hxxp://www.cjol.com/school/default.asp(挂马)

250662772

网页分析结果如下(250662772).
[wide]http://www.cjol.com/school/default.asp
    [script]http://www.cjol.com/js/lei.js
    [script]http://www.cjol.com/Include/JS/Global.js?v=11.3
    [script]http://www.cjol.com/include/js/Rules/Rule.js?v=11.3
    [script]http://www.cjol.com/include/js/Rules/UserID.js?v=11.3
    [script]http://www.cjol.com/include/js/Rules/Password.js?v=11.3
    [script]http://www.cjol.com/include/js/Rules/SearchJobs.js?v=11.3
    [script]http://www.cjol.com/include/UI/js/JobSeekerLogin.js?v=11.3
    [script]http://Counter.CJOL.COM/ADPageView.asp?ADPositionID=521
    [script]http://Counter.CJOL.COM/ADPageView.asp?ADPositionID=2878
    [script]http://www.cjol.com/Include/UI/JS/JobSeekerLogin.js
    [script]http://www.cjol.com/Include/js/ListBoxControl.js
    [script]http://www.cjol.com/file/ad/CN_Jobseeker_Campus2.asp
    [script]http://www.cjol.com/file/news/School_Info_all.js
    [script]http://www.cjol.com/file/ad/CN_Jobseeker_CampusMiddle.asp
    [script]http://cn.daxia123.cn/cn.js
        [frame]http://cn.daxia123.cn/cn.htm
            [script]http://s39.cnzz.com/stat.php?id=1184740&web_id=1184740
        [frame]http://cn.daxia123.cn/s.htm
            [frame]http://cn.daxia123.cn/flash.htm
            [frame]http://cn.daxia123.cn/ie7.htm
                [object]http://165.246.44.228/aspnet_client/system_web/down.exe
            [frame]http://cn.daxia123.cn/Ms06014.htm
                [object]http://165.246.44.228/aspnet_client/system_web/down.exe
            [frame]http://cn.daxia123.cn/office.htm
                [object]http://165.246.44.228/aspnet_client/system_web/down.exe
            [frame]http://cn.daxia123.cn/real10.htm
            [frame]http://cn.daxia123.cn/Real11.htm
    [script]http://www.cjol.com/file/link/Campus_test.js
    [script]http://www.cjol.com/file/link/Campus_subject.js
    [script]http://www.cjol.com/file/ad/campus_famouscompany.asp
    [script]http://www.cjol.com/file/link/campus_relax1.js
    [script]http://www.cjol.com/file/link/P-CampusLink.js
    [script]http://www.cjol.com/file/link/campus_college.js
    [script]http://www.cjol.com/file/link/campus_sh_college.js
    [script]http://www.cjol.com/file/link/campus_js_college.js
    [script]http://www.cjol.com/file/link/campus_hb_college.js
    [script]http://www.cjol.com/file/link/campus_hn_college.js
    [script]http://www.cjol.com/file/link/campus_jx_college.js
    [script]http://www.cjol.com/file/link/campus_fj_college.js
    [script]http://www.cjol.com/file/link/campus_sx_college.js
    [script]http://www.cjol.com/file/link/campus_sc_college.js
    [script]http://www.cjol.com/file/link/campus_gx_college.js
    [script]http://www.cjol.com/file/link/campus_ah_college.js
    [script]http://www.cjol.com/file/link/campus_cq_college.js
    [script]http://www.cjol.com/file/link/campus_ll_college.js
    [script]http://www.cjol.com/file/link/campus_hlj_college.js
    [script]http://www.cjol.com/file/link/campus_fellow.js
    [script]http://www.cjol.com/file/ad/SchoolFloat.js
    [script]http://www.cjol.com/Include/Js/ChinaCount.js

1. 
   
2. http://cn.daxia123.cn/ttt.txt
   

复制代码

http://125.7.221.131/asp/unse/server.exe

[ 本帖最后由 250662772 于 2008-12-25 20:00 编辑 ]

fsl

http://165.246.44.228/aspnet_client/system_web/down.exe

fsl

http://125.7.221.131/asp/unse/server.exe

wsmj888

内存占用很大！

啊弥陀佛

微点拦截