testing.ipynb

{
 "metadata": {
  "name": ""
 },
 "nbformat": 3,
 "nbformat_minor": 0,
 "worksheets": [
  {
   "cells": [
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "import jager\n",
      "import requests\n",
      "import bs4"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [],
     "prompt_number": 28
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "url = \"http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\""
     ],
     "language": "python",
     "metadata": {},
     "outputs": [],
     "prompt_number": 29
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "r = requests.get(url)"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [],
     "prompt_number": 30
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "r_text = r.text"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [],
     "prompt_number": 31
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "r_text"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [
      {
       "metadata": {},
       "output_type": "pyout",
       "prompt_number": 32,
       "text": [
        "u'<!DOCTYPE html>\\n<html class=\\'v2\\' dir=\\'ltr\\' xmlns=\\'http://www.w3.org/1999/xhtml\\' xmlns:b=\\'http://www.google.com/2005/gml/b\\' xmlns:data=\\'http://www.google.com/2005/gml/data\\' xmlns:expr=\\'http://www.google.com/2005/gml/expr\\'>\\n<head>\\n<meta content=\\'IE=EmulateIE7\\' http-equiv=\\'X-UA-Compatible\\'/>\\n<meta content=\\'width=100%\\' name=\\'viewport\\'/>\\n<meta content=\\'text/html; charset=UTF-8\\' http-equiv=\\'Content-Type\\'/>\\n<script type=\"text/javascript\">(function() { var b=window,f=\"chrome\",g=\"tick\",k=\"jstiming\";(function(){function d(a){this.t={};this.tick=function(a,d,c){var e=void 0!=c?c:(new Date).getTime();this.t[a]=[e,d];if(void 0==c)try{b.console.timeStamp(\"CSI/\"+a)}catch(h){}};this[g](\"start\",null,a)}var a;b.performance&&(a=b.performance.timing);var n=a?new d(a.responseStart):new d;b.jstiming={Timer:d,load:n};if(a){var c=a.navigationStart,h=a.responseStart;0<c&&h>=c&&(b[k].srt=h-c)}if(a){var e=b[k].load;0<c&&h>=c&&(e[g](\"_wtsrt\",void 0,c),e[g](\"wtsrt_\",\"_wtsrt\",h),e[g](\"tbsd_\",\"wtsrt_\"))}try{a=null,\\nb[f]&&b[f].csi&&(a=Math.floor(b[f].csi().pageT),e&&0<c&&(e[g](\"_tbnd\",void 0,b[f].csi().startE),e[g](\"tbnd_\",\"_tbnd\",c))),null==a&&b.gtbExternal&&(a=b.gtbExternal.pageT()),null==a&&b.external&&(a=b.external.pageT,e&&0<c&&(e[g](\"_tbnd\",void 0,b.external.startE),e[g](\"tbnd_\",\"_tbnd\",c))),a&&(b[k].pt=a)}catch(p){}})();b.tickAboveFold=function(d){var a=0;if(d.offsetParent){do a+=d.offsetTop;while(d=d.offsetParent)}d=a;750>=d&&b[k].load[g](\"aft\")};var l=!1;function m(){l||(l=!0,b[k].load[g](\"firstScrollTime\"))}b.addEventListener?b.addEventListener(\"scroll\",m,!1):b.attachEvent(\"onscroll\",m);\\n })();</script>\\n<meta content=\\'blogger\\' name=\\'generator\\'/>\\n<link href=\\'http://contagiodump.blogspot.com/favicon.ico\\' rel=\\'icon\\' type=\\'image/x-icon\\'/>\\n<link href=\\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\' rel=\\'canonical\\'/>\\n<link rel=\"alternate\" type=\"application/atom+xml\" title=\"contagio - Atom\" href=\"http://contagiodump.blogspot.com/feeds/posts/default\" />\\n<link rel=\"alternate\" type=\"application/rss+xml\" title=\"contagio - RSS\" href=\"http://contagiodump.blogspot.com/feeds/posts/default?alt=rss\" />\\n<link rel=\"service.post\" type=\"application/atom+xml\" title=\"contagio - Atom\" href=\"http://www.blogger.com/feeds/7885177434994542510/posts/default\" />\\n\\n<link rel=\"alternate\" type=\"application/atom+xml\" title=\"contagio - Atom\" href=\"http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\" />\\n<!--[if IE]><script type=\"text/javascript\" src=\"https://www.blogger.com/static/v1/jsbin/836876192-ieretrofit.js\"></script>\\n<![endif]-->\\n<link href=\\'http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s1600/zc.PNG\\' rel=\\'image_src\\'/>\\n<!--[if IE]> <script> (function() { var html5 = (\"abbr,article,aside,audio,canvas,datalist,details,\" + \"figure,footer,header,hgroup,mark,menu,meter,nav,output,\" + \"progress,section,time,video\").split(\\',\\'); for (var i = 0; i < html5.length; i++) { document.createElement(html5[i]); } try { document.execCommand(\\'BackgroundImageCache\\', false, true); } catch(e) {} })(); </script> <![endif]-->\\n<title>contagio: CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other</title>\\n<link type=\\'text/css\\' rel=\\'stylesheet\\' href=\\'https://www.blogger.com/static/v1/widgets/1535467126-widget_css_2_bundle.css\\' />\\n<link type=\\'text/css\\' rel=\\'stylesheet\\' href=\\'//www.google.com/uds/css/gsearch.css\\' />\\n<link type=\\'text/css\\' rel=\\'stylesheet\\' href=\\'https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7885177434994542510&zx=15c09101-d66c-46e6-ba4e-d9898875ea26\\' />\\n<style id=\\'page-skin-1\\' type=\\'text/css\\'><!--\\n/*\\n-----------------------------------------------\\nBlogger Template Style\\nName:     Simple\\nDesigner: Josh Peterson\\nURL:      www.noaesthetic.com\\n----------------------------------------------- */\\n/* Variable definitions\\n====================\\n<Variable name=\"keycolor\" description=\"Main Color\" type=\"color\" default=\"#66bbdd\"/>\\n<Group description=\"Page Text\" selector=\"body\">\\n<Variable name=\"body.font\" description=\"Font\" type=\"font\"\\ndefault=\"normal normal 100% Verdana, Arial, Sans-serif;\"/>\\n<Variable name=\"body.text.color\" description=\"Text Color\" type=\"color\" default=\"#222222\"/>\\n</Group>\\n<Group description=\"Backgrounds\" selector=\".body-fauxcolumns-outer\">\\n<Variable name=\"body.background.color\" description=\"Outer Background\" type=\"color\" default=\"#66bbdd\"/>\\n<Variable name=\"content.background.color\" description=\"Main Background\" type=\"color\" default=\"#ffffff\"/>\\n<Variable name=\"header.background.color\" description=\"Header Background\" type=\"color\" default=\"transparent\"/>\\n</Group>\\n<Group description=\"Links\" selector=\".main-outer\">\\n<Variable name=\"link.color\" description=\"Link Color\" type=\"color\" default=\"#2288bb\"/>\\n<Variable name=\"link.visited.color\" description=\"Visited Color\" type=\"color\" default=\"#888888\"/>\\n<Variable name=\"link.hover.color\" description=\"Hover Color\" type=\"color\" default=\"#33aaff\"/>\\n</Group>\\n<Group description=\"Blog Title\" selector=\".header h1\">\\n<Variable name=\"header.font\" description=\"Font\" type=\"font\"\\ndefault=\"normal normal 60px Arial, Tahoma, Helvetica, FreeSans, sans-serif\"/>\\n<Variable name=\"header.text.color\" description=\"Title Color\" type=\"color\" default=\"#3399bb\" />\\n</Group>\\n<Group description=\"Blog Description\" selector=\".header .description\">\\n<Variable name=\"description.text.color\" description=\"Description Color\" type=\"color\"\\ndefault=\"#777777\" />\\n</Group>\\n<Group description=\"Tabs Text\" selector=\".tabs-inner .widget li a\">\\n<Variable name=\"tabs.font\" description=\"Font\" type=\"font\"\\ndefault=\"normal normal 14px Verdana, Arial, Sans-serif\"/>\\n<Variable name=\"tabs.text.color\" description=\"Text Color\" type=\"color\" default=\"#999999\"/>\\n<Variable name=\"tabs.selected.text.color\" description=\"Selected Color\" type=\"color\" default=\"#000000\"/>\\n</Group>\\n<Group description=\"Tabs Background\" selector=\".tabs-outer .PageList\">\\n<Variable name=\"tabs.background.color\" description=\"Background Color\" type=\"color\" default=\"#f5f5f5\"/>\\n<Variable name=\"tabs.selected.background.color\" description=\"Selected Color\" type=\"color\" default=\"#eeeeee\"/>\\n</Group>\\n<Group description=\"Post Title\" selector=\"h3.post-title, .comments h4\">\\n<Variable name=\"post.title.font\" description=\"Font\" type=\"font\"\\ndefault=\"normal normal 22px Verdana, Arial, Sans-serif\"/>\\n</Group>\\n<Group description=\"Date Header\" selector=\".date-header\">\\n<Variable name=\"date.header.color\" description=\"Text Color\" type=\"color\"\\ndefault=\"#000000\"/>\\n<Variable name=\"date.header.background.color\" description=\"Background Color\" type=\"color\"\\ndefault=\"transparent\"/>\\n</Group>\\n<Group description=\"Post Footer\" selector=\".post-footer\">\\n<Variable name=\"post.footer.text.color\" description=\"Text Color\" type=\"color\" default=\"#666666\"/>\\n<Variable name=\"post.footer.background.color\" description=\"Background Color\" type=\"color\"\\ndefault=\"#f9f9f9\"/>\\n<Variable name=\"post.footer.border.color\" description=\"Shadow Color\" type=\"color\" default=\"#ffffff\"/>\\n</Group>\\n<Group description=\"Gadgets\" selector=\"h2\">\\n<Variable name=\"widget.title.font\" description=\"Title Font\" type=\"font\"\\ndefault=\"normal bold 11px Verdana, Arial, Sans-serif\"/>\\n<Variable name=\"widget.title.text.color\" description=\"Title Color\" type=\"color\" default=\"#000000\"/>\\n<Variable name=\"widget.alternate.text.color\" description=\"Alternate Color\" type=\"color\" default=\"#999999\"/>\\n</Group>\\n<Group description=\"Images\" selector=\".main-inner\">\\n<Variable name=\"image.background.color\" description=\"Background Color\" type=\"color\" default=\"#ffffff\"/>\\n<Variable name=\"image.border.color\" description=\"Border Color\" type=\"color\" default=\"#eeeeee\"/>\\n<Variable name=\"image.text.color\" description=\"Caption Text Color\" type=\"color\" default=\"#000000\"/>\\n</Group>\\n<Group description=\"Accents\" selector=\".content-inner\">\\n<Variable name=\"body.rule.color\" description=\"Separator Line Color\" type=\"color\" default=\"#eeeeee\"/>\\n<Variable name=\"tabs.border.color\" description=\"Tabs Border Color\" type=\"color\" default=\"#999999\"/>\\n</Group>\\n<Variable name=\"body.background\" description=\"Body Background\" type=\"background\"\\ncolor=\"#888888\" default=\"$(color) none repeat scroll top left\"/>\\n<Variable name=\"body.background.override\" description=\"Body Background Override\" type=\"string\" default=\"\"/>\\n<Variable name=\"body.background.gradient.cap\" description=\"Body Gradient Cap\" type=\"url\"\\ndefault=\"url(http://www.blogblog.com/1kt/simple/gradients_light.png)\"/>\\n<Variable name=\"body.background.gradient.tile\" description=\"Body Gradient Tile\" type=\"url\"\\ndefault=\"url(http://www.blogblog.com/1kt/simple/body_gradient_tile_light.png)\"/>\\n<Variable name=\"content.background.color.selector\" description=\"Content Background Color Selector\" type=\"string\" default=\".content-inner\"/>\\n<Variable name=\"content.padding\" description=\"Content Padding\" type=\"length\" default=\"10px\"/>\\n<Variable name=\"content.padding.horizontal\" description=\"Content Horizontal Padding\" type=\"length\" default=\"0px\"/>\\n<Variable name=\"content.shadow.spread\" description=\"Content Shadow Spread\" type=\"length\" default=\"0px\"/>\\n<Variable name=\"content.shadow.spread.webkit\" description=\"Content Shadow Spread (WebKit)\" type=\"length\" default=\"0px\"/>\\n<Variable name=\"content.shadow.spread.ie\" description=\"Content Shadow Spread (IE)\" type=\"length\" default=\"10px\"/>\\n<Variable name=\"main.border.width\" description=\"Main Border Width\" type=\"length\" default=\"0\"/>\\n<Variable name=\"header.background.gradient\" description=\"Header Gradient\" type=\"url\" default=\"none\"/>\\n<Variable name=\"header.shadow.offset.left\" description=\"Header Shadow Offset Left\" type=\"length\" default=\"-1px\"/>\\n<Variable name=\"header.shadow.offset.top\" description=\"Header Shadow Offset Top\" type=\"length\" default=\"-1px\"/>\\n<Variable name=\"header.shadow.spread\" description=\"Header Shadow Spread\" type=\"length\" default=\"1px\"/>\\n<Variable name=\"header.padding\" description=\"Header Padding\" type=\"length\" default=\"10px\"/>\\n<Variable name=\"header.border.size\" description=\"Header Border Size\" type=\"length\" default=\"1px\"/>\\n<Variable name=\"header.bottom.border.size\" description=\"Header Bottom Border Size\" type=\"length\" default=\"0\"/>\\n<Variable name=\"header.border.horizontalsize\" description=\"Header Horizontal Border Size\" type=\"length\" default=\"0\"/>\\n<Variable name=\"description.text.size\" description=\"Description Text Size\" type=\"string\" default=\"140%\"/>\\n<Variable name=\"tabs.margin.top\" description=\"Tabs Margin Top\" type=\"length\" default=\"0\" />\\n<Variable name=\"tabs.margin.side\" description=\"Tabs Side Margin\" type=\"length\" default=\"30px\" />\\n<Variable name=\"tabs.background.gradient\" description=\"Tabs Background Gradient\" type=\"url\"\\ndefault=\"url(http://www.blogblog.com/1kt/simple/gradients_light.png)\"/>\\n<Variable name=\"tabs.border.width\" description=\"Tabs Border Width\" type=\"length\" default=\"1px\"/>\\n<Variable name=\"tabs.bevel.border.width\" description=\"Tabs Bevel Border Width\" type=\"length\" default=\"1px\"/>\\n<Variable name=\"date.header.padding\" description=\"Date Header Padding\" type=\"string\" default=\"inherit\"/>\\n<Variable name=\"date.header.letterspacing\" description=\"Date Header Letter Spacing\" type=\"string\" default=\"inherit\"/>\\n<Variable name=\"date.header.margin\" description=\"Date Header Margin\" type=\"string\" default=\"inherit\"/>\\n<Variable name=\"post.margin.bottom\" description=\"Post Bottom Margin\" type=\"length\" default=\"25px\"/>\\n<Variable name=\"image.border.small.size\" description=\"Image Border Small Size\" type=\"length\" default=\"0px\"/>\\n<Variable name=\"image.border.large.size\" description=\"Image Border Large Size\" type=\"length\" default=\"0px\"/>\\n<Variable name=\"page.width.selector\" description=\"Page Width Selector\" type=\"string\" default=\".region-inner\"/>\\n<Variable name=\"page.width\" description=\"Page Width\" type=\"string\" default=\"auto\"/>\\n<Variable name=\"main.section.margin\" description=\"Main Section Margin\" type=\"length\" default=\"15px\"/>\\n<Variable name=\"main.padding\" description=\"Main Padding\" type=\"length\" default=\"15px\"/>\\n<Variable name=\"main.padding.top\" description=\"Main Padding Top\" type=\"length\" default=\"30px\"/>\\n<Variable name=\"main.padding.bottom\" description=\"Main Padding Bottom\" type=\"length\" default=\"30px\"/>\\n<Variable name=\"paging.background\"\\ncolor=\"#ffffff\"\\ndescription=\"Background of blog paging area\" type=\"background\"\\ndefault=\"transparent none no-repeat scroll top center\"/>\\n<Variable name=\"footer.bevel\" description=\"Bevel border length of footer\" type=\"length\" default=\"0\"/>\\n<Variable name=\"startSide\" description=\"Side where text starts in blog language\" type=\"automatic\" default=\"left\"/>\\n<Variable name=\"endSide\" description=\"Side where text ends in blog language\" type=\"automatic\" default=\"right\"/>\\n*/\\n/* Content\\n----------------------------------------------- */\\nbody {\\nfont: normal normal 14px \\'Trebuchet MS\\', Trebuchet, sans-serif;\\ncolor: #000000;\\nbackground: #888888 url(http://1.bp.blogspot.com/-WNpS2v38f70/TgdTIIUj74I/AAAAAAAACFU/Tyn5URGKnEY/s1600/AsphaltDamaged0001_2_.jpg) repeat fixed top right;\\npadding: 0 0px 0px 0px;\\n}\\nhtml body .region-inner {\\nmin-width: 0;\\nmax-width: 100%;\\nwidth: auto;\\n}\\na:link {\\ntext-decoration:none;\\ncolor: #274e13;\\n}\\na:visited {\\ntext-decoration:none;\\ncolor: #660000;\\n}\\na:hover {\\ntext-decoration:underline;\\ncolor: #618f2b;\\n}\\n.body-fauxcolumn-outer .fauxcolumn-inner {\\nbackground: transparent none repeat scroll top left;\\n_background-image: none;\\n}\\n.body-fauxcolumn-outer .cap-top {\\nposition: absolute;\\nz-index: 1;\\nheight: 400px;\\nwidth: 100%;\\nbackground: #888888 url(http://1.bp.blogspot.com/-WNpS2v38f70/TgdTIIUj74I/AAAAAAAACFU/Tyn5URGKnEY/s1600/AsphaltDamaged0001_2_.jpg) repeat fixed top right;\\n}\\n.body-fauxcolumn-outer .cap-top .cap-left {\\nwidth: 100%;\\nbackground: transparent none repeat-x scroll top left;\\n_background-image: none;\\n}\\n.content-outer {\\n-moz-box-shadow: 0 0 0px rgba(0, 0, 0, .0);\\n-webkit-box-shadow: 0 0 0px rgba(0, 0, 0, .0);\\n-goog-ms-box-shadow: 0 0 0px #333333;\\nbox-shadow: 0 0 0px rgba(0, 0, 0, .0);\\nmargin-bottom: 0px;\\n}\\n.content-inner {\\npadding: 0px 0px;\\n}\\n.content-inner {\\nbackground-color: #ffffff;\\n}\\n/* Header\\n----------------------------------------------- */\\n.header-outer {\\nbackground: #09111a url(http://3.bp.blogspot.com/-Rz6yhnEuWgo/TgbM67KjcRI/AAAAAAAACEw/HB2_mBBfTC8/s400/gradients_light.png) repeat-x scroll 0 -400px;\\n_background-image: none;\\n}\\n.Header h1 {\\nfont: normal bold 50px \\'Courier New\\', Courier, FreeMono, monospace;\\ncolor: #cccccc;\\ntext-shadow: 0px 0px 0px rgba(0, 0, 0, .0);\\n}\\n.Header h1 a {\\ncolor: #cccccc;\\n}\\n.Header .description {\\nfont-size: 140%;\\ncolor: #ffffff;\\n}\\n.header-inner .Header .titlewrapper {\\npadding: 20px 10px;\\n}\\n.header-inner .Header .descriptionwrapper {\\npadding: 0 10px;\\n}\\n/* Tabs\\n----------------------------------------------- */\\n.tabs-inner .section:first-child {\\nborder-top: 0 solid #ffffff;\\n}\\n.tabs-inner .section:first-child ul {\\nmargin-top: -0;\\nborder-top: 0 solid #ffffff;\\nborder-left: 0 solid #ffffff;\\nborder-right: 0 solid #ffffff;\\n}\\n.tabs-inner .widget ul {\\nbackground: #fff9ee none repeat-x scroll 0 -100%;\\n_background-image: none;\\nborder-bottom: 1px solid #ffffff;\\nmargin-top: 0;\\nmargin-left: -10px;\\nmargin-right: -10px;\\n}\\n.tabs-inner .widget li a {\\ndisplay: inline-block;\\npadding: .6em 1em;\\nfont: normal normal 12px Verdana, Arial, Sans-serif;\\ncolor: #998877;\\nborder-left: 1px solid #ffffff;\\nborder-right: 0px solid #ffffff;\\n}\\n.tabs-inner .widget li:first-child a {\\nborder-left: none;\\n}\\n.tabs-inner .widget li.selected a, .tabs-inner .widget li a:hover {\\ncolor: #000000;\\nbackground-color: #fff9ee;\\ntext-decoration: none;\\n}\\n/* Columns\\n----------------------------------------------- */\\n.main-outer {\\nborder-top: 0 solid #999999;\\n}\\n.fauxcolumn-left-outer .fauxcolumn-inner {\\nborder-right: 1px solid #999999;\\n}\\n.fauxcolumn-right-outer .fauxcolumn-inner {\\nborder-left: 4px solid #999999;\\n}\\n/* Headings\\n----------------------------------------------- */\\nh2 {\\nmargin: 0 0 1em 0;\\nfont: normal bold 12px Verdana, Arial, Sans-serif;\\ncolor: #000000;\\ntext-transform: uppercase;\\n}\\n/* Widgets\\n----------------------------------------------- */\\n.widget .zippy {\\ncolor: #999999;\\ntext-shadow: 2px 2px 1px rgba(0, 0, 0, .0);\\n}\\n.widget .popular-posts ul {\\nlist-style: none;\\n}\\n/* Posts\\n----------------------------------------------- */\\n.date-header span {\\nbackground-color: #ffffff;\\ncolor: #998877;\\npadding: inherit;\\nletter-spacing: inherit;\\nmargin: inherit;\\n}\\n.main-inner {\\npadding-top: 15px;\\npadding-bottom: 15px;\\n}\\n.main-inner .column-center-inner {\\npadding: 0 10px;\\n}\\n.main-inner .column-center-inner .section {\\nmargin: 0 10px;\\n}\\n.post {\\nmargin: 0 0 60px 0;\\n}\\nh3.post-title, .comments h4 {\\nfont: normal bold 18px Arial, Tahoma, Helvetica, FreeSans, sans-serif;\\nmargin: .75em 0 0;\\n}\\n.post-body {\\nfont-size: 100%;\\nline-height: 1.4;\\nposition: relative;\\n}\\n.post-body img, .post-body .tr-caption-container, .Profile img, .Image img,\\n.BlogList .item-thumbnail img {\\npadding: 0px;\\nbackground: #ffffff;\\nborder: 1px solid #ffffff;\\n-moz-box-shadow: 1px 1px 5px rgba(0, 0, 0, .0);\\n-webkit-box-shadow: 1px 1px 5px rgba(0, 0, 0, .0);\\nbox-shadow: 1px 1px 5px rgba(0, 0, 0, .0);\\n}\\n.post-body img, .post-body .tr-caption-container {\\npadding: 0px;\\n}\\n.post-body .tr-caption-container {\\ncolor: #222222;\\n}\\n.post-body .tr-caption-container img {\\npadding: 0;\\nbackground: transparent;\\nborder: none;\\n-moz-box-shadow: 0 0 0 rgba(0, 0, 0, .0);\\n-webkit-box-shadow: 0 0 0 rgba(0, 0, 0, .0);\\nbox-shadow: 0 0 0 rgba(0, 0, 0, .0);\\n}\\n.post-header {\\nmargin: 0 0 1.5em;\\nline-height: 1.6;\\nfont-size: 93%;\\n}\\n.post-footer {\\nmargin: 15px -2px 0;\\npadding: 5px 10px;\\ncolor: #666555;\\nbackground-color: #eee9dd;\\nborder-bottom: 1px solid transparent;\\nline-height: 1.6;\\nfont-size: 93%;\\n}\\n#comments .comment-author {\\npadding-top: 1.5em;\\nborder-top: 1px solid #999999;\\nbackground-position: 0 1.5em;\\n}\\n#comments .comment-author:first-child {\\npadding-top: 0;\\nborder-top: none;\\n}\\n.avatar-image-container {\\nmargin: .2em 0 0;\\n}\\n#comments .avatar-image-container img {\\nborder: 1px solid #ffffff;\\n}\\n/* Accents\\n---------------------------------------------- */\\n.section-columns td.columns-cell {\\nborder-left: 1px solid #999999;\\n}\\n.blog-pager {\\nbackground: transparent none no-repeat scroll top center;\\n}\\n.blog-pager-older-link, .home-link,\\n.blog-pager-newer-link {\\nbackground-color: #ffffff;\\npadding: 5px;\\n}\\n.footer-outer {\\nborder-top: 0 dashed #bbbbbb;\\n}\\n/* Mobile\\n----------------------------------------------- */\\n.mobile .content-outer {\\n-webkit-box-shadow: 0 0 3px rgba(0, 0, 0, .0);\\nbox-shadow: 0 0 3px rgba(0, 0, 0, .0);\\npadding: 0 0px;\\n}\\nbody.mobile .AdSense {\\nmargin: 0 -0px;\\n}\\n.mobile .tabs-inner .widget ul {\\nmargin-left: 0;\\nmargin-right: 0;\\n}\\n.mobile .post {\\nmargin: 0;\\n}\\n.mobile .main-inner .column-center-inner .section {\\nmargin: 0;\\n}\\n.mobile .date-header span {\\npadding: 0.1em 10px;\\nmargin: 0 -10px;\\n}\\n.mobile h3.post-title {\\nmargin: 0;\\n}\\n.mobile .blog-pager {\\nbackground: transparent;\\n}\\n.mobile .footer-outer {\\nborder-top: none;\\n}\\n.mobile .main-inner, .mobile .footer-inner {\\nbackground-color: #ffffff;\\n}\\n.mobile-index-contents {\\ncolor: #000000;\\n}\\n.mobile-link-button {\\nbackground-color: #274e13;\\n}\\n.mobile-link-button a:link, .mobile-link-button a:visited {\\ncolor: #ffffff;\\n}\\n.mobile .body-fauxcolumn-outer .cap-top {\\nbackground-size: 100% auto;\\n}\\n.mobile .tabs-inner .section:first-child {\\nborder-top: none;\\n}\\n.mobile .tabs-inner .PageList .widget-content {\\nbackground-color: #fff9ee;\\ncolor: #000000;\\n}\\n.mobile .tabs-inner .PageList .widget-content .pagelist-arrow {\\nborder-left: 1px solid #ffffff;\\n}\\n\\n--></style>\\n<style id=\\'template-skin-1\\' type=\\'text/css\\'><!--\\nbody {\\nmin-width: 1200px;\\n}\\n.content-outer, .content-fauxcolumn-outer, .region-inner {\\nmin-width: 1200px;\\nmax-width: 1200px;\\n_width: 1200px;\\n}\\n.main-inner .columns {\\npadding-left: 0;\\npadding-right: 350px;\\n}\\n.main-inner .fauxcolumn-center-outer {\\nleft: 0;\\nright: 350px;\\n/* IE6 does not respect left and right together */\\n_width: expression(this.parentNode.offsetWidth -\\nparseInt(\"0\") -\\nparseInt(\"350px\") + \\'px\\');\\n}\\n.main-inner .fauxcolumn-left-outer {\\nwidth: 0;\\n}\\n.main-inner .fauxcolumn-right-outer {\\nwidth: 350px;\\n}\\n.main-inner .column-left-outer {\\nwidth: 0;\\nright: 100%;\\nmargin-left: -0;\\n}\\n.main-inner .column-right-outer {\\nwidth: 350px;\\nmargin-right: -350px;\\n}\\n#layout {\\nmin-width: 0;\\n}\\n#layout .content-outer {\\nmin-width: 0;\\nwidth: 100%;\\n}\\n#layout .region-inner {\\nmin-width: 0;\\nwidth: auto;\\n}\\n--></style>\\n<script type=\"text/javascript\">var a=\"indexOf\",b=\"&m=1\",e=\"(^|&)m=\",f=\"?\",g=\"?m=1\";function h(){var c=window.location.href,d=c.split(f);switch(d.length){case 1:return c+g;case 2:return 0<=d[1].search(e)?null:c+b;default:return null}}var k=navigator.userAgent;if(-1!=k[a](\"Mobile\")&&-1!=k[a](\"WebKit\")&&-1==k[a](\"iPad\")||-1!=k[a](\"Opera Mini\")||-1!=k[a](\"IEMobile\")){var l=h();l&&window.location.replace(l)};\\n</script><script type=\"text/javascript\">\\nif (window.jstiming) window.jstiming.load.tick(\\'headEnd\\');\\n</script></head>\\n<body class=\\'loading\\'>\\n<div class=\\'navbar section\\' id=\\'navbar\\'><div class=\\'widget Navbar\\' id=\\'Navbar1\\'><script type=\"text/javascript\">\\n    function setAttributeOnload(object, attribute, val) {\\n      if(window.addEventListener) {\\n        window.addEventListener(\\'load\\',\\n          function(){ object[attribute] = val; }, false);\\n      } else {\\n        window.attachEvent(\\'onload\\', function(){ object[attribute] = val; });\\n      }\\n    }\\n  </script>\\n<div id=\"navbar-iframe-container\"></div>\\n<script type=\"text/javascript\" src=\"https://apis.google.com/js/plusone.js\"></script>\\n<script type=\"text/javascript\">\\n        gapi.load(\"gapi.iframes:gapi.iframes.style.bubble\", function() {\\n          if (gapi.iframes && gapi.iframes.getContext) {\\n            gapi.iframes.getContext().openChild({\\n                url: \\'https://www.blogger.com/navbar.g?targetBlogID\\\\0757885177434994542510\\\\46blogName\\\\75contagio\\\\46publishMode\\\\75PUBLISH_MODE_BLOGSPOT\\\\46navbarType\\\\75LIGHT\\\\46layoutType\\\\75LAYOUTS\\\\46searchRoot\\\\75http://contagiodump.blogspot.com/search\\\\46blogLocale\\\\75en\\\\46v\\\\0752\\\\46homepageUrl\\\\75http://contagiodump.blogspot.com/\\\\46targetPostID\\\\0756900440735518039445\\\\46blogPostOrPageUrl\\\\75http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\\\46vt\\\\758473562369828364305\\',\\n                where: document.getElementById(\"navbar-iframe-container\"),\\n                id: \"navbar-iframe\"\\n            });\\n          }\\n        });\\n      </script><script type=\"text/javascript\">\\n(function() {\\nvar script = document.createElement(\\'script\\');\\nscript.type = \\'text/javascript\\';\\nscript.src = \\'//pagead2.googlesyndication.com/pagead/js/google_top_exp.js\\';\\nvar head = document.getElementsByTagName(\\'head\\')[0];\\nif (head) {\\nhead.appendChild(script);\\n}})();\\n</script>\\n</div></div>\\n<div class=\\'body-fauxcolumns\\'>\\n<div class=\\'fauxcolumn-outer body-fauxcolumn-outer\\'>\\n<div class=\\'cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left\\'>\\n<div class=\\'fauxborder-right\\'></div>\\n<div class=\\'fauxcolumn-inner\\'>\\n</div>\\n</div>\\n<div class=\\'cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n</div>\\n<div class=\\'content\\'>\\n<div class=\\'content-fauxcolumns\\'>\\n<div class=\\'fauxcolumn-outer content-fauxcolumn-outer\\'>\\n<div class=\\'cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left\\'>\\n<div class=\\'fauxborder-right\\'></div>\\n<div class=\\'fauxcolumn-inner\\'>\\n</div>\\n</div>\\n<div class=\\'cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n</div>\\n<div class=\\'content-outer\\'>\\n<div class=\\'content-cap-top cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left content-fauxborder-left\\'>\\n<div class=\\'fauxborder-right content-fauxborder-right\\'></div>\\n<div class=\\'content-inner\\'>\\n<header>\\n<div class=\\'header-outer\\'>\\n<div class=\\'header-cap-top cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left header-fauxborder-left\\'>\\n<div class=\\'fauxborder-right header-fauxborder-right\\'></div>\\n<div class=\\'region-inner header-inner\\'>\\n<div class=\\'header section\\' id=\\'header\\'><div class=\\'widget Header\\' id=\\'Header1\\'>\\n<div id=\\'header-inner\\'>\\n<a href=\\'http://contagiodump.blogspot.com/\\' style=\\'display: block\\'>\\n<img alt=\\'contagio\\' height=\\'168px; \\' id=\\'Header1_headerimg\\' src=\\'http://4.bp.blogspot.com/-XTY9SK0QpUw/Tgf_zjUcO3I/AAAAAAAACG0/BUCIMDP8XJg/s1600/contagio222.jpg\\' style=\\'display: block\\' width=\\'1114px; \\'/>\\n</a>\\n</div>\\n</div></div>\\n</div>\\n</div>\\n<div class=\\'header-cap-bottom cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n</header>\\n<div class=\\'tabs-outer\\'>\\n<div class=\\'tabs-cap-top cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left tabs-fauxborder-left\\'>\\n<div class=\\'fauxborder-right tabs-fauxborder-right\\'></div>\\n<div class=\\'region-inner tabs-inner\\'>\\n<div class=\\'tabs section\\' id=\\'crosscol\\'><div class=\\'widget PageList\\' id=\\'PageList1\\'>\\n<h2>Pages</h2>\\n<div class=\\'widget-content\\'>\\n<ul>\\n<li><a href=\\'http://contagiodump.blogspot.com/\\'>Home</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/p/customsearch.html\\'>Search the Interwebs</a></li>\\n</ul>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=PageList&widgetId=PageList1&action=editWidget&sectionId=crosscol\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"PageList1\"));\\' target=\\'configPageList1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div><div class=\\'widget HTML\\' id=\\'HTML7\\'>\\n<div class=\\'widget-content\\'>\\n<p><a href=\"http://contagiodump.blogspot.com/?m=1\">Mobile and print friendly view</a>                                         |                               <a href=\"http://contagioexchange.blogspot.com/\">Contagio Exchange - Contagio community malware dump</a></p>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML7&action=editWidget&sectionId=crosscol\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML7\"));\\' target=\\'configHTML7\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div></div>\\n<div class=\\'tabs section\\' id=\\'crosscol-overflow\\'></div>\\n</div>\\n</div>\\n<div class=\\'tabs-cap-bottom cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n<div class=\\'main-outer\\'>\\n<div class=\\'main-cap-top cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left main-fauxborder-left\\'>\\n<div class=\\'fauxborder-right main-fauxborder-right\\'></div>\\n<div class=\\'region-inner main-inner\\'>\\n<div class=\\'columns fauxcolumns\\'>\\n<div class=\\'fauxcolumn-outer fauxcolumn-center-outer\\'>\\n<div class=\\'cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left\\'>\\n<div class=\\'fauxborder-right\\'></div>\\n<div class=\\'fauxcolumn-inner\\'>\\n</div>\\n</div>\\n<div class=\\'cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n<div class=\\'fauxcolumn-outer fauxcolumn-left-outer\\'>\\n<div class=\\'cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left\\'>\\n<div class=\\'fauxborder-right\\'></div>\\n<div class=\\'fauxcolumn-inner\\'>\\n</div>\\n</div>\\n<div class=\\'cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n<div class=\\'fauxcolumn-outer fauxcolumn-right-outer\\'>\\n<div class=\\'cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left\\'>\\n<div class=\\'fauxborder-right\\'></div>\\n<div class=\\'fauxcolumn-inner\\'>\\n</div>\\n</div>\\n<div class=\\'cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n<!-- corrects IE6 width calculation -->\\n<div class=\\'columns-inner\\'>\\n<div class=\\'column-center-outer\\'>\\n<div class=\\'column-center-inner\\'>\\n<div class=\\'main section\\' id=\\'main\\'><div class=\\'widget Blog\\' id=\\'Blog1\\'>\\n<div class=\\'blog-posts hfeed\\'>\\n<!-- google_ad_section_start(name=default) -->\\n\\n          <div class=\"date-outer\">\\n        \\n<h2 class=\\'date-header\\'><span>Monday, July 21, 2014</span></h2>\\n\\n          <div class=\"date-posts\">\\n        \\n<div class=\\'post-outer\\'>\\n<div class=\\'post hentry\\'>\\n<a name=\\'6900440735518039445\\'></a>\\n<h3 class=\\'post-title entry-title\\'>\\n<a href=\\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\'>CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other</a>\\n</h3>\\n<div class=\\'post-header-line-1\\'></div>\\n<div class=\\'post-body entry-content\\'>\\n<div dir=\"ltr\" style=\"text-align: left;\" trbidi=\"on\">\\n<div>\\n</div>\\n<div>\\n<br />\\n<a href=\"http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s1600/zc.PNG\" imageanchor=\"1\" style=\"clear: left; float: left; margin-bottom: 1em; margin-right: 1em;\"><img border=\"0\" src=\"http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s1600/zc.PNG\" height=\"200\" width=\"162\" /></a>Here are all samples (+ more) mentioned in this post by Fireeye : T<a href=\"http://www.fireeye.com/blog/technical/2014/07/the-little-signature-that-could-the-curious-case-of-cz-solution.html\">he Little Signature That Could: The Curious Case of CZ Solution</a>\"<br />\\nAll files are digitally signed with a \"CZ Solutions\" certificate making it easy to create a Yara or ClamAV signature. <br />\\n<br />\\nA few Zeus samples seem to be still beaconing. Most are sinkholed.<br />\\nThe certificate is now revoked by VeriSign.<br />\\n<br />\\nEnjoy<br />\\n<div>\\n<br />\\n<br />\\n<br /></div>\\n<div>\\n<br /></div>\\n<div>\\n<div style=\"background-color: #618f2b; color: white; line-height: 19px; text-align: center;\">\\n<span style=\"font-family: Courier New, Courier, monospace;\"><b>Download</b></span></div>\\n<div>\\n<div style=\"font-size: 14px; line-height: 19px;\">\\n<br />\\n<b><br /></b></div>\\n<a href=\"http://3.bp.blogspot.com/-QWi7lS_gbfo/T8ipCvOkCsI/AAAAAAAADRM/5klAlK5LmNg/s1600/rednag.png\" imageanchor=\"1\" style=\"clear: left; margin-bottom: 1em; margin-right: 1em;\"><img border=\"0\" src=\"http://3.bp.blogspot.com/-QWi7lS_gbfo/T8ipCvOkCsI/AAAAAAAADRM/5klAlK5LmNg/s1600/rednag.png\" style=\"font-family: \\'Courier New\\', Courier, monospace; font-size: 14px;\" /></a><a href=\"http://www.mediafire.com/download/42fftq8eqn52d4s/CZ_Solutions_signed.zip\">Download. Email me if you need the password</a><br />\\n<br />\\n<br />\\n<br />\\n<a name=\\'more\\'></a><br />\\n<br />\\n<div style=\"background-color: #618f2b; color: white; line-height: 19px; text-align: center;\">\\n<span style=\"font-family: Courier New, Courier, monospace;\"><b>File Information</b></span></div>\\n<div>\\n<div style=\"line-height: 19px;\">\\n<span style=\"font-family: inherit;\"><br /></span></div>\\n<span style=\"font-family: inherit;\">Listed by Fireeye&nbsp;</span><br />\\n<ol style=\"text-align: left;\">\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">Xtreme Rat_78CED3B6C04D372CE10B6B8606B3B747</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">78ced3b6c04d372ce10b6b8606b3b747</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">Spy-Net 2.6_6A56F6735F4B16A60F39B18842FD97D0</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\"> </span><span style=\"line-height: 19px;\">6_6A56F6735F4B16A60F39B18842FD97D0</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\"> </span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">Xtreme Rat_7C00BA0FCBFEE6186994A8988A864385.msg</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\"> </span><span style=\"line-height: 19px;\">msg</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\"> </span><span style=\"line-height: 19px;\">7c00ba0fcbfee6186994a8988a864385</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private _2E776E18DEC61CF6CCD68FBACD55FAB3</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">2e776e18dec61cf6ccd68fbacd55fab3</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private _BD70A7CAE3EBF85CF1EDD9EE776D8364</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">bd70a7cae3ebf85cf1edd9ee776d8364</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private_0BE3B0E296BE33903BF76B8CD9CF52CA</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">0be3b0e296be33903bf76b8cd9cf52ca</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private_7416EC2889227F046F48C15C45C102DA</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">7416ec2889227f046f48c15c45c102da</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private_BE47EC66D861C35784DA527BF0F2E03A</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">be47ec66d861c35784da527bf0f2e03a</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private_C27232691DACF4CFF24A4D04B3B2896B</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">c27232691dacf4cff24a4d04b3b2896b</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">XtremeRAT 3.5 Private_E79636E4C7418544D188A29481C100BB</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">e79636e4c7418544d188a29481c100bb</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">Zeus_9C11EF09131A3373EEF5C9D83802D56B</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">9c11ef09131a3373eef5c9d83802d56b</span></span></li>\\n<li><span style=\"font-family: inherit;\"><span style=\"line-height: 19px;\">Zeus_DCD3E45D40C8817061F716557E7A05B6</span><span class=\"Apple-tab-span\" style=\"line-height: 19px; white-space: pre;\">  </span><span style=\"line-height: 19px;\">dcd3e45d40c8817061f716557e7a05b6</span></span></li>\\n</ol>\\n<span style=\"font-family: inherit;\"><br /></span>\\n<br />\\n<div>\\n<span style=\"font-family: inherit;\">Additional (mix of RATs and Trojans)</span><br />\\n<br />\\n<ol style=\"text-align: left;\">\\n<li><span style=\"font-family: inherit;\">2D186068153091927B26CD3A6831BE68<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>2d186068153091927b26cd3a6831be68</span></li>\\n<li><span style=\"font-family: inherit;\">4A997E3395A8BB8D73193E158289F4CE<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>4a997e3395a8bb8d73193e158289f4ce</span></li>\\n<li><span style=\"font-family: inherit;\">7E92A754AAAA0853469566D5DBF2E70C<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>7e92a754aaaa0853469566d5dbf2e70c</span></li>\\n<li><span style=\"font-family: inherit;\">9CFD17C48FC0D300E4AA22E2C8C029D6<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>9cfd17c48fc0d300e4aa22e2c8c029d6</span></li>\\n<li><span style=\"font-family: inherit;\">37FEE821695B664EBE66D55D8C0696F2<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>37fee821695b664ebe66d55d8c0696f2</span></li>\\n<li><span style=\"font-family: inherit;\">445C22E94EAB61B3D4682824A19F8E92<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>445c22e94eab61b3d4682824a19f8e92</span></li>\\n<li><span style=\"font-family: inherit;\">819B4C40F56F69C72E62EF06C85EA3E1<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>819b4c40f56f69c72e62ef06c85ea3e1</span></li>\\n<li><span style=\"font-family: inherit;\">947C21CB8E28B854FF02C2241399A450<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>947c21cb8e28b854ff02c2241399a450</span></li>\\n<li><span style=\"font-family: inherit;\">2859089CC3E31DA60C64D56C416175E2<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>2859089cc3e31da60c64d56c416175e2</span></li>\\n<li><span style=\"font-family: inherit;\">A9EE1BF62DEE532BE2BE217D3E4A8927<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>a9ee1bf62dee532be2be217d3e4a8927</span></li>\\n<li><span style=\"font-family: inherit;\">AC87BC7DD4B38FA3EBA23BF042B160CE<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>ac87bc7dd4b38fa3eba23bf042b160ce</span></li>\\n<li><span style=\"font-family: inherit;\">B953FD2B3D5C10EC735681982D3C6352<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>b953fd2b3d5c10ec735681982d3c6352</span></li>\\n<li><span style=\"font-family: inherit;\">BD5188031BB8EB317FB58F0A49CCBF9C<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>bd5188031bb8eb317fb58f0a49ccbf9c</span></li>\\n<li><span style=\"font-family: inherit;\">D7CF30E3DBFD32A1D1E38CEE464EC6A6<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>d7cf30e3dbfd32a1d1e38cee464ec6a6</span></li>\\n<li><span style=\"font-family: inherit;\">E1AFC706C8C96FACEDB6CB62E6CBFD2D<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>e1afc706c8c96facedb6cb62e6cbfd2d</span></li>\\n<li><span style=\"font-family: inherit;\">Gh0stB_7A26BBD7B5942B49FC0A9CB7268BD030<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>7a26bbd7b5942b49fc0a9cb7268bd030</span></li>\\n<li><span style=\"font-family: inherit;\">SpyRat_E0B0BBA2F6399B0577C37E2A3BC3390A<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>e0b0bba2f6399b0577c37e2a3bc3390a</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_0D8F9C5898596251233C3FD1DCB34161<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>0d8f9c5898596251233c3fd1dcb34161</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_7A6BBC32868A9F776452355F909F95D6<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>7a6bbc32868a9f776452355f909f95d6</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_7CD6C4A6103F23858C7ED047391F1D3B<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>7cd6c4a6103f23858c7ed047391f1d3b</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_52BE0408084F536E42FEB7C57F521592<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>52be0408084f536e42feb7c57f521592</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_5746DD569623431BA41A247FA64847D7<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>5746dd569623431ba41a247fa64847d7</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_A79089B5E6744C622D61BEFA40AF77D3<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>a79089b5e6744c622d61befa40af77d3</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_E2190F61B532BD51E585449BAAE31BC1<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>e2190f61b532bd51e585449baae31bc1</span></li>\\n<li><span style=\"font-family: inherit;\">Zeus_F76A509FEE28C5F65046D6DC072658B2<span class=\"Apple-tab-span\" style=\"white-space: pre;\"> </span>f76a509fee28c5f65046d6dc072658b2</span></li>\\n</ol>\\n</div>\\n</div>\\n</div>\\n</div>\\n</div>\\n<div>\\n<br /></div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</div>\\n<div class=\\'post-footer\\'>\\n<div class=\\'post-footer-line post-footer-line-1\\'><span class=\\'post-author vcard\\'>\\nPosted by\\n<span class=\\'fn\\'>Mila</span>\\n</span>\\n<span class=\\'post-timestamp\\'>\\nat\\n<a class=\\'timestamp-link\\' href=\\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\' rel=\\'bookmark\\' title=\\'permanent link\\'><abbr class=\\'published\\' title=\\'2014-07-21T00:57:00-04:00\\'>12:57 AM</abbr></a>\\n</span>\\n<span class=\\'post-comment-link\\'>\\n</span>\\n<span class=\\'post-labels\\'>\\nTags:\\n<a href=\\'http://contagiodump.blogspot.com/search/label/BozokRAT\\' rel=\\'tag\\'>BozokRAT</a>,\\n<a href=\\'http://contagiodump.blogspot.com/search/label/Spy-Net\\' rel=\\'tag\\'>Spy-Net</a>,\\n<a href=\\'http://contagiodump.blogspot.com/search/label/Xtreme%20RAT\\' rel=\\'tag\\'>Xtreme RAT</a>,\\n<a href=\\'http://contagiodump.blogspot.com/search/label/Zeus\\' rel=\\'tag\\'>Zeus</a>\\n</span>\\n<span class=\\'post-backlinks post-comment-link\\'>\\n</span>\\n<span class=\\'post-icons\\'>\\n<span class=\\'item-control blog-admin pid-351517278\\'>\\n<a href=\\'http://www.blogger.com/post-edit.g?blogID=7885177434994542510&postID=6900440735518039445&from=pencil\\' title=\\'Edit Post\\'>\\n<img alt=\\'\\' class=\\'icon-action\\' height=\\'18\\' src=\\'http://img2.blogblog.com/img/icon18_edit_allbkg.gif\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n</div>\\n<div class=\\'post-footer-line post-footer-line-2\\'></div>\\n<div class=\\'post-footer-line post-footer-line-3\\'></div>\\n</div>\\n</div>\\n<div class=\\'comments\\' id=\\'comments\\'>\\n<a name=\\'comments\\'></a>\\n<h4>1 comment:</h4>\\n<div class=\\'comments-content\\'>\\n<script async=\\'async\\' src=\\'//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js\\' type=\\'text/javascript\\'></script>\\n<script type=\\'text/javascript\\'>\\n    (function() {\\n      var items = [{\\'id\\': \\'6747629419280839826\\', \\'body\\': \\'Ingin Liburan Ke \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Karimunjawa\\\\74/a\\\\76 , ingin \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Paket Wisata Karimunjawa murah\\\\74/a\\\\76, Hubungi kami \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Tour Karimunjawa\\\\74/a\\\\76 island +6285201391216 (Syaiful) PIN BB 30c9f29c. Ayo datang ke \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76karimun jawa \\\\74/a\\\\76 bersama keluarga, dengan mengikuti \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket wisata karimunjawa\\\\74/a\\\\76 yang termasuk \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76biro wisata karimun jawa\\\\74/a\\\\76 berpengalaman karena memberikan \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket karimun jawa murah\\\\74/a\\\\76,anda sudah Bisa menikmati \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 Wisata Karimunjawa\\\\74/a\\\\76 di \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 pulau Karimunjawa\\\\74/a\\\\76 atau \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Karimunjawa island\\\\74/a\\\\76. lanjut bisa menghubungi \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76www.tourkarimunjawaisland.com\\\\74/a\\\\76. Untuk mendapatkan pilihan paket \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Honeymoon Karimunjawa \\\\74/a\\\\76, paket  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Diving Karimunjawa \\\\74/a\\\\76, paket Hotel \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Nirvana karimunjawa\\\\74/a\\\\76 , paket \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76omah alchy karimunjawa\\\\74/a\\\\76 dan \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 Paket Murah karimunjawa \\\\74/a\\\\76, \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 paket hotel karimunjawa\\\\74/a\\\\76,  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket homestay karimunjawa\\\\74/a\\\\76,  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket 2 hari 1 malam karimunjawa\\\\74/a\\\\76,  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket 3 hari 2 malam karimunjawa\\\\74/a\\\\76,  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket 4 hari 3 malam karimunjawa\\\\74/a\\\\76, \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 paket 2 h 1 m karimunjawa\\\\74/a\\\\76, \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76 paket 3 h 2 m karimunjawa\\\\74/a\\\\76,  \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76paket 4 h 3 m karimunjawa\\\\74/a\\\\76. untuk \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76Paket karimunjawa\\\\74/a\\\\76 dan \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76karimunjawa murah\\\\74/a\\\\76,  hanya di \\\\74a href\\\\75\\\\42http://www.tourkarimunjawaisland.com/\\\\42 rel\\\\75\\\\42nofollow\\\\42\\\\76karimunjawa tour\\\\74/a\\\\076\\', \\'timestamp\\': \\'1406091451247\\', \\'permalink\\': \\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html?showComment\\\\0751406091451247#c6747629419280839826\\', \\'author\\': {\\'name\\': \\'karimunjawa\\', \\'avatarUrl\\': \\'http://img1.blogblog.com/img/blank.gif\\', \\'profileUrl\\': \\'http://www.tourkarimunjawaisland.com/\\'}, \\'displayTime\\': \\'July 23, 2014 at 12:57 AM\\', \\'deleteclass\\': \\'item-control blog-admin pid-792372887\\'}];\\n      var msgs = {\\'loadMore\\': \\'Load more...\\', \\'loading\\': \\'Loading...\\', \\'loaded\\': \\'No more!\\', \\'addComment\\': \\'Add comment\\', \\'reply\\': \\'Reply\\', \\'delete\\': \\'Delete\\'};\\n      var config = {\\'blogId\\': \\'7885177434994542510\\', \\'postId\\': \\'6900440735518039445\\', \\'feed\\': \\'http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\\', \\'authorName\\': \\'Mila\\', \\'authorUrl\\': \\'http://www.blogger.com/profile/09472209631979859691\\', \\'baseUri\\': \\'http://www.blogger.com\\', \\'maxThreadDepth\\': 2};\\n\\n// <![CDATA[\\n      var cursor = null;\\n      if (items && items.length > 0) {\\n        cursor = parseInt(items[items.length - 1].timestamp) + 1;\\n      }\\n\\n      var bodyFromEntry = function(entry) {\\n        if (entry.gd$extendedProperty) {\\n          for (var k in entry.gd$extendedProperty) {\\n            if (entry.gd$extendedProperty[k].name == \\'blogger.contentRemoved\\') {\\n              return \\'<span class=\"deleted-comment\">\\' + entry.content.$t + \\'</span>\\';\\n            }\\n          }\\n        }\\n        return entry.content.$t;\\n      }\\n\\n      var parse = function(data) {\\n        cursor = null;\\n        var comments = [];\\n        if (data && data.feed && data.feed.entry) {\\n          for (var i = 0, entry; entry = data.feed.entry[i]; i++) {\\n            var comment = {};\\n            // comment ID, parsed out of the original id format\\n            var id = /blog-(\\\\d+).post-(\\\\d+)/.exec(entry.id.$t);\\n            comment.id = id ? id[2] : null;\\n            comment.body = bodyFromEntry(entry);\\n            comment.timestamp = Date.parse(entry.published.$t) + \\'\\';\\n            if (entry.author && entry.author.constructor === Array) {\\n              var auth = entry.author[0];\\n              if (auth) {\\n                comment.author = {\\n                  name: (auth.name ? auth.name.$t : undefined),\\n                  profileUrl: (auth.uri ? auth.uri.$t : undefined),\\n                  avatarUrl: (auth.gd$image ? auth.gd$image.src : undefined)\\n                };\\n              }\\n            }\\n            if (entry.link) {\\n              if (entry.link[2]) {\\n                comment.link = comment.permalink = entry.link[2].href;\\n              }\\n              if (entry.link[3]) {\\n                var pid = /.*comments\\\\/default\\\\/(\\\\d+)\\\\?.*/.exec(entry.link[3].href);\\n                if (pid && pid[1]) {\\n                  comment.parentId = pid[1];\\n                }\\n              }\\n            }\\n            comment.deleteclass = \\'item-control blog-admin\\';\\n            if (entry.gd$extendedProperty) {\\n              for (var k in entry.gd$extendedProperty) {\\n                if (entry.gd$extendedProperty[k].name == \\'blogger.itemClass\\') {\\n                  comment.deleteclass += \\' \\' + entry.gd$extendedProperty[k].value;\\n                } else if (entry.gd$extendedProperty[k].name == \\'blogger.displayTime\\') {\\n                  comment.displayTime = entry.gd$extendedProperty[k].value;\\n                }\\n              }\\n            }\\n            comments.push(comment);\\n          }\\n        }\\n        return comments;\\n      };\\n\\n      var paginator = function(callback) {\\n        if (hasMore()) {\\n          var url = config.feed + \\'?alt=json&v=2&orderby=published&reverse=false&max-results=50\\';\\n          if (cursor) {\\n            url += \\'&published-min=\\' + new Date(cursor).toISOString();\\n          }\\n          window.bloggercomments = function(data) {\\n            var parsed = parse(data);\\n            cursor = parsed.length < 50 ? null\\n                : parseInt(parsed[parsed.length - 1].timestamp) + 1\\n            callback(parsed);\\n            window.bloggercomments = null;\\n          }\\n          url += \\'&callback=bloggercomments\\';\\n          var script = document.createElement(\\'script\\');\\n          script.type = \\'text/javascript\\';\\n          script.src = url;\\n          document.getElementsByTagName(\\'head\\')[0].appendChild(script);\\n        }\\n      };\\n      var hasMore = function() {\\n        return !!cursor;\\n      };\\n      var getMeta = function(key, comment) {\\n        if (\\'iswriter\\' == key) {\\n          var matches = !!comment.author\\n              && comment.author.name == config.authorName\\n              && comment.author.profileUrl == config.authorUrl;\\n          return matches ? \\'true\\' : \\'\\';\\n        } else if (\\'deletelink\\' == key) {\\n          return config.baseUri + \\'/delete-comment.g?blogID=\\'\\n               + config.blogId + \\'&postID=\\' + comment.id;\\n        } else if (\\'deleteclass\\' == key) {\\n          return comment.deleteclass;\\n        }\\n        return \\'\\';\\n      };\\n\\n      var replybox = null;\\n      var replyUrlParts = null;\\n      var replyParent = undefined;\\n\\n      var onReply = function(commentId, domId) {\\n        if (replybox == null) {\\n          // lazily cache replybox, and adjust to suit this style:\\n          replybox = document.getElementById(\\'comment-editor\\');\\n          if (replybox != null) {\\n            replybox.height = \\'250px\\';\\n            replybox.style.display = \\'block\\';\\n            replyUrlParts = replybox.src.split(\\'#\\');\\n          }\\n        }\\n        if (replybox && (commentId !== replyParent)) {\\n          document.getElementById(domId).insertBefore(replybox, null);\\n          replybox.src = replyUrlParts[0]\\n              + (commentId ? \\'&parentID=\\' + commentId : \\'\\')\\n              + \\'#\\' + replyUrlParts[1];\\n          replyParent = commentId;\\n        }\\n      };\\n\\n      var hash = (window.location.hash || \\'#\\').substring(1);\\n      var startThread, targetComment;\\n      if (/^comment-form_/.test(hash)) {\\n        startThread = hash.substring(\\'comment-form_\\'.length);\\n      } else if (/^c[0-9]+$/.test(hash)) {\\n        targetComment = hash.substring(1);\\n      }\\n\\n      // Configure commenting API:\\n      var configJso = {\\n        \\'maxDepth\\': config.maxThreadDepth\\n      };\\n      var provider = {\\n        \\'id\\': config.postId,\\n        \\'data\\': items,\\n        \\'loadNext\\': paginator,\\n        \\'hasMore\\': hasMore,\\n        \\'getMeta\\': getMeta,\\n        \\'onReply\\': onReply,\\n        \\'rendered\\': true,\\n        \\'initComment\\': targetComment,\\n        \\'initReplyThread\\': startThread,\\n        \\'config\\': configJso,\\n        \\'messages\\': msgs\\n      };\\n\\n      var render = function() {\\n        if (window.goog && window.goog.comments) {\\n          var holder = document.getElementById(\\'comment-holder\\');\\n          window.goog.comments.render(holder, provider);\\n        }\\n      };\\n\\n      // render now, or queue to render when library loads:\\n      if (window.goog && window.goog.comments) {\\n        render();\\n      } else {\\n        window.goog = window.goog || {};\\n        window.goog.comments = window.goog.comments || {};\\n        window.goog.comments.loadQueue = window.goog.comments.loadQueue || [];\\n        window.goog.comments.loadQueue.push(render);\\n      }\\n    })();\\n// ]]>\\n</script>\\n<div id=\\'comment-holder\\'>\\n<div id=\\'bc_0_2C\\' kind=\\'c\\'><div id=\\'bc_0_2CT\\'><div id=\\'bc_0_1T\\' class=\\'comment-thread\\' kind=\\'r\\'  t=\\'0\\' u=\\'0\\'><ol id=\\'bc_0_1TB\\'><li id=\\'bc_0_0B\\' class=\\'comment\\' kind=\\'b\\'><div class=\\'avatar-image-container\\'><img src=\\'http://img1.blogblog.com/img/anon36.png\\'></img></div><div id=\\'c6747629419280839826\\' class=\\'comment-block\\'><div id=\\'bc_0_0M\\' class=\\'comment-header\\' kind=\\'m\\'><cite class=\\'user\\'><a rel=\\'nofollow\\' href=\\'http://www.tourkarimunjawaisland.com/\\'>karimunjawa</a></cite><span class=\\'icon user\\'></span><span class=\\'datetime secondary-text\\'><a rel=\\'nofollow\\' href=\\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html?showComment=1406091451247#c6747629419280839826\\'>July 23, 2014 at 12:57 AM</a></span></div><p id=\\'bc_0_0MC\\' class=\\'comment-content\\'>Ingin Liburan Ke <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Karimunjawa</a> , ingin <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Paket Wisata Karimunjawa murah</a>, Hubungi kami <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Tour Karimunjawa</a> island +6285201391216 (Syaiful) PIN BB 30c9f29c. Ayo datang ke <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">karimun jawa </a> bersama keluarga, dengan mengikuti <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket wisata karimunjawa</a> yang termasuk <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">biro wisata karimun jawa</a> berpengalaman karena memberikan <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket karimun jawa murah</a>,anda sudah Bisa menikmati <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> Wisata Karimunjawa</a> di <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> pulau Karimunjawa</a> atau <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Karimunjawa island</a>. lanjut bisa menghubungi <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">www.tourkarimunjawaisland.com</a>. Untuk mendapatkan pilihan paket <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Honeymoon Karimunjawa </a>, paket  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Diving Karimunjawa </a>, paket Hotel <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Nirvana karimunjawa</a> , paket <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">omah alchy karimunjawa</a> dan <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> Paket Murah karimunjawa </a>, <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> paket hotel karimunjawa</a>,  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket homestay karimunjawa</a>,  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket 2 hari 1 malam karimunjawa</a>,  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket 3 hari 2 malam karimunjawa</a>,  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket 4 hari 3 malam karimunjawa</a>, <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> paket 2 h 1 m karimunjawa</a>, <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\"> paket 3 h 2 m karimunjawa</a>,  <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">paket 4 h 3 m karimunjawa</a>. untuk <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">Paket karimunjawa</a> dan <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">karimunjawa murah</a>,  hanya di <a href=\"http://www.tourkarimunjawaisland.com/\" rel=\"nofollow\">karimunjawa tour</a></p><span id=\\'bc_0_0MN\\' class=\\'comment-actions secondary-text\\' kind=\\'m\\'><a kind=\\'i\\' href=\\'javascript:;\\' target=\\'_self\\' o=\\'r\\'>Reply</a><span class=\\'item-control blog-admin pid-792372887\\'><a o=\\'d\\' target=\\'_self\\' href=\\'http://www.blogger.com/delete-comment.g?blogID=7885177434994542510&amp;postID=6747629419280839826\\'>Delete</a></span></span></div><div id=\\'bc_0_0BR\\' class=\\'comment-replies\\'></div><div id=\\'bc_0_0B_box\\' class=\\'comment-replybox-single\\'></div></li></ol><div id=\\'bc_0_1I\\' class=\\'continue\\' kind=\\'ci\\'><a href=\\'javascript:;\\' target=\\'_self\\'>Add comment</a></div><div id=\\'bc_0_1T_box\\' class=\\'comment-replybox-thread\\'></div><div id=\\'bc_0_1L\\' class=\\'loadmore loaded\\' kind=\\'rb\\'><a href=\\'javascript:;\\' target=\\'_self\\'>Load more...</a></div></div></div></div>\\n</div>\\n</div>\\n<p class=\\'comment-footer\\'>\\n<div class=\\'comment-form\\'>\\n<a name=\\'comment-form\\'></a>\\n<p>\\n</p>\\n<a href=\\'https://www.blogger.com/comment-iframe.g?blogID=7885177434994542510&postID=6900440735518039445\\' id=\\'comment-editor-src\\'></a>\\n<iframe allowtransparency=\\'true\\' class=\\'blogger-iframe-colorize blogger-comment-from-post\\' frameborder=\\'0\\' height=\\'410\\' id=\\'comment-editor\\' name=\\'comment-editor\\' src=\\'\\' width=\\'100%\\'></iframe>\\n<script type=\"text/javascript\" src=\"https://www.blogger.com/static/v1/jsbin/2876379539-comment_from_post_iframe.js\"></script>\\n<script type=\\'text/javascript\\'>\\n      BLOG_CMT_createIframe(\\'https://www.blogger.com/rpc_relay.html\\');\\n    </script>\\n</div>\\n</p>\\n<div id=\\'backlinks-container\\'>\\n<div id=\\'Blog1_backlinks-container\\'>\\n<a name=\\'links\\'></a><h4>\\n</h4>\\n<p class=\\'comment-footer\\'>\\n<a class=\\'comment-link\\' href=\\'\\' id=\\'Blog1_backlinks-create-link\\' target=\\'_blank\\'>\\n</a>\\n</p>\\n</div>\\n</div>\\n</div>\\n</div>\\n\\n        </div></div>\\n      \\n<!-- google_ad_section_end -->\\n</div>\\n<div class=\\'blog-pager\\' id=\\'blog-pager\\'>\\n<span id=\\'blog-pager-older-link\\'>\\n<a class=\\'blog-pager-older-link\\' href=\\'http://contagiodump.blogspot.com/2010/06/overview-of-exploit-packs-update.html\\' id=\\'Blog1_blog-pager-older-link\\' title=\\'Older Post\\'>Older Post</a>\\n</span>\\n<a class=\\'home-link\\' href=\\'http://contagiodump.blogspot.com/\\'>Home</a>\\n</div>\\n<div class=\\'clear\\'></div>\\n<div class=\\'post-feeds\\'>\\n<div class=\\'feed-links\\'>\\nSubscribe to:\\n<a class=\\'feed-link\\' href=\\'http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\\' target=\\'_blank\\' type=\\'application/atom+xml\\'>Post Comments (Atom)</a>\\n</div>\\n</div>\\n<script type=\"text/javascript\">window.___gcfg = {\\'lang\\': \\'en\\'};</script>\\n</div><div class=\\'widget Text\\' id=\\'Text3\\'>\\n<div class=\\'widget-content\\'>\\n<right><a href=\"http://contagiodump.blogspot.com/\">Home</a></right>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Text&widgetId=Text3&action=editWidget&sectionId=main\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Text3\"));\\' target=\\'configText3\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div></div>\\n</div>\\n</div>\\n<div class=\\'column-left-outer\\'>\\n<div class=\\'column-left-inner\\'>\\n<aside>\\n</aside>\\n</div>\\n</div>\\n<div class=\\'column-right-outer\\'>\\n<div class=\\'column-right-inner\\'>\\n<aside>\\n<div class=\\'sidebar section\\' id=\\'sidebar-right-1\\'><div class=\\'widget HTML\\' id=\\'HTML8\\'>\\n<div class=\\'widget-content\\'>\\n<script type=\"text/javascript\">\\nvar FJHost = ((document.location.protocol == \\'https:\\') ? \\n \"https://ssllog.\" : \"http://log.\");\\ndocument.write(unescape(\"%3Cscript src=\\'\" + FJHost + \\n \"feedjit.com/pg/fj/75051f0678a099c9/\\'\" + \\n \" type=\\'text/javascript\\'%3E%3C/script%3E\"));\\n</script>\\n<script type=\"text/javascript\">\\ntry { var FJ = FJNew(); FJ.logHit(); } catch(err) {}\\n</script>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML8&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML8\"));\\' target=\\'configHTML8\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget Profile\\' id=\\'Profile1\\'>\\n<h2>Shared by</h2>\\n<div class=\\'widget-content\\'>\\n<dl class=\\'profile-datablock\\'>\\n<dt class=\\'profile-data\\'>\\n<a class=\\'profile-name-link g-profile\\' href=\\'http://www.blogger.com/profile/09472209631979859691\\' rel=\\'author\\' style=\\'background-image: url(//www.blogger.com/img/logo-16.png);\\'>\\nMila\\n</a>\\n</dt>\\n<dd class=\\'profile-textblock\\'>@ you can find my email address in my profile</dd>\\n</dl>\\n<a class=\\'profile-link\\' href=\\'http://www.blogger.com/profile/09472209631979859691\\' rel=\\'author\\'>View my complete profile</a>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Profile&widgetId=Profile1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Profile1\"));\\' target=\\'configProfile1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div><div class=\\'widget Image\\' id=\\'Image1\\'>\\n<div class=\\'widget-content\\'>\\n<img alt=\\'\\' height=\\'367\\' id=\\'Image1_img\\' src=\\'http://3.bp.blogspot.com/-uFlJsS00YvQ/T1BrFwZBKhI/AAAAAAAADBA/m70zyim8cMo/s1600/%25D0%2596%25D0%25AE%25D0%259723_filtered%2B%2528Custom%2529.jpg\\' width=\\'294\\'/>\\n<br/>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Image&widgetId=Image1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Image1\"));\\' target=\\'configImage1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget HTML\\' id=\\'HTML2\\'>\\n<h2 class=\\'title\\'>About contagio</h2>\\n<div class=\\'widget-content\\'>\\nContagio is a collection of the latest malware samples, threats, observations, and analyses.<span style=\"color: rgb(0, 0, 0);\"><span style=\"color: rgb(255, 0, 0);\">\\n\\nNote:</span>  Zip files passwords: Contact me via email  (see my profile) for the passwords or the password scheme.</span>\\n\\n<span style=\"font-style: italic;\">If you see errors, typos, etc, please let me know.</span>\\n<p><span style=\"font-size:x-small;\">Malware samples are available for download by any responsible whitehat researcher. By downloading the samples, anyone waives all rights to claim punitive, incidental and consequential damages resulting from mishandling or self</span><span style=\"font-size:x-small;\">-infection.</span></p>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML2&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML2\"));\\' target=\\'configHTML2\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget HTML\\' id=\\'HTML9\\'>\\n<h2 class=\\'title\\'>About Contagio Mobile</h2>\\n<div class=\\'widget-content\\'>\\naka \"take a sample, leave a sample\" <a style=\"font-weight: bold;\" href=\"http://contagiominidump.blogspot.com/\">Contagio mobile mini-dump</a> is a part of contagiodump.blogspot.com.<p><a href=\"http://twitter.com/snowfl0w\"><img style=\"width: 78px; height: 32px;\" src=\"http://2.bp.blogspot.com/_xQabPlo6k5s/S1vPrL8sG8I/AAAAAAAAAiY/ngOibIYP-MY/s72/images.jpg\" border=\"0\" /></a><a style=\"clear: left; margin-bottom: 1em; float: left; margin-right: 1em;\" href=\"http://www.linkedin.com/pub/mila-parkour/23/1a4/887\"><img src=\"http://4.bp.blogspot.com/_xQabPlo6k5s/TEMh8M_6X_I/AAAAAAAABes/6-ivERecaPU/s320/linked.JPG\" style=\"width: 87px; height: 21px;\" border=\"0\" /></a></p>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML9&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML9\"));\\' target=\\'configHTML9\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget BlogArchive\\' id=\\'BlogArchive1\\'>\\n<h2>Blog Archive</h2>\\n<div class=\\'widget-content\\'>\\n<div id=\\'ArchiveList\\'>\\n<div id=\\'BlogArchive1_ArchiveList\\'>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate expanded\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy toggle-open\\'>&#9660;&#160;</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2014-01-01T00:00:00-05:00&amp;updated-max=2015-01-01T00:00:00-05:00&amp;max-results=2\\'>2014</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate expanded\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy toggle-open\\'>&#9660;&#160;</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2014_07_01_archive.html\\'>July</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n<ul class=\\'posts\\'>\\n<li><a href=\\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\'>CZ Solution Ltd. signed samples of Xtreme Rat, Zeu...</a></li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2014_01_01_archive.html\\'>January</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2013-01-01T00:00:00-05:00&amp;updated-max=2014-01-01T00:00:00-05:00&amp;max-results=18\\'>2013</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(18)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_12_01_archive.html\\'>December</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_11_01_archive.html\\'>November</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_09_01_archive.html\\'>September</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_08_01_archive.html\\'>August</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_06_01_archive.html\\'>June</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_04_01_archive.html\\'>April</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_03_01_archive.html\\'>March</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_02_01_archive.html\\'>February</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(5)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2013_01_01_archive.html\\'>January</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2012-01-01T00:00:00-05:00&amp;updated-max=2013-01-01T00:00:00-05:00&amp;max-results=50\\'>2012</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(59)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_12_01_archive.html\\'>December</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(15)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_11_01_archive.html\\'>November</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_10_01_archive.html\\'>October</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_09_01_archive.html\\'>September</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_08_01_archive.html\\'>August</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(9)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_07_01_archive.html\\'>July</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_06_01_archive.html\\'>June</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(5)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(6)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_04_01_archive.html\\'>April</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(7)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_03_01_archive.html\\'>March</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_02_01_archive.html\\'>February</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2012_01_01_archive.html\\'>January</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2011-01-01T00:00:00-05:00&amp;updated-max=2012-01-01T00:00:00-05:00&amp;max-results=50\\'>2011</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(77)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_12_01_archive.html\\'>December</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_11_01_archive.html\\'>November</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_10_01_archive.html\\'>October</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(8)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_09_01_archive.html\\'>September</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(7)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_08_01_archive.html\\'>August</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_07_01_archive.html\\'>July</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(8)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_06_01_archive.html\\'>June</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(13)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_04_01_archive.html\\'>April</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(11)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_03_01_archive.html\\'>March</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(8)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_02_01_archive.html\\'>February</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2011_01_01_archive.html\\'>January</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(5)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2010-01-01T00:00:00-05:00&amp;updated-max=2011-01-01T00:00:00-05:00&amp;max-results=50\\'>2010</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(191)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_12_01_archive.html\\'>December</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_11_01_archive.html\\'>November</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(9)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_10_01_archive.html\\'>October</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(4)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_09_01_archive.html\\'>September</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(10)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_08_01_archive.html\\'>August</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(17)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_07_01_archive.html\\'>July</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(19)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_06_01_archive.html\\'>June</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(20)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(16)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_04_01_archive.html\\'>April</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(22)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_03_01_archive.html\\'>March</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(25)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_02_01_archive.html\\'>February</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(15)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2010_01_01_archive.html\\'>January</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(30)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2009-01-01T00:00:00-05:00&amp;updated-max=2010-01-01T00:00:00-05:00&amp;max-results=50\\'>2009</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(56)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_12_01_archive.html\\'>December</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(27)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_11_01_archive.html\\'>November</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(14)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_10_01_archive.html\\'>October</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(7)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_09_01_archive.html\\'>September</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_06_01_archive.html\\'>June</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(2)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(3)</span>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2009_04_01_archive.html\\'>April</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/search?updated-min=2008-01-01T00:00:00-05:00&amp;updated-max=2009-01-01T00:00:00-05:00&amp;max-results=1\\'>2008</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n<ul class=\\'hierarchy\\'>\\n<li class=\\'archivedate collapsed\\'>\\n<a class=\\'toggle\\' href=\\'javascript:void(0)\\'>\\n<span class=\\'zippy\\'>\\n\\n          &#9658;&#160;\\n        \\n</span>\\n</a>\\n<a class=\\'post-count-link\\' href=\\'http://contagiodump.blogspot.com/2008_05_01_archive.html\\'>May</a>\\n<span class=\\'post-count\\' dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n</li>\\n</ul>\\n</div>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=BlogArchive&widgetId=BlogArchive1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"BlogArchive1\"));\\' target=\\'configBlogArchive1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div><div class=\\'widget LinkList\\' id=\\'LinkList2\\'>\\n<h2>Shortcuts</h2>\\n<div class=\\'widget-content\\'>\\n<ul>\\n<li><a href=\\'http://www.reddit.com/r/ReverseEngineering/comments/is2et/can_we_collect_interesting_reverse_engineering/\\'>RE blogs collection</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2011/03/take-sample-leave-sample-mobile-malware.html\\'>Mobile Malware mini-dump. Take a sample, leave a sample.</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/08/mobile-malware-google-group.html\\'>Mobile Malware Google Group</a></li>\\n<li><a href=\\'http://www.malwaretracker.com/pdfthreat.php\\'>CURRENT PDF THREATS - Malware Tracker</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/08/defcon-18-materials-cd-2010-las-vegas.html\\'>Defcon 18 Materials (CD)- 2010 Las Vegas</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/search/label/Black%20Hat\\'>Black Hat USA 2010 (Las Vegas and DC) materials</a></li>\\n<li><a href=\\'http://vicheck.ca/\\'>************** ViCheck.ca - Malware check tool*************</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/search/label/APT\\'>APT malware</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/07/advanced-persistent-threat-targeted.html\\'>APT - Advanced Persistent Threat / Targeted Attacks links</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/03/collection-of-web-backdoors-shells-from.html\\'>Collection of Web Backdoors &amp; Shells</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/06/ru-eng-eng-glossary-russian-human.html\\'>Dictionary. Ru (computer slang) - Eng (Google machine) - Eng (human)</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/11/links-and-resources-for-malware-samples.html\\'>Malware Analysis -- Links and resources for malware samples</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/06/malware-analysis-and-forensics-tools.html\\'>Malware Analysis and Forensics tools links</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/06/overview-of-exploit-packs-update.html\\'>Overview of Exploit Packs</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/09/crimepack-313-exploit-kit-info.html\\'>Crimepack 3.1.3 Exploit kit info</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/05/files-from-phoenix-20-exploit-kit.html\\'>Phoenix 2.0 Exploit kit</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/03/design-contest-top-ten-targeted-attack.html\\'>Top Twenty (Former Top Ten) targeted attack emails of 2009-2010</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/07/zeus-version-scheme-by-trojan-author.html\\'>ZeuS Version scheme by the trojan author</a></li>\\n<li><a href=\\'http://contagiodump.blogspot.com/2010/07/zeus-trojan-research-links.html\\'>Zeus Trojan Research Links</a></li>\\n</ul>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=LinkList&widgetId=LinkList2&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"LinkList2\"));\\' target=\\'configLinkList2\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div><div class=\\'widget Label\\' id=\\'Label1\\'>\\n<h2>Categories - sort of</h2>\\n<div class=\\'widget-content list-label-widget-content\\'>\\n<ul>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/-%20HTA%20files\\'>- HTA files</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/-%20JAVA\\'>- JAVA</a>\\n<span dir=\\'ltr\\'>(16)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/-%20MOBILE%20MALWARE\\'>- MOBILE MALWARE</a>\\n<span dir=\\'ltr\\'>(6)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/-%20OSX\\'>- OSX</a>\\n<span dir=\\'ltr\\'>(10)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Aurora\\'>Aurora</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Autocad\\'>Autocad</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Backdoor.Olyx\\'>Backdoor.Olyx</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Backdoor.Wirenet\\'>Backdoor.Wirenet</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/batchwiper\\'>batchwiper</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Black%20SEO\\'>Black SEO</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/blackhole%202\\'>blackhole 2</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Blackshades\\'>Blackshades</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/botnets\\'>botnets</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Chapro\\'>Chapro</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CONFICKER\\'>CONFICKER</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Cridex\\'>Cridex</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Crimepack\\'>Crimepack</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Crisis\\'>Crisis</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/cuckoo%20sandbox\\'>cuckoo sandbox</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2006-2389\\'>CVE-2006-2389</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2006-2492\\'>CVE-2006-2492</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2007-0071\\'>CVE-2007-0071</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2007-5659\\'>CVE-2007-5659</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-0081\\'>CVE-2008-0081</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-0655\\'>CVE-2008-0655</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-2992\\'>CVE-2008-2992</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-3005\\'>CVE-2008-3005</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-4841\\'>CVE-2008-4841</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2008-5353\\'>CVE-2008-5353</a>\\n<span dir=\\'ltr\\'>(7)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-0556\\'>CVE-2009-0556</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-0563\\'>CVE-2009-0563</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-0658\\'>CVE-2009-0658</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-0806\\'>CVE-2009-0806</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-0927\\'>CVE-2009-0927</a>\\n<span dir=\\'ltr\\'>(10)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-1129\\'>CVE-2009-1129</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-1869\\'>CVE-2009-1869</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-3129\\'>CVE-2009-3129</a>\\n<span dir=\\'ltr\\'>(9)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-3867\\'>CVE-2009-3867</a>\\n<span dir=\\'ltr\\'>(7)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-3957\\'>CVE-2009-3957</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2009-4324\\'>CVE-2009-4324</a>\\n<span dir=\\'ltr\\'>(66)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-0188\\'>CVE-2010-0188</a>\\n<span dir=\\'ltr\\'>(30)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-0806\\'>CVE-2010-0806</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-1240\\'>CVE-2010-1240</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-1297\\'>CVE-2010-1297</a>\\n<span dir=\\'ltr\\'>(12)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-1885\\'>CVE-2010-1885</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-2568\\'>CVE-2010-2568</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-2883\\'>CVE-2010-2883</a>\\n<span dir=\\'ltr\\'>(13)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/cve-2010-3333\\'>cve-2010-3333</a>\\n<span dir=\\'ltr\\'>(11)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-3654\\'>CVE-2010-3654</a>\\n<span dir=\\'ltr\\'>(3)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-3970\\'>CVE-2010-3970</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2010-4091\\'>CVE-2010-4091</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2011-0609\\'>CVE-2011-0609</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2011-0611\\'>CVE-2011-0611</a>\\n<span dir=\\'ltr\\'>(11)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2011-1980\\'>CVE-2011-1980</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2011-1991\\'>CVE-2011-1991</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2011-2462\\'>CVE-2011-2462</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/cve-2012-0158\\'>cve-2012-0158</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-0506\\'>CVE-2012-0506</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-0507\\'>CVE-2012-0507</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-0754\\'>CVE-2012-0754</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-0779\\'>CVE-2012-0779</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-1535\\'>CVE-2012-1535</a>\\n<span dir=\\'ltr\\'>(3)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-1875\\'>CVE-2012-1875</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-1889\\'>CVE-2012-1889</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-4681\\'>CVE-2012-4681</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-4969\\'>CVE-2012-4969</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/CVE-2012-5076\\'>CVE-2012-5076</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Dark%20Comet\\'>Dark Comet</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/darkmagie\\'>darkmagie</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Daws\\'>Daws</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/DeepEnd\\'>DeepEnd</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Dexter\\'>Dexter</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Dirt%20Jumper\\'>Dirt Jumper</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/distrack.a\\'>distrack.a</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Duqu\\'>Duqu</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/exploit%20kits\\'>exploit kits</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/exploit%20pack\\'>exploit pack</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Flamer\\'>Flamer</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/flashback\\'>flashback</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Gauss\\'>Gauss</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Gh0stnet%20backdoor\\'>Gh0stnet backdoor</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/gmail\\'>gmail</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/High-Tech%20Bridge\\'>High-Tech Bridge</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Hikit\\'>Hikit</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/I2p\\'>I2p</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/inReverse%20blog\\'>inReverse blog</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/jsp-reverse\\'>jsp-reverse</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Linux\\'>Linux</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Makadocs\\'>Makadocs</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/malware%20links\\'>malware links</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/malware%20samples%20links\\'>malware samples links</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Malware%20Zoo\\'>Malware Zoo</a>\\n<span dir=\\'ltr\\'>(6)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/mebromi\\'>mebromi</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Medre\\'>Medre</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Memory\\'>Memory</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Mobile%20Malware%20Group\\'>Mobile Malware Group</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Morto\\'>Morto</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Narilam\\'>Narilam</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/OCJP\\'>OCJP</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/OSX\\'>OSX</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/OSX%2FDockster.A\\'>OSX/Dockster.A</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/OSX%2FiMuler\\'>OSX/iMuler</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/OSX%2FRevir\\'>OSX/Revir</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/PDF%20cuckoo\\'>PDF cuckoo</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/php-backdoor\\'>php-backdoor</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/ransomware\\'>ransomware</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/RAT\\'>RAT</a>\\n<span dir=\\'ltr\\'>(9)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Redline\\'>Redline</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/rootkit\\'>rootkit</a>\\n<span dir=\\'ltr\\'>(8)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Rootkit%20ZeroAccess%20%28aka%20MAX%2B%2B%29\\'>Rootkit ZeroAccess (aka MAX++)</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/RTLO\\'>RTLO</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Rustock\\'>Rustock</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Sanny\\'>Sanny</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Sender%20IPs\\'>Sender IPs</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/shylock\\'>shylock</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/sirefef\\'>sirefef</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Skynet\\'>Skynet</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Skype%20Dorkbot\\'>Skype Dorkbot</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Sources\\'>Sources</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Spyeye\\'>Spyeye</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Stabuniq\\'>Stabuniq</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Stuxnet\\'>Stuxnet</a>\\n<span dir=\\'ltr\\'>(4)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/taidoor\\'>taidoor</a>\\n<span dir=\\'ltr\\'>(14)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Tbot\\'>Tbot</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/TDL\\'>TDL</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/TDL4%20purple%20haze\\'>TDL4 purple haze</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Tinba\\'>Tinba</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/TOOLS\\'>TOOLS</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Tor\\'>Tor</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/trojan.osx.boonana.a\\'>trojan.osx.boonana.a</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/TWITTER\\'>TWITTER</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Vir-Win32%2FSpy.Silon.AA\\'>Vir-Win32/Spy.Silon.AA</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Vobfus\\'>Vobfus</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Volatility\\'>Volatility</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Win32%2FRamnit\\'>Win32/Ramnit</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Win32%2FTrojan.Agent.AXMO\\'>Win32/Trojan.Agent.AXMO</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/worm\\'>worm</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/worm%3BQakbot\\'>worm;Qakbot</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/xpaj\\'>xpaj</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Xtreme%20RAT\\'>Xtreme RAT</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Zeroaccess\\'>Zeroaccess</a>\\n<span dir=\\'ltr\\'>(2)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Zeus\\'>Zeus</a>\\n<span dir=\\'ltr\\'>(5)</span>\\n</li>\\n<li>\\n<a dir=\\'ltr\\' href=\\'http://contagiodump.blogspot.com/search/label/Zusy\\'>Zusy</a>\\n<span dir=\\'ltr\\'>(1)</span>\\n</li>\\n</ul>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Label&widgetId=Label1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Label1\"));\\' target=\\'configLabel1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div><div class=\\'widget BlogList\\' id=\\'BlogList1\\'>\\n<h2 class=\\'title\\'>Blog List</h2>\\n<div class=\\'widget-content\\'>\\n<div class=\\'blog-list-container\\' id=\\'BlogList1_container\\'>\\n<ul id=\\'BlogList1_blogs\\'>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blog.0day.jp/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blog.0day.jp/\\' target=\\'_blank\\'>\\n0day.jp (\\u30bc\\u30ed\\u30c7\\u30a4.JP)</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://blog.0day.jp/2014/04/pestudio-818-wireshark-virustotal.html\\' target=\\'_blank\\'>\\nPEStudio 8.18, Wireshark &amp; VirusTotal\\u3092\\u4f7f\\u3044\\u30de\\u30eb\\u30a6\\u30a7\\u30a2\\u8abf\\u67fb\\u30ac\\u30a4\\u30c9\\u30d3\\u30c7\\u30aa\\u3092\\u4f5c\\u308a\\u307e\\u3057\\u305f</a>\\n</span>\\n<div class=\\'item-time\\'>\\n5 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://sempersecurus.blogspot.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://sempersecurus.blogspot.com/\\' target=\\'_blank\\'>\\nAndre\\' M. DiMino SemperSecurus</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://sempersecurus.blogspot.com/2013/12/another-look-at-cross-platform-ddos.html\\' target=\\'_blank\\'>\\nAnother look at a cross-platform DDoS botnet</a>\\n</span>\\n<div class=\\'item-time\\'>\\n8 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://antivirus-software.findthebest.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://antivirus-software.findthebest.com/\\' target=\\'_blank\\'>\\nAntivirus Comparison.  Compare antivirus reviews and ratings</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n</span>\\n<div class=\\'item-time\\'>\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://axtaxt.wordpress.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://axtaxt.wordpress.com\\' target=\\'_blank\\'>\\nAxtaxt\\'s Blog</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://axtaxt.wordpress.com/2014/08/24/analyzing-the-ecological-footprint-of-java-algorithms/\\' target=\\'_blank\\'>\\nAnalyzing the &#8220;ecological footprint&#8221; of java algorithms</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 weeks ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://carnal0wnage.attackresearch.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://carnal0wnage.attackresearch.com/\\' target=\\'_blank\\'>\\nCarnal0wnage & Attack Research Blog</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://carnal0wnage.attackresearch.com/2014/06/mimikatz-against-virtual-machine-memory.html\\' target=\\'_blank\\'>\\nMimikatz Against Virtual Machine Memory Part 2</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blog.chackraview.net/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blog.chackraview.net\\' target=\\'_blank\\'>\\nchackraview.net</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://blog.chackraview.net/2012/03/30/snort-signatures-for-luckycat-apt-campaign/\\' target=\\'_blank\\'>\\nSnort Signatures for LuckyCat APT Campaign</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://crucialsecurityblog.harris.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://crucialsecurityblog.harris.com\\' target=\\'_blank\\'>\\nCrucial Security Forensics Blog</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://crucialsecurityblog.harris.com/2012/06/26/sans-dfir-summit-in-austin-tx/\\' target=\\'_blank\\'>\\nSANS DFIR Summit in Austin, TX</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.cyberengineeringservices.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.cyberengineeringservices.com\\' target=\\'_blank\\'>\\nCyberESI</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.cyberengineeringservices.com/cyber-engineering-services-announces-the-cyber-red-list/\\' target=\\'_blank\\'>\\nCyber Engineering Services Announces the Cyber Red List</a>\\n</span>\\n<div class=\\'item-time\\'>\\n1 year ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blog.didierstevens.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blog.didierstevens.com\\' target=\\'_blank\\'>\\nDidier Stevens</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://blog.didierstevens.com/2014/09/03/introducing-filescanner-exe/\\' target=\\'_blank\\'>\\nIntroducing Filescanner.exe</a>\\n</span>\\n<div class=\\'item-time\\'>\\n5 days ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://extraexploit.blogspot.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://extraexploit.blogspot.com/\\' target=\\'_blank\\'>\\nextraexploit</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://extraexploit.blogspot.com/2012/11/extraexploit-memories.html\\' target=\\'_blank\\'>\\nextraexploit memories</a>\\n</span>\\n<div class=\\'item-time\\'>\\n1 year ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.f-secure.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.f-secure.com/weblog\\' target=\\'_blank\\'>\\nF-Secure Weblog : News from the Lab</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.f-secure.com/weblog/archives/00002741.html\\' target=\\'_blank\\'>\\nH1 2014 Threat Report</a>\\n</span>\\n<div class=\\'item-time\\'>\\n10 hours ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blog.fireeye.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blog.fireeye.com/research/\\' target=\\'_blank\\'>\\nFireEye Malware Intelligence Lab</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://feedproxy.google.com/~r/FE_research/~3/o1fj75xn038/yaj0-yet-another-java-zero-day.html\\' target=\\'_blank\\'>\\nYAJ0: Yet Another Java Zero-Day</a>\\n</span>\\n<div class=\\'item-time\\'>\\n1 year ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://forensicsfromthesausagefactory.blogspot.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://forensicsfromthesausagefactory.blogspot.com/\\' target=\\'_blank\\'>\\nForensics from the sausage factory</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://forensicsfromthesausagefactory.blogspot.com/2014/04/mac-os-x-set-date-and-time-automatically.html\\' target=\\'_blank\\'>\\nMac OS X \"Set date and time automatically\"</a>\\n</span>\\n<div class=\\'item-time\\'>\\n4 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.inreverse.net/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.inreverse.net\\' target=\\'_blank\\'>\\ninREVERSE</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.inreverse.net/?p=1740\\' target=\\'_blank\\'>\\nMore on callbacks: ObRegisterCallbacks</a>\\n</span>\\n<div class=\\'item-time\\'>\\n3 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://krebsonsecurity.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://krebsonsecurity.com\\' target=\\'_blank\\'>\\nKrebs on Security</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://krebsonsecurity.com/2014/09/home-depot-hit-by-same-malware-as-target/\\' target=\\'_blank\\'>\\nHome Depot Hit By Same Malware as Target</a>\\n</span>\\n<div class=\\'item-time\\'>\\n16 hours ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blogs.paretologic.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blogs.paretologic.com/malwarediaries\\' target=\\'_blank\\'>\\nMalware Diaries</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://blogs.paretologic.com/malwarediaries/index.php/2011/10/16/malvertising-on-bing-and-yahoo/\\' target=\\'_blank\\'>\\nMalvertising on Bing and Yahoo</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.nartv.org/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.nartv.org\\' target=\\'_blank\\'>\\nNart Villeneuve</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.nartv.org/2010/12/31/2010-and-beyond/\\' target=\\'_blank\\'>\\n2010 and Beyond</a>\\n</span>\\n<div class=\\'item-time\\'>\\n3 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://reversemode.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://reversemode.com\\' target=\\'_blank\\'>\\nReversemode</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://reversemode.com/index.php?option=com_content&task=view&id=81&Itemid=0\\' target=\\'_blank\\'>\\nProject Basecamp - Attacking ControlLogix</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://stopmalvertising.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://stopmalvertising.com/\\' target=\\'_blank\\'>\\nStopMalvertising RSS Feed</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://stopmalvertising.com/malware-reports/a-dive-into-the-vawtrak-traffic.html\\' target=\\'_blank\\'>\\nA dive into the Vawtrak Traffic</a>\\n</span>\\n<div class=\\'item-time\\'>\\n3 days ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://targetedemailattacks.tumblr.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://targetedemailattacks.tumblr.com/\\' target=\\'_blank\\'>\\nTargeted Email Attacks</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://targetedemailattacks.tumblr.com/post/17510191522\\' target=\\'_blank\\'>\\nNovember 21 - Fake Linkedin Invitations</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.thedarkvisitor.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.thedarkvisitor.com\\' target=\\'_blank\\'>\\nThe Dark Visitor</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.thedarkvisitor.com/2011/06/unnatural-selection-by-mara-hvistendahl/\\' target=\\'_blank\\'>\\nUnnatural Selection by Mara Hvistendahl</a>\\n</span>\\n<div class=\\'item-time\\'>\\n3 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://conanthedestroyer.net/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://conanthedestroyer.net\\' target=\\'_blank\\'>\\nVeiled Shadows</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://conanthedestroyer.net/2012/02/04/operation-starlight-the-chinese-pla-assault-on-rsa-and-the-undermining-of-the-authentication-control-supply-chain/\\' target=\\'_blank\\'>\\nOperation Starlight: The Chinese PLA Assault on RSA and the undermining of \\nthe Authentication Control Supply Chain</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 years ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://blog.xecure-lab.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://blog.xecure-lab.com/\\' target=\\'_blank\\'>\\nXecure Lab</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://blog.xecure-lab.com/2014/06/hitcon-x-10.html\\' target=\\'_blank\\'>\\nHITCON X 10\\u5468\\u5e74\\u958b\\u8dd1\\u4e86 !!</a>\\n</span>\\n<div class=\\'item-time\\'>\\n2 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n<li style=\\'display: block;\\'>\\n<div class=\\'blog-icon\\'>\\n<img data-lateloadsrc=\\'http://www.xylibox.com/favicon.ico\\' height=\\'16\\' width=\\'16\\'/>\\n</div>\\n<div class=\\'blog-content\\'>\\n<div class=\\'blog-title\\'>\\n<a href=\\'http://www.xylibox.com/\\' target=\\'_blank\\'>\\nXyliBox</a>\\n</div>\\n<div class=\\'item-content\\'>\\n<span class=\\'item-title\\'>\\n<a href=\\'http://www.xylibox.com/2014/05/install-service-for-malware-affiliates.html\\' target=\\'_blank\\'>\\nInstall service for Malware affiliates and individuals</a>\\n</span>\\n<div class=\\'item-time\\'>\\n4 months ago\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both;\\'></div>\\n</li>\\n</ul>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=BlogList&widgetId=BlogList1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"BlogList1\"));\\' target=\\'configBlogList1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div>\\n</div><div class=\\'widget CustomSearch\\' id=\\'CustomSearch1\\'>\\n<h2 class=\\'title\\'>Search This Blog</h2>\\n<div class=\\'widget-content\\'>\\n<div id=\\'CustomSearch1_form\\'>\\n<span class=\\'cse-status\\'>Loading...</span>\\n</div>\\n</div>\\n<style type=\\'text/css\\'>\\n      #uds-searchControl .gs-result .gs-title,\\n      #uds-searchControl .gs-result .gs-title *,\\n      #uds-searchControl .gsc-results .gsc-trailing-more-results,\\n      #uds-searchControl .gsc-results .gsc-trailing-more-results * {\\n        color:#274e13;\\n      }\\n\\n      #uds-searchControl .gs-result .gs-title a:visited,\\n      #uds-searchControl .gs-result .gs-title a:visited * {\\n        color:#660000;\\n      }\\n\\n      #uds-searchControl .gs-relativePublishedDate,\\n      #uds-searchControl .gs-publishedDate {\\n        color: #ffffff;\\n      }\\n\\n      #uds-searchControl .gs-result a.gs-visibleUrl,\\n      #uds-searchControl .gs-result .gs-visibleUrl {\\n        color: #274e13;\\n      }\\n\\n      #uds-searchControl .gsc-results {\\n        border-color: #ffffff;\\n        background-color: #ffffff;\\n      }\\n\\n      #uds-searchControl .gsc-tabhActive {\\n        border-color: #ffffff;\\n        border-top-color: #ffffff;\\n        background-color: #ffffff;\\n        color: #000000;\\n      }\\n\\n      #uds-searchControl .gsc-tabhInactive {\\n        border-color: #ffffff;\\n        background-color: transparent;\\n        color: #274e13;\\n      }\\n\\n      #uds-searchClearResults {\\n        border-color: #ffffff;\\n      }\\n\\n      #uds-searchClearResults:hover {\\n        border-color: #ffffff;\\n      }\\n\\n      #uds-searchControl .gsc-cursor-page {\\n        color: #274e13;\\n      }\\n\\n      #uds-searchControl .gsc-cursor-current-page {\\n        color: #000000;\\n      }\\n    </style>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=CustomSearch&widgetId=CustomSearch1&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"CustomSearch1\"));\\' target=\\'configCustomSearch1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget HTML\\' id=\\'HTML4\\'>\\n<h2 class=\\'title\\'>Malware collections</h2>\\n<div class=\\'widget-content\\'>\\n<a href=\"http://contagiodump.blogspot.com/2011/03/take-sample-leave-sample-mobile-malware.html\">Take a sample, leave a sample. Mobile malware mini-dump</a>\\nDownload files<br />\\n<br />\\nUpload files to the mobile malware mini-dump\\n<script type=\"text/javascript\">var mf_dropbox_width=-1;var mf_dropbox_id=\"027bb496c82636cd75a6b481080a84e5b0d4ebc9508581b66fa3dd201ff52ce9\";</script><script type=\"text/javascript\" src=\"http://www.mediafire.com/dropbox/dropbox.js\"></script>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML4&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML4\"));\\' target=\\'configHTML4\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget Text\\' id=\\'Text4\\'>\\n<h2 class=\\'title\\'>Malware Lists and Collections</h2>\\n<div class=\\'widget-content\\'>\\n<a style=\"color: rgb(0, 51, 0); font-weight: bold;\" href=\"http://contagiodump.blogspot.com/2010/08/malicious-documents-archive-for.html\">* Malicious documents archive for signature testing and research</a><span style=\"color: rgb(0, 51, 0); font-weight: bold;\"><br/></span><a style=\"font-weight: bold; color: rgb(0, 51, 0);\" href=\"http://contagiodump.blogspot.com/2011/03/take-sample-leave-sample-mobile-malware.html\">* Mobile Malware Collection</a><br/><a style=\"color: rgb(0, 51, 0);\" href=\"http://www.mediafire.com/contagio\"><span style=\"color: rgb(0, 51, 0);\"><span style=\"font-weight: bold;\">* I want it ALL</span></span></a><br/><br/><a href=\"http://contagiodump.blogspot.com/2011/08/adobe-reader-versions-vs-corresponding.html\">Adobe Reader versions vs corresponding exploits (CVE numbered) - Downloads for testing</a><br/><br/><a href=\"http://contagiodump.blogspot.com/2011/08/again-thanks-to-malware-tracker-keeping.html\">Microsoft and Adobe Flash patches vs corresponding document and web exploits (non PDF, CVE numbered)</a><br/><br/><span style=\"color: rgb(0, 51, 0);\"><span><a style=\"color: rgb(0, 102, 0);\" href=\"https://spreadsheets.google.com/pub?key=0AjvsQV3iSLa1dGtoTGxyVFNkWUVnQnIwa2JzQXhIVmc&amp;authkey=COrlkJEP&amp;hl=en&amp;single=true&amp;gid=0&amp;output=html\">Malware list (don\\'t think i have time to keep it up)</a><span style=\"color: rgb(255, 0, 0);\"> </span>--- the the malware list is moving here<br/></span></span><a style=\"color: rgb(0, 51, 0);\" href=\"http://baseportal.com/cgi-bin/baseportal.pl?htx=/MilaP/Contagio&amp;localparams=1&amp;db=Contagio&amp;cmd=list&amp;range=0,100&amp;sort=-Date\">Malware list</a><span style=\"color: rgb(0, 51, 0);\"> (OLD)</span> -- no new updates<div><br/></div><div><br/></div><div><a href=\"http://www.netresec.com/?page=PcapFiles\">PCAP Collections</a><br/><a style=\"color: rgb(0, 51, 0); font-weight: bold;\" href=\"http://contagiodump.blogspot.com/2010/08/malicious-documents-archive-for.html\"><br/></a><a style=\"color: rgb(0, 51, 0);\" href=\"http://www.mediafire.com/contagio\"><span style=\"color: rgb(0, 51, 0);\"><span style=\"font-weight: bold;\"></span></span></a></div>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Text&widgetId=Text4&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Text4\"));\\' target=\\'configText4\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div><div class=\\'widget Subscribe\\' id=\\'Subscribe2\\'>\\n<div style=\\'white-space:nowrap\\'>\\n<h2 class=\\'title\\'>Subscribe To</h2>\\n<div class=\\'widget-content\\'>\\n<div class=\\'subscribe-wrapper subscribe-type-POST\\'>\\n<div class=\\'subscribe expanded subscribe-type-POST\\' id=\\'SW_READER_LIST_Subscribe2POST\\' style=\\'display:none;\\'>\\n<div class=\\'top\\'>\\n<span class=\\'inner\\' onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2POST\"));\\'>\\n<img class=\\'subscribe-dropdown-arrow\\' src=\\'http://img2.blogblog.com/img/widgets/arrow_dropdown.gif\\'/>\\n<img align=\\'absmiddle\\' alt=\\'\\' border=\\'0\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\nPosts\\n</span>\\n<div class=\\'feed-reader-links\\'>\\n<a class=\\'feed-reader-link\\' href=\\'http://www.netvibes.com/subscribe.php?url=http%3A%2F%2Fcontagiodump.blogspot.com%2Ffeeds%2Fposts%2Fdefault\\' target=\\'_blank\\'>\\n<img src=\\'http://img1.blogblog.com/img/widgets/subscribe-netvibes.png\\'/>\\n</a>\\n<a class=\\'feed-reader-link\\' href=\\'http://add.my.yahoo.com/content?url=http%3A%2F%2Fcontagiodump.blogspot.com%2Ffeeds%2Fposts%2Fdefault\\' target=\\'_blank\\'>\\n<img src=\\'http://img1.blogblog.com/img/widgets/subscribe-yahoo.png\\'/>\\n</a>\\n<a class=\\'feed-reader-link\\' href=\\'http://contagiodump.blogspot.com/feeds/posts/default\\' target=\\'_blank\\'>\\n<img align=\\'absmiddle\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\n                Atom\\n              </a>\\n</div>\\n</div>\\n<div class=\\'bottom\\'></div>\\n</div>\\n<div class=\\'subscribe\\' id=\\'SW_READER_LIST_CLOSED_Subscribe2POST\\' onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2POST\"));\\'>\\n<div class=\\'top\\'>\\n<span class=\\'inner\\'>\\n<img class=\\'subscribe-dropdown-arrow\\' src=\\'http://img2.blogblog.com/img/widgets/arrow_dropdown.gif\\'/>\\n<span onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2POST\"));\\'>\\n<img align=\\'absmiddle\\' alt=\\'\\' border=\\'0\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\nPosts\\n</span>\\n</span>\\n</div>\\n<div class=\\'bottom\\'></div>\\n</div>\\n</div>\\n<div class=\\'subscribe-wrapper subscribe-type-PER_POST\\'>\\n<div class=\\'subscribe expanded subscribe-type-PER_POST\\' id=\\'SW_READER_LIST_Subscribe2PER_POST\\' style=\\'display:none;\\'>\\n<div class=\\'top\\'>\\n<span class=\\'inner\\' onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2PER_POST\"));\\'>\\n<img class=\\'subscribe-dropdown-arrow\\' src=\\'http://img2.blogblog.com/img/widgets/arrow_dropdown.gif\\'/>\\n<img align=\\'absmiddle\\' alt=\\'\\' border=\\'0\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\nComments\\n</span>\\n<div class=\\'feed-reader-links\\'>\\n<a class=\\'feed-reader-link\\' href=\\'http://www.netvibes.com/subscribe.php?url=http%3A%2F%2Fcontagiodump.blogspot.com%2Ffeeds%2F6900440735518039445%2Fcomments%2Fdefault\\' target=\\'_blank\\'>\\n<img src=\\'http://img1.blogblog.com/img/widgets/subscribe-netvibes.png\\'/>\\n</a>\\n<a class=\\'feed-reader-link\\' href=\\'http://add.my.yahoo.com/content?url=http%3A%2F%2Fcontagiodump.blogspot.com%2Ffeeds%2F6900440735518039445%2Fcomments%2Fdefault\\' target=\\'_blank\\'>\\n<img src=\\'http://img1.blogblog.com/img/widgets/subscribe-yahoo.png\\'/>\\n</a>\\n<a class=\\'feed-reader-link\\' href=\\'http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\\' target=\\'_blank\\'>\\n<img align=\\'absmiddle\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\n                Atom\\n              </a>\\n</div>\\n</div>\\n<div class=\\'bottom\\'></div>\\n</div>\\n<div class=\\'subscribe\\' id=\\'SW_READER_LIST_CLOSED_Subscribe2PER_POST\\' onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2PER_POST\"));\\'>\\n<div class=\\'top\\'>\\n<span class=\\'inner\\'>\\n<img class=\\'subscribe-dropdown-arrow\\' src=\\'http://img2.blogblog.com/img/widgets/arrow_dropdown.gif\\'/>\\n<span onclick=\\'return(_SW_toggleReaderList(event, \"Subscribe2PER_POST\"));\\'>\\n<img align=\\'absmiddle\\' alt=\\'\\' border=\\'0\\' class=\\'feed-icon\\' src=\\'http://img1.blogblog.com/img/icon_feed12.png\\'/>\\nComments\\n</span>\\n</span>\\n</div>\\n<div class=\\'bottom\\'></div>\\n</div>\\n</div>\\n<div style=\\'clear:both\\'></div>\\n</div>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Subscribe&widgetId=Subscribe2&action=editWidget&sectionId=sidebar-right-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Subscribe2\"));\\' target=\\'configSubscribe2\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div></div>\\n<table border=\\'0\\' cellpadding=\\'0\\' cellspacing=\\'0\\' class=\\'section-columns columns-2\\'>\\n<tbody>\\n<tr>\\n<td class=\\'first columns-cell\\'>\\n<div class=\\'sidebar section\\' id=\\'sidebar-right-2-1\\'></div>\\n</td>\\n<td class=\\'columns-cell\\'>\\n<div class=\\'sidebar section\\' id=\\'sidebar-right-2-2\\'></div>\\n</td>\\n</tr>\\n</tbody>\\n</table>\\n<div class=\\'sidebar section\\' id=\\'sidebar-right-3\\'></div>\\n</aside>\\n</div>\\n</div>\\n</div>\\n<div style=\\'clear: both\\'></div>\\n<!-- columns -->\\n</div>\\n<!-- main -->\\n</div>\\n</div>\\n<div class=\\'main-cap-bottom cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n<footer>\\n<div class=\\'footer-outer\\'>\\n<div class=\\'footer-cap-top cap-top\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n<div class=\\'fauxborder-left footer-fauxborder-left\\'>\\n<div class=\\'fauxborder-right footer-fauxborder-right\\'></div>\\n<div class=\\'region-inner footer-inner\\'>\\n<div class=\\'foot section\\' id=\\'footer-1\\'></div>\\n<table border=\\'0\\' cellpadding=\\'0\\' cellspacing=\\'0\\' class=\\'section-columns columns-2\\'>\\n<tbody>\\n<tr>\\n<td class=\\'first columns-cell\\'>\\n<div class=\\'foot section\\' id=\\'footer-2-1\\'><div class=\\'widget HTML\\' id=\\'HTML3\\'>\\n<h2 class=\\'title\\'>contagio Dropbox</h2>\\n<div class=\\'widget-content\\'>\\n<script type=\"text/javascript\">var mf_dropbox_width=-1;var mf_dropbox_id=\"027bb496c82636cd75a6b481080a84e5143312499dbde534fd214d1a596c6932\";</script><script type=\"text/javascript\" src=\"http://www.mediafire.com/dropbox/dropbox.js\"></script>\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=HTML&widgetId=HTML3&action=editWidget&sectionId=footer-2-1\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"HTML3\"));\\' target=\\'configHTML3\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div></div>\\n</td>\\n<td class=\\'columns-cell\\'>\\n<div class=\\'foot section\\' id=\\'footer-2-2\\'><div class=\\'widget FollowByEmail\\' id=\\'FollowByEmail1\\'>\\n<h2 class=\\'title\\'>Follow by Email</h2>\\n<div class=\\'widget-content\\'>\\n<div class=\\'follow-by-email-inner\\'>\\n<form action=\\'http://feedburner.google.com/fb/a/mailverify\\' method=\\'post\\' onsubmit=\\'window.open(\"http://feedburner.google.com/fb/a/mailverify?uri=blogspot/KFunD\", \"popupwindow\", \"scrollbars=yes,width=550,height=520\"); return true\\' target=\\'popupwindow\\'>\\n<table width=\\'100%\\'>\\n<tr>\\n<td>\\n<input class=\\'follow-by-email-address\\' name=\\'email\\' placeholder=\\'Email address...\\' type=\\'text\\'/>\\n</td>\\n<td width=\\'64px\\'>\\n<input class=\\'follow-by-email-submit\\' type=\\'submit\\' value=\\'Submit\\'/>\\n</td>\\n</tr>\\n</table>\\n<input name=\\'uri\\' type=\\'hidden\\' value=\\'blogspot/KFunD\\'/>\\n<input name=\\'loc\\' type=\\'hidden\\' value=\\'en_US\\'/>\\n</form>\\n</div>\\n</div>\\n<span class=\\'item-control blog-admin\\'>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=FollowByEmail&widgetId=FollowByEmail1&action=editWidget&sectionId=footer-2-2\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"FollowByEmail1\"));\\' target=\\'configFollowByEmail1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</span>\\n</div>\\n</div>\\n</td>\\n</tr>\\n</tbody>\\n</table>\\n<!-- outside of the include in order to lock Attribution widget -->\\n<div class=\\'foot section\\' id=\\'footer-3\\'><div class=\\'widget Attribution\\' id=\\'Attribution1\\'>\\n<div class=\\'widget-content\\' style=\\'text-align: center;\\'>\\nPowered by <a href=\\'http://www.blogger.com\\' target=\\'_blank\\'>Blogger</a>.\\n</div>\\n<div class=\\'clear\\'></div>\\n<span class=\\'widget-item-control\\'>\\n<span class=\\'item-control blog-admin\\'>\\n<a class=\\'quickedit\\' href=\\'//www.blogger.com/rearrange?blogID=7885177434994542510&widgetType=Attribution&widgetId=Attribution1&action=editWidget&sectionId=footer-3\\' onclick=\\'return _WidgetManager._PopupConfig(document.getElementById(\"Attribution1\"));\\' target=\\'configAttribution1\\' title=\\'Edit\\'>\\n<img alt=\\'\\' height=\\'18\\' src=\\'http://img1.blogblog.com/img/icon18_wrench_allbkg.png\\' width=\\'18\\'/>\\n</a>\\n</span>\\n</span>\\n<div class=\\'clear\\'></div>\\n</div>\\n</div>\\n</div>\\n</div>\\n<div class=\\'footer-cap-bottom cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n</footer>\\n<!-- content -->\\n</div>\\n</div>\\n<div class=\\'content-cap-bottom cap-bottom\\'>\\n<div class=\\'cap-left\\'></div>\\n<div class=\\'cap-right\\'></div>\\n</div>\\n</div>\\n</div>\\n<script type=\\'text/javascript\\'>\\n    window.setTimeout(function() {\\n        document.body.className = document.body.className.replace(\\'loading\\', \\'\\');\\n      }, 10);\\n  </script>\\n<!-- Place this tag in your head or just before your close body tag -->\\n<script src=\\'https://apis.google.com/js/plusone.js\\' type=\\'text/javascript\\'></script>\\n<script type=\"text/javascript\">\\nif (window.jstiming) window.jstiming.load.tick(\\'widgetJsBefore\\');\\n</script><script type=\"text/javascript\" src=\"https://www.blogger.com/static/v1/widgets/2446479672-widgets.js\"></script>\\n<script type=\"text/javascript\" src=\"https://apis.google.com/js/plusone.js\"></script>\\n<script type=\"text/javascript\" src=\"//www.google.com/jsapi\"></script>\\n<script type=\\'text/javascript\\'>\\nif (typeof(BLOG_attachCsiOnload) != \\'undefined\\' && BLOG_attachCsiOnload != null) { window[\\'blogger_templates_experiment_id\\'] = \"templatesV2\";window[\\'blogger_blog_id\\'] = \\'7885177434994542510\\';BLOG_attachCsiOnload(\\'item_\\'); }_WidgetManager._Init(\\'//www.blogger.com/rearrange?blogID\\\\x3d7885177434994542510\\',\\'//contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\',\\'7885177434994542510\\');\\n_WidgetManager._SetDataContext([{\\'name\\': \\'blog\\', \\'data\\': {\\'blogId\\': \\'7885177434994542510\\', \\'bloggerUrl\\': \\'http://www.blogger.com\\', \\'title\\': \\'contagio\\', \\'pageType\\': \\'item\\', \\'postId\\': \\'6900440735518039445\\', \\'url\\': \\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\', \\'canonicalUrl\\': \\'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\', \\'canonicalHomepageUrl\\': \\'http://contagiodump.blogspot.com/\\', \\'homepageUrl\\': \\'http://contagiodump.blogspot.com/\\', \\'blogspotFaviconUrl\\': \\'http://contagiodump.blogspot.com/favicon.ico\\', \\'enabledCommentProfileImages\\': true, \\'adultContent\\': false, \\'disableAdSenseWidget\\': false, \\'analyticsAccountNumber\\': \\'\\', \\'searchLabel\\': \\'\\', \\'searchQuery\\': \\'\\', \\'pageName\\': \\'CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other\\', \\'pageTitle\\': \\'contagio: CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other\\', \\'encoding\\': \\'UTF-8\\', \\'locale\\': \\'en\\', \\'localeUnderscoreDelimited\\': \\'en\\', \\'isPrivate\\': false, \\'isMobile\\': false, \\'isMobileRequest\\': false, \\'mobileClass\\': \\'\\', \\'isPrivateBlog\\': false, \\'languageDirection\\': \\'ltr\\', \\'feedLinks\\': \\'\\\\74link rel\\\\75\\\\42alternate\\\\42 type\\\\75\\\\42application/atom+xml\\\\42 title\\\\75\\\\42contagio - Atom\\\\42 href\\\\75\\\\42http://contagiodump.blogspot.com/feeds/posts/default\\\\42 /\\\\76\\\\n\\\\74link rel\\\\75\\\\42alternate\\\\42 type\\\\75\\\\42application/rss+xml\\\\42 title\\\\75\\\\42contagio - RSS\\\\42 href\\\\75\\\\42http://contagiodump.blogspot.com/feeds/posts/default?alt\\\\75rss\\\\42 /\\\\76\\\\n\\\\74link rel\\\\75\\\\42service.post\\\\42 type\\\\75\\\\42application/atom+xml\\\\42 title\\\\75\\\\42contagio - Atom\\\\42 href\\\\75\\\\42http://www.blogger.com/feeds/7885177434994542510/posts/default\\\\42 /\\\\76\\\\n\\\\n\\\\74link rel\\\\75\\\\42alternate\\\\42 type\\\\75\\\\42application/atom+xml\\\\42 title\\\\75\\\\42contagio - Atom\\\\42 href\\\\75\\\\42http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\\\\42 /\\\\76\\\\n\\', \\'meTag\\': \\'\\', \\'openIdOpTag\\': \\'\\', \\'postImageThumbnailUrl\\': \\'http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s72-c/zc.PNG\\', \\'postImageUrl\\': \\'http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s1600/zc.PNG\\', \\'latencyHeadScript\\': \\'\\\\74script type\\\\75\\\\42text/javascript\\\\42\\\\76(function() { var b\\\\75window,f\\\\75\\\\42chrome\\\\42,g\\\\75\\\\42tick\\\\42,k\\\\75\\\\42jstiming\\\\42;(function(){function d(a){this.t\\\\75{};this.tick\\\\75function(a,d,c){var e\\\\75void 0!\\\\75c?c:(new Date).getTime();this.t[a]\\\\75[e,d];if(void 0\\\\75\\\\75c)try{b.console.timeStamp(\\\\42CSI/\\\\42+a)}catch(h){}};this[g](\\\\42start\\\\42,null,a)}var a;b.performance\\\\46\\\\46(a\\\\75b.performance.timing);var n\\\\75a?new d(a.responseStart):new d;b.jstiming\\\\75{Timer:d,load:n};if(a){var c\\\\75a.navigationStart,h\\\\75a.responseStart;0\\\\74c\\\\46\\\\46h\\\\76\\\\75c\\\\46\\\\46(b[k].srt\\\\75h-c)}if(a){var e\\\\75b[k].load;0\\\\74c\\\\46\\\\46h\\\\76\\\\75c\\\\46\\\\46(e[g](\\\\42_wtsrt\\\\42,void 0,c),e[g](\\\\42wtsrt_\\\\42,\\\\42_wtsrt\\\\42,h),e[g](\\\\42tbsd_\\\\42,\\\\42wtsrt_\\\\42))}try{a\\\\75null,\\\\nb[f]\\\\46\\\\46b[f].csi\\\\46\\\\46(a\\\\75Math.floor(b[f].csi().pageT),e\\\\46\\\\0460\\\\74c\\\\46\\\\46(e[g](\\\\42_tbnd\\\\42,void 0,b[f].csi().startE),e[g](\\\\42tbnd_\\\\42,\\\\42_tbnd\\\\42,c))),null\\\\75\\\\75a\\\\46\\\\46b.gtbExternal\\\\46\\\\46(a\\\\75b.gtbExternal.pageT()),null\\\\75\\\\75a\\\\46\\\\46b.external\\\\46\\\\46(a\\\\75b.external.pageT,e\\\\46\\\\0460\\\\74c\\\\46\\\\46(e[g](\\\\42_tbnd\\\\42,void 0,b.external.startE),e[g](\\\\42tbnd_\\\\42,\\\\42_tbnd\\\\42,c))),a\\\\46\\\\46(b[k].pt\\\\75a)}catch(p){}})();b.tickAboveFold\\\\75function(d){var a\\\\0750;if(d.offsetParent){do a+\\\\75d.offsetTop;while(d\\\\75d.offsetParent)}d\\\\75a;750\\\\76\\\\75d\\\\46\\\\46b[k].load[g](\\\\42aft\\\\42)};var l\\\\75!1;function m(){l||(l\\\\75!0,b[k].load[g](\\\\42firstScrollTime\\\\42))}b.addEventListener?b.addEventListener(\\\\42scroll\\\\42,m,!1):b.attachEvent(\\\\42onscroll\\\\42,m);\\\\n })();\\\\74/script\\\\076\\', \\'mobileHeadScript\\': \\'\\', \\'ieCssRetrofitLinks\\': \\'\\\\74!--[if IE]\\\\76\\\\74script type\\\\75\\\\42text/javascript\\\\42 src\\\\75\\\\42https://www.blogger.com/static/v1/jsbin/836876192-ieretrofit.js\\\\42\\\\76\\\\74/script\\\\76\\\\n\\\\74![endif]--\\\\076\\', \\'view\\': \\'\\', \\'dynamicViewsCommentsSrc\\': \\'//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js\\', \\'dynamicViewsScriptSrc\\': \\'//www.blogblog.com/dynamicviews/76f25a6f2e06af76\\', \\'plusOneApiSrc\\': \\'https://apis.google.com/js/plusone.js\\', \\'sf\\': \\'n\\', \\'tf\\': \\'\\'}}, {\\'name\\': \\'skin\\', \\'data\\': {\\'vars\\': {\\'content_padding\\': \\'0px\\', \\'paging_background\\': \\'transparent none no-repeat scroll top center\\', \\'image_border_small_size\\': \\'0px\\', \\'body_background_gradient_cap\\': \\'none\\', \\'tabs_selected_background_color\\': \\'#fff9ee\\', \\'body_rule_color\\': \\'#999999\\', \\'header_shadow_spread\\': \\'0px\\', \\'header_shadow_offset_left\\': \\'0px\\', \\'header_padding\\': \\'10px\\', \\'link_visited_color\\': \\'#660000\\', \\'post_title_font\\': \\'normal bold 18px Arial, Tahoma, Helvetica, FreeSans, sans-serif\\', \\'tabs_text_color\\': \\'#998877\\', \\'date_header_margin\\': \\'inherit\\', \\'header_background_gradient\\': \\'url(http://3.bp.blogspot.com/-Rz6yhnEuWgo/TgbM67KjcRI/AAAAAAAACEw/HB2_mBBfTC8/s400/gradients_light.png)\\', \\'header_bottom_border_size\\': \\'0\\', \\'content_shadow_spread_webkit\\': \\'0px\\', \\'header_shadow_offset_top\\': \\'0px\\', \\'widget_title_font\\': \\'normal bold 12px Verdana, Arial, Sans-serif\\', \\'main_section_margin\\': \\'10px\\', \\'keycolor\\': \\'#ccb666\\', \\'content_shadow_spread\\': \\'0px\\', \\'image_background_color\\': \\'#ffffff\\', \\'header_font\\': \\'normal bold 50px \\\\47Courier New\\\\47, Courier, FreeMono, monospace\\', \\'header_background_color\\': \\'#09111a\\', \\'main_border_width\\': \\'0\\', \\'main_padding\\': \\'10px\\', \\'tabs_border_color\\': \\'#ffffff\\', \\'image_text_color\\': \\'#222222\\', \\'description_text_size\\': \\'140%\\', \\'post_footer_background_color\\': \\'#eee9dd\\', \\'body_background_gradient_tile\\': \\'none\\', \\'page_width\\': \\'auto\\', \\'tabs_background_gradient\\': \\'none\\', \\'main_padding_bottom\\': \\'15px\\', \\'tabs_background_color\\': \\'#fff9ee\\', \\'image_border_large_size\\': \\'0px\\', \\'post_margin_bottom\\': \\'60px\\', \\'body_background_override\\': \\'\\', \\'tabs_margin_side\\': \\'10px\\', \\'link_hover_color\\': \\'#618f2b\\', \\'description_text_color\\': \\'#ffffff\\', \\'body_text_color\\': \\'#000000\\', \\'content_padding_horizontal\\': \\'0px\\', \\'endSide\\': \\'right\\', \\'page_width_selector\\': \\'.region-inner\\', \\'date_header_padding\\': \\'inherit\\', \\'post_footer_text_color\\': \\'#666555\\', \\'startSide\\': \\'left\\', \\'date_header_color\\': \\'#998877\\', \\'tabs_font\\': \\'normal normal 12px Verdana, Arial, Sans-serif\\', \\'post_footer_border_color\\': \\'transparent\\', \\'body_font\\': \\'normal normal 14px \\\\47Trebuchet MS\\\\47, Trebuchet, sans-serif\\', \\'footer_bevel\\': \\'0\\', \\'tabs_bevel_border_width\\': \\'0px\\', \\'date_header_background_color\\': \\'#ffffff\\', \\'content_shadow_spread_ie\\': \\'0px\\', \\'widget_title_text_color\\': \\'#000000\\', \\'header_border_horizontalsize\\': \\'0\\', \\'image_border_color\\': \\'#ffffff\\', \\'tabs_border_width\\': \\'1px\\', \\'content_background_color\\': \\'#ffffff\\', \\'link_color\\': \\'#274e13\\', \\'header_text_color\\': \\'#cccccc\\', \\'date_header_letterspacing\\': \\'inherit\\', \\'tabs_margin_top\\': \\'0\\', \\'main_padding_top\\': \\'15px\\', \\'header_border_size\\': \\'0\\', \\'tabs_selected_text_color\\': \\'#000000\\', \\'content_background_color_selector\\': \\'.content-inner\\', \\'body_background_color\\': \\'#888888\\', \\'widget_alternate_text_color\\': \\'#999999\\'}, \\'override\\': \\'\\'}}, {\\'name\\': \\'view\\', \\'data\\': {\\'classic\\': {\\'name\\': \\'classic\\', \\'url\\': \\'?view\\\\75classic\\'}, \\'flipcard\\': {\\'name\\': \\'flipcard\\', \\'url\\': \\'?view\\\\75flipcard\\'}, \\'magazine\\': {\\'name\\': \\'magazine\\', \\'url\\': \\'?view\\\\75magazine\\'}, \\'mosaic\\': {\\'name\\': \\'mosaic\\', \\'url\\': \\'?view\\\\75mosaic\\'}, \\'sidebar\\': {\\'name\\': \\'sidebar\\', \\'url\\': \\'?view\\\\75sidebar\\'}, \\'snapshot\\': {\\'name\\': \\'snapshot\\', \\'url\\': \\'?view\\\\75snapshot\\'}, \\'timeslide\\': {\\'name\\': \\'timeslide\\', \\'url\\': \\'?view\\\\75timeslide\\'}}}]);\\n_WidgetManager._RegisterWidget(\\'_PageListView\\', new _WidgetInfo(\\'PageList1\\', \\'crosscol\\', null, document.getElementById(\\'PageList1\\'), {\\'title\\': \\'Pages\\', \\'links\\': [{\\'href\\': \\'http://contagiodump.blogspot.com/\\', \\'title\\': \\'Home\\', \\'isCurrentPage\\': false}, {\\'href\\': \\'http://contagiodump.blogspot.com/p/customsearch.html\\', \\'title\\': \\'Search the Interwebs\\', \\'isCurrentPage\\': false, \\'id\\': \\'4806261689657541017\\'}], \\'mobile\\': false}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML7\\', \\'crosscol\\', null, document.getElementById(\\'HTML7\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_FollowByEmailView\\', new _WidgetInfo(\\'FollowByEmail1\\', \\'footer-2-2\\', null, document.getElementById(\\'FollowByEmail1\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML3\\', \\'footer-2-1\\', null, document.getElementById(\\'HTML3\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_AttributionView\\', new _WidgetInfo(\\'Attribution1\\', \\'footer-3\\', null, document.getElementById(\\'Attribution1\\'), {\\'attribution\\': \\'Powered by \\\\74a href\\\\75\\\\47http://www.blogger.com\\\\47 target\\\\75\\\\47_blank\\\\47\\\\76Blogger\\\\74/a\\\\76.\\'}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HeaderView\\', new _WidgetInfo(\\'Header1\\', \\'header\\', null, document.getElementById(\\'Header1\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_BlogView\\', new _WidgetInfo(\\'Blog1\\', \\'main\\', null, document.getElementById(\\'Blog1\\'), {\\'cmtInteractionsEnabled\\': false, \\'showBacklinks\\': true, \\'postId\\': \\'6900440735518039445\\', \\'lightboxEnabled\\': true, \\'lightboxModuleUrl\\': \\'https://www.blogger.com/static/v1/jsbin/4287895824-lbx.js\\', \\'lightboxCssUrl\\': \\'https://www.blogger.com/static/v1/v-css/2392111094-lightbox_bundle.css\\'}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_TextView\\', new _WidgetInfo(\\'Text3\\', \\'main\\', null, document.getElementById(\\'Text3\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML8\\', \\'sidebar-right-1\\', null, document.getElementById(\\'HTML8\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_ProfileView\\', new _WidgetInfo(\\'Profile1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'Profile1\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_ImageView\\', new _WidgetInfo(\\'Image1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'Image1\\'), {\\'resize\\': false}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML2\\', \\'sidebar-right-1\\', null, document.getElementById(\\'HTML2\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML9\\', \\'sidebar-right-1\\', null, document.getElementById(\\'HTML9\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_BlogArchiveView\\', new _WidgetInfo(\\'BlogArchive1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'BlogArchive1\\'), {\\'languageDirection\\': \\'ltr\\'}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_LinkListView\\', new _WidgetInfo(\\'LinkList2\\', \\'sidebar-right-1\\', null, document.getElementById(\\'LinkList2\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_LabelView\\', new _WidgetInfo(\\'Label1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'Label1\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_BlogListView\\', new _WidgetInfo(\\'BlogList1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'BlogList1\\'), {\\'numItemsToShow\\': 0, \\'totalItems\\': 24}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_CustomSearchView\\', new _WidgetInfo(\\'CustomSearch1\\', \\'sidebar-right-1\\', null, document.getElementById(\\'CustomSearch1\\'), {\\'title\\': \\'Search This Blog\\', \\'includeBlog\\': true, \\'includePostLinks\\': false, \\'includeWeb\\': false, \\'linkLists\\': [], \\'blogUrl\\': \\'http://contagiodump.blogspot.com/\\', \\'loadingMsg\\': \\'Loading...\\', \\'thisBlogMsg\\': \\'This Blog\\', \\'linkedFromHereMsg\\': \\'Linked From Here\\', \\'theWebMsg\\': \\'The Web\\', \\'backgroundColor\\': \\'#ffffff\\', \\'textColor\\': \\'#000000\\', \\'dateColor\\': \\'#ffffff\\', \\'linkColor\\': \\'#274e13\\', \\'urlColor\\': \\'#274e13\\', \\'visitedLinkColor\\': \\'#660000\\', \\'borderColor\\': \\'#ffffff\\', \\'activeBorderColor\\': \\'#ffffff\\'}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_HTMLView\\', new _WidgetInfo(\\'HTML4\\', \\'sidebar-right-1\\', null, document.getElementById(\\'HTML4\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_TextView\\', new _WidgetInfo(\\'Text4\\', \\'sidebar-right-1\\', null, document.getElementById(\\'Text4\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_SubscribeView\\', new _WidgetInfo(\\'Subscribe2\\', \\'sidebar-right-1\\', null, document.getElementById(\\'Subscribe2\\'), {}, \\'displayModeFull\\'));\\n_WidgetManager._RegisterWidget(\\'_NavbarView\\', new _WidgetInfo(\\'Navbar1\\', \\'navbar\\', null, document.getElementById(\\'Navbar1\\'), {}, \\'displayModeFull\\'));\\n</script>\\n</body>\\n</html>'"
       ]
      }
     ],
     "prompt_number": 32
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "soup = bs4.BeautifulSoup(r_text)"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [],
     "prompt_number": 33
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "[s.extract() for s in soup('script')]"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [
      {
       "metadata": {},
       "output_type": "pyout",
       "prompt_number": 34,
       "text": [
        "[<script type=\"text/javascript\">(function() { var b=window,f=\"chrome\",g=\"tick\",k=\"jstiming\";(function(){function d(a){this.t={};this.tick=function(a,d,c){var e=void 0!=c?c:(new Date).getTime();this.t[a]=[e,d];if(void 0==c)try{b.console.timeStamp(\"CSI/\"+a)}catch(h){}};this[g](\"start\",null,a)}var a;b.performance&&(a=b.performance.timing);var n=a?new d(a.responseStart):new d;b.jstiming={Timer:d,load:n};if(a){var c=a.navigationStart,h=a.responseStart;0<c&&h>=c&&(b[k].srt=h-c)}if(a){var e=b[k].load;0<c&&h>=c&&(e[g](\"_wtsrt\",void 0,c),e[g](\"wtsrt_\",\"_wtsrt\",h),e[g](\"tbsd_\",\"wtsrt_\"))}try{a=null,\n",
        "b[f]&&b[f].csi&&(a=Math.floor(b[f].csi().pageT),e&&0<c&&(e[g](\"_tbnd\",void 0,b[f].csi().startE),e[g](\"tbnd_\",\"_tbnd\",c))),null==a&&b.gtbExternal&&(a=b.gtbExternal.pageT()),null==a&&b.external&&(a=b.external.pageT,e&&0<c&&(e[g](\"_tbnd\",void 0,b.external.startE),e[g](\"tbnd_\",\"_tbnd\",c))),a&&(b[k].pt=a)}catch(p){}})();b.tickAboveFold=function(d){var a=0;if(d.offsetParent){do a+=d.offsetTop;while(d=d.offsetParent)}d=a;750>=d&&b[k].load[g](\"aft\")};var l=!1;function m(){l||(l=!0,b[k].load[g](\"firstScrollTime\"))}b.addEventListener?b.addEventListener(\"scroll\",m,!1):b.attachEvent(\"onscroll\",m);\n",
        " })();</script>,\n",
        " <script type=\"text/javascript\">var a=\"indexOf\",b=\"&m=1\",e=\"(^|&)m=\",f=\"?\",g=\"?m=1\";function h(){var c=window.location.href,d=c.split(f);switch(d.length){case 1:return c+g;case 2:return 0<=d[1].search(e)?null:c+b;default:return null}}var k=navigator.userAgent;if(-1!=k[a](\"Mobile\")&&-1!=k[a](\"WebKit\")&&-1==k[a](\"iPad\")||-1!=k[a](\"Opera Mini\")||-1!=k[a](\"IEMobile\")){var l=h();l&&window.location.replace(l)};\n",
        "</script>,\n",
        " <script type=\"text/javascript\">\n",
        "if (window.jstiming) window.jstiming.load.tick('headEnd');\n",
        "</script>,\n",
        " <script type=\"text/javascript\">\n",
        "    function setAttributeOnload(object, attribute, val) {\n",
        "      if(window.addEventListener) {\n",
        "        window.addEventListener('load',\n",
        "          function(){ object[attribute] = val; }, false);\n",
        "      } else {\n",
        "        window.attachEvent('onload', function(){ object[attribute] = val; });\n",
        "      }\n",
        "    }\n",
        "  </script>,\n",
        " <script src=\"https://apis.google.com/js/plusone.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "        gapi.load(\"gapi.iframes:gapi.iframes.style.bubble\", function() {\n",
        "          if (gapi.iframes && gapi.iframes.getContext) {\n",
        "            gapi.iframes.getContext().openChild({\n",
        "                url: 'https://www.blogger.com/navbar.g?targetBlogID\\0757885177434994542510\\46blogName\\75contagio\\46publishMode\\75PUBLISH_MODE_BLOGSPOT\\46navbarType\\75LIGHT\\46layoutType\\75LAYOUTS\\46searchRoot\\75http://contagiodump.blogspot.com/search\\46blogLocale\\75en\\46v\\0752\\46homepageUrl\\75http://contagiodump.blogspot.com/\\46targetPostID\\0756900440735518039445\\46blogPostOrPageUrl\\75http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html\\46vt\\758473562369828364305',\n",
        "                where: document.getElementById(\"navbar-iframe-container\"),\n",
        "                id: \"navbar-iframe\"\n",
        "            });\n",
        "          }\n",
        "        });\n",
        "      </script>,\n",
        " <script type=\"text/javascript\">\n",
        "(function() {\n",
        "var script = document.createElement('script');\n",
        "script.type = 'text/javascript';\n",
        "script.src = '//pagead2.googlesyndication.com/pagead/js/google_top_exp.js';\n",
        "var head = document.getElementsByTagName('head')[0];\n",
        "if (head) {\n",
        "head.appendChild(script);\n",
        "}})();\n",
        "</script>,\n",
        " <script async=\"async\" src=\"//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "    (function() {\n",
        "      var items = [{'id': '6747629419280839826', 'body': 'Ingin Liburan Ke \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Karimunjawa\\74/a\\76 , ingin \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Paket Wisata Karimunjawa murah\\74/a\\76, Hubungi kami \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Tour Karimunjawa\\74/a\\76 island +6285201391216 (Syaiful) PIN BB 30c9f29c. Ayo datang ke \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76karimun jawa \\74/a\\76 bersama keluarga, dengan mengikuti \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket wisata karimunjawa\\74/a\\76 yang termasuk \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76biro wisata karimun jawa\\74/a\\76 berpengalaman karena memberikan \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket karimun jawa murah\\74/a\\76,anda sudah Bisa menikmati \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 Wisata Karimunjawa\\74/a\\76 di \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 pulau Karimunjawa\\74/a\\76 atau \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Karimunjawa island\\74/a\\76. lanjut bisa menghubungi \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76www.tourkarimunjawaisland.com\\74/a\\76. Untuk mendapatkan pilihan paket \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Honeymoon Karimunjawa \\74/a\\76, paket  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Diving Karimunjawa \\74/a\\76, paket Hotel \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Nirvana karimunjawa\\74/a\\76 , paket \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76omah alchy karimunjawa\\74/a\\76 dan \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 Paket Murah karimunjawa \\74/a\\76, \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 paket hotel karimunjawa\\74/a\\76,  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket homestay karimunjawa\\74/a\\76,  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket 2 hari 1 malam karimunjawa\\74/a\\76,  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket 3 hari 2 malam karimunjawa\\74/a\\76,  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket 4 hari 3 malam karimunjawa\\74/a\\76, \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 paket 2 h 1 m karimunjawa\\74/a\\76, \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76 paket 3 h 2 m karimunjawa\\74/a\\76,  \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76paket 4 h 3 m karimunjawa\\74/a\\76. untuk \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76Paket karimunjawa\\74/a\\76 dan \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76karimunjawa murah\\74/a\\76,  hanya di \\74a href\\75\\42http://www.tourkarimunjawaisland.com/\\42 rel\\75\\42nofollow\\42\\76karimunjawa tour\\74/a\\076', 'timestamp': '1406091451247', 'permalink': 'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html?showComment\\0751406091451247#c6747629419280839826', 'author': {'name': 'karimunjawa', 'avatarUrl': 'http://img1.blogblog.com/img/blank.gif', 'profileUrl': 'http://www.tourkarimunjawaisland.com/'}, 'displayTime': 'July 23, 2014 at 12:57 AM', 'deleteclass': 'item-control blog-admin pid-792372887'}];\n",
        "      var msgs = {'loadMore': 'Load more...', 'loading': 'Loading...', 'loaded': 'No more!', 'addComment': 'Add comment', 'reply': 'Reply', 'delete': 'Delete'};\n",
        "      var config = {'blogId': '7885177434994542510', 'postId': '6900440735518039445', 'feed': 'http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default', 'authorName': 'Mila', 'authorUrl': 'http://www.blogger.com/profile/09472209631979859691', 'baseUri': 'http://www.blogger.com', 'maxThreadDepth': 2};\n",
        "\n",
        "// <![CDATA[\n",
        "      var cursor = null;\n",
        "      if (items && items.length > 0) {\n",
        "        cursor = parseInt(items[items.length - 1].timestamp) + 1;\n",
        "      }\n",
        "\n",
        "      var bodyFromEntry = function(entry) {\n",
        "        if (entry.gd$extendedProperty) {\n",
        "          for (var k in entry.gd$extendedProperty) {\n",
        "            if (entry.gd$extendedProperty[k].name == 'blogger.contentRemoved') {\n",
        "              return '<span class=\"deleted-comment\">' + entry.content.$t + '</span>';\n",
        "            }\n",
        "          }\n",
        "        }\n",
        "        return entry.content.$t;\n",
        "      }\n",
        "\n",
        "      var parse = function(data) {\n",
        "        cursor = null;\n",
        "        var comments = [];\n",
        "        if (data && data.feed && data.feed.entry) {\n",
        "          for (var i = 0, entry; entry = data.feed.entry[i]; i++) {\n",
        "            var comment = {};\n",
        "            // comment ID, parsed out of the original id format\n",
        "            var id = /blog-(\\d+).post-(\\d+)/.exec(entry.id.$t);\n",
        "            comment.id = id ? id[2] : null;\n",
        "            comment.body = bodyFromEntry(entry);\n",
        "            comment.timestamp = Date.parse(entry.published.$t) + '';\n",
        "            if (entry.author && entry.author.constructor === Array) {\n",
        "              var auth = entry.author[0];\n",
        "              if (auth) {\n",
        "                comment.author = {\n",
        "                  name: (auth.name ? auth.name.$t : undefined),\n",
        "                  profileUrl: (auth.uri ? auth.uri.$t : undefined),\n",
        "                  avatarUrl: (auth.gd$image ? auth.gd$image.src : undefined)\n",
        "                };\n",
        "              }\n",
        "            }\n",
        "            if (entry.link) {\n",
        "              if (entry.link[2]) {\n",
        "                comment.link = comment.permalink = entry.link[2].href;\n",
        "              }\n",
        "              if (entry.link[3]) {\n",
        "                var pid = /.*comments\\/default\\/(\\d+)\\?.*/.exec(entry.link[3].href);\n",
        "                if (pid && pid[1]) {\n",
        "                  comment.parentId = pid[1];\n",
        "                }\n",
        "              }\n",
        "            }\n",
        "            comment.deleteclass = 'item-control blog-admin';\n",
        "            if (entry.gd$extendedProperty) {\n",
        "              for (var k in entry.gd$extendedProperty) {\n",
        "                if (entry.gd$extendedProperty[k].name == 'blogger.itemClass') {\n",
        "                  comment.deleteclass += ' ' + entry.gd$extendedProperty[k].value;\n",
        "                } else if (entry.gd$extendedProperty[k].name == 'blogger.displayTime') {\n",
        "                  comment.displayTime = entry.gd$extendedProperty[k].value;\n",
        "                }\n",
        "              }\n",
        "            }\n",
        "            comments.push(comment);\n",
        "          }\n",
        "        }\n",
        "        return comments;\n",
        "      };\n",
        "\n",
        "      var paginator = function(callback) {\n",
        "        if (hasMore()) {\n",
        "          var url = config.feed + '?alt=json&v=2&orderby=published&reverse=false&max-results=50';\n",
        "          if (cursor) {\n",
        "            url += '&published-min=' + new Date(cursor).toISOString();\n",
        "          }\n",
        "          window.bloggercomments = function(data) {\n",
        "            var parsed = parse(data);\n",
        "            cursor = parsed.length < 50 ? null\n",
        "                : parseInt(parsed[parsed.length - 1].timestamp) + 1\n",
        "            callback(parsed);\n",
        "            window.bloggercomments = null;\n",
        "          }\n",
        "          url += '&callback=bloggercomments';\n",
        "          var script = document.createElement('script');\n",
        "          script.type = 'text/javascript';\n",
        "          script.src = url;\n",
        "          document.getElementsByTagName('head')[0].appendChild(script);\n",
        "        }\n",
        "      };\n",
        "      var hasMore = function() {\n",
        "        return !!cursor;\n",
        "      };\n",
        "      var getMeta = function(key, comment) {\n",
        "        if ('iswriter' == key) {\n",
        "          var matches = !!comment.author\n",
        "              && comment.author.name == config.authorName\n",
        "              && comment.author.profileUrl == config.authorUrl;\n",
        "          return matches ? 'true' : '';\n",
        "        } else if ('deletelink' == key) {\n",
        "          return config.baseUri + '/delete-comment.g?blogID='\n",
        "               + config.blogId + '&postID=' + comment.id;\n",
        "        } else if ('deleteclass' == key) {\n",
        "          return comment.deleteclass;\n",
        "        }\n",
        "        return '';\n",
        "      };\n",
        "\n",
        "      var replybox = null;\n",
        "      var replyUrlParts = null;\n",
        "      var replyParent = undefined;\n",
        "\n",
        "      var onReply = function(commentId, domId) {\n",
        "        if (replybox == null) {\n",
        "          // lazily cache replybox, and adjust to suit this style:\n",
        "          replybox = document.getElementById('comment-editor');\n",
        "          if (replybox != null) {\n",
        "            replybox.height = '250px';\n",
        "            replybox.style.display = 'block';\n",
        "            replyUrlParts = replybox.src.split('#');\n",
        "          }\n",
        "        }\n",
        "        if (replybox && (commentId !== replyParent)) {\n",
        "          document.getElementById(domId).insertBefore(replybox, null);\n",
        "          replybox.src = replyUrlParts[0]\n",
        "              + (commentId ? '&parentID=' + commentId : '')\n",
        "              + '#' + replyUrlParts[1];\n",
        "          replyParent = commentId;\n",
        "        }\n",
        "      };\n",
        "\n",
        "      var hash = (window.location.hash || '#').substring(1);\n",
        "      var startThread, targetComment;\n",
        "      if (/^comment-form_/.test(hash)) {\n",
        "        startThread = hash.substring('comment-form_'.length);\n",
        "      } else if (/^c[0-9]+$/.test(hash)) {\n",
        "        targetComment = hash.substring(1);\n",
        "      }\n",
        "\n",
        "      // Configure commenting API:\n",
        "      var configJso = {\n",
        "        'maxDepth': config.maxThreadDepth\n",
        "      };\n",
        "      var provider = {\n",
        "        'id': config.postId,\n",
        "        'data': items,\n",
        "        'loadNext': paginator,\n",
        "        'hasMore': hasMore,\n",
        "        'getMeta': getMeta,\n",
        "        'onReply': onReply,\n",
        "        'rendered': true,\n",
        "        'initComment': targetComment,\n",
        "        'initReplyThread': startThread,\n",
        "        'config': configJso,\n",
        "        'messages': msgs\n",
        "      };\n",
        "\n",
        "      var render = function() {\n",
        "        if (window.goog && window.goog.comments) {\n",
        "          var holder = document.getElementById('comment-holder');\n",
        "          window.goog.comments.render(holder, provider);\n",
        "        }\n",
        "      };\n",
        "\n",
        "      // render now, or queue to render when library loads:\n",
        "      if (window.goog && window.goog.comments) {\n",
        "        render();\n",
        "      } else {\n",
        "        window.goog = window.goog || {};\n",
        "        window.goog.comments = window.goog.comments || {};\n",
        "        window.goog.comments.loadQueue = window.goog.comments.loadQueue || [];\n",
        "        window.goog.comments.loadQueue.push(render);\n",
        "      }\n",
        "    })();\n",
        "// ]]>\n",
        "</script>,\n",
        " <script src=\"https://www.blogger.com/static/v1/jsbin/2876379539-comment_from_post_iframe.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "      BLOG_CMT_createIframe('https://www.blogger.com/rpc_relay.html');\n",
        "    </script>,\n",
        " <script type=\"text/javascript\">window.___gcfg = {'lang': 'en'};</script>,\n",
        " <script type=\"text/javascript\">\n",
        "var FJHost = ((document.location.protocol == 'https:') ? \n",
        " \"https://ssllog.\" : \"http://log.\");\n",
        "document.write(unescape(\"%3Cscript src='\" + FJHost + \n",
        " \"feedjit.com/pg/fj/75051f0678a099c9/'\" + \n",
        " \" type='text/javascript'%3E%3C/script%3E\"));\n",
        "</script>,\n",
        " <script type=\"text/javascript\">\n",
        "try { var FJ = FJNew(); FJ.logHit(); } catch(err) {}\n",
        "</script>,\n",
        " <script type=\"text/javascript\">var mf_dropbox_width=-1;var mf_dropbox_id=\"027bb496c82636cd75a6b481080a84e5b0d4ebc9508581b66fa3dd201ff52ce9\";</script>,\n",
        " <script src=\"http://www.mediafire.com/dropbox/dropbox.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">var mf_dropbox_width=-1;var mf_dropbox_id=\"027bb496c82636cd75a6b481080a84e5143312499dbde534fd214d1a596c6932\";</script>,\n",
        " <script src=\"http://www.mediafire.com/dropbox/dropbox.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "    window.setTimeout(function() {\n",
        "        document.body.className = document.body.className.replace('loading', '');\n",
        "      }, 10);\n",
        "  </script>,\n",
        " <script src=\"https://apis.google.com/js/plusone.js\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "if (window.jstiming) window.jstiming.load.tick('widgetJsBefore');\n",
        "</script>,\n",
        " <script src=\"https://www.blogger.com/static/v1/widgets/2446479672-widgets.js\" type=\"text/javascript\"></script>,\n",
        " <script src=\"https://apis.google.com/js/plusone.js\" type=\"text/javascript\"></script>,\n",
        " <script src=\"//www.google.com/jsapi\" type=\"text/javascript\"></script>,\n",
        " <script type=\"text/javascript\">\n",
        "if (typeof(BLOG_attachCsiOnload) != 'undefined' && BLOG_attachCsiOnload != null) { window['blogger_templates_experiment_id'] = \"templatesV2\";window['blogger_blog_id'] = '7885177434994542510';BLOG_attachCsiOnload('item_'); }_WidgetManager._Init('//www.blogger.com/rearrange?blogID\\x3d7885177434994542510','//contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html','7885177434994542510');\n",
        "_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '7885177434994542510', 'bloggerUrl': 'http://www.blogger.com', 'title': 'contagio', 'pageType': 'item', 'postId': '6900440735518039445', 'url': 'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html', 'canonicalUrl': 'http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html', 'canonicalHomepageUrl': 'http://contagiodump.blogspot.com/', 'homepageUrl': 'http://contagiodump.blogspot.com/', 'blogspotFaviconUrl': 'http://contagiodump.blogspot.com/favicon.ico', 'enabledCommentProfileImages': true, 'adultContent': false, 'disableAdSenseWidget': false, 'analyticsAccountNumber': '', 'searchLabel': '', 'searchQuery': '', 'pageName': 'CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other', 'pageTitle': 'contagio: CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'languageDirection': 'ltr', 'feedLinks': '\\74link rel\\75\\42alternate\\42 type\\75\\42application/atom+xml\\42 title\\75\\42contagio - Atom\\42 href\\75\\42http://contagiodump.blogspot.com/feeds/posts/default\\42 /\\76\\n\\74link rel\\75\\42alternate\\42 type\\75\\42application/rss+xml\\42 title\\75\\42contagio - RSS\\42 href\\75\\42http://contagiodump.blogspot.com/feeds/posts/default?alt\\75rss\\42 /\\76\\n\\74link rel\\75\\42service.post\\42 type\\75\\42application/atom+xml\\42 title\\75\\42contagio - Atom\\42 href\\75\\42http://www.blogger.com/feeds/7885177434994542510/posts/default\\42 /\\76\\n\\n\\74link rel\\75\\42alternate\\42 type\\75\\42application/atom+xml\\42 title\\75\\42contagio - Atom\\42 href\\75\\42http://contagiodump.blogspot.com/feeds/6900440735518039445/comments/default\\42 /\\76\\n', 'meTag': '', 'openIdOpTag': '', 'postImageThumbnailUrl': 'http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s72-c/zc.PNG', 'postImageUrl': 'http://2.bp.blogspot.com/-b0rnBLBU924/U8yc7OAuzZI/AAAAAAAAJ9s/fxrfpkrar04/s1600/zc.PNG', 'latencyHeadScript': '\\74script type\\75\\42text/javascript\\42\\76(function() { var b\\75window,f\\75\\42chrome\\42,g\\75\\42tick\\42,k\\75\\42jstiming\\42;(function(){function d(a){this.t\\75{};this.tick\\75function(a,d,c){var e\\75void 0!\\75c?c:(new Date).getTime();this.t[a]\\75[e,d];if(void 0\\75\\75c)try{b.console.timeStamp(\\42CSI/\\42+a)}catch(h){}};this[g](\\42start\\42,null,a)}var a;b.performance\\46\\46(a\\75b.performance.timing);var n\\75a?new d(a.responseStart):new d;b.jstiming\\75{Timer:d,load:n};if(a){var c\\75a.navigationStart,h\\75a.responseStart;0\\74c\\46\\46h\\76\\75c\\46\\46(b[k].srt\\75h-c)}if(a){var e\\75b[k].load;0\\74c\\46\\46h\\76\\75c\\46\\46(e[g](\\42_wtsrt\\42,void 0,c),e[g](\\42wtsrt_\\42,\\42_wtsrt\\42,h),e[g](\\42tbsd_\\42,\\42wtsrt_\\42))}try{a\\75null,\\nb[f]\\46\\46b[f].csi\\46\\46(a\\75Math.floor(b[f].csi().pageT),e\\46\\0460\\74c\\46\\46(e[g](\\42_tbnd\\42,void 0,b[f].csi().startE),e[g](\\42tbnd_\\42,\\42_tbnd\\42,c))),null\\75\\75a\\46\\46b.gtbExternal\\46\\46(a\\75b.gtbExternal.pageT()),null\\75\\75a\\46\\46b.external\\46\\46(a\\75b.external.pageT,e\\46\\0460\\74c\\46\\46(e[g](\\42_tbnd\\42,void 0,b.external.startE),e[g](\\42tbnd_\\42,\\42_tbnd\\42,c))),a\\46\\46(b[k].pt\\75a)}catch(p){}})();b.tickAboveFold\\75function(d){var a\\0750;if(d.offsetParent){do a+\\75d.offsetTop;while(d\\75d.offsetParent)}d\\75a;750\\76\\75d\\46\\46b[k].load[g](\\42aft\\42)};var l\\75!1;function m(){l||(l\\75!0,b[k].load[g](\\42firstScrollTime\\42))}b.addEventListener?b.addEventListener(\\42scroll\\42,m,!1):b.attachEvent(\\42onscroll\\42,m);\\n })();\\74/script\\076', 'mobileHeadScript': '', 'ieCssRetrofitLinks': '\\74!--[if IE]\\76\\74script type\\75\\42text/javascript\\42 src\\75\\42https://www.blogger.com/static/v1/jsbin/836876192-ieretrofit.js\\42\\76\\74/script\\76\\n\\74![endif]--\\076', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/76f25a6f2e06af76', 'plusOneApiSrc': 'https://apis.google.com/js/plusone.js', 'sf': 'n', 'tf': ''}}, {'name': 'skin', 'data': {'vars': {'content_padding': '0px', 'paging_background': 'transparent none no-repeat scroll top center', 'image_border_small_size': '0px', 'body_background_gradient_cap': 'none', 'tabs_selected_background_color': '#fff9ee', 'body_rule_color': '#999999', 'header_shadow_spread': '0px', 'header_shadow_offset_left': '0px', 'header_padding': '10px', 'link_visited_color': '#660000', 'post_title_font': 'normal bold 18px Arial, Tahoma, Helvetica, FreeSans, sans-serif', 'tabs_text_color': '#998877', 'date_header_margin': 'inherit', 'header_background_gradient': 'url(http://3.bp.blogspot.com/-Rz6yhnEuWgo/TgbM67KjcRI/AAAAAAAACEw/HB2_mBBfTC8/s400/gradients_light.png)', 'header_bottom_border_size': '0', 'content_shadow_spread_webkit': '0px', 'header_shadow_offset_top': '0px', 'widget_title_font': 'normal bold 12px Verdana, Arial, Sans-serif', 'main_section_margin': '10px', 'keycolor': '#ccb666', 'content_shadow_spread': '0px', 'image_background_color': '#ffffff', 'header_font': 'normal bold 50px \\47Courier New\\47, Courier, FreeMono, monospace', 'header_background_color': '#09111a', 'main_border_width': '0', 'main_padding': '10px', 'tabs_border_color': '#ffffff', 'image_text_color': '#222222', 'description_text_size': '140%', 'post_footer_background_color': '#eee9dd', 'body_background_gradient_tile': 'none', 'page_width': 'auto', 'tabs_background_gradient': 'none', 'main_padding_bottom': '15px', 'tabs_background_color': '#fff9ee', 'image_border_large_size': '0px', 'post_margin_bottom': '60px', 'body_background_override': '', 'tabs_margin_side': '10px', 'link_hover_color': '#618f2b', 'description_text_color': '#ffffff', 'body_text_color': '#000000', 'content_padding_horizontal': '0px', 'endSide': 'right', 'page_width_selector': '.region-inner', 'date_header_padding': 'inherit', 'post_footer_text_color': '#666555', 'startSide': 'left', 'date_header_color': '#998877', 'tabs_font': 'normal normal 12px Verdana, Arial, Sans-serif', 'post_footer_border_color': 'transparent', 'body_font': 'normal normal 14px \\47Trebuchet MS\\47, Trebuchet, sans-serif', 'footer_bevel': '0', 'tabs_bevel_border_width': '0px', 'date_header_background_color': '#ffffff', 'content_shadow_spread_ie': '0px', 'widget_title_text_color': '#000000', 'header_border_horizontalsize': '0', 'image_border_color': '#ffffff', 'tabs_border_width': '1px', 'content_background_color': '#ffffff', 'link_color': '#274e13', 'header_text_color': '#cccccc', 'date_header_letterspacing': 'inherit', 'tabs_margin_top': '0', 'main_padding_top': '15px', 'header_border_size': '0', 'tabs_selected_text_color': '#000000', 'content_background_color_selector': '.content-inner', 'body_background_color': '#888888', 'widget_alternate_text_color': '#999999'}, 'override': ''}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\\75classic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\\75flipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\\75magazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\\75mosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\\75sidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\\75snapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\\75timeslide'}}}]);\n",
        "_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'crosscol', null, document.getElementById('PageList1'), {'title': 'Pages', 'links': [{'href': 'http://contagiodump.blogspot.com/', 'title': 'Home', 'isCurrentPage': false}, {'href': 'http://contagiodump.blogspot.com/p/customsearch.html', 'title': 'Search the Interwebs', 'isCurrentPage': false, 'id': '4806261689657541017'}], 'mobile': false}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML7', 'crosscol', null, document.getElementById('HTML7'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_FollowByEmailView', new _WidgetInfo('FollowByEmail1', 'footer-2-2', null, document.getElementById('FollowByEmail1'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML3', 'footer-2-1', null, document.getElementById('HTML3'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_AttributionView', new _WidgetInfo('Attribution1', 'footer-3', null, document.getElementById('Attribution1'), {'attribution': 'Powered by \\74a href\\75\\47http://www.blogger.com\\47 target\\75\\47_blank\\47\\76Blogger\\74/a\\76.'}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header', null, document.getElementById('Header1'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', null, document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'showBacklinks': true, 'postId': '6900440735518039445', 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/4287895824-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/2392111094-lightbox_bundle.css'}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_TextView', new _WidgetInfo('Text3', 'main', null, document.getElementById('Text3'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML8', 'sidebar-right-1', null, document.getElementById('HTML8'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_ProfileView', new _WidgetInfo('Profile1', 'sidebar-right-1', null, document.getElementById('Profile1'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image1', 'sidebar-right-1', null, document.getElementById('Image1'), {'resize': false}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML2', 'sidebar-right-1', null, document.getElementById('HTML2'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML9', 'sidebar-right-1', null, document.getElementById('HTML9'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive1', 'sidebar-right-1', null, document.getElementById('BlogArchive1'), {'languageDirection': 'ltr'}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList2', 'sidebar-right-1', null, document.getElementById('LinkList2'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'sidebar-right-1', null, document.getElementById('Label1'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_BlogListView', new _WidgetInfo('BlogList1', 'sidebar-right-1', null, document.getElementById('BlogList1'), {'numItemsToShow': 0, 'totalItems': 24}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_CustomSearchView', new _WidgetInfo('CustomSearch1', 'sidebar-right-1', null, document.getElementById('CustomSearch1'), {'title': 'Search This Blog', 'includeBlog': true, 'includePostLinks': false, 'includeWeb': false, 'linkLists': [], 'blogUrl': 'http://contagiodump.blogspot.com/', 'loadingMsg': 'Loading...', 'thisBlogMsg': 'This Blog', 'linkedFromHereMsg': 'Linked From Here', 'theWebMsg': 'The Web', 'backgroundColor': '#ffffff', 'textColor': '#000000', 'dateColor': '#ffffff', 'linkColor': '#274e13', 'urlColor': '#274e13', 'visitedLinkColor': '#660000', 'borderColor': '#ffffff', 'activeBorderColor': '#ffffff'}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML4', 'sidebar-right-1', null, document.getElementById('HTML4'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_TextView', new _WidgetInfo('Text4', 'sidebar-right-1', null, document.getElementById('Text4'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_SubscribeView', new _WidgetInfo('Subscribe2', 'sidebar-right-1', null, document.getElementById('Subscribe2'), {}, 'displayModeFull'));\n",
        "_WidgetManager._RegisterWidget('_NavbarView', new _WidgetInfo('Navbar1', 'navbar', null, document.getElementById('Navbar1'), {}, 'displayModeFull'));\n",
        "</script>]"
       ]
      }
     ],
     "prompt_number": 34
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "my_text = soup.body.get_text()\n",
      "print my_text"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [
      {
       "output_type": "stream",
       "stream": "stdout",
       "text": [
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Pages\n",
        "\n",
        "\n",
        "Home\n",
        "Search the Interwebs\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Mobile and print friendly view                                         |                               Contagio Exchange - Contagio community malware dump\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Monday, July 21, 2014\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Here are all samples (+ more) mentioned in this post by Fireeye : The Little Signature That Could: The Curious Case of CZ Solution\"\n",
        "All files are digitally signed with a \"CZ Solutions\" certificate making it easy to create a Yara or ClamAV signature. \n",
        "\n",
        "A few Zeus samples seem to be still beaconing. Most are sinkholed.\n",
        "The certificate is now revoked by VeriSign.\n",
        "\n",
        "Enjoy\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Download\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Download. Email me if you need the password\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "File Information\n",
        "\n",
        "\n",
        "\n",
        "Listed by Fireeye\u00a0\n",
        "\n",
        "Xtreme Rat_78CED3B6C04D372CE10B6B8606B3B747 78ced3b6c04d372ce10b6b8606b3b747\n",
        "Spy-Net 2.6_6A56F6735F4B16A60F39B18842FD97D0 6_6A56F6735F4B16A60F39B18842FD97D0 \n",
        "Xtreme Rat_7C00BA0FCBFEE6186994A8988A864385.msg msg 7c00ba0fcbfee6186994a8988a864385\n",
        "XtremeRAT 3.5 Private _2E776E18DEC61CF6CCD68FBACD55FAB3 2e776e18dec61cf6ccd68fbacd55fab3\n",
        "XtremeRAT 3.5 Private _BD70A7CAE3EBF85CF1EDD9EE776D8364 bd70a7cae3ebf85cf1edd9ee776d8364\n",
        "XtremeRAT 3.5 Private_0BE3B0E296BE33903BF76B8CD9CF52CA 0be3b0e296be33903bf76b8cd9cf52ca\n",
        "XtremeRAT 3.5 Private_7416EC2889227F046F48C15C45C102DA 7416ec2889227f046f48c15c45c102da\n",
        "XtremeRAT 3.5 Private_BE47EC66D861C35784DA527BF0F2E03A be47ec66d861c35784da527bf0f2e03a\n",
        "XtremeRAT 3.5 Private_C27232691DACF4CFF24A4D04B3B2896B c27232691dacf4cff24a4d04b3b2896b\n",
        "XtremeRAT 3.5 Private_E79636E4C7418544D188A29481C100BB e79636e4c7418544d188a29481c100bb\n",
        "Zeus_9C11EF09131A3373EEF5C9D83802D56B 9c11ef09131a3373eef5c9d83802d56b\n",
        "Zeus_DCD3E45D40C8817061F716557E7A05B6 dcd3e45d40c8817061f716557e7a05b6\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Additional (mix of RATs and Trojans)\n",
        "\n",
        "\n",
        "2D186068153091927B26CD3A6831BE68 2d186068153091927b26cd3a6831be68\n",
        "4A997E3395A8BB8D73193E158289F4CE 4a997e3395a8bb8d73193e158289f4ce\n",
        "7E92A754AAAA0853469566D5DBF2E70C 7e92a754aaaa0853469566d5dbf2e70c\n",
        "9CFD17C48FC0D300E4AA22E2C8C029D6 9cfd17c48fc0d300e4aa22e2c8c029d6\n",
        "37FEE821695B664EBE66D55D8C0696F2 37fee821695b664ebe66d55d8c0696f2\n",
        "445C22E94EAB61B3D4682824A19F8E92 445c22e94eab61b3d4682824a19f8e92\n",
        "819B4C40F56F69C72E62EF06C85EA3E1 819b4c40f56f69c72e62ef06c85ea3e1\n",
        "947C21CB8E28B854FF02C2241399A450 947c21cb8e28b854ff02c2241399a450\n",
        "2859089CC3E31DA60C64D56C416175E2 2859089cc3e31da60c64d56c416175e2\n",
        "A9EE1BF62DEE532BE2BE217D3E4A8927 a9ee1bf62dee532be2be217d3e4a8927\n",
        "AC87BC7DD4B38FA3EBA23BF042B160CE ac87bc7dd4b38fa3eba23bf042b160ce\n",
        "B953FD2B3D5C10EC735681982D3C6352 b953fd2b3d5c10ec735681982d3c6352\n",
        "BD5188031BB8EB317FB58F0A49CCBF9C bd5188031bb8eb317fb58f0a49ccbf9c\n",
        "D7CF30E3DBFD32A1D1E38CEE464EC6A6 d7cf30e3dbfd32a1d1e38cee464ec6a6\n",
        "E1AFC706C8C96FACEDB6CB62E6CBFD2D e1afc706c8c96facedb6cb62e6cbfd2d\n",
        "Gh0stB_7A26BBD7B5942B49FC0A9CB7268BD030 7a26bbd7b5942b49fc0a9cb7268bd030\n",
        "SpyRat_E0B0BBA2F6399B0577C37E2A3BC3390A e0b0bba2f6399b0577c37e2a3bc3390a\n",
        "Zeus_0D8F9C5898596251233C3FD1DCB34161 0d8f9c5898596251233c3fd1dcb34161\n",
        "Zeus_7A6BBC32868A9F776452355F909F95D6 7a6bbc32868a9f776452355f909f95d6\n",
        "Zeus_7CD6C4A6103F23858C7ED047391F1D3B 7cd6c4a6103f23858c7ed047391f1d3b\n",
        "Zeus_52BE0408084F536E42FEB7C57F521592 52be0408084f536e42feb7c57f521592\n",
        "Zeus_5746DD569623431BA41A247FA64847D7 5746dd569623431ba41a247fa64847d7\n",
        "Zeus_A79089B5E6744C622D61BEFA40AF77D3 a79089b5e6744c622d61befa40af77d3\n",
        "Zeus_E2190F61B532BD51E585449BAAE31BC1 e2190f61b532bd51e585449baae31bc1\n",
        "Zeus_F76A509FEE28C5F65046D6DC072658B2 f76a509fee28c5f65046d6dc072658b2\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Posted by\n",
        "Mila\n",
        "\n",
        "\n",
        "at\n",
        "12:57 AM\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Tags:\n",
        "BozokRAT,\n",
        "Spy-Net,\n",
        "Xtreme RAT,\n",
        "Zeus\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "1 comment:\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "karimunjawaJuly 23, 2014 at 12:57 AMIngin Liburan Ke Karimunjawa , ingin Paket Wisata Karimunjawa murah, Hubungi kami Tour Karimunjawa island +6285201391216 (Syaiful) PIN BB 30c9f29c. Ayo datang ke karimun jawa  bersama keluarga, dengan mengikuti paket wisata karimunjawa yang termasuk biro wisata karimun jawa berpengalaman karena memberikan paket karimun jawa murah,anda sudah Bisa menikmati  Wisata Karimunjawa di  pulau Karimunjawa atau Karimunjawa island. lanjut bisa menghubungi www.tourkarimunjawaisland.com. Untuk mendapatkan pilihan paket Honeymoon Karimunjawa , paket  Diving Karimunjawa , paket Hotel Nirvana karimunjawa , paket omah alchy karimunjawa dan  Paket Murah karimunjawa ,  paket hotel karimunjawa,  paket homestay karimunjawa,  paket 2 hari 1 malam karimunjawa,  paket 3 hari 2 malam karimunjawa,  paket 4 hari 3 malam karimunjawa,  paket 2 h 1 m karimunjawa,  paket 3 h 2 m karimunjawa,  paket 4 h 3 m karimunjawa. untuk Paket karimunjawa dan karimunjawa murah,  hanya di karimunjawa tourReplyDeleteAdd commentLoad more...\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Older Post\n",
        "\n",
        "Home\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Subscribe to:\n",
        "Post Comments (Atom)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Home\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Shared by\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Mila\n",
        "\n",
        "\n",
        "@ you can find my email address in my profile\n",
        "\n",
        "View my complete profile\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "About contagio\n",
        "\n",
        "Contagio is a collection of the latest malware samples, threats, observations, and analyses.\n",
        "\n",
        "Note:  Zip files passwords: Contact me via email  (see my profile) for the passwords or the password scheme.\n",
        "If you see errors, typos, etc, please let me know.\n",
        "Malware samples are available for download by any responsible whitehat researcher. By downloading the samples, anyone waives all rights to claim punitive, incidental and consequential damages resulting from mishandling or self-infection.\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "About Contagio Mobile\n",
        "\n",
        "aka \"take a sample, leave a sample\" Contagio mobile mini-dump is a part of contagiodump.blogspot.com.\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Blog Archive\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\u25bc\u00a0\n",
        "\n",
        "2014\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\u25bc\u00a0\n",
        "\n",
        "July\n",
        "(1)\n",
        "\n",
        "CZ Solution Ltd. signed samples of Xtreme Rat, Zeu...\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "January\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2013\n",
        "(18)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "December\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "November\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "September\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "August\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "June\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "April\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "March\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "February\n",
        "(5)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "January\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2012\n",
        "(59)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "December\n",
        "(15)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "November\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "October\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "September\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "August\n",
        "(9)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "July\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "June\n",
        "(5)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(6)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "April\n",
        "(7)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "March\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "February\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "January\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2011\n",
        "(77)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "December\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "November\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "October\n",
        "(8)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "September\n",
        "(7)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "August\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "July\n",
        "(8)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "June\n",
        "(13)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "April\n",
        "(11)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "March\n",
        "(8)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "February\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "January\n",
        "(5)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2010\n",
        "(191)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "December\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "November\n",
        "(9)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "October\n",
        "(4)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "September\n",
        "(10)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "August\n",
        "(17)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "July\n",
        "(19)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "June\n",
        "(20)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(16)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "April\n",
        "(22)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "March\n",
        "(25)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "February\n",
        "(15)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "January\n",
        "(30)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2009\n",
        "(56)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "December\n",
        "(27)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "November\n",
        "(14)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "October\n",
        "(7)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "September\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "June\n",
        "(2)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(3)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "April\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "2008\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "          \u25ba\u00a0\n",
        "        \n",
        "\n",
        "\n",
        "May\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Shortcuts\n",
        "\n",
        "\n",
        "RE blogs collection\n",
        "Mobile Malware mini-dump. Take a sample, leave a sample.\n",
        "Mobile Malware Google Group\n",
        "CURRENT PDF THREATS - Malware Tracker\n",
        "Defcon 18 Materials (CD)- 2010 Las Vegas\n",
        "Black Hat USA 2010 (Las Vegas and DC) materials\n",
        "************** ViCheck.ca - Malware check tool*************\n",
        "APT malware\n",
        "APT - Advanced Persistent Threat / Targeted Attacks links\n",
        "Collection of Web Backdoors & Shells\n",
        "Dictionary. Ru (computer slang) - Eng (Google machine) - Eng (human)\n",
        "Malware Analysis -- Links and resources for malware samples\n",
        "Malware Analysis and Forensics tools links\n",
        "Overview of Exploit Packs\n",
        "Crimepack 3.1.3 Exploit kit info\n",
        "Phoenix 2.0 Exploit kit\n",
        "Top Twenty (Former Top Ten) targeted attack emails of 2009-2010\n",
        "ZeuS Version scheme by the trojan author\n",
        "Zeus Trojan Research Links\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Categories - sort of\n",
        "\n",
        "\n",
        "\n",
        "- HTA files\n",
        "(1)\n",
        "\n",
        "\n",
        "- JAVA\n",
        "(16)\n",
        "\n",
        "\n",
        "- MOBILE MALWARE\n",
        "(6)\n",
        "\n",
        "\n",
        "- OSX\n",
        "(10)\n",
        "\n",
        "\n",
        "Aurora\n",
        "(2)\n",
        "\n",
        "\n",
        "Autocad\n",
        "(1)\n",
        "\n",
        "\n",
        "Backdoor.Olyx\n",
        "(1)\n",
        "\n",
        "\n",
        "Backdoor.Wirenet\n",
        "(1)\n",
        "\n",
        "\n",
        "batchwiper\n",
        "(1)\n",
        "\n",
        "\n",
        "Black SEO\n",
        "(1)\n",
        "\n",
        "\n",
        "blackhole 2\n",
        "(1)\n",
        "\n",
        "\n",
        "Blackshades\n",
        "(1)\n",
        "\n",
        "\n",
        "botnets\n",
        "(5)\n",
        "\n",
        "\n",
        "Chapro\n",
        "(1)\n",
        "\n",
        "\n",
        "CONFICKER\n",
        "(1)\n",
        "\n",
        "\n",
        "Cridex\n",
        "(1)\n",
        "\n",
        "\n",
        "Crimepack\n",
        "(2)\n",
        "\n",
        "\n",
        "Crisis\n",
        "(1)\n",
        "\n",
        "\n",
        "cuckoo sandbox\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2006-2389\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2006-2492\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2007-0071\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2007-5659\n",
        "(5)\n",
        "\n",
        "\n",
        "CVE-2008-0081\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2008-0655\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2008-2992\n",
        "(4)\n",
        "\n",
        "\n",
        "CVE-2008-3005\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2008-4841\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2008-5353\n",
        "(7)\n",
        "\n",
        "\n",
        "CVE-2009-0556\n",
        "(4)\n",
        "\n",
        "\n",
        "CVE-2009-0563\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2009-0658\n",
        "(2)\n",
        "\n",
        "\n",
        "CVE-2009-0806\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2009-0927\n",
        "(10)\n",
        "\n",
        "\n",
        "CVE-2009-1129\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2009-1869\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2009-3129\n",
        "(9)\n",
        "\n",
        "\n",
        "CVE-2009-3867\n",
        "(7)\n",
        "\n",
        "\n",
        "CVE-2009-3957\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2009-4324\n",
        "(66)\n",
        "\n",
        "\n",
        "CVE-2010-0188\n",
        "(30)\n",
        "\n",
        "\n",
        "CVE-2010-0806\n",
        "(4)\n",
        "\n",
        "\n",
        "CVE-2010-1240\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2010-1297\n",
        "(12)\n",
        "\n",
        "\n",
        "CVE-2010-1885\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2010-2568\n",
        "(2)\n",
        "\n",
        "\n",
        "CVE-2010-2883\n",
        "(13)\n",
        "\n",
        "\n",
        "cve-2010-3333\n",
        "(11)\n",
        "\n",
        "\n",
        "CVE-2010-3654\n",
        "(3)\n",
        "\n",
        "\n",
        "CVE-2010-3970\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2010-4091\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2011-0609\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2011-0611\n",
        "(11)\n",
        "\n",
        "\n",
        "CVE-2011-1980\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2011-1991\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2011-2462\n",
        "(1)\n",
        "\n",
        "\n",
        "cve-2012-0158\n",
        "(4)\n",
        "\n",
        "\n",
        "CVE-2012-0506\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-0507\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-0754\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-0779\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-1535\n",
        "(3)\n",
        "\n",
        "\n",
        "CVE-2012-1875\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-1889\n",
        "(2)\n",
        "\n",
        "\n",
        "CVE-2012-4681\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-4969\n",
        "(1)\n",
        "\n",
        "\n",
        "CVE-2012-5076\n",
        "(1)\n",
        "\n",
        "\n",
        "Dark Comet\n",
        "(1)\n",
        "\n",
        "\n",
        "darkmagie\n",
        "(1)\n",
        "\n",
        "\n",
        "Daws\n",
        "(1)\n",
        "\n",
        "\n",
        "DeepEnd\n",
        "(1)\n",
        "\n",
        "\n",
        "Dexter\n",
        "(1)\n",
        "\n",
        "\n",
        "Dirt Jumper\n",
        "(1)\n",
        "\n",
        "\n",
        "distrack.a\n",
        "(1)\n",
        "\n",
        "\n",
        "Duqu\n",
        "(2)\n",
        "\n",
        "\n",
        "exploit kits\n",
        "(1)\n",
        "\n",
        "\n",
        "exploit pack\n",
        "(1)\n",
        "\n",
        "\n",
        "Flamer\n",
        "(2)\n",
        "\n",
        "\n",
        "flashback\n",
        "(4)\n",
        "\n",
        "\n",
        "Gauss\n",
        "(1)\n",
        "\n",
        "\n",
        "Gh0stnet backdoor\n",
        "(1)\n",
        "\n",
        "\n",
        "gmail\n",
        "(1)\n",
        "\n",
        "\n",
        "High-Tech Bridge\n",
        "(4)\n",
        "\n",
        "\n",
        "Hikit\n",
        "(1)\n",
        "\n",
        "\n",
        "I2p\n",
        "(1)\n",
        "\n",
        "\n",
        "inReverse blog\n",
        "(5)\n",
        "\n",
        "\n",
        "jsp-reverse\n",
        "(1)\n",
        "\n",
        "\n",
        "Linux\n",
        "(4)\n",
        "\n",
        "\n",
        "Makadocs\n",
        "(1)\n",
        "\n",
        "\n",
        "malware links\n",
        "(2)\n",
        "\n",
        "\n",
        "malware samples links\n",
        "(1)\n",
        "\n",
        "\n",
        "Malware Zoo\n",
        "(6)\n",
        "\n",
        "\n",
        "mebromi\n",
        "(1)\n",
        "\n",
        "\n",
        "Medre\n",
        "(1)\n",
        "\n",
        "\n",
        "Memory\n",
        "(1)\n",
        "\n",
        "\n",
        "Mobile Malware Group\n",
        "(1)\n",
        "\n",
        "\n",
        "Morto\n",
        "(1)\n",
        "\n",
        "\n",
        "Narilam\n",
        "(1)\n",
        "\n",
        "\n",
        "OCJP\n",
        "(1)\n",
        "\n",
        "\n",
        "OSX\n",
        "(2)\n",
        "\n",
        "\n",
        "OSX/Dockster.A\n",
        "(1)\n",
        "\n",
        "\n",
        "OSX/iMuler\n",
        "(1)\n",
        "\n",
        "\n",
        "OSX/Revir\n",
        "(1)\n",
        "\n",
        "\n",
        "PDF cuckoo\n",
        "(1)\n",
        "\n",
        "\n",
        "php-backdoor\n",
        "(1)\n",
        "\n",
        "\n",
        "ransomware\n",
        "(1)\n",
        "\n",
        "\n",
        "RAT\n",
        "(9)\n",
        "\n",
        "\n",
        "Redline\n",
        "(1)\n",
        "\n",
        "\n",
        "rootkit\n",
        "(8)\n",
        "\n",
        "\n",
        "Rootkit ZeroAccess (aka MAX++)\n",
        "(1)\n",
        "\n",
        "\n",
        "RTLO\n",
        "(2)\n",
        "\n",
        "\n",
        "Rustock\n",
        "(1)\n",
        "\n",
        "\n",
        "Sanny\n",
        "(1)\n",
        "\n",
        "\n",
        "Sender IPs\n",
        "(1)\n",
        "\n",
        "\n",
        "shylock\n",
        "(2)\n",
        "\n",
        "\n",
        "sirefef\n",
        "(1)\n",
        "\n",
        "\n",
        "Skynet\n",
        "(1)\n",
        "\n",
        "\n",
        "Skype Dorkbot\n",
        "(1)\n",
        "\n",
        "\n",
        "Sources\n",
        "(2)\n",
        "\n",
        "\n",
        "Spyeye\n",
        "(1)\n",
        "\n",
        "\n",
        "Stabuniq\n",
        "(1)\n",
        "\n",
        "\n",
        "Stuxnet\n",
        "(4)\n",
        "\n",
        "\n",
        "taidoor\n",
        "(14)\n",
        "\n",
        "\n",
        "Tbot\n",
        "(1)\n",
        "\n",
        "\n",
        "TDL\n",
        "(2)\n",
        "\n",
        "\n",
        "TDL4 purple haze\n",
        "(1)\n",
        "\n",
        "\n",
        "Tinba\n",
        "(1)\n",
        "\n",
        "\n",
        "TOOLS\n",
        "(5)\n",
        "\n",
        "\n",
        "Tor\n",
        "(1)\n",
        "\n",
        "\n",
        "trojan.osx.boonana.a\n",
        "(1)\n",
        "\n",
        "\n",
        "TWITTER\n",
        "(1)\n",
        "\n",
        "\n",
        "Vir-Win32/Spy.Silon.AA\n",
        "(1)\n",
        "\n",
        "\n",
        "Vobfus\n",
        "(1)\n",
        "\n",
        "\n",
        "Volatility\n",
        "(2)\n",
        "\n",
        "\n",
        "Win32/Ramnit\n",
        "(1)\n",
        "\n",
        "\n",
        "Win32/Trojan.Agent.AXMO\n",
        "(1)\n",
        "\n",
        "\n",
        "worm\n",
        "(5)\n",
        "\n",
        "\n",
        "worm;Qakbot\n",
        "(1)\n",
        "\n",
        "\n",
        "xpaj\n",
        "(1)\n",
        "\n",
        "\n",
        "Xtreme RAT\n",
        "(2)\n",
        "\n",
        "\n",
        "Zeroaccess\n",
        "(2)\n",
        "\n",
        "\n",
        "Zeus\n",
        "(5)\n",
        "\n",
        "\n",
        "Zusy\n",
        "(1)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Blog List\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "0day.jp (\u30bc\u30ed\u30c7\u30a4.JP)\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "PEStudio 8.18, Wireshark & VirusTotal\u3092\u4f7f\u3044\u30de\u30eb\u30a6\u30a7\u30a2\u8abf\u67fb\u30ac\u30a4\u30c9\u30d3\u30c7\u30aa\u3092\u4f5c\u308a\u307e\u3057\u305f\n",
        "\n",
        "\n",
        "5 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Andre' M. DiMino SemperSecurus\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Another look at a cross-platform DDoS botnet\n",
        "\n",
        "\n",
        "8 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Antivirus Comparison.  Compare antivirus reviews and ratings\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Axtaxt's Blog\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Analyzing the \u201cecological footprint\u201d of java algorithms\n",
        "\n",
        "\n",
        "2 weeks ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Carnal0wnage & Attack Research Blog\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Mimikatz Against Virtual Machine Memory Part 2\n",
        "\n",
        "\n",
        "2 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "chackraview.net\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Snort Signatures for LuckyCat APT Campaign\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Crucial Security Forensics Blog\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "SANS DFIR Summit in Austin, TX\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "CyberESI\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Cyber Engineering Services Announces the Cyber Red List\n",
        "\n",
        "\n",
        "1 year ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Didier Stevens\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Introducing Filescanner.exe\n",
        "\n",
        "\n",
        "5 days ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "extraexploit\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "extraexploit memories\n",
        "\n",
        "\n",
        "1 year ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "F-Secure Weblog : News from the Lab\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "H1 2014 Threat Report\n",
        "\n",
        "\n",
        "10 hours ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "FireEye Malware Intelligence Lab\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "YAJ0: Yet Another Java Zero-Day\n",
        "\n",
        "\n",
        "1 year ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Forensics from the sausage factory\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Mac OS X \"Set date and time automatically\"\n",
        "\n",
        "\n",
        "4 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "inREVERSE\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "More on callbacks: ObRegisterCallbacks\n",
        "\n",
        "\n",
        "3 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Krebs on Security\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Home Depot Hit By Same Malware as Target\n",
        "\n",
        "\n",
        "16 hours ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Malware Diaries\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Malvertising on Bing and Yahoo\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Nart Villeneuve\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "2010 and Beyond\n",
        "\n",
        "\n",
        "3 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Reversemode\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Project Basecamp - Attacking ControlLogix\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "StopMalvertising RSS Feed\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "A dive into the Vawtrak Traffic\n",
        "\n",
        "\n",
        "3 days ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Targeted Email Attacks\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "November 21 - Fake Linkedin Invitations\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "The Dark Visitor\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Unnatural Selection by Mara Hvistendahl\n",
        "\n",
        "\n",
        "3 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Veiled Shadows\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Operation Starlight: The Chinese PLA Assault on RSA and the undermining of \n",
        "the Authentication Control Supply Chain\n",
        "\n",
        "\n",
        "2 years ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Xecure Lab\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "HITCON X 10\u5468\u5e74\u958b\u8dd1\u4e86 !!\n",
        "\n",
        "\n",
        "2 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "XyliBox\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Install service for Malware affiliates and individuals\n",
        "\n",
        "\n",
        "4 months ago\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Search This Blog\n",
        "\n",
        "\n",
        "Loading...\n",
        "\n",
        "\n",
        "\n",
        "      #uds-searchControl .gs-result .gs-title,\n",
        "      #uds-searchControl .gs-result .gs-title *,\n",
        "      #uds-searchControl .gsc-results .gsc-trailing-more-results,\n",
        "      #uds-searchControl .gsc-results .gsc-trailing-more-results * {\n",
        "        color:#274e13;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gs-result .gs-title a:visited,\n",
        "      #uds-searchControl .gs-result .gs-title a:visited * {\n",
        "        color:#660000;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gs-relativePublishedDate,\n",
        "      #uds-searchControl .gs-publishedDate {\n",
        "        color: #ffffff;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gs-result a.gs-visibleUrl,\n",
        "      #uds-searchControl .gs-result .gs-visibleUrl {\n",
        "        color: #274e13;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gsc-results {\n",
        "        border-color: #ffffff;\n",
        "        background-color: #ffffff;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gsc-tabhActive {\n",
        "        border-color: #ffffff;\n",
        "        border-top-color: #ffffff;\n",
        "        background-color: #ffffff;\n",
        "        color: #000000;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gsc-tabhInactive {\n",
        "        border-color: #ffffff;\n",
        "        background-color: transparent;\n",
        "        color: #274e13;\n",
        "      }\n",
        "\n",
        "      #uds-searchClearResults {\n",
        "        border-color: #ffffff;\n",
        "      }\n",
        "\n",
        "      #uds-searchClearResults:hover {\n",
        "        border-color: #ffffff;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gsc-cursor-page {\n",
        "        color: #274e13;\n",
        "      }\n",
        "\n",
        "      #uds-searchControl .gsc-cursor-current-page {\n",
        "        color: #000000;\n",
        "      }\n",
        "    \n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Malware collections\n",
        "\n",
        "Take a sample, leave a sample. Mobile malware mini-dump\n",
        "Download files\n",
        "\n",
        "Upload files to the mobile malware mini-dump\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Malware Lists and Collections\n",
        "\n",
        "* Malicious documents archive for signature testing and research* Mobile Malware Collection* I want it ALLAdobe Reader versions vs corresponding exploits (CVE numbered) - Downloads for testingMicrosoft and Adobe Flash patches vs corresponding document and web exploits (non PDF, CVE numbered)Malware list (don't think i have time to keep it up) --- the the malware list is moving hereMalware list (OLD) -- no new updatesPCAP Collections\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Subscribe To\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Posts\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "                Atom\n",
        "              \n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Posts\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Comments\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "                Atom\n",
        "              \n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Comments\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "contagio Dropbox\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Follow by Email\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "Powered by Blogger.\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n",
        "\n"
       ]
      }
     ],
     "prompt_number": 35
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "jager.extract_domains(my_text)"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [
      {
       "output_type": "stream",
       "stream": "stdout",
       "text": [
        "- Extracting: Domains\n",
        " - 5 domains detected.\n"
       ]
      },
      {
       "metadata": {},
       "output_type": "pyout",
       "prompt_number": 36,
       "text": [
        "[u'0day.jp',\n",
        " u'chackraview.net',\n",
        " u'contagiodump.blogspot.com',\n",
        " u'vicheck.ca',\n",
        " u'www.tourkarimunjawaisland.com']"
       ]
      }
     ],
     "prompt_number": 36
    },
    {
     "cell_type": "code",
     "collapsed": false,
     "input": [
      "jager.extract_filenames(my_text)"
     ],
     "language": "python",
     "metadata": {},
     "outputs": [
      {
       "output_type": "stream",
       "stream": "stdout",
       "text": [
        "- Extracting: File Names\n",
        " - 0 Docs detected.\n",
        " - 1 Executable files detected.\n",
        " - 0 Web files detected.\n",
        " - 0 Zip files detected.\n",
        " - 0 Image files detected.\n",
        " - 0 Flash files detected.\n"
       ]
      },
      {
       "metadata": {},
       "output_type": "pyout",
       "prompt_number": 38,
       "text": [
        "{'compressed': [],\n",
        " 'documents': [],\n",
        " 'executables': [u'Filescanner.exe'],\n",
        " 'flash': [],\n",
        " 'web': []}"
       ]
      }
     ],
     "prompt_number": 38
    }
   ],
   "metadata": {}
  }
 ]
}