MD5: 7c542e0abb7e8700e5a0d4f50c941136
SHA1: dbc958d58d7e5bfdbfe1f8fff9b5d296041da49b
SHA256: 23c1558ba4f15f54496801a758daf2f3ee8dac707424cef5a1ab6aa0af8eb161
SSDeep: 12288:Qlv0A4LO7qkVlufsb2 MwzRbINA3VKduYWHJdyfa1L1n93tVXu0uJGXLL:QV0A4aPufsb22b3VOYuaX9dtPh
Size: 724536 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: Catalina Group Ltd.
Created at: 2016-05-26 20:24:07
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

CatalinaUpdate.exe:1196
CatalinaUpdate.exe:1072
CatalinaUpdate.exe:352
citrio_50.0.2661.271_1.exe:328
%original file name%.exe:1108

The Trojan injects its code into the following process(es):

CatalinaUpdate.exe:1628
CatalinaUpdate.exe:424

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process CatalinaUpdate.exe:1072 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\Install\{2FEF2209-C78C-4B55-BBBF-5B577A5DB7CF}\citrio_50.0.2661.271_1.exe (449813 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\Download\{92F8A219-E740-49D5-B785-B962AD819724}\50.0.2661.271\citrio_50.0.2661.271_1.exe (449813 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\Install (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\{70EEF915-5846-40C2-8A2A-3236CCECD222}-citrio_50.0.2661.271_1.exe (0 bytes)

The process CatalinaUpdate.exe:424 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_te.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ca.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ru.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_nl.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fi.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pl.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fr.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psmachine.dll (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_uk.dll (26 bytes)
%WinDir%\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-1844237615-1960408961-1801674531-1003Core.job (948 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_th.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_zh-TW.dll (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_vi.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_es-419.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdate.dll (5873 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fil.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ta.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_tr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ar.dll (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sk.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_is.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_mr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sw.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_es.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hr.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ja.dll (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_kn.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_en.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_en-GB.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psuser.dll (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_no.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ml.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateHelper.msi (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ur.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_am.dll (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pt-BR.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_bn.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sv.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_et.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_gu.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_da.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdate.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fa.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ms.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sl.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hu.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_cs.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_iw.dll (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_lt.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ko.dll (21 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_el.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hi.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_lv.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_zh-CN.dll (19 bytes)
%WinDir%\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-1844237615-1960408961-1801674531-1003UA.job (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_de.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_id.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe (58 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pt-PT.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_bg.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateBroker.exe (58 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaCrashHandler.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ro.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_it.dll (28 bytes)

The process citrio_50.0.2661.271_1.exe:328 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_35172.tmp\CITRIO.PACKED.7Z (443233 bytes)

The process %original file name%.exe:1108 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sl.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_gu.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUT2.tmp (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_nl.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_te.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sk.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_el.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ru.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_es-419.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_iw.dll (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_no.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_tr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_en-GB.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_da.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ro.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_uk.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_zh-TW.dll (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_bn.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ms.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ta.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateBroker.exe (58 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_es.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdate.dll (1990 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sw.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_de.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_is.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sv.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fr.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_en.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_cs.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_mr.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pt-BR.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fa.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_kn.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_bg.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pt-PT.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_id.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fi.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ja.dll (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\npCatalinaUpdate3.dll (236 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\psuser.dll (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ml.dll (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ko.dll (21 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_th.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ca.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_vi.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hi.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_zh-CN.dll (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_lv.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hu.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdate.exe (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ar.dll (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pl.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hr.dll (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateHelper.msi (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_lt.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_et.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_am.dll (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\psmachine.dll (155 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaCrashHandler.exe (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_it.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fil.dll (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ur.dll (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateOnDemand.exe (58 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp (0 bytes)

Registry activity

The process CatalinaUpdate.exe:1628 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A3 AE 30 74 75 52 F0 D2 48 88 45 5A 3F 04 41 B2"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"usagestats" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\CatalinaGroup\Update]
"eulaaccepted"

The process CatalinaUpdate.exe:1196 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "39 E6 8D B6 05 15 FF 56 C6 CF D5 2E AE EB C5 33"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_sp_major_version" = "03 00 00 00 00 00 00 00"

[HKCU\Software\CatalinaGroup\Update\proxy]
"source" = "IE"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_minor_version" = "01 00 00 00 00 00 00 00"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Counts]
"goopdate_main" = "02 00 00 00 00 00 00 00"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_major_version" = "05 00 00 00 00 00 00 00"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Counts]
"goopdate_constructor" = "02 00 00 00 00 00 00 00"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\CatalinaGroup\Update\network\secure]
"sk"
"c"

The process CatalinaUpdate.exe:1072 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "69 7C B9 28 2B 46 ED 96 67 EB 8C 5B 53 35 84 3D"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"usagestats" = "1"
"brand" = "GGLS"
"InstallTime" = "1466806569"
"referral" = "1:citrio_website"
"lang" = "en"

[HKCU\Software\CatalinaGroup\Update\proxy]
"source" = "IE"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\CatalinaGroup\Update]
"LastInstallerError"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"LastInstallerExtraCode1"
"browser"
"LastInstallerError"
"ap"
"LastInstallerSuccessLaunchCmdLine"
"eulaaccepted"
"experiment_labels"

[HKCU\Software\CatalinaGroup\Update]
"LastInstallerResultUIString"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"LastInstallerResult"
"LastInstallerResultUIString"
"tttoken"

[HKCU\Software\CatalinaGroup\Update]
"LastInstallerExtraCode1"
"LastInstallerSuccessLaunchCmdLine"
"LastInstallerResult"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"iid"

The process CatalinaUpdate.exe:424 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=9]
"vendor" = "Catalina Group Ltd."
"ProductName" = "CatalinaGroup Update"

[HKCU\Software\CatalinaGroup\Update\ClientState\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"iid" = "{E8AFF3B0-E0F0-4E23-88FB-2BC4E61DD1B2}"

[HKCU\Software\CatalinaGroup\Update]
"UID" = "{42A822E6-E430-44A0-800A-9D2632BBAFDB}"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-vnd.catalinahub.oneclickctrl.9]
"CLSID" = "{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}"

[HKCU\Software\Classes\CatalinaGroup.OneClickCtrl.9\CLSID]
"(Default)" = "{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}"

[HKCU\Software\Classes\CLSID\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}]
"(Default)" = "CatalinaGroup Update Plugin"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71216BD6-4D03-4387-BD01-7FE8D9512541}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-vnd.catalinahub.update3webcontrol.3]
"CLSID" = "{71216BD6-4D03-4387-BD01-7FE8D9512541}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}]
"AppName" = "CatalinaUpdate.exe"

[HKCU\Software\CatalinaGroup\Update]
"Version" = "1.3.25.223"

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"usagestats" = "1"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=9]
"Description" = "CatalinaGroup Update"

[HKCU\Software\CatalinaGroup\Update\Clients\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"Name" = "Catalina Update"

[HKCU\Software\CatalinaGroup\Update\ClientState\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"InstallTime" = "1466806504"

[HKCU\Software\Classes\CLSID\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CatalinaGroup.Update3WebControl.3]
"(Default)" = "CatalinaGroup Update Plugin"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update]
"CatalinaUpdate.exe" = "CatalinaGroup Update"

[HKCU\Software\Classes\CLSID\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}\ProgID]
"(Default)" = "CatalinaGroup.OneClickCtrl.9"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=9]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll"

[HKCU\Software\Classes\CLSID\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=3]
"Description" = "CatalinaGroup Update"
"ProductName" = "CatalinaGroup Update"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{841F4080-C687-4E9C-BD6E-EB5EECF4FAE6}]
"AppPath" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=3]
"vendor" = "Catalina Group Ltd."

[HKCU\Software\Classes\CLSID\{71216BD6-4D03-4387-BD01-7FE8D9512541}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=9]
"Version" = "9"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71216BD6-4D03-4387-BD01-7FE8D9512541}]
"AppPath" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223"

[HKCU\Software\CatalinaGroup\Update\ClientState\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"pv" = "1.3.25.223"

[HKCU\Software\Classes\CatalinaGroup.Update3WebControl.3\CLSID]
"(Default)" = "{71216BD6-4D03-4387-BD01-7FE8D9512541}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71216BD6-4D03-4387-BD01-7FE8D9512541}]
"AppName" = "CatalinaUpdateOnDemand.exe"

[HKCU\Software\CatalinaGroup\Update]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=3]
"Version" = "3"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "17 D0 2A 8C 2A CA F4 0A 71 ED 7E 55 5B 02 F7 03"

[HKCU\Software\Classes\CLSID\{71216BD6-4D03-4387-BD01-7FE8D9512541}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\CatalinaGroup\Update\Clients\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"pv" = "1.3.25.223"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Classes\CLSID\{71216BD6-4D03-4387-BD01-7FE8D9512541}\ProgID]
"(Default)" = "CatalinaGroup.Update3WebControl.3"

[HKCU\Software\MozillaPlugins\@catalinahub.net/CatalinaGroup Update;version=3]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CatalinaGroup.OneClickCtrl.9]
"(Default)" = "CatalinaGroup Update Plugin"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{71216BD6-4D03-4387-BD01-7FE8D9512541}]
"(Default)" = "CatalinaGroup Update Plugin"

[HKCU\Software\CatalinaGroup\Update\ClientState\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"brand" = "GGLS"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"CatalinaGroup Update" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe /c"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\CatalinaGroup\Update]
"eulaaccepted"
"ui"
"LastChecked"

[HKCU\Software\CatalinaGroup\Update\ClientState\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}]
"UpdateAvailableSince"
"UpdateAvailableCount"

The process CatalinaUpdate.exe:352 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13660822-39AC-408C-BA99-702EBEE3EF26}]
"CLSID" = "{13660822-39AC-408C-BA99-702EBEE3EF26}"

[HKCU\Software\Classes\Interface\{A2589E53-1490-4C0A-BFC7-A47B7A88E3D8}]
"(Default)" = "ICatalinaUpdate3WebSecurity"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3COMClassUser]
"(Default)" = "Update3COMClass"

[HKCU\Software\Classes\Interface\{0E09406F-1420-4BF4-B6EB-F0994674AD68}]
"(Default)" = "IAppBundle"

[HKCU\Software\Classes\Interface\{3EA78C6E-8267-4554-8EC6-8982D5AF539A}]
"(Default)" = "ICoCreateAsyncStatus"

[HKCU\Software\Classes\Interface\{0E09406F-1420-4BF4-B6EB-F0994674AD68}\NumMethods]
"(Default)" = "39"

[HKCU\Software\Classes\CLSID\{F4CBF20B-F634-4095-B64A-2EBCDD9E560E}\InprocServer32]
"ThreadingModel" = "Both"

[HKCU\Software\Classes\Interface\{34F067BE-C79C-4C5F-8E64-622A3CC59055}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{793865C6-3633-42FA-B959-055A87BF596A}]
"(Default)" = "PSFactoryBuffer"

[HKCU\Software\Classes\CLSID\{13660822-39AC-408C-BA99-702EBEE3EF26}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe"

[HKCU\Software\Classes\Interface\{23185EAB-61B0-4B70-BE89-589585B91392}\NumMethods]
"(Default)" = "8"

[HKCU\Software\Classes\Interface\{C1D8630A-9D2D-4E0E-A4A1-8AA5CA3FAE57}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{C8362D5A-4303-4E22-8668-BB10D65B95BD}\VersionIndependentProgID]
"(Default)" = "CatalinaGroupUpdate.OnDemandCOMClassUser"

[HKCU\Software\Classes\CLSID\{2823499B-60F3-4940-8042-2C16D5829A39}\VersionIndependentProgID]
"(Default)" = "CatalinaGroupUpdate.Update3WebUser"

[HKCU\Software\Classes\Interface\{7A1A1D82-1E2B-41B8-9FA3-F40D8DD3EEF0}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{263B5A28-834A-4D1B-AB71-A28E882CC59B}\NumMethods]
"(Default)" = "13"

[HKCU\Software\Classes\CatalinaGroupUpdate.CredentialDialogUser]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCU\Software\Classes\Interface\{7C9F9415-9947-482C-A62B-24A0BD92B8A7}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\Interface\{A2589E53-1490-4C0A-BFC7-A47B7A88E3D8}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{C1D8630A-9D2D-4E0E-A4A1-8AA5CA3FAE57}]
"(Default)" = "ICredentialDialog"

[HKCU\Software\Classes\Interface\{A1E6F38D-8C9E-4BDA-86A2-1940472A8429}]
"(Default)" = "ICatalinaUpdate"

[HKCU\Software\Classes\Interface\{FFC6ECB2-25E8-40EE-BF37-5AA25CBCBA63}\NumMethods]
"(Default)" = "10"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Counts]
"goopdate_main" = "01 00 00 00 00 00 00 00"

[HKCU\Software\Classes\Interface\{D085AC3B-E5CC-40C9-8366-C12ADC489967}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{789E3792-8514-4ED5-90F3-5B525275B953}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{FCD277CC-8D3E-4264-80D3-98E7B05E2E8A}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}]
"(Default)" = "Update3COMClass"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_sp_major_version" = "03 00 00 00 00 00 00 00"

[HKCU\Software\Classes\CLSID\{73436A91-85A6-4850-A7D0-375C4E369A5A}\ProgID]
"(Default)" = "CatalinaGroupUpdate.CredentialDialogUser.1.0"

[HKCU\Software\Classes\CLSID\{8FDC0C15-3A1A-4B3D-B04F-B725F5699C25}\InprocHandler32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psuser.dll"

[HKCU\Software\Classes\CLSID\{13660822-39AC-408C-BA99-702EBEE3EF26}]
"(Default)" = "CatalinaGroup.OneClickProcessLauncher"

[HKCU\Software\Classes\Interface\{263B5A28-834A-4D1B-AB71-A28E882CC59B}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{C8362D5A-4303-4E22-8668-BB10D65B95BD}]
"(Default)" = "Google Update Legacy On Demand"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3WebUser\CurVer]
"(Default)" = "CatalinaGroupUpdate.Update3WebUser.1.0"

[HKCU\Software\Classes\Interface\{FCD277CC-8D3E-4264-80D3-98E7B05E2E8A}\NumMethods]
"(Default)" = "10"

[HKCU\Software\Classes\Interface\{CBAC6FCC-819A-443D-98BB-E7A122DCCAE3}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\Interface\{7C9F9415-9947-482C-A62B-24A0BD92B8A7}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{0CD725CD-5650-4F13-91DA-E42FAA9687E8}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3WebUser\CLSID]
"(Default)" = "{2823499B-60F3-4940-8042-2C16D5829A39}"

[HKCU\Software\Classes\Interface\{FCD277CC-8D3E-4264-80D3-98E7B05E2E8A}]
"(Default)" = "IAppVersionWeb"

[HKCU\Software\Classes\CLSID\{793865C6-3633-42FA-B959-055A87BF596A}\InProcServer32]
"ThreadingModel" = "Both"

[HKCU\Software\Classes\Interface\{84BA4DAC-82EA-4DC8-BCB0-B69DD6E95670}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{F009E353-D4BD-42FE-994E-F6C315055F9B}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3COMClassUser\CurVer]
"(Default)" = "CatalinaGroupUpdate.Update3COMClassUser.1.0"

[HKCU\Software\Classes\CLSID\{73436A91-85A6-4850-A7D0-375C4E369A5A}\VersionIndependentProgID]
"(Default)" = "CatalinaGroupUpdate.CredentialDialogUser"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_minor_version" = "01 00 00 00 00 00 00 00"

[HKCU\Software\Classes\Interface\{CBAC6FCC-819A-443D-98BB-E7A122DCCAE3}]
"(Default)" = "IOneClickProcessLauncher"

[HKCU\Software\Classes\Interface\{051D14B3-CF0F-4CCA-B8FE-AF9E007ACD43}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\Interface\{051D14B3-CF0F-4CCA-B8FE-AF9E007ACD43}]
"(Default)" = "ICoCreateAsync"

[HKCU\Software\Classes\Interface\{F9F2D675-F172-42F2-A26E-6453B80EA7F1}]
"(Default)" = "ICurrentState"

[HKCU\Software\Classes\CLSID\{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}\ProgID]
"(Default)" = "CatalinaGroupUpdate.Update3COMClassUser.1.0"

[HKCU\Software\Classes\Interface\{789E3792-8514-4ED5-90F3-5B525275B953}]
"(Default)" = "IAppBundleWeb"

[HKCU\Software\Classes\Interface\{D085AC3B-E5CC-40C9-8366-C12ADC489967}]
"(Default)" = "IApp"

[HKCU\Software\Classes\Interface\{A1E6F38D-8C9E-4BDA-86A2-1940472A8429}\NumMethods]
"(Default)" = "5"

[HKCU\Software\Classes\CLSID\{8FDC0C15-3A1A-4B3D-B04F-B725F5699C25}\InprocHandler32]
"ThreadingModel" = "Both"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Integers]
"windows_major_version" = "05 00 00 00 00 00 00 00"

[HKCU\Software\Classes\CatalinaGroup.OneClickProcessLauncherUser\CLSID]
"(Default)" = "{13660822-39AC-408C-BA99-702EBEE3EF26}"

[HKCU\Software\Classes\Interface\{A1E6F38D-8C9E-4BDA-86A2-1940472A8429}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CatalinaGroupUpdate.CredentialDialogUser\CLSID]
"(Default)" = "{73436A91-85A6-4850-A7D0-375C4E369A5A}"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BB 0F 1C E2 0F 58 24 D2 69 02 69 7E FB B3 AA 1D"

[HKCU\Software\Classes\Interface\{D085AC3B-E5CC-40C9-8366-C12ADC489967}\NumMethods]
"(Default)" = "44"

[HKCU\Software\Classes\CLSID\{13660822-39AC-408C-BA99-702EBEE3EF26}\VersionIndependentProgID]
"(Default)" = "CatalinaGroup.OneClickProcessLauncherUser"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3WebUser.1.0]
"(Default)" = "GoogleUpdate Update3Web"

[HKCU\Software\Classes\Interface\{C1D8630A-9D2D-4E0E-A4A1-8AA5CA3FAE57}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\Interface\{0CD725CD-5650-4F13-91DA-E42FAA9687E8}\NumMethods]
"(Default)" = "10"

[HKCU\Software\Classes\Interface\{34F067BE-C79C-4C5F-8E64-622A3CC59055}\NumMethods]
"(Default)" = "9"

[HKCU\Software\Classes\Interface\{EC3867B7-B9EF-494E-B42B-BA009D57D90E}\NumMethods]
"(Default)" = "6"

[HKCU\Software\Classes\Interface\{6B6DE56F-09F2-4343-80AD-28E5D6CB78F9}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13660822-39AC-408C-BA99-702EBEE3EF26}]
"Policy" = "3"

[HKCU\Software\Classes\Interface\{F9F2D675-F172-42F2-A26E-6453B80EA7F1}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{0E09406F-1420-4BF4-B6EB-F0994674AD68}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{6B6DE56F-09F2-4343-80AD-28E5D6CB78F9}\NumMethods]
"(Default)" = "14"

[HKCU\Software\Classes\CLSID\{2823499B-60F3-4940-8042-2C16D5829A39}\ProgID]
"(Default)" = "CatalinaGroupUpdate.Update3WebUser.1.0"

[HKCU\Software\Classes\Interface\{7C9F9415-9947-482C-A62B-24A0BD92B8A7}]
"(Default)" = "ICatalinaUpdateCore"

[HKCU\Software\Classes\Interface\{3EA78C6E-8267-4554-8EC6-8982D5AF539A}\NumMethods]
"(Default)" = "10"

[HKCU\Software\Classes\CLSID\{73436A91-85A6-4850-A7D0-375C4E369A5A}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe"

[HKCU\Software\Classes\Interface\{051D14B3-CF0F-4CCA-B8FE-AF9E007ACD43}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CatalinaGroup.OneClickProcessLauncherUser.1.0]
"(Default)" = "CatalinaGroup.OneClickProcessLauncher"

[HKCU\Software\Classes\CLSID\{2823499B-60F3-4940-8042-2C16D5829A39}]
"(Default)" = "GoogleUpdate Update3Web"

[HKCU\Software\Classes\CLSID\{13660822-39AC-408C-BA99-702EBEE3EF26}\ProgID]
"(Default)" = "CatalinaGroup.OneClickProcessLauncherUser.1.0"

[HKCU\Software\Classes\Interface\{CBAC6FCC-819A-443D-98BB-E7A122DCCAE3}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CatalinaGroup.OneClickProcessLauncherUser\CurVer]
"(Default)" = "CatalinaGroup.OneClickProcessLauncherUser.1.0"

[HKCU\Software\Classes\CLSID\{2823499B-60F3-4940-8042-2C16D5829A39}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe"

[HKCU\Software\Classes\Interface\{FFC6ECB2-25E8-40EE-BF37-5AA25CBCBA63}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{84BA4DAC-82EA-4DC8-BCB0-B69DD6E95670}\NumMethods]
"(Default)" = "10"

[HKCU\Software\CatalinaGroup\Update\UsageStats\Daily\Counts]
"goopdate_constructor" = "01 00 00 00 00 00 00 00"

[HKCU\Software\Classes\Interface\{FFC6ECB2-25E8-40EE-BF37-5AA25CBCBA63}]
"(Default)" = "ICatalinaUpdate3"

[HKCU\Software\Classes\Interface\{263B5A28-834A-4D1B-AB71-A28E882CC59B}]
"(Default)" = "IJobObserver"

[HKCU\Software\Classes\Interface\{0CD725CD-5650-4F13-91DA-E42FAA9687E8}]
"(Default)" = "IAppVersion"

[HKCU\Software\Classes\CatalinaGroupUpdate.OnDemandCOMClassUser.1.0]
"(Default)" = "Google Update Legacy On Demand"

[HKCU\Software\Classes\Interface\{F009E353-D4BD-42FE-994E-F6C315055F9B}]
"(Default)" = "ICatalinaUpdate3Web"

[HKCU\Software\Classes\Interface\{F009E353-D4BD-42FE-994E-F6C315055F9B}\NumMethods]
"(Default)" = "8"

[HKCU\Software\Classes\Interface\{A2589E53-1490-4C0A-BFC7-A47B7A88E3D8}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\Interface\{23185EAB-61B0-4B70-BE89-589585B91392}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\Interface\{EC3867B7-B9EF-494E-B42B-BA009D57D90E}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}\VersionIndependentProgID]
"(Default)" = "CatalinaGroupUpdate.Update3COMClassUser"

[HKCU\Software\Classes\CatalinaGroupUpdate.OnDemandCOMClassUser\CLSID]
"(Default)" = "{C8362D5A-4303-4E22-8668-BB10D65B95BD}"

[HKCU\Software\Classes\Interface\{7A1A1D82-1E2B-41B8-9FA3-F40D8DD3EEF0}]
"(Default)" = "IBrowserHttpRequest2"

[HKCU\Software\Classes\CLSID\{F4CBF20B-F634-4095-B64A-2EBCDD9E560E}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psuser.dll"

[HKCU\Software\Classes\CatalinaGroupUpdate.CredentialDialogUser.1.0]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3WebUser.1.0\CLSID]
"(Default)" = "{2823499B-60F3-4940-8042-2C16D5829A39}"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3COMClassUser.1.0]
"(Default)" = "Update3COMClass"

[HKCU\Software\Classes\Interface\{789E3792-8514-4ED5-90F3-5B525275B953}\NumMethods]
"(Default)" = "24"

[HKCU\Software\Classes\Interface\{84BA4DAC-82EA-4DC8-BCB0-B69DD6E95670}]
"(Default)" = "IPackage"

[HKCU\Software\Classes\Interface\{7A1A1D82-1E2B-41B8-9FA3-F40D8DD3EEF0}\NumMethods]
"(Default)" = "4"

[HKCU\Software\Classes\CLSID\{C8362D5A-4303-4E22-8668-BB10D65B95BD}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe"

[HKCU\Software\Classes\Interface\{3EA78C6E-8267-4554-8EC6-8982D5AF539A}\ProxyStubClsid32]
"(Default)" = "{793865C6-3633-42FA-B959-055A87BF596A}"

[HKCU\Software\Classes\CLSID\{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3COMClassUser.1.0\CLSID]
"(Default)" = "{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}"

[HKCU\Software\Classes\Interface\{6B6DE56F-09F2-4343-80AD-28E5D6CB78F9}]
"(Default)" = "IAppWeb"

[HKCU\Software\Classes\CatalinaGroupUpdate.OnDemandCOMClassUser.1.0\CLSID]
"(Default)" = "{C8362D5A-4303-4E22-8668-BB10D65B95BD}"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3WebUser]
"(Default)" = "GoogleUpdate Update3Web"

[HKCU\Software\Classes\CatalinaGroup.OneClickProcessLauncherUser]
"(Default)" = "CatalinaGroup.OneClickProcessLauncher"

[HKCU\Software\Classes\Interface\{F9F2D675-F172-42F2-A26E-6453B80EA7F1}\NumMethods]
"(Default)" = "24"

[HKCU\Software\Classes\CatalinaGroup.OneClickProcessLauncherUser.1.0\CLSID]
"(Default)" = "{13660822-39AC-408C-BA99-702EBEE3EF26}"

[HKCU\Software\Classes\Interface\{EC3867B7-B9EF-494E-B42B-BA009D57D90E}]
"(Default)" = "IProcessLauncher"

[HKCU\Software\Classes\CLSID\{793865C6-3633-42FA-B959-055A87BF596A}\InProcServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psuser.dll"

[HKCU\Software\Classes\CatalinaGroupUpdate.OnDemandCOMClassUser\CurVer]
"(Default)" = "CatalinaGroupUpdate.OnDemandCOMClassUser.1.0"

[HKCU\Software\Classes\CLSID\{C8362D5A-4303-4E22-8668-BB10D65B95BD}\ProgID]
"(Default)" = "CatalinaGroupUpdate.OnDemandCOMClassUser.1.0"

[HKCU\Software\Classes\CatalinaGroupUpdate.Update3COMClassUser\CLSID]
"(Default)" = "{3C564FFE-55F7-43AC-886C-7E9E9091CB2A}"

[HKCU\Software\Classes\CatalinaGroupUpdate.CredentialDialogUser\CurVer]
"(Default)" = "CatalinaGroupUpdate.CredentialDialogUser.1.0"

[HKCU\Software\Classes\Interface\{34F067BE-C79C-4C5F-8E64-622A3CC59055}]
"(Default)" = "IProgressWndEvents"

[HKCU\Software\Classes\CatalinaGroupUpdate.OnDemandCOMClassUser]
"(Default)" = "Google Update Legacy On Demand"

[HKCU\Software\Classes\CLSID\{73436A91-85A6-4850-A7D0-375C4E369A5A}]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCU\Software\Classes\CatalinaGroupUpdate.CredentialDialogUser.1.0\CLSID]
"(Default)" = "{73436A91-85A6-4850-A7D0-375C4E369A5A}"

[HKCU\Software\Classes\Interface\{23185EAB-61B0-4B70-BE89-589585B91392}]
"(Default)" = "IRegistrationUpdateHook"

The Trojan deletes the following registry key(s):

[HKCU\Software\Classes\CLSID\{F4CBF20B-F634-4095-B64A-2EBCDD9E560E}]
[HKCU\Software\Classes\CLSID\{F4CBF20B-F634-4095-B64A-2EBCDD9E560E}\InprocServer32]
[HKCU\Software\Classes\CLSID\{8FDC0C15-3A1A-4B3D-B04F-B725F5699C25}\InprocHandler32]
[HKCU\Software\Classes\CLSID\{8FDC0C15-3A1A-4B3D-B04F-B725F5699C25}]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\CatalinaGroup\Update\network\secure]
"sk"
"c"

The process citrio_50.0.2661.271_1.exe:328 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\CatalinaGroup\Update\ClientState\{92F8A219-E740-49D5-B785-B962AD819724}]
"ap" = "-full"

The process %original file name%.exe:1108 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D7 BB E0 17 45 D9 08 C9 9E B3 18 24 16 31 AF F0"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: Catalina Group Ltd.
Product Name: CatalinaGroup Update
Product Version: 1.3.25.223
Legal Copyright: Copyright 2013 Catalina Group Ltd.
Legal Trademarks:
Original Filename: CatalinaUpdateSetup.exe
Internal Name: CatalinaGroup Update Setup
File Version: 1.3.25.223
File Description: CatalinaGroup Update Setup
Comments:
Language: English (United States)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 28
3c2f29dbac5842ca1a35747628ac2ed0
77911c759cafed5c84f6d819fbaf2069
fee2556c48f72e91e121554e539b09e9
f11489e2c77aaccce5be36cd0f412374
7ea8b386deb153674ae71fbaac54ab76
a2c0406aaba834c74f68561c73936587
f286dd4df05f245669a2369d48418cfe
6e2f2e4552821e74da372e828fded288
d3d0d8a0a4ad6f659968ec9597c5904c
8d07d2af1cacca9b155f9aa57b7785d7
d6e7032cc47d7701b3dc9d7e2b5fd5c3
fdc6075e6b90d49d20adc410eed07268
fad048a52261ed893caba84d3a40025f
c82aec98008a83e1505e59ca14243728
47a7a872690644a8db4aec4424c1593e
47f16121bb7e85ae2624b94c5d9ae4d4
1f3f192bcc3cb6bdddaad57c3c2659af
0602ef8c76f9ac40345b392b13062eca
09e1b9accbe3bc53af1dd8b6c055f3f9
3626022326bfb0f10fca5336e8b96834
adfa089ac6508c4d2baddc86f4ec6893
2a00121697147dd6b26a950569e65577
687ece4bb3ecc5276d27dd1f30fe3900
904b9c4b0cb8a924f98f4b199efdd88b
fb95e4647b9b6c56fc314f0ae1644e35

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

.text

`.rdata

@.data

.rsrc

@.reloc

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

mi_exe_stub.pdb

GetCPInfo

KERNEL32.dll

SHLWAPI.dll

GetProcessHeap

ole32.dll

USER32.dll

c:\%original file name%.exe

.eyV}

.Pl_Iy

.YZ9'

MrsqLa

cK?%X

9d.os

bpCH.Ob

%FYzE

;`-<

úL u

cMdi

[:\%c

&k%sa

%fH`2

.ZB#I

9IqI.If

K%U35R

ZO\0:%UO7

p7.HV&

%xDyE

d/y.Sw

U%xbqq!GR-

a1g.ZI

lp.JR^

Ya.Ev

Z9%x;

.GB|@zr

.whDs

T;K[uO%F

j'G.Fw

].TrJ

Q.rW#

"B.ia

g!.Uh

k.lhx

pK.gJ

:sssh 

7:<<<6000

<requestedExecutionLevel level="asInvoker" />

<!--The ID below indicates application support for Windows Vista -->

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<!--The ID below indicates application support for Windows 7 -->

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<!--This Id value indicates the application supports Windows 8 functionality-->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<!--This Id value indicates the application supports Windows 8.1 functionality-->

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

<!--This Id value indicates the application supports Windows 10.0 functionality-->

<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='*' publicKeyToken='6595b64144ccf1df' language='*' />

: :%:/:=:}:

3'3,30343]3

mscoree.dll

KERNEL32.DLL

appguid={92F8A219-E740-49D5-B785-B962AD819724}&installerargs=--make-chrome-default

Windows 2000 Service Pack 4

Windows 2000

lador de %1!s! requereix Windows 2000 amb Service Pack 4 o una versi

m Windows 2000 Service Pack 4 nebo nov

ver Windows 2000 Service Pack 4 eller bedre.

r den %1!s!-Installer wird Windows 2000 Service Pack 4 oder h

Unknown Installer ErrorTInstallation failed. %1!s! Installer requires Windows 2000 Service Pack 4 or better.

Windows 2000 Service Pack 4:n tai uudemman.

cessite Windows

je Windows 2000 Service Pack 4-et vagy frissebb verzi

krefst Windows 2000

Google#Programma di installazione di %1!s!!Errore sconosciuto dell'installertInstallazione non riuscita. Il programma di installazione di %1!s! richiede Windows 2000 Service Pack 4 o superiore.

Installatieprogramma van %1!s!'Onbekende fout van installatieprogrammasDe installatie is mislukt. Voor het installatieprogramma van %1!s! is Windows 2000 Service Pack 4 of hoger vereist.

Ukjent installasjonsfeilgInstallasjonen mislyktes. %1!s! installasjonsprogrammet krever Windows 2000 Service Pack 4 eller nyere.

. Instalator %1!s! wymaga systemu Windows 2000 z dodatkiem Service Pack 4 lub nowszego.

o. O instalador do %1!s! requer o Windows 2000 Service Pack 4 ou posterior.

it. %1!s! Programul de instalare are nevoie de Windows 2000 Service Pack 4 sau de o versiune superioar

ka alata za instalacijulInstalacija nije uspjela. Za instalacijski program %1!s! potreban je Windows 2000 Service Pack 4 ili noviji.

m Windows 2000 Service Pack 4 alebo nov

ver Windows 2000 Service Pack 4 eller b

kleyicisi Windows 2000 Hizmet Paketi 4 veya sonras

Program pemasang %1!s!!Kesalahan Installer Tak DiketahuiePemasangan gagal. Program pemasang %1!s! memerlukan Windows 2000 Service Pack 4 atau yang lebih baik.

na. Za namestitveni program za %1!s! potrebujete Windows 2000 s servisnim paketom SP 4 ali novej

uab rakendust Windows 2000 hoolduspakett 4 v

ama Windows

Windows 2000

u Windows 2000 G

Pemasang %1!s!#Ralat Pemasang yang Tidak Diketahui]Pemasangan gagal. Pemasang %1!s! memerlukan Windows 2000 Service Pack 4 atau yang lebih baik.

Kisakinishi cha %1!s!%Hitilafu ya Kisakinishi Isiyojulikana_Usakinishaji haukufaulu. Kisakinishi cha %1!s! kinahitaji Windows 2000 Service Pack 4 au zaidi.

. Windows 2000

Installer ng %1!s! Hindi Alam na Error ng InstallerlNabigo ang pag-install. Nangangailangan ang Installer ng %1!s! ng Windows 2000 Service Pack 4 o mas mahusay.

n. %1!s! El instalador requiere Windows 2000 Service Pack 4 o superior.

o %1!s! necessita do Windows 2000 Service Pack 4 ou superior.

n. %1!s! Installer requiere Windows 2000 Service Pack 4 o versiones posteriores.

1.3.25.223

CatalinaUpdateSetup.exe

CatalinaUpdate.exe_424:

.text

`.data

.text/DE

@.rsrc

@.reloc

SHELL32.dll

USER32.dll

SHLWAPI.dll

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

CatalinaUpdate_unsigned.pdb

RegOpenKeyExW

ADVAPI32.dll

KERNEL32.dll

ole32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

<requestedExecutionLevel level="asInvoker" />

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<!--The ID below indicates application support for Windows Vista -->

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<!--The ID below indicates application support for Windows 7 -->

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<!--This Id value indicates the application supports Windows 8 functionality-->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<!--This Id value indicates the application supports Windows 8.1 functionality-->

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

<!--This Id value indicates the application supports Windows 10.0 functionality-->

<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>

###7777_{

###____777

###````87{

2 2$2(2,20242~2

4 4$4(4,4

?$?(?,?4?

> >@>\>`>

? ?@?\?`?

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\GUM1.tmp\CatalinaUpdate.exe

KERNEL32.DLL

mscoree.dll

goopdate.dll

CatalinaUpdate.exe

Software\CatalinaGroup\Update\Clients\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}

1.3.25.223

2007-2010

2007-2010

CatalinaUpdate.exe_1628:

.text

`.data

.text/DE

@.rsrc

@.reloc

SHELL32.dll

USER32.dll

SHLWAPI.dll

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

CatalinaUpdate_unsigned.pdb

RegOpenKeyExW

ADVAPI32.dll

KERNEL32.dll

ole32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

<requestedExecutionLevel level="asInvoker" />

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<!--The ID below indicates application support for Windows Vista -->

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<!--The ID below indicates application support for Windows 7 -->

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<!--This Id value indicates the application supports Windows 8 functionality-->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<!--This Id value indicates the application supports Windows 8.1 functionality-->

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

<!--This Id value indicates the application supports Windows 10.0 functionality-->

<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>

###7777_{

###____777

###````87{

2 2$2(2,20242~2

4 4$4(4,4

?$?(?,?4?

> >@>\>`>

? ?@?\?`?

%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe

KERNEL32.DLL

mscoree.dll

goopdate.dll

CatalinaUpdate.exe

Software\CatalinaGroup\Update\Clients\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}

1.3.25.223

2007-2010

2007-2010

CatalinaUpdate.exe_1072:

.text

`.data

.text/DE

@.rsrc

@.reloc

SHELL32.dll

USER32.dll

SHLWAPI.dll

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

CatalinaUpdate_unsigned.pdb

RegOpenKeyExW

ADVAPI32.dll

KERNEL32.dll

ole32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

<requestedExecutionLevel level="asInvoker" />

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<!--The ID below indicates application support for Windows Vista -->

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<!--The ID below indicates application support for Windows 7 -->

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<!--This Id value indicates the application supports Windows 8 functionality-->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<!--This Id value indicates the application supports Windows 8.1 functionality-->

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

<!--This Id value indicates the application supports Windows 10.0 functionality-->

<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>

###7777_{

###____777

###````87{

2 2$2(2,20242~2

4 4$4(4,4

?$?(?,?4?

> >@>\>`>

? ?@?\?`?

%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe

KERNEL32.DLL

mscoree.dll

goopdate.dll

CatalinaUpdate.exe

Software\CatalinaGroup\Update\Clients\{6C598730-F715-407B-A7AE-A8F10D0F8FA7}

1.3.25.223

2007-2010

2007-2010

setup.exe_1608:

.text

`.rdata

@.data

.rsrc

@.reloc

SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>

PSSSSSSh

:.texu

j.Yf;

_tcPVj@

.PjRW

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\archive_patch_helper.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\install.cc

Adding Chrome to Media player list at

Could not add Chrome to media player inclusion list.

<Application xmlns:xsi='hXXp://VVV.w3.org/2001/XMLSchema-instance'>

Square150x150Logo='%ls\Logo.png'

Square70x70Logo='%ls\SmallLogo.png'

Registering Chrome as browser:

Failed to reinstall Active Setup keys.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\install_worker.cc

Chrome Frame in use. Copying to new_citrio.exe

FUnexpected result creating CommandExecuteImpl; hr=0x

Adding unregistration items for DelegateExecute verb handler in

Not operating on Chrome while migrating to single-install.

No multi-install Chrome found to migrate to single-install.

No DelegateExecute verb handler processing to do for

Adding registration items for DelegateExecute verb handler.

not supported.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\setup_main.cc

Renaming of executables failed. Rolling back any changes.

Upgrading existing Chrome browser in multi-install mode.

Launching existing system-level chrome instead.

RepairChrome: Failed to open Chrome's ClientState key.

RepairChrome: Failed to read Chrome's UninstallArguments.

RepairChrome: Not repairing single-install Chrome.

RepairChrome: Failed to read Chrome's UninstallString.

RepairChrome: Launched repair command "

RepairChrome: Failed launching repair command "

RepairChrome: Will retry without breakaway.

Tried and failed to launch Metro Chrome.

was found, as a last resort (if the product is not present in Add/Remove Programs), try executing:

Aborting operation: another installation of

setup.exe patching failed.

chrome_install:

Can't register browser - Chrome distribution not found

Chrome product not found.

Chrome Installer

Uninstalling multi-install Chrome Frame.

Uninstallation of Chrome Frame returned status

Chrome Frame not found for uninstall.

Installing Chrome from compressed archive

Cannot install Chrome without an uncompressed archive.

Chrome only supports Windows XP or later.

Non admin user can not install system level Chrome.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\setup_util.cc

Looking for Chrome version folder under

0.0.0.0

chrome-frame

migrate-chrome-frame

Failed to delete subkey

Failed to delete empty key

in key

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\uninstall.cc

DeleteChromeFilesAndFolders: no installation destination

Launching Chrome to do uninstall tasks.

citrio.exe launched for uninstall confirmation returned:

Failed to launch citrio.exe for uninstall confirmation.

Uninstall per-user Active Setup keys.

Uninstalling Active Setup key for

NTUSER.DAT

Failed to delete key at

Retargeting user-generated Chrome shortcuts.

Retarget failed: system-level Chrome not found.

Closing the Chrome Frame helper process

Uninstallation complete. Launching post-uninstall operations.

setup.exe is not in target path. Skipping installer cleanup.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\setup\update_active_setup_version_work_item.cc

googlechrome

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\install_util.cc

CHROME_PROBED_PROGRAM_FILES_PATH

Deleting registry key

Failed to delete registry key:

Failed to parse an executable name from command line: "

chrome

chrome-sxs

do-not-launch-chrome

make-chrome-default

new-setup-exe

register-chrome-browser

register-chrome-browser-suffix

register-dev-chrome

register-url-protocol

rename-chrome-exe

remove-chrome-registration

update-setup-exe

toast-results-key

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\lzma_util.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\shell_util.cc

DefaultBrowser.ActivateSettings.ErrorHresult

Could not make Chrome default browser (XP/current user).

Could not make Chrome default browser (XP/system level).

Registering Chrome as default browser on Vista.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\product.cc

Failed to Open or Write MSI value to client state key. error:

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\installer_state.cc

It seems that chrome is being installed for the first time.

It seems that chrome is being over installed.

Failed opening key

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\master_preferences.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\set_reg_value_work_item.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\delete_after_reboot_helper.cc

Failed to open session manager key for writing.

do_not_launch_chrome

make_chrome_default

make_chrome_default_for_user

launch_chrome_after_update

Cannot initialize an AppCommand from an invalid key.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\app_command.cc

creating AppCommand registry key

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\conditional_work_item_list.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\google_update_settings.cc

Failed to write to application's ClientState key

Removed incremental installer failure key; switching to channel:

Removed multi-install failure key; switching to channel:

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\google_update_util.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\installation_validator.cc

be web accessible

Chrome Binaries are missing "-multi" in channel name: "

Chrome Binaries are missing "chrome" in channel name:

Chrome Binaries have "-chrome" in channel name, yet Chrome is not installed: "

Chrome Binaries are missing "-chromeframe" in channel name: "

Chrome Binaries have "-chromeframe" in channel name, yet Chrome Frame is not installed multi: "

Chrome Binaries are present with no other products.

Chrome Binaries are present yet Chrome is not multi-install.

Chrome Binaries are present without Chrome, yet Chrome Frame

without Chrome Binaries.

) does not match that of Chrome Binaries (

has an unsupported usagestats value (

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\self_cleaning_temp_dir.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\user_experiment.cc

Experiment qualification bypass

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\channel_info.cc

googlechromeframe

iexplore.exe

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\language_selector.cc

Cannot initialize AppCommands from an invalid key.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

item execution failed

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\work_item_list.cc

list execution succeeded

NoRollbackWorkItemList: item execution failed

NoRollbackWorkItemList: list execution succeeded

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\copy_tree_work_item.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\create_dir_work_item.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\create_reg_key_work_item.cc

no key to create

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\delete_tree_work_item.cc

Acquired exclusive lock for key file:

Could not exclusively hold all key files.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\delete_reg_key_work_item.cc

Failed to backup destination for registry key copy.

Failed to restore key in rollback.

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\delete_reg_value_work_item.cc

(delete value) Key:

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\move_tree_work_item.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\self_reg_work_item.cc

0xX

COM registration export function not found

Failed getting info of key to backup, result:

c:\jenkins\workspace\citrio-dev-clone\browser\src\chrome\installer\util\registry_key_backup.cc

Failed getting name of subkey

Failed opening subkey "

Failed backing up subkey "

Failed creating subkey "

Failed writing subkey "

Failed to backup key at

Failed to open key at

Failed to create destination key at

Failed to write key data.

CHROME_HEADLESS

widevinecdmadapter.dll

try-chrome-again

session.startup_urls

session.urls_to_restore_on_startup

%s\%s

user_experience_metrics.reporting_enabled

c:\jenkins\workspace\citrio-dev-clone\browser\src\crypto\secure_hash_openssl.cc

c:\jenkins\workspace\citrio-dev-clone\browser\src\courgette\assembly_program.cc

32 bit executables are not supported by this disassembler

Resource-only executables are not yet supported

.relocs outside image

.relocs block outside image

64 bit executables are not supported by this disassembler

Not an executable file or shared library

Not a supported architecture

c:\jenkins\workspace\citrio-dev-clone\browser\src\courgette\disassembler_elf_32.cc

Skipping relocation entry for unsupported section:

CITRIO_BREAKPAD_PIPE_NAME

c:\jenkins\workspace\citrio-dev-clone\browser\src\components\crash\content\app\breakpad_win.cc

NTDLL.DLL

SHELL32.dll

GetProcessWindowStation

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

operator

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

RegDeleteKeyExW

advapi32.dll

%s-%Iu

c:\jenkins\workspace\citrio-dev-clone\browser\src\base\process\memory_win.cc

PlatformFile.UnknownErrors.Windows

Windows NT

%d.%d

user32.dll

Histogram: %s recorded %d samples

(flags = 0x%x)

(%d = %3.1f%%)

0123456789

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

Line: %i, column: %i, %s

full-memory-crash-report

c:\jenkins\workspace\Citrio-Dev-Clone\browser\src\out\Release\setup.exe.pdb

ShellExecuteExW

ShellExecuteW

setup.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

VERSION.dll

WS2_32.dll

WINMM.dll

UrlCanonicalizeW

SHLWAPI.dll

RegEnumKeyExW

RegLoadKeyW

RegUnLoadKeyW

RegQueryInfoKeyW

RegCreateKeyExW

RegDeleteKeyW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetWindowsDirectoryW

GetProcessHeap

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

KERNEL32.dll

ole32.dll

OLEAUT32.dll

SetWindowsHookExW

UnhookWindowsHookEx

USER32.dll

CreateURLMonikerEx

urlmon.dll

WTSAPI32.dll

USERENV.dll

PeekNamedPipe

GetCPInfo

zcÁ

k.lhx

pK.gJ

:sssh 

7:<<<6000

444.44...4

4.4....4.

..44.44@4

4@444@4.

.4@4@@4.

}.GnO

{oG

5G%8gG

wG

!)%)%)%sN

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><ms_asmv2:trustInfo xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"><ms_asmv2:security><ms_asmv2:requestedPrivileges><ms_asmv2:requestedExecutionLevel xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3" level="asInvoker" ms_asmv3:uiAccess="false"></ms_asmv2:requestedExecutionLevel></ms_asmv2:requestedPrivileges></ms_asmv2:security></ms_asmv2:trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

00l0}0

;#;);/;3;8;?;

11d1v1

'020@0_0

<)<?<^<~<

>$?/?5?\?

0 0$0(0,0004080<0

9 9$9(9,9

: :$:(:,:0:4:8:<:\<

= =$=(=,=8=<=@=

app_host.exe

=hXXp://citrio.com/service/updatemessage/

"hXXp://VVV.facebook.com"

"hXXp://VVV.youtube.com"

"hXXps://chrome.google.com/webstore/"

Open Chrome Web Store

Chrome Web Store

Ihttp

https

{A1326E5F-95B3-49FB-8C1F-610F27E0C5BE}

Software\Classes\Interface\{90E75134-C82F-4273-831F-13F6FB52BA1B}

Software\Classes\TypeLib\{5405A76A-9F6D-44E3-91CE-72179B379953}

Software\Classes\CLSID\{8BF2F61B-E8C2-4A67-85D0-D6A69F9FD948}

ServerExecutable

.CommandExecuteImpl Class

.StubPath

ieframe.dll

0.0.0.0-devel

MetricsReportingEnabled

citrio.packed.7z

chrome.VisualElementsManifest.xml

wow_helper.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\%ls\Products\%ls\InstallProperties

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{%ls}

{92F8A219-E740-49D5-B785-B962AD819724}

{F0B50D5A-4BBA-4514-AD2C-EBA50C29C460}

%SystemRoot%\System32\rundll32.exe

..htm

.html

.xhtml

Software\Microsoft\Windows NT\CurrentVersion\ProfileList\

.DEFAULT\

{3599E25E-6314-4BE9-AE14-E51877342426}

{675046A3-9F4F-4805-A81C-CBF753FE3428}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Citrio

registering_chrome

uninstalling_chrome_frame

.HTML

IDR_OEMPG_EN.HTML

chrmstp.exe

{0105EA02-802D-4B37-8161-4ED25C493266}

citrio.dll

citrio.exe

npchrome_frame.dll

chrome_frame_helper.dll

chrome_frame_helper.exe

ChromeFrameHelperWindowClass

new_citrio.exe

old_citrio.exe

delegate_execute.exe

nacl64.exe

chrome.exe

new_chrome.exe

old_chrome.exe

InstallerSuccessLaunchCmdLine

Software\Microsoft\Windows\CurrentVersion\App Paths

.shtml

.webp

webcal

.webm

.flac

.torrent

URL Protocol

\.exe

DelegateExecute

Browser.Launch

\URLAssociations

\shell\open\ddeexec

windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel

" -- "%1"

.Software\CatalinaGroup\Citrio

PendingFileRenameOperations

UninstallCmdLine

WebAccessible

EMSHTML.DLL

chrome_installer.log

hXXp://VVV.citrio.com/welcome.html?intl=$1

-chrome

-chromeframe

GoogleChromeAutoLaunch

{DE28A2EA-77FA-4F2B-8252-C3B5844F6455}

FGoogle Chrome Frame

Chrome in a Frame.

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

Google Chrome binaries

F{92F8A219-E740-49D5-B785-B962AD819724}

{8BF2F61B-E8C2-4A67-85D0-D6A69F9FD948}

AhXXp://VVV.citrio.com/goodbye.html?intl=$1&survey_id=%ls

%d.%d.%d

{E9F24A7C-13CA-42FB-A4D9-79C3C9D21B28}

ChromeCanary

ChromeSSHTM

Chrome Canary HTML Document

{1BEAC3E3-B852-44F4-B468-8906C062422E}

AGoogle Chrome Canary

Opens all ports for Citrio embedded bittorrent client

%u-%u

Crash Reports

script.log

resources.pak

pepflashplayer.dll

version.json

NPSWF32.dll

shell32.dll

s{A946A6A9-917E-4949-B9BC-6BADA8C7FD63}

\\.\pipe\CatalinaGroupCrashServices\

\\.\pipe\CitrioCrashServices

error %u

hunspecified-crash-key

dbghelp.dll

rpcrt4.dll

%s\%s.dmp

x-x-x-xx-xxxxxx

Kmscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

Ndebug.log

kernel32.dll

\StringFileInfo\xx\%ls

Software\Microsoft\Windows\CurrentVersion\Run

ntdll.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\CR_35172.tmp\setup.exe

50.0.2661.271

nsit de mDNS.KPravidlo p

mDNS..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic.4Regla entrante para que Citrio permita tr

mDNS.BCitrioin saapuvien yhteyksien s

, joka sallii mDNS-liikenteen.GInbound na panuntunan para sa Citrio upang payagan ang trapiko ng mDNS.=R

.3Ulazno pravilo kako bi Citrio dopustio mDNS promet.CBej

iamas mDNS srautas.IIen

.:Peraturan masuk bagi Citrio untuk membolehkan trafik mDNS.3Inkomende regel zodat Citrio mDNS-verkeer toestaat.CRegel om innkommende trafikk for Citrio for

tillate mDNS-trafikk.BRegu

fego mDNS.:Regra de importa

.Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic..Inbound rule for Citrio to allow mDNS traffic.

.lInstallation failed due to unspecified error. If Citrio is currently running, please close it and try again.lInstallation failed due to unspecified error. If Citrio is currently running, please close it and try again.zLa instalaci

rralo e intenta nuevamente.kInstallimine eba

.uAsennus ep

.tInstalacija nije uspjela zbog nepoznate pogre

ajte ponovo.iA telep

jra.oPemasangan gagal karena kesalahan yang tidak diketahui. Jika Citrio sedang berjalan, tutup, lalu ulang kembali.kInstallazione non riuscita a causa di un errore imprecisato. Se Citrio

.kDiegimas nepavyko d

naujo.jInstal

.sPemasangan gagal disebabkan ralat yang tidak dinyatakan. Jika Citrio sedang dijalankan, sila tutup dan cuba semula.

De installatie is mislukt wegens een onbekende fout. Als Citrio momenteel actief is, moet je Citrio sluiten en het opnieuw proberen.pInstalleringen mislyktes p

o especificado. Se o Citrio estiver sendo executado, feche-o e tente novamente.pA instala

o especificado. Se o Citrio estiver em execu

ste znova.rNamestitev ni bila izvedena zaradi nedolo

.rInstallationen misslyckades p

k sedan igen.xUsanidi umeshindwa kwa sababu ya hitilafu isiyojulikana. Ikiwa Citrio inaendesha sasa, tafadhali ifunge na ujaribu tena.x

e tento software nefunguje, odinstalujte Citrio a zkuste to znovu.zComputeren har allerede en nyere version af Citrio. Hvis softwaren ikke virker, skal du afinstallere Citrio og pr

s reciente de Citrio. Si el software no funciona, desinstala Citrio y vuelve a intentarlo.kArvutis on juba Citrioi uuem versioon. Kui tarkvara ei t

.rOvo ra

jra.zKomputer ini sudah memiliki Citrio versi yang lebih anyar. Jika perangkat lunak tidak bekerja, copot Citrio dan coba lagi.uQuesto computer ha gi

nytt.zNa tym komputerze jest ju

ste to znova.uTa ra

lar aplicacions al sistema. Proveu de tornar a executar l'instal

lador com a administrador.kNem

.sYou do not have appropriate rights for system-level installation. Try running the installer again as Administrator.nYou do not have appropriate rights for system-level install. Try running the installer again as Administrator.

n al nivel del sistema. Intenta ejecutar el instalador nuevamente como Administrador.uTeil ei ole s

ajte ponovno pokrenuti program za instalaciju kao administrator.jNincsenek meg a megfelel

.rNeturite reikiam

.rAnda tidak mempunyai hak wajar untuk pemasangan peringkat sistem. Cuba jalankan pemasang semula sebagai Pentadbir.

vel do sistema. Tente executar o instalador novamente como administrador.

vel do sistema. Tente executar o programa de instala

.cNem

vca.qNimate ustreznih pravic za namestitev na ravni sistema. Poskusite znova zagnati namestitveni program kot skrbnik.

.zDu har inte beh

r.uHuna haki zifaazo ili kufanya usakinishaji wa kiwango cha mfumo. Jaribu kutumia kisakinishi kama msimamiaji kompyuta.u

lid. Torneu a baixar Citrio.VArchiv instala

m Citrio znovu.HInstallationsarkivet er beskadiget eller ugyldigt. Download Citrio igen.]Das Installationsarchiv ist besch

.LThe installer archive is corrupted or invalid. Please download Citrio again.LThe installer archive is corrupted or invalid. Please download Citrio again.PEl archivo de instalaci

lido. Vuelve a descargar Citrio.EEl instalador est

lido. Descarga Citrio nuevamente.EInstalleri arhiiv on rikutud v

.7Asennusarkisto on virheellinen. Lataa Citrio uudelleen.PSira o di-wasto ang archive ng installer. Mangyaring i-download muli ang Citrio.oL'archive du programme d'installation est corrompue ou n'est pas valide. Veuillez t

.QArhiva programa za instalaciju o

a. Ponovo preuzmite Citrio.fA telep

t.9Arsip pemasang rusak atau tidak valid. Unduh Citrio lagi.PL'archivio di installazione

.VDiegimo programos archyvas sugadintas arba negalioja. Atsisi

.XInstal

.HArkib pemasang rosak atau tidak sah. Sila muat turun Citrio sekali lagi.\Het archief van het installatieprogramma is beschadigd of ongeldig. Download Citrio opnieuw.FInstallasjonsarkivet er skadet eller ugyldig. Last ned Citrio p

nytt.PArchiwum instalatora jest uszkodzone lub nieprawid

a o download do Citrio novamente.bO arquivo do programa de instala

lido. Transfira novamente o Citrio.YArhiva programului de instalare este deteriorat

.QArch

Citrio znova.SArhiv namestitvenega programa je po

.OArkivet f

r skadat eller ogiltigt. Ladda ned Citrio igen.PKumbukumbu ya kisakinishi imeharibika au ni batili. Tafadhali pakua Citrio tena.N

i torneu-ho a provar.iV syst

m a zkuste to znovu.qDer er registreret en modstridende installation af Citrio i dit system. Du skal afinstallere denne og pr

.`A conflicting installation of Citrio was found on the system. Please uninstall it and try again.`A conflicting installation of Citrio was found on the system. Please uninstall it and try again.hSe ha detectado una instalaci

lala y vuelve a intentarlo.dSe encontr

lala y vuelve a intentarlo.VS

uudelleen.bMay nakitang sumasalungat na pag-install ng Citrio sa system. Paki-uninstall ito at subukang muli.pUne installation de Citrio incompatible a

ajte ponovo.kA Citrio m

jra.NTerjadi konflik pemasangan Citrio pada sistem. Copot pemasangan dan coba lagi.]Nel sistema

.XSistemoje aptikta nesuderinama

.lSist

.\Pemasangan Citrio yang bercanggah telah dijumpai pada sistem. Sila nyahpasang dan cuba lagi.oEr is een conflicterende installatie van Citrio op het systeem gevonden. Verwijder deze en probeer het opnieuw.gDet ble funnet en konfliktskapende installasjon av Citrio p

nytt.sW systemie znaleziono zainstalowan

ste to znova.WV sistemu je bila odkrita namestitev Citrioa v sporu. Odstranite jo in poskusite znova.a

.VDet finns en annan installation av Citrio p

k igen.ZUsakinishi tatanishi wa Citrio ulipatikana kwenye mfumo. Tafadhali uondoe na ujaribu tena.yCitrio

.UNebyla nalezena

ytynyt.5Walang nakitang pag-install ng Citrio upang i-update..Aucune installation de Citrio

galima atnaujinti.BNetika atrasta neviena Citrio instal

o.HNu s-a g

t un error en el sistema operatiu durant la instal

. Torneu a baixar Citrio.OB

opera

m Citrio znovu.QDer opstod en fejl i operativsystemet under installationen. Download Citrio igen.nW

.UAn operating system error occurred during installation. Please download Citrio again.UAn operating system error occurred during installation. Please download Citrio again.kSe ha producido un error de sistema operativo durante el proceso de instalaci

n. Vuelve a descargar Citrio.]Se produjo un error del sistema operativo durante la instalaci

n. Descarga Citrio nuevamente.KInstallimisel ilmnes operatsioonis

.CAsennuksessa ilmeni k

virhe. Lataa Citrio uudelleen.jMay naganap na error sa operating system sa panahon ng pag-install. Mangyaring i-download muli ang Citrio.rUne erreur du syst

ke operativnog sustava tijekom instalacije. Ponovo preuzmite Citrio.YAz oper

jra a Citrioot.UTerjadi kesalahan pada sistem operasi saat pemasangan berlangsung. Unduh Citrio lagi.aDurante l'installazione si

verificato un errore del sistema operativo. Scarica di nuovo Citrio.=

.KDiegiant

vyko operacin

.PInstal

.SRalat sistem pengendalian berlaku semasa pemasangan. Sila muat turun Citrio semula.cEr is tijdens de installatie een fout opgetreden in het besturingssysteem. Download Citrio opnieuw.EDet oppsto en systemfeil under installering. Last ned Citrio p

nytt.OPodczas instalacji wyst

d systemu operacyjnego. Pobierz Citrio ponownie.aOcorreu um erro no sistema operacional durante a instala

XOcorreu um erro no sistema operativo durante a instala

o. Transfira novamente o Citrio.YS-a produs o eroare de sistem de operare

cie sa vyskytla chyba opera

Citrio znova.GNapaka v operacijskem sistemu med namestitvijo. Znova prenesite Citrio.T

.NEtt operativsystemsfel intr

;Citrio Windows Vista

Windows XP

Windows Vista

.ECitrio

.>Windows Vista

?Citrio requereix Windows Vista o Windows XP amb SP2 o superior.MCitrio vy

aduje opera

m Windows Vista nebo Windows XP SP2 nebo vy

.BCitrio kr

ver Windows Vista eller Windows XP med SP2 eller h

jere.IF

r Citrio ist Windows Vista oder Windows XP SP2 oder h

.?Citrio requires Windows Vista or Windows XP with SP2 or higher.?Citrio requires Windows Vista or Windows XP with SP2 or higher.JCitrio est

disponible para Windows Vista o Windows XP con SP2 o superior.RPara usar Citrio Frame, se necesita Windows Vista o Windows XP con SP2 o superior.JCitrio n

uab Windows Vistat v

i Windows XP-d v

.ZCitrio edellytt

on Windows Vista tai Windows XP SP2 tai uudempi.

OKinakailangan ng Citrio ang Windows Vista o Windows XP na may SP2 o mas mataas.OCitrio requiert Windows Vista ou Windows XP avec SP2 ou une version ult

rieure.MCitrio

.ZCitrio zahtijeva sustav Windows Vista ili Windows XP sa servisnim paketom SP2 ili novijim.XA Citrio futtat

hoz Windows Vista, illetve Windows XP SP2 vagy

ges.PCitrio memerlukan Windows Vista atau Windows XP dengan SP2 atau yang lebih baru.ICitrio richiede Windows Vista o Windows XP con SP2 o versioni successive.P

Windows XP SP2

.FCitrio

Windows Vista

Windows XP

su SP2 ar naujesne versija.vP

ma Windows Vista vai Windows XP ar SP2, vai jaun

s versija.cCitrio-

.ZCitrio

.MCitrio memerlukan Windows Vista atau Windows XP dengan SP2 atau lebih tinggi.DVoor Citrio is Windows Vista of Windows XP met SP2 of hoger vereist.BCitrio krever Windows Vista eller Windows XP med SP2 eller h

yere.PCitrio wymaga systemu Windows Vista b

Windows XP z dodatkiem SP2 lub nowszym.BO Citrio requer o Windows Vista ou Windows XP com SP2 ou superior.BO Citrio requer o Windows Vista ou Windows XP com SP2 ou superior.NCitrio necesit

Windows Vista sau Windows XP cu SP2 sau o versiune ulterioar

m Windows Vista alebo Windows XP s bal

m.kZa Citrio potrebujete operacijski sistem Windows Vista ali Windows XP s servisnim paketom SP2 ali novej

vs Windows Vista eller Windows XP med SP2 eller senare.CCitrio inahitaji Windows Vista au Windows XP iliyo na SP2 au zaidi.UWindows Vista

.DCitrio

.CCitrio

QCitrio; Windows Vista veya Windows XP SP2 ya da daha ileri bir s

gerektirir.HCitrio

u Windows Vista ho

c Windows XP c

Windows Vista

.yThe installer couldn't create a temporary directory. Please check for free disk space and permission to install software.yThe installer couldn't create a temporary directory. Please check for free disk space and permission to install software.

El instalador no pudo crear un directorio temporal. Verifique si hay espacio disponible en el disco y cuenta con permiso para instalar software.wInstallija ei suutnud luua ajutist kataloogi. Palun kontrollige vaba kettaruumi ja tarkvara installimise loa olemasolu.e

.xPemasang tidak dapat mencipta direktori sementara. Sila semak ruang cakera kosong dan kebenaran untuk memasang perisian.

lador no ha pogut descomprimir l'arxiu. Torneu a baixar Citrio.RInstala

m Citrio znovu.JInstallationsprogrammet kunne ikke pakke arkivet ud. Download Citrio igen.iDas Installationsprogramm konnte das Archiv nicht dekomprimieren. Bitte laden Sie Citrio erneut herunter.Z

.IThe installer failed to uncompress archive. Please download Citrio again.IThe installer failed to uncompress archive. Please download Citrio again.[El programa de instalaci

n no ha podido descomprimir el archivo. Vuelve a descargar Citrio.JEl instalador no pudo descomprimir el archivo. Descarga Citrio nuevamente.LInstalleril ei

.NAsennusohjelma ei pystynyt purkamaan arkistotiedostoa. Lataa Citrio uudelleen.VNabigong i-uncompress ng installer ang archive. Mangyaring i-download muli ang Citrio.n

.JProgram za instalaciju nije dekomprimirao arhivu. Ponovo preuzmite Citrio.gNem siker

.NDiegimo programai nepavyko i

.SInstal

.LPemasang gagal untuk menyahmampat arkib. Sila muat turun Citrio sekali lagi.QHet installatieprogramma kan het archief niet uitpakken. Download Citrio opnieuw.QInstallasjonsprogrammet kunne ikke dekomprimere arkivet. Last ned Citrio p

nytt.LInstalator nie mo

a o download do Citrio novamente.bHouve uma falha no programa de instala

Citrio znova.KNamestitvenemu programu ni uspelo raz

.RDet gick inte att packa upp arkivet med installationsfilen. Ladda ned Citrio igen.JKisakinishi kilishindwa kufinyuza kumbukumbu. Tafadhali pakua Citrio tena.P

Navegador web

Webov

Webbrowser

Web Browser

Navigateur Web

Web-preglednik

Browser Web

Browser web

Penyemak imbas web

Navegador da Web

Webbl

Web Taray

t web

s un navegador web que executa les p

gines web i les aplicacions a gran velocitat.

Citrio je webov

webov

ejte web bezpe

Citrio er en webbrowser, der k

rer websider og applikationer med lynets hast. Den er hurtig, stabil og brugervenlig. Beskyttelse mod malware og phishing er indbygget i Citrio, s

Citrio ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle l

Citrio is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Citrio.

Citrio es un navegador web que ejecuta p

ginas web y aplicaciones a gran velocidad. Es r

cil de utilizar. Citrio te permite navegar en la Web de forma m

ginas web y aplicaciones con la velocidad de la luz. Es r

cil de usar. Navega por la Web con seguridad y protecci

Ang Citrio ay isang web browser na nagpapatakbo ng mga webpage at application sa bilis ng kidlat. Ito ay mabilis, maaasahan, at madaling gamitin. Mas maingat na mag-browse sa web gamit ang proteksyon ng Citrio laban sa malware at phishing.

Citrio est un navigateur Web qui ex

cute les pages Web et les applications

une vitesse fulgurante. Il est rapide, stable et simple d'utilisation. Naviguez sur le Web en toute s

Citrio je web-preglednik koji munjevitom brzinom prikazuje web-stranice i aplikacije. Brz je, stabilan i jednostavan za upotrebu. Pregledavajte web sigurnije jer je za

mgyorsan futtatja a weboldalakat

Citrio adalah browser web yang menjalankan laman web dan aplikasi dengan kecepatan kilat. Browser ini cepat, stabil, dan mudah digunakan. Jelajahi web lebih aman dengan perlindungan dari perangkat lunak perusak dan phishing yang tertanam di dalam Citrio.

un browser web che esegue le pagine web e le applicazioni alla velocit

-Citrio.xCitrio

.yCitrio

Citrio merupakan penyemak imbas yang mengendalikan laman web dan aplikasi dengan kelajuan sepantas kilat. Citrio cepat, stabil dan mudah digunakan. Semak imbas web lebih selamat dengan perlindungan perisian hasad dan pancingan data terbina dalam Citrio.

Citrio is een webbrowser die webpagina's en applicaties bliksemsnel uitvoert. Citrio is snel, stabiel en eenvoudig in gebruik. Surf veiliger op internet met de in Citrio ingebouwde beveiliging tegen malware en phishing.

um navegador que executa p

ginas e aplicativos da web com alta velocidade.

cil de usar. Navegue na web com mais seguran

um navegador de internet que executa p

ginas Web e aplica

cil de utilizar. Navegue na Web com mais seguran

Citrio este un browser web care ruleaz

pagini web

i pe web

a webov

web bezpe

r en webbl

r webbsidor och appar blixtsnabbt. Den

Citrio, Web sayfalar

ran bir Web taray

sayesinde Web'de daha g

t web ch

c trang web v

t web nhanh,

t web tr

o Citrio.KCitrio

executant actualment. Tanqueu Citrio i torneu-ho a provar.qNelze nainstalovat verzi prohl

Citrio a zkuste to znovu.jKan ikke installere den samme version af Citrio som den, der k

.eCan not install the same Citrio version that is currently running. Please close Citrio and try again.eCan not install the same Citrio version that is currently running. Please close Citrio and try again.xNo se puede instalar la misma versi

ejecutando actualmente. Cierra Citrio y vuelve a intentarlo.nNo es posible instalar la misma versi

.fCitrioista ei voi asentaa versiota, joka on t

uudelleen.pHindi ma-install ang parehong Bersyon ng Citrio na kasalukuyang tumatakbo. Pakisara ang Citrio at subukang muli.

.lNe mo

ajte ponovo.mNem lehet ugyanazt a Citrio-verzi

jra.iTidak dapat memasang Citrio versi yang sama dengan yang sedang Anda jalankan. Tutup Citrio dan coba lagi.eImpossibile installare una versione di Citrio uguale a quella in esecuzione. Chiudi Citrio e riprova.

.sNegalima

.eNevar instal

.kTidak boleh memasang versi Citrio yang sama dengan yang sedang dijalankan. Sila tutup Citrio dan cuba lagi.qKan niet dezelfde Citrio-versie installeren, omdat deze versie nu actief is. Sluit Citrio en probeer het opnieuw.WKan ikke installere den samme Citrio-versjonen som kj

nytt.iNie mo

buj ponownie.lN

sendo executada. Feche o Citrio e tente novamente.sN

atualmente em execu

o. Feche o Citrio e tente novamente.nNu se poate instala aceea

ste to znova.eNi mogo

.iDet g

k igen.pHaiwezi kusakinisha toleo sawia la Citrio ambalo linaendeshwa hivi sasa. Tafadhali funga Citrio na ujaribu tena.a

ha fallat a causa d'un error no especificat. Torneu a baixar Citrio.HInstalace se z nezn

m Citrio znovu.SInstallationen mislykkedes p

.KInstallation failed due to unspecified error. Please download Citrio again.KInstallation failed due to unspecified error. Please download Citrio again.WLa instalaci

n ha fallado debido a un error no especificado. Vuelve a descargar Citrio.QLa instalaci

debido a un error no especificado. Descarga Citrio otra vez.HInstallimine eba

.NAsennus ep

.JInstalacija nije uspjela zbog nepoznate pogre

jra a Citrioot.KPemasangan gagal karena kesalahan yang tidak ditentukan. Unduh Citrio lagi.UInstallazione non riuscita a causa di un errore imprecisato. Scarica di nuovo Citrio.5

.JNepavyko

.UInstal

.WPemasangan gagal disebabkan ralat yang tidak dinyatakan. Sila muat turun semula Citrio.MDe installatie is mislukt wegens een onbekende fout. Download Citrio opnieuw.SInstalleringen mislyktes p

a o download do Citrio novamente.UA instala

o especificado. Transfira novamente o Citrio .SInstalarea nu a reu

znova.FNamestitev ni uspela zaradi nenavedene napake. Znova prenesite Citrio.H

.MInstallationen misslyckades p

nt fel. Ladda ned Citrio igen.YUsakinishaji ulishindwa kwa sababu ya hitilafu isiyobainika. Tafadhali pakua Citrio tena.Y

citrio_50.0.2661.271_1.exe_328:

.text

`.data

.idata

@.rsrc

@.reloc

c:\jenkins\workspace\Citrio-Dev-Clone\browser\src\out\Release\mini_installer.exe.pdb

RegCloseKey

RegOpenKeyExW

ADVAPI32.dll

GetProcessHeap

KERNEL32.dll

SHELL32.dll

setup.exe

X<.zcM7

HT.hS

uZ'z.aH

R,ß

.sqh}MD

t4`%u^

UW%u5

/P?%F

%dNS3

.RUkF

.Oh$1

.ayg(

LR.fbZ

)L=Y.eD

F"%xk.

h*ß

^*.gc!

_/.XA

'.JDE

XÜ,,

@D9%dr-!`b

CMdM C

S.xBu

J?.VP

;t..YD

1H.Wk

.Xc"1I

,sr.lu

u.Sjk

`ÞhElEpEtExE|E

!3.fyx

1Y%xP

0%DIb

t<.KV

<i.bu

-Ñio

v'.hz

%u_iW6

P%Xm2X

~_.oZ

<%S0X

Mh.BF

L$".CZy

/EL.cq

XN..NK1

z.QF)

.XHV{

.du::

.rF*TG

Dq{sSh`

T.oO:

%&^%x

4.hZ(

="}uydl}%uk

us.oK

.vI83

 1x%Fp

k.wr[

!(k) .uW

jE.IFqk6

oD%f}

Zl%4u

.tp@z(WXi(

i%XW9]

U0%xK

Yr%x%

%SikDQw*

<.org

lg*.GO

N`.HX6

.Th"up

>Ya.aN

{üDPJ

;.sR9

uD.ay

;%F(^

wd [h.%u3

.sHw|

EA%fW

DlM.eE

/.zpA

I4-f}{kIU

 mSG2

L.Ef{

ehk%c

l/.AZ

`j%CP{OU

'Q.VlC<0

FWUD%U

k.ZT[

yWZ.Dh

Q.N,$kS.co

.ow",U

.jyjI

z%uc%

o%X_R

%s[?Eq

T.uEkM

8K.LHX]

)KEy}]`\qU

NLxH W.Hp<G

O5~

%dmT!*

O.rX13

dhK%Xb

B1%SE)

/%4X~u81

W_F%C

8.FOB

%D"hU

H.qbR

es.dJ]

-g%sV

M.ts8

.fXQy#

Sb?.Snw

~.GT<

N.nv\

>4D$I

Bb.ws

;s?H.HX

25 '@[@=

{.hUT

ev.SH

#o.AE

JZ%uE&

ae.nf

v 0%d@f

%8uq!

.RU-;k

D(.bK

'.VW,

B<.Zx

h>.ds

Wi6.kY6

V-Td}k>$

%S-'s

.pmJ-

M;\%d#*

@.Rsn

6SO<k)$%F

.Lp84

39e-p}

.wLYY

3.IG9L

b"[.Ap

j"`

"X.La

7pDq.GA'

Rey(}

~0%FV

-dx%Fm

K.Ak]

C.Sfk

GÉ.

cMD(Is

$*.WU

wEbL

.kp34

mM-Cn}

q.Zj\

B*7j%C

.R.pf

>.zJmD

<OO.nG

A2%SL.

a:%dr0

N(t:.zf

.jlc'

t5J%fx

M.WeV

udpr

".Ts7x

.BP<-

8~L%SZ

E*5E%S

i6.gAY0 

v.HW:

8Q.He

1.dTk

:K.NX*4]

t.Vq~

R'.iG

%Sw@W|n

9.cH%

dl.wI\

20.hRl(

%uYX?

.mE=N

i.MFF

.Sr[r(

-uHAs}

.clpuq

p)%4sno

.yQNINM4

'Lh%F

a%Sok

.ROpT

-}~URL

P%U&8

<%X'\`

P.mw\o

_6!<%s

[.KI=

D<.Yo

;T%sF

~O{cCRT

.mmG;e 

g%Uu`

!o.OD

%s2pd$

%uK|s

%%DH5

B.eW5CE

HT[.QoG

/.qTR

cRtS<

"n.wA

$X.Qs

y.fl/

NY%Dj

%.pU7

FG<.hIq

.BV`{

{9.iG

/aG4.En

crTU

Q(.vFTI

X%u{P

f.xTX

O:%C_

X/%XmbU#

.Pe3q

F0|075.OG]

o4%F#

H"A %D

KL%cj

=v8

@c.RJ

z".qO

.Ofqz

HŸxub

ZL) %x}

M@Ü

<.uc_

%ua^sM

%XzzG

g.KZg

z.T

S.LUrZ

Ý@T~

%F*8<2 i

r.JrxG

-ngs}G

t.hL){

w?.tT

@v{ %D

A.BO)

T.xLI

.tIU{

.vg&Sg

.VpC=

.bBpM

_.SQ<;

{\.Cc

w.kp{

V^1.Hapt

e..vV

.ub/_

.XG:w

_.lI8

Fz^.Tk

%UZ'%1

N-.uXk

G-c}a

}.okyW

446#/%U

O0.jr

>K,.Mn

fG.ye

.Gn?jf

]7%f@%

W.ynQ

(":,.Or" 

P<

H'B.br

.BDMh {

wEBN{

$.awe

%f^f"

W}.oF

?.bKs

&,ß

Dz.Bk

4].Tr

%S~}gY

sshjfk

]p.Xs

w%x_:*

%Dh=/

.lg"/

.bID}

)`G-pKQ}

c%F~x <Tw

.uhir%

|%STv}

[email protected]

WS>f(.ef#>

.)ot1.CC

B .CK

kmcQ.wQG

eB.Fl

p.Oi{-@!

Y%C$/

7.Ez5

Nc%C.

.fN4$

Y%UKM

5.uc5o

; .QjT|C

&.McU

.BN`Q

!'>%Xd

.MdxL

M.nMc

.hk"2

\.LS;1

7D&.Zj)07d

.uA{vL

zj.wV

pyh,x.da

j.keO

<.NQ-

.nO8=[q-

G4.dFgI%

CRtu

A=.Xp

'%4x)

.fPa>*8.

c;.VY

#IÄ

7.NXB

.mU=F

ex.Cg

3-%.TgG;

-KiWeB

.wvzn

b%Xn\

H^%f=]

g.srf

.QYc~

?U(%f

%F,loU

-M}&G

%C}!p

xae.NW

U%.LWS

A(.vBi

m.xG-

{.uRo

#J.Vn

#5*.BZ9c

z.SU5

a×{

.Xw(/

2HNm:%ubD0q

%xM{O

B.RkZ

p.SmF

a2%1x

o.KgUh,

@.TpM~

Y%X(6c

%5sLr

S)&-l.gZvA

%dkkE}

y.vg\-

%DR.6I

[.bsz

Cp%s`<

.KI=x

GNÀ

%CZkv

"hD%u

.Sp"r

8.cv9

o%X_g

\_!`65>!

%[email protected]

%S'}w

fk(u%x

ro.Ff

sDE%d@

.Bi-K

j.xk%

eA%CS

n .OU.

.ZDmO

d5{%X

[T÷

Fj.KX

H)@q.Wyq

.Ijq@

.dZu*

=I.vo

 Z*%dS

|%S6Lo

8p.WI

.rxU9

E_Ÿ

7&.Ok"

`.Pv)

J.aQZ

.pHYH

]).rc

.SG;x_

Ts4qn%So

L):.tG

|]4 ,[4*

n(.AA

,R .Xr

%d`a|

PP.Ep

B2=%Cg

O-9}f

tO8.OU r

1.hA*

%cY ^

y.PDe

"K.hM

6}.uu

P`.BI

dO.iB

-.hf=

2=Q%x

"%X34R

.bm>]

G&s%U

.wS}a

.Ju4$

T.iwI}

ge.aU 

|%u`Ts?-

lz.GL

tMl-\%S

jW%xG

t%XY?

`%x:4

t/X%F

aEÞf

SShCyAB

18_

5mM.bU

udpE$S

.TCxD

QZ.peu|p 

.qPn5

L $%Xyt

.LA0s

.jxx-

xH.qB

$.sN>

hd;B.NSo^

~%x,(sG

m.Qau~*

{6_%x

.lk|p

4WEB}

s.ow7

.fGci{@G

%S<V}

tiJ.Wt

Kwo.CX

]<.FN

.gRj2

Xz.Bd

@OWb

ng.)%X

@.vh/

WI%X_

?_%sB=}

E%C`7

W.TOp

'%fz~G

vp.lK

ow.Oba

.mgp]M>

<%2So0

.As2U

q3%X=\

ym.WFO^

[X.AG

A.yG/

z%DU#

keY\=

@{.NQ

nZ%dY

Xy.Fj

7On%d

\4.FX/

]H.Djy*~v

%SzyW 

,.ku:u

%x0&:

bgU.qo

.iNik

WP.yR%.

{.sJq

6.VyJ-

F.bMmZ

$#%fkb]

".nLB

%FR2v

%5s9(

:rrC:R.ck

.oGlu

<.%S8

V.Jmd%

ti,.Au1

Xb%X=#

V.UTk

-w.RQT

eR}.Dy=

W %dO

.OZz9

2!.Uq

%xa%r

|]L%x

%s>[a

e.pXR

QP.XC

NvVJG%su

`.aylYjx

KÈ;r

G%uC6

K.mTQ

{.ep7`

;q.eO

<"%SA

/%U"c1j

k}<.yDzm8

Ugj,.DG

#BK.SW

.Jgh'

BtsFP

&Nw%s

^W%XH

P%U_mB

cMd/G#k

%Cw`zPgwT

%Cn{K

y%DZ\C

6%uMg

McmD0

.kWngu(

FTpK_

.hf/CC

.U$.GM/

W.GfP

wR%1ux

.Pw:Yp

c%C!D

"":<29)[

|cF.TLq

=T%C!

wsr.sNh

%fpb1

.yhma

KsM.DQ

~.FGBaTf-T.)@'s

,Èe

 .pnhW

R^%Cya

-m}dA

:.fZx

,,d.ve

dl%fq-

.pX1jxc

tM&z"Ö

%F"IB

|%cH2

z.QEA

.yz}k

s<

d'E}|.mF

}C %f

*%S'K=

Yp%d-

ODi.DL

H](DZ.kX

Ð*B

7%cN@

k.%C#T

FtPr

w<=

%D*E H95

18l%u!b

.PWR/

6n.%D

Si .IH

[email protected]

os.nD'P

%u MH%

pi%4U.y|J

.raXOG

.ptDv:-w,

O_l.kK

%f(Ul

s4.wB

C.Mo3.:

[%x~1RK

iX#%c/

..KI$

djS.Pw

.aMen

E2%Cqnn 9

.ZJ}W

{..Bt

Z%s$".~C]

%X3ky,

%D=pMp

%usb=

[CWeb)'

y.RGN

.wqEa

n^.ViR

q_!%D

.WKc5:

`%f{U

.LZ_vGC

%x6}/-zL

R%8uw

I O'X .pX

6y.xS

x|NM%d

<~.ok

/*1[/.q.vQ

k-CGZ}

n).Ix^

r.Yt[(

O.cnB 7

H.xEqxQUU

.gyWv

l.hEG

{54=.sv

%fz`q

5k^.Za

_s.VX

w.gY|

;Iy%U

%C)G(

s .Et!

Gosql

vI)eO}.xj

\%S!y

`MI*.vf

%f pQ

.jnU;S

%S|K?

1.sXJ

`.YQd

kE.Ht

.Tp.P

8e/.gEJ

F{%cYi

d%D;hHr

%xT06]B0

@%cYN

dJw.pC

8b.KUI<

*%'5%f

%Uwu;

x-m}v

B3.SI*

.bs2^.G

r.Cs;H-

bvA%X

!-mL}c

B-b}"O

8.gdl

(.SO'

]%C^f

:P.qru

?1a%U

.pYlaF<d

o%X4~

?Np%x ;YF

k|%szia

.aNZWd

.yAi>x

A p.ch

e.uFM

*FF.TB

~%.GPg)

*v%UX

3\Ü!

i`%u$

A.Grgwv

<.ck&

-.lN$

>#a%u

.uZPK

\%s%1`ouN

LV.yL

yp.ay

bP0%fk

u%x#9

@.iak

-F}4l

pgt}%CI|r

iF9%s%

iG%f]~__}

.qtDQ

ZVÏ

udpSg

[b%S^

hH$.Nh3

.zc$OvD

uU%x4Ld

.VO5AB

z.Si)3Y

$.hND

D%x/B

%3U%]

xr.kD(

kIMbuRl-

H.NgQ

.mf#&

)w%S*}

)M.IR

~.ZWm

1`p.UQ

y0t.VU

M.Sy]

${b-M$Im%U

U-H}H

K`%XMqA"

.fG[f

{![f3L

0PL.YKi'

3nsC.fhZf

qLk.jQ

d.JMhw

n.ik=

1Oax.Ai

Jo``?%C

.MGH#D

_.eao

Rh%D'

z.SG>

y6%uI

.DGD3

H.ec-

>.xb2

.pPcww

FQbu%SS

Xj%C.I

D%F(l5

.SzNg

d)R.Sy

1.eYi7

S1%u%;

.qMNc

C|.Dr

*.VIS

=`BW

F|.VC

0r6%F

.PO1_

.IE8 N

Xr%Sq

.tz7!

,%sI[

%3s8^

V×d

%u"3K.

fU@%F

1.ieV

.cD316

.HG0v

$d.fz

7I]1s.DM!

(.grS

(%X;v}y

:p%DQ2n\

O|E

.OR0d8

`Im%f

[email protected]/

].AY8

*f.iB/

Kb.zC(>

-uj}z%

y.An]T*t

1B.IQ

0z.Ql0

%X\T;{

.asGVj

.CP}-

u?-%X

b%s>C

m.AJ3

[email protected]!

...LO]

>;u%D*g

uZ%D!

mmr.KP%

.TzN*

|ur'd%F

&\'9=(/6

%d{{E

Fm9c%D

[email protected]

|.wlp

Q.prf

cC f%FlR

f.QqjE8

xA%Uc1v|a

.su`=

.jWso1q

/.=%d\

& .NJa

JY%U3

BuxSShx

s(\Jx].RQ(!

ZÏQ}

D|U%S

B"6.wG

6zG%C

\P/%D

N.Wl[

gw.jx

1.trb

6.TAJh

!5%xH

z {>%u

wt-ir}

5^CrT

w.eG2O@X

gYAß

s.bXaNS

!p.FRL

'(.yV

W%up0

r.fJu

.srDC

L4%xs

YdM%fU

*.MxA

tcpV

r.tEa

Jk#

M}J%D^&pb

.FcM4BF

WM.Np

-Ay}Yop

$=Z.%CM

m%Cv8

.Vu]K

%ct9!~1

z%x=Qj

>.ij[

%.DI]

K}%X;j

%XL{rSf<

/~/.Ea

-4}I4

!W.Cpq

y).Wt0p

%l%F=

~UÜ

9.rFf

z.OYJVi

3yN.kF

]d.jBZ

'.TCxx

.tP&=

?%D)p

^]-%F

-wY8.kv

ZQ.jn

y.aCWr

N.fbH% &=

.HV-9

Ja%u:

eFh?%XW

;V~5.Ud

.eH(g@

ÆxdYY

s.SG~F

JY.at

.TNL=<`P[)

k\K%s.

-EÔ

%x0GaE

S.Fj_R

QUyB.XJ

m.ae,

%f Fx

>i.FL

q .Qo

.FnW.L

.Vm/i

cH6'k.El

4.hRk

h.seT

(?.Og

9{.wZ

,Kt%f

.fRA3

~M]p%s

.Ui~2

%dlp*

/Hu%D

ib.gt$

H.fRA\

zxm%x

R.sNS

$ Î

@CSo?.cq

<U%D}

i%C)-~

9%C:9{!

^a.vD

.Ylo?

o"0%F

6C.AF6

aY:.DB

ü<1?

-%s>;eq;

xsiK.jP

e2.KSl2

5.Jp7xK

%GR.cP~

g1*%f,

?.Jr"

@KB.sc

-.GGr

P0.Fj

a.dWf

%U,mp5

|.bze

.vX3|

.tN",

%utAj

m!.eJR

.uTpz

>.rc*z

$*.*m

%D@oS

:Ì?

;.ySr

eh%U3

9K;E%Fs

D.wY/

l%D@^

5.UxGR

D.tRX5

_.DF\

5Qr%C

C.rlGA

*%SFl

*N.gQ

N.MIb

vp&Y<*c%D

,%c'P

b0.eti

,~.Eo.;

.iix~

Vd.AO

?.KR8bi

Y%x`jI

CCIy-?%u

JG.QB

M<ðx

%U]Zhj/

.hhD7

bQ.vH[Kl

L.rOn}

(.cGb

`L.ra

Ps %f

JV%uP1P^

b?.BE

$".pq4d

n%]H%F

:__.vI

.qw~^

(..fBn

86X.qY

.AN^`#

%d@f]

Zj%SZ

_ÞU

.mL> 2

W\ .Ph

4n_S%d

wc%X3

B@? a.th

6%xT.(\r

K5.Fkp*

.fQiE

A4L`M2.PQ

.Lg/:

vÿMWI9

uD.QI

.ssb<

|.JDU

%FYQ2(

.mVK5

X.HcN

*.ol1h

.ZD"O$-

[-8}ReS

B%F>;

k:\qz&P

j%u%#o

.h.PV

L0.vJ 

N.%X$dY9w<

!sSN%d

AT%7U

.-r}`

46.Xtd

"S.aY:?C

xd.GdQ

.sJTu

Mi%U4t

H%SI8

g.DlP

aSq%f

.qpRC

NKEY

A.kVN

M.kg3

CG%FY

.MOKQ0

r.vYp

%sPH-Z

$%.X}

.Oav41

l.lX3i c

rg.rnd

.Qe*|>

.Ls6.

.oe >

.%CVs

OL6.Jx4

Vc.Gi$

%xla-j

s.ggm

>P.ud.@

QTj.XF7

%se]*

F%Fq@

R.ewP

e<c.kx

7L.dD

DJR.ka

.wM_g

F%5Xw

)&.ZW

%c] k

.XNRLb

Oy6CrTvI

.IOLIP

o|.Mg

%X*]~

!7G%S

uU.un)xj

T6.Au

=.HC*c

.rX_Gb

y4.ua

.ACFA

R3.Yh

u.jF]

UR.Oq

.DT$TkNH

H.qQKf

%UR=yL

B.nQRT\

\o.FO

!.grS

XY%sD2

.md9`f

.di0"

.DrFQ

@d%dZ

ð'o

S].cHEN

}Ú-'

9B.Gc

.sECiu

i@g

.tl|R

J.SgkDz

9k%x0K[|

Fyx%d

~R(U5-N}[e

.BvmD

[9eXE&

;o.Wh

81%uv

AH%D<Gi

Pg.WI9

[/%7S

D-ut}{>

pR.CsHU

.WUB&N_

zvF.ua

Vd.RE

AwrS%c

.No]\7*

.egB~

pE.Ji

/t%Ux

~f[%D

;.Ts6d

`/.YlA

%Uw?f

i.Hq]6

.DQ8X/

J-!.ec

I0E.Yo

|/E4.Ot

jQ.jQ 

|Øn

.RIpL

u%s0 =

`?{m.Bd

B%SDO

.zT"4

&.HM4

hWuO

.xaM!L

7.JIZ

-W.xx

^BÛ

A@h%D~

.xesu

.NI|k

?g%.yD

cMbQ%D

oP%%Cl

:Zi'.Fd

j%X$;x

`‡Cq(

NC@%u

E.asg|

qx.Xf

N6N%X=

e0sIsx|#%f

y6W%C

Þ_}IW

oV.&%s

|dSsh

Pl.Av

P.Ssg

.RUJE

W.ypJ

8..Ub

DdÙ{

.Jq_T3

.DOJK

c'.SU

)%2x.

k[.Ff

0.edfT?y

00uDp

%sB4t

}.jd`

 .zU?

Q.DgZ

[rP%fT

uq@og

yfS~%U

\7%QYvQ.RL

J.KPh

3fm%D

,/.oiB~

X?%ShHm

r.gyb

%Xz`F

|IyQ.lDS

1.Xf>

Y.sd>

52%dUI!

J.gxK

T^6~.BeXo

-6.Ni

6.eJE

m>SsH

c;.aZ

.RWlf

%f=%m1

?C,CRt

vR%fgU

4.IDK|

;jbl~.vU

.YljS

%Xf`X

%dwv{UR

{a-ZS}

-T}%D"

q.qmH

7) `%u

t.cP<K

q%F[7

DtR.qp

%Dyx_Y

.DyTh

 of

x-K}c

?~%u<

q.XPIU

Y(.GI

U7"%5x

:N*%f

B(.Lu

.Tn@}

~X%d,

crv-8f}

.Hg*"

_Y.wx

Uh>-7}

&.NDZTR5

,r".CpADv

.qb9nV

m$s.PR

O.hVV

e$Ÿ

_&.Js3

bK.Jn

i[.dxV

vp%DR

G.NvNh

)r.Rr

p1.gkO

os.RtK

W'$.pS

Cq%cQg

.SOH&

^0.IX

u x-%D'

.Wr9s

).gO.F&z

m.mxn|

.Buu|

dYR .GU

k.Ri>D

|úR

GW.Sz2

:.lp^

}"1J

hr%FW

.Br|/)

#i.Hb]

g.wv|`

qm.Nu

.km3V^=Q

h02Q`.zF

}5%c 

%X#k2

0P^%X

=%x.J

t_y$%U

b%Xz#@/

,~.jM(

Q'%Ug

d.vaC

8%Xat

F.ZX!

%OQ.gU

&]%1S

/ Q\%X mM

ÊUE 

ÏK1

bv/.WW

>[%DK

.PcxF

%C>u 1OW7)

ql1O.eM

%F}RX

)C.uB

,su.gG

.qrY!.%8]

Ht%Xy

j.${,%s

d1.TC

M2.zb

ri.hf=t

h%6xu

2%URT

V.?|%sSx

:D4.RW

%1.Wz

%Dva"

uRLu

bh%x,El

T%CU?Kg

AR:%Dtv1E

t%sVo

#i.uH

%Ch.M

.laQmQ

.jfG!'

k.kM&

%cU80WA

%Uk0%>;

d.EmY

-5%x=4

.jFW6

kHN%8xh

%Upcfj

~%Ut3o

K .Zq

6v.eLD

.nXO}

#[2%d

L-2Gs}

DÔ@

@%d"j9

k.rZs

%cu#I

.B^.Np#

%uEVo`i 

$:.et

-X.kJ

.mq&.7

T%u.%

E.DsJ

e-.ap

*:.Bdj

.ZX 6

e/dL{wlZ.HK

s.tpp

!.Cdpn

.DCfb'

,3-=]`66

.bgjw\

b#.NR

y`.WH,

-dc}Q/

LH%x.

(Nu%D{

4/.yhr

H %uU

jE2%D

.Ek9Q0

crtEx

A1@%CG

MW%Ciy

.Gla"(3

~HtF>TET%fyo

'fTPA%`

s^%U"

C1%s/

.Iv!V

F]ct.eZ

r.wXU

<ZB.pa

DO9 U|

!&!y qoi%X

%SbzN

%S*Ah*M

`.dL5

.ppe[?

O2p>.FllQ

gw.WN

.pwW.)dRZW

.dor!

@Yp%F

-.DO`P

A%x6F

@>.qGI

O<$a.qr

#T.ot

%fRLI

Kk-F}

j.Hg6N_r1

f8n%dG

@Z@-%D@

`%x3oxA

PBMc(V%um

w".av

5.dYgCA

.rYIh

.koZK__/

$.kq'

rJ.Gy

Bqt%cO

GEG%5S

<.SWP1P

MG.yZ

"yo%U

<cMDk

.Ff#<j

T?%u|q

.uUHH

%sQA 

0_9`( %]

:1*.\.gw

.rk}c

n~?.qgpbpo

aq.fyLt;

M)'vy%Cr

.BH8J

c9.vG

vsy%U

E:`#%f&

LdS.da

nKD:.fZo

%D~M9

}kL.yg

w=.LE

<.EbR

b"%X0

:cRtlN

M"Ì

6uMo%.jlB

.|.DFI

K%Dv_

.kJmi

9t%5S

.jHdX

.ZfJc

.jO&\"L&x

.tb{G

s.bs~

.Fn,Agz/#OUv

<.xd}G

.jx}D

.qDwz

spc.ft

r'R%d

]%f)L`Db

!.zU(eGOWw

X%x{KRw

?T^EyH.KO

y<.SD

?CtcP

.Bh` Noy

X.KV<

%.OS0

aE%Ug

Y>O.Rp

I.Xy`

.oR2B

.vlQS

XXo%so

-QT;.mw

u&.Geh

iM%d 

4-h}x

w-i}$

Q.El3

mJfTP

7.uY:

uiq%X

`V.XV

5n;%U

V:.Kz

Cn.mZ

Jb.ung

.mUI1

%S`t$

"c.oL

tn%ub

!|ÿp

E1.Di=,

.KsgG

8R.rM:y

.TKjT9

;.XQq9

7D.cV/W<

f.QbA

'K.uC

.inK2

EÖp

.oqJO

}%xi]R

mnG.Et:

5k:.Vk

c?

b.UJi

k%.ox`

}f~F~.hj:tv

'.xT3

PTM%uX

.gglM

.Gf`Mv

mbW.jw^LK

Q%xx*

-.Rbz

{)%xl~

%xhMv

%c(M)

.Aa=6

v .re

`ij.zN

%S]S*

%Fgh;

~#x%X#)

.AE.\

.yEYOb

.UROu

%SEON

aV%x1

)xþ

.Ykxg

j.Bm1

OaÏ d

.HzFt

&.Rl-Y

't%cM|u

8!%SAB

l1w4sShm

v6.NZ

]TSFl

=v|?

kSsht,5f

u.wese1G

-rp%x|37sA

#&%sK

.Yetm_

A.DNN

-K}M[

c].Oi

.JZp4

J.MQ6

.XR,{a

afTp

y.bt.

f%Xq!j

%uT7N;

s~

JP.hH

.wAzAbv

%SwU/

,%sFqV

.wfKL

8:.xZ

%sbf:d

%fq%2

iA~Y8%X

[-,%U

Wú|

dwf%x

U.Fj"

0.1%xB

?%cy`

Fsql

d.aD`

1`%fRP

H&%.c

.BZ</

..zB@

-.aK"

y.yz^

o.Nm}

q$.BN

rY.mI

;{.gn5

3:y%D

N5?%chhzU

HbÉ|

.qx4m

.fietD

n.EgN

.aXE7

-kq3}

u%XyU

F.We3@

[<.Xt:5

l]ß

jN& E%F

.Upi>R

oU{%x'

GsQL

5V.nY

i?sNM.lL

%u'^j

ho.Yi

=X?.IAM

C1.aT

P.kEd5:

OZ.HV

.gU^W]@

{ Ssh

N?[%F

(R6%F

4N.un

#.Dcx

.Ad:p

]9wN.Do

KEyC

%U*('`

7.ANM

-C}s0

.OÏ

k=.BK

YE%C\

ghuoY9

"SW%x

.eggV

,8%.ly\

tUKeY

2;c.oS

Ku3%x

9%C&G

E).ja

hH#UB%S9=i%

.FSE\[&

S~%Dvr

.QA,^

s#B.VQ

.AU:8

&.jUG

(.SP4

.WI;{

h%u~S

8ZiHC.Am

N*H.FO!

LrX%U`j

?/].yg

d77C.Aw

:.xjx)BG

6 .ODvgT*

Rn.nk:

3%1.YX}]

.hXi$

RA05^ H.kq

BuJI.ds

wy:CRTw

b#ao%f

C<US%d

[%Sw'

m#?.ubH

-Xp}>

%Dj69

.sT^$

.KXA)}

%d,h/Z-W

K |%x

Xv{%CUz,

.KkY(

m%cJT

Lf{%x

5%.xB

t%S,S9

mSGb

o.JgA

\.yZJ

12s%D

k%fx=

*.wYGHt

.Oa,V

.)G-%d

;q%c}

.xD%u

.tC>,

e.nQ$>

%dW3i

#CrT;

N.LejZ^5

:[%c{

.rOlT^

%xSnJ

e%Ub<

 .lrm

.bf'KR"

(.RO>

%x8|I

%dZMGw

&-.Bl

`%xq\RN

%clT,

K%ui/J

cu.fD#

 )gX%f

Bh.vP

.PWD*

=yM%F

0|.eXOC

.Fbch.

0Xp/%u

S .FaSE

%Dn5A

.EU.IAuB

.JO#G

JB\3.Pi

.eDlc).

uDPqS=

CN%.x

3.naH<

t.IB_

R}.TRZ

M&.XR

.jmwv

ECmD-

Sql8k

W.Byl

nu%x1.OA[

A).TP

.GkxU

|)Q%F

@%s8f

-9-NE}

HX%cR

0#V%x

b8<%4u

N 4%C

~NSQl

D{i.UAK

\\s.CqX

wVx>.Ko

.fVk1

.gIWk

.jb1A&

N%d}fz

|"]2\/1(

Oq[H.rC

2.jpL

y.YB"

.AqhzQ

W5-hsi}f

].fm?e

ß]Ak

1.LF|

,A%C,2u

W/%Sdk" 

wB.dA

.XIB<

3h.pD

^M%c&

.lt/i

.YGd-

1%*%S

O.bR{

8F.XA

"*C%5Sz

 [%se

V.dOO

NE.Cmd

".cGG-

ÝE.]

s.jgD

.mw#Z/

K:\f>

.7e5.Qz

[email protected]

sPq5:.ebmRN

I.BNf

BCRt

w_.pW

ga}SSh[XO>L

.ga] L

.vou?@

.Gf `

%UyhT

Q%dxLB

amK?_.fQ

D5{%f

n9ú1

?f.FW

%UO X

)E.vU

oX9.uhr2

Ë~Y

&f.vp

.tP{-

M.vsD

T.cF>

0.Pv@

.hu1P

-IWP}-

jcHf.Cw

V`.kME

5Z.Hm

ËMX

E%sA^U:M

.Gz\Jf

%UVe=HY

@.zSL

6f.dq4

]N.hi

G\.sEHVPk

.PP5<

s.rCd

:.bNHm

^qt~x%u

0~.bu_h

8".kz#

.oUr7

_mn%cg

B&L< %x

.TS](

fT9÷Q

O.rt;

CNi.sE

f.KNj

BH.oa=u

&0%xC{

.mx}N

!%X/O'

C$\.PR

{v}u.JF

%uoEo

R!.bd

UDpR

v'.YS

SWRÿ

%UC@DwFq

4.CI&

.Egk9z{

%SqSd

.gg?tz

4$V?P.YJ

`.grL

{*.uJ

Jh.Tm

 sGt-f}~

H]r.nI

R=.KG

^p.on

P}.ky

)%fxI

W&%Fv

]õlF5S

.ZvJi

n-{.CW

R.co\

%X{ p$

.CKky

M5.Vo6

JmsG$

J4.hE

.hxtD

m.ua}

`06%X

B.YEg

n.%F&

.SV!=\

%X6YI

yS.Bd

.Nu^ @#

D%~Ñ

;^.Ss

-E} _#

.cs_J

DJ>!%S.

f=h.wd

}LY..YQ

%.bRT

mm?%U

sP0.Bx7Z

:%1m%SBN

F[.kO

lx.jG

P.Tvb

,6<`^];\

.OVgI

.bH]\

ñ*#

V-V}O

3<dÖ

Q>.SW^

[email protected]

"S.RI

*/.Ad

.jl ]R

uþxM

Kx).Bp

.dI\N%

!.MB;

cZH..sH

.Û|

2.dKX

k %UZ

gE.MQ{

.Bb3sh

aO.wW

a..vF

S.cx;v

fXc%xc2

.fJ8H

9%f JTyh

%SX}'>S

o.DM,

.cZH3

m.UI;5j

d.qI#

-8y%s

CCL%F,

-XA}3

{.FOb

HFd%d-

JY%sb

.IN5'b

.ntj?

c~U%X

.VS%c

t.ow_

".aWzW,-L"k

[%Cso

(.zMs9 p

Rd.JZ7?-

-&M%f

\ýu

_.Im9

.vTb 

(/mOy.dOC(

`;H)X.DQ|]?

J.Ub$

.UVJ"-

!6.pjLU

"JBg.GA

%:U.VY

=m.by

|W"^%d(j

%CtxgS

Wu.kp

%Q&%F<c:

w.JX.

8%xNm[

ub.Lo

<.mmeJ)0d

8rm.PU

?"$.WQ

:U.zLF

NCH%u

I%SRm

].LKL

-0}][

JP.gD

L!.Ah

.S.kT

.%XH3

=(%d 

r.jWs

Vj.TK

.yNI-

.XP_?

%xU8uS

g.xwt

H.RQ@

lv.RNn\|

.py 0U

;-.fJ

n7.Dz!

wVl.QfF

cC1Fk%F

0[N%d

$"#%D

N^.qe I

z0.Kl

V-Au}

zÉ^9

.JOtX

H.YkVo

.Ljd*

yz^.XN

Z.miqp

Xv.dx

.IgQq

?(}e

rgq.Eh

1=ü

|.mRCH

DS;%S

,Å`

&h3.EK

x.UUn

PM.lp

OQ.Mcc

q.xWF

%froc?

f%s`Z

.iU_s`:

u%?%f

7h~.Fn

DZU%c

S.owI

%cU4Y

|.Cx$b

yH.UU

-/p1Fp

3z.AQ

a}>.qY)

*%CzsR

ZTK)E%F

}.jWJ

.ej]'0Cg

f.fTOk

s.Yj[

N`'.iOkJ

p<.Qv

.tda{H

%cOb{pu

gc5%X

%s6:1

c;.kwz&

fh

^%SA2

f.eU4L6

.ZWkh

$?-G}?

K.umI

Od.Bi

\%f{?v

qrE37.SI%Q

jDq%c

T<n.Ow

C?.yU

(~C%d

Ar%S^

%%X\=

.tAB;

@a.um

}k.pT

.MErkr)

{\.PHYzZ

.ym=! \

dS.WX

%S_!o

T.OGg

.%4x_

CT<%CV

u_?>.Au

b<.At

C_r%S

.FJ>X

\\[88;!%

~.GAi

M.Re%N

%Sl(K

.se,M

AH.RF

`.Dk6||

la.cD xU

j.Zi 

'%c<g

#O.Sy

[email protected]

e%XC>

'v.am

%cj7-N-

R.bv8

{.Jp,

;.wbX

%StsWcG

,%U%@

&.FV2

\.isM

%Sw&TD

_-T}`

-.Vi}

.XImb

q.jLz

?.KJ"

u.dmE

}dsZ.sR

fj%Xw

X:%u[

v&%cm

rl.os

nXlc.bE

H$%FtB

%%s*P

,h?.ur

q'.KA

.py9%Un0

:.Jd^

;%xQ]#

2Tb%F

E8.SO

L%1.lhi<

.jdF'

7TS%S

|Vz%sD9

 y.tZ

%X>0W"

gt7.uW

IZ%F@

.aAf_

%Cg2U

\~n.za

1cB%f

.tC W4

r2.aqK

TCp3A

%s9$1

\E.Xe

u`.zv\

&%x{3Si

.mt$c|

yaCRt

.aqE=#

vwV!%F

8!V%cr

'<oSW%U

.cFID^

v.Ix^

M%UG!X

.phtv

Jr.Wx

NL>%Se~$

^.tU_

-D0}2

%U"zB;

/.Aek

jpbN.Pb

n[.isb

dkTcP

.Sb[D

<<`.uk

TES,.zDx

$c.rEd

p<A%f

x.GLf

I.jQb

F.CqK

.FbJ;V

.axZj9

.RT&3

U%SP/9

%U9WH2]j

7d.op

8ö9

'!.hH

.UWDb

^~t}[email protected]

%U|`7

l.IY9

.Nfiw

.ie5>Mm\o-

.QX `

C.Nv$

^x.OIQ LGC,T'

K\:%c

.Uv\_

.yT'{

o.sAA

.Lm{Y

{.QIK 

h%SHW%<

%DG00

^.gXIh

%sBVb

.DHdK0

gw.IW

.YeQ4

=].FP

.1[]%C

Q.Nw\

1^`1l%XW

la.ek

&L

f.Cu&~b

.sIzyk

-tWSI}

,%FvL9

$:.mm

cv&.Xp

eBe%C

z%scW

y%wmF.mY

2Y0%c

l=Ú(

L0(%SD

m%X Jm:

A.jj(

$?.Ds

0l%5s

.HPw%,

#J&v*|.Fi

.DKB(

.kX)V

w.SCO7

F2%u(

%X<)^

3u9eEXe

~X.qa

7.%C[

0.IZ[

.gf e#

l%D(9

%X4LC

XIb%u

3P}%c

.kzEqm

a%s'2;rh

|%u6d

Cmd9Lw

TI.gxCKI

.HY43

.xUi4

:.Ix|@

uM'.XEQ

xyhT%d

%X#&j

.WSn(

.xS ^ht

d%d K

zS%xh

!.iLg

jP|%U

.BE/uw

.lJ$B

i>.SrX

ö^>

.iY7GfCI

`5BS.lg:

.Jp Q

?.pD?6MT

n.xMv]

'.LQsA

w]

 ..Tj

v4[%u

-8WX}

#V;%X

B.kK,

pX.wl`7

Q%X\Kb

.iMLm

r)%XPpt

TcpY

sPQ-%u5

%CT ql

ydt.NZb

Vw5.Wq

|Q.HU

aU72%U

4l0?.rd

loK%F

f?.fEc

%F~!\

g:\os3

:`Jj.XgT

hi%s*

yWK7%s

y.Ka6NF

P:\T$

.CbFU

.JVDP:

.jjbU"

O..kX^

%crAk

).ML%

QC|.EC

%d$Kc

.cBZu

*G.EgD

/.fP!

7Y.ik

gn).uY

okeY

hLM.nPN

XdJ%f

.wffq

.vzZZ

_W.rXc

nW.vV

0f %fY@9

.TLK,m

Ï_W

.wZ(I

z903l%.c

zE-ga}1k

m-g}#

%%d]a

o.Ac%W

G.ZOO

H.dDW

.kY^\8s:W

3.xHAb

%.dI:

.BO-G

$]%Diamn

5vq.rb

L8.TyuL

].OF)

QAW%f

r%Sjn

.BIB@

..Gw*

ft.WsXep

CSQ.kf

<C.QDj9

6x%fnP

a%d'Qn

(TcP,

;.Gk=

SQlk^%k

.EXjF4?:

(.IhZ

X?.sk2

h%f}h

1"5.ba

{B}%.s

u%SfvM

.Zk!P

Nru0%f

qJú

Öa}

S.hu@

l#.bZ|?

m.OE!

'web/%

dSyUL%xK~]=

KK%2x

MSGh

.KC~j

v(<[%f

B%xWk

'e.ZI

`m.lM

m_.jg

\T,%u50Zl

l.yzI1

Dp%Sk

v.cbr

-n}9Y

Y-2W}

{l.DS

\2.HK

W.xiE

%D#@3F3

v]nG%D

f3U%s

g:\<"kdKt

n%D/"

x%Xl\

q7*.fY_

3if.zy

NB.tp

|.TT|c^

7.mZ1

u_%sKn

f.Yd,

b%X0;

eR.NSL

9`%f 

P6.vP

.na{R

.Ph&b

K\3%Up!i

Gd.pV

[`/.Vt

c-x}cGQ

.TIID

(,f~.bD

W.ZTF

2S;%S49\

K%x"6

.JgKs0Z

Q.tn_

^.Vk 

%2sLD

ú1T

ftPSN>

*.kZM

D=%dqB

.%x&;

.fNiV/

5.IEB

.H%X}R

-}{

J.meI

d&.wi

|.Muv

%cy.x

M.iQKVjd

;mJD%F

N-7}GPQGo

.hI_E

7Q`%C

HBM.fSx

%CGim

H LD.Vr

&Ih%D

.SP Vl

d%U'3

|;.JsG2

-9g}:

.zMmP

W(<.Yv

rY]V.pr

!.rg9

#.fX>

.mY\v

x.Jxax

v.FJ(

U%c.n

FrCF(%f

.crOr

(t.wpR

j.uky

8.eQ9Wy

%dV18"Zd

-V:/%S

.vaUV

`.aRs

h;.PN

28.ZBv7

\.DPf

a?.LYq

.oP;0

.ff#I`

}1EN%ub

.ooIbe

%U=Y=

.IwK0

.Wex8

 .os`

(.cNt

&O.UW

h.FM6

CAÄ

%C}XCq

.HLc$W

SSH YV

*`6.YD

|{%sMJ&

'_.IV~

kb.MG

f/4.NX 

.rX%:6

vj.FE3^[

.hIHk

~ÓK

V.Jz|

%Fp3V}

y.EPz

/!E%c

.aB1v

%ucp>

b.CL2

xh

.zwx#$<

|"[.JR

C'.IMs

Do.ZI:

.Okvu~

l%u)<

-1.pb-

.VmC#

Fe/%S

n.LWH

%S-rQ

.bRu?

!.JBM

f.rQ9

?.ncH

.Mv_=M&^8

_.TwH!

J6.CA

%uafU)J

S.Gkz

1EXeE

.cx'#

Xa.aB

[*Ó

pW.tV;

yrV.eN

Sø#

nWEb

a.vHj~

=.ZblrdA

*zk.xLP=</

m%s7z

.Al$d57

):.dU

.NC`Q

.qs#n3J

).wQ`oY

3n.rbD

.Jy:Y

ua.Gx

]CrTsu

.&3%xc

.rYFE

1Qyo) %cm

RT.qn1u

":%SG

I$.Wl1Vb

7{X%F

=%f'uY

d9.eAf

*O.AH

.PT P

BX.xR

'.RN/

-Y}h@fr

E(.rl($

EE.Gc4

0.NV*

.ZH\{Z

=d'.Ug5

4~8%D

?8|.Jes

.Qrby

.nq#e

m'7%dL

%s$=9gY

>,r%F

%S]|=

.tm_Uq

,.CRG?

a%S!n

|.KyB

zSshU

.kGE;L

.fTVi

R.ZKY;:{

%C=9$3"

L%xgA

.eDE,8

LD.Fy

X.HJ=t

 -X}\

 B%xoK/4

.Tzm-

sqlP6FdR

1%CL?Y

Z.lyt

.NSL~~%a

1.JTI/

.Ha )

.vCOi

%F]e9"

.PrKAU

Mv%FNh

oB%Ue

N;.Xkdv

l%SH16WNB`

%sydY

Q.bRP|

%d#4.

urL:w

w%.po

OH.jv

j?(%u

kEYC

QAu.nS

%8X\p

;KÄ

t.kFi

/.eL9

%c'o}

.qCw`3H

p.NQMn

NUR%X

%Ur[\

5%DWCu

%q%x8

3ÉD

6|2.lz

a9÷5

.JQeL

?U].Pj

e1%Fi

:ziM:.sb

.Zk[R

_`.tu}

(T%F{O)p

>%s's

:.oTJk

]bG%U

ibe%d

w %XyX

j=keY

)jqGr.sga

HqONk.VZy

~.Udq

.JI_h4

È%JL

=4(`&!60

b)BU`%Un

%n.yv

6g.tu

(-3}"

kEYGV

Fy.XirFJ

?.TvpJ

Web-&

.JWt{

5J4EXE"

[%sRC

Z.DMM

$ d0.KW

H.jF-

Q).oN

.FeKq

.WN:$*

Yh%%X

lz .hj

g?.tL

{_%7u#

,u.fi

<{.LRZ

[email protected]

m2ga%S3

.Eq \

n.NS_

Y3%U;9

iQco.cHPJ

oV.BT

&2%U`_A

%U&q[

{S.Xn

.gl3S

o%S;'

7M7l%x

$Wø

%Uv 2}

r-.Pz

%W.vi

DE%C<

\6yO %Sh

^P.Vg

%S<(Muo

IS*`.yT

6v;L.kvQIm

-U4}U

Cw %C

[|<

%U<6b

aI{>.tt

.UGE,

$%xuy

#"%7X

.Ol]e

C.ajl

0r.fV?

.oAXg

A.EtW

1W-.Nk

WE8<%C

}.KM 

.mk80

.qj,c\

 Á18

NeQ%s

$"~%U

.HE{V

/.bx{

.Xu;R

%D,-]

vq5ge/%d

%ucZ?

:%XYg

;'.esG

 ;%8X

7%D`g

.ZQj3

s-N}7

6.PtdG

kgX.Sc

}G%%d":DDTh7_O

msy%s

FsYM%fP

T%.f[

,.ooQ

;.rSa

'.USl

[%xvE

dc^:%D

O:\@2

%dQ?=*6

.]~%u

r@Zó

k.tWX{

6].GkM{b

$HS>6.WF

\/.kh

&%UAH

8%sGQ&tlD

>Lr.Hnq

* .Po

0'.ngJlw

%Xr}7

.pDZD

%u=TbPiC]/h7

ud%u%

) d0.br

IAn.ZA`

?%fWTA

O?%Fn

YR%xJu

2_uRl

}=yk%u

|ek.ak

%XI]P;X

~X.ihe"

# s\}}%f*

x:\.1si

v0.BU/

f%Xq!l

:.wsE`

.Ep{NH

\ti.Xn

8.DqQ

T.kk0~

2C.JRk!

2L.kX

.-nZ}p

.Opsc

]l>8%x)

%di6]

N.GmG)q5

7S%cj

k.tI{=

$s.qk

<.hob

G.atQ

A.QWv

%cy1~

W.Mfyl

e.GvY

%X<Wee

 Ym.tV

mL%FpL

V.aAD-j*h>

z%urLph

[=%X}$

e#P.ss

gg.AW`g7

ku.vlN

LFl.DHEvv

6 ER.YA.

%S;T3:

%DsT2

`.zN0

.KqK 

nl%fV

%d/b$

nH4%c

5%.U#

%uafG@

<~%SE

8.iH?gbK

.GZF0

(wx^.xGr&

%dt4eJ

|/C?.ndj

a%cnc

7#v%f

0/%Xc5

MuG%d

9.lc3Y.

eM.rE

@%1x|

%i\%u

Hj%7%u

_SX7%f*rl

G|v

,.gpw

%Xt4@

9.EPMm 

;O.hd

dI%sK8

,.LY3

=.PDt

.NyTF

.WY7@

]%X]T

[|.Yq

%dt|l

WFqfTP

.AA!s

=%ull

JËq

(I.sV1

n.gn)

.FFI~

2.Nir$

À7B<

%FWBa4"b

l.ivDv

[email protected]

5A|%sxn

T.Fp1

1.pts

.EVM=

%U|L"

%uNdGXP

$&pñU.

v,;%D

VY$n.Rb

@.HfI

{^ld%SK

J$w%SxiB

N-zC}

.dA]%S

.Eb0]

.dzgc/

3{V.vH

y9!%X

.YP l

Li.UqUK

%Xqq-W

^1.hdG

H.xCae

Vm69Q.BwH

48@` /2"

X%c,$

O.Bu;K~}

lKt%dZf

'"g%C

Cb%F'

y.RJzhB

%U"FD>p(

.SZVu;

klf%d}?

]U%dj

(%dk4

t.zaP

.yNz@

0.pytr

9.sVy_

%%scu[

.poat

UL-dz}i

.lOlt

3.UiW

%g\.iK

Sm%x\

g=%Sh<Z

X|P%N%So}d

Yu.CI

09b%s

Yio%X

Y_.ha

.WO}*U

.mUg0

ir.zpr

%3UxvX

J.bi/

~.SQS

pf>JD%dO

\.VBg

&(.sY

%xA|*

.BgQKB

.SL*o@r

5.Raiq

).Oa"

,.UH~

.jP}NV

uRlZ

z.JN=H1

%Fx3^

.Xðw

E.Qcj

.eYG`

4)X%UH{

.ywW0&

Y.Bt>

%Ch0S

Noz

X.WgE

.BR<x

.UIt,l

= %c:

.vifzga

=-%UD

hl.CO

Zd%uV

%Sm,0

.Lju%

*.IC5

.ml[IG

WKd.Kn

h&%ui

M.oNz

n>8U.At]

Y.EH<C<

Z%u~e

JY.jnU

'.yGW

%B.LF|5

r]<

.KXQ5

r$.oc

\%S J

=Vv

X4.pkS

7(,.TE

N.iZJ

X`yjÊB

.PEF=n-

V.RZ9g

3O.cy

?N%cwTN

C..Ye

N.qq6SC

.Tiu09]

IŒJ>

u=6%S^N

9.lJ"

0%u\.

Hy.nG

^J.RK

yi3%dst?

%d"[!$~

c'C%C

.Um_cp

?.BJk

K.rf8

.Tb}6

/.jxu:&?

B0.Ni

8HTcP

k"*%fS

z.aE{

m%SQz

.Fe&@

t-%D(

.TLy5

ZD=%U

B&z%F

(%d@L4

%B %u

S.TFa

óI:

(l<%Ue

;R.XJ

w.Rq]-

OHFV.Xl

'%SV<

.RzdX;

y%saP?u^

X4.cSV#b

T.dZJP

$.TS$

ITP.bc

C6.Fw

r.XSP

h;t%d

|x.aP<

OL=.pU

.zEnv

N.MMS

D!.Dn

QZi/Ew.Fuk5

\.wp0

.uC4=#;

'l.FdC

>C.rB

xG%sN

<z%FXtE

.PqXFR^

U!( %S

;.cTTD:

p\>;^%U

b..quiR

.hB;[

AE{bL

zx%s)

:Pq%FO

%D!Q}=

Vml%dlv

vv9Y%4S

L#D%S|1

,i,

^.UMtcG

6|g~%SQ

W0Bo.bN

I;gK2.rjbn

M#J%uu

J%CrS

E,.aM

W%xrR

(3,.xoj k

=QV%C,Tw

.JUB|[

&.ske

.WN~`[1

^J.Vz

uE't.MUu

.puD'

.VT\a

.WCh6

Jx.Aq

.GYHt

%FUC k

6>.Rz

tH%xV

xbjq.mI

j(.Rv

web$<

ts.aG

.Nm<nV6

~e6%Ck!$

T|F}QeM%SH

%9Se|h

dQ.YK`N

${!S.zbD

KyA.Rk

kt.RN

"&l.dtI4`xuBX

JJ%SL

.VYFk

U`%x)LZ

*c,y:.nw

o%drO

.hL@{

.CtFu

.IWCn

.AxR?p|K

%S:s^

6.XiC

f.pe4

 e-ad}

4KR.u.MM

.QbYB

cP.wg*

Ri%ch

$}.YU

.ZVKe

fZRv(.qn

H.ti8

.Uv!#

Kx-z}

y4QIWY%SF3

u%S`:9

`.FG%

Rw.NY

Pw2%u$

i.JQZ

<%NVq%f

f|%fj

.lhaf

%d%MC

<dR%S9

c;\.tz

.tA"4

ke.bKN

%fIm*

.Wqd4K

{\b%s

G.lB_

;R.xkF

.lAkN_

/y.dx

}.iWgEK

%fNqN

V.bdF

%C<aw

[1?K.dp

 ~.JZ

K.pE4

#"[[8!1(

.lkwE[

-M}ll

C'.IH*W

)XW5fx%SP

Ý^#9

.gh)v

cMdH

_1p.ZpiiZ

%Xz'o

%Ì7)~

.wcrr[

Q:\Zf

cf.Qlo

O;H8Nr.yt

b,.HjQ$zv

i.lw:

.lo0/x&T

$.RAh;

tcP|6

<w.DW

6iA.bFr

-.JY8

f%8ue

.yMJ^

.MF29

_ÑH)

'Ox%SVI

a.KBA

Em.CW

q".Kn]

|".xb

B%d~^

a%sCS

<.JSe

.fY_Ff

UU7.ks

Y:\/^iAVz

2`%Ci

.EMUG

.tJMV

P.SU&X

x.RtE

#X.aU

[g.iGl]X

%8S}c

.xE/u

.zlDs

`&7.XR

^e

.xY%.

O..Oa&

y>|.Wu

3%u'6

#.SK)

TJx%C

;h.vx

-:/%d#

.ffB9F

(t#)N.oe)

8E%un%

A=L,%X

N2.CS

^N.yX

Q.GA;?

\a]%d

'7R.RT

.VCNr

b%svN

%Uvq)~m

aÜY

Wt.cY

8d|2%U

X9%cX/.

0.OlNK

l7A.lf

jfV%DL

W.aWB

#.OkN

.eY@>

9.sIO

$'r%u

.XI50

%DiJX

l.bNN

E.fq3Z

'vR%S,s

$).Ib,a

.Pa(($

;#w%F

.ll2S

*%d":

/a>i.WnA

]öWj

.ggdxH

%u*EN

^jcrt-O

%Usn8F

Sn{Lc.MT

iQV.XQ

.eadJd90Jy

!G).Sn

(2%S@

WUO-41}

z.OB[

_[%x{

#t140nFH`:.gH#

z`q%X

c2.CUI

[1.du-W

`6.LX3

5@Z&M%D

Mx%DT

%xP`~,

GY-.jO

m:\Z(

Cb ".rpP2j

=2N

.Ty k@

\t%s3

%Cy?!1

s l%FU[

%do#O

{.aZ9

%u]a5g(/

Q`g[ñ8#

&k.mc#uyK;$

-t}khp

r.NrN

.FCN:

%3SYU\

24.rd

S1.fyt

0fg.AP

Kb.aQ

.dHdU

uN:.ul

W.wxN

.vk0c1

.dG}j'

.hA16

96y}%C

audP,a{

M.ARW

.QU1m

NZ2.xx

Þ_b

uOCxN

.cxzt5

.yy#DV

%u= W

Z,tJa%S

.WZ9}

.Wfxll

;e.EO

)r%F&

ydin.xy6g

]*}$-607

nf.qb

xN'9.bGF[um

v%Uv$,

h.KJf

IpU%U

%/|%uv

n8.Xv

>.Gi0

.unSu

& %X9

)8TcpB

W\2%S

7o%

qz.St

%Sye#

O?5

*.ADJ

Q7}.RN

B"%u'

.Il:4It

uCa.JU

r27%DSLDx

c%D)k

-sh}ppDgV

.qIg5)

;ünEK4L

MjLw%sd

ÎK?

Æ%H

q%f_=

.hkYUK

Ü/F7

{x%uc

.fl'6

:!R.kcJ

m.HFMM

{2TCp

g.yng

Q$%xt

.Xlt-"u

m.klft

!V8.cm

.mes!/

[L.sA

bj.YG

u hw%d

-].tZ

~%XIiW

i.hC4

.jo\X

SQL]`

0TK^@.FDt

AE-i}

A..QE

3.pKw

pM}%d]

do.:.vA

.Kf4|

g*.Za

.GYi[

RO&-b},vY7g

%c/s>'q

H.CEg

bD/%D

.UwZCTdF

.gvz@

~%FL~

L%XES

UT].Il

M.vM/

%C"h{^3

.ssy?N

!V .WQ

)f.MB

y{.VV

ssU~x%d

.xmK/(6

l\0u%u

''HL%fZ

Z(.dp

[.qFJ

e.ZJC4%>

.Si)a

.ye/5

^g`Püq

)Z.VRY

g!:%Un

Qy-0}uPR

y.ax^

%S D)

{=.sV

.FG!K

r.Kiuo

G-cC}

nS%x4P

cIw%s

G.UeU

~7%UA

.OQ\ ,

.mm[#

\n%f:

XwC

j%s0y

.Qf~X- v

.Ai-y

Þ/cXP

.XJ>)

o%.Dl

SEXE

%s;0K

;C.FH

lQ.ZT

.GL|`

.aeKO

-zQ}Q

.Ux[qD

SP-e}

Bi.mb

.FlZ@n

*X%Ci

.UN)k

Cg.II

f].Yx\h&

%DQPJ

m<.lp

C.dJF

!p.LO

]g.QA

N.MC4F

uDP4*1a

z.AZ8zKU

/.ml`

.BUIl~

%djN}

=.VtO

.Nm]b

o.KDoo>

At.kf

_V.US

.qL9[

8E^%d

y.oM$

.kT5ldR

.K?UrL

^fTpi

sP.ih

.Jg(Y

$^_}~<!#

.fQTu

.Yx$X

ff k.xl^

Nc.Zo=

|Ïl9

:.Sp<

Y.SwQ

_yH

.PX(4,WU

Xe.Gq

I;x%X

.da4P

7!\^%F[

q.diM

?òR3

.dA3K

.eU_3<4 

zp.cV)g`

.HO'?

zx%FJ

9*M.Gw

.Lgnk

s.UOG

@(.fI&}eYEv

keyk

-il9A}

%D>:.

]%S>q"

7".Hy

Y.WN1

T.PJ"

.St4[

K.IFc

GH.%.c#

Núo

s61%s

.AR|Y`76*

p$t-v}<

)i.tW

c.bha%

l.dbF

.y%fm

M?.JNO1

b.bo*

4fK%FH

 .rF-m

@7d.hPp

syÍ

0Mô

e.aa1V

g.kcW8

kjd.nyMi.U

.QGp'

I.Ad%

%UXBE

.fl K=

-.mE1

a.fVz

'%%syC

.ZPa6

dv.Lp

T92.kE

&o%S2

.NOMb|/8

b]%cu

Y.EuvgU

g9l%Uj

NX_L%X

@&.ax

nZ.Nm$

WOCkEY

.Znv!1

k_.To

.hHu/>)

t/7"%F

ÃpJ

.iWe,

.fr^e

w.fgC

E .Xf-

x2D.Uz

.RXo0

%c&{-

s.CUE

*%xA7

e.VP9

{%s:7

`%3Ss

z.GDy

.Uo*!

3%FY3

('&52=74=|#

%S,O?

73=

.Mu.l6

4G}%xL

p6 %d

%S_HCE$

x?.Vs.

a.Ir'

U%xH'

V%.Kc&

k?[3\%u?

H`.CN

%Uq@e

%5su?

&j.Lb9#

%upNye

({q{dQX.YSr

%u6]JU

mAH.RXe

l%2Ul

s.Kks

v>.gA

Ir_U.mm

F?.fzd,l

O%f,f

Zdg.iI

CH2L%D

4S.ny

lQ-%U

?HVF%dN

a.jJu,

cp%dU

=.iS(

.JCt~T

.v.uq

vw,F%uQ

i.p%x

7O%2u

hd.vx

p%.NK

%Cmj2

JF.oZ

7XSQO?%U

rY.tbL

V#%doCK

lrj%f

Sn%x~

i.Lkr

;R.zU5

sW(.CB3

Q.ny)

E&.Yw

FJ.xI

Ó*V

[.fN/

tÄw

.fvW9

0.ka@)8o,

)&U.Tv

C-xCF}

w9%Swv>

dt%DU

8r.OFp

%D|w6

.caqF|B

5.El\)

a%DoP

o.faQ,8

Qc.eJ

g4.FP

d4%Dh

g%s5 

|.acr

i.dLN

-8.HJ

.vpb4

Z;.KP

au.Mm

}.Aa,D(

[%sha

Hkv.Gy

%3XB3

%Xi=F&2

1(.NA$

<.jqcc;

e%c[u0

GnFsv%s

%SmA@eX

dWt.zHe `

oQÍzl

k.pJR4&

?d%X 

X_$%u

mÖr

=L4.Iu

` .ca

==-V}

%uwh-

za1@%f

Y2%Dr

.xisk

<Y.iL

K.wM#

)%SMg

%f]T;w

y{.hU

* %cr

YKX%F

9;.Aj

b%d&7

.RL,8

5`?.GF

Bs.TR

.Bhj6

e.le1

l.Hek

bFÐd)

x6Q%f

s? L

?l.pDd

o%.aVa

^.Xbl}^

(x

.Lx[96

_-Jv%UZS

m\%s4

.Oe4H

H%u%"

%S^E0

Y.nk7

.BY{d

^_%SY

.Nj3kY>

<?.lX

X5s1w.AH

*7}ZS%f"

.MrCg

pq(%f

.MYrfVWn

;d8%s

.lHb\

8<q%c

.%ds{

.hcpn

E\rA.Hia

 0x%Fg

.wdMI

Q-qA}Ge

@~%cv

QMSG

'%f\H

ASQL

I]qu.Xs

:.wk5

f.weo

Ntþ

.YBD]

`!.JF

.lBcX}d<x

l.xnE

t.On0}4i

!"uRLu

.xXn7

Rrf.JP

%x~0d

2ûW!

FW.fP

.mhbN

%3u0U

.VQe/

$.kb7

;.IR1

3\|.fK

'%Un[V

ukeyP#

)F]\%un

.Kk.*y{

%Dye5;

zA2.EV

BL3%x

UV.nBeFF&ioo?

g]b.xO

%UphU0

G%U8-\

;.egL~

.gD/"

.mNam

o.ya`

W%xGb

W%c*x

=.XB!mf

.YkNH

.EK:AO

3l%d}Hx

I|F'%sH

%S!yl

TJ.Vn

.Yt)p

.QM(W

.tfC:I

A6.CFA

W .Ejo

@jFV%c

%U10#wY

coN%F

4iU.bj%

,|r.Ps

.tGQ-

1.oF$

1$|.sX?

%xcat

%.mS)

A:.VX

.Fy#@^

6.ES|

.VSD$

,%Cuj

.Ng5'_

.Cl9PN

x.af~fS

.drOA/

%U(Dd

V.Ns~L

).NJ2

sR%s|f

(.Vq-

.jP<D

z%.vL

Ja.uz

CG0%Fw

;J.fe

]5.AR!#5

.KCjx

/2.Gi

iY.OF

(.tsC

O(H%u

.YP/O!

cf%UH

M>%ulB

CI\{fl-9sH}

3.UTh,

-pÿ

.DScGH

.ATkx

12.mv

Z1.jXn

g.BM8

%D<<Q

%@.nR

pb0#.fQXB

).Vwv~

|dr%C=N

-6%SsbZWF

%Foyr

^v.aP

|CSql

%D{$c

Tw.DM5

SShGx`

]S!%c

2s.FC

UÎn

uOx%S

%cQy%0

dr{kH

h#.Qh

Ny%suX

5c>%.Ta

b.HVn

q.Rd'

;%D,{E

As%UKA!

.dt6@

(x.dl

Tq;.kFY

Ñao

.LpjA

.jze|

z.vtHm4h

oM

2.VNl

AyM%s

!#.gES

S%sze ~

e.Rxe5

E.KYO

.aC{.

X.VDY

c.DS$8

.taO)

.kRUj

ffTP/

%CN^R7

.rKTz

Z_DM%u

.FK7!t

%u0Q>`6

=:c.on]D

*.MH6

%U:54V

L%FVv

dMz%f

.mF4G

%xU3@

=%sO<

{U5%c

%ctT?

9Y.eBj

.xcRw

J%uAkK

:~.iV^

U,%2U

.SIYJ

/BZ.Of

xpExE 

MSÀ8C

(o.IZr*e

'`".PN

e1HwEb

%UxDds

a.VjmpWs.

c9.gH

.fYhg#

uDpgb

*.oPJ

=.CA'

[4KeY

.Zs0}

.Ho]W

Q.EAr

lvgjV%Ut

i%u: 1

68.qY

7G>:.ylP

1m(%u

{D.ns

n%uB%t

1.kK`5

Al.UmP

,7|.KG

%sV<\

j.eJ^T

B.GJ\

x%Z}%d

R~W%d

zj%Cu

'C9.jI`

.HZ(u

pC.qo

T.QwZ

TBA.ezk

c2%U>V

.^.jG.nkf

%xVdeK

.nBOIf0}

HK%fr^

<G.fLl

UW.Qtx

IJ.iX

`|%5x

D7#.GUUG

.Yd)q" 

U.lM8B\bw

5%x-qHNE

6%uF:

%sJZl

,.Yea

×Yp

)M.Gks

.jfl[/

%U.97*

.Dg=!

GK5.bq

.rmR7u

HsU%X

S(%Uy;

Lj.PE

.hjWB*

(W%M)sGQ%U

^.ubv[

..lV*

s%ckN

%f)}.

.PH#C

KEyf

.qoYX

6d%xM(f}

/D.fu

j%s=G&

%~.nd

i~.dM

Y q%Xz

Q%D<z

ybi.RY

kSAPu.^}%skb

".XA/

CuRlp

H^.xOD

[u.Ea&Aipm6

QIm|[%UVZ

[B"F|'

l.jUU

%uX\T`

Jx%uK

?O.Ar

.PfC,Y^}S K

.RyNE

i.APF#7$

Y>.fu-

bh9%U

H%F{Zuxd

M.GL^

|.uq|

6m.jS

>B6%U

*mPG:%U

iÀ(

E"V%C

S^.Jw

B.*S%c

{.qHpl

A1.ibm

X.hXOY

.VI-.

-8}&z

q-8}>yIO'

O.bzY*

.CR3B

Oo.al

/v3%c

Om.CA|

M7sv%uq

Ëym

GO.MAJ8r

%DN4-

^~.^.PNd

O.wtS

[%fY,j(:"

@B.kg{

)%c*jg

'3P.dR(7y

Ge[%U

.uy7S

oUDPD

.nZe::

.ke'[

yf .eB

G.QHf

VT.cq=W

oj}c.ko

>e%DSZ>A

Q,{D.DW

Z?H.LO"6!]

VBl%FTP~H

z.TIk

.Uh:0

f.KRK>}

y%UR#

 >.DW

,.TAZ

.RGD`

E=%fh

l.rZV

R]k.Iy

@.Pd?w

%U%ZW

a<.Jr

F:.xE

[%s]YG

2%U31

^ZT.Fg

E{y%C

.LkE*B

J&<=cA.BR

.UY&w

"?SQL>

0Lj.QNT,

:.GQTQ

qDj/q.yq

'.pYr

y[E.AP

FB%Sf!

!%USb

.jZ5Y

tcp<`

QF,%U

%7ST=

 }.sc

1.EgP

[email protected]

a.vW"

a[U.LV

i%CvV

b#.yc

.FTki

f.PURJ

qU.pf

.XeV8

vpq%U

,fhM$.lq

|#< F

BC.dm

%DR %;

E.bG)e

Ok%fV"5

R.qBH$

0r.sc

>>-.kPM

8û](8

fE^$%x

. .mz(

L/.MbfH

h>9gq{$.QoT

hF.hx

.lmv)N}

Mq.goh

0.DNG

(WP%U

.bSJf(

E3.Rt

.mR/V

F.Vh6

i|5T%d`

:.zy@

`y.Ur

%s`}]

x<.zN-

@<.dN

M%X a

F.WeZ

p.ADz)k

@^%S-\

bCC%sfX

1s.ig

%u47#_

Z.ahE

[T.ZmC

7.pJK

^%dh{-

.Xs'S_

a.Jk5

A.XKy:

LVu.dOs

4oËt

g6h.lp

L#.gV-

V".mG

]-j}!8

$.mQL

y%dUa

?.rP,

ZJÆ

Rs

CMDx

 .sD{

0D[%X

fe4 %7sV

9UQ%1se

;4W%Dm

|#.Vk

.yuG>

%x@3ZI

-)d%dGF

'6.Av

'c%Du

.PGv4

,&.UW

) d.SP

G8.Cw

25%x2

.aykpS

.pN&7

7.oR\C

Km.rY

*e-M}

'\.Xu

J/F.vKF

%%D=l

.bj}$

sV7o_.Ok

p.wO@

~z%Q.jA

%u'B_

e;%s)~

^V%sI"

ü8Ux

&.HuA

?.ow{

5Ud.oi0Sok

C] 

%<c.Mi

.MabXl

.tzl<n

S.Jg#

, :%u

\.Iq$

.VdsJk^

.%c\A

,R.Za

).bB.

a]:wg%u

H;G%XZI

8@)_S).xC!N

C%U26

/%sBg

%x~1I

$/.rp

[5.rs

N=.QPT8!'

Zv%s>

[o#w%c

2UzI.sKr

-Up}Z]

.tuM*)

C.CQ/

<q.ZV

21g.ZV

Q w]e.bv&

%d^,G

'%DVw

.XI5G

fN.Ox

NA.iV

R.ZFp

.Yo/;

D.vs!

 0^H|.GR

{) %X

%6ut'

[Gi18.fb

%8xw.

s%usI

hj.ms

0u.yK^Ty

 FÈF

.V.Wr

%.Xed

/.no8

DWÿw

aBN%xc

bq.XO

S%F*R

0)%C_

.Wv9]_

%f"DP_

i9.RQuaD

r%c~0

.FKJv3

95tW.vH

8v.ApZ

.Uzkc

g_Gm%u

`.qz8z

V%uiI

e2.LK

J|jfN.yYz

`v.XF

lFt.th

,4.My

>.Alb

8i.bj

F:$.vS

(@.wb

)-d}O

0msgnSgn

<.JD>

&3/%D

z9j.lM

.aB6T

e.zaE

\%U)U

0:>.mo

`%X2*

h>.Sw

&.jy|

%uI`t

.URlr

WV.HB

'%X 2z

%ulIX

 .LqP

uRlY

x%XNZ

Y%U}?

Q.uLG

'%xgWI

.EfU#>

.HW,Q

K%s]X

WUg.oY

Bw .on

%c=#h<

PD%Xi

&Q.dd

x%S>$

9%d!x

Iw.Tg

CMdG@_

.iCXPOW

]NI.QY}

.HL)'

Wfl2.vy-

.Yx6B[

YT.eJP}

.WKWnrm

OtqI.YoR

%d$cd

|.hqQ

_`.Ia7

@/Î

.CGfy

^-.ez

Os$}^<X.yD@

SAe6c*J^GÝn

ifX%xZb/

%CIpBy

,?.Qo

z.GP!

-aEO}f

&y.dOK

&yC%1U

.Tcc".I/

y9*.*[

l.CB'x

X4.hD

<0b%ss)

{6.cV

^<.jw

7ng%c

@.NCW

}..cQ@

%.CPNj

.Ky|O

V("%C,

.iv@%j

.jtkOa

|.kTW

p'.EkV

$%xf}H

.aWYpm

6%s}"

FA3:.yv

i..Jo

DA.VY

5g,vbÑ

|.pi.

s/L#%u

q.WB 

l#.bj

'.lPU

%S>lk

%F `=

T.bD>

.mDei

Xf.OD

[_7.rk

#%UpT

.SoA3_%

.kT$i

.na6(G

%X3V ,

.BRO`

xp.kV

slIv.EW@

{.qPh

e%}%d

.qv2M

:$~.NC

2[.DT

%FTn_

2.CAT

su.eH

@?v.SD~1

i6.kR

? t.GV

m%dzH

r'3.PeE

f'X.XCk

.fpw gl

To4U".wd

MI.yW

2.hI4

9..Mr

q%u:\

.wB m]

}%Ssn

83|J%F@

%/.bpN"

L*CP_.eaFP

 C 2.JT/

h%XI`Z_

.dB$6

O}ô

(X%DO

fSQ.Ta

X%CTB

.CXk%

v.ky!

.Q.UO

S$e.xm>eFFe

\=%S5:du

2<H%x

s%x1E

!%s'.[

RwÛog

LNw&%dK

P.Qc9

.RY;.f

f.Dpb

|[V.Ad

%DYRLr/

&.lv[

@.un:e[

$40_'%x

.VLAX

6o%2X

ù3='

%5s\R(

.A0},Û

x*f%f

t2.rz

.DhU;

Hq!%X

-x88}

.fDGv

u%cqy

,.nmH

e.moJ

k-z}3

eh.Sg

*]W.xK

y.ISW

HC.Ek2j

.eH"NH

Msb.Rf@1

#9?%D

.MN5y

*|.BV

.Yd=h

!#%S@

o-B}I

.EO;\w

q.rBx

dU%Sa

I.UU'

M.BL0

QyZx%C

9%u-?H

.Dz6au

%UVs]

-qFeD}

_9=7

z.nul

TCpt

GWebx

ln.zC

.wku8

B|tudPZ!

G%sy}

N.NcU>u

)npÉ

)%S(8

%xfP}

.ay|e

}%u)}

.DC)M

tSqL

95%Sq^

M.kRt

.kf"U

ra|%c%

qkEY!

`v="%COj

.IlNT

=<h>%C

&`%D}

1-.%s

O3.Fqh

T^.FW

aE^%C)Z

lG''p.vXy|

&0r.afF

HPkA%f

NwAc%U/

fkMSg

%d I&)

qx%uXP

*%sok

tOr%f

e.aOB

.LT'P

}`kE.Gb

#.dQVk

%FZ5T

^óLd

G%F@`

WqA.Uz

vQÜ

' ,=

S7J^,.xB

_k.ZL

U*E.vM&

%xoq/s

n4%.x

.RFwE

.hQx3

]5.St

.CQyu

,>G" >%D

'.tv&J

$.).uWzQP

:.gg=

.Dx9 3

!~$kA.wj

m.ihyc

w.PYm-

&%su@9

4\.sl|

0I.HVm]

.fign?

h%uxx7

.Pt1 

%c#WM

q*
xE@$

UEXe,

Ie%Uy

Q.BPW

qb(i.Eu

%x]`D

%U:$>i}

50l:Z;%d

3.Xu7

er-.ec

oN%XO

V`J%D

EÆ5'

,.VV*

~m..yQ'

.Mdbt

D%Dv0

(X.dj

.nFf"tu

<^.HB

kEY@E0

.DS32

×bgZ

fxa!(.NR

:?.sd

;=.AYQ

!o.kD

XZi%f

%dvzh,

6).rc

|(Í0T

ûO/

PD<.sy

%XePZ*

&%UF6

H6.Js

6l.Ig

;.SB=Q

b%S` 

27Qr==.WsM

m'%FG

jl%X#

~<.IH

.LpKRB

.QynN

.Ogu#

1mC.jG

.mKK8

-!"%XH

%3Z.Xe

olbN.cD

a4 Yy.Yyp

ot.MK:

V .Vp

4h.rAm

_F

K4,.Cg

F.Vmc

%D$AT

.is"9

Qu^e.Lu

.Psu%

wdK.lf? 

/{>oú

%Uv6592

l4<.zf

cÐC

.aY?:_

.PBw_

.Dp)c

Z.uzX

!.HP/_l

%ueN&K

t*9<%s

ýet

[dx_%C

F.tqk

/4.wl

.iGsf

!83%d

%d}@k

E.Ls-;

L[V%F

%C$z&

g8GID<%F<

a#*.mQ

.gY}}-

&.BS:

k%f|9

'9{þ;

Z%dR*

_(.pbH

%s(',

M=8

H.tsXB

}:/FTp

.uuBS

.kKk@

V<%U7

1X.QD-

F:.Cj

.iTq_

f$o%X

[email protected]

@m.Uf

.yy<Y

bqg.jj

.NZjlW

.Ik<y#

2vT.rY

uRLZk

j9DÞK_

'*.mYC

@_].iD

l%Cz;

D%sd_

.XY#s

P_4\2%D

.Ea(j

.Lpj$

Uv.pc

%cxUq

%)D~.tN

X.NCPq

.HsV_

2.BMS

4H.Go

.%R}I.rg

.DT{d8

.JN},`

.NIbx

".bq)

.CKZN

iG<%U

.EQ.d

5o[%UAqt

w&%xO

N}(Pt2%xd*4m

.AuV{q

lW.fP

rps.mM

yD.xmV

9.wap

L53.oO

V.bs@

.JBag

.MVC7

qo%xE

1.EH2

%Uz!=

)%uW=9`

%7u(@:

.iSe}1Q

~';%FJ

G.vU2

.tSza

v3v%f`C

x.xpf

gü]

Id AP.ao

?.vpe:

.lQ/(

2.Xn#

.ztR=1

.Mq2Y

Gk.cZ

%X{Y5,

P:\YPR

q.hqtJ

.Gh3*

d1ln.Yc.

/-^7U%S 

%CmmA

?6|%xC

U.wPf

%CMY"

%QT.SK

z*2:%d\

g%DM@

%CG5y

.KJk:

H%dUIP

7P.bb

.lj*Eh`

op.MP)

@^.lJ2

(Y=%.fq

vFgsSH

|.Ar.

7N{y%S

bws%u

f%sov

\.XzbbE

8r.bi

gqB.Dy

1K.gl

wy%UY

zJ( .Yh

J%xqo5

 Q)%SN

.gm~JN

Bm.Li.

7V.dJ

\'.Hv

k2%S:

?\3.EdT

*Y}%d

;.af-

K%XrX

Y.ctua{

n .bLi

swA%u

#o%ch

.NHB%

CUrLi

n.uWUv

A.OsmG

[`ab<.xf

b%h%f

.asjAH

Ct;.Fh

M.QQ1

.gWm-

4-ZpyH}

%x,V;

^%unV

b].NL=1

?jó

i.itC*

'.btX

L`'%x

.yo]]

.Nu?S`F

?*uDp]

^S.ff

P%s,7

BYg%f

r`.WV

.qtnbl

SI*w-8jR}

0%Sq2~

:%SRe

-.cw,4$=Z"

g9%5S

_.lW&

t..rf/

|5d.gr

i:fl.nE

%Xe~-,2A

[email protected]

Y/.OoH

.zOrXp

Cl.WH

$ SD%c>

WWF%f

.kYqt,O

MR,.NC

E".sG

:6.PKK

3.SR@i6r

NO%SNz

.bC0iX

N.cJ-

%f/W7

dK7.ve

.vqu%

.Bq37~

IM.ry

Cg.Un\

8cR%u

.yH[\

j.HaD

/X.TP4

&w.uC

NO<-5%Xs

;B.LYUH

0<(o%F

?^E<Z.zc

}#6h%S

%F]WA

m.aR}

SGjs.kh'

_.KaQA

L.OFY

G.wVS

~ZÊ

e.KET

lL.RX

^YL-s}&

_%S=9

Wc_%cg

t~15%C

.rtL`

%.XQZ

Cl.lE2~

@.Ar}'

)9.dpx

O\5y%u

].Kz(

dC.Qp

k%D\ZF

G.Oc`ED

%9|?@/$?

MÚT

.vK"JW

.Rxs{

k%DtT

.rYd!/:

.TJ.U

(-%U&Zo

!%$IC%X

ÃL"[q

 .lI~

Za.wC

6-.mp

B%2Uk

D8(%Xz

v.dTn

.IQ=`B

1GMnz,.ap

.kLEd#

".KZ`

gT.wy

PFtP

F%chl

Q8.Bi

.oX&U

}.EWe1uE

M;hP%c

6*.PL

Z5%fRNg/9

'.KIWL

98O;%x

.xh,F

-^\,`%s

}.Wn 

8.ugo

.#NyWEB

w[.Zm

.UcGT5

.GP%|

Y-Ctr}

%c~R^"

?.%Ua

4 .LS

\%uC.m

'.gU.

X.cTH

I.l.Op

qr.Oy

5L%6um

|t=Bn.fk

Fg.uhi

%XLAC;3

J.Nn\L

 J%f&

-e.tx6|

.cCy*P

m8.Vp

s-%Ua

6q;:Ó

*\?Z.JY

H.SDc

]Y%sClSe

91KX.BC

q-St}o^

ssSHQ

$b.Lc2

CR.da

53.rLwm

g~=.bm

PE^w]0%u

A>}

t.SdR

] ?.wQ

B"4.cQ

.vfS5f

h".IQ

5Hp$.pH

%\%xA

$2{%uH

O4Q%X

|?.ti

=%FN&-i

cS'.Cv:

.Rd4o{

|%xp4

ae.fs

2xg%u

.Ewb-3

Y\s.up

%ui#_

TZS.VJ

%x?s'

4X.fi

%f'!6#44|

%XeRgG/

 c.XaH

%uDIX

ÿ;m

N%s`PO

Gu,C.DWuw

.GKCo

BI.Ua0L~

sKÅS

.GHiL

b.mY)

.YkiBf

.mfYXKB

M<.Fl

q.SZo

.pEOJH

i.zE0{

_%d{&

.iQ8Vk

H.MtW6

(%5SBa

M|.XQ

qF.bV@

\%Uo,n

VW.FE

#L.uM

cW%.CB

.dLzz

!Úqn4PcZ

.eAzgA

#-%UU

ý;#

].rV`t

[.uVPH

C.mS[

.vD`pS

s%fyo

{SK%s,

j#v.bs

Ðv6

v.ktf

-k~fUp?eX%Ds

/SsH4Yt

%d%2tt

)X.ej

(%CP;

k.xen

{y .ZC

.gcsE

vU%0U

KHa%c

yubij.cM>k

"_UN).ecY

=!AG-J}

;=.qP

E=!%d

.MAIA

y j/R.qh

j%9X,

YS.va1

Q<C1-L}Wj>8

.eeK|

?Q.wO

LcRt!IJ

>i.aHt"

W.AW>

QOx%D

)HO5%f

K>%DmJ

.oI0, 

Ï`%

-U)w.VDAW\

sQ.hi

%u9=J

<.Wj{

.uEb9IkA9

.ye!|

Fko.wc

>d.Ag

Rwg.FW

v.JL[

%8s:wW

#.bh9

`.vyR

.vCB<

k*"%f

.%cRtvOW<'

%F"$W

}IN%S

%FgA%v

B`.bYy

i.LbWl

``.mq

PZ%S 

JM.rl[

;.zzt

t'.dW

.eH{/

%S'(8

oq&-.Ev

fW,F.sup8

%1s1y

\Y.XP

W.rSC

'6.uJa

3I.xQ

p.OMX

.Hpds

UF.Dg(i

jj%%x

XU.Xz

.aaZZ4

-sy}C}

8%1sT/

n.Rt&

}.BF,

>%s7h

M*j.Lc

O2.sd3A

=l.Nx

.nG)*

A.UW?/

.oLC-gC%

J D%S*

^ùm5

gkeY3

.dQRD

e.=.IY

^-o

.NTO`heR

.Dl>"

.zYdV

CzRh.qt>h

>) .XX

zcR.AF

-L}Br

ßa(

.Pi5h<

A>ÿ

%x<1<

\B %uZM

xB.rP

$o.SX|

 X.At

k0N%x

i.jF3

3#W.Nd

%SkE1\cS

8P.PU

Fr.Et 

*^"..Bb]

NùF

.FH$q

-Ev%x

c0<.lw

*D.sS_

m.yWq

.zbgS

`|%u[<6

a.Tyd7

|.MG5

f.OR$

.kW.}

oo%u5

)V.PXU

.XNQI

 c[`.lW

9M.Sg

a1=7.lH

.Qlo\

kb.t.xVd

kjz%U

.Mqd;

,L.wy

M}k%S33

@.vbn

.KaHlQ4P

 e

\.Gkap 

.ZE\f

|.QS[

.ZQo!

.wXUM

j%CHcN

ch-Lm}

.dPg`

ZUDp

0=PN.YF

y%Udo

jP%xz}

PS%XH

5.vryV

WC"%x

V.mh}

YA.El|

Aoz%S'

RlF.Ai

%Uz=A

.fTZK

ji.gu=

7-%X6<O

?UexE#

IU.%C

=r.Pc,y"

%s7{K

".VL?S

y].mw

$d.ol

%c}> .

`zb.Uk

Çvs>[

.pUJ6

N%D&6*

4&.gp

j(?.zQ

 b.QU

X<.YL1

G.SYy D0

w ..ZB

^.rmYI

D4.vT

][.XG

6;I)A.LC

3%F;K

0}R.yr

U7I.EW

N`|-%X

_.iy`gU

Ru.sR

($.ll

.OboY

1%u5w

.CnXV

%X:XoN<

.DR*6<xY

D|.Bl

:h34.lM

3x .Fz

/.Rj!

I:{.ze,

%D#k99J

Y;.Qa

N2%X*

o0.UM`

j.jjOqt

:h%x'u

#.aeD

OJ.uO

6.Bi/P

\.%F{

bc*.*1

.aR{tXD

<Vo%F

@-S}T

W^s%X

$ri.gF

"aZ.ha

K.nhq

.Zw< G&F

)rE[I%X

.AR6q

7Pzm%u

.FiR@

T.UpI

.iA*X

ThLeXE

&T.MFX

C%c/)(X

.Sh,d

8%UItK

.%u@K

?%U`~

Cz.lv

%F)lQ

.YFrJ

D.ZEa

q!.gO

i%x<:=

MJ!A.rew

01x.AT

uO]^%D

.;@.Ld

sHexe

ÔUtFf

B>R%F

%XOKM

:%uYRF^

.paW'w

dz,cIu%cP

P.U.Wf

%c)ma

y]%uE

#.IY>J7

d[.zk

6T.Nw

Le(G.Uq$

,.RXy

.eSz@{

.DMf'7<L^

[A.lz%U

L`.sS

9>.qc

zzO`|

?qKt-y}

M.GVT

%c{nGNI

c7.ce

q %xw

CSql

i6~.Axv

~5.ra'

-*.vX

h.Jw3

B.Rl$

c.dr-

.mN{yn

^h}e}.AtF

d%d|m

;l.Nj

 6=%fl4m

.Kxc}

Ì54

b[!z.eB46#o

k.lhx

pK.gJ

:sssh 

7:<<<6000

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><ms_asmv2:trustInfo xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"><ms_asmv2:security><ms_asmv2:requestedPrivileges><ms_asmv2:requestedExecutionLevel xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3" level="asInvoker" ms_asmv3:uiAccess="false"></ms_asmv2:requestedExecutionLevel></ms_asmv2:requestedPrivileges></ms_asmv2:security></ms_asmv2:trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

{92F8A219-E740-49D5-B785-B962AD819724}

{E9F24A7C-13CA-42FB-A4D9-79C3C9D21B28}

{DE28A2EA-77FA-4F2B-8252-C3B5844F6455}

{F0B50D5A-4BBA-4514-AD2C-EBA50C29C460}

@--chrome-sxs

--chrome

--chrome-frame

@%WINDIR%\system32\cabinet.dll

%SYSTEMROOT%\system32\cabinet.dll

C:\Windows\system32\cabinet.dll

@chrome_

update-setup-exe

new-setup-exe

Software\Microsoft\Windows\CurrentVersion\Uninstall\Citrio

SETUP.EX_

CITRIO.PACKED.7Z

50.0.2661.271

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   CatalinaUpdate.exe:1196
   CatalinaUpdate.exe:1072
   CatalinaUpdate.exe:352
   citrio_50.0.2661.271_1.exe:328
   %original file name%.exe:1108

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\Install\{2FEF2209-C78C-4B55-BBBF-5B577A5DB7CF}\citrio_50.0.2661.271_1.exe (449813 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\Download\{92F8A219-E740-49D5-B785-B962AD819724}\50.0.2661.271\citrio_50.0.2661.271_1.exe (449813 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_te.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ca.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ru.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_nl.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fi.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pl.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fr.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psmachine.dll (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_uk.dll (26 bytes)
   %WinDir%\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-1844237615-1960408961-1801674531-1003Core.job (948 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_th.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_zh-TW.dll (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_vi.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_es-419.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdate.dll (5873 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fil.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ta.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_tr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ar.dll (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sk.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_is.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_mr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sw.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_es.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hr.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ja.dll (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_kn.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_en.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_en-GB.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\psuser.dll (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_no.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ml.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateHelper.msi (36 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ur.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_am.dll (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pt-BR.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_bn.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sv.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_et.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_gu.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_da.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdate.exe (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_fa.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ms.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_sl.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hu.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_cs.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_iw.dll (23 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_lt.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ko.dll (21 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_el.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_hi.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_lv.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_zh-CN.dll (19 bytes)
   %WinDir%\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-1844237615-1960408961-1801674531-1003UA.job (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_de.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_id.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateOnDemand.exe (58 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_pt-PT.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_bg.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\npCatalinaUpdate3.dll (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaUpdateBroker.exe (58 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\CatalinaCrashHandler.exe (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_ro.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\1.3.25.223\goopdateres_it.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\CR_35172.tmp\CITRIO.PACKED.7Z (443233 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sl.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_gu.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUT2.tmp (22433 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_nl.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_te.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sk.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_el.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ru.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_es-419.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_iw.dll (23 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_no.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_tr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_en-GB.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_da.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ro.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_uk.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_zh-TW.dll (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_bn.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ms.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ta.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateBroker.exe (58 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_es.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdate.dll (1990 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sw.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_de.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_is.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_sv.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fr.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_en.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_cs.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_mr.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pt-BR.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fa.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_kn.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_bg.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pt-PT.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_id.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fi.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ja.dll (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\npCatalinaUpdate3.dll (236 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\psuser.dll (161 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ml.dll (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ko.dll (21 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_th.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ca.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_vi.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hi.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_zh-CN.dll (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_lv.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hu.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdate.exe (130 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ar.dll (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_pl.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_hr.dll (27 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateHelper.msi (36 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_lt.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_et.dll (25 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_am.dll (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\psmachine.dll (155 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaCrashHandler.exe (130 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_it.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_fil.dll (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\goopdateres_ur.dll (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\GUM1.tmp\CatalinaUpdateOnDemand.exe (58 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "CatalinaGroup Update" = "%Documents and Settings%\%current user%\Local Settings\Application Data\CatalinaGroup\Update\CatalinaUpdate.exe /c"

5. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.