The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Mailer Daemons and Ads

Discussion in 'Security' started by leojarina, Jan 4, 2012.

  1. leojarina

    leojarina Member

    Joined:
    Jan 4, 2012
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    Hello,

    (Sorry about my english)
    I am new here, I have a reseller account but it looks like it was compromised by unknown individual.
    All my accounts have been affected by a google ads. But the worst of all, my clients that are hosted to my whm account are getting lots of mailer daemons from different unknown recipients. What might be the cause of these issues?

    Anyone can help me?

    Thanks,
    Leo
     
  2. faisikhan

    faisikhan Well-Known Member

    Joined:
    Dec 12, 2011
    Messages:
    88
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Islamabad, Pakistan
    cPanel Access Level:
    Root Administrator
    Hi

    It can be due to some viral attack or any hack attempt so for immediate help contact your host now :)
     
  3. leojarina

    leojarina Member

    Joined:
    Jan 4, 2012
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    Hello faisikhan,

    Thank you for your reply, I already contacted them. They also monitored my accounts, but this is almost a year that I've been suffering this issues. Any advise please?

    Thanks in advance,
    Leo
     
  4. faisikhan

    faisikhan Well-Known Member

    Joined:
    Dec 12, 2011
    Messages:
    88
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Islamabad, Pakistan
    cPanel Access Level:
    Root Administrator
    Hi Leo,

    First of all I would like to request you to follow that link /http://www.whmsecurity.com/linux-security/7-how-whm-cpanel-hardening-security-basics-part-1-a.html & implement extreme security for your whm accounts, these will provide you a permanent fix OR you can try these:

    1. Yeah seems that your account is hacked so you will have to suspend it immediately.
    2. Try to Remove the scripts where ever you find, delete the installed files and clear the Exim mail queue.
    3. Please make sure that the attack wasn’t able to probe any deeper into the server so you have to monitor it closely.
    4. All the accounts will need to be changed ASAP.
    5. Roll back the original affected CPanel account to an earlier backup and change all the account's FTP, SSH and MySQL passwords.
    6. As a precaution, change all the passwords (like the above) for any account which was listed within the hacker’s confspy.pl file which you found.
    7. Update WordPress/Joomla/CMS plugins/versions to the latest available, this can be the root cause as using older packages mostly helps hackers to enter such files.
    8. I hope you have firewalls enabled and running & if not please do so.

    Please let me know if you face any issue, may be the above steps are bit difficult for you but it will help to fix the issues permanently :)
     
    #4 faisikhan, Jan 5, 2012
    Last edited: Jan 6, 2012
  5. ruzbehraja

    ruzbehraja Well-Known Member

    Joined:
    May 19, 2011
    Messages:
    383
    Likes Received:
    7
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Firstly you need to find out the real problem by checking the following:
    • Has this problem affected only your accounts or the entire server?
    • Has it injected some lines of code into the files, or have some new files been uploaded to the accounts? You should check the Last Modified Date of each of the files.
    • What are the Mailer Daemon mails that they are getting? Can you post a sample? It seems like the hacked accounts are sending out the mails.

    Although you can do very little, since you do not have root access, you will atleast be able to identify the problem and inform your host about it.
     
  6. leojarina

    leojarina Member

    Joined:
    Jan 4, 2012
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    Hello faisikhan,

    Thanks a lot for the detailed reply but that's steps seems difficult for me. I did follow the link you've give me and the steps there, but I can't find where do I enable or disable something that can help me to out. I got 250+ accounts in my whm account and its very difficult for me to suspend it all. But I believed that steps could help but I am not so familiar on server side scripting. I also change my entire accounts password once every month. How ever the issues still remains and never been fix. "2. to Remove the scripts where ever you find, delete the installed files and clear the Exim mail queue." How do I clear the Exim? Can I found it to my whm account? 6. As a precaution, change all the passwords (like the above) for any account which was listed within the hacker’s confspy.pl Where this (confspy.pl) file mostly located? 8. I hope you have firewalls enabled and running & if not please do so. What firewalls you are really mean to? Was that also located in my cpanel?

    Thank you so much,
    Leo
     
  7. leojarina

    leojarina Member

    Joined:
    Jan 4, 2012
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    Hello ruzberaja,

    Thanks for your reply, All of my accounts are affected and has injected a script from google to execute an ads which is very disturbing. I will post some of the Mailer Daemon mails here later.

    Thanks a lot,
    Leo
     
  8. faisikhan

    faisikhan Well-Known Member

    Joined:
    Dec 12, 2011
    Messages:
    88
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Islamabad, Pakistan
    cPanel Access Level:
    Root Administrator
    Hi Leo,

    confspy.pl is just a sample script that mostly enters into the server and harms the cpanel accounts but don't limited to that only. There can be other perl or php scripts for such types of malicious activities so install the updated Anti-Virus on your accounts, also update the ClamAV antivirus of cpanel. There is a famous firewall known as CSF(config server firewall) that comes with cpanel GUI ConfigServer Security & Firewall , I hope you have this installed and if not please do it asap.
     
  9. leojarina

    leojarina Member

    Joined:
    Jan 4, 2012
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    Hi faisikhan,

    This is a sample of the mailer daemon that I received.

    ---------------------------------------------------------------------------

    Code:
    This message was created automatically by mail delivery software.
    
    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:
    
    1908776079@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1936098468@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1902182170@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1915714239@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1907624455@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1903615195@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1914166839@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1943654234@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1914884305@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1911545502@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    1902668588@qq.com
    Domain ppavis.com has exceeded the max emails per hour (500) allowed. Message
    discarded.
    
    ------ This is a copy of the message, including all the headers. ------
    
    Return-path: <pdovisayas@ppavis.com>
    Received: from [1.195.191.74] (port=4583 helo=yahoo2.com.cn)
    by pantera.websitewelcome.com with esmtpa (Exim 4.69)
    (envelope-from <pdovisayas@ppavis.com>)
    id 1RkAZs-0000KH-On; Mon, 09 Jan 2012 02:27:38 -0600
    Sender: pdovisayas@ppavis.com
    Message-ID: <E4CC215B15E98F143FC142D94B381858@yahoo2.com.cn>
    From: =?gb2312?B?zajWqg==?= <yahoo12.cn>
    To: <1908776079@qq.com>
    Subject: =?gb2312?B?0MLTyrz+o6E=?=
    Date: Mon, 9 Jan 2012 16:27:29 +0800
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=_NextPart_000_0100_01AFE6E4.18AC6EB0"
    X-Priority: 1
    X-MSMail-Priority: High
    X-Mailer: Microsoft Outlook Express 6.00.2900.5512
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
    
    This is a multi-part message in MIME format.
    
    ------=_NextPart_000_0100_01AFE6E4.18AC6EB0
    Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_08F6_01AFE6E4.18AC6EB0"
    
    ------=_NextPart_001_08F6_01AFE6E4.18AC6EB0
    Content-Type: text/plain;
    charset="gb2312"
    Content-Transfer-Encoding: base64
    
    INfwvrS1xNPDu6ejuiANCsT6usOjocT6tcTVy7rF0tGxu9bQ0eu158rTzKi3x7OjorYrorHAuMS/
    1+nT68za0ba5q8u+0K/K1r7ZsOy1xLPpvbG77ravs+nIoc6q0NLUy9PDu6eho8T6vau78bXDwLjE
    v9fpy82z9rXEvqrPsr2xvfA0ODAwMNSqyMvD8bHS0tS8sNTe1vrJzMvNs/a1xMj90MdRNDCxyrzH
    sb6158TU0rvMqKOhDQrOqsHLyLexo8T6tcS9sc/usLLIq6OsytW1vdDFz6K688frwaK8tLXHwr27
    7ravzfggY2N0djM4ODkuY29tsOzA7aOsxPq1xLj2yMvR6dakwuvOqqG+MTEwOKG/oaPH68i3vMfE
    +rXEuPbIy9Hp1qTC6y4gDQrXoqO6zqrBy8i3saPE+rXE0NLUy9fKuPGyu7G7w7DB7KOsx+u8sMqx
    sum/tNPKvP6ho7fx1PK0y9PKvP7X1Lav16rI68Csu/jQxc/ks8nOqsCsu/jTyrz+o6ENCrnY09rM
    2tG2IHwgQWJvdXQgVGVuY2VudCB8ILf+zvHM9b/uIHwgv6q3xca9zKggfCC547jmt/7O8SB8IMnM
    zvHHosy4IHwgzNrRttXQxrggfCDM2tG2uavS5iB8IL/Nt/7W0NDEIHwgzfjVvrW8ur0gfCCw5sio
    y/nT0Hwg0fS54qGkwszJq834wue5pLPMIHwgsObIqLGju6TNtsvf1rjS/SB8IM34wue3qNbGus21
    wLXCvczT/bv5tdggfCC547aryqHNqLncvtYgfCDQws7F0MXPorf+zvHQ7b/J1qQgfCC7pcGqzfiz
    9rDm0O2/ydak1MG4rtDCuq9bMjAwMV04N7rFINTBzfjOxFsyMDExXTA0ODMtMDcwusUgfCDN+MLn
    ytPM/dDtv8nWpDE5MDQwNzO6xSB81PbWtbXn0MXStc7xvq3TqtDtv8nWpKO61MFCMi0yMDA5MDA1
    OSBCMi0yMDA5MDAyOA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
    ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDb3B5cmlnaHQgPyAxOTk4IC0gMjAxMSBUZW5j
    ZW50LiBBbGwgUmlnaHRzIFJlc2VydmVkIA0KIA==
    
    ------=_NextPart_001_08F6_01AFE6E4.18AC6EB0
    Content-Type: text/html;
    charset="gb2312"
    Content-Transfer-Encoding: base64
    
    PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
    L0VOIj4NCjxIVE1MIHhtbG5zOm8gPSAidXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6
    b2ZmaWNlIj48SEVBRD4NCjxNRVRBIGh0dHAtZXF1aXY9Q29udGVudC1UeXBlIGNvbnRlbnQ9InRl
    eHQvaHRtbDsgY2hhcnNldD1nYjIzMTIiPg0KPE1FVEEgY29udGVudD0iTVNIVE1MIDYuMDAuMjkw
    MC41NTEyIiBuYW1lPUdFTkVSQVRPUj48L0hFQUQ+DQo8Qk9EWT4NCjxESVY+PFNQQU4gbGFuZz1F
    Ti1VUyBzdHlsZT0iQ09MT1I6IGJsdWUiPjxvOnA+PEZPTlQgDQpzaXplPTQ+PFNUUk9ORz4mbmJz
    cDs8L1NUUk9ORz48U1BBTiBzdHlsZT0iQ09MT1I6IGJsdWUiPjxGT05UIA0KY29sb3I9cmVkPtfw
    vrS1xNPDu6ejujxTUEFOIGxhbmc9RU4tVVM+PG86cD48L286cD48L1NQQU4+PC9GT05UPjwvU1BB
    Tj4gPC9GT05UPg0KPERJViBjbGFzcz1TZWN0aW9uMT4NCjxESVY+DQo8UCBjbGFzcz1Nc29Ob3Jt
    YWwgc3R5bGU9IlRFWFQtSU5ERU5UOiAyNHB0OyBtc28tY2hhci1pbmRlbnQtY291bnQ6IDIuMCI+
    PFNQQU4gDQpzdHlsZT0iQ09MT1I6IGJsdWUiPjxGT05UIHNpemU9ND48Rk9OVCANCmNvbG9yPXJl
    ZD7E+rrDo6HE+rXE1cu6xdLRsbvW0NHrtefK08yot8ezo6K2K6KxwLjEv9fp0+vM2tG2uavLvtCv
    yta+2bDstcSz6b2xu+62r7PpyKHOqtDS1MvTw7unoaPE+r2ru/G1w8C4xL/X6cvNs/a1xL6qz7K9
    sb3wPFNQQU4gDQpsYW5nPUVOLVVTPjQ4MDAw1KrIy8PxsdI8L1NQQU4+0tS8sNTe1vrJzMvNs/a1
    xMj90Mc8U1BBTiANCmxhbmc9RU4tVVM+UTQwPC9TUEFOPrHKvMexvrXnxNTSu8yoPC9GT05UPjxG
    T05UIGNvbG9yPXJlZD6joTxTUEFOIA0KbGFuZz1FTi1VUz48bzpwPjwvbzpwPjwvU1BBTj48L0ZP
    TlQ+PC9GT05UPjwvU1BBTj48L1A+DQo8UCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9IlRFWFQtSU5E
    RU5UOiAyNHB0OyBtc28tY2hhci1pbmRlbnQtY291bnQ6IDIuMCI+PEZPTlQgDQpzaXplPTQ+PFNQ
    QU4+PEZPTlQgY29sb3I9cmVkPs6qwcvIt7GjxPq1xL2xz+6wssiro6zK1bW90MXPorrzx+vBory0
    tcfCvbvutq/N+CA8L0ZPTlQ+PEZPTlQgDQpjb2xvcj1ibHVlPjxTVFJPTkc+Y2N0djM4ODkuY29t
    PC9TVFJPTkc+PC9GT05UPjwvU1BBTj48Rk9OVCBjb2xvcj0jZmYwMDAwPjxTUEFOIA0Kc3R5bGU9
    IkNPTE9SOiBibHVlIj48Rk9OVCBjb2xvcj1yZWQ+sOzA7TxTVFJPTkc+o6w8L1NUUk9ORz48L0ZP
    TlQ+PEZPTlQgDQpjb2xvcj1yZWQ+xPq1xLj2yMvR6dakwuvOqjwvRk9OVD48Rk9OVCBjb2xvcj1i
    bHVlPqG+PC9GT05UPjwvU1BBTj48U1RST05HPjxTUEFOIA0KbGFuZz1FTi1VUyBzdHlsZT0iQ09M
    T1I6IHJlZCI+PEZPTlQgY29sb3I9Ymx1ZT4xMTA4ob88L0ZPTlQ+PC9TUEFOPjwvU1RST05HPjxT
    UEFOIA0Kc3R5bGU9IkNPTE9SOiBibHVlIj6hozxGT05UIGNvbG9yPXJlZD7H68i3vMfE+rXEuPbI
    y9Hp1qTC6y48L0ZPTlQ+PC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGJs
    dWUiPjxvOnA+Jm5ic3A7PC9vOnA+PC9TUEFOPjwvRk9OVD48L0ZPTlQ+PC9QPg0KPFAgY2xhc3M9
    TXNvTm9ybWFsPjxTUEFOIHN0eWxlPSJDT0xPUjogcmVkIj48U1RST05HPjxGT05UIGNvbG9yPWJs
    dWU+PEZPTlQgDQpzaXplPTQ+16Kjus6qwcvIt7GjxPq1xNDS1MvXyrjxsruxu8OwweyjrMfrvLDK
    sbLpv7TTyrz+oaO38dTytMvTyrz+19S2r9eqyOvArLv40MXP5LPJzqrArLv408q8/qOhPFNQQU4g
    DQpsYW5nPUVOLVVTPjxvOnA+PC9vOnA+PC9TUEFOPjwvRk9OVD48L0ZPTlQ+PC9TVFJPTkc+PC9T
    UEFOPjwvUD48L0RJVj48L0RJVj48L286cD48L1NQQU4+PC9ESVY+DQo8RElWIGNsYXNzPVNlY3Rp
    b24xPg0KPERJVj4NCjxQIGNsYXNzPU1zb05vcm1hbD48U1BBTiBsYW5nPUVOLVVTIHN0eWxlPSJD
    T0xPUjogYmx1ZSI+PG86cD48Rk9OVCANCnNpemU9ND48L0ZPTlQ+PC9vOnA+PC9TUEFOPjwvUD4N
    CjxQIGNsYXNzPU1zb05vcm1hbD48U1BBTiBsYW5nPUVOLVVTIHN0eWxlPSJDT0xPUjogZnVjaHNp
    YSI+PEEgDQpocmVmPSJodHRwOi8vd3d3LnRlbmNlbnQuY29tLyI+PFNQQU4gbGFuZz1FTi1VUyAN
    CnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BBTiBsYW5nPUVOLVVTPjxG
    T05UIA0Kc2l6ZT00PrnY09rM2tG2PC9GT05UPjwvU1BBTj48L1NQQU4+PC9BPjwvU1BBTj48Rk9O
    VCBzaXplPTQ+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9S
    OiBncmF5Ij4gfCA8L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJDT0xPUjogZnVjaHNp
    YSI+PEEgaHJlZj0iaHR0cDovL3d3dy50ZW5jZW50LmNvbS9pbmRleF9lLnNodG1sIj48U1BBTiAN
    CnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij5BYm91dCBUZW5jZW50PC9TUEFO
    PjwvQT48L1NQQU4+PFNQQU4gDQpsYW5nPUVOLVVTIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENP
    TE9SOiBncmF5Ij4gfCA8L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJDT0xPUjogZnVj
    aHNpYSI+PEEgaHJlZj0iaHR0cDovL3d3dy5xcS5jb20vY29udHJhY3Quc2h0bWwiPjxTUEFOIA0K
    bGFuZz1FTi1VUyBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+PFNQQU4gDQps
    YW5nPUVOLVVTPrf+zvHM9b/uPC9TUEFOPjwvU1BBTj48L0E+PC9TUEFOPjxTUEFOIGxhbmc9RU4t
    VVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IHwgPC9TUEFOPjxTUEFO
    IGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxBIGhyZWY9Imh0dHA6Ly9vcGVu
    LnFxLmNvbS8iPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xP
    UjogZ3JheSI+PFNQQU4gDQpsYW5nPUVOLVVTPr+qt8XGvcyoPC9TUEFOPjwvU1BBTj48L0E+PC9T
    UEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3Jh
    eSI+IHwgPC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxB
    IGhyZWY9Imh0dHA6Ly93d3cudGVuY2VudG1pbmQuY29tLyI+PFNQQU4gbGFuZz1FTi1VUyANCnN0
    eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BBTiANCmxhbmc9RU4tVVM+ueO4
    5rf+zvE8L1NQQU4+PC9TUEFOPjwvQT48L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJG
    T05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij4gfCA8L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyAN
    CnN0eWxlPSJDT0xPUjogZnVjaHNpYSI+PEEgaHJlZj0iaHR0cDovL3d3dy50ZW5jZW50LmNvbS9h
    Ym91dC9jb3JwLnNodG1sIj48U1BBTiANCmxhbmc9RU4tVVMgc3R5bGU9IkZPTlQtU0laRTogMTBw
    dDsgQ09MT1I6IGdyYXkiPjxTUEFOIA0KbGFuZz1FTi1VUz7JzM7xx6LMuDwvU1BBTj48L1NQQU4+
    PC9BPjwvU1BBTj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09M
    T1I6IGdyYXkiPiB8IDwvU1BBTj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkNPTE9SOiBmdWNo
    c2lhIj48QSBocmVmPSJodHRwOi8vaHIudGVuY2VudC5jb20vIj48U1BBTiBsYW5nPUVOLVVTIA0K
    c3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPjxTUEFOIA0KbGFuZz1FTi1VUz7M
    2tG21dDGuDwvU1BBTj48L1NQQU4+PC9BPjwvU1BBTj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9
    IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPiB8IDwvU1BBTj48U1BBTiBsYW5nPUVOLVVT
    IA0Kc3R5bGU9IkNPTE9SOiBmdWNoc2lhIj48QSBocmVmPSJodHRwOi8vZ29uZ3lpLnFxLmNvbS8i
    PjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+
    PFNQQU4gDQpsYW5nPUVOLVVTPsza0ba5q9LmPC9TUEFOPjwvU1BBTj48L0E+PC9TUEFOPjxTUEFO
    IGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IHwgPC9T
    UEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxBIGhyZWY9Imh0
    dHA6Ly9zZXJ2aWNlLnFxLmNvbS8iPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpF
    OiAxMHB0OyBDT0xPUjogZ3JheSI+PFNQQU4gDQpsYW5nPUVOLVVTPr/Nt/7W0NDEPC9TUEFOPjwv
    U1BBTj48L0E+PC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0
    OyBDT0xPUjogZ3JheSI+IHwgPC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6
    IGZ1Y2hzaWEiPjxBIGhyZWY9Imh0dHA6Ly93d3cucXEuY29tL21hcC8iPjxTUEFOIGxhbmc9RU4t
    VVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+PFNQQU4gDQpsYW5nPUVO
    LVVTPs341b61vLq9PC9TUEFOPjwvU1BBTj48L0E+PC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpz
    dHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IHwgPC9TUEFOPjxTUEFOIGxhbmc9
    RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxBIA0KaHJlZj0iaHR0cDovL3d3dy50ZW5j
    ZW50LmNvbS9sYXcvbW9fbGF3LnNodG1sPy9sYXcvY29weXJpZ2h0Lmh0bSI+PFNQQU4gDQpsYW5n
    PUVOLVVTIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BBTiANCmxhbmc9
    RU4tVVM+sObIqMv509A8L1NQQU4+PC9TUEFOPjwvQT48L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyAN
    CnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij58IDwvU1BBTj48VT48U1BBTiAN
    CnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij7R9LnioaTCzMmrzfjC57mks8w8
    L1NQQU4+PC9VPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xP
    UjogZ3JheSI+IHwgPC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hz
    aWEiPjxBIGhyZWY9Imh0dHA6Ly93d3cucXEuY29tL2NvcHlyaWdodC5zaHRtbCI+PFNQQU4gDQps
    YW5nPUVOLVVTIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BBTiANCmxh
    bmc9RU4tVVM+sObIqLGju6TNtsvf1rjS/TwvU1BBTj48L1NQQU4+PC9BPjwvU1BBTj48U1BBTiBs
    YW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPiB8IDwvU1BB
    Tj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkNPTE9SOiBmdWNoc2lhIj48QSBocmVmPSJodHRw
    Oi8veS5jaGluYS5jb20uY24vIj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0laRTog
    MTBwdDsgQ09MT1I6IGdyYXkiPjxTUEFOIA0KbGFuZz1FTi1VUz7N+MLnt6jWxrrNtcC1wr3M0/27
    +bXYPC9TUEFOPjwvU1BBTj48L0E+PC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9O
    VC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IHwgPC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMgDQpz
    dHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxBIGhyZWY9Imh0dHA6Ly93d3cuZ2RjYS5nb3YuY24vIj48
    U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPjxT
    UEFOIA0KbGFuZz1FTi1VUz6547aryqHNqLncvtY8L1NQQU4+PC9TUEFOPjwvQT48L1NQQU4+PFNQ
    QU4gbGFuZz1FTi1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij4gfCA8
    L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJDT0xPUjogZnVjaHNpYSI+PEEgaHJlZj0i
    aHR0cDovL3d3dy5xcS5jb20vc2Npby5odG0iPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9O
    VC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+PFNQQU4gDQpsYW5nPUVOLVVTPtDCzsXQxc+it/7O
    8dDtv8nWpDwvU1BBTj48L1NQQU4+PC9BPjwvU1BBTj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9
    IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPiB8IDwvU1BBTj48U1BBTiBsYW5nPUVOLVVT
    IA0Kc3R5bGU9IkNPTE9SOiBmdWNoc2lhIj48QSBocmVmPSJodHRwOi8vd3d3LnFxLmNvbS9pbnRl
    cm5ldF9saWNlbmNlLmh0bSI+PFNQQU4gDQpsYW5nPUVOLVVTIHN0eWxlPSJGT05ULVNJWkU6IDEw
    cHQ7IENPTE9SOiBncmF5Ij48U1BBTiANCmxhbmc9RU4tVVM+u6XBqs34s/aw5tDtv8nWpDwvU1BB
    Tj48L1NQQU4+PC9BPjxBIA0KaHJlZj0iaHR0cDovL3d3dy5xcS5jb20veHdkei5zaHRtbCI+PFNQ
    QU4gbGFuZz1FTi1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BB
    TiANCmxhbmc9RU4tVVM+1MG4rtDCuq9bMjAwMV04NzwvU1BBTj48L1NQQU4+PFNQQU4gbGFuZz1F
    Ti1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij48U1BBTiANCmxhbmc9
    RU4tVVM+usU8L1NQQU4+PC9TUEFOPjwvQT48L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxl
    PSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij4gPC9TUEFOPjxTUEFOIGxhbmc9RU4tVVMg
    DQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxBIGhyZWY9Imh0dHA6Ly93d3cucXEuY29tL2N1bHR1
    cmUuc2h0bWwiPjxTUEFOIA0KbGFuZz1FTi1VUyBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xP
    UjogZ3JheSI+PFNQQU4gDQpsYW5nPUVOLVVTPtTBzfjOxFsyMDExXTA0ODMtMDcwPC9TUEFOPjwv
    U1BBTj48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdy
    YXkiPjxTUEFOIA0KbGFuZz1FTi1VUz66xTwvU1BBTj48L1NQQU4+PC9BPiZuYnNwOzxGT05UIGNv
    bG9yPSM4MDgwODAgDQpzaXplPTI+fDwvRk9OVD48L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyBzdHls
    ZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IA0KPC9TUEFOPjxTUEFOIGxhbmc9RU4t
    VVMgc3R5bGU9IkNPTE9SOiBmdWNoc2lhIj48QSANCmhyZWY9Imh0dHA6Ly93d3cucXEuY29tL2Ni
    c3Quc2h0bWwiPjxTUEFOIGxhbmc9RU4tVVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xP
    UjogZ3JheSI+PFNQQU4gDQpsYW5nPUVOLVVTPs34wufK08z90O2/ydakMTkwNDA3MzwvU1BBTj48
    L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBn
    cmF5Ij48U1BBTiANCmxhbmc9RU4tVVM+usU8L1NQQU4+PC9TUEFOPjwvQT48L1NQQU4+PFNQQU4g
    bGFuZz1FTi1VUyANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij4gfDwvU1BB
    Tj48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij7U9ta1tefQxdK1
    zvG+rdOq0O2/ydako7o8L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJDT0xPUjogZnVj
    aHNpYSI+PEEgaHJlZj0iaHR0cDovL3d3dy5xcS5jb20vaWNwLnNodG1sIj48U1BBTiBsYW5nPUVO
    LVVTIA0Kc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGdyYXkiPjxTUEFOIA0KbGFuZz1F
    Ti1VUz7UwUIyLTIwMDkwMDU5PC9TUEFOPjwvU1BBTj48L0E+PC9TUEFOPjxTUEFOIGxhbmc9RU4t
    VVMgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogZ3JheSI+IDwvU1BBTj48L0ZPTlQ+
    PFNQQU4gbGFuZz1FTi1VUyANCnN0eWxlPSJDT0xPUjogZnVjaHNpYSI+PEEgaHJlZj0iaHR0cDov
    L3d3dy5xcS5jb20vaWNwMS5zaHRtbCI+PFNQQU4gDQpzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBD
    T0xPUjogZ3JheSI+PEZPTlQgDQpzaXplPTQ+QjItMjAwOTAwMjg8L0ZPTlQ+PC9TUEFOPjwvQT48
    QlI+PC9TUEFOPjxGT05UIHNpemU9ND48U1BBTiBsYW5nPUVOLVVTIA0Kc3R5bGU9IkZPTlQtU0la
    RTogMTBwdDsgQ09MT1I6IGdyYXk7IEZPTlQtRkFNSUxZOiAnQXJpYWwnLCdzYW5zLXNlcmlmJyI+
    Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i
    c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7
    Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i
    c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7
    Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i
    c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7
    Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i
    c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Q29weXJpZ2h0IA0KJmNvcHk7IDE5OTggLSAyMDEx
    IFRlbmNlbnQuIEFsbCBSaWdodHMgUmVzZXJ2ZWQ8L1NQQU4+PFNQQU4gbGFuZz1FTi1VUyANCnN0
    eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBncmF5Ij4gPC9TUEFOPjxTUEFOIGxhbmc9RU4t
    VVMgDQpzdHlsZT0iQ09MT1I6IGZ1Y2hzaWEiPjxvOnA+PC9vOnA+PC9TUEFOPjwvRk9OVD48L1A+
    DQo8UCBjbGFzcz1Nc29Ob3JtYWw+PFNQQU4gbGFuZz1FTi1VUyBzdHlsZT0iQ09MT1I6IHJlZCI+
    PG86cD48Rk9OVCANCnNpemU9ND4mbmJzcDs8L0ZPTlQ+PC9vOnA+PC9TUEFOPjwvUD48L0RJVj48
    L0RJVj48L0JPRFk+PC9IVE1MPg0K
    
    ------=_NextPart_001_08F6_01AFE6E4.18AC6EB0--
    
    ------=_NextPart_000_0100_01AFE6E4.18AC6EB0
    Content-Type: application/msword;
    name="=?gb2312?B?t6IuZG9j?="
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment;
    filename="=?gb2312?B?t6IuZG9j?="
    
    0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAEQAAAAAAAAAA
    EAAAEgAAAAEAAAD+////AAAAABAAAAD/////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ///////////////////////////////////////////////////////////////////////////s
    pcAARQAJBAAAABK/AAAAAAAAEgAAAAAABAAAAQQAAA4AYmpiakLgQuAAAAAAAAAAAAAAAAAAAAAA
    AAAJBBYAHgwAACCKAQAgigEAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA
    AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAF0AAAAAAFwBAAAAAAAAXAEAAFwB
    AAAAAAAAXAEAAAAAAABcAQAAAAAAAFwBAAAAAAAAXAEAABQAAAAAAAAAAAAAAHABAAAAAAAAcAEA
    AAAAAABwAQAAAAAAAHABAAAAAAAAcAEAAAwAAAB8AQAADAAAAHABAAAAAAAAQwIAALYAAACUAQAA
    AAAAAJQBAAAAAAAAlAEAAAAAAACUAQAAAAAAAJQBAAAAAAAAlAEAAAAAAACUAQAAAAAAAJQBAAAA
    AAAACAIAAAIAAAAKAgAAAAAAAAoCAAAAAAAACgIAAAAAAAAKAgAAAAAAAAoCAAAAAAAACgIAACQA
    AAD5AgAA9AEAAO0EAABmAAAALgIAABUAAAAAAAAAAAAAAAAAAAAAAAAAXAEAAAAAAACUAQAAAAAA
    AAAAAAAAAAAAAAAAAAAAAACUAQAAAAAAAJQBAAAAAAAAlAEAAAAAAACUAQAAAAAAAC4CAAAAAAAA
    qAEAAAAAAABcAQAAAAAAAFwBAAAAAAAAlAEAAAAAAAAAAAAAAAAAAJQBAAAAAAAAlAEAAAAAAACo
    AQAAAAAAAKgBAAAAAAAAqAEAAAAAAACUAQAACgAAAFwBAAAAAAAAlAEAAAAAAABcAQAAAAAAAJQB
    AAAAAAAACAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAEAAAAAAABwAQAAAAAAAFwBAAAAAAAAXAEA
    AAAAAABcAQAAAAAAAFwBAAAAAAAAlAEAAAAAAAAIAgAAAAAAAKgBAABgAAAAqAEAAAAAAAAAAAAA
    AAAAAAgCAAAAAAAAXAEAAAAAAABcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAIAAAAAAACUAQAAAAAAAIgBAAAMAAAAcABqZPK2
    uwFwAQAAAAAAAHABAAAAAAAAngEAAAoAAAAIAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAA
    AQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAEAAAB
    BAAA/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAQAAAEE
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEcAB+w0C8g
    sOA9IbAIByKwCAcjkKAFJJCgBSWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAPAAoAAQBb
    AA8AAgAAAAAAAAAkAABA8f8CACQAAAAGAE4AbwByAG0AYQBsAAAAAgAAAAQAbUgJBEwAAQABAAIA
    TAAAAAkASABlAGEAZABpAG4AZwAgADEAAAAQAAEABiQBE6TwABSkPABAJgAXADUIgUNKHABLSBwA
    T0oCAFFKAgBrSOQEAEYAAgABAAIARgAAAAkASABlAGEAZABpAG4AZwAgADIAAAAQAAIABiQBE6Tw
    ABSkPABAJgESADUIgTYIgU9KAgBRSgIAa0jkBDgAAwABAAIAOAAAAAkASABlAGEAZABpAG4AZwAg
    ADMAAAAQAAMABiQBE6TwABSkPABAJgIDADUIgQAAAAAAAAAAAAAAAAA8AEFA8v+hADwAAAAWAEQA
    ZQBmAGEAdQBsAHQAIABQAGEAcgBhAGcAcgBhAHAAaAAgAEYAbwBuAHQAAAAAAAAAAAAAAAAAAAAA
    AAEAAAAEAAAMAAAAAP////8ABAAAAQQAAAMAAAAABAAAAQQAAAQAAAAABAAAAQQAAAUAAAAAAAAA
    AwAAAAcAAAAAAAMAAAAHAP//AgAAAA8ATQBpAGMAcgBvAHMAbwBmAHQAIABDAG8AcgBwAC4AHABD
    ADoAXABNAHkAIABEAG8AYwB1AG0AZQBuAHQAcwBcAHcAaQBuAHcAbwByAGQAOAAuAGQAbwBjAP9A
    AIABAAAAAAAAAAAAwPlVAQEAAAAAAAAAAAAAAAAAAAAAAAAAAhAAAAAAAAAAAQAAAEAAAAgAQAAA
    AwAAAEcWkAEAAAICBgMFBAUCAwSHAgAAAAAAAAAAAAAAAAAAnwAAAAAAAABUAGkAbQBlAHMAIABO
    AGUAdwAgAFIAbwBtAGEAbgAAADUQkAECAAUFAQIBBwYCBQcAAAAAAAAAEAAAAAAAAAAAAAAAgAAA
    AABTAHkAbQBiAG8AbAAAADMikAEAAAILBgQCAgICAgQDAAAAAAAAAAAAAAAAAAAAAQAAAAAAAABB
    AHIAaQBhAGwAAAAiAAQA8QiIGAAA0AIAAGgBAAAAAJxTCoafUwqGAAAAAAEAAQAAAAAAAAAAAAAA
    AQABAAAABACDEAEAAAAAAAAAAAAAAAEAAQAAAAEAAAAAAAAAJAMAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAHIQAAAQABkAZAAAABkAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAP//
    EgAAAAAAAAAAAAAAAAAAAA8ATQBpAGMAcgBvAHMAbwBmAHQAIABDAG8AcgBwAC4ADwBNAGkAYwBy
    AG8AcwBvAGYAdAAgAEMAbwByAHAALgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAF
    AAAABgAAAAcAAAD+////CQAAAAoAAAALAAAADAAAAA0AAAAOAAAADwAAAP7////9/////v////7/
    ///+////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////UgBvAG8AdAAgAEUAbgB0AHIA
    eQAAAK26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtuhYABQH/////////
    /wIAAAAGCQIAAAAAAMAAAAAAAABGAAAAAMBE/2HytrsBwNZGZvK2uwETAAAAgAAAAA3wrboxAFQA
    YQBiAGwAZQAAAK26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtug3wrboN
    8K26DgACAf////8DAAAA/////w3wrboN8K26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtuggA
    AAAAEAAADfCtulcAbwByAGQARABvAGMAdQBtAGUAbgB0AAAArboN8K26DfCtug3wrboN8K26DfCt
    ug3wrboN8K26DfCtug3wrboaAAIBAQAAAP//////////DfCtug3wrboN8K26DfCtug3wrboN8K26
    DfCtug3wrboN8K26AAAAAAAQAAAN8K26AQBDAG8AbQBwAE8AYgBqAAAArboN8K26DfCtug3wrboN
    8K26DfCtug3wrboN8K26DfCtug3wrboN8K26DfCtuhIAAgD///////////////8N8K26DfCtug3w
    rboN8K26DfCtugAAAAAAAAAAAAAAAAAAAAAAAAAAagAAAA3wrboBAAAA/v//////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    ////////////////////////////////////////////////////////////////////////////
    /////////////////////////////////////////////////wEA/v8DCgAA/////wYJAgAAAAAA
    wAAAAAAAAEYYAAAATWljcm9zb2Z0IFdvcmQgRG9jdW1lbnQACgAAAE1TV29yZERvYwAQAAAAV29y
    ZC5Eb2N1bWVudC44APQ5snEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    
    ------=_NextPart_000_0100_01AFE6E4.18AC6EB0--
    Any advise please?

    Thanks,
    Leo
     
  10. ruzbehraja

    ruzbehraja Well-Known Member

    Joined:
    May 19, 2011
    Messages:
    383
    Likes Received:
    7
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    * Firstly, change the cpanel password and all email passwords for pp*vis.com. Change your root password if you have accessed FTP through root.

    * Secondly, ensure that the user nobody cannot send out mail:
    WHM >> Tweak Settings >> Mail >> Prevent “nobody” from sending mail

    * Then go to:
    WHM >> Mail Queue Manager >> Delete all messages in Queue

    * Go to:
    WHM >> PHP open_basedir Tweak >> Enable php open_basedir Protection

    * If need be, then suspend all accounts and unsuspend them one by one.

    The Config Server Firewall is great at monitoring processes that are using excessive resources or acting suspiciously. Its free.

    You should seriously consider installing it: ConfigServer Security & Firewall
     
Loading...
Similar Threads - Mailer Daemons Ads
  1. Shane3673
    Replies:
    3
    Views:
    433

Share This Page