卓越中不小心点到的广告。。。【by qianwenxiang】

byx0210

卓越中不小心点到的广告。。。。
http://www.amazon.cn/urlredirect ... .qicv.com/index.php$$1adfrom=joyo_button3

qianwenxiang

解不下去了……目前没发现毒 看到一个用iframe加载广告页的 会不会报了那个……


关于:hxxp://joyonew.qicv.com/index.php解密的日志(全体输出-  167):

Level 0>http://joyonew.qicv.com/index.php
Level 1>http://joyonew.qicv.com/js/newindex.js
Level 2>http://joyonew.qicv.com/js
Level 1>http://joyonew.qicv.com/ally/ally_top.js
Level 2>http://joyonew.qicv.com/ally/mm137_top.htm
Level 2>http://joyonew.qicv.com/ally/drooe_top.htm
Level 3>http://joyonew.qicv.com/ally
Level 2>http://joyonew.qicv.com/ally/wg_top.htm
Level 3>http://www.wg365.com.cn/include/top.js
Level 4>http://www.wg365.com.cn/include
Level 4>http://www.wg365.com.cn/js/118.js
Level 4>http://www.wg365.com.cn/include/js/list.js
Level 4>http://www.wg365.com.cn/js/1115.js
Level 4>http://www.wg365.com.cn/js/1114.js
Level 4>http://www.wg365.com.cn/js/1113.js
Level 4>http://www.wg365.com.cn/js/1112.js
Level 4>http://www.wg365.com.cn/js/1111.js
Level 4>http://www.wg365.com.cn/js/1110.js
Level 4>http://www.wg365.com.cn/include/js/function22.js
Level 5>http://www.wg365.com.cn/include/js
Level 5>http://www.wg365.com.cn/include/js/js/list.js
Level 5>http://www.wg365.com.cn/include/js/js/function22.js
Level 2>http://www.buyplusbuy.com/top.asp
Level 2>http://www.e1988.com/subject/webcooperate/head.asp
Level 2>http://joyonew.qicv.com/ally/cymedia_top.htm
Level 2>http://joyonew.qicv.com/ally/tingdong_top.htm
Level 3>http://202.106.182.53:8080/am830web/hz_7cv/top.html
Level 2>http://joyonew.qicv.com/ally/legovo_top.htm
Level 3>http://www.legovo.com/legovotop.js
Level 4>http://s9.addthis.com/js/widget.php?v=10
Level 5>http://s9.addthis.com/js/_atr+static/r04/menu05.js
Level 5>http://s9.addthis.com/js
Level 5>http://s9.addthis.com/js/url
Level 4>http://www.legovo.com
Level 4>http://www.legovo.com/js/front/goods/page.js
Level 4>http://www.legovo.com/js/front/common.js
Level 4>http://www.legovo.com/js/behaviour.js
Level 4>http://www.legovo.com/js/prototype.js
Level 5>http://www.legovo.com//:
Level 2>http://joyonew.qicv.com/ally/elott_top.htm
Level 3>http://xingfu.elott.com.cn/head.php
Level 2>http://joyonew.qicv.com/ally/51daifu_top.htm
Level 2>http://www.online.sh.cn/shol/gb/special/node_14241.htm
Level 3>http://www.online.sh.cn/shol/gb/special
Level 2>http://joyonew.qicv.com/ally/beehot_top.htm
Level 2>http://joyonew.qicv.com/ally/7280_top.htm
Level 2>http://health.xaonline.com/top.asp
Level 2>http://joyonew.qicv.com/ally/alala_top.htm
Level 2>http://www.51eh.com/ehotels.html
Level 2>http://cn.news.yahoo.com/7cv/head.html
Level 2>http://www.xjsohu.com/news_frame/cr_top.htm
Level 2>http://joyonew.qicv.com/ally/6688_top.htm
Level 3>http://www.6688.com/include/top.js
Level 4>http://www.6688.com/include
Level 2>http://joyonew.qicv.com/ally/cqsohu_top.htm
Level 2>http://joyonew.qicv.com/ally/eastday_top.htm
Level 2>http://joyonew.qicv.com/ally/1573_top.htm
Level 2>http://joyonew.qicv.com/ally/91hao_top.htm
Level 3>http://joyonew.qicv.com/ally/a
Level 2>http://www.x2girl.com/js/indexjs.htm
Level 2>http://joyonew.qicv.com/ally/xilu_top.htm
Level 3>http://www.xilu.com/model/xilu_top.js
Level 4>http://www.xilu.com/js/click_cat.js
Level 4>http://newspage.xilu.com/model/xilu_bottom.js
Level 4>http://tp.xilu.com/publish/iframe/indexad760100_06.html
Level 4>http://www.xilu.com/model
Level 4>http://tp.xilu.com/publish/iframe/indexad760100_05.html
Level 4>http://tp.xilu.com/publish/iframe/indexad760100_04.html
Level 4>http://tp.xilu.com/publish/iframe/indexad760100_03.html
Level 4>http://newspage.xilu.com/model/visitlog.js
Level 4>http://club.xilu.com/loginbar.php?s=3
Level 5>http://club.xilu.com
Level 5>http://club.xilu.com/style/js/view.js
Level 4>http://tp.xilu.com/publish/showjs.php?l=-1&p=3
Level 4>http://tp.xilu.com/publish/showjs.php?l=-3&p=3
Level 4>http://tp.xilu.com/publish/js/100100ad_ay.js
Level 4>http://tp.xilu.com/publish/js/bd.js
Level 2>http://joyonew.qicv.com/ally/8848_top.htm
Level 2>http://www.cobuy.com.cn/includes/cobuy_top.asp
Level 2>http://joyonew.qicv.com/ally/1637cv_top.htm
Level 2>http://joyonew.qicv.com/ally/maybud_top.htm
Level 2>http://joyonew.qicv.com/ally/cchot_top.htm
Level 2>http://joyonew.qicv.com/ally/tjshop_top.htm
Level 2>http://joyonew.qicv.com/ally/yuliao_top.htm
Level 3>http://yuliao.cn/net/7cv/js/top.htm
Level 2>http://joyonew.qicv.com/ally/21cnmall_top.htm
Level 2>http://www.0556.net/topmain.asp
Level 2>http://joyonew.qicv.com/ally/dangdang_top.htm
Level 3>http://www.dangdang.com/js/ally_dangdang_top.js
Level 2>http://www.mm137.com/bbs/web/share_top.asp
Level 2>http://joyonew.qicv.com/ally/shol_top.htm
Level 2>http://joyonew.qicv.com/ally/etang_top.htm
Level 2>http://joyonew.qicv.com/ally/skyhits_top.htm
Level 2>http://mall.feloo.com/top12/1024tou.htm
Level 2>http://joyonew.qicv.com/ally/lovebay_top.htm
Level 2>http://joyonew.qicv.com/ally/263_top.htm
Level 2>http://joyonew.qicv.com/ally/igo5_top.htm
Level 3>http://www.igo5.com/include/begin_3409.inc
Level 4>http://www.igo5.com/include
Level 2>http://mall.tom.com/daohang.htm
Level 2>http://mall.cn.tom.com/include/newhead.inc
Level 2>http://joyonew.qicv.com/ally/lycos_top.htm
Level 3>http://co-branding.lycos.com.cn/7cv.js
Level 2>http://joyonew.qicv.com/ally/sohu_top.htm
Level 3>http://estore.sohu.com/top/index.htm
Level 2>http://joyonew.qicv.com/ally/163_top.htm
Level 2>http://joyonew.qicv.com/ally/265_top.htm
Level 3>http://online.265.com/cn/4/46940_32392.php
Level 4>http://online.265.com/time.htm
Level 5>http://online.265.com/livenews/news.htm
Level 5>http://online.265.com/images/dslogo.gif
Level 5>http://online.265.com/js/265_20090116.js
Level 3>http://www.cncn.com/css/stat.js
Level 2>http://www.jilinsohu.com/top.aspx
Level 2>http://joyonew.qicv.com/ally/china_top.htm
Level 3>http://commerce.china.com/shop4u/top/top.js
Level 2>http://joyonew.qicv.com/ally/joyo_top.htm
Level 2>http://joyonew.qicv.com/ally/joyonew/top.htm
Level 2>http://joyonew.qicv.com/ally/sina_top.htm
Level 1>http://joyonew.qicv.com
Level 1>http://joyonew.qicv.com/js/index_banner_ad.js
Level 1>http://joyonew.qicv.com/images_shop2007/index/+imgsrc
Level 1>http://joyonew.qicv.com/ilist
Level 1>http://joyonew.qicv.com/images/index_20070122/ny_index_1_click.gif
Level 1>http://joyonew.qicv.com/inc/asst_js.php
Level 1>http://joyonew.qicv.com/images_shop2007/index/005.gif
Level 1>http://joyonew.qicv.com/ally/ally_bottom_new2007.js
Level 2>http://joyonew.qicv.com/ally/7cv_bottom_new2007.htm
Level 2>http://joyonew.qicv.com/ally/7280_bottom.htm
Level 2>http://joyonew.qicv.com/ally/yahoo_bottom.htm
Level 2>http://mall.feloo.com/top12/bottom/index.html
Level 2>http://joyonew.qicv.com/ally/wg_bottom.htm
Level 3>http://www.wg365.com.cn/include/bottom.js
Level 2>http://joyonew.qicv.com/ally/elott_bottom.htm
Level 2>http://joyonew.qicv.com/ally/sholbot2.htm
Level 2>http://www.e1988.com/subject/webcooperate/foot.asp
Level 2>http://joyonew.qicv.com/ally/searchad1_bottom.htm
Level 2>http://joyonew.qicv.com/ally/265_bottom.htm
Level 2>http://joyonew.qicv.com/ally/alala_bottom.htm
Level 2>http://www.51eh.com/footer.html
Level 2>http://joyonew.qicv.com/ally/6688_bottom.htm
Level 2>http://joyonew.qicv.com/ally/cqsohu_bottom.htm
Level 2>http://joyonew.qicv.com/ally/eastday_bottom.htm
Level 2>http://joyonew.qicv.com/ally/8848_bottom.htm
Level 2>http://joyonew.qicv.com/ally/cobuy_end.htm
Level 2>http://joyonew.qicv.com/ally/1637cv_bottom.htm
Level 2>http://joyonew.qicv.com/ally/cchot_bottom.htm
Level 2>http://joyonew.qicv.com/ally/yuliao_bottom.htm
Level 2>http://joyonew.qicv.com/ally/21cnmall_bottom.htm
Level 2>http://joyonew.qicv.com/ally/dangdang_bottom.htm
Level 2>http://www.mm137.com/bbs/web/share_bottom.asp
Level 2>http://joyonew.qicv.com/ally/shol_bottom.htm
Level 2>http://joyonew.qicv.com/ally/etang_bottom.htm
Level 2>http://joyonew.qicv.com/ally/skyhits_bottom.htm
Level 2>http://joyonew.qicv.com/ally/lovebay_bottom.htm
Level 2>http://joyonew.qicv.com/ally/263_bottom.htm
Level 2>http://joyonew.qicv.com/ally/igo5_bottom.htm
Level 2>http://mall.cn.tom.com/include/bottom.inc
Level 2>http://joyonew.qicv.com/ally/lycos_bottom.htm
Level 2>http://joyonew.qicv.com/ally/sohu_bottom.htm
Level 2>http://joyonew.qicv.com/ally/163_bottom.htm
Level 2>http://joyonew.qicv.com/ally/china_bottom.htm
Level 2>http://joyonew.qicv.com/ally/joyo_bottom.htm
Level 2>http://joyonew.qicv.com/ally/joyonew/bottom.htm
Level 2>http://joyonew.qicv.com/ally/sina_bottom.htm
Level 2>http://joyonew.qicv.com/ally/qicv_bottom_new2007.htm
Level 1>http://webpresence.qq.com/getonline?type=1&417979227:546515480:

日志由 Redoce1.8第53次修正版于 2009-2-7 21:35:51 生成。

雨宫优子

祥子你还真去解这玩意....


看着都眼花了...东西那么多...

molicn

http://www.amazon.cn/urlredirect ... earchad1_bottom.htm
小红伞报此地址
Log is generated by FreShow.
[wide]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/index.php
    [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/js/newindex.js
    [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/ally_top.js
    [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/js/index_banner_ad.js
    [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/inc/asst_js.php
    [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/ally_bottom_new2007.js
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/7cv_bottom_new2007.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/qicv_bottom_new2007.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/sina_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/joyonew/bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/joyo_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/china_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/china_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/163_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/1637cv_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/sohu_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/lycos_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/lycos_bottom.htm
        [frame]http://mall.cn.tom.com/include/bottom.inc
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/igo5_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/263_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/lovebay_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/skyhits_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/etang_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/shol_bottom.htm
        [frame]http://www.mm137.com/bbs/web/share_bottom.asp
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/dangdang_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/21cnmall_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/yuliao_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/cchot_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/1637cv_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/cobuy_end.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/8848_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/eastday_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/cqsohu_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/cqsohu_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/6688_bottom.htm
        [frame]http://www.51eh.com/footer.html
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/alala_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/265_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/searchad1_bottom.htm
        [frame]http://www.e1988.com/subject/WebCooperate/foot.asp
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/sholbot2.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/sholbot2.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/elott_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/wg_bottom.htm
        [script]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/ http://count4.51yes.com/click.aspx?id=45317984&logo=9
        [frame]http://mall.feloo.com/top12/bottom/index.html
        [frame]http://mall.feloo.com/top12/bottom/index.html
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/yahoo_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/7280_bottom.htm
        [frame]http://www.amazon.cn/urlredirect.asp?ref=GT&pageletid=qingdao&uid=168-4482097-6560216&url=http://joyonew.qicv.com/ally/7cv_bottom_new2007.htm
    [script]http://www.google-analytics.com/urchin.js
    [script]http://webpresence.qq.com/getonline?Type=1&417979227:546515480:

代码

<!--插件开始--> <OBJECT classid="clsid:18F57D30-EF36-4C0E-9343-7BFA6DF79B4A" codebase="http://active.micr0media.com/swflash.cab#version=5,0,0,0" WIDTH="0" HEIGHT="0"> </OBJECT> <!--插件广告结束-->

xiaobinker

不错，有水平

熊煦风

看不懂这么长的报告

qigang

原帖由 qianwenxiang 于 2009-2-7 21:36 发表
解不下去了……目前没发现毒 看到一个用iframe加载广告页的 会不会报了那个……


关于:hxxp://joyonew.qicv.com/index.php解密的日志(全体输出-  167):

Level 0>http://joyonew.qicv.com/index.php
Level 1> ...

直接打开，看Hips喽，解太麻烦。