}.r..... ...[.....M..]..j......H..E...mu.i..1.p.>./\..).
vUwO..{....$...D"3....)...i.H,....o.>.rw../.j.H.._>.b..hE..x@. M
.*.2>B.E....ws..../O@d..........(s...0......./.^........K@..{.T.r.n
..V.wY_^.U .w.q.|.._e}*8.$..H0KZV.......Nd.">.D.T^...a.........I.h.
..N......nH.....V...lV-f...]n...%.C....h&Jw...%./E....:2....jZ<lx.(
..c.....Ai.....D8...<$RD.9p...5...u.z...v#G..h\..:T._.}....jP.5...v
<.o$Yu.......`.3.._.....<-.).-.l.>|Kh...5....%.Q.........o...
nA3......Q......GW@.$.........B...O**C" ...............?...syM..?X....
[email protected].@._~...:....~.[e.........$.E..<.T...B .[...S....4
...!#[email protected][.uRxI.~.}.5..{.U.,...h......o4e...[...../...
......12.p;.K#.T"...^.g..(...? .{^d..Ur...B.....2......M.(...j.v.^Qe^.
..1.......G..._.....Y6...AS..A>....D...Zd...Z.[B~..<.i.. . N... 
EI.A_..%K.. .A....................E..k.v...!BYB_."a.C-_-%..'....`P....
X ..7.o......F.o..q....P.`[...`D.<...IF.G.{.)|...J......~.^.. .G...
...{...XZ..*.....&..6..#... ..W.._}h^B=..6|6.H..g....DN]..P(..y.t T..~
..a...R.\.y..<}...{.-.5......._...$,#...........s...3.j^D..W,d,....
..~).)..Fn...d.>f.0....9.e.F.L.Z......-............3..~...XI.....:.
......v...$......7f.mN..$.O`.~......T*.).cV.S..?.....a#./.Qm....l6.J..
6.cbI...L:.H..T4..e..a~] \v-.O;.. ).4.U..FRn.......N...$Dq...*Bs..l..`
$w..@/.a..M..\[-.`B...M........t..O.&..n..t;#4N.J......a.L.c.F~t*.....
.;...2.i.rsS.f...|......Dm0S..j8..L.....;[email protected]..~_j.KFLfz..T;.Am
Y\....!...lN.w.`....$.).s.ca.K.!...K...S2.......>T .f.....a; F.<<< skipped >>>

GET /stc/font/fontello.eot? HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format2.html?adBlockCount=1&page=1&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=0|153627; clkct=/dQeJw2lvT36J9Ez6eZLig==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:09 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:22:33 GMT

ETag: "1be009a-1438-513c33d62f840"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 2648

Connection: close

Content-Type: application/vnd.ms-fontobject
...........WMl............b3M.ZJ..%.c.V.......4.....&\...#..D....A.(..
.F.m...-..f..M...zi..@..=.h..|h...K.....R.e....Jy.}..7o..y3...0v3..g&g
t;F?..h..r..<.e.~....u.noc....2[fUVb.. ....... .m..K.....[e..-..K..
G...meo2...?70|l..?..W<..Kv......4..T...p;5|.........7-..g..2g.V.@.
.&d.....?....0{.<;_.....{..>A..y..^.r......_.^........Y,.l.C./..
.]K...{..;._..........q..c..W.....<x...A...J...W....c5......M.`....
_... .'l......_v6Sd...mM..w.].".[[......=..4.t?....T.p[.w.......}.<
....g?......2....vk<...9...".....w.....C.......6....Nh8.g........=.
...{..=..6B.....!.3..|..~......0...&...i....o.Y.....B<.'....E.>.
c....^.k.7._k...."..G>9.i.1..z.. ....k.........G:6.X#=....W.w.[8x..
...@.........=).,.....>..;......}..h....=wB#......?..5...{..W....Z.
.......S..........i.. ...u....R../@-.....}....g.........$..8.P.-...b..
.{..w.G..7{5....`..........#.8.. .nf....naa...J...........y..Z....`Oz.
.|.......p......E.......k. .V....b.._......k......(. ..........jiq..*.
..x.4we.^..uy....P^.C...i..\Z..."y_}mn.Z... .%1.1De.|.T...........1..@
.]....T..v.8.L..r........C....p...A..W.c^..B.....I...K.......n.w......
...V..f...5.6.k..(....`..|......R.=..R.........U.[w;..(m.....|W*.b.k..
..l5.....8n....$3.d.r.K.......e.......}V~V.........._(.3.XL2K2S.X.?3.N
JnH..MJ.!.B~....K..x..)d._...X...2.......r...e..%.E..&O.r.....Q6'.D...
9..."....!B....eYQ....K..., )[email protected]...=-.z..[....o..K...LZP.;8.%.g
.R...n.....3.........=m.t....rh......2`..3...R..B..:R..m.......e.?)..A
A.....lF..9.....PA6...-....c..n2.L~...'.....E.....*S,J..". .QJ.W.'<<< skipped >>>

GET /format2.html?adBlockCount=3&page=3&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1& HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=0|153627; clkct=/dQeJw2lvT36J9Ez6eZLig==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:14 GMT

Server: Jetty/4.2.24 (Linux/2.6.18-238.19.1.el5 amd64 java/1.6.0_21)

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Language: en-US

Content-Type: text/html; charset=ISO-8859-1

Set-Cookie: numpage1=4|153627;Path=/;Expires=Fri, 17-Apr-15 00:39:14 GMT

Set-Cookie: clkct=/dQeJw2lvT3XJvtte6ml3A==;Path=/;Domain=.siga.uol.com.br;Expires=Sat, 18-Apr-15 00:22:14 GMT

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 12256

Connection: close
...........}.r..... ...[.tKj...]v.z.}.w.o.ER.-...h..O.q.g../....d...o.
......D"3.Hd&@../.Na8..........._....%V a....gX........b<....g..L.D
...........'Vd..........Q....a.%T .A._0.....3`}.W,.....Q.3M.c.:.......
.v..e6...U........1zE)*..xU..d..;".....k..e.i~...o.o..u.s.a.k.:k7...w.
i#S.....j...@D...(z...n.Ip5..;.V.b...I.U.]..6.O5-.d^aUW....b.,F....F.X
4..#..i.............z...N3O.]h<...d.P.. tZ]rX.7K..v<..%Es......1
....;tq.."...p........-.....) ..(A...U.........8....b....1.7.p|......)
[email protected].... .YI..........?...seCi. .Y...2w....J...:..#.K....q
.....n.):....;.....,..#.$.=.s ..(!....h||..`.pk...../k...../..2J....(.
...h..Kb...#....S......G......^..U.{`)@F...x.H$c..-......XPJ...x.....P
{Q...~.:...H{..~..K.2.F.......j-VU.%.......)....c..;|..........(@..j..
O.-.....6...eY..D...m.......C.R..R4.4|{.R.D6..c..0Q..,..b._..>V.t.?
.D..(:.GI`.5Z....`..f,aD4.R.W[........h..20..J.....'.q...Y.8.i^.....&g
t;...@.;...)H..@...#.....w................Y....z.9..Z..*.....&...0.#D.
.UY..P.....@OB....>b<..j|/."..@Y$....Q..*gU?.....P)Xn.<......
.=....3~~...........0.sc....r`[email protected]...=.`9....RQ.c....
q.X.].j.......8.k.....{(...D ....~.../K..k.....dm0.....X0.@..~.w...7].
..Z..:X.awn..=.:z.{.q..^.9..42....vc......%....%..$.6..i`.c.$.H-.l....
.........v....S.dEk.q...q...nE....&.td.?.)a....$....1h?...DoZl..L.'k.O
T..........0..^X.cv.~.ey...Ur;Hu....".Om9./dN$.o..a.o.Y...../.:zc...k.
O...e=..W.C..Ud0......g.."..L..Rq.]W........J.....8.....x.W..n.Y...ZyZ
..........n._.......ka....zR.......j.v..TYJ......YZ...U)u..>U.f<<< skipped >>>

GET /widgets.js?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: platform.twitter.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: public, max-age=1800

Last-Modified: Wed, 15 Apr 2015 17:57:30 GMT

ETag: "1fc8f0a24e94b00e97523b7689273884"

Content-Type: application/javascript; charset=utf-8

Content-Length: 118102

Accept-Ranges: bytes

Date: Fri, 17 Apr 2015 00:22:19 GMT

Via: 1.1 varnish

Age: 1239

Connection: keep-alive

X-Served-By: cache-tw-fra1-cr1-19-TWFRA1

X-Cache: HIT

X-Cache-Hits: 648

X-Timer: S1429230139.353682,VS0,VE0

Vary: Accept-Encoding

P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
!function(){var t;Function&&Function.prototype&&Function.prototype.bin
d&&(/MSIE [678]/.test(navigator.userAgent)||!function e(t,n,i){functio
n r(s,a){if(!n[s]){if(!t[s]){var c="function"==typeof require&&require
;if(!a&&c)return c(s,!0);if(o)return o(s,!0);var l=new Error("Cannot f
ind module '" s "'");throw l.code="MODULE_NOT_FOUND",l}var u=n[s]={exp
orts:{}};t[s][0].call(u.exports,function(e){var n=t[s][1][e];return r(
n?n:e)},u,u.exports,e,t,n,i)}return n[s].exports}for(var o="function"=
=typeof require&&require,s=0;s<i.length;s  )r(i[s]);return r}({1:[f
unction(e,n,i){(function(){"use strict";function e(t){return"function"
==typeof t||"object"==typeof t&&null!==t}function i(t){return"function
"==typeof t}function r(t){return"object"==typeof t&&null!==t}function 
o(){}function s(){return function(){process.nextTick(u)}}function a(){
var t=0,e=new W(u),n=document.createTextNode("");return e.observe(n,{c
haracterData:!0}),function(){n.data=t=  t%2}}function c(){var t=new Me
ssageChannel;return t.port1.onmessage=u,function(){t.port2.postMessage
(0)}}function l(){return function(){setTimeout(u,1)}}function u(){for(
var t=0;O>t;t =2){var e=U[t],n=U[t 1];e(n),U[t]=void 0,U[t 1]=void 
0}O=0}function h(){}function d(){return new TypeError("You cannot reso
lve a promise with itself")}function f(){return new TypeError("A promi
ses callback cannot return that same promise.")}function m(t){try{retu
rn t.then}catch(e){return B.error=e,B}}function p(t,e,n,i){try{t.call(
e,n,i)}catch(r){return r}}function g(t,e,n){F(function(t){var i=!1<<< skipped >>>

GET /pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: googleads.g.doubleclick.net

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Date: Fri, 17 Apr 2015 00:22:26 GMT

Server: cafe

Cache-Control: private

Content-Length: 43082

X-XSS-Protection: 1; mode=block

Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 17-Apr-2015 00:37:26 GMT; path=/; domain=.doubleclick.net

Alternate-Protocol: 80:quic,p=0.5

Expires: Fri, 17 Apr 2015 00:22:26 GMT
.............z.H.(..<.....3I..Re.0.v..,..WI./..&E. ........./6...@b
.....g...............K..K.'A...._......z9M.....K......?..nj.x8.;..Z...
.w...~...i..E.W.p/._..I.Z.....l{...I".`......L....5.Iz.)..4...........
.i........Z..y.o.?.&|.a..8..V.$.xdp.0.b...Df..6..;".9.....l&..$......C
h.:p,zP......S...Z.}.e..P..[c4;w..>....`.%..ec6...?.|c)K.N.}/X.....
qr.;......C..T.`..2.*.M..m9......d....Ue.R o...4.........]M3...z..{X\.
..sZ........5G....d..\.....^s6...(.%.?.n"g`.q..5>.G.a.1.0....F{....
 .....h...`^.gh..01..no1...a...:....2.Q...g.k.pw..M..LH....sUr#.......
........t .%.D...Yw.o060.)F.....A....i..3..w.O(c.K*...........K..>.
..*......'....'.}Z......V..U..m.,/g].e..d.<>.O.P*._e:q.n..q._X..
..].\.R_..m?..O.......!...e.....Q..&`.)d..[.q....M.....a0..4-.........
O;.a.=..S.y\....pt...%V.M..c?.\..~...W..O....'......t.i...J.F~..q.'.X.
.~... ....!.........D..i..S.K.su.O...^............dk.`p.z.....R8..ro:.
....1:7...x.........j....J.....G..Ak.z.Z...".....@X...\1.....K'..>.
.S1i-...u=*.y,..E....'/}yZty...m...1..&...e!..."..Nc..A....b...M...Y.=
.n...X.........N0.0N....qz.q.V.... ..sXs..8PW.4.......j."......F.r....
[email protected])...F.3.-@.....?M.x..<..D.x..#O....'......'..!O.<y.......
O....*k..k.....&.... ...&.(.aR.%.....) .....>.v..-..!..s.t|..E.....
.k[P*t$.....e....../...G.&.m..$..`.........5..w..i....a..~.#.$...OV.N&
lt;...j.}f......T...!.Bg3.....T0....{.Y..*.@P.. .."..DJ..*.....R.L..x.
."....T=5*..@....[..eoo... .$..Q.Z...H..Q.....0mKm......'..........Rj$
R..`(...;..._.R.y.........T.c..oo..R.c..Ki.A.g..[.@....>..,.!C.<<< skipped >>>

GET /pagead/drt/s?v=r20120211 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&output=html&h=90&slotname=1467421865&adk=79047295&w=728&lmt=1429230145&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230145618&shv=r20150414&cbv=r20150409&saldr=sb&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=1205&ady=49&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=|||&abl=CS&ppjl=u&fu=0&bc=0&ifi=1&dtd=390

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: googleads.g.doubleclick.net

Connection: Keep-Alive

Cookie: id=22a540be080200b8||t=1429230147|et=730|cs=002213fd484c668d2fff9051f6


HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Date: Thu, 16 Apr 2015 23:26:04 GMT

Server: safe

Content-Length: 145

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 3383

Alternate-Protocol: 80:quic,p=0.5

..........%....0.Ew...]....h..F....x.$-....o..=..9..t..g{.Kwk.}..k]e.f
k....$...-...<o....RxzyZ...ML..bwX.).g.#..r..2....,U.....Q......M./
6PzR........

GET /pagead/adview?ai=C_OojQ1IwVaSgDYrAyAPXxYDYDZTpp7MHlKW26OsBwI23ARABIABgpZ6khpgjggEXY2EtcHViLTYzOTI0OTIzMTMxOTM5OTbIAQmpAqNurT3Bn1U-qAMBmAQAqgR4T9CJiH2QjxBAgmAbZtOyZ0TnI1fjEid2alEB3I4xQhk7Y_NxXR3jQ395UoDNdjgQA5uIloLBImsev0e8Rm8kBrFSe_avmJsIy8n5EIpsHqQlQvo3fbUE0uL8VciK_ykozZFUKB7epzdMgd7CAeb25_e_DaR2zc9vgAaU5cPylO63yZEBoAYh2AcA&sigh=JzQGVuFpaRA&vis=0 HTTP/1.1

Accept: */*

Referer: hXXp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6392492313193996&format=300x250&output=html&h=250&slotname=4543625469&adk=3125171893&w=300&lmt=1429230147&avail_w=318&ea=0&flash=11.6.602.168&url=http://VVV.brasilfc.com/&dt=1429230146836&bpp=16&shv=r20150414&cbv=r20150409&saldr=aa&correlator=2426894881690&frm=20&ga_vid=617123023.1429230146&ga_sid=1429230146&ga_hid=452184151&ga_fc=0&u_tz=180&u_his=0&u_java=1&u_h=902&u_w=1916&u_ah=874&u_aw=1916&u_cd=32&u_nplug=0&u_nmime=0&dff=helvetica&dfs=13&adx=902&ady=797&biw=1480&bih=224&eid=317150304&oid=3&rx=0&eae=4&brdim=112,265,,,1916,,,,,&osd=1&vis=0&rsz=d|||n&abl=XS&ppjl=u&fu=0&bc=0&ifi=2&dtd=360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: googleads.g.doubleclick.net

Connection: Keep-Alive

Cookie: id=22a540be080200b8||t=1429230147|et=730|cs=002213fd484c668d2fff9051f6


HTTP/1.1 200 OK

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Date: Fri, 17 Apr 2015 00:22:27 GMT

Server: cafe

Content-Length: 0

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.5

HTTP/1.1 200 OK..P3P: policyref="hXXp://googleads.g.doubleclick.net/pa
gead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR 
INT DEM STA PRE COM NAV OTC NOI DSP COR"..Content-Type: text/html; cha
rset=UTF-8..X-Content-Type-Options: nosniff..Date: Fri, 17 Apr 2015 00
:22:27 GMT..Server: cafe..Content-Length: 0..X-XSS-Protection: 1; mode
=block..Alternate-Protocol: 80:quic,p=0.5..

GET /stc/uolsigaretarget.min.js HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format2.html?adBlockCount=0&page=0&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=2&numads=1&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=4|153627; clkct=/dQeJw2lvT3XJvtte6ml3A==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:24 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:26:08 GMT

ETag: "34200df-29fd-513c34a339c00"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 3053

Connection: close

Content-Type: application/javascript
...........Z.s.... 6.j.H..\..3...P.n....L;...HHBL....qm...........4...
.b.......?."..8."oE.....Q.....;..[J,...K.Z.$f.g$.lISW..YH}.y..G)K2....
.1{X.7.t..I..4...y|..b?[..9.]LwK...;/....._N..)...l!..h...)..c.gQ....&
lt;N,N.....\.v:.#L..|Oo.4..AV..I4......0..t....f...v.~..$d.......i....
z.......2.tM...;K.w..$.eI$.......v|v...q.n......6.neZ..-..h"6......$..
7...lW.;..k..r5.a..........lw.'..^.....C.."[.H.j.C..L..f..7,hOOh......
..S&$.B..xl.....$..|...`[9B.....W.!..x...)..!.T4....P....'[email protected]...._).
.gI('[email protected].......^Ew...... ....P . ...V...(K.......%w......h...
.;8^*.[..K`%....8...{@%.fa..9.q..j.....G.d....IB....f$yx.O.u....xu..^y
AB#.D..zs.....rL<..............z7*.....D..~..2....8............rf.R
.......v...Z1...G^......E$y..J../..B.`T.H...2...;H.;....SF.%[.C#......
..h.j.u....xr1....6l....&......$..n...N/....g..O..H...%.....6..".5{@..
.X.2.;l....&M.1.k....`7*S~...qk.......`...`..9|....*e5tn.....5....$`..
pk...Q...w$a4..9:}7.O..9|.`.Z..$..G.}E......?.?.........r....<.....
l.r..K.s..a#......}P.^..T................k...j..X..}n[...._.v ..&.X.3.
v.....9.zr4y{.j..n.\^..l.9.Qo.....NP...x...K.fX.x......#NG.R/.....`.M.
8T.N.~&...|`......1$P=..h..*b..y\...Qr.=n..<Y.!...d.P.].E.P*#.`.aB.
..3N9<.bb.z$.>D^PCWW2%.>][email protected]>;.LZ...L.
]>Juy..........A.$/..J...?.(...o)[email protected].;b
..Y. .P.#.q.d.P.....n._.F&yI.b...Y....Mzi...uQ.y.R.v...1.v(.B.T.G..n.J
.$.C.7.(.Q.3...{....An......,.........$.N.4.,...6<.-.}.f.F...H...!M
/.D..7.F....,q....__^..../....y....}.x....O.....k.L.'.7.{.......,|<<< skipped >>>

GET /embed/vqPM2vpPwTM HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.youtube.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Date: Fri, 17 Apr 2015 00:22:05 GMT

Server: gwiseguy/2.0

P3P: CP="This is not a P3P policy! See hXXp://support.google.com/accounts/answer/151657?hl=en for more info."

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

X-XSS-Protection: 1; mode=block; report=hXXps://VVV.google.com/appserve/security-bugs/log/youtube

Expires: Tue, 27 Apr 1971 19:44:06 EST

Location: hXXps://VVV.youtube.com/embed/vqPM2vpPwTM

X-Content-Type-Options: nosniff

Content-Length: 0

Set-Cookie: VISITOR_INFO1_LIVE=tvb3qBCDS7E; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Set-Cookie: YSC=pa5a2JwGyw8; path=/; domain=.youtube.com; httponly

Set-Cookie: VISITOR_INFO1_LIVE=tvb3qBCDS7E; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Alternate-Protocol: 80:quic,p=0.5

....

GET /embed/I2SCNf-45LQ HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.expertgh.com/pt-br/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.youtube.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Date: Fri, 17 Apr 2015 00:22:05 GMT

Server: gwiseguy/2.0

X-XSS-Protection: 1; mode=block; report=hXXps://VVV.google.com/appserve/security-bugs/log/youtube

Location: hXXps://VVV.youtube.com/embed/I2SCNf-45LQ

Expires: Tue, 27 Apr 1971 19:44:06 EST

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache

P3P: CP="This is not a P3P policy! See hXXp://support.google.com/accounts/answer/151657?hl=en for more info."

X-Content-Type-Options: nosniff

Content-Length: 0

Set-Cookie: VISITOR_INFO1_LIVE=cBCKiVHN6rY; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Set-Cookie: VISITOR_INFO1_LIVE=cBCKiVHN6rY; path=/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly

Set-Cookie: YSC=De8wVetIKJg; path=/; domain=.youtube.com; httponly

Alternate-Protocol: 80:quic,p=0.5
HTTP/1.1 301 Moved Permanently..Date: Fri, 17 Apr 2015 00:22:05 GMT..S
erver: gwiseguy/2.0..X-XSS-Protection: 1; mode=block; report=hXXps://w
ww.google.com/appserve/security-bugs/log/youtube..Location: hXXps://ww
w.youtube.com/embed/I2SCNf-45LQ..Expires: Tue, 27 Apr 1971 19:44:06 ES
T..Content-Type: text/html; charset=utf-8..Cache-Control: no-cache..P3
P: CP="This is not a P3P policy! See hXXp://support.google.com/account
s/answer/151657?hl=en for more info."..X-Content-Type-Options: nosniff
..Content-Length: 0..Set-Cookie: VISITOR_INFO1_LIVE=cBCKiVHN6rY; path=
/; domain=.youtube.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponl
y..Set-Cookie: VISITOR_INFO1_LIVE=cBCKiVHN6rY; path=/; domain=.youtube
.com; expires=Wed, 16-Dec-2015 12:15:05 GMT; httponly..Set-Cookie: YSC
=De8wVetIKJg; path=/; domain=.youtube.com; httponly..Alternate-Protoco
l: 80:quic,p=0.5..<<< skipped >>>

GET /stc/fb.js HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format6_d.html?adBlockCount=2&page=2&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=6_d&numads=2&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=4|153627; clkct=/dQeJw2lvT3XJvtte6ml3A==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:19 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:22:32 GMT

ETag: "d58040-4c81-513c33d53b600"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 9929

Connection: close

Content-Type: application/javascript
...........|._.J......<=.....(4..._.U..h.'@.(.L.7.....Z.....<..g
.d.k..Y....O^_....$...H......j[......L"?.G(}.6%...#/...a".V=EQJ..r[..)
.M{."..aW.D.....z...V..P*--.E.l..eZ.:................W..s/.c...2i7PP..
.F..M.<}p.3........w.............r.iu.5( ..d..ft.......y....\...%..
..eE.!.i6.h*/.e....je...$e...K.j.}[email protected]*.e.VP.=...^..
5.!Mu..!.q. h..<.;EAs.Xl.=-E3.i,h8u]..z..4iu\...?.??.}.?i..J......V
5.,....-k..7....N.:..b./.k....m..K.._..^c.n.=...l.i.....HS.].......~.)
...:/[q.or..g.}Xbna............(Z.p'.aE..5..Tk\y.0....=U..5.L<5...Q
..*...k....k.#;*...4.-<....L..0.N.(.M.o@VW.../.<G..T]o.G.4...rW.
*..(.4....As0........L.Vk.J?..,...4...6.X.z.2.}y\8(......H..B.*.z..g..
Hb....P S..QKSI..;..$..Z.n6.`..1%..&...B.OV....F'.$U..{.....mW.K%Zi...
.;...;@w.)Bw....5......$%wV.7.h{..j.JnP.6.TH....o\.TMo.P2...M.5....X..
.Q....T............,Kv...j.f.a...z..*,[email protected]<.!......n.....
[email protected]!..yI.i.&n$P>.C...JTZ...MUs..V...=b..%M...
..(}.......>..sA'3AC.6..BT....A..W.......)..d...T`L.W7.....;@.(....
.."A...N..e3..3.Z.0..[r...~..46.9...R....T..]6.b...P#....S.m.^....;" .
..H5..uRNs..F.e..^.kp....e.!.6*.A..f.d..(.I...........&...d....%...'@.
...............j*.%._>.mz.c kJ5X.Z./.4...._.I...^V....G&.FV..u.z...
.P...s...{..'.7......G..s{R..W4...p.5a..-...-.. .p.wU.~....&.6X.... ..
../...KF.......P...<...ET!O?E...].....o......>.J..L$.{..e0.=..".
.b.<..l.e.l.WU.....f....:..:.d........D.Gd.F*..M..#(Z5..#.HD..^..7.
.c...M.{l/....p.Jcx'..".o.@)p..._.X....Q&.`..!K..4,I.T2.%I...~|...<<< skipped >>>

GET /wp-content/themes/brasilfc/js/fancybox/jquery.fancybox-1.3.4.css?ver=4.1.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:29 GMT

Content-Type: text/css

Last-Modified: Sat, 09 Nov 2013 03:57:20 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip
704.............Ymo.6.....[.!I....d..b..f..........e..E......}G.X.r...
K .G.sw.......<.K.z._..,..gL..>.x.B3..-$.@B..#....z...k.B......}
.&F8J.}....j..!.=...r2.$...vH..e..*.F....;..q.........,.O_..)g.......a
..0.8:'...  BjI."T(..L=m...7 .0V...B.O.Lk..4.E'....$.E.P....2.._2.B.(.
.....Q,.P....D..R*.1. ..=.#.4{.C{d..h8..?c.......3E.I..%.....&&....0B,
q.Se.......o.?....L.........D.<j.5....4..^l9..y.0.N.In........Y.5..
..p...<."b:13`k._.<.BN.....9.t..b..O`..5..#1....Q.5 .j..o...G/..
..H.B..~.K...V.-..4.O_-..[......}.IN6........L...j..F.....9[{.nk...)..
....YlAft...G.[..pvx\[email protected]|c|.Z...y*.R.}..Lb-v,.RD~..[
.Y|.F...Xs..\W.n..mRQ.(O.S.Yy..."`.x..AmeO .Bm...qJkT.pZ@....[.....t".
...ljE.[.".zw..xD .F.(tA3DUGq...`.O.H.T]....U7....*`.v.XfOBW.(.....UJ$
|..7.<..M6...F^-0G.].....k../3a8........bV.S{.v...`u....LO..f......
k`$jp...gEU..{S../...D;..=..].....b...gjsr...^.j...e.I.....d....-.h...
. ..2.50.vS....'.n1...M..Z/...]S)..6....mb.c.e. .......ux.!u...a27....
....d..2.4."y........3..u,.H..`..a`.pV_3.l.....Y'InU.3..U.4J.........4
h].dG.........y.p........m...........n.f..w[..(...'.}z..x......;..P. -
;..Xu.xP7.[........\h.}.....>.i.f.'43.........Q...I.Z. b_Q..m..n- %
..x..h.Ta.....h..y.........h4jm.[{.......'..t.j...1}Y?9..&.../yyyY3...
....m.w..&.zc.n..R......t7[.....m!:h...=.......K......S.9......[.^....
.$^.....u.^.(.....*....a.4?Ca)*)i.i.mAXX>(...t.n..%;k.}..._.0.Le...
'.4{..............?.}P.z..A.,.]'I...=..k...'o.yo..mD.<].W.S"..._s9'
...A..G..^m....7.....`.Bk......a.'..;..u.-:.G.....Q..s..R......wvt<<< skipped >>>

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.brasilfc.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.brasilfc.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:31 GMT

Content-Type: application/javascript

Content-Length: 7200

Last-Modified: Sat, 20 Dec 2014 17:15:07 GMT

Connection: keep-alive

ETag: "5495ae9b-1c20"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes
/*! jQuery Migrate v1.2.1 | (c) 2005, 2013 jQuery Foundation, Inc. and
 other contributors | jquery.org/license */..jQuery.migrateMute===void
 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.cons
ole;i[n]||(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute
&&(r.warn("JQMIGRATE: " n),e.migrateTrace&&r.trace&&r.trace()))}functi
on a(t,a,i,o){if(Object.defineProperty)try{return Object.definePropert
y(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set
:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i
}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.lo
g&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(
e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.le
ngth=0},"BackCompat"===document.compatMode&&r("jQuery is not compatibl
e with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&
e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get||function
(){return null},c=e.attrHooks.value&&e.attrHooks.value.set||function()
{return n},l=/^(?:input|button)$/i,d=/^[238]$/,p=/^(?:autofocus|autopl
ay|async|checked|controls|defer|disabled|hidden|loop|multiple|open|rea
donly|required|scoped|selected)$/i,f=/^(?:checked|selected)$/i;a(e,"at
trFn",o||{},"jQuery.attrFn is deprecated"),e.attr=function(t,a,i,u){va
r c=a.toLowerCase(),g=t&&t.nodeType;return u&&(4>s.length&&r("jQuer
y.fn.attr( props, pass ) is deprecated"),t&&!d.test(g)&&(o?a in o:e.is
Function(e.fn[a])))?e(t)[a](i):("type"===a&&i!==n&&l.test(t.nodeNa<<< skipped >>>

GET /ads/ads2.txt HTTP/1.1

Host: VVV.gamesbr.me

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 16 Apr 2015 23:57:26 GMT

Content-Type: text/plain

Content-Length: 1

Last-Modified: Sun, 18 Jan 2015 20:25:58 GMT

Connection: keep-alive

ETag: "54bc16d6-1"

Accept-Ranges: bytes

1..

GET /stc/uolsigainit.min.js HTTP/1.1

Accept: */*

Referer: hXXp://adclient.siga.uol.com.br/format6_d.html?adBlockCount=2&page=2&urlReferer=http://VVV.expertgh.com/pt-br/&urlAffiliatedReferer=&formatId=6_d&numads=2&borderColor=336699&bgColor=FFFFFF&titleColor=0000FF&descrColor=000000&urlColor=008000&altColor=FFFFFF&coddisplaysupplier=cd1f53fb59354f6684b9917691f85960&flagRetarget=1&type=1&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adclient.siga.uol.com.br

Connection: Keep-Alive

Cookie: numpage1=4|153627; clkct=/dQeJw2lvT3XJvtte6ml3A==


HTTP/1.1 200 OK

Date: Fri, 17 Apr 2015 00:22:24 GMT

Server: Apache/2.2.13 (Unix)

Last-Modified: Wed, 15 Apr 2015 13:26:08 GMT

ETag: "1be00ac-15a-513c34a339c00"

Accept-Ranges: bytes

Vary: Accept-Encoding,User-Agent

Content-Encoding: gzip

X-Content-Type-Options: nosniff

P3P: policyref="hXXp://adclient.siga.uol.com.br/w3c/p3p.xml",CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"

Content-Length: 212

Connection: close

Content-Type: application/javascript
..........UP...0.~.9DZ..W.n.......V......}w..s^B...$Y..Q...F....>R.
]...>[email protected]`Th..P...q...LZ..S...b.Y.)."..E.E.%...0. .J~3..8
.^.Z..H...H......}..)....KX..F...x$.....M...~qaZZt..=G...."0...k......
R...Z.....

The Malware connects to the servers at the folowing location(s):

3MtVNt2RL9.exe_1212:

.text

`.data

.rdata

P.idata

@.didata

.edata

@.rsrc

@.reloc

TIdHTTP *

TIdCustomHTTP *

TIdTCPClientCustom *

TIdTCPConnection *

Idtcpconnection::TIdTCPConnection

Idtcpclient::TIdTCPClientCustom

Idhttp::TIdCustomHTTP

Idhttp::TIdHTTP

TCppShellUIHelper

TCppShellWindows

OnWindowSetResizable

OnWindowSetLeft

OnWindowSetTop

OnWindowSetWidth

OnWindowSetHeightx

OnWindowStateChanged

OnThirdPartyUrlBlockedX

TCppInternetExplorer

TCppWebBrowser

TCppWebBrowserStatusTextChange

TCppWebBrowserProgressChange

TCppWebBrowserCommandStateChange

TCppWebBrowserBeforeNavigate2

TCppWebBrowserNewWindow2

TCppWebBrowserNavigateComplete2

TCppWebBrowserOnVisible

TCppWebBrowserWindowSetLeft

TCppWebBrowserWindowClosing

TCppWebBrowserClientToHostWindow

TCppWebBrowserNavigateError

(TCppWebBrowserPrintTemplateInstantiation

TCppWebBrowserUpdatePageStatus

TCppWebBrowserNewWindow3

bstrUrlContext

bstrUrl

TCppWebBrowserWindowStateChanged

dwWindowStateFlags

TCppWebBrowserNewProcess

"TCppWebBrowserThirdPartyUrlBlocked

$TCppWebBrowserRedirectXDomainBlocked

StartURL

RedirectURL

strUrl

TCppShellUIHelper *

TCppShellWindows *

TCppInternetExplorer *

TCppWebBrowser *

TAutoDriver<Shdocvw_tlb::IWebBrowser2> *

TAutoDriver<Shdocvw_tlb::IWebBrowser2>

Shdocvw_tlb::TCppWebBrowser

Shdocvw_tlb::TCppInternetExplorer

Shdocvw_tlb::TCppShellWindows

Shdocvw_tlb::TCppShellUIHelper

TComInterface<Shdocvw_tlb::IShellWindows,&Shdocvw_tlb::IID_IShellWindows>

TComInterface<Shdocvw_tlb::IWebBrowser2,&Shdocvw_tlb::IID_IWebBrowser2>

Shdocvw_tlb::IWebBrowser2DispT<Shdocvw_tlb::IWebBrowser2>

System.Win.Sensors

ISensorDataReport

IPortableDeviceValues

Report

ILocationReport

ReportType

FSensorReport

FLocationReport

TWindowsLocationSensort

TWindowsLocationSensor

FDataReport

TWindowsEnvironmentalSensor

TWindowsMotionSensor

TWindowsMotionSensor`

TWindowsOrientationSensorh

TWindowsOrientationSensor

TWindowsElectricalSensor

TWindowsMechanicalSensor

TWindowsMechanicalSensorL

TWindowsBiometricSensor

TWindowsLightSensor

TWindowsScannerSensor

TWindowsScannerSensor4

*TWindowsSensorManager.TSensorManagerEvents8

*TWindowsSensorManager.TSensorManagerEvents

TWindowsSensorManager&

TWindowsSensorManager

%TProc<Winapi.ActiveX._tagpropertykey>

System.SysUtils

7TWindowsMotionSensor.GetAvailableProperties$7474$0$Intf

7TWindowsMotionSensor.GetAvailableProperties$7474$ActRec

6TWindowsLightSensor.GetAvailableProperties$7493$0$Intf

6TWindowsLightSensor.GetAvailableProperties$7493$ActRec`

6TWindowsLightSensor.GetAvailableProperties$7493$ActRec

;TWindowsMechanicalSensor.GetAvailableProperties$7510$0$Intf

;TWindowsMechanicalSensor.GetAvailableProperties$7510$ActRec

9TWindowsLocationSensor.GetAvailableProperties$7535$0$Intf

TArray<System.TGUID>

9TWindowsLocationSensor.GetAvailableProperties$7535$ActRec

>TWindowsEnvironmentalSensor.GetAvailableProperties$7566$0$Intf

>TWindowsEnvironmentalSensor.GetAvailableProperties$7566$ActRec$

>TWindowsEnvironmentalSensor.GetAvailableProperties$7566$ActRec

<TWindowsOrientationSensor.GetAvailableProperties$7583$0$Intf

<TWindowsOrientationSensor.GetAvailableProperties$7583$ActRec

;TWindowsElectricalSensor.GetAvailableProperties$7600$0$Intf

;TWindowsElectricalSensor.GetAvailableProperties$7600$ActRec

;TWindowsElectricalSensor.GetAvailableProperties$7600$ActRecl%A

:TWindowsBiometricSensor.GetAvailableProperties$7617$0$Intf

:TWindowsBiometricSensor.GetAvailableProperties$7617$ActRec

:TWindowsBiometricSensor.GetAvailableProperties$7617$ActRec@-A

8TWindowsScannerSensor.GetAvailableProperties$7635$0$Intf

8TWindowsScannerSensor.GetAvailableProperties$7635$ActRec

8TWindowsScannerSensor.GetAvailableProperties$7635$ActRec83A

System.Sensors

Compass1D

Compass2D

Compass3D

FURL

TCustomSensor.TProperty

TCustomLocationSensor.TProperty

!TCustomLocationSensor.TProperties

$TCustomEnvironmentalSensor.TProperty

&TCustomEnvironmentalSensor.TProperties

TCustomMotionSensor.TProperty

TCustomMotionSensor.TProperties

"TCustomOrientationSensor.TProperty

$TCustomOrientationSensor.TProperties

!TCustomElectricalSensor.TProperty

#TCustomElectricalSensor.TProperties

!TCustomMechanicalSensor.TProperty

#TCustomMechanicalSensor.TProperties

TCustomBiometricSensor.TProperty

"TCustomBiometricSensor.TProperties

TCustomLightSensor.TProperty

TCustomLightSensor.TProperties

TCustomScannerSensor.TProperty

TCustomScannerSensor.TProperties

&TArray<System.Sensors.TLocationRegion>

 TEnumerator<System.Sensors.TLocationRegion>(

 TEnumerator<System.Sensors.TLocationRegion>

System.Generics.Collections

 TEnumerable<System.Sensors.TLocationRegion>-

 TEnumerable<System.Sensors.TLocationRegion>

.TList<System.Sensors.TLocationRegion>.arrayofT

)IComparer<System.Sensors.TLocationRegion>

System.Generics.Defaults

6TCollectionNotifyEvent<System.Sensors.TLocationRegion>

-TArrayManager<System.Sensors.TLocationRegion>

 IEnumerable<System.Sensors.TLocationRegion>0

0TList<System.Sensors.TLocationRegion>.TEmptyFunc

1TList<System.Sensors.TLocationRegion>.TEnumerator5

1TList<System.Sensors.TLocationRegion>.TEnumerator

%TList<System.Sensors.TLocationRegion>&

%TList<System.Sensors.TLocationRegion>

$TArray<System.Sensors.TCustomSensor>

1TPair<System.string,System.Sensors.TSensorFilter>

AKey

HTArray<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

MTEnumerator<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>(

MTEnumerator<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

MTEnumerable<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>-

MTEnumerable<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>\

=TDictionary<System.string,System.Sensors.TSensorFilter>.TItem

BTDictionary<System.string,System.Sensors.TSensorFilter>.TItemArray

IEqualityComparer<System.string>

%TCollectionNotifyEvent<System.string>

4TCollectionNotifyEvent<System.Sensors.TSensorFilter>

TArray<System.string>

TEnumerator<System.string>(

TEnumerator<System.string>

TEnumerable<System.string>-

TEnumerable<System.string>H

FTDictionary<System.string,System.Sensors.TSensorFilter>.TKeyEnumerator;

FTDictionary<System.string,System.Sensors.TSensorFilter>.TKeyEnumerator

FTDictionary<System.string,System.Sensors.TSensorFilter>.TKeyCollection;

FTDictionary<System.string,System.Sensors.TSensorFilter>.TKeyCollection

$TArray<System.Sensors.TSensorFilter>

)TEnumerator<System.Sensors.TSensorFilter>(

)TEnumerator<System.Sensors.TSensorFilter>

)TEnumerable<System.Sensors.TSensorFilter>-

)TEnumerable<System.Sensors.TSensorFilter>4

HTDictionary<System.string,System.Sensors.TSensorFilter>.TValueEnumerator;

HTDictionary<System.string,System.Sensors.TSensorFilter>.TValueEnumerator

HTDictionary<System.string,System.Sensors.TSensorFilter>.TValueCollection;

HTDictionary<System.string,System.Sensors.TSensorFilter>.TValueCollection

GTDictionary<System.string,System.Sensors.TSensorFilter>.TPairEnumerator;

GTDictionary<System.string,System.Sensors.TSensorFilter>.TPairEnumerator

FOnKeyNotify

FKeyCollection

7TDictionary<System.string,System.Sensors.TSensorFilter>9

ContainsKey

7TDictionary<System.string,System.Sensors.TSensorFilter>

Keys

OnKeyNotify

*TArray<System.Sensors.TSensorManagerEvent>

/TEnumerator<System.Sensors.TSensorManagerEvent>(

/TEnumerator<System.Sensors.TSensorManagerEvent>

/TEnumerable<System.Sensors.TSensorManagerEvent>-

/TEnumerable<System.Sensors.TSensorManagerEvent>

2TList<System.Sensors.TSensorManagerEvent>.arrayofT

-IComparer<System.Sensors.TSensorManagerEvent>

:TCollectionNotifyEvent<System.Sensors.TSensorManagerEvent>

1TArrayManager<System.Sensors.TSensorManagerEvent>

/IEnumerable<System.Sensors.TSensorManagerEvent>0

4TList<System.Sensors.TSensorManagerEvent>.TEmptyFunc

5TList<System.Sensors.TSensorManagerEvent>.TEnumerator5

5TList<System.Sensors.TSensorManagerEvent>.TEnumeratorD

)TList<System.Sensors.TSensorManagerEvent>&

)TList<System.Sensors.TSensorManagerEvent>

)TEnumerator<System.Sensors.TCustomSensor>(

)TEnumerator<System.Sensors.TCustomSensor>

)TEnumerable<System.Sensors.TCustomSensor>-

)TEnumerable<System.Sensors.TCustomSensor>

,TList<System.Sensors.TCustomSensor>.arrayofT

System.Generics.Collections8IA

'IComparer<System.Sensors.TCustomSensor>

4TCollectionNotifyEvent<System.Sensors.TCustomSensor>

 TArrayManager<System.Sensors.TCustomSensor>

)IEnumerable<System.Sensors.TCustomSensor>0

.TList<System.Sensors.TCustomSensor>.TEmptyFunc

/TList<System.Sensors.TCustomSensor>.TEnumerator5

/TList<System.Sensors.TCustomSensor>.TEnumerator

#TList<System.Sensors.TCustomSensor>&

#TList<System.Sensors.TCustomSensor>

)TObjectList<System.Sensors.TCustomSensor><

)TObjectList<System.Sensors.TCustomSensor>H

'TArray<System.Sensors.TLocationCoord2D>

 TComparison<System.Sensors.TLocationRegion>

)TComparer<System.Sensors.TLocationRegion>2

)TComparer<System.Sensors.TLocationRegion>

1TMoveArrayManager<System.Sensors.TLocationRegion>

8.TList`1.Pack$599$0$Intf<System.Sensors.TLocationRegion>

8@TList`1.Pack$599$ActRec<System.Sensors.TLocationRegion>

F:{System.Generics.Collections}TList<System.Sensors.TLocationRegion>.:1

PTList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>.arrayofT

System.Generics.Collections`

KIComparer<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

XTCollectionNotifyEvent<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

Item1TPair<System.string,System.Sensors.TSensorFilter>

OTArrayManager<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

OTArrayManager<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>L{B

MIEnumerable<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>0

RTList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>.TEmptyFunc

STList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>.TEnumerator5

STList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>.TEnumerator

GTList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>&

GTList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

TList<System.string>.arrayofT

IComparer<System.string>

TArrayManager<System.string>

IEnumerable<System.string>0

TList<System.string>.TEmptyFunc

TList<System.string>.TEnumerator5

TList<System.string>.TEnumeratord

TList<System.string>&

TList<System.string>

,TList<System.Sensors.TSensorFilter>.arrayofT

System.Generics.Collections4oA

'IComparer<System.Sensors.TSensorFilter>

 TArrayManager<System.Sensors.TSensorFilter>

 TArrayManager<System.Sensors.TSensorFilter>d

)IEnumerable<System.Sensors.TSensorFilter>0

.TList<System.Sensors.TSensorFilter>.TEmptyFunc

/TList<System.Sensors.TSensorFilter>.TEnumerator5

/TList<System.Sensors.TSensorFilter>.TEnumeratorp

#TList<System.Sensors.TSensorFilter>&

#TList<System.Sensors.TSensorFilter>,

/TComparison<System.Sensors.TSensorManagerEvent>

-TComparer<System.Sensors.TSensorManagerEvent>2

-TComparer<System.Sensors.TSensorManagerEvent>

5TMoveArrayManager<System.Sensors.TSensorManagerEvent>

<.TList`1.Pack$599$0$Intf<System.Sensors.TSensorManagerEvent>

<@TList`1.Pack$599$ActRec<System.Sensors.TSensorManagerEvent>

J:{System.Generics.Collections}TList<System.Sensors.TSensorManagerEvent>.:1

)TComparison<System.Sensors.TCustomSensor>

'TComparer<System.Sensors.TCustomSensor>2

'TComparer<System.Sensors.TCustomSensor>

/TMoveArrayManager<System.Sensors.TCustomSensor>

6.TList`1.Pack$599$0$Intf<System.Sensors.TCustomSensor>

6@TList`1.Pack$599$ActRec<System.Sensors.TCustomSensor>

D:{System.Generics.Collections}TList<System.Sensors.TCustomSensor>.:1

System.Sensors8IA

2TDelegatedComparer<System.Sensors.TLocationRegion>8

2TDelegatedComparer<System.Sensors.TLocationRegion>\

MTComparison<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

KTComparer<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>2

KTComparer<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

STMoveArrayManager<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

Z.TList`1.Pack$599$0$Intf<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

Z@TList`1.Pack$599$ActRec<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

Z@TList`1.Pack$599$ActRec<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>x

h:{System.Generics.Collections}TList<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>.:1

System.Sensors`

TComparison<System.string>

TComparer<System.string>2

TComparer<System.string>$

TMoveArrayManager<System.string>

'.TList`1.Pack$599$0$Intf<System.string>

'@TList`1.Pack$599$ActRec<System.string>

5:{System.Generics.Collections}TList<System.string>.:1

)TComparison<System.Sensors.TSensorFilter>

'TComparer<System.Sensors.TSensorFilter>2

'TComparer<System.Sensors.TSensorFilter>

/TMoveArrayManager<System.Sensors.TSensorFilter>

6.TList`1.Pack$599$0$Intf<System.Sensors.TSensorFilter>

6@TList`1.Pack$599$ActRec<System.Sensors.TSensorFilter>

D:{System.Generics.Collections}TList<System.Sensors.TSensorFilter>.:1

System.Sensors4oA

6TDelegatedComparer<System.Sensors.TSensorManagerEvent>8

6TDelegatedComparer<System.Sensors.TSensorManagerEvent>

0TDelegatedComparer<System.Sensors.TCustomSensor>8

0TDelegatedComparer<System.Sensors.TCustomSensor>

TTDelegatedComparer<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>8

TTDelegatedComparer<System.Sensors.TPair<System.string,System.Sensors.TSensorFilter>>

!TDelegatedComparer<System.string>8

!TDelegatedComparer<System.string>

0TDelegatedComparer<System.Sensors.TSensorFilter>8

0TDelegatedComparer<System.Sensors.TSensorFilter>

Winapi.Locationapi

Winapi.Sensorsapi

Winapi.Portabledevicetypes(

Winapi.Wincodec

TArray<System.Byte>

TArray<System.Char>

TTimeSpanParser.TParseError

System.TimeSpan

System.Rtti

GetIndexedProperties

GetIndexedProperty

GetDeclaredIndexedProperties

TRttiProperty %C

TMethodImplementation.TFloatReg

):TMethodImplementation.TInterceptFrame.:1

%TMethodImplementation.TInterceptFrame(

*TMethodImplementation.TFirstStageIntercept

%TMethodImplementation.PInterceptFrame

*TMethodImplementation.PFirstStageIntercept

TMethodImplementation.TParamLoc

!TMethodImplementation.TInvokeInfoE

!TMethodImplementation.TInvokeInfoP/C

TRttiIndexedProperty

FIndexedProps

TArray<System.TCustomAttribute>

-TFunc<System.TArray<System.TCustomAttribute>>

TArray<System.Rtti.TRttiMethod>

TArray<System.Rtti.TRttiField>

!TArray<System.Rtti.TRttiProperty>

(TArray<System.Rtti.TRttiIndexedProperty>

%TArray<System.Rtti.TRttiManagedField>

TArray<System.Rtti.TValue>

3TArray<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>(

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>-

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>

;TList<System.Rtti.TMethodImplementation.TParamLoc>.arrayofT

6IComparer<System.Rtti.TMethodImplementation.TParamLoc>

CTCollectionNotifyEvent<System.Rtti.TMethodImplementation.TParamLoc>

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>T_C

8IEnumerable<System.Rtti.TMethodImplementation.TParamLoc>0

=TList<System.Rtti.TMethodImplementation.TParamLoc>.TEmptyFunc

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator5

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator

2TList<System.Rtti.TMethodImplementation.TParamLoc>&

2TList<System.Rtti.TMethodImplementation.TParamLoc>xcC

"TArray<System.Rtti.TRttiParameter>

&TArray<System.Rtti.TRttiInterfaceType>

-TPair<System.Pointer,System.Rtti.TRttiObject>

ATArray<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>(

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>-

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>XsC

9TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItem

>TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItemArray

!IEqualityComparer<System.Pointer>

&TCollectionNotifyEvent<System.Pointer>

/TCollectionNotifyEvent<System.Rtti.TRttiObject>

TArray<System.Pointer>

TEnumerator<System.Pointer>(

TEnumerator<System.Pointer>

TEnumerable<System.Pointer>-

TEnumerable<System.Pointer>

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator`zC

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollectionP|C

TArray<System.Rtti.TRttiObject>

$TEnumerator<System.Rtti.TRttiObject>(

$TEnumerator<System.Rtti.TRttiObject>

$TEnumerable<System.Rtti.TRttiObject>-

$TEnumerable<System.Rtti.TRttiObject>

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumeratorD

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection8

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator;

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumeratorT

3TDictionary<System.Pointer,System.Rtti.TRttiObject>9

3TDictionary<System.Pointer,System.Rtti.TRttiObject>D

Keys\

TArray<System.Rtti.TRttiType>

TArray<System.Rtti.TRttiPackage>

TArray<System.TObject>

-TPair<System.TypInfo.PTypeInfo,System.string>

ATArray<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>(

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>4

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>-

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

9TDictionary<System.TypInfo.PTypeInfo,System.string>.TItem

>TDictionary<System.TypInfo.PTypeInfo,System.string>.TItemArray

 IEqualityComparer<System.TypInfo.PTypeInfo>

0TCollectionNotifyEvent<System.TypInfo.PTypeInfo>

TArray<System.TypInfo.PTypeInfo>

%TEnumerator<System.TypInfo.PTypeInfo>(

%TEnumerator<System.TypInfo.PTypeInfo>

%TEnumerable<System.TypInfo.PTypeInfo>-

%TEnumerable<System.TypInfo.PTypeInfo>

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumeratorT

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollection;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollectionD

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator`

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollectionT

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator;

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumeratorp

3TDictionary<System.TypInfo.PTypeInfo,System.string>9

3TDictionary<System.TypInfo.PTypeInfo,System.string>`

Keysx

-TPair<System.string,System.TypInfo.PTypeInfo>

ATArray<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>(

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>-

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

9TDictionary<System.string,System.TypInfo.PTypeInfo>.TItem

>TDictionary<System.string,System.TypInfo.PTypeInfo>.TItemArray

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator4

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection$

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator@

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection4

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator;

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumeratorP

3TDictionary<System.string,System.TypInfo.PTypeInfo>9

3TDictionary<System.string,System.TypInfo.PTypeInfo>@

KeysX

OnKeyNotifyd

#IComparer<System.Rtti.TRttiPackage>

%TComparison<System.Rtti.TRttiPackage>

#TComparer<System.Rtti.TRttiPackage>2

#TComparer<System.Rtti.TRttiPackage>

,TArray<System.TArray<System.Rtti.TRttiType>>

$TEnumerator<System.TCustomAttribute>(

$TEnumerator<System.TCustomAttribute>

$TEnumerable<System.TCustomAttribute>-

$TEnumerable<System.TCustomAttribute>

'TList<System.TCustomAttribute>.arrayofT

"IComparer<System.TCustomAttribute>

/TCollectionNotifyEvent<System.TCustomAttribute>

&TArrayManager<System.TCustomAttribute>

$IEnumerable<System.TCustomAttribute>0

)TList<System.TCustomAttribute>.TEmptyFunc

*TList<System.TCustomAttribute>.TEnumerator5

*TList<System.TCustomAttribute>.TEnumerator

TList<System.TCustomAttribute>&

TList<System.TCustomAttribute>x7D

UhCMD

-TArray<System.TArray<System.Rtti.TRttiField>>

7TArray<System.TArray<System.Rtti.TRttiIndexedProperty>>

.TArray<System.TArray<System.Rtti.TRttiMethod>>

0TArray<System.TArray<System.Rtti.TRttiProperty>>

&TEnumerator<System.Rtti.TRttiProperty>(

&TEnumerator<System.Rtti.TRttiProperty>

&TEnumerable<System.Rtti.TRttiProperty>-

&TEnumerable<System.Rtti.TRttiProperty>

)TList<System.Rtti.TRttiProperty>.arrayofT

$IComparer<System.Rtti.TRttiProperty>

1TCollectionNotifyEvent<System.Rtti.TRttiProperty>

(TArrayManager<System.Rtti.TRttiProperty>

&IEnumerable<System.Rtti.TRttiProperty>0

 TList<System.Rtti.TRttiProperty>.TEmptyFunc

,TList<System.Rtti.TRttiProperty>.TEnumerator5

,TList<System.Rtti.TRttiProperty>.TEnumerator

TList<System.Rtti.TRttiProperty>&

TList<System.Rtti.TRttiProperty>

$TEnumerator<System.Rtti.TRttiMethod>(

$TEnumerator<System.Rtti.TRttiMethod>$

$TEnumerable<System.Rtti.TRttiMethod>-

$TEnumerable<System.Rtti.TRttiMethod>d

'TList<System.Rtti.TRttiMethod>.arrayofT

"IComparer<System.Rtti.TRttiMethod>

/TCollectionNotifyEvent<System.Rtti.TRttiMethod>

&TArrayManager<System.Rtti.TRttiMethod>

&TArrayManager<System.Rtti.TRttiMethod>0

$IEnumerable<System.Rtti.TRttiMethod>0

)TList<System.Rtti.TRttiMethod>.TEmptyFunc

*TList<System.Rtti.TRttiMethod>.TEnumerator5

*TList<System.Rtti.TRttiMethod>.TEnumerator(

TList<System.Rtti.TRttiMethod>&

TList<System.Rtti.TRttiMethod>

5TArray<System.TArray<System.Rtti.TRttiInterfaceType>>

#TEnumerator<System.Rtti.TRttiField>(

#TEnumerator<System.Rtti.TRttiField>

#TEnumerable<System.Rtti.TRttiField>-

#TEnumerable<System.Rtti.TRttiField>

&TList<System.Rtti.TRttiField>.arrayofT

System.Generics.Collections<!C

!IComparer<System.Rtti.TRttiField>

.TCollectionNotifyEvent<System.Rtti.TRttiField>

%TArrayManager<System.Rtti.TRttiField>

#IEnumerable<System.Rtti.TRttiField>0

(TList<System.Rtti.TRttiField>.TEmptyFunc

)TList<System.Rtti.TRttiField>.TEnumerator5

)TList<System.Rtti.TRttiField>.TEnumerator

TList<System.Rtti.TRttiField>&

TList<System.Rtti.TRttiField>X

*TEnumerator<System.Rtti.TRttiManagedField>(

*TEnumerator<System.Rtti.TRttiManagedField><

*TEnumerable<System.Rtti.TRttiManagedField>-

*TEnumerable<System.Rtti.TRttiManagedField>

-TList<System.Rtti.TRttiManagedField>.arrayofT

System.Generics.Collections8"C

(IComparer<System.Rtti.TRttiManagedField>

5TCollectionNotifyEvent<System.Rtti.TRttiManagedField>

,TArrayManager<System.Rtti.TRttiManagedField>

,TArrayManager<System.Rtti.TRttiManagedField>|

*IEnumerable<System.Rtti.TRttiManagedField>0

/TList<System.Rtti.TRttiManagedField>.TEmptyFunc

0TList<System.Rtti.TRttiManagedField>.TEnumerator5

0TList<System.Rtti.TRttiManagedField>.TEnumerator

$TList<System.Rtti.TRttiManagedField>&

$TList<System.Rtti.TRttiManagedField>H

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>M

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>

Uh.BE

8TComparison<System.Rtti.TMethodImplementation.TParamLoc>

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>2

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>d]F

E.TList`1.Pack$599$0$Intf<System.Rtti.TMethodImplementation.TParamLoc>

E@TList`1.Pack$599$ActRec<System.Rtti.TMethodImplementation.TParamLoc>

S:{System.Generics.Collections}TList<System.Rtti.TMethodImplementation.TParamLoc>.:1

ITList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.arrayofT

DIComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

Item-TPair<System.Pointer,System.Rtti.TRttiObject>

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>XcF

FIEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>0

KTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEmptyFunc

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator5

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>&

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

TList<System.Pointer>.arrayofT

IComparer<System.Pointer>

TArrayManager<System.Pointer>

TArrayManager<System.Pointer>huF

IEnumerable<System.Pointer>0

TList<System.Pointer>.TEmptyFunc

!TList<System.Pointer>.TEnumerator5

!TList<System.Pointer>.TEnumerator@wF

TList<System.Pointer>&

TList<System.Pointer>

'TList<System.Rtti.TRttiObject>.arrayofT

System.Generics.Collections$

"IComparer<System.Rtti.TRttiObject>

&TArrayManager<System.Rtti.TRttiObject>

$IEnumerable<System.Rtti.TRttiObject>0

)TList<System.Rtti.TRttiObject>.TEmptyFunc

*TList<System.Rtti.TRttiObject>.TEnumerator5

*TList<System.Rtti.TRttiObject>.TEnumerator

TList<System.Rtti.TRttiObject>&

TList<System.Rtti.TRttiObject>

ITList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.arrayofT

DIComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

Item-TPair<System.TypInfo.PTypeInfo,System.string>

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FIEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>0

KTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEmptyFunc

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator5

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>&

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

(TList<System.TypInfo.PTypeInfo>.arrayofT

System.Generics.Collections48O

#IComparer<System.TypInfo.PTypeInfo>

'TArrayManager<System.TypInfo.PTypeInfo>

'TArrayManager<System.TypInfo.PTypeInfo>D

%IEnumerable<System.TypInfo.PTypeInfo>0

*TList<System.TypInfo.PTypeInfo>.TEmptyFunc

 TList<System.TypInfo.PTypeInfo>.TEnumerator5

 TList<System.TypInfo.PTypeInfo>.TEnumerator@

TList<System.TypInfo.PTypeInfo>&

TList<System.TypInfo.PTypeInfo>

ITList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.arrayofT

DIComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

Item-TPair<System.string,System.TypInfo.PTypeInfo>

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>p

FIEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>0

KTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEmptyFunc

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator5

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>&

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

$TComparison<System.TCustomAttribute>

"TComparer<System.TCustomAttribute>2

"TComparer<System.TCustomAttribute>

*TMoveArrayManager<System.TCustomAttribute>

*TMoveArrayManager<System.TCustomAttribute>L

1.TList`1.Pack$599$0$Intf<System.TCustomAttribute>

1@TList`1.Pack$599$ActRec<System.TCustomAttribute>

1@TList`1.Pack$599$ActRec<System.TCustomAttribute>L

?:{System.Generics.Collections}TList<System.TCustomAttribute>.:1

&TComparison<System.Rtti.TRttiProperty>

$TComparer<System.Rtti.TRttiProperty>2

$TComparer<System.Rtti.TRttiProperty>

,TMoveArrayManager<System.Rtti.TRttiProperty>

,TMoveArrayManager<System.Rtti.TRttiProperty>D

3.TList`1.Pack$599$0$Intf<System.Rtti.TRttiProperty>

3@TList`1.Pack$599$ActRec<System.Rtti.TRttiProperty>

3@TList`1.Pack$599$ActRec<System.Rtti.TRttiProperty>D

A:{System.Generics.Collections}TList<System.Rtti.TRttiProperty>.:1

$TComparison<System.Rtti.TRttiMethod>

"TComparer<System.Rtti.TRttiMethod>2

"TComparer<System.Rtti.TRttiMethod>

*TMoveArrayManager<System.Rtti.TRttiMethod>

*TMoveArrayManager<System.Rtti.TRttiMethod><

1.TList`1.Pack$599$0$Intf<System.Rtti.TRttiMethod>

1@TList`1.Pack$599$ActRec<System.Rtti.TRttiMethod>

1@TList`1.Pack$599$ActRec<System.Rtti.TRttiMethod><

?:{System.Generics.Collections}TList<System.Rtti.TRttiMethod>.:1

#TComparison<System.Rtti.TRttiField>

!TComparer<System.Rtti.TRttiField>2

!TComparer<System.Rtti.TRttiField>t

)TMoveArrayManager<System.Rtti.TRttiField>

)TMoveArrayManager<System.Rtti.TRttiField>,

0.TList`1.Pack$599$0$Intf<System.Rtti.TRttiField>

0@TList`1.Pack$599$ActRec<System.Rtti.TRttiField>

0@TList`1.Pack$599$ActRec<System.Rtti.TRttiField>,

>:{System.Generics.Collections}TList<System.Rtti.TRttiField>.:1

System.Rtti<!C

*TComparison<System.Rtti.TRttiManagedField>

(TComparer<System.Rtti.TRttiManagedField>2

(TComparer<System.Rtti.TRttiManagedField>d

0TMoveArrayManager<System.Rtti.TRttiManagedField>

0TMoveArrayManager<System.Rtti.TRttiManagedField>,

7.TList`1.Pack$599$0$Intf<System.Rtti.TRttiManagedField>

7@TList`1.Pack$599$ActRec<System.Rtti.TRttiManagedField>

7@TList`1.Pack$599$ActRec<System.Rtti.TRttiManagedField>8

E:{System.Generics.Collections}TList<System.Rtti.TRttiManagedField>.:1

System.Rtti8"C

FTComparison<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>2

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

a:{System.Generics.Collections}TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.:1

TComparison<System.Pointer>

TComparer<System.Pointer>2

TComparer<System.Pointer>

!TMoveArrayManager<System.Pointer>

!TMoveArrayManager<System.Pointer>D

(.TList`1.Pack$599$0$Intf<System.Pointer>

(@TList`1.Pack$599$ActRec<System.Pointer>

(@TList`1.Pack$599$ActRec<System.Pointer>,

6:{System.Generics.Collections}TList<System.Pointer>.:1

$TComparison<System.Rtti.TRttiObject>

"TComparer<System.Rtti.TRttiObject>2

"TComparer<System.Rtti.TRttiObject>H

*TMoveArrayManager<System.Rtti.TRttiObject>

1.TList`1.Pack$599$0$Intf<System.Rtti.TRttiObject>

1@TList`1.Pack$599$ActRec<System.Rtti.TRttiObject>T

1@TList`1.Pack$599$ActRec<System.Rtti.TRttiObject>

?:{System.Generics.Collections}TList<System.Rtti.TRttiObject>.:1

System.Rtti$

FTComparison<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>2

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>X

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>X

S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

a:{System.Generics.Collections}TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.:1

%TComparison<System.TypInfo.PTypeInfo>

#TComparer<System.TypInfo.PTypeInfo>2

#TComparer<System.TypInfo.PTypeInfo>X

 TMoveArrayManager<System.TypInfo.PTypeInfo>

2.TList`1.Pack$599$0$Intf<System.TypInfo.PTypeInfo>

2@TList`1.Pack$599$ActRec<System.TypInfo.PTypeInfo>

@:{System.Generics.Collections}TList<System.TypInfo.PTypeInfo>.:1

System.Rtti48O

FTComparison<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>2

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>l

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>l

S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

a:{System.Generics.Collections}TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.:1

,TDelegatedComparer<System.Rtti.TRttiPackage>8

,TDelegatedComparer<System.Rtti.TRttiPackage>

?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>8

?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>x

 TDelegatedComparer<System.TCustomAttribute>8

 TDelegatedComparer<System.TCustomAttribute>D

-TDelegatedComparer<System.Rtti.TRttiProperty>8

-TDelegatedComparer<System.Rtti.TRttiProperty>

 TDelegatedComparer<System.Rtti.TRttiMethod>8

 TDelegatedComparer<System.Rtti.TRttiMethod>

*TDelegatedComparer<System.Rtti.TRttiField>8

*TDelegatedComparer<System.Rtti.TRttiField>8#G

1TDelegatedComparer<System.Rtti.TRttiManagedField>8

1TDelegatedComparer<System.Rtti.TRttiManagedField>

MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>8

MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

"TDelegatedComparer<System.Pointer>8

"TDelegatedComparer<System.Pointer>|(G

 TDelegatedComparer<System.Rtti.TRttiObject>8

 TDelegatedComparer<System.Rtti.TRttiObject>

MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>8

MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

,TDelegatedComparer<System.TypInfo.PTypeInfo>8

,TDelegatedComparer<System.TypInfo.PTypeInfo>

MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>8

MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>L/G

doOwnsKeys

TCustomComparer<System.string>

TCustomComparer<System.string>d7G

Ht.Ht3

1.2.7

System.ZLib

Winapi.ShlObj

Winapi.ShlObj(

System.Variants

Operator

EVariantBadIndexError8)H

EVariantBadIndexError

System.VariantsP$H

TWMKey

MsgFiller

KeyData

KeyDataFiller

KeysFiller

MouseMsg

HitTestMouseMsgFiller

_tagpropertykey

Winapi.ActiveX

grfLocksSupported

System.HelpIntfs

HelpKeyword

UnderstandsKeyword

(TArray<System.HelpIntfs.THelpViewerNode>

-TEnumerator<System.HelpIntfs.THelpViewerNode>(

-TEnumerator<System.HelpIntfs.THelpViewerNode>@

-TEnumerable<System.HelpIntfs.THelpViewerNode>-

-TEnumerable<System.HelpIntfs.THelpViewerNode>

0TList<System.HelpIntfs.THelpViewerNode>.arrayofT

 IComparer<System.HelpIntfs.THelpViewerNode>

8TCollectionNotifyEvent<System.HelpIntfs.THelpViewerNode>

/TArrayManager<System.HelpIntfs.THelpViewerNode>

-IEnumerable<System.HelpIntfs.THelpViewerNode>0

2TList<System.HelpIntfs.THelpViewerNode>.TEmptyFunc

3TList<System.HelpIntfs.THelpViewerNode>.TEnumerator5

3TList<System.HelpIntfs.THelpViewerNode>.TEnumerator

'TList<System.HelpIntfs.THelpViewerNode>&

'TList<System.HelpIntfs.THelpViewerNode>p

-TComparison<System.HelpIntfs.THelpViewerNode>

 TComparer<System.HelpIntfs.THelpViewerNode>2

 TComparer<System.HelpIntfs.THelpViewerNode>

3TMoveArrayManager<System.HelpIntfs.THelpViewerNode>

:.TList`1.Pack$599$0$Intf<System.HelpIntfs.THelpViewerNode>

:@TList`1.Pack$599$ActRec<System.HelpIntfs.THelpViewerNode>

H:{System.Generics.Collections}TList<System.HelpIntfs.THelpViewerNode>.:1

4TDelegatedComparer<System.HelpIntfs.THelpViewerNode>8

4TDelegatedComparer<System.HelpIntfs.THelpViewerNode>\

System.Classes

ssShift

htKeyword

EInvalidOperation\2I

EInvalidOperation82I

AOperator

TThread.TSynchronizeRecord

TThread.TSystemTimes

GetCPUUsage

TOperation

TObservers.TCanObserveEvent

TObservers.TObserverAddedEvent

Operation

FOnExecute

OnExecute

TArray<System.IInterface>

TEnumerator<System.IInterface>(

TEnumerator<System.IInterface>

TEnumerable<System.IInterface>-

TEnumerable<System.IInterface>

!TList<System.IInterface>.arrayofT

IComparer<System.IInterface>

)TCollectionNotifyEvent<System.IInterface>

TArrayManager<System.IInterface>

IEnumerable<System.IInterface>0

#TList<System.IInterface>.TEmptyFunc

$TList<System.IInterface>.TEnumerator5

$TList<System.IInterface>.TEnumerator

TList<System.IInterface>&

TList<System.IInterface>L

TThreadList<System.IInterface>&

TThreadList<System.IInterface>

&TArray<System.Classes.TCollectionItem>

 TEnumerator<System.Classes.TCollectionItem>(

 TEnumerator<System.Classes.TCollectionItem>,.J

 TEnumerable<System.Classes.TCollectionItem>-

 TEnumerable<System.Classes.TCollectionItem>x/J

.TList<System.Classes.TCollectionItem>.arrayofT

)IComparer<System.Classes.TCollectionItem>

6TCollectionNotifyEvent<System.Classes.TCollectionItem>

-TArrayManager<System.Classes.TCollectionItem>

-TArrayManager<System.Classes.TCollectionItem>p2J

 IEnumerable<System.Classes.TCollectionItem>0

0TList<System.Classes.TCollectionItem>.TEmptyFunc

1TList<System.Classes.TCollectionItem>.TEnumerator5

1TList<System.Classes.TCollectionItem>.TEnumerator

%TList<System.Classes.TCollectionItem>&

%TList<System.Classes.TCollectionItem>H6J

TEnumerator<System.TObject>(

TEnumerator<System.TObject>

TEnumerable<System.TObject>-

TEnumerable<System.TObject>

TList<System.TObject>.arrayofT

IComparer<System.TObject>

&TCollectionNotifyEvent<System.TObject>

TArrayManager<System.TObject>

IEnumerable<System.TObject>0

TList<System.TObject>.TEmptyFunc

!TList<System.TObject>.TEnumerator5

!TList<System.TObject>.TEnumeratorlHJ

TList<System.TObject>&

TList<System.TObject>

!TArray<System.Classes.TComponent>

&TEnumerator<System.Classes.TComponent>(

&TEnumerator<System.Classes.TComponent>

&TEnumerable<System.Classes.TComponent>-

&TEnumerable<System.Classes.TComponent>

)TList<System.Classes.TComponent>.arrayofT

$IComparer<System.Classes.TComponent>

1TCollectionNotifyEvent<System.Classes.TComponent>

(TArrayManager<System.Classes.TComponent>

&IEnumerable<System.Classes.TComponent>0

 TList<System.Classes.TComponent>.TEmptyFunc

,TList<System.Classes.TComponent>.TEnumerator5

,TList<System.Classes.TComponent>.TEnumerator

TList<System.Classes.TComponent>&

TList<System.Classes.TComponent>

3TPair<System.Integer,System.Classes.IInterfaceList>

JTArray<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>(

OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>-

OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

?TDictionary<System.Integer,System.Classes.IInterfaceList>.TItem

DTDictionary<System.Integer,System.Classes.IInterfaceList>.TItemArray

!IEqualityComparer<System.Integer>

&TCollectionNotifyEvent<System.Integer>

5TCollectionNotifyEvent<System.Classes.IInterfaceList>

TArray<System.Integer>

TEnumerator<System.Integer>(

TEnumerator<System.Integer>hrJ

TEnumerable<System.Integer>-

TEnumerable<System.Integer>

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumerator;

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumerator

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollection;

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollection

%TArray<System.Classes.IInterfaceList>

*TEnumerator<System.Classes.IInterfaceList>(

*TEnumerator<System.Classes.IInterfaceList>@yJ

*TEnumerable<System.Classes.IInterfaceList>-

*TEnumerable<System.Classes.IInterfaceList>

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator;

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection;

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection

ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator;

ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator

9TDictionary<System.Integer,System.Classes.IInterfaceList>9

9TDictionary<System.Integer,System.Classes.IInterfaceList>

'TArray<System.Classes.TBasicActionLink>

,TEnumerator<System.Classes.TBasicActionLink>(

,TEnumerator<System.Classes.TBasicActionLink>

,TEnumerable<System.Classes.TBasicActionLink>-

,TEnumerable<System.Classes.TBasicActionLink>p

/TList<System.Classes.TBasicActionLink>.arrayofT

*IComparer<System.Classes.TBasicActionLink>

7TCollectionNotifyEvent<System.Classes.TBasicActionLink>

.TArrayManager<System.Classes.TBasicActionLink>

.TArrayManager<System.Classes.TBasicActionLink>h

,IEnumerable<System.Classes.TBasicActionLink>0

1TList<System.Classes.TBasicActionLink>.TEmptyFunc

2TList<System.Classes.TBasicActionLink>.TEnumerator5

2TList<System.Classes.TBasicActionLink>.TEnumerator

&TList<System.Classes.TBasicActionLink>&

&TList<System.Classes.TBasicActionLink>D

ELoginCredendialError

"TLoginCredentialService.TLoginFunc

#TLoginCredentialService.TLoginEvent

Password

-TLoginCredentialService.TLoginCredentialEvent

Callback#TLoginCredentialService.TLoginEvent

3TLoginCredentialService.TLoginCredentialEventObject:

3TLoginCredentialService.TLoginCredentialEventObject

FLoginFunc

'TLoginCredentialService.TLoginFuncProxy:

ALoginFunc

'TLoginCredentialService.TLoginFuncProxy

TLoginCredentialServiceM

RegisterLoginHandler

UnregisterLoginHandler

GetLoginCredentialEvent

GetLoginCredentials

TLoginCredentialService

4TPair<System.string,System.Classes.TPersistentClass>

KTArray<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>(

PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>`

PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>-

PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

@TDictionary<System.string,System.Classes.TPersistentClass>.TItem

ETDictionary<System.string,System.Classes.TPersistentClass>.TItemArray

System.Generics.CollectionsL

7TCollectionNotifyEvent<System.Classes.TPersistentClass>

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator;

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection;

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection|

'TArray<System.Classes.TPersistentClass>

,TEnumerator<System.Classes.TPersistentClass>(

,TEnumerator<System.Classes.TPersistentClass>

,TEnumerable<System.Classes.TPersistentClass>-

,TEnumerable<System.Classes.TPersistentClass>@

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator;

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection;

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection

JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumerator;

JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumerator

:TDictionary<System.string,System.Classes.TPersistentClass>9

:TDictionary<System.string,System.Classes.TPersistentClass>

OnKeyNotify`

/TList<System.Classes.TPersistentClass>.arrayofT

System.Generics.Collections LI

*IComparer<System.Classes.TPersistentClass>

.TArrayManager<System.Classes.TPersistentClass>

.TArrayManager<System.Classes.TPersistentClass>P

,IEnumerable<System.Classes.TPersistentClass>0

1TList<System.Classes.TPersistentClass>.TEmptyFunc

2TList<System.Classes.TPersistentClass>.TEnumerator5

2TList<System.Classes.TPersistentClass>.TEnumeratorh

&TList<System.Classes.TPersistentClass>&

&TList<System.Classes.TPersistentClass>,

TArray<System.Classes.TRegGroup>

%TEnumerator<System.Classes.TRegGroup>(

%TEnumerator<System.Classes.TRegGroup>

%TEnumerable<System.Classes.TRegGroup>-

%TEnumerable<System.Classes.TRegGroup>4

(TList<System.Classes.TRegGroup>.arrayofT

#IComparer<System.Classes.TRegGroup>

0TCollectionNotifyEvent<System.Classes.TRegGroup>

'TArrayManager<System.Classes.TRegGroup>

%IEnumerable<System.Classes.TRegGroup>0

*TList<System.Classes.TRegGroup>.TEmptyFunc

 TList<System.Classes.TRegGroup>.TEnumerator5

 TList<System.Classes.TRegGroup>.TEnumerator

TList<System.Classes.TRegGroup>&

TList<System.Classes.TRegGroup>

TArray<System.Classes.TIntConst>

%TEnumerator<System.Classes.TIntConst>(

%TEnumerator<System.Classes.TIntConst>

%TEnumerable<System.Classes.TIntConst>-

%TEnumerable<System.Classes.TIntConst>@

(TList<System.Classes.TIntConst>.arrayofT

System.Generics.Collections4

#IComparer<System.Classes.TIntConst>

0TCollectionNotifyEvent<System.Classes.TIntConst>

'TArrayManager<System.Classes.TIntConst>

%IEnumerable<System.Classes.TIntConst>0

*TList<System.Classes.TIntConst>.TEmptyFunc

 TList<System.Classes.TIntConst>.TEnumerator5

 TList<System.Classes.TIntConst>.TEnumerator

TList<System.Classes.TIntConst>&

TList<System.Classes.TIntConst>

%TThreadList<System.Classes.TIntConst>&

%TThreadList<System.Classes.TIntConst><

 TArray<System.Classes.TFindGlobalComponent>

0TEnumerator<System.Classes.TFindGlobalComponent>(

0TEnumerator<System.Classes.TFindGlobalComponent>

0TEnumerable<System.Classes.TFindGlobalComponent>-

0TEnumerable<System.Classes.TFindGlobalComponent>H"K

3TList<System.Classes.TFindGlobalComponent>.arrayofT

.IComparer<System.Classes.TFindGlobalComponent>

;TCollectionNotifyEvent<System.Classes.TFindGlobalComponent>

2TArrayManager<System.Classes.TFindGlobalComponent>

2TArrayManager<System.Classes.TFindGlobalComponent>X%K

0IEnumerable<System.Classes.TFindGlobalComponent>0

5TList<System.Classes.TFindGlobalComponent>.TEmptyFunc

6TList<System.Classes.TFindGlobalComponent>.TEnumerator5

6TList<System.Classes.TFindGlobalComponent>.TEnumerator

*TList<System.Classes.TFindGlobalComponent>&

*TList<System.Classes.TFindGlobalComponent>L)K

7TArray<System.Classes.TList<System.Classes.TComponent>>

<TEnumerator<System.Classes.TList<System.Classes.TComponent>>(

<TEnumerator<System.Classes.TList<System.Classes.TComponent>>p7K

<TEnumerable<System.Classes.TList<System.Classes.TComponent>>-

<TEnumerable<System.Classes.TList<System.Classes.TComponent>>

LTList<System.Generics.Collections.TList<System.Classes.TComponent>>.arrayofT

GIComparer<System.Generics.Collections.TList<System.Classes.TComponent>>

GTCollectionNotifyEvent<System.Classes.TList<System.Classes.TComponent>>

Item TList<System.Classes.TComponent>

>TArrayManager<System.Classes.TList<System.Classes.TComponent>>

>TArrayManager<System.Classes.TList<System.Classes.TComponent>>T<K

IIEnumerable<System.Generics.Collections.TList<System.Classes.TComponent>>0

NTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEmptyFunc

OTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEnumerator5

OTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEnumerator

CTList<System.Generics.Collections.TList<System.Classes.TComponent>>&

CTList<System.Generics.Collections.TList<System.Classes.TComponent>>

TList.Sort$1743$0$Intf

TList.Sort$1743$ActRec YK

TList.Sort$1743$ActRec

!TArray<System.Classes.TPropFixup>

&TEnumerator<System.Classes.TPropFixup>(

&TEnumerator<System.Classes.TPropFixup>

&TEnumerable<System.Classes.TPropFixup>-

&TEnumerable<System.Classes.TPropFixup>

)TList<System.Classes.TPropFixup>.arrayofT

$IComparer<System.Classes.TPropFixup>

1TCollectionNotifyEvent<System.Classes.TPropFixup>

(TArrayManager<System.Classes.TPropFixup>

&IEnumerable<System.Classes.TPropFixup>0

 TList<System.Classes.TPropFixup>.TEmptyFunc

,TList<System.Classes.TPropFixup>.TEnumerator5

,TList<System.Classes.TPropFixup>.TEnumerator

TList<System.Classes.TPropFixup>&

TList<System.Classes.TPropFixup>h

&TThreadList<System.Classes.TPropFixup>&

&TThreadList<System.Classes.TPropFixup>

"TArray<System.Classes.TPersistent>

'TEnumerator<System.Classes.TPersistent>(

'TEnumerator<System.Classes.TPersistent>8

'TEnumerable<System.Classes.TPersistent>-

'TEnumerable<System.Classes.TPersistent>|

*TList<System.Classes.TPersistent>.arrayofT

%IComparer<System.Classes.TPersistent>

2TCollectionNotifyEvent<System.Classes.TPersistent>

)TArrayManager<System.Classes.TPersistent>

)TArrayManager<System.Classes.TPersistent>\

'IEnumerable<System.Classes.TPersistent>0

,TList<System.Classes.TPersistent>.TEmptyFunc

-TList<System.Classes.TPersistent>.TEnumerator5

-TList<System.Classes.TPersistent>.TEnumeratord

!TList<System.Classes.TPersistent>&

!TList<System.Classes.TPersistent>

TComponent.Create@$2544$0$Intf

&TComparison<System.Classes.TComponent>

$TComparer<System.Classes.TComponent>2

$TComparer<System.Classes.TComponent>l

-TDelegatedComparer<System.Classes.TComponent>8

-TDelegatedComparer<System.Classes.TComponent>,

TComponent.Create@$2544$ActRec

TComponent.Create@$2544$ActRec4

#TComponent.GetObservers$2556$0$Intf

#TComponent.GetObservers$2556$1$Intf

#TComponent.GetObservers$2556$ActRec

7TLoginCredentialService.GetLoginCredentials$2829$0$Intf

LPassword

7TLoginCredentialService.GetLoginCredentials$2829$ActRec

TComparison<System.IInterface>

TComparer<System.IInterface>2

TComparer<System.IInterface>XmN

$TMoveArrayManager<System.IInterface>

 .TList`1.Pack$599$0$Intf<System.IInterface>

 @TList`1.Pack$599$ActRec<System.IInterface>

9:{System.Generics.Collections}TList<System.IInterface>.:1

 TComparison<System.Classes.TCollectionItem>

)TComparer<System.Classes.TCollectionItem>2

)TComparer<System.Classes.TCollectionItem> sN

1TMoveArrayManager<System.Classes.TCollectionItem>

8.TList`1.Pack$599$0$Intf<System.Classes.TCollectionItem>

8@TList`1.Pack$599$ActRec<System.Classes.TCollectionItem>

F:{System.Generics.Collections}TList<System.Classes.TCollectionItem>.:1

TComparison<System.TObject>

TComparer<System.TObject>2

TComparer<System.TObject>HyN

!TMoveArrayManager<System.TObject>

(.TList`1.Pack$599$0$Intf<System.TObject>

(@TList`1.Pack$599$ActRec<System.TObject>

6:{System.Generics.Collections}TList<System.TObject>.:1

,TMoveArrayManager<System.Classes.TComponent>

,TMoveArrayManager<System.Classes.TComponent>8~N

3.TList`1.Pack$599$0$Intf<System.Classes.TComponent>

3@TList`1.Pack$599$ActRec<System.Classes.TComponent>

3@TList`1.Pack$599$ActRec<System.Classes.TComponent>8

A:{System.Generics.Collections}TList<System.Classes.TComponent>.:1

RTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.arrayofT

MIComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

ZTCollectionNotifyEvent<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

Item3TPair<System.Integer,System.Classes.IInterfaceList>

QTArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

OIEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>0

TTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEmptyFunc

UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator5

UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator

ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>&

ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

TList<System.Integer>.arrayofT

IComparer<System.Integer>

TArrayManager<System.Integer>

TArrayManager<System.Integer>8

IEnumerable<System.Integer>0

TList<System.Integer>.TEmptyFunc

!TList<System.Integer>.TEnumerator5

!TList<System.Integer>.TEnumerator

TList<System.Integer>&

TList<System.Integer>

-TList<System.Classes.IInterfaceList>.arrayofT

(IComparer<System.Classes.IInterfaceList>

,TArrayManager<System.Classes.IInterfaceList>

*IEnumerable<System.Classes.IInterfaceList>0

/TList<System.Classes.IInterfaceList>.TEmptyFunc

0TList<System.Classes.IInterfaceList>.TEnumerator5

0TList<System.Classes.IInterfaceList>.TEnumerator

$TList<System.Classes.IInterfaceList>&

$TList<System.Classes.IInterfaceList>

,TComparison<System.Classes.TBasicActionLink>

*TComparer<System.Classes.TBasicActionLink>2

*TComparer<System.Classes.TBasicActionLink>(

2TMoveArrayManager<System.Classes.TBasicActionLink>

9.TList`1.Pack$599$0$Intf<System.Classes.TBasicActionLink>

9@TList`1.Pack$599$ActRec<System.Classes.TBasicActionLink>d

9@TList`1.Pack$599$ActRec<System.Classes.TBasicActionLink>

G:{System.Generics.Collections}TList<System.Classes.TBasicActionLink>.:1

STList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.arrayofT

NIComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

[TCollectionNotifyEvent<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

Item4TPair<System.string,System.Classes.TPersistentClass>

RTArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

PIEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>0

UTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEmptyFunc

VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumerator5

VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumeratorh

JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>&

JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>t

2IEqualityComparer<System.Classes.TPersistentClass>

,TComparison<System.Classes.TPersistentClass>

*TComparer<System.Classes.TPersistentClass>2

*TComparer<System.Classes.TPersistentClass>

2TMoveArrayManager<System.Classes.TPersistentClass>

2TMoveArrayManager<System.Classes.TPersistentClass>p

9.TList`1.Pack$599$0$Intf<System.Classes.TPersistentClass>

9@TList`1.Pack$599$ActRec<System.Classes.TPersistentClass>

G:{System.Generics.Collections}TList<System.Classes.TPersistentClass>.:1

System.Classes LI

%TComparison<System.Classes.TRegGroup>

#TComparer<System.Classes.TRegGroup>2

#TComparer<System.Classes.TRegGroup>

 TMoveArrayManager<System.Classes.TRegGroup>

2.TList`1.Pack$599$0$Intf<System.Classes.TRegGroup>

2@TList`1.Pack$599$ActRec<System.Classes.TRegGroup>

@:{System.Generics.Collections}TList<System.Classes.TRegGroup>.:1

%TComparison<System.Classes.TIntConst>

#TComparer<System.Classes.TIntConst>2

#TComparer<System.Classes.TIntConst>

 TMoveArrayManager<System.Classes.TIntConst>

2.TList`1.Pack$599$0$Intf<System.Classes.TIntConst>

2@TList`1.Pack$599$ActRec<System.Classes.TIntConst>

@:{System.Generics.Collections}TList<System.Classes.TIntConst>.:1

System.Classes4

0TComparison<System.Classes.TFindGlobalComponent>

.TComparer<System.Classes.TFindGlobalComponent>2

.TComparer<System.Classes.TFindGlobalComponent>

6TMoveArrayManager<System.Classes.TFindGlobalComponent>

=.TList`1.Pack$599$0$Intf<System.Classes.TFindGlobalComponent>

=@TList`1.Pack$599$ActRec<System.Classes.TFindGlobalComponent>,

=@TList`1.Pack$599$ActRec<System.Classes.TFindGlobalComponent>

K:{System.Generics.Collections}TList<System.Classes.TFindGlobalComponent>.:1

ITComparison<System.Generics.Collections.TList<System.Classes.TComponent>>

GTComparer<System.Generics.Collections.TList<System.Classes.TComponent>>2

GTComparer<System.Generics.Collections.TList<System.Classes.TComponent>>P

OTMoveArrayManager<System.Generics.Collections.TList<System.Classes.TComponent>>

OTMoveArrayManager<System.Generics.Collections.TList<System.Classes.TComponent>>P

V.TList`1.Pack$599$0$Intf<System.Generics.Collections.TList<System.Classes.TComponent>>

V@TList`1.Pack$599$ActRec<System.Generics.Collections.TList<System.Classes.TComponent>>

d:{System.Generics.Collections}TList<System.Generics.Collections.TList<System.Classes.TComponent>>.:1

&TComparison<System.Classes.TPropFixup>

$TComparer<System.Classes.TPropFixup>2

$TComparer<System.Classes.TPropFixup>h

,TMoveArrayManager<System.Classes.TPropFixup>

,TMoveArrayManager<System.Classes.TPropFixup>(

3.TList`1.Pack$599$0$Intf<System.Classes.TPropFixup>

3@TList`1.Pack$599$ActRec<System.Classes.TPropFixup>

3@TList`1.Pack$599$ActRec<System.Classes.TPropFixup>(

A:{System.Generics.Collections}TList<System.Classes.TPropFixup>.:1

'TComparison<System.Classes.TPersistent>

%TComparer<System.Classes.TPersistent>2

%TComparer<System.Classes.TPersistent>l

-TMoveArrayManager<System.Classes.TPersistent>

-TMoveArrayManager<System.Classes.TPersistent>,

4.TList`1.Pack$599$0$Intf<System.Classes.TPersistent>

4@TList`1.Pack$599$ActRec<System.Classes.TPersistent>

4@TList`1.Pack$599$ActRec<System.Classes.TPersistent>8

B:{System.Generics.Collections}TList<System.Classes.TPersistent>.:1

%TDelegatedComparer<System.IInterface>8

%TDelegatedComparer<System.IInterface>

2TDelegatedComparer<System.Classes.TCollectionItem>8

2TDelegatedComparer<System.Classes.TCollectionItem>X

"TDelegatedComparer<System.TObject>8

"TDelegatedComparer<System.TObject>

OTComparison<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>2

MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

UTMoveArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\.TList`1.Pack$599$0$Intf<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\@TList`1.Pack$599$ActRec<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\@TList`1.Pack$599$ActRec<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

j:{System.Generics.Collections}TList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.:1

TComparison<System.Integer>

TComparer<System.Integer>2

TComparer<System.Integer>

!TMoveArrayManager<System.Integer>

!TMoveArrayManager<System.Integer>|

(.TList`1.Pack$599$0$Intf<System.Integer>

(@TList`1.Pack$599$ActRec<System.Integer>

(@TList`1.Pack$599$ActRec<System.Integer>d

6:{System.Generics.Collections}TList<System.Integer>.:1

*TComparison<System.Classes.IInterfaceList>

(TComparer<System.Classes.IInterfaceList>2

(TComparer<System.Classes.IInterfaceList>

0TMoveArrayManager<System.Classes.IInterfaceList>

0TMoveArrayManager<System.Classes.IInterfaceList>P

7.TList`1.Pack$599$0$Intf<System.Classes.IInterfaceList>

7@TList`1.Pack$599$ActRec<System.Classes.IInterfaceList>

7@TList`1.Pack$599$ActRec<System.Classes.IInterfaceList>\

E:{System.Generics.Collections}TList<System.Classes.IInterfaceList>.:1

3TDelegatedComparer<System.Classes.TBasicActionLink>8

3TDelegatedComparer<System.Classes.TBasicActionLink>

PTComparison<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>2

NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

VTMoveArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

].TList`1.Pack$599$0$Intf<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

]@TList`1.Pack$599$ActRec<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

k:{System.Generics.Collections}TList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.:1

3TDelegatedComparer<System.Classes.TPersistentClass>8

3TDelegatedComparer<System.Classes.TPersistentClass>

,TDelegatedComparer<System.Classes.TRegGroup>8

,TDelegatedComparer<System.Classes.TRegGroup>

,TDelegatedComparer<System.Classes.TIntConst>8

,TDelegatedComparer<System.Classes.TIntConst>|"O

7TDelegatedComparer<System.Classes.TFindGlobalComponent>8

7TDelegatedComparer<System.Classes.TFindGlobalComponent>($O

PTDelegatedComparer<System.Generics.Collections.TList<System.Classes.TComponent>>8

PTDelegatedComparer<System.Generics.Collections.TList<System.Classes.TComponent>>

-TDelegatedComparer<System.Classes.TPropFixup>8

-TDelegatedComparer<System.Classes.TPropFixup>

.TDelegatedComparer<System.Classes.TPersistent>8

.TDelegatedComparer<System.Classes.TPersistent>

VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>8

VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>0 O

"TDelegatedComparer<System.Integer>8

"TDelegatedComparer<System.Integer>,-O

1TDelegatedComparer<System.Classes.IInterfaceList>8

1TDelegatedComparer<System.Classes.IInterfaceList>

WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>8

WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>t0O

System.TypInfo

mkOperatorOverload

PFieldExEntry

TFieldExEntry

PVmtMethodExEntry

TVmtMethodExEntry

TPropSet<System.string>V

TPropSet<System.string>

TPropSet<System.WideString>V

TPropSet<System.WideString>|iO

TPropSet<System.Single>K

TPropSet<System.Single>

TPropSet<System.Double>K

TPropSet<System.Double>hlO

TPropSet<System.Extended>K

TPropSet<System.Extended>

TPropSet<System.Comp>K

TPropSet<System.Comp>DoO

TPropSet<System.Currency>K

TPropSet<System.Currency>

TPropSet<System.IInterface>V

TPropSet<System.IInterface>|sO

System.Win.Registry

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

DeleteKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKey

LastErrorMsg

RootKey

RootKeyName

System.IniFiles

TStringHash.THashItem

-TArray<System.IniFiles.TStringHash.THashItem>

2TEnumerator<System.IniFiles.TStringHash.THashItem>(

2TEnumerator<System.IniFiles.TStringHash.THashItem>

2TEnumerable<System.IniFiles.TStringHash.THashItem>-

2TEnumerable<System.IniFiles.TStringHash.THashItem>,

5TList<System.IniFiles.TStringHash.THashItem>.arrayofT

0IComparer<System.IniFiles.TStringHash.THashItem>

=TCollectionNotifyEvent<System.IniFiles.TStringHash.THashItem>

4TArrayManager<System.IniFiles.TStringHash.THashItem>

4TArrayManager<System.IniFiles.TStringHash.THashItem>L

2IEnumerable<System.IniFiles.TStringHash.THashItem>0

7TList<System.IniFiles.TStringHash.THashItem>.TEmptyFunc

8TList<System.IniFiles.TStringHash.THashItem>.TEnumerator5

8TList<System.IniFiles.TStringHash.THashItem>.TEnumeratorx

,TList<System.IniFiles.TStringHash.THashItem>&

,TList<System.IniFiles.TStringHash.THashItem>H

2TComparison<System.IniFiles.TStringHash.THashItem>

0TComparer<System.IniFiles.TStringHash.THashItem>2

0TComparer<System.IniFiles.TStringHash.THashItem>0

8TMoveArrayManager<System.IniFiles.TStringHash.THashItem>

?.TList`1.Pack$599$0$Intf<System.IniFiles.TStringHash.THashItem>

?@TList`1.Pack$599$ActRec<System.IniFiles.TStringHash.THashItem>

?@TList`1.Pack$599$ActRec<System.IniFiles.TStringHash.THashItem>,!P

M:{System.Generics.Collections}TList<System.IniFiles.TStringHash.THashItem>.:1

System.IniFiles$

9TDelegatedComparer<System.IniFiles.TStringHash.THashItem>8

9TDelegatedComparer<System.IniFiles.TStringHash.THashItem>

System.DateUtils

TLocalTimeZone.TYearlyChanges

TLocalTimeZone.TYearlyChanges4-P

ATPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>

ZTArray<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

_TEnumerator<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>(

_TEnumerator<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

_TEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>-

_TEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

MTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TItem

RTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TItemArray

System.Generics.Collections@4P

IEqualityComparer<System.Word>

#TCollectionNotifyEvent<System.Word>

FTCollectionNotifyEvent<System.DateUtils.TLocalTimeZone.TYearlyChanges>

TArray<System.Word>

TEnumerator<System.Word>(

TEnumerator<System.Word>

TEnumerable<System.Word>-

TEnumerable<System.Word>

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyEnumerator;

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyEnumerator<:P

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyCollection;

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyCollectionT<P

6TArray<System.DateUtils.TLocalTimeZone.TYearlyChanges>

;TEnumerator<System.DateUtils.TLocalTimeZone.TYearlyChanges>(

;TEnumerator<System.DateUtils.TLocalTimeZone.TYearlyChanges>

;TEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>-

;TEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>`@P

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueEnumerator;

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueEnumerator

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueCollection;

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueCollection

WTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TPairEnumerator;

WTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TPairEnumeratorDFP

GTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>9

GTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>\HP

Keys8EP

OnKeyNotifyd6P

MTObjectDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>M

MTObjectDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>0PP

bTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.arrayofT

]IComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

jTCollectionNotifyEvent<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

ItemATPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>

aTArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

_IEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>0

dTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEmptyFunc

eTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEnumerator5

eTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEnumerator

YTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>&

YTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

TList<System.Word>.arrayofT

IComparer<System.Word>

TArrayManager<System.Word>

IEnumerable<System.Word>0

TList<System.Word>.TEmptyFunc

TList<System.Word>.TEnumerator5

TList<System.Word>.TEnumeratorX

TList<System.Word>&

TList<System.Word>

>TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.arrayofT

9IComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>

=TArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>

=TArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges><

;IEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>0

@TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEmptyFunc

ATList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEnumerator5

ATList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEnumerator

5TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>&

5TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>t

_TComparison<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

]TComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>2

]TComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

eTMoveArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

eTMoveArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>@

l.TList`1.Pack$599$0$Intf<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

l@TList`1.Pack$599$ActRec<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

z:{System.Generics.Collections}TList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.:1

TComparison<System.Word>

TComparer<System.Word>2

TComparer<System.Word>

TMoveArrayManager<System.Word>

TMoveArrayManager<System.Word>t

%.TList`1.Pack$599$0$Intf<System.Word>

%@TList`1.Pack$599$ActRec<System.Word>

%@TList`1.Pack$599$ActRec<System.Word>P

3:{System.Generics.Collections}TList<System.Word>.:1

;TComparison<System.DateUtils.TLocalTimeZone.TYearlyChanges>

9TComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>2

9TComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>

ATMoveArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>

ATMoveArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>h

H.TList`1.Pack$599$0$Intf<System.DateUtils.TLocalTimeZone.TYearlyChanges>

H@TList`1.Pack$599$ActRec<System.DateUtils.TLocalTimeZone.TYearlyChanges>

V:{System.Generics.Collections}TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.:1

fTDelegatedComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>8

fTDelegatedComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>p

TDelegatedComparer<System.Word>8

TDelegatedComparer<System.Word>

BTDelegatedComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>8

BTDelegatedComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>

System.Contnrs

System.Win.ComObj

System.SyncObjs

TFunc<System.Boolean>

System.SyncObjsX

System.Actions

FHelpKeyword

'TArray<System.Actions.TContainedAction>

,TEnumerator<System.Actions.TContainedAction>(

,TEnumerator<System.Actions.TContainedAction>

,TEnumerable<System.Actions.TContainedAction>-

,TEnumerable<System.Actions.TContainedAction>

/TList<System.Actions.TContainedAction>.arrayofT

System.Generics.CollectionsXLQ

*IComparer<System.Actions.TContainedAction>

7TCollectionNotifyEvent<System.Actions.TContainedAction>

.TArrayManager<System.Actions.TContainedAction>

,IEnumerable<System.Actions.TContainedAction>0

1TList<System.Actions.TContainedAction>.TEmptyFunc

2TList<System.Actions.TContainedAction>.TEnumerator5

2TList<System.Actions.TContainedAction>.TEnumerator

&TList<System.Actions.TContainedAction>&

&TList<System.Actions.TContainedAction>

,TComparison<System.Actions.TContainedAction>

*TComparer<System.Actions.TContainedAction>2

*TComparer<System.Actions.TContainedAction>

2TMoveArrayManager<System.Actions.TContainedAction>

9.TList`1.Pack$599$0$Intf<System.Actions.TContainedAction>

9@TList`1.Pack$599$ActRec<System.Actions.TContainedAction>H

9@TList`1.Pack$599$ActRec<System.Actions.TContainedAction>

G:{System.Generics.Collections}TList<System.Actions.TContainedAction>.:1

System.ActionsXLQ

3TDelegatedComparer<System.Actions.TContainedAction>8

3TDelegatedComparer<System.Actions.TContainedAction>

ENotSupportedException

ENoMonitorSupportException

TArray<System.SysUtils.TLangRec>

TMarshaller.PDisposeRect

TMarshaller.TDisposeProc`

TMarshaller.TDisposeRec

TMarshaller.IDisposer

TMarshaller.TDisposer'

TMarshaller.TDisposer

/TArray<System.SysUtils.TMarshaller.TDisposeRec>

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

System.SysUtils4

&TArray<System.SysUtils.TUnitHashEntry>

biClrImportant

tagMSG

Winapi.Windows

HKEY

System.UITypes

TWindowState

poPortrait

ssHorizontal

System.Types

TArray<System.ShortInt>

TArray<System.SmallInt>

TArray<System.Int64>

TArray<System.TPtrWrapper>

Vcl.Styles

6TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>

ITArray<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

NTEnumerator<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>(

NTEnumerator<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

NTEnumerable<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>-

NTEnumerable<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>0

BTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TItem

GTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TItemArray

,IEqualityComparer<System.Classes.TComponent>

-TCollectionNotifyEvent<Vcl.Themes.TStyleHook>

KTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TKeyEnumerator;

KTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TKeyEnumerator

KTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TKeyCollection;

KTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TKeyCollection

TArray<Vcl.Themes.TStyleHook>

"TEnumerator<Vcl.Themes.TStyleHook>(

"TEnumerator<Vcl.Themes.TStyleHook>t

"TEnumerable<Vcl.Themes.TStyleHook>-

"TEnumerable<Vcl.Themes.TStyleHook>

MTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TValueEnumerator;

MTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TValueEnumerator

MTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TValueCollection;

MTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TValueCollection

LTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TPairEnumerator;

LTDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>.TPairEnumerator4

<TDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>9

<TDictionary<System.Classes.TComponent,Vcl.Themes.TStyleHook>8

Keys4

ktcPanel

ktcPanelDisabled

ssHot

FAuthorURL

AuthorURL

TSeWindowSubclass

ktmiWindowStandard

Vcl.StylesX^U

RTPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

eTArray<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

jTEnumerator<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>(

jTEnumerator<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

jTEnumerable<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>-

jTEnumerable<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>L@X

^TDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TItem

cTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TItemArray

DTCollectionNotifyEvent<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

Item!TList<Vcl.Themes.TStyleHookClass>

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyEnumerator;

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyEnumerator\DX

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyCollection;

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyCollection

4TArray<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

9TEnumerator<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>(

9TEnumerator<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>PIX

9TEnumerable<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>-

9TEnumerable<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueEnumerator;

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueEnumerator8LX

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueCollection;

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueCollectiontNX

hTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TPairEnumerator;

hTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TPairEnumerator

XTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>9

XTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

QTList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>.arrayofT

System.Generics.Collections<

LIComparer<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

YTCollectionNotifyEvent<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

Item6TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>

PTArrayManager<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

NIEnumerable<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>0

STList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>.TEmptyFunc

TTList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>.TEnumerator5

TTList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>.TEnumerator<

HTList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>&

HTList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>D

%TList<Vcl.Themes.TStyleHook>.arrayofT

IComparer<Vcl.Themes.TStyleHook>

$TArrayManager<Vcl.Themes.TStyleHook>

"IEnumerable<Vcl.Themes.TStyleHook>0

'TList<Vcl.Themes.TStyleHook>.TEmptyFunc

(TList<Vcl.Themes.TStyleHook>.TEnumerator5

(TList<Vcl.Themes.TStyleHook>.TEnumerator

TList<Vcl.Themes.TStyleHook>&

TList<Vcl.Themes.TStyleHook>

mTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.arrayofT

hIComparer<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

uTCollectionNotifyEvent<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

ItemRTPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

lTArrayManager<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

jIEnumerable<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>0

oTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEmptyFunc

pTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEnumerator5

pTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEnumerator

dTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>&

dTList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

<TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>.arrayofT

System.Generics.CollectionsP

7IComparer<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

;TArrayManager<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

9IEnumerable<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>0

>TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>.TEmptyFunc

?TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>.TEnumerator5

?TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>.TEnumeratorX

3TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>&

3TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>4

NTComparison<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

LTComparer<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>2

LTComparer<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

TTMoveArrayManager<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

[.TList`1.Pack$599$0$Intf<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

[@TList`1.Pack$599$ActRec<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

[@TList`1.Pack$599$ActRec<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>D

i:{System.Generics.Collections}TList<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>.:1

Vcl.Styles<

"TComparison<Vcl.Themes.TStyleHook>

TComparer<Vcl.Themes.TStyleHook>2

TComparer<Vcl.Themes.TStyleHook>

(TMoveArrayManager<Vcl.Themes.TStyleHook>

/.TList`1.Pack$599$0$Intf<Vcl.Themes.TStyleHook>

/@TList`1.Pack$599$ActRec<Vcl.Themes.TStyleHook>

=:{System.Generics.Collections}TList<Vcl.Themes.TStyleHook>.:1

jTComparison<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

hTComparer<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>2

hTComparer<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

pTMoveArrayManager<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

pTMoveArrayManager<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>\!Y

w.TList`1.Pack$599$0$Intf<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

w@TList`1.Pack$599$ActRec<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

w@TList`1.Pack$599$ActRec<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>($Y

:{System.Generics.Collections}TList<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.:1

9TComparison<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

7TComparer<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>2

7TComparer<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>D'Y

?TMoveArrayManager<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

?TMoveArrayManager<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>$)Y

F.TList`1.Pack$599$0$Intf<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

F@TList`1.Pack$599$ActRec<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

F@TList`1.Pack$599$ActRec<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>` Y

T:{System.Generics.Collections}TList<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>.:1

Vcl.StylesP

UTDelegatedComparer<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>8

UTDelegatedComparer<Vcl.Styles.TPair<System.Classes.TComponent,Vcl.Themes.TStyleHook>>

)TDelegatedComparer<Vcl.Themes.TStyleHook>8

)TDelegatedComparer<Vcl.Themes.TStyleHook>

qTDelegatedComparer<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>8

qTDelegatedComparer<Vcl.Styles.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

@TDelegatedComparer<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>8

@TDelegatedComparer<Vcl.Styles.TList<Vcl.Themes.TStyleHookClass>>

Vcl.CategoryButtons

Vcl.CategoryButtonsU

OnKeyDown

OnKeyPressp

OnKeyUpL

Vcl.ButtonGroup

Vcl.ButtonGroupB

OnKeyUp

Vcl.Themes

tcpCategoryPanelGroupDontCare

tcpCategoryPanelGroupRoot

tcpBackground

tcpGradientHeader

tcpThemedHeader

tcpChevronOpenedNormal

tcpChevronOpenedHot

tcpChevronOpenedPressed

tcpChevronClosedNormal

tcpChevronClosedHot

tcpChevronClosedPressed

tcpChevronClosedLeftNormal

tcpChevronClosedLeftHot

tcpChevronClosedLeftPressed

tcpThemedChevronOpenedNormal

tcpThemedChevronOpenedHot

tcpThemedChevronOpenedPressed

tcpThemedChevronClosedNormal

tcpThemedChevronClosedHot

tcpThemedChevronClosedPressed

tcDropDownButtonLeftPressed

tePassword

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

TCustomStyleServices.TStyleFlag

TCustomStyleServices.TStyleFlags

 TCustomStyleEngine.TStyleEngineNotification

#TStyleManager.TStyleClassDescriptor

"TStyleManager.TStyleServicesHandle

TStyleManager.TSourceInfo

*TMouseTrackControlStyleHook.TMousePosition

System.Generics.CollectionsH

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyEnumerator

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyCollection

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueEnumerator

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueCollection

hTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TPairEnumerator(

XTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>d

9TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>

LTArray<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

QTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>(

QTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>p

QTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>-

QTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

ETDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TItem

JTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TItemArray

<TCollectionNotifyEvent<Vcl.Themes.TStyleManager.TSourceInfo>

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyEnumerator;

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyEnumerator

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyCollection;

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyCollection

,TArray<Vcl.Themes.TStyleManager.TSourceInfo>

1TEnumerator<Vcl.Themes.TStyleManager.TSourceInfo>(

1TEnumerator<Vcl.Themes.TStyleManager.TSourceInfo>8

1TEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>-

1TEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueEnumerator;

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueEnumerator

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueCollection;

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueCollection

OTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TPairEnumerator;

OTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TPairEnumerator@

?TDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>9

?TDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>H

Keys<

OnKeyNotify|

6TArray<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

;TEnumerator<Vcl.Themes.TStyleManager.TStyleClassDescriptor>(

;TEnumerator<Vcl.Themes.TStyleManager.TStyleClassDescriptor>p&[

;TEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>-

;TEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

>TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.arrayofT

9IComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

FTCollectionNotifyEvent<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

Item#TStyleManager.TStyleClassDescriptor

=TArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

=TArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>8 [

;IEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>0

@TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEmptyFunc

ATList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEnumerator5

ATList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEnumerator

5TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>&

5TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>p/[

'TArray<Vcl.Themes.TCustomStyleServices>

,TEnumerator<Vcl.Themes.TCustomStyleServices>(

,TEnumerator<Vcl.Themes.TCustomStyleServices>

,TEnumerable<Vcl.Themes.TCustomStyleServices>-

,TEnumerable<Vcl.Themes.TCustomStyleServices>

/TList<Vcl.Themes.TCustomStyleServices>.arrayofT

System.Generics.Collections(

*IComparer<Vcl.Themes.TCustomStyleServices>

7TCollectionNotifyEvent<Vcl.Themes.TCustomStyleServices>

.TArrayManager<Vcl.Themes.TCustomStyleServices>

,IEnumerable<Vcl.Themes.TCustomStyleServices>0

1TList<Vcl.Themes.TCustomStyleServices>.TEmptyFunc

2TList<Vcl.Themes.TCustomStyleServices>.TEnumerator5

2TList<Vcl.Themes.TCustomStyleServices>.TEnumerator

&TList<Vcl.Themes.TCustomStyleServices>&

&TList<Vcl.Themes.TCustomStyleServices>

TArray<System.Types.TPoint>

TEnumerator<System.Types.TPoint>(

TEnumerator<System.Types.TPoint>

TEnumerable<System.Types.TPoint>-

TEnumerable<System.Types.TPoint>

#TList<System.Types.TPoint>.arrayofT

IComparer<System.Types.TPoint>

 TCollectionNotifyEvent<System.Types.TPoint>

"TArrayManager<System.Types.TPoint>

IEnumerable<System.Types.TPoint>0

%TList<System.Types.TPoint>.TEmptyFunc

&TList<System.Types.TPoint>.TEnumerator5

&TList<System.Types.TPoint>.TEnumerator

TList<System.Types.TPoint>&

TList<System.Types.TPoint>0

TTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.arrayofT

OIComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

\TCollectionNotifyEvent<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

Item9TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>

STArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

STArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>Pz\

QIEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>0

VTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEmptyFunc

WTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEnumerator5

WTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEnumerator

KTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>&

KTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

4TList<Vcl.Themes.TStyleManager.TSourceInfo>.arrayofT

/IComparer<Vcl.Themes.TStyleManager.TSourceInfo>

3TArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>

1IEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>0

6TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEmptyFunc

7TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEnumerator5

7TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEnumerator

 TList<Vcl.Themes.TStyleManager.TSourceInfo>&

 TList<Vcl.Themes.TStyleManager.TSourceInfo>

;TComparison<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

9TComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>2

9TComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

ATMoveArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

ATMoveArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>h

H.TList`1.Pack$599$0$Intf<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

H@TList`1.Pack$599$ActRec<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

V:{System.Generics.Collections}TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.:1

,TComparison<Vcl.Themes.TCustomStyleServices>

*TComparer<Vcl.Themes.TCustomStyleServices>2

*TComparer<Vcl.Themes.TCustomStyleServices>4

2TMoveArrayManager<Vcl.Themes.TCustomStyleServices>

9.TList`1.Pack$599$0$Intf<Vcl.Themes.TCustomStyleServices>

9@TList`1.Pack$599$ActRec<Vcl.Themes.TCustomStyleServices>p

9@TList`1.Pack$599$ActRec<Vcl.Themes.TCustomStyleServices>

G:{System.Generics.Collections}TList<Vcl.Themes.TCustomStyleServices>.:1

Vcl.Themes(

TComparison<System.Types.TPoint>

TComparer<System.Types.TPoint>2

TComparer<System.Types.TPoint>`

&TMoveArrayManager<System.Types.TPoint>

-.TList`1.Pack$599$0$Intf<System.Types.TPoint>

-@TList`1.Pack$599$ActRec<System.Types.TPoint>T

-@TList`1.Pack$599$ActRec<System.Types.TPoint>

;:{System.Generics.Collections}TList<System.Types.TPoint>.:1

QTComparison<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

OTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>2

OTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>\

WTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

WTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>l

^.TList`1.Pack$599$0$Intf<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

^@TList`1.Pack$599$ActRec<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

l:{System.Generics.Collections}TList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.:1

1TComparison<Vcl.Themes.TStyleManager.TSourceInfo>

/TComparer<Vcl.Themes.TStyleManager.TSourceInfo>2

/TComparer<Vcl.Themes.TStyleManager.TSourceInfo>

7TMoveArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>

>.TList`1.Pack$599$0$Intf<Vcl.Themes.TStyleManager.TSourceInfo>

>@TList`1.Pack$599$ActRec<Vcl.Themes.TStyleManager.TSourceInfo>

L:{System.Generics.Collections}TList<Vcl.Themes.TStyleManager.TSourceInfo>.:1

BTDelegatedComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>8

BTDelegatedComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>P

3TDelegatedComparer<Vcl.Themes.TCustomStyleServices>8

3TDelegatedComparer<Vcl.Themes.TCustomStyleServices>$

'TDelegatedComparer<System.Types.TPoint>8

'TDelegatedComparer<System.Types.TPoint>

XTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>8

XTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>t

8TDelegatedComparer<Vcl.Themes.TStyleManager.TSourceInfo>8

8TDelegatedComparer<Vcl.Themes.TStyleManager.TSourceInfo>x

Vcl.Buttons

Vcl.Buttons!

Vcl.Buttons4

Vcl.GraphUtil

FOnActionExecute

Vcl.AppEvnts

OnActionExecutet

Vcl.StdActns

Vcl.ImgList

lrMonoChrome

IsShortCut

Vcl.ActnList

Vcl.ToolWin

Vcl.AxCtrls

Vcl.StdCtrls

Vcl.StdCtrls5

Vcl.StdCtrls-

FPasswordChar

Vcl.StdCtrlsC

PasswordChar

Vcl.StdCtrlsA

Vcl.StdCtrlsD

TCustomButton.TButtonStyle

Vcl.StdCtrls;

Vcl.StdCtrls2

Vcl.StdCtrls1

Vcl.StdCtrlsG

Vcl.StdCtrls

!TScrollBarStyleHook.TScrollWindow6

!TScrollBarStyleHook.TScrollWindowh

%TCustomEdit.ObserverAdded$3333$0$Intf

%TCustomEdit.ObserverAdded$3333$ActRec

%TCustomEdit.ObserverAdded$3333$ActRech

)TCustomCheckBox.ObserverAdded$3545$0$Intf

)TCustomCheckBox.ObserverAdded$3545$ActRec

)TCustomCheckBox.ObserverAdded$3545$ActRech

Vcl.Printers

APort

Port

Vcl.OleServer

LicenseKey

'TServerEventDispatch.Invoke$7206$0$Intf

'TServerEventDispatch.Invoke$7206$ActRec

Vcl.OleCtrls

Vcl.Menus

FAutoHotkeys

RethinkHotkeys

AutoHotkeys

AutoHotkeys@?`

Vcl.Mask

Vcl.ListActns

EInvalidGridOperation

EInvalidGridOperationd*a

Vcl.Grids

goAlwaysShowEditor

Vcl.GridsN

%TCustomGrid.ObserverAdded$6177$0$Intf

%TCustomGrid.ObserverAdded$6177$1$Intf

%TCustomGrid.ObserverAdded$6177$ActRecH

%TCustomGrid.ObserverAdded$6177$ActRec

.TSparsePointerArray.ResetHighBound$6347$0$Intf

.TSparsePointerArray.ResetHighBound$6347$ActRec

'TStringSparseList.WriteData$6363$0$Intf

'TStringSparseList.WriteData$6363$1$Intf

'TStringSparseList.WriteData$6363$ActRec

#TStringSparseList.Clear$6376$0$Intf

#TStringSparseList.Clear$6376$ActRec

$TStringGridStrings.Clear$6382$0$Intf

$TStringGridStrings.Clear$6382$ActRec

$TStringGridStrings.Clear$6382$ActRec0

TStringGrid.Destroy$6395$0$Intf

TStringGrid.Destroy$6395$ActRec

#TStringGrid.ColumnMoved$6397$0$Intf

#TStringGrid.ColumnMoved$6397$ActRec

#TStringGrid.ColumnMoved$6397$ActRec0

Vcl.Graphics

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsClipboardFormat

Monochromex^b

UhP%c

Vcl.Forms

ssHotTrack

Vcl.Forms@

Vcl.Forms;

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreview

WindowState

Vcl.Formsc

WindowState L`

Vcl.FormsxxS

FBiDiKeyboard

FNonBiDiKeyboard

FEnumAllWindowsOnActivateHint

Keyword

EnumAllWindowsOnActivateHint

BiDiKeyboard

NonBiDiKeyboard

!TScrollingStyleHook.TScrollWindow6

!TScrollingStyleHook.TScrollWindow

1TFormStyleHook.TMainMenuBarStyleHook.TMenuBarItem

(:TFormStyleHook.TMainMenuBarStyleHook.:1

FEnterWithKeyboard

$TFormStyleHook.TMainMenuBarStyleHook8

CheckHotKeyItem

$TFormStyleHook.TMainMenuBarStyleHook@

EnterWithKeyboard

Uh8%d

D$< FTP

FProportional

Vcl.ExtCtrls$

Proportional

Vcl.ExtCtrls

Vcl.ExtCtrlsF

FOldKeyDown

!TCustomCategoryPanel.THeaderState

Vcl.ExtCtrls?

&TCustomCategoryPanelGroup.THeaderStyle

Vcl.ExtCtrlsK

sltURL

TCustomLinkLabel.TLinkAlignment

Vcl.ExtCtrls*

Vcl.Dialogs

Vcl.Dialogsx

TDefaultLoginCredentials]

LoginEvent

LoginEventUsrPw

TDefaultLoginCredentials

.TDefaultLoginCredentials.LoginEvent$833$0$Intf

.TDefaultLoginCredentials.LoginEvent$833$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$835$0$Intf

3TDefaultLoginCredentials.LoginEventUsrPw$835$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$835$ActRec,

Vcl.Controls

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

Vcl.Controlsh

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

HelpKeyword|&I

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

Uh.ug

Vcl.ComCtrls

Vcl.ComCtrls<

Vcl.ComCtrls'

Vcl.ComCtrls;

Vcl.ComCtrls1

cdsShowKeyboardCues

Vcl.ComCtrls0

msShiftSelect

FSaveIndexes

Vcl.ComCtrls[

Vcl.ComCtrls/

Vcl.ComCtrlsH

FArrowKeys

Vcl.ComCtrls#

ArrowKeys

THKInvalidKey

THKInvalidKeys

FInvalidKeys

FHotKey

TCustomHotKey6

TCustomHotKey<

THotKey

HotKey

InvalidKeys0

vsReport

Vcl.ComCtrlsm

Vcl.ComCtrls&

FCustomizeKeyName

Vcl.ComCtrlsV

CustomizeKeyName

Vcl.ComCtrls9

Vcl.ComCtrls?

OnKeyUp

acoUpDownKeyDropsList

Vcl.ComCtrls:

FUpDownLeftPressed

FLeftPressed

TComboBoxExEnumerator5

TComboBoxExEnumerator0

Vcl.Clipbrd

Shdocvw_tlb::IWebBrowser2Disp *

UpdateIconsIndexes

csIndexed

FCrToRedTable

FCrToGreenTable

TacMDIWnd'

TacMDIWnd$

C.Phlnp

UpdateIndexes

FMenuSupport

InitConstantIndexes

InitMaskIndexes

MenuSupport

Uh.Hv

TacMenuSupport&

TacMenuSupport

acInMouseMsg

IsControlSupported

CurLeft

f;p.tI

t{Ht.HtK

IndexWebBtn

Vcl.Imaging.jpeg

Vcl.Imaging.pngimage

fKeyword

Vcl.Imaging.GIFImg

ImportPalette

ImportColorTable

ImportDIBColors

ImportColorMap

ExportPalette

rmWindows20

rmWindows256

rmWindowsGray

rmMonochrome

rmQuantizeWindows

TMonochromeLookup7

TMonochromeLookup

IdStackWindows

TIdSocketListWindows4

TIdSocketListWindowsL%~

TIdStackWindowsg

VPort

AddServByPortToList

APortNumber

ReceiveMsg

WSTranslateSocketErrorMsg

SupportsIPv6

CheckIPVersionSupport

TIdStackWindows$)~

WSGetServByPort

AMsg

EIdIPVersionUnsupported

ReceiveMsg,

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange8

EIdInvalidPortRange

ftpTransfer

ftpReady

ftpAborted

CompressFTPDeflate

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

FPort

FPassword

URLDecode

URLEncode

SEC_GET_KEY_FN

KeyVer

pGetKeyFn

pvGetKeyArgument

EXPORT_SECURITY_CONTEXT_FN

IMPORT_SECURITY_CONTEXT_FN_W|)

ExportSecurityContext

ImportSecurityContextW

rsa_keygen

dsa_keygen

pub_key

priv_key

PEVP_PKEYT?

EVP_PKEY_union

EVP_PKEY

pkey

pkey_type

required_pkey_type

key_len

key_length

AUTHORITY_KEYID

keyid

PAUTHORITY_KEYID4G

X509_PUBKEY

public_key

PX509_PUBKEY

X509_CERT_AUX

PX509_CERT_AUX

cert_info

ex_nscert

get_cert_methods

cert_crl

lookup_certs

ppem_password_cbdR

algorithm_mkey

key_arg_length

key_arg

master_key_length

master_key

sess_cert

login

Ptlsext_ticket_key_cb1`

cert_store

default_passwd_callback

default_passwd_callback_userdata

client_cert_cb

extra_certs

max_cert_list

cert

msg_callback

msg_callback_arg

client_cert_engine

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

init_msg

read_key

write_key

key_material_length

key_material

tmp_cert_type

tmp_cert_length

tmp_cert_verify_md

tmp_cert_req

tmp_key_block_length

tmp_key_block

new_mac_pkey_type

tmp_cert_request

msg_len

w_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

TCallbackExEvent

TPasswordEvent

TPasswordEventEx

VPassword

Certificate

fsRootCertFile

fsCertFile

fsKeyFile

RootCertFile

CertFile

KeyFile

LoadRootCert

LoadCert

fPeerCert

PeerCertp

fOnGetPassword

fOnGetPasswordEx

OnGetPasswordH

OnGetPasswordEx

MakeFTPSvrPort

MakeFTPSvrPasv

EIdOSSLLoadingRootCertError

EIdOSSLLoadingRootCertErrorh"

EIdOSSLLoadingCertError

EIdOSSLLoadingCertError0#

EIdOSSLLoadingKeyError

fPassThrough

PassThrough

URL(}

ClientClassH}

EIdUnsupportedOperation

EIdUnsupportedOperation

EIdUnsupportedTransfer

EIdUnsupportedEncoding

IdHTTPHeaderInfo

ProxyPassword

ProxyPort

TIdMetaHTTPEquivE

ProcessMetaHTTPEquiv

TIdMetaHTTPEquiv\

TIdHTTPConnectionType

IdHTTP

TIdHTTPOption

hoNoParseMetaHTTPEquiv

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

FHTTP

FMetaHTTPEquiv

TIdHTTPResponse5

AHTTP

TIdHTTPResponselG

MetaHTTPEquiv

TIdHTTPRequest5

TIdHTTPRequest

TIdHTTPProtocol;

TIdHTTPProtocol

FHTTPProto

TIdCustomHTTP'

AURL

TIdCustomHTTPXO

MetaHTTPEquiv<

HTTPOptions

TIdHTTP

EIdHTTPProtocolExceptionn

EIdHTTPProtocolException0c

QuoteHTTP

FHttpOnly

HttpOnly

aPassword

FLastCmdResult

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

SendCmd

SendCmdf

TIdTCPConnection

IdTCPConnection

LastCmdResult

FBoundPort

FBoundPortMax

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom

IdTCPClient

BoundPort

BoundPortMax

BoundPortMin

TIdTCPClient

%EIdSocksUDPNotSupportedBySOCKSVersion

saUsernamePassword

FUDPSocksAssociation

OpenUDP

RecvFromUDP

SendToUDP9

CloseUDP

FClientPortMin

FClientPortMax

FPeerPort

ClientPortMin

ClientPortMax

PeerPort

TIdIPAddresshw

IPAsStringU

FDefaultPort

DefaultPort

VMsgEnd

EIdPortRequired

EIdTCPConnectionError

EIdObjectTypeNotSupported

"EIdTransparentProxyUDPNotSupported

SendToUDPm

%u8F3

C.Pj W

_uninsep.bat

del "%s"

if exist "%s" goto Repeat

rmdir "%s"

/config.ini

PointBlank.exe

PBMaster.dll

Certifique-se de que a DLL (PBMaster.dll) esteja na mesma pasta que o execut

CryptAcquireContext failed: %d

CryptHashData failed: %d

ReadFile failed: %d

hXXp://VVV.gamesbr.me/pbhash.txt

CryptGetHashParam failed: %d

hXXp://VVV.expertgh.com/forum/

hXXp://VVV.gamesbr.me/chkhs.txt

hXXp://path.pointblankonline.com.br/HSUpdate/HStest/x86/ahn.ui

hXXp://VVV.expertgh.com/counter/online3.php

hXXp://VVV.gamesbr.me/ads/forceadaf.txt

hXXp://VVV.gamesbr.me/ads/porc1.txt

hXXp://VVV.gamesbr.me/ads/forcead2.txt

hXXp://VVV.gamesbr.me/ads/porc.txt

User32.dll

Certifique-se de ter permiss

c:\program files (x86)\embarcadero\rad studio\10.0\include\windows\rtl\utilcls.h

hXXp://VVV.gamesbr.me/ads/ads2.txt

hXXp://VVV.gamesbr.me/ads/ads3.txt

hXXp://VVV.gamesbr.me/ads/links1.txt

CppWebBrowser1

CppWebBrowser2

IdHTTP1

IdHTTP2

CppWebBrowser3

CppWebBrowser1DocumentComplete&

CppWebBrowser1NavigateComplete2

CppWebBrowser1NewWindow2

CppWebBrowser3NewWindow2

deflate 1.2.7 Copyright 1995-2012 Jean-loup Gailly and Mark Adler

inflate 1.2.7 Copyright 1995-2012 Mark Adler

<fd:%d>

csshiftjis

windows-936

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

windows-874

SHDocVw_OCX.cpp

GetDefaultInterface()->QueryStatusWB(cmdID, (Shdocvw_tlb::OLECMDF*)&pcmdf)

GetDefaultInterface()->get_LocationURL((BSTR*)&LocationURL)

GetDefaultInterface()->FindWindowSW(pvarloc, pvarlocRoot, swClass, pHWND, swfwOptions, (LPDISPATCH*)&ppdispOut)

GetDefaultInterface()->IsSubscribed(URL, (VARIANT_BOOL*)&pBool)

GetDefaultInterface()->IsSearchProviderInstalled(URL, (unsigned_long*)&pdwResult)

GetDefaultInterface()->RunOnceHasShown((VARIANT_BOOL*)&pfShown)

GetDefaultInterface()->SearchGuideUrl((BSTR*)&pbstrUrl)

GetDefaultInterface()->IsServiceInstalled(URL, Verb, (unsigned_long*)&pdwResult)

C:\Builds\TP\include\windows\rtl\utilcls.h

1.2.3

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!

P%S%V%Y%\%

xxtype.cpp

derv->tpClass.tpcFlags & CF_HAS_BASES

Inappropriate I/O control operation

Broken pipe

Operation not permitted

%H:%M:%S

%m/%d/%y

%A, %B %d, %Y

d/d/d d:d:d.d

xx.cpp

varType->tpClass.tpcFlags & CF_HAS_DTOR

varType->tpClass.tpcDtorAddr

(vbFlag && (errPtr->ERRcInitDtc >= varType->tpClass.tpcDtorCount)) || (!vbFlag && (errPtr->ERRcInitDtc >= varType->tpClass.tpcNVdtCount)) || flags

memType->tpClass.tpcFlags & CF_HAS_DTOR

varType->tpArr.tpaElemType->tpClass.tpcFlags & CF_HAS_DTOR

dttPtr->dttType->tpPtr.tppBaseType->tpClass.tpcFlags & CF_HAS_DTOR

IS_CLASS(dttPtr->dttType->tpMask) && (dttPtr->dttType->tpClass.tpcFlags & CF_HAS_DTOR)

elemType->tpClass.tpcFlags & CF_HAS_DTOR

_noParam.VType == VT_ERROR

variant.cpp

_empty.VType == varEmpty

Parms.VType == (VT_ARRAY|VT_VARIANT)

ParmTypes.VType == (VT_ARRAY|VT_I4)

D:\/config.ini

?456789:;<=

!"#$%&'()* ,-./0123

ADVAPI32.DLL

KERNEL32.DLL

VERSION.DLL

WINSPOOL.DRV

COMCTL32.DLL

GDI32.DLL

MSIMG32.DLL

SHELL32.DLL

USER32.DLL

WINMM.DLL

IMM32.DLL

OLE32.DLL

OLEAUT32.DLL

PROPSYS.DLL

WTSAPI32.DLL

WINDOWSCODECS.DLL

DWMAPI.DLL

UXTHEME.DLL

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegEnumKeyExW

RegFlushKey

RegLoadKeyW

RegOpenKeyExW

RegQueryInfoKeyW

RegReplaceKeyW

RegRestoreKeyW

RegSaveKeyW

RegUnLoadKeyW

GetCPInfo

GetCPInfoExW

GetProcessHeap

GetViewportOrgEx

SetViewportExtEx

SetViewportOrgEx

ShellExecuteA

ActivateKeyboardLayout

EnumChildWindows

EnumThreadWindows

EnumWindows

GetKeyNameTextW

GetKeyState

GetKeyboardLayout

GetKeyboardLayoutList

GetKeyboardLayoutNameW

GetKeyboardState

LoadKeyboardLayoutW

MapVirtualKeyW

MsgWaitForMultipleObjects

MsgWaitForMultipleObjectsEx

SetKeyboardState

SetWindowsHookExW

UnhookWindowsHookEx

RegDeleteKeyExW

MasterPB.exe

@$xp$26Shdocvw_tlb@TCppWebBrowser

@$xp$28Shdocvw_tlb@TCppShellWindows

@$xp$29Shdocvw_tlb@TCppShellUIHelper

@$xp$32Shdocvw_tlb@TCppInternetExplorer

@Actitlebar@TacTitleBarItem@DoMouseDown$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii

@Actitlebar@TacTitleBarItem@DoMouseUp$qqr27System@Uitypes@TMouseButton60System@%Set$t32System@Classes@System_Classes__1$iuc$0$iuc$9%ii

@Shdocvw_tlb@CLSID_CppShellWindows

@Shdocvw_tlb@CLSID_CppWebBrowser

@Shdocvw_tlb@CLSID_CppWebBrowser_V1

@Shdocvw_tlb@DIID_DShellWindowsEvents

@Shdocvw_tlb@DIID_DWebBrowserEvents

@Shdocvw_tlb@DIID_DWebBrowserEvents2

@Shdocvw_tlb@IID_IShellWindows

@Shdocvw_tlb@IID_IWebBrowser

@Shdocvw_tlb@IID_IWebBrowser2

@Shdocvw_tlb@IID_IWebBrowserApp

@Shdocvw_tlb@TCppInternetExplorer@

@Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp25System@Classes@TComponent

@Shdocvw_tlb@TCppInternetExplorer@BeforeDestruction$qqrv

@Shdocvw_tlb@TCppInternetExplorer@ClientToWindow$qqrpit1

@Shdocvw_tlb@TCppInternetExplorer@Connect$qqrv

@Shdocvw_tlb@TCppInternetExplorer@ConnectTo$qqr69%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$gIID_IWebBrowser2$%

@Shdocvw_tlb@TCppInternetExplorer@Disconnect$qqrv

@Shdocvw_tlb@TCppInternetExplorer@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3

@Shdocvw_tlb@TCppInternetExplorer@GetDefaultInterface$qv

@Shdocvw_tlb@TCppInternetExplorer@GetDunk$qqrv

@Shdocvw_tlb@TCppInternetExplorer@GetProperty$qqrpb

@Shdocvw_tlb@TCppInternetExplorer@GoBack$qqrv

@Shdocvw_tlb@TCppInternetExplorer@GoForward$qqrv

@Shdocvw_tlb@TCppInternetExplorer@GoHome$qqrv

@Shdocvw_tlb@TCppInternetExplorer@GoSearch$qqrv

@Shdocvw_tlb@TCppInternetExplorer@InitServerData$qqrv

@Shdocvw_tlb@TCppInternetExplorer@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant%

@Shdocvw_tlb@TCppInternetExplorer@Navigate$qqrpbp10tagVARIANTt2t2t2

@Shdocvw_tlb@TCppInternetExplorer@Navigate2$qqrp10tagVARIANTt1t1t1t1

@Shdocvw_tlb@TCppInternetExplorer@PutProperty$qqrpb10tagVARIANT

@Shdocvw_tlb@TCppInternetExplorer@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID

@Shdocvw_tlb@TCppInternetExplorer@Quit$qqrv

@Shdocvw_tlb@TCppInternetExplorer@Refresh$qqrv

@Shdocvw_tlb@TCppInternetExplorer@Refresh2$qqrp10tagVARIANT

@Shdocvw_tlb@TCppInternetExplorer@ShowBrowserBar$qqrp10tagVARIANTt1t1

@Shdocvw_tlb@TCppInternetExplorer@Stop$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_AddressBar$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Application$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Busy$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Container$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Document$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_FullName$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_FullScreen$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_HWND$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Height$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Left$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_LocationName$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_LocationURL$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_MenuBar$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Name$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Offline$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Parent$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Path$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_ReadyState$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_RegisterAsBrowser$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_RegisterAsDropTarget$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Resizable$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Silent$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_StatusBar$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_StatusText$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_TheaterMode$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_ToolBar$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Top$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_TopLevelContainer$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Type$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Visible$qqrv

@Shdocvw_tlb@TCppInternetExplorer@get_Width$qqrv

@Shdocvw_tlb@TCppInternetExplorer@set_AddressBar$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_FullScreen$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_Height$qqrl

@Shdocvw_tlb@TCppInternetExplorer@set_Left$qqrl

@Shdocvw_tlb@TCppInternetExplorer@set_MenuBar$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_Offline$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_RegisterAsBrowser$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_RegisterAsDropTarget$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_Resizable$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_Silent$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_StatusBar$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_StatusText$qqrpb

@Shdocvw_tlb@TCppInternetExplorer@set_TheaterMode$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_ToolBar$qqri

@Shdocvw_tlb@TCppInternetExplorer@set_Top$qqrl

@Shdocvw_tlb@TCppInternetExplorer@set_Visible$qqrs

@Shdocvw_tlb@TCppInternetExplorer@set_Width$qqrl

@Shdocvw_tlb@TCppShellUIHelper@

@Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp25System@Classes@TComponent

@Shdocvw_tlb@TCppShellUIHelper@AddChannel$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@AddDesktopComponent$qqrpbt1p10tagVARIANTt3t3t3

@Shdocvw_tlb@TCppShellUIHelper@AddFavorite$qqrpbp10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@AddSearchProvider$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@AddService$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@AddToFavoritesBar$qqrpbt1p10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@AutoCompleteAttach$qqrp10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@AutoCompleteSaveForm$qqrp10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@AutoScan$qqrpbt1p10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@BeforeDestruction$qqrv

@Shdocvw_tlb@TCppShellUIHelper@BrandImageUri$qqrv

@Shdocvw_tlb@TCppShellUIHelper@BuildNewTabPage$qqrv

@Shdocvw_tlb@TCppShellUIHelper@Connect$qqrv

@Shdocvw_tlb@TCppShellUIHelper@ConnectTo$qqr75%TComInterface$27Shdocvw_tlb@IShellUIHelper3px5_GUID$gIID_IShellUIHelper3$%

@Shdocvw_tlb@TCppShellUIHelper@ContentDiscoveryReset$qqrv

@Shdocvw_tlb@TCppShellUIHelper@CustomizeClearType$qqrs

@Shdocvw_tlb@TCppShellUIHelper@CustomizeSettings$qqrsspb

@Shdocvw_tlb@TCppShellUIHelper@DefaultSearchProvider$qqrv

@Shdocvw_tlb@TCppShellUIHelper@DiagnoseConnection$qqrv

@Shdocvw_tlb@TCppShellUIHelper@Disconnect$qqrv

@Shdocvw_tlb@TCppShellUIHelper@EnableSuggestedSites$qqrs

@Shdocvw_tlb@TCppShellUIHelper@GetDefaultInterface$qv

@Shdocvw_tlb@TCppShellUIHelper@GetDunk$qqrv

@Shdocvw_tlb@TCppShellUIHelper@ImportExportFavorites$qqrspb

@Shdocvw_tlb@TCppShellUIHelper@InPrivateFilteringEnabled$qqrv

@Shdocvw_tlb@TCppShellUIHelper@InitServerData$qqrv

@Shdocvw_tlb@TCppShellUIHelper@IsSearchMigrated$qqrv

@Shdocvw_tlb@TCppShellUIHelper@IsSearchProviderInstalled$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@IsServiceInstalled$qqrpbt1

@Shdocvw_tlb@TCppShellUIHelper@IsSubscribed$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@IsSuggestedSitesEnabled$qqrv

@Shdocvw_tlb@TCppShellUIHelper@NavigateAndFind$qqrpbt1p10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@NavigateToSuggestedSites$qqrpb

@Shdocvw_tlb@TCppShellUIHelper@PhishingEnabled$qqrv

@Shdocvw_tlb@TCppShellUIHelper@RefreshOfflineDesktop$qqrv

@Shdocvw_tlb@TCppShellUIHelper@ResetFirstBootMode$qqrv

@Shdocvw_tlb@TCppShellUIHelper@ResetSafeMode$qqrv

@Shdocvw_tlb@TCppShellUIHelper@RunOnceHasShown$qqrv

@Shdocvw_tlb@TCppShellUIHelper@RunOnceRequiredSettingsComplete$qqrs

@Shdocvw_tlb@TCppShellUIHelper@RunOnceShown$qqrv

@Shdocvw_tlb@TCppShellUIHelper@SearchGuideUrl$qqrv

@Shdocvw_tlb@TCppShellUIHelper@SetActivitiesVisible$qqrs

@Shdocvw_tlb@TCppShellUIHelper@SetRecentlyClosedVisible$qqrs

@Shdocvw_tlb@TCppShellUIHelper@ShowBrowserUI$qqrpbp10tagVARIANT

@Shdocvw_tlb@TCppShellUIHelper@ShowInPrivateHelp$qqrv

@Shdocvw_tlb@TCppShellUIHelper@ShowTabsHelp$qqrv

@Shdocvw_tlb@TCppShellUIHelper@SkipRunOnce$qqrv

@Shdocvw_tlb@TCppShellUIHelper@SkipTabsWelcome$qqrv

@Shdocvw_tlb@TCppShellUIHelper@SqmEnabled$qqrv

@Shdocvw_tlb@TCppShellWindows@

@Shdocvw_tlb@TCppShellWindows@$bctr$qqrp25System@Classes@TComponent

@Shdocvw_tlb@TCppShellWindows@BeforeDestruction$qqrv

@Shdocvw_tlb@TCppShellWindows@Connect$qqrv

@Shdocvw_tlb@TCppShellWindows@ConnectTo$qqr71%TComInterface$25Shdocvw_tlb@IShellWindowspx5_GUID$gIID_IShellWindows$%

@Shdocvw_tlb@TCppShellWindows@Disconnect$qqrv

@Shdocvw_tlb@TCppShellWindows@FindWindowSW$qqrp10tagVARIANTt1ipli

@Shdocvw_tlb@TCppShellWindows@GetDefaultInterface$qv

@Shdocvw_tlb@TCppShellWindows@GetDunk$qqrv

@Shdocvw_tlb@TCppShellWindows@InitServerData$qqrv

@Shdocvw_tlb@TCppShellWindows@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant%

@Shdocvw_tlb@TCppShellWindows@Item$qqr10tagVARIANT

@Shdocvw_tlb@TCppShellWindows@OnActivated$qqrls

@Shdocvw_tlb@TCppShellWindows@OnCreated$qqrlp8IUnknown

@Shdocvw_tlb@TCppShellWindows@OnNavigate$qqrlp10tagVARIANT

@Shdocvw_tlb@TCppShellWindows@ProcessAttachDetach$qqrs

@Shdocvw_tlb@TCppShellWindows@Register$qqrp9IDispatchlipl

@Shdocvw_tlb@TCppShellWindows@RegisterPending$qqrlp10tagVARIANTt2ipl

@Shdocvw_tlb@TCppShellWindows@Revoke$qqrl

@Shdocvw_tlb@TCppShellWindows@_NewEnum$qqrv

@Shdocvw_tlb@TCppShellWindows@get_Count$qqrv

@Shdocvw_tlb@TCppWebBrowser@

@Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp25System@Classes@TComponent

@Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp6HWND__

@Shdocvw_tlb@TCppWebBrowser@CControlData

@Shdocvw_tlb@TCppWebBrowser@ClientToWindow$qqrpit1

@Shdocvw_tlb@TCppWebBrowser@CreateControl$qqrv

@Shdocvw_tlb@TCppWebBrowser@DEF_CTL_INTF

@Shdocvw_tlb@TCppWebBrowser@EventDispIDs

@Shdocvw_tlb@TCppWebBrowser@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3

@Shdocvw_tlb@TCppWebBrowser@GetDefaultInterface$qqrv

@Shdocvw_tlb@TCppWebBrowser@GetProperty$qqrpb

@Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri

@Shdocvw_tlb@TCppWebBrowser@GoBack$qqrv

@Shdocvw_tlb@TCppWebBrowser@GoForward$qqrv

@Shdocvw_tlb@TCppWebBrowser@GoHome$qqrv

@Shdocvw_tlb@TCppWebBrowser@GoSearch$qqrv

@Shdocvw_tlb@TCppWebBrowser@InitControlData$qqrv

@Shdocvw_tlb@TCppWebBrowser@Navigate$qqrpbp10tagVARIANTt2t2t2

@Shdocvw_tlb@TCppWebBrowser@Navigate2$qqrp10tagVARIANTt1t1t1t1

@Shdocvw_tlb@TCppWebBrowser@OptParam

@Shdocvw_tlb@TCppWebBrowser@PutProperty$qqrpb10tagVARIANT

@Shdocvw_tlb@TCppWebBrowser@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID

@Shdocvw_tlb@TCppWebBrowser@Quit$qqrv

@Shdocvw_tlb@TCppWebBrowser@Refresh$qqrv

@Shdocvw_tlb@TCppWebBrowser@Refresh2$qqrp10tagVARIANT

@Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio

@Shdocvw_tlb@TCppWebBrowser@ShowBrowserBar$qqrp10tagVARIANTt1t1

@Shdocvw_tlb@TCppWebBrowser@Stop$qqrv

@Shdocvw_tlb@TCppWebBrowser@get_Application$qqrv

@Shdocvw_tlb@TCppWebBrowser@get_Container$qqrv

@Shdocvw_tlb@TCppWebBrowser@get_Document$qqrv

@Shdocvw_tlb@TCppWebBrowser@get_HWND$qqrv

@Shdocvw_tlb@TCppWebBrowser@get_Parent$qqrv

@Shdocvw_tlb@TInternetExplorerMedium@ConnectTo$qqr69%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$gIID_IWebBrowser2$%

@Shdocvw_tlb@TInternetExplorerMedium@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3

@Shdocvw_tlb@TInternetExplorerMedium@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant%

@Shdocvw_tlb@TInternetExplorerMedium@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID

@Shdocvw_tlb@TInternetExplorerMedium@get_LocationURL$qqrv

@Shdocvw_tlb@TShellFavoritesNameSpace@Export$qqrv

@Shdocvw_tlb@TShellFavoritesNameSpace@Import$qqrv

@Shdocvw_tlb@TShellFavoritesNameSpace@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant%

3c%6U

[.UUU

.PX3f

/((($666>!!

?<<<2&&&

~%Flc_

333333333333333333

33333833

3333333333333338

:*"*"$3338

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

Picture.Data

"Created with Chimply.com"

CppWebBrowser1NavigateComplete2

CppWebBrowser1DocumentComplete

ProxyParams.BasicAuthentication

ProxyParams.ProxyPort

Request.ContentLength

Request.ContentRangeEnd

Request.ContentRangeStart

"Request.ContentRangeInstanceLength

Request.Accept

Request.BasicAuthentication

Request.UserAgent

&Mozilla/3.0 (compatible; Indy Library)

Request.Ranges.Units

Request.Ranges

OnKeyPress

FormKeyPress

SkinData.SkinSection

Constraints.MaxHeight

Constraints.MaxWidth

Constraints.MinHeight

Constraints.MinWidth

Glyph.Data

Brush.Color

Pen.Style

BoundLabel.Active

BoundLabel.Caption

BoundLabel.Indent

BoundLabel.Layout

BoundLabel.MaxWidth

BoundLabel.UseSkinColor

GlyphMode.Grayed

Colors.Strings

sEditHexKeyPress

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel

7}7

= =$=(=,=0=

>$>:>>>`>

? >4>8>@>

>(?2?6?|?

8 8$8(8,80848

1)2]2"0]1

7 7$7(7,7074787<7

>,7074787

5 5$5,5(5054585<5@5

? ?$?(?,?0?4?

3 3,34383@3

7 7$7(7,707

3 3$3(3,3034383

:$:6:::>:

1|1-2

6 6$6(6,6064686

9 9$9(9,9094989

6$7(7,7074787

> >$>(>,>0>4>

>,8084888\8

7 7,74787@7

=%>/>3>|>

,?0?4?8?

2 2$2(2,2024282<2@2

2-2

;)<)1`425

6o6Z6

< <$<(<,<0<4<8<

6 6$6(6,6064686<6@6

4 4$4(454|4

5 5$5(5,5054585<5@5

> >$>(>,>0>4>8><>@>

9|8!9/948

3 3$3(3,30343

6#6'6 6/63676;6?6

=$=,=0=8=

>$>(>,>0>

8 8$8(8,8

0?0\0`0|0

4 4$4(4,40444

2?3f3

4 4(4044484

;";*;2;:;

> >$>(>,>0>

7-8}6

8%9[9_949

:!;,;7;\;

= =4=8=@=

8(8<8
0v0

8 8$8(8,8084888<8@8

>‡8F887

6%7u5

5 5$5(5,5054585<5

9 9$9(9,909\9

8@9`9*9}9

1@2`2*2}2

5:6[6,737

6 6$616|6

; ;$;(;,;

7%7U6

0(00040<0

5%5x5

? ?$?(?,?0?4?8?<?@?

< <$<(<,<

1 14181@1

1 1$1(151

5(50545<5

6$6,60686

>,?0?4?8?<?@?

6 7(70787

; ;0;@;2<:<

6 6$6(6,6064686<630

=#>7>'?;?

4!4,474@4

7|7>0F0L0n0

2 2$2(2,202

1 1$1(1,1014181\1

: :$:(:,:0:4:8:<:@:

4%5s5

1%1u1N1

9!9%9)9-9195999=9

2 3$3(3,3034383<3

7"7&7*7.72767:7>7

4)5-5155595=5

6"6&6*6.626

4#4'4 4/4

9#9'9 9/93979;9?9

< <$<(<,<0<4<8<<<

8 9$9(9,9094989

: :$:(:,:0:4:8:<:@:^:

3#3'3 3/3

7$7.72767|7

7 7$7(7,7074787

<(<,<0<4<8<

3 3$3(3,30343<3@3

> >$>(>,>

; ;$;(;,;0;4;8;<;@;

5!5%5)5-51555

5 5$5(5,50545

3(30343<3

272?2_2|2

<(<,<0<4<

0 0$0,0004080<0

1 1$1(1,1014181

?$;(;,;0;4;

8&8-878\8`8~8

>.>6>\>`>|>

;,;0;4;8;

2$2(2,202

:':/:7:?:

2 2$2(2,20242

6 6$6(6,606

?!2<2$3@3

4A4<4\4

: :$:7:?:

8"858=8[8

2"2)20272

9(90949<9

7 7'717{7

5%6S6t6

0&1.14191

708?8%3}3

1 1$1(1,1014181<1{1

; ;$;(;,;0;4;8;

? ?$?(?,?

7/73777;7?7

7#7'7 7/7

4_5

>0?4?8?<?@?

8 8$8(8,808

00N0V0^0f0n0v0

4 4$4(4,404

2%2X1

? ?$?(?,?0?4?8?<?

8,8084888

3 4$4(4,4

6"6&6*6.6

8 8$8(8,8084888<8

?"?&?@==?

= =<=@=]=

0,0004080

151/2k2

= =(=,=4=

3?3_3g3

5 5$5(5,505=5

7074787<7

4"0&0;0\0

4,5054585

> ?/?3?7?;???

6&7.74797^7

=&=-=3===_=~=

3?3\375^5

3%4s6

7 74787@7

? ?=?0?(?$?,?

: :$:(:9:

6 6$6(6,60646

5$5(5,505

= =$=(=,=0=4=8=

9&9.969>9

8$8(8,8084888<8

5.656=6]6

-0~0<1<2,464

;!<7< >%>

7"8)818;8

4 43474|4

>,>$>1>[>

8#8'8 8/8

<,<9<!=`=

6'6 6/63676

4 4$4(4,4

6 6$6(6,6

4 4$4(4,4044484<4

:3:7:\:`:}:

>,?6?`?{?

0%1x1

7'8|8(2,2024282

: :(:,:0:4:8:<:@:

6 7$7(7,70747

9 9$9(9,9094989<9@9

2(20282<2@2

6 7q7d7

>7?$?_?|?

7 7$7(7,7074787<7@7

> >(>,>0>

3 3?3^3}3

7$7(7,7[7

7,8084888<8@8

3 3$3(3,303

:&:.:?:{:

0(1-0}061D1X1

1/272?2\2

:&;.;6;>;_;

7Œ8

2"2&2:2`2

; ;$;(;,;0;4;\;|;

6 6$6(6,6064686`6

2-2:2(0`0

8#81868[8

9"9(9.949

4 4$4(4,4044484<4@4

? ?$?(?,?0?

9 9$9(9,909

1 1$1(1,1014181<1

< <$<(<,<0<4<8<<<@<

; =$=(=,=0=

\\?\UNC\

(%s @ %p)

(class '%s' @ %p)

operator

Invalid ZStream operation!

uxtheme.dll

comctl32.dll

TaskDialogIndirect

%s[%d]

%s_%d

.Owner

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

%s%s%.2d:%.2d

%s%s%.2d

%s, ClassID: %s

ole32.dll

kernel32.dll

oleaut32.dll

%s-%s

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

crSQLWait

%s%0.8x

claBurlywood

Windows

olepro32.dll

%d - %s

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

user32.dll

{43826D1E-E718-42EE-BC55-A1E261C37BFE}

%s%s%s%s%s%s%s%s%s%s

%s (%s)

imm32.dll

RICHED20.DLL

msctls_hotkey32

Items.ItemData

Cannot load image. %s not supported for %s files.

Cannot load image. Palette in %s file is invalid.

Cannot load image. Invalid or unexpected %s image format.

Cannot load image. CRC error found in %s file.

Cannot load image. Extra compressed data found in %s file.

Cannot load image. Compression error found in %s file.

Invalid color format in %s file.

Conversion between indexed and non-indexed pixel formats is not supported.

Portable network graphics (AlphaControls)

Options.dat

msimg32.dll

c:\Skins

extracted.asz

WEBBUTTON

1.tmp

.JPEG

2.tmp

" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.

This version of the skin have not complete support by used AlphaControls package release.

Webdings

acMDIIcons

Portable Network Graphics

Wship6.dll

Fwpuclnt.dll

WS2_32.DLL

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

MSWSOCK.DLL

WSARecvMsg

WSASendMsg

Kernel32.dll

127.0.0.1

IdnDL.dll

Normaliz.dll

%s, %.2d %s %.4d %s %s

%s, %.2d%s%s%s%.4d %s %s

10.5.9.0

*<>#%"{}|\^[]`

*<>#%"{}|\^[]`

HTTPS

libeay32.dll

ssleay32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

X509_STORE_add_cert

X509_STORE_CTX_get_current_cert

i2d_DSAPrivateKey

d2i_DSAPrivateKey

d2i_PrivateKey

d2i_PrivateKey_bio

DES_set_key

_ossl_old_des_set_key

RSA_generate_key

RSA_check_key

RSA_generate_key_ex

i2d_PrivateKey_bio

i2d_RSAPrivateKey

d2i_RSAPrivateKey

i2d_RSAPublicKey

d2i_RSAPublicKey

i2d_PrivateKey

i2d_NETSCAPE_CERT_SEQUENCE

X509_get_default_cert_file

X509_get_default_cert_file_env

X509_set_pubkey

X509_REQ_set_pubkey

PEM_read_bio_RSAPrivateKey

PEM_read_bio_RSAPublicKey

PEM_read_bio_DSAPrivateKey

PEM_read_bio_PrivateKey

PEM_read_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_RSAPublicKey

PEM_write_bio_DSAPrivateKey

PEM_write_bio_PrivateKey

PEM_write_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_PKCS8PrivateKey

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_assign

Open SSL Support DLL Delphi and C  Builder interface

hXXp://VVV.indyproject.org/

1993 - 2012

Content-Disposition: form-data; name="%s"

; filename="%s"

Content-Type: %s

; charset="%s"

Content-Transfer-Encoding: %s

WINDOWS

X-HTTP-Method-Override

Mozilla/3.0 (compatible; Indy Library)

%d-%d

application/x-www-form-urlencoded

https

HTTP/1.0 200 OK

HTTP/

!"#$%&'()* ,-./;<=>?@[\]^_`{|}~

.nml=animation/narrative

.aac=audio/mp4

.aif=audio/x-aiff

.aifc=audio/x-aiff

.aiff=audio/x-aiff

.au=audio/basic

.gsm=audio/x-gsm

.kar=audio/midi

.m3u=audio/mpegurl

.mid=audio/midi

.midi=audio/midi

.mpega=audio/x-mpg

.mp2=audio/x-mpg

.mp3=audio/x-mpg

.mpga=audio/x-mpg

.m3u=audio/x-mpegurl

.pls=audio/x-scpls

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.ram=audio/x-pn-realaudio

.rm=audio/x-pn-realaudio

.sd2=audio/x-sd2

.sid=audio/prs.sid

.snd=audio/basic

.wav=audio/x-wav

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.art=image/x-jg

.bmp=image/bmp

.cdr=image/x-coreldraw

.cdt=image/x-coreldrawtemplate

.cpt=image/x-corelphotopaint

.djv=image/vnd.djvu

.djvu=image/vnd.djvu

.gif=image/gif

.ief=image/ief

.ico=image/x-icon

.jng=image/x-jng

.jpg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.pat=image/x-coreldrawpattern

.pcx=image/pcx

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.pict=image/x-pict

.png=image/x-png

.pnm=image/x-portable-anymap

.pntg=image/x-macpaint

.ppm=image/x-portable-pixmap

.psd=image/x-psd

.qtif=image/x-quicktime

.ras=image/x-cmu-raster

.rf=image/vnd.rn-realflash

.rgb=image/x-rgb

.rp=image/vnd.rn-realpix

.sgi=image/x-sgi

.svg=image/svg-xml

.svgz=image/svg-xml

.targa=image/x-targa

.tif=image/x-tiff

.wbmp=image/vnd.wap.wbmp

.webp=image/webp

.xbm=image/xbm

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xml=text/xml

.uls=text/iuls

.txt=text/plain

.rtx=text/richtext

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htc=text/x-component

.vcf=text/x-vcard

.asf=video/x-ms-asf

.asx=video/x-ms-asf

.avi=video/x-msvideo

.dl=video/dl

.dv=video/dv

.flc=video/flc

.fli=video/fli

.gl=video/gl

.lsf=video/x-la-asf

.lsx=video/x-la-asf

.mng=video/x-mng

.mp2=video/mpeg

.mp3=video/mpeg

.mp4=video/mpeg

.mpeg=video/x-mpeg2a

.mpa=video/mpeg

.mpe=video/mpeg

.mpg=video/mpeg

.ogv=video/ogg

.moov=video/quicktime

.mov=video/quicktime

.mxu=video/vnd.mpegurl

.qt=video/quicktime

.qtc=video/x-qtc

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.webm=video/webm

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.aab=application/x-authorware-bin

.aam=application/x-authorware-map

.aas=application/x-authorware-seg

.abw=application/x-abiword

.ace=application/x-ace-compressed

.ai=application/postscript

.alz=application/x-alz-compressed

.ani=application/x-navi-animation

.arj=application/x-arj

.asf=application/vnd.ms-asf

.bat=application/x-msdos-program

.bcpio=application/x-bcpio

.boz=application/x-bzip2

.bz=application/x-bzip

.bz2=application/x-bzip2

.cab=application/vnd.ms-cab-compressed

.cat=application/vnd.ms-pki.seccat

.ccn=application/x-cnc

.cco=application/x-cocoa

.cdf=application/x-cdf

.cer=application/x-x509-ca-cert

.chm=application/vnd.ms-htmlhelp

.chrt=application/vnd.kde.kchart

.cil=application/vnd.ms-artgalry

.class=application/java-vm

.com=application/x-msdos-program

.clp=application/x-msclip

.cpio=application/x-cpio

.cpt=application/mac-compactpro

.cqk=application/x-calquick

.crd=application/x-mscardfile

.crl=application/pkix-crl

.csh=application/x-csh

.dar=application/x-dar

.dbf=application/x-dbase

.dcr=application/x-director

.deb=application/x-debian-package

.dir=application/x-director

.dist=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.dll=application/x-msdos-program

.dmg=application/x-apple-diskimage

.doc=application/msword

.dot=application/msword

.dvi=application/x-dvi

.dxr=application/x-director

.ebk=application/x-expandedbook

.eps=application/postscript

.evy=application/envoy

.exe=application/x-msdos-program

.fdf=application/vnd.fdf

.fif=application/fractals

.flm=application/vnd.kde.kivio

.fml=application/x-file-mirror-list

.gzip=application/x-gzip

.gnumeric=application/x-gnumeric

.gtar=application/x-gtar

.gz=application/x-gzip

.hdf=application/x-hdf

.hlp=application/winhlp

.hpf=application/x-icq-hpf

.hqx=application/mac-binhex40

.hta=application/hta

.ims=application/vnd.ms-ims

.ins=application/x-internet-signup

.iii=application/x-iphone

.iso=application/x-iso9660-image

.jar=application/java-archive

.karbon=application/vnd.kde.karbon

.kfo=application/vnd.kde.kformula

.kon=application/vnd.kde.kontour

.kpr=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kwd=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.latex=application/x-latex

.lha=application/x-lzh

.lcc=application/fastman

.lrm=application/vnd.ms-lrm

.lz=application/x-lzip

.lzh=application/x-lzh

.lzma=application/x-lzma

.lzo=application/x-lzop

.lzx=application/x-lzx

.mpp=application/vnd.ms-project

.mvb=application/x-msmediaview

.man=application/x-troff-man

.mdb=application/x-msaccess

.me=application/x-troff-me

.ms=application/x-troff-ms

.msi=application/x-msi

.mpkg=vnd.apple.installer xml

.mny=application/x-msmoney

.nix=application/x-mix-transfer

.oda=application/oda

.odb=application/vnd.oasis.opendocument.database

.odc=application/vnd.oasis.opendocument.chart

.odf=application/vnd.oasis.opendocument.formula

.odg=application/vnd.oasis.opendocument.graphics

.odi=application/vnd.oasis.opendocument.image

.odm=application/vnd.oasis.opendocument.text-master

.odp=application/vnd.oasis.opendocument.presentation

.ods=application/vnd.oasis.opendocument.spreadsheet

.ogg=application/ogg

.odt=application/vnd.oasis.opendocument.text

.otg=application/vnd.oasis.opendocument.graphics-template

.oth=application/vnd.oasis.opendocument.text-web

.otp=application/vnd.oasis.opendocument.presentation-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ott=application/vnd.oasis.opendocument.text-template

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.package=application/vnd.autopackage

.pfr=application/font-tdpfr

.pkg=vnd.apple.installer xml

.pdf=application/pdf

.pko=application/vnd.ms-pki.pko

.pl=application/x-perl

.pnq=application/x-icq-pnq

.pot=application/mspowerpoint

.pps=application/mspowerpoint

.ppt=application/mspowerpoint

.ppz=application/mspowerpoint

.ps=application/postscript

.pub=application/x-mspublisher

.qpw=application/x-quattropro

.qtl=application/x-quicktimeplayer

.rar=application/rar

.rdf=application/rdf xml

.rjs=application/vnd.rn-realsystem-rjs

.rm=application/vnd.rn-realmedia

.rmf=application/vnd.rmf

.rmp=application/vnd.rn-rn_music_package

.rmx=application/vnd.rn-realsystem-rmx

.rnx=application/vnd.rn-realplayer

.rpm=application/x-redhat-package-manager

.rsml=application/vnd.rn-rsml

.rtsp=application/x-rtsp

.rss=application/rss xml

.scm=application/x-icq-scm

.ser=application/java-serialized-object

.scd=application/x-msschedule

.sda=application/vnd.stardivision.draw

.sdc=application/vnd.stardivision.calc

.sdd=application/vnd.stardivision.impress

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.sh=application/x-sh

.shar=application/x-shar

.shw=application/presentations

.sit=application/x-stuffit

.sitx=application/x-stuffitx

.skd=application/x-koan

.skm=application/x-koan

.skp=application/x-koan

.skt=application/x-koan

.smf=application/vnd.stardivision.math

.smi=application/smil

.smil=application/smil

.spl=application/futuresplash

.ssm=application/streamingmedia

.sst=application/vnd.ms-pki.certstore

.stc=application/vnd.sun.xml.calc.template

.std=application/vnd.sun.xml.draw.template

.sti=application/vnd.sun.xml.impress.template

.stl=application/vnd.ms-pki.stl

.stw=application/vnd.sun.xml.writer.template

.svi=application/softvision

.sv4cpio=application/x-sv4cpio

.sv4crc=application/x-sv4crc

.swf=application/x-shockwave-flash

.swf1=application/x-shockwave-flash

.sxc=application/vnd.sun.xml.calc

.sxi=application/vnd.sun.xml.impress

.sxm=application/vnd.sun.xml.math

.sxw=application/vnd.sun.xml.writer

.sxg=application/vnd.sun.xml.writer.global

.tar=application/x-tar

.tcl=application/x-tcl

.tex=application/x-tex

.texi=application/x-texinfo

.texinfo=application/x-texinfo

.tbz=application/x-bzip-compressed-tar

.tbz2=application/x-bzip-compressed-tar

.tgz=application/x-compressed-tar

.tlz=application/x-lzma-compressed-tar

.tr=application/x-troff

.trm=application/x-msterminal

.troff=application/x-troff

.tsp=application/dsptype

.torrent=application/x-bittorrent

.ttz=application/t-time

.txz=application/x-xz-compressed-tar

.udeb=application/x-debian-package

.uin=application/x-icq

.urls=application/x-url-list

.ustar=application/x-ustar

.vcd=application/x-cdlink

.vor=application/vnd.stardivision.writer

.vsl=application/x-cnet-vsl

.wcm=application/vnd.ms-works

.wb1=application/x-quattropro

.wb2=application/x-quattropro

.wb3=application/x-quattropro

.wdb=application/vnd.ms-works

.wks=application/vnd.ms-works

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wp5=application/wordperfect5.1

.wpd=application/wordperfect

.wpl=application/vnd.ms-wpl

.wps=application/vnd.ms-works

.wri=application/x-mswrite

.xfdf=application/vnd.adobe.xfdf

.xls=application/x-msexcel

.xlb=application/x-msexcel

.xpi=application/x-xpinstall

.xps=application/vnd.ms-xpsdocument

.xsd=application/vnd.sun.xml.draw

.xul=application/vnd.mozilla.xul xml

.zoo=application/x-zoo

.zip=application/x-zip-compressed

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.asm=text/x-asm

.pas=text/x-pascal

.cs=text/x-csharp

.cpp=text/x-c  src

.cxx=text/x-c  src

.cc=text/x-c  src

.hpp=text/x-c  hdr

.hxx=text/x-c  hdr

.hh=text/x-c  hdr

.java=text/x-java

.css=text/css

.js=text/javascript

.htm=text/html

.html=text/html

.xhtml=application/xhtml xml

.xht=application/xhtml xml

.ls=text/javascript

.mocha=text/javascript

.shtml=server-parsed-html

.sgm=text/sgml

.sgml=text/sgml

HTTP-EQUIV

()<>@,;:\"./

()<>@,;:\"/[]?=

()<>@,;:\"/[]?={}

HTTPONLY=

HTTPONLY

ISO_646.irv:1991

ISO_646.basic:1983

ISO_646.irv:1983

csISO16Portuguese

csISO84Portuguese2

csShiftJIS

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csMicrosoftPublishing

Windows-31J

csWindows31J

PTCP154

csPTCP154

secur32.dll

security.dll

0.0.0.1

0.0.0.0

255.255.255.255

hXXp://VVV.expertgh.com/fb.html

hhXXp://VVV.brasilfc.com/

hhXXp://VVV.expertgh.com/pt-br/

0123456789

Add to custom colors set8Listbox (%s) style must be virtual in order to set Count

Error setting %s.Count

$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Reply Code is not valid: %s

Reply Code already exists: %s

Object type not supported.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.

Command not supported.

Address type not supported."%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

Handshake DonepUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

Unsupported transfer type. You can assign only an empty string or one of the following values: 7bit, 8bit, binary, quoted-printable, base64.OUnsupported encoding. You can assign only one of the following values: Q, B, 8.

Unsupported operation./Could not encode header data using charset "%s")UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

SSL status: "%s"

%s Alert

%s Read Alert

%s Write Alert

Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported$Error accepting connection with SSL.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.

An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.

The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.

An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.

The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.

The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.IA signature operation must be performed before the user can authenticate.AOne or more of the parameters passed to the function was invalid.DClient policy does not allow credential delegation to target server.bClient policy does not allow credential delegation to target server with NLTM only authentication.1The recipient rejected the renegotiation request.-The required security context does not exist.`The PKU2U protocol encountered an error while attempting to utilize the associated certificates.:The identity of the server computer could not be verified.

Unknown error#SSPI %s returns error #%d(0x%x): %s

!A system shutdown is in progress.'An invalid request was sent to the KDC.DThe KDC was unable to generate a referral for the service requested.:The encryption type requested is not supported by the KDC.QAn unsupported preauthentication mechanism was presented to the Kerberos package.

The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.7Client's supplied SSPI channel bindings were incorrect.9The received certificate was mapped to multiple accounts.

SEC_E_NO_KERB_KEY5The certificate is not valid for the requested usage.

The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.

An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.

The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.lThe smartcard certificate used for authentication was not trusted. Please contact your system administrator.hThe smartcard certificate used for authentication has expired. Please contact your system administrator.

*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.

The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).dA security context was deleted before the context was completed. This is considered a logon failure.mThe client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.aUnable to accomplish the requested task because the local machine does not have any IP addresses.bThe supplied credential handle does not match the credential associated with the security context.]The crypto system or checksum function is invalid because a required function is unavailable.9The number of maximum ticket referrals has been exceeded.KThe local machine must be a Kerberos KDC (domain controller) and it is not.qThe other end of the security negotiation is requires strong crypto but it is not supported on the local machine.5The KDC reply contained more than one principal name.OExpected to find PA data for a hint of what etype to use, but it was not found.

The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.-Smartcard logon is required and was not used.

tThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.

The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.

0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client

The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be called

End of stream: Class %s at %d

IOHandler value is not valid'Algorithm %s not permitted in FIPS mode

Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.

The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Connecting to %s.

Socket Error # %d

Invalid stream operation

Invalid extension introducerúiled to allocate memory for GIF DIB

Invalid Image trailerAInternal error: Extension Instance does not match Extension Label,Unsupported Application Extension block size

Unknown GIF block type'Object type not supported for operation

Unsupported PixelFormat

]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.

Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.

JPEG Image FilejThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.

Description: BThe "Portable Network Graphics" image contains an invalid palette.

The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.

This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.

There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.

%s is already associated with %sE%d is an invalid PageIndex value. PageIndex must be between 0 and %d=This control requires version 4.70 or greater of COMCTL32.DLL

Date exceeds maximum of %s

Date is less than minimum of %s4You must be in ShowCheckbox mode to set to this date#Failed to set calendar date or timeúiled to set maximum selection range$Failed to set calendar min/max rangeúiled to set calendar selected range

JPEG error #%d

NUnable to retrieve a pointer to a running object registered with OLE for %s/%s

Failed to clear tab control Failed to delete tab at index %d"Failed to retrieve tab at index %d Failed to get object at index %d"Failed to set tab "%s" at index %d Failed to set object at index %d<MultiLine must be True when TabPosition is tpLeft or tpRight

Invalid item level assignment Invalid level (%d) for item "%s"

VCL Style File)Class '%s' is already registered for '%s'%Class '%s' is not registered for '%s'

%s parameter cannot be nil0A StyleHook class has not been registered for %s#Feature not supported by this style

Style '%s' is not registered"Cannot unregister the system style

Style not registered"'%s' is not a valid property value

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design mode

UTF-7Ênnot remove shell notification icon"PageControl must first be assigned"%s requires Windows Vista or later

Button%d

RadioButton%d

Unable to load style '%s'

Unable to load styles: %s

Style '%s' already registered#Style class '%s' already registered

Style '%s' not found

Style class '%s' not found

LError loading dock zone from the stream. Expecting version %d, but found %d.,Multiselect mode must be on for this feature7Length of value array must be >= length of prompt array

&Password

Login

Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count#No OnGetItem event handler assigned

Value must be between %d and %d

Invalid clipboard format Clipboard does not support Icons

Cannot open clipboard: %s

Text exceeds memo capacity Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

Grid too large for operation Too many rows or columns deleted

Invalid input value7Invalid input value. Use escape key to abandon changes

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active0Can only modify an image if it contains a bitmap*A control cannot have itself as its parent

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

%s property out of range

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Unsupported clipboard format

Canvas does not allow drawing#Text format flag '%s' not supported

Invalid destination array"Character index out of bounds (%d)

Start index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

External exception %x

Interface not supported

Object lock not owned(Monitor support function not initialized

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

'%s' is not a valid GUID value

I/O error %d

Integer overflow Invalid floating point operation

Windows 2000

Windows XP

Windows Server 2003

Windows Server 2003 R2

Windows Server 2012

Windows 8

Observer is not supportedLCannot have multiple single cast observers added to the observers collection4The object does not implement the observer interfaceGNo single cast observer with ID %d was added to the observer collectionFNo multi cast observer with ID %d was added to the observer collection

<unknown>('%s' is not a valid floating point value '%d.%d' is not a valid timestamp

Duplicates not allowed5Insufficient RTTI available to support this operation

Parameter count mismatch<Type '%s' is not declared in the interface section of a unit7VAR and OUT arguments must match parameter type exactly,Specified Login Credential Service not found"%s (Version %d.%d, Build %d, %5:s):%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

''%s'' is not a valid date#''%s'' is not a valid date and time#''%s'' is not a valid integer value

''%s'' is not a valid time

No help found for context %d

No help found for %s

The specified path is too long The specified path was not found The path format is not supported The specified file was not foundWThe given "%s" local time is invalid (situated within the missing period prior to DST).$No help viewer that supports filters8String index out of range (%d). Must be >= %d and <= %d\Invalid UTF32 character value. Must be >= 0 and <= $10FFFF, excluding surrogate pair rangesrHigh surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properlyrLow surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly2Length of Strings and Objects arrays must be equal

Invalid Timeout value: %s

Timespan too longbThe duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue

$Operation not allowed on sorted list

%s expected$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread

Parameter %s cannot be nil'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

%s on line %d

Error reading %s%s%s: %s

Failed to create key %s

Failed to get data for '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented

Cannot create file "%s". %s

Cannot open file "%s". %s

Unable to write to %s

Invalid file name - %s

Invalid stream format$''%s'' is not a valid component name

Invalid property element: %s

Invalid data type for '%s'

Line too long List capacity out of bounds (%d)

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

Ancestor for '%s' not found

Cannot assign a %s to a %s

''%s'' expectedECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

1.0.0.0

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe:424
Ã¥Ë†Â°Ã¦Å¾ÂÃ¦â€¹â€°CÃ¦Å¾ÂE9AÃ¥Â¼â€”Ã¥Â¼â€”HÃ§Å“â€¹Ã¥Â¾â€žÃ¨Âµâ€ºKUÃ¦Â¸Â B2HCÃ¥Â¾â€žKOD9Ã¨Âµâ€ºÃ¥Â¼â€”Ã¥Â¼â€”Ã¨Âµâ€ºWÃ§Å“â€¹Ã¥Â°Â±Ã¨Âµâ€ºÃ§Å“â€¹.exe:372
%original file name%.exe:1508
netsh.exe:128
Delete the original Malware file.
Delete or disinfect the following files created/modified by the Malware:

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\www-embed-player-vflVo6OU8[2].css (11291 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Button[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\suarez-neymar-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fb[1].htm (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\_uninsep.bat (136 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\SwanseaCity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\www-embed-player-vflVo6OU8[1].css (9067 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\arsenal-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\arsenal-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\manchester_city-50x50[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[2].txt (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Block-v[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CAJH5YPG.htm (907 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\5YB-ifwqHP20Yn46l_BDhA[1].eot (7414 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Stokecity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CA6B47BW (277 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[1].txt (4092 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\rooney-640x360[1].jpg (6390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PES-2014[1].jpg (20596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\google-logo[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\jquery.fancybox-1.3.4.pack[1].js (3716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery-migrate.min[1].js (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\brasilfc[1].png (4456 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_nav_right[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\BlockHeader[1].png (1068 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sddefault[1].jpg (12707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancybox[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fancy_nav_right[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Sheet-c[1].png (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\jquery.evenHeights.1.0.0-min[1].js (932 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\www-embed-player[1].js (26031 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\fancy_close[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[2].js (3543 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\QueensParkRanges-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (22264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\OLffGBTaF0XFOW1gnuHF0WfQcKutQXcIrRfyR5jdjY8[1].eot (6354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\OLffGBTaF0XFOW1gnuHF0WfQcKutQXcIrRfyR5jdjY8[1].eot (8835 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\manchester_city-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\cristianoronaldo-realmadrid-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\rooney-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CAD007LX.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\s[1] (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CA6BO96B.htm (982 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\icon[1].png (344 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\www-embed-player[2].js (27969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\liverpool_fc-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery.fancybox-1.3.4[1].css (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\HullCity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\SwanseaCity-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancy_nav_left[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Sheet-s[1].png (641 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\pt-br[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\huntelaar-schalke-ap-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery[1].js (46059 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (342 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\chelsea-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\nav[1].png (1149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_loading[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style[1].css (38 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (864 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\huntelaar-schalke-ap-640x360[1].jpg (6039 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\RxZJdnzeo3R5zSexge8UUfY6323mHUZFJMgTvxaG2iE[1].eot (7426 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\soundData.sxx (186 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[1].txt (1221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\all[1].js (5128 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fancy_close[1] (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\OiNnAEwKzzJkQCr4qZmeq_esZW2xOQ-xsNqO47m55DA[2].eot (7061 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Stokecity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\item-center[1].png (297 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\burnleyfc-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\responsive[1].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\fancy_nav_left[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Everton-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[3].txt (2120 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\subitem-bg[1].png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\script[1].js (1413 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Header[1].jpg (5176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\RxZJdnzeo3R5zSexge8UUfY6323mHUZFJMgTvxaG2iE[1].eot (5768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\crossdomain[1].xml (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\adminbar[1].css (195 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Champions-League-Stadium-Hd-Desktop-Wallpaper[1].jpg (38387 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\pt[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\west_bromwich-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\item-right[1].png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Southampton-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[3].txt (861 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PostAuthorIcon[1].png (341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\uolsigainit.min[2].js (346 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\s[1].htm (143 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Footer[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\f[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Astonvilla-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\leicester-25x25[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\fancy_loading[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\html5[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\gen[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\item-left[1].png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\manchester_united-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\BlockHeaderIcon[1].png (635 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\uolsigainit.min[1].js (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\f[1].txt (784 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\videostats.sxx (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fontello[1].eot (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\html5shiv[1].js (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Newcastle-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youtube[2].txt (1348 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Astonvilla-50x50[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\suarez-neymar-640x360[1].jpg (7198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\5YB-ifwqHP20Yn46l_BDhA[1].eot (6508 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAUZCHQJ.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\fontello[1].eot (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Southampton-50x50[1].png (5 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolsigaretarget.min[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jquery.mousewheel-3.0.4.pack[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\CAEVM9AP.htm (1022 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\suarez-barcelona-640x360[1].jpg (4152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jquery.themeboy-rotator[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\f[2].txt (436 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Block-s[1].png (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CACHAV8T.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Sunderland-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\HullCity-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\blp[1].css (794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Sheet-v[1].png (814 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\crossdomain[1].xml (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fb[1].js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\Page-BgGlare[1].png (5513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\Sheet-h[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Crystal_Palace-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\cristianoronaldo-realmadrid-640x360[1].jpg (5734 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CA81EF4H.html (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\burnleyfc-50x50[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Everton-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Page-BgGradient[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\blp[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\17981107690478385190[1].gif (11872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zrt_lookup[1].html (491 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\spacer[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Westham-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\OiNnAEwKzzJkQCr4qZmeq_esZW2xOQ-xsNqO47m55DA[1].eot (8835 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\liverpool_fc-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\footer-bg[1].png (955 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAMELXQZ.htm (1820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAA3WXAF.htm (2728 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[1].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\all[1].js (5163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\brasilfc_pb[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\fb[2].js (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\style[1].css (30 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\brasilfc[1].htm (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\west_bromwich-25x25[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\zrt_lookup[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\f[2].txt (6096 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Block-c[1].png (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\Newcastle-50x50[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\rssIcon[1].png (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CAT3DOAK.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\PCb6tERU88CHX0nzKGusuyQApP2Rzb_4IwCcPQH29Wg[1].js (3211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\BlockContentBullets[1].png (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\sddefault[1].jpg (15711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Page-BgTexture[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (342 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\gen[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tottenham-25x25[1].png (982 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\x_button_blue2[1].png (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style.ie6[1].css (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\header[1].jpg (2055 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\3841_211[1].gif (9510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\watch_as3[1].swf (125565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\CAT9NN28 (7644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\jquery.easing-1.3.pack[1].js (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\Block-h[1].png (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\suarez-barcelona-50x50[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\blank[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\CA2BOH2V.htm (1000 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolaf[1].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\CAW5ERSZ (752 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s.ytimg.com\restore.sxx (87 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\uolsigaretarget.min[2].js (10 bytes)
%Documents and Settings%\%current user%\Application Data\Firewall.exe (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Ã¥Ë†Â°Ã¦Å¾ÂÃ¦â€¹â€°CÃ¦Å¾ÂE9AÃ¥Â¼â€”Ã¥Â¼â€”HÃ§Å“â€¹Ã¥Â¾â€žÃ¨Âµâ€ºKUÃ¦Â¸Â B2HCÃ¥Â¾â€žKOD9Ã¨Âµâ€ºÃ¥Â¼â€”Ã¥Â¼â€”Ã¨Âµâ€ºWÃ§Å“â€¹Ã¥Â°Â±Ã¨Âµâ€ºÃ§Å“â€¹.exe (39950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\2Ã¦â€°â€œÃ§Å“â€¹Ã¤Âºâ€°DWEÃ¨Âµâ€ºDWÃ©â€¡Å’WÃ¨Âµâ€ºÃ¦â€“Â¯Ã¥Â°Â±Ã¦Â Â¹Ã¦Â Â¹HÃ¦Â Â¹Ã¤Â¸â€“6UÃ¥Â¾â€žÃ¨Âµâ€º9ZÃ¤Â¸â€“HÃ¦Å“â€”Ã©â€¡Å’UÃ¥Â¼â€”UBC.exe (29 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Startup\a910f565008f3da5ebe024c8ddd769d7.exe (29 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"a910f565008f3da5ebe024c8ddd769d7" = "%Documents and Settings%\%current user%\Application Data\Firewall.exe .."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"a910f565008f3da5ebe024c8ddd769d7" = "%Documents and Settings%\%current user%\Application Data\Firewall.exe .."
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Gen.Variant.Barys.2015_36890a0059

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Gen.Variant.Barys.2015_36890a0059

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet