-
-
[旧帖]
[求助]病毒站上下的病毒文件脱壳
0.00雪花
-
发表于:
2007-11-8 15:01
5396
-
[旧帖] [求助]病毒站上下的病毒文件脱壳
0.00雪花
我是菜鸟
最近出了个XP2全打补丁都防不住的IE漏洞
通过嗅探 得出了一些病毒文件的下载路径
1f9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3
a4aK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3d9h3&6V1k6i4S2Q4x3X3g2Z5N6r3#2D9
550K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3M7$3E0A6L8W2)9J5c8X3y4K6M7#2)9J5k6h3y4K6M7H3`.`.
ee9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3k6X3W2J5k6g2)9J5k6h3A6K6
f6cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3N6W2N6s2g2F1k6r3g2J5y4e0m8Q4x3X3g2U0L8$3#2Q4x3V1k6H3K9h3&6Y4i4K6u0W2M7r3S2H3i4K6y4r3K9r3!0K6N6q4)9K6c8l9`.`.
b80K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3K9h3#2S2k6$3g2K6i4K6u0r3L8r3!0Y4L8#2)9J5k6h3N6A6k6R3`.`.
ef3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3d9h3#2S2k6$3g2K6i4K6u0r3j5i4u0J5L8%4M7K6i4K6u0W2k6$3W2X3
8e8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3S2S2L8K6p5^5y4U0m8Q4x3X3g2U0L8W2)9J5c8X3y4D9L8%4y4W2x3g2)9J5k6h3N6A6k6R3`.`.
551K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3S2S2L8K6p5^5y4U0m8Q4x3X3g2U0L8W2)9J5c8Y4N6S2M7X3&6A6L8X3N6Q4x3X3g2Y4K9h3j5`.
e73K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3b7i4u0@1K9h3y4D9k6g2)9J5c8X3W2E0j5h3N6W2M7#2)9J5c8X3q4J5N6r3W2U0L8r3g2Q4y4h3k6U0L8$3#2E0L8$3^5J5i4K6u0W2k6$3W2X3
33dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3S2S2L8K6p5^5y4U0m8Q4x3X3g2U0L8W2)9J5c8X3y4D9L8%4y4W2x3g2)9J5k6h3N6A6k6R3`.`.
905K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3S2S2L8K6p5^5y4U0m8Q4x3X3g2U0L8W2)9J5c8Y4N6S2M7X3&6A6L8X3N6Q4x3X3g2Y4K9h3j5`.
98dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6u0r3j5$3I4A6k6h3&6@1f1r3q4Y4k6g2)9J5c8X3A6K6i4K6u0W2K9Y4y4H3i4K6y4r3N6$3W2V1N6r3S2Q4x3@1b7K6y4e0W2Q4x3U0k6Z5k6h3W2Y4K9s2c8Q4x3@1b7J5y4o6W2Q4x3U0k6#2M7$3g2J5i4K6g2X3K9h3c8Q4x3@1b7J5x3U0M7#2i4K6t1$3N6$3g2T1i4K6g2X3K9h3c8Q4x3@1b7J5y4e0j5#2i4K6t1$3N6h3&6A6L8$3&6Q4y4h3k6A6k6q4)9K6c8o6q4Q4x3U0k6U0L8$3c8W2i4K6g2X3K9h3c8Q4x3@1b7K6y4o6k6Q4x3U0k6K6k6i4u0$3k6i4u0u0M7q4)9K6c8s2m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6t1$3j5h3c8Q4y4h3k6A6k6q4)9K6c8o6x3$3z5q4)9J5y4X3y4G2k6r3g2f1P5i4m8W2i4K6y4p5y4q4)9J5y4Y4y4W2M7Y4k6W2M7V1W2H3i4K6y4p5M7s2m8F1N6s2k6Q4x3X3f1H3x3K6y4Q4x3X3g2U0L8$3@1`.
595K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3K9Y4y4Q4x3V1k6Y4k6K6q4Q4x3X3g2B7M7H3`.`.
396K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3A6K6i4K6u0W2N6i4y4W2M7Y4y4Q4x3X3f1#2x3g2)9J5k6h3I4S2i4K6u0r3z5e0f1H3y4e0V1^5
ce9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4x3I4x3e0y4Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3M7%4c8S2N6q4)9J5k6i4m8Z5M7q4)9K6c8X3W2V1i4K6y4p5y4o6x3^5y4o6t1^5i4K6t1$3N6$3g2T1i4K6g2X3K9h3c8Q4x3@1b7@1x3K6R3@1x3U0S2Q4x3U0k6K6K9r3!0%4i4K6y4p5M7r3W2U0
73cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3K9Y4y4Q4x3V1k6Y4k6K6N6Q4x3X3g2B7M7H3`.`.
d64K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3c8Z5j5#2)9J5k6o6t1H3x3o6W2Q4x3X3g2U0L8W2)9J5c8Y4N6H3i4K6u0r3M7%4m8Q4x3V1k6I4M7h3y4G2L8X3N6Q4x3X3g2Z5N6r3@1`.
2c7K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3c8Z5j5#2)9J5k6o6t1H3x3o6W2Q4x3X3g2U0L8W2)9J5c8Y4N6H3i4K6u0r3M7%4m8Q4x3V1j5J5x3o6l9%4i4K6u0V1x3U0l9H3
401K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3!0G2i4K6u0W2N6X3N6Q4x3V1k6H3j5h3N6W2i4K6u0r3j5h3c8V1i4K6g2X3x3e0l9#2x3e0g2Q4x3X3g2Z5N6r3@1`.
816K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3N6E0i4K6u0r3M7r3W2F1k6#2)9J5k6i4m8Z5M7q4)9K6c8X3S2G2M7%4c8Q4x3@1b7`.
a81K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1x3U0c8Q4x3X3f1#2x3i4W2W2M7#2)9J5k6h3y4G2L8g2)9J5c8X3y4D9K9h3y4C8i4K6u0W2j5i4y4H3P5q4)9K6c8X3W2V1i4K6y4p5x3U0b7$3z5e0V1I4x3K6p5I4i4K6t1$3L8r3!0Y4L8#2)9K6c8o6p5J5
f3dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3!0G2i4K6u0W2N6X3N6Q4x3V1k6H3j5h3N6W2i4K6u0r3e0X3!0Q4x3X3g2B7M7H3`.`.
727K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6u0r3j5$3I4A6k6h3&6@1f1r3q4Y4k6g2)9J5c8X3A6K6i4K6u0W2K9Y4y4H3i4K6y4r3N6$3W2V1N6r3S2Q4x3@1b7K6y4e0W2Q4x3U0k6Z5k6h3W2Y4K9s2c8Q4x3@1b7J5y4o6W2Q4x3U0k6#2M7$3g2J5i4K6g2X3K9h3c8Q4x3@1b7J5x3U0M7#2i4K6t1$3N6$3g2T1i4K6g2X3K9h3c8Q4x3@1b7J5y4e0j5#2i4K6t1$3N6h3&6A6L8$3&6Q4y4h3k6A6k6q4)9K6c8o6q4Q4x3U0k6U0L8$3c8W2i4K6g2X3K9h3c8Q4x3@1b7K6y4o6k6Q4x3U0k6K6k6i4u0$3k6i4u0u0M7q4)9K6c8s2m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6t1$3j5h3c8Q4y4h3k6A6k6q4)9K6c8o6x3$3z5q4)9J5y4X3y4G2k6r3g2f1P5i4m8W2i4K6y4p5y4q4)9J5y4Y4y4W2M7Y4k6W2M7V1W2H3i4K6y4p5M7s2m8F1N6s2k6Q4x3X3f1H3x3K6y4Q4x3X3g2U0L8$3@1`.
3daK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6s2q4I4i4K6u0V1j5$3W2@1P5g2)9J5k6h3A6K6K9$3c8X3K9Y4y4D9k6r3E0B7k6X3I4K6k6r3E0B7k6X3E0K6k6r3A6X3K9$3I4K6k6r3A6S2i4K6u0W2j5$3&6Q4x3@1p5^5x3o6R3^5i4K6u0r3M7$3S2G2N6#2)9J5k6h3q4K6M7s2S2Q4x3@1k6%4K9h3c8@1K9q4)9K6c8o6x3#2z5g2)9J5y4X3S2W2K9h3N6Z5N6q4)9K6c8o6t1@1z5g2)9J5y4Y4g2A6k6q4)9K6c8o6t1J5y4K6g2Q4x3U0k6%4i4K6y4p5x3U0f1$3y4g2)9J5y4Y4g2F1K9h3!0F1i4K6g2X3K9h3c8Q4x3@1b7I4i4K6t1$3j5$3W2V1i4K6y4p5x3K6b7$3i4K6t1$3M7$3g2J5N6X3g2J5K9i4m8Q4x3@1c8H3M7r3&6@1N6W2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5y4Y4m8Q4x3@1b7K6y4U0S2Q4x3U0k6U0L8$3c8W2N6s2W2H3k6g2)9K6c8o6c8Q4x3U0k6K6k6i4u0$3k6i4u0A6M7q4)9K6c8s2m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6t1$3M7r3E0Q4x3@1b7H3z5o6W2U0k6o6y4W2y4U0m8W2x3X3j5K6y4r3x3^5y4K6V1I4z5r3j5#2x3U0u0U0x3K6M7&6y4U0b7^5x3l9`.`.
df5K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1i4K6u0W2x3e0k6Q4x3X3g2$3k6#2)9J5c8W2x3I4y4U0S2Q4x3V1k6z5k6i4N6v1M7K6q4Q4x3X3g2B7M7H3`.`.
6eeK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1i4K6u0W2x3e0k6Q4x3X3g2$3k6#2)9J5c8Y4x3I4y4U0S2Q4x3V1k6x3K9h3&6C8x3e0j5^5i4K6u0W2k6$3W2X3
9aeK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6s2q4I4i4K6u0V1j5$3W2@1P5g2)9J5k6h3A6K6K9$3c8X3K9Y4y4D9k6r3E0B7k6X3I4K6k6r3E0B7k6X3E0K6k6r3A6X3K9$3I4K6k6r3A6S2i4K6u0W2j5$3&6Q4x3@1p5^5x3o6R3^5i4K6u0r3M7$3S2G2N6#2)9J5k6h3q4K6M7s2S2Q4x3@1k6%4K9h3c8@1K9q4)9K6c8o6x3#2z5g2)9J5y4X3S2W2K9h3N6Z5N6q4)9K6c8o6t1@1z5g2)9J5y4Y4g2A6k6q4)9K6c8o6t1J5y4K6g2Q4x3U0k6%4i4K6y4p5x3U0f1$3y4g2)9J5y4Y4g2F1K9h3!0F1i4K6g2X3K9h3c8Q4x3@1b7I4i4K6t1$3j5$3W2V1i4K6y4p5x3K6b7$3i4K6t1$3M7$3g2J5N6X3g2J5K9i4m8Q4x3@1c8H3M7r3&6@1N6W2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5y4Y4m8Q4x3@1b7K6y4U0S2Q4x3U0k6U0L8$3c8W2N6s2W2H3k6g2)9K6c8o6c8Q4x3U0k6K6k6i4u0$3k6i4u0A6M7q4)9K6c8s2m8H3L8Y4c8$3i4K6u0W2x3o6x3K6i4K6u0W2j5$3!0E0i4K6t1$3M7r3E0Q4x3@1b7H3z5o6W2U0k6o6y4W2y4U0m8W2x3X3j5K6y4r3x3^5y4K6V1I4z5r3j5#2x3U0u0U0x3K6M7&6y4U0b7^5x3l9`.`.
e81K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1x3U0c8Q4x3X3f1#2x3i4W2W2M7#2)9J5k6h3y4G2L8g2)9J5c8X3y4D9K9h3y4C8i4K6u0W2j5i4y4H3P5q4)9K6c8X3W2V1i4K6y4p5x3U0b7$3z5e0V1I4x3K6p5I4i4K6t1$3L8r3!0Y4L8#2)9K6c8o6p5J5
bb4K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1i4K6u0W2y4e0q4&6k6i4y4Q4x3X3g2U0L8$3#2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6h3q4K6M7s2S2Q4x3@1k6A6k6q4)9K6c8l9`.`.
dc9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1x3U0c8Q4x3X3f1#2x3i4W2W2M7#2)9J5k6h3y4G2L8g2)9J5c8X3y4G2N6h3&6@1
376K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1i4K6u0W2y4e0q4&6k6i4y4Q4x3X3g2U0L8$3#2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6h3q4K6M7s2S2Q4x3@1k6A6k6q4)9K6c8l9`.`.
c87K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1x3U0c8Q4x3X3f1#2x3i4W2W2M7#2)9J5k6h3y4G2L8g2)9J5c8Y4y4S2i4K6u0W2j5i4y4H3P5q4)9K6c8X3W2V1i4K6y4p5
96aK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2N6h3&6@1x3U0c8Q4x3X3f1#2x3i4W2W2M7#2)9J5k6h3y4G2L8g2)9J5c8Y4y4S2i4K6u0W2j5i4y4H3P5q4)9K6c8X3W2V1i4K6y4p5x3U0b7$3z5e0V1I4x3K6p5I4i4K6t1$3M7X3g2X3k6g2)9K6c8r3S2@1N6s2m8Q4x3U0f1K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3c8Z5j5#2)9J5k6o6t1H3x3o6W2Q4x3X3g2U0L8W2)9J5c8Y4N6H3i4K6u0r3M7%4m8Q4x3V1k6I4M7h3y4G2L8X3N6Q4x3X3g2Z5N6r3#2Q4x3U0k6D9L8$3y4S2N6r3W2G2L8W2)9K6c8r3S2@1N6s2m8Q4x3U0f1K6b7g2)9J5c8W2)9J5c8X3!0G2i4K6u0W2N6X3N6Q4x3V1k6H3j5h3N6W2i4K6u0r3j5h3c8V1i4K6g2X3x3e0l9#2x3e0g2Q4x3X3g2Z5N6r3#2Q4x3U0k6U0L8$3I4G2M7W2)9K6c8o6x3J5P5q4)9J5y4Y4u0W2M7$3!0D9N6i4c8A6L8$3&6Q4x3@1b7I4x3o6t1@1P5o6M7$3z5q4)9J5y4Y4u0W2N6s2g2J5L8X3W2F1k6#2)9K6c8o6m8Q4x3U0k6D9j5h3&6Y4N6h3q4Y4k6g2)9K6c8s2A6Z5i4K6u0V1j5$3&6Q4x3U0k6#2j5g2)9K6c8p5#2G2P5X3W2D9L8r3q4Q4x3V1j5@1i4K6u0W2x3q4)9J5y4e0t1H3i4K6t1#2x3U0S2U0L8$3#2H3j5i4c8A6j5X3I4W2i4K6t1#2x3@1u0Q4x3U0f1J5x3p5#2e0d9f1g2Q4x3U0f1J5x3o6k6Q4x3X3f1H3i4K6t1#2x3@1u0Q4x3U0f1J5x3q4N6A6L8X3c8G2N6%4y4Q4x3U0f1J5x3p5&6f1i4K6t1#2x3U0l9#2i4K6u0W2x3g2)9J5y4e0y4n7i4K6t1#2x3U0m8e0g2U0q4Q4x3U0f1K6b7W2)9J5y4e0t1H3i4K6u0W2e0V1g2f1i4K6t1#2x3U0m8o6e0q4u0Q4x3U0f1J5x3o6u0Q4x3X3f1H3i4K6u0W2y4e0l9%4x3U0N6Q4x3U0f1J5z5b7`.`.
040K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3d9h3&6V1k6i4S2Q4x3X3g2Z5N6r3#2D9i4K6u0o6M7r3E0Q4x3@1b7H3z5o6W2U0k6o6y4W2
fe3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6s2q4I4i4K6u0V1j5$3W2@1P5g2)9J5k6h3A6K6K9$3c8X3K9Y4y4D9k6r3E0B7k6X3I4K6k6r3E0B7k6X3E0K6k6r3A6X3K9$3I4K6k6r3A6S2i4K6u0W2j5$3&6Q4x3V1k6o6L8$3c8W2i4K6u0r3M7s2m8F1N6s2k6Q4x3V1k6U0M7r3y4Q4y4h3k6H3M7r3&6@1N6U0t1K6i4K6u0W2K9s2c8E0L8q4)9K6c8Y4N6Q4x3@1b7J5y4e0j5#2i4K6t1$3M7q4)9K6c8o6x3$3z5q4)9J5y4Y4g2A6k6q4)9K6c8o6t1J5y4K6g2Q4x3U0k6U0K9h3c8Q4x3@1b7K6y4o6k6Q4x3U0k6E0k6q4)9K6c8r3t1J5x3e0p5J5k6U0f1@1x3o6M7K6z5h3j5%4x3o6c8U0x3e0M7K6k6o6x3H3k6X3b7&6k6U0j5J5x3e0t1&6i4K6t1$3N6s2y4Q4x3@1b7$3x3K6x3K6x3o6p5J5y4K6M7#2y4e0V1#2x3K6p5J5y4e0m8Q4x3U0k6#2L8q4)9K6c8r3S2@1N6s2m8Q4x3@1p5`.
90eK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3d9h3&6V1k6i4S2Q4x3X3g2Z5N6r3#2D9
79bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6s2q4I4i4K6u0V1j5$3W2@1P5g2)9J5k6h3A6K6K9$3c8X3K9Y4y4D9k6r3E0B7k6X3I4K6k6r3E0B7k6X3E0K6k6r3A6X3K9$3I4K6k6r3A6S2i4K6u0W2j5$3&6Q4x3V1k6o6L8$3c8W2i4K6u0r3M7s2m8F1N6s2k6Q4x3V1k6U0M7r3y4Q4y4h3k6H3M7r3&6@1N6U0t1K6i4K6u0W2K9s2c8E0L8q4)9J5k6h3A6K6
/Code/ppntv/cpc_ppntv23.html?w=2565&p=368&uid=2275&cid=346&md=b2112f540739f704c173d30fd9f62129&ts=633301277559531250&ul=
ca5K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3d9h3&6V1k6i4S2Q4x3X3g2Z5N6r3#2D9
4bdK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4M7K6i4K6u0W2L8%4u0Y4i4K6u0r3g2q4u0Q4x3V1k6Z5N6r3#2D9y4q4)9J5c8X3I4G2L8%4y4W2i4K6u0W2k6s2c8V1
585K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5c8X3y4H3j5#2)9#2k6U0t1H3i4K6u0W2k6$3W2X3i4K6t1&6i4K6y4n7
865K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5c8X3y4H3j5#2)9#2k6U0t1H3i4K6u0W2k6$3W2X3
b7cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6s2q4I4i4K6u0V1j5$3W2@1P5g2)9J5k6h3A6K6K9$3c8X3K9Y4y4D9k6r3E0B7k6X3I4K6k6r3E0B7k6X3E0K6k6r3A6X3K9$3I4K6k6r3A6S2i4K6u0W2j5$3&6Q4x3V1k6o6L8$3c8W2i4K6u0r3M7s2m8F1N6s2k6Q4x3V1k6U0M7r3y4Q4y4h3k6H3M7r3&6@1N6U0t1K6i4K6u0W2K9s2c8E0L8q4)9J5k6h3A6K6
4d4K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4u0S2N6U0W2Q4x3X3g2U0L8$3#2Q4x3V1k6Y4L8g2)9J5c8U0x3$3y4U0k6Q4x3X3g2Z5N6r3@1`.
374K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5c8X3y4H3j5#2)9#2k6U0t1H3i4K6u0W2k6$3W2X3
d74K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4M7K6i4K6u0W2L8%4u0Y4i4K6u0r3g2q4u0Q4x3V1k6Z5N6r3#2D9y4q4)9J5c8Y4y4@1M7X3W2U0N6q4)9J5k6h3c8@1k6l9`.`.
f53K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3N6G2i4K6u0W2L8h3W2U0M7X3!0K6L8$3k6@1i4K6u0W2j5$3!0E0i4K6u0r3k6Y4N6D9K9h3&6C8i4K6u0r3i4K6y4r3L8r3W2F1K9$3W2V1i4K6y4p5z5o6p5^5x3l9`.`.
a2bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0l9K6x3#2)9J5k6h3y4G2L8g2)9J5c8X3y4H3j5#2)9#2k6U0t1H3i4K6u0W2k6$3W2X3
10eK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3A6K6i4K6u0W2N6i4y4W2M7Y4y4Q4x3X3f1#2x3g2)9J5k6h3I4S2i4K6u0r3z5e0f1H3y4e0V1^5i4K6u0W2K9Y4x3`.
258K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6e0f1I4i4K6u0W2L8r3q4Q4x3V1k6Q4x3@1j5&6y4e0l9#2z5e0R3`.
52eK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2U0L8$3&6Q4x3X3g2S2K9X3W2S2L8X3N6Q4x3X3g2F1k6i4c8Q4x3V1k6A6j5$3!0F1i4K6g2X3y4g2)9J5k6h3N6A6k6R3`.`.
0d3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6e0f1I4i4K6u0W2L8r3q4Q4x3V1k6Y4L8#2)9J5k6h3q4K6M7q4)9K6c8Y4y4$3K9h3c8Q4x3@1b7I4y4#2)9J5y4X3W2V1i4K6y4p5z5e0f1H3y4e0V1^5i4K6t1$3N6s2m8S2k6$3g2K6i4K6y4p5
066K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4x3I4x3e0y4Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3M7%4c8S2N6q4)9J5k6i4m8Z5M7q4)9K6c8X3W2V1i4K6y4p5y4o6x3^5y4o6t1^5i4K6t1$3N6$3g2T1i4K6g2X3K9h3c8Q4x3@1b7@1x3K6R3@1x3U0S2Q4x3U0k6K6K9r3!0%4i4K6y4p5M7r3W2U0
d98K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3y4F1P5Y4A6Q4x3X3g2U0L8$3#2Q4x3V1k6K6N6r3q4@1i4K6u0r3N6$3g2T1M7$3W2@1k6g2)9J5k6i4m8Z5M7q4)9K6c8Y4N6W2j5W2)9#2k6X3W2V1i4K6y4p5y4o6x3^5y4o6t1^5
acfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2U0L8$3&6Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3K9h3y4G2L8W2)9J5k6h3N6A6k6R3`.`.
cc9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4x3I4x3e0y4Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3M7%4c8S2N6q4)9J5k6h3S2@1L8g2)9K6c8X3W2V1i4K6y4p5y4o6x3^5y4o6t1^5
198K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2U0L8$3&6Q4x3X3g2S2K9X3W2S2L8X3N6Q4x3X3g2F1k6i4c8Q4x3V1k6A6j5$3!0F1i4K6g2X3y4g2)9J5k6h3N6A6k6R3`.`.
8e8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4q4I4j5$3!0F1k6#2)9J5k6h3y4F1i4K6u0r3K9h3&6V1k6i4S2Q4x3X3g2B7M7H3`.`.
93aK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4x3I4x3e0y4Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3M7%4c8S2N6q4)9J5k6h3S2@1L8g2)9K6c8X3W2V1i4K6y4p5y4o6x3^5y4o6t1^5i4K6t1$3j5h3N6@1i4K6y4p5L8h3!0*7K9h3I4D9j5g2)9J5c8U0c8Q4x3X3f1H3i4K6t1#2x3U0m8Q4x3U0f1J5z5r3y4G2L8i4m8S2N6r3W2T1L8r3g2Q4x3U0f1K6b7W2)9J5y4e0t1H3L8i4y4A6k6g2)9J5y4e0t1H3y4W2)9J5k6e0m8Q4x3U0f1K6b7W2)9J5y4e0t1H3N6$3W2F1k6r3!0%4M7#2)9J5y4e0t1H3L8Y4c8Q4x3U0f1J5x3o6g2Q4x3X3f1I4i4K6t1#2x3@1u0Q4x3U0f1J5x3s2y4$3x3g2)9J5y4e0y4n7i4K6t1#2x3U0m8Q4x3X3g2F1k6i4c8Q4x3U0f1J5x3r3y4D9M7W2)9J5y4e0t1H3x3W2)9J5k6e0m8Q4x3X3f1#2x3o6M7J5y4#2)9J5y4e0t1&6i4K6t1$3M7W2)9K6c8r3S2@1N6s2m8Q4x3U0f1K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3M7#2)9J5y4e0y4r3K9%4N6Q4x3U0f1K6c8q4)9J5y4e0t1$3M7$3y4Q4x3U0f1K6c8s2N6W2j5W2)9J5y4e0t1$3j5$3I4Q4x3U0f1K6c8o6y4Q4x3U0f1J5y4Y4c8F1i4K6t1#2x3@1c8K6K9i4c8W2K9r3q4G2x3e0t1K6i4K6t1#2x3U0k6U0N6q4)9J5y4e0y4p5x3q4)9J5y4e0t1$3M7r3&6Q4x3U0f1K6c8q4)9J5y4e0t1$3M7X3&6Q4x3U0f1K6c8q4)9J5y4e0t1$3L8r3#2Q4x3U0f1K6c8q4)9J5y4e0t1$3K9h3g2Q4x3U0f1K6c8r3N6T1x3U0x3I4x3W2)9J5y4e0t1$3M7Y4x3J5i4K6t1#2x3@1c8Q4x3U0f1J5y4X3#2&6M7$3g2D9k6h3y4@1N6X3q4D9N6h3g2Q4x3U0f1K6c8q4)9J5y4e0t1$3k6W2)9J5y4e0y4p5i4K6t1#2x3U0k6H3N6W2)9J5y4e0y4p5i4K6t1#2x3U0k6*7i4K6t1#2x3@1c8Q4x3U0f1J5y4X3k6J5L8$3#2Q4x3U0f1K6c8q4)9J5y4e0t1$3N6$3!0J5k6q4)9J5y4e0y4p5M7i4p5@1i4K6u0W2x3q4)9J5y4X3q4z5i4K6y4p5e0h3W2U0M7X3!0K6L8$3k6@1i4K6t1#2x3U0m8u0L8Y4c8W2M7X3&6W2N6q4)9J5y4e0t1H3c8i4S2H3L8r3!0J5k6i4u0Q4x3U0k6D9k6#2)9K6c8s2A6Z5i4K6u0V1j5$3&6Q4x3U0k6a6f1#2)9K6c8q4N6A6L8U0x3J5i4K6t1$3j5g2k6Q4x3@1b7@1i4K6u0W2x3q4)9J5y4e0t1H3i4K6t1#2x3U0S2U0L8$3#2H3j5i4c8A6j5X3I4W2i4K6t1#2x3@1u0Q4x3U0f1J5x3p5#2e0d9f1g2Q4x3U0f1J5x3o6k6Q4x3X3f1H3i4K6t1#2x3@1u0Q4x3U0f1J5x3q4N6A6L8X3c8G2N6%4y4Q4x3U0f1J5x3p5&6f1i4K6t1#2x3U0l9#2i4K6u0W2x3g2)9J5y4e0y4n7i4K6t1#2x3U0m8e0g2U0q4Q4x3U0f1K6b7W2)9J5y4e0t1H3i4K6u0W2e0V1g2f1i4K6t1#2x3U0m8o6e0q4u0Q4x3U0f1J5x3o6u0Q4x3X3f1H3i4K6u0W2y4e0l9%4x3U0N6Q4x3U0f1J5z5g2)9J5y4X3&6@1K9h3#2W2i4K6y4p5x3q4)9J5k6e0R3^5x3K6p5%4x3o6l9H3i4K6t1#2x3U0l9I4x3e0V1@1y4e0l9J5x3e0f1I4i4K6t1$3M7X3g2H3k6h3q4@1K9i4m8Q4x3@1b7H3i4K6t1$3M7Y4c8A6L8h3g2Q4x3@1b7H3i4K6t1$3j5$3&6*7P5W2)9#2k6X3g2A6k6q4)9K6c8o6f1%4x3U0p5&6x3e0x3^5i4K6u0V1K9s2c8@1M7q4)9J5y4e0y4m8i4K6u0r3i4K6u0r3N6%4N6%4i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6K6i4K6t1#2x3@1k6C8N6#2)9J5y4e0y4p5i4K6t1#2x3U0k6K6j5#2)9J5y4e0y4p5N6$3g2T1i4K6t1#2x3U0k6U0L8q4)9J5y4e0y4p5x3#2)9J5y4e0t1$3N6r3&6Q4x3U0f1K6c8s2y4A6N6r3g2Z5j5h3)9I4x3U0y4Q4x3U0f1J5y4X3y4@1i4K6t1#2x3@1b7H3i4K6t1#2x3U0k6H3L8W2)9J5y4e0y4p5i4K6t1#2x3U0k6J5L8W2)9J5y4e0y4p5i4K6t1#2x3U0k6D9L8g2)9J5y4e0y4p5i4K6t1#2x3U0k6A6k6g2)9J5y4e0y4p5k6$3t1J5x3K6p5J5i4K6t1#2x3U0k6J5M7K6u0Q4x3U0f1K6c8q4)9J5y4e0t1$3L8i4W2K6k6h3I4W2j5%4c8$3j5h3I4#2k6g2)9J5y4e0y4p5i4K6t1#2x3U0k6X3i4K6t1#2x3@1c8Q4x3U0f1J5y4Y4m8$3i4K6t1#2x3@1c8Q4x3U0f1J5y4Y4A6Q4x3U0f1K6c8q4)9J5y4e0t1$3k6Y4u0G2L8g2)9J5y4e0y4p5i4K6t1#2x3U0k6%4L8%4u0V1i4K6t1#2x3@1c8I4M7e0c8Q4x3X3f1H3i4K6t1$3M7$3S2G2N6%4m8Q4x3@1b7I4x3o6t1@1P5o6M7$3z5l9`.`.
db9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6A6M7q4)9J5k6e0f1I4i4K6u0W2L8r3q4Q4x3V1k6Y4L8#2)9J5k6h3q4K6M7q4)9K6c8Y4y4$3K9h3c8Q4x3@1b7I4y4#2)9J5y4X3W2V1i4K6y4p5z5e0f1H3y4e0V1^5i4K6t1$3N6s2m8S2k6$3g2K6i4K6y4p5x3g2)9J5y4Y4c8@1K9h3#2W2M7#2)9K6c8o6q4Q4x3U0k6@1P5X3!0F1k6g2)9K6c8o6S2Q4x3U0k6@1j5$3!0D9L8%4u0Q4x3@1b7K6x3W2)9J5y4Y4y4e0K9i4A6W2i4K6y4p5x3e0l9J5y4q4)9J5b7K6M7$3z5q4)9J5y4Y4u0W2k6X3g2J5M7X3g2J5i4K6y4p5K9s2c8@1M7q4)9J5y4e0y4m8i4K6u0r3i4K6u0r3N6%4N6%4i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6K6i4K6t1#2x3@1k6C8N6#2)9J5y4e0y4p5i4K6t1#2x3U0k6K6j5#2)9J5y4e0y4p5N6$3g2T1i4K6t1#2x3U0k6U0L8q4)9J5y4e0y4p5x3#2)9J5y4e0t1$3N6r3&6Q4x3U0f1K6c8s2y4A6N6r3g2Z5j5h3)9I4x3U0y4Q4x3U0f1J5y4X3y4@1i4K6t1#2x3@1b7H3i4K6t1#2x3U0k6H3L8W2)9J5y4e0y4p5i4K6t1#2x3U0k6J5L8W2)9J5y4e0y4p5i4K6t1#2x3U0k6D9L8g2)9J5y4e0y4p5i4K6t1#2x3U0k6A6k6g2)9J5y4e0y4p5k6$3t1J5x3K6p5J5i4K6t1#2x3U0k6J5M7K6u0Q4x3U0f1K6c8q4)9J5y4e0t1$3L8i4W2K6k6h3I4W2j5%4c8$3j5h3I4#2k6g2)9J5y4e0y4p5i4K6t1#2x3U0k6X3i4K6t1#2x3@1c8Q4x3U0f1J5y4Y4m8$3i4K6t1#2x3@1c8Q4x3U0f1J5y4Y4A6Q4x3U0f1K6c8q4)9J5y4e0t1$3k6Y4u0G2L8g2)9J5y4e0y4p5i4K6t1#2x3U0k6%4L8%4u0V1i4K6t1#2x3@1c8I4M7e0c8Q4x3X3f1H3i4K6t1$3N6Y4m8S2k6$3g2Q4x3@1c8Z5N6s2c8H3i4K6t1#2x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2I4M7h3y4G2L8X3N6Q4x3X3g2U0L8W2)9J5c8V1W2F1k6r3g2^5i4K6u0W2K9s2c8E0L8l9`.`.
fa8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0p5$3i4K6u0W2N6X3N6Q4x3V1k6e0x3e0j5^5i4K6u0r3f1K6p5$3z5o6u0Q4x3X3g2W2P5r3f1`.
4b7K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2U0L8$3&6Q4x3X3g2U0L8Y4A6*7i4K6u0W2j5$3!0E0i4K6u0r3K9h3y4G2L8W2)9J5k6h3N6A6k6R3`.`.
bc0K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6#2)9J5k6e0p5$3i4K6u0W2N6X3N6Q4x3V1k6e0x3e0j5^5i4K6u0r3f1K6p5$3z5q4)9J5k6h3g2^5k6b7`.`.
本来想把网马嗅探出来的 无奈 水平实在太烂~
然后把目光转向EXE
奇怪的是EXE好像的分成两个部分
S1682.exe 只有2K不到 无法用OD载入
S168.exe 用ESP定律 脱了一层后（没有修复 还没找到资料）提示的是 upolyx 的壳
再载如 入口点是一个循环 跳开后发现另一个入口 脱了后 同样....
继续不下去了
希望高手能解释一下
顺便把过程贴一下 让菜鸟学习一下
谢谢了
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
