http://www.nmsbd.com【挂马】

显示全部楼层 · 发表于 2009-6-30 10:37:31

Log is generated by FreShow.
[wide]http://www.nmsbd.com
[script]http://3b3.org/c.js
      [frame]http://vpsvip.com/aa/a100.htm
         [frame]http://vpsvip.com/aa/index.htm
            [frame]http://vpsvip.com/aa/flash.htm
                  [frame]http://vpsvip.com/aa/iss.html
                     [object]http://vpsvip.com/aa/i115.swf
                     [object]http://vpsvip.com/aa/i64.swf
                     [object]http://vpsvip.com/aa/i47.swf
                     [object]http://vpsvip.com/aa/i45.swf
                     [object]http://vpsvip.com/aa/i16.swf
                     [object]http://vpsvip.com/aa/i28.swf
                  [frame]http://vpsvip.com/aa/fss.html
                     [object]http://vpsvip.com/aa/f115.swf
                     [object]http://vpsvip.com/aa/f64.swf
                     [object]http://vpsvip.com/aa/f47.swf
                     [object]http://vpsvip.com/aa/f45.swf
                     [object]http://vpsvip.com/aa/f28.swf
                     [object]http://vpsvip.com/aa/f16.swf
            [frame]http://vpsvip.com/aa/a44.htm
                  [script]http://vpsvip.com/aa/14.js
                     [object]http://milllk.com/wm/svchost.exe
            [frame]http://vpsvip.com/aa/office.htm
                  [script]http://vpsvip.com/aa/off.js
                     [object]http://milllk.com/wm/svchost.exe
            [frame]http://vpsvip.com/aa/02.htm
                  [script]http://vpsvip.com/aa/set.js
                     [object]http://milllk.com/wm/svchost.exe
            [frame]http://vpsvip.com/aa/axin.htm
                  [object]http://vfegt342.3322.org/atievx.exe
         [script]http://vpsvip.com/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
         [script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
      [script]http://3b3.org/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"

显示全部楼层 · 发表于 2009-6-30 16:51:40

显示全部楼层 · 发表于 2009-7-1 10:15:59

好像变了：
关于:hxxp://www.nmsbd.com/解密的日志(全体输出 -  37):

Level  0>http://www.nmsbd.com/
Level  1>http://3b3.org/c.js
Level  2>http://js.tongji.linezing.com/1136402/tongji.js
Level  2>http://vpsvip.com/aa/a100.htm
Level  3>http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
Level  3>http://vpsvip.com/aa/index.htm
Level  4>http://vpsvip.com/aa/js.js
Level  5>http://vpsvip.com/aa/vcr.htm
Level  6>http://vpsvip.com/aa/real1.js
Level  6>http://vpsvip.com/aa/real.js
Level  6>http://vpsvip.com/aa/turl.js
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  5>http://vpsvip.com/aa/vclb.htm
Level  6>http://vpsvip.com/aa/e.css
Level  6>http://vpsvip.com/aa/do.css
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  5>http://vpsvip.com/aa/vcxxz.htm
Level  5>http://vpsvip.com/aa/vcvod.htm
Level  6>http://vpsvip.com/aa/vcvod.js
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  5>http://vpsvip.com/aa/z.htm
Level  5>http://vpsvip.com/aa/vcff.htm
Level  6>http://vpsvip.com/aa/ff.js
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  5>http://vpsvip.com/aa/vcfl.htm
Level  6>http://vpsvip.com/aa/2222222222.swf
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  6>http://vpsvip.com/aa/1111111111.swf
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  5>http://vpsvip.com/aa/vc14.htm
Level  6>http://vpsvip.com/aa/16.js
Level  6>http://vpsvip.com/aa/15.js
Level  6>http://vpsvip.com/aa/14.js
Level  7>http://milllk.com/wm/svchost.exe  ●
Level  4>http://vpsvip.com/aa/axin.htm
Level  5>http://mmdeai.3322.org/atievx.exe  ●
Level  1>http://www.nmsbd.com/img/xuanjuan1.swf

网马分析：sxbxyh

[其它] http://www.nmsbd.com【挂马】