某校招生在线咨询网站。

显示全部楼层 · 发表于 2009-8-28 10:27:46

http://zsjy.hbue.edu.cn/zsjy/bbs/view.asp

[ 本帖最后由 loveyuwei 于 2009-8-28 10:35 编辑 ]

显示全部楼层 · 发表于 2009-8-28 10:33:55

404 Not Found
关于:hxxp://baidu826.8866.org/5/fycry.htm解密的日志(全体输出 -  3):

Level  0>http://baidu826.8866.org/5/fycry.htm
Level  1>http://baidu826.8866.org/5/cry.css
Level  2>http://fuck.ss.la/5.exe

日志由 Redoce2.0第36次修正版于 2009-8-28 10:39:12 生成。

[ 本帖最后由 Micropoint 于 2009-8-28 10:39 编辑 ]

显示全部楼层 · 发表于 2009-8-28 10:35:59

网址已更正..

显示全部楼层 · 发表于 2009-8-28 10:43:04

关于:hxxp://zsjy.hbue.edu.cn/zsjy/bbs/view.asp解密的日志(全体输出 -  57):

Level  0>http://zsjy.hbue.edu.cn/zsjy/bbs/view.asp
Level  1>http://zsjy.hbue.edu.cn/zsjy/zs/images/menu.swf
Level  1>http://3go%44.net/c.js
Level  2>http://z360.net/2.htm
Level  3>http://z360.net/3.htm
Level  4>http://baidu826.8866.org/5/ads2.html?zz
Level  5>http://baidu826.8866.org/5/search.htm
Level  6>http://baidu826.8866.org/5/music.js
Level  7>http://baidu826.8866.org/5/sfpf.htm
Level  8>http://baidu826.8866.org/5/sf.pdf
Level  9>http://fuck.ss.la/5.exe
Level  6>http://baidu826.8866.org/5/google_adx.js
Level  7>http://baidu826.8866.org/5/ecfox.htm
Level  8>http://baidu826.8866.org/5/ecffx.htm
Level  9>http://baidu826.8866.org/5/ecfox.js
Level 10>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/fyr.htm
Level  8>http://baidu826.8866.org/5/zz.js
Level  9>http://baidu826.8866.org/5/fylz.htm
Level 10>http://baidu826.8866.org/5/xxxxz.js
Level 11>http://fuck.ss.la/5.exe
Level  8>http://baidu826.8866.org/5/rr.js
Level  9>http://baidu826.8866.org/5/fyre1.htm
Level 10>http://baidu826.8866.org/5/fyr1.js
Level 11>http://fuck.ss.la/5.exe
Level  9>http://baidu826.8866.org/5/evilr.htm
Level 10>http://baidu826.8866.org/5/evilrr.js
Level 11>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/ecb.htm
Level  8>http://baidu826.8866.org/5/ecwerwerbbb.htm
Level  9>http://baidu826.8866.org/5/ecfff.js
Level 10>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/cqq0.htm
Level  8>http://baidu826.8866.org/5/wing
Level  8>http://baidu826.8866.org/5/cqq2.css
Level  9>http://fuck.ss.la/5.exe
Level  8>http://baidu826.8866.org/5/cqq2s.css
Level  6>http://baidu826.8866.org/5/google_ads.js
Level  7>http://baidu826.8866.org/5/fycry.htm
Level  8>http://baidu826.8866.org/5/cry.css
Level  9>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/fydvd.htm
Level  8>http://baidu826.8866.org/5/dvd.js
Level  9>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/ecof.htm
Level  8>http://baidu826.8866.org/5/off.css
Level  9>http://fuck.ss.la/5.exe
Level  7>http://baidu826.8866.org/5/fyfl.htm
Level  7>http://baidu826.8866.org/5/ertrec1.htm
Level  8>http://baidu826.8866.org/5/ec4.js
Level  9>http://fuck.ss.la/5.exe
Level  6>http://baidu826.8866.org/5/google_ad.js
Level  7>http://baidu826.8866.org/5/ceerqqmp.htm
Level  8>http://baidu826.8866.org/5/shows.jpg
Level  8>http://baidu826.8866.org/5/show.jpg
Level  8>http://baidu826.8866.org/5/cqqskin.css
Level  9>http://fuck.ss.la/5.exe

日志由 Redoce2.0第36次修正版于 2009-8-28 10:46:45 生成。

[ 本帖最后由 Micropoint 于 2009-8-28 10:47 编辑 ]

显示全部楼层 · 发表于 2009-8-28 11:14:09

Log is generated by FreShow.
[wide]http://zsjy.hbue.edu.cn/zsjy/bbs/view.asp
[script]http://3go%44.net/c.js
      [frame]http://%7A%33%36%30%2E%6E%65%74/%32%2E%68%74%6D
         [frame]http://%7A%33%36%30%2E%6E%65%74/%33%2E%68%74%6D
            [frame]http://baidu826.8866.org/5/ads2.html?zz
                  [frame]http://baidu826.8866.org/5/search.htm
                     [script]http://baidu826.8866.org/5/google_ad.js
                        [frame]http://baidu826.8866.org/5/ceerqqmp.htm
                              [script]http://baidu826.8866.org/5/cqqskin.css
                                 [script]http://baidu826.8866.org/5/ecfox.js
                              [script]http://baidu826.8866.org/5/show.jpg
                              [script]http://baidu826.8866.org/5/shows.jpg
                     [script]http://baidu826.8866.org/5/google_ads.js
                        [frame]http://baidu826.8866.org/5/ertrec1.htm
                              [script]http://baidu826.8866.org/5/ec4.js
                                 [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/fyfl.htm
                              [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/ecof.htm
                              [script]http://baidu826.8866.org/5/off.css
                                 [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/fydvd.htm
                              [script]http://baidu826.8866.org/5/dvd.js
                                 [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/fycry.htm
                              [script]http://baidu826.8866.org/5/cry.css
                                 [object]http://fuck.ss.la/5.exe
                     [script]http://baidu826.8866.org/5/google_adx.js
                        [frame]http://baidu826.8866.org/5/cqq0.htm
                              [script]http://baidu826.8866.org/5/cqq2s.css
                              [script]http://baidu826.8866.org/5/cqq2.css
                                 [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/ecb.htm
                              [frame]http://baidu826.8866.org/5/ecwerwerbbb.htm
                                 [script]http://baidu826.8866.org/5/ecfff.js
                                    [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/fyr.htm
                              [script]http://baidu826.8866.org/5/rr.js
                                 [frame]http://baidu826.8866.org/5/evilr.htm
                                    [script]http://baidu826.8866.org/5/evilrr.js
                                          [object]http://fuck.ss.la/5.exe
                                 [frame]http://baidu826.8866.org/5/fyre1.htm
                                    [script]http://baidu826.8866.org/5/fyr1.js
                                          [object]http://fuck.ss.la/5.exe
                              [script]http://baidu826.8866.org/5/zz.js
                                 [frame]http://baidu826.8866.org/5/fylz.htm
                                    [script]http://baidu826.8866.org/5/xxxxz.js
                                          [object]http://fuck.ss.la/5.exe
                        [frame]http://baidu826.8866.org/5/ecfox.htm
                              [frame]http://baidu826.8866.org/5/ecffx.htm
                                 [script]http://baidu826.8866.org/5/ecfox.js
                                    [object]http://fuck.ss.la/5.exe
                     [script]http://baidu826.8866.org/5/music.js
                        [frame]http://baidu826.8866.org/5/sfpf.htm
                              [frame]http://baidu826.8866.org/5/sf.pdf
                                 [object]http://fuck.ss.la/5.exe

显示全部楼层 · 发表于 2009-8-28 11:19:25

原始 - http://zsjy.hbue.edu.cn/zsjy/bbs/view.asp
扫描式跨站分析 - 原始 - 可疑 - http://%7A%33%36%30%2E%6E%65%74/%32%2E%68%74%6D
扫描式跨站分析 - 原始 - http://3go%44.net/c.js
开始自动解析 - http://%7A%33%36%30%2E%6E%65%74/%32%2E%68%74%6D
L1 - http://%7A%33%36%30%2E%6E%65%74/%33%2E%68%74%6D
L2 - http://baidu826.8866.org/5/ads2.html?zz
L3 - http://baidu826.8866.org/5/search.htm
L4 - http://baidu826.8866.org/5/google_ad.js
L4 - http://baidu826.8866.org/5/google_ads.js
L4 - http://baidu826.8866.org/5/google_adx.js
L4 - http://baidu826.8866.org/5/music.js
L5 - http://baidu826.8866.org/5/ceerqqmp.htm
L5 - http://baidu826.8866.org/5/ertrec1.htm
L5 - http://baidu826.8866.org/5/fyfl.htm
L5 - http://baidu826.8866.org/5/ecof.htm
L5 - http://baidu826.8866.org/5/fydvd.htm
L5 - http://baidu826.8866.org/5/fycry.htm
L5 - http://baidu826.8866.org/5/cqq0.htm
L5 - http://baidu826.8866.org/5/ecb.htm
L5 - http://baidu826.8866.org/5/fyr.htm
L5 - http://baidu826.8866.org/5/ecfox.htm
L5 - http://baidu826.8866.org/5/sfpf.htm
L6 - http://baidu826.8866.org/5/cqqskin.css
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L6 - http://baidu826.8866.org/5/show.jpg
L6 - http://baidu826.8866.org/5/shows.jpg
L6 - http://baidu826.8866.org/5/ec4.js
L6 - http://baidu826.8866.org/5/off.css
L6 - http://baidu826.8866.org/5/dvd.js
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L6 - http://baidu826.8866.org/5/cry.css
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L6 - http://baidu826.8866.org/5/cqq2s.css
L6 - http://baidu826.8866.org/5/cqq2.css
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L6 - http://baidu826.8866.org/5/wing;o2[
L6 - http://baidu826.8866.org/5/ecwerwerbbb.htm
L6 - http://baidu826.8866.org/5/rr.js
L6 - http://baidu826.8866.org/5/zz.js
L6 - http://baidu826.8866.org/5/ecffx.htm
可能的PDF溢出 - http://baidu826.8866.org/5/sf.pdf
关注 - http://fuck.ss.la/5.exe
L7 - http://baidu826.8866.org/5/ecfff.js
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L7 - http://baidu826.8866.org/5/evilr.htm
L7 - http://baidu826.8866.org/5/fyre1.htm
L7 - http://baidu826.8866.org/5/fylz.htm
L7 - http://baidu826.8866.org/5/ecfox.js
L8 - http://baidu826.8866.org/5/evilrr.js
L8 - http://baidu826.8866.org/5/fyr1.js
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe
L8 - http://baidu826.8866.org/5/xxxxz.js
自动解析 - Auto XOR - 高度可疑 - http://fuck.ss.la/5.exe

输出的对象 - http://fuck.ss.la/5.exe

此分析日志由 77 使用 Astox v1 Build 1100 在 2009年8月28日11时19分3秒生成。

显示全部楼层 · 发表于 2009-8-29 00:07:08

[其它] 某校招生在线咨询网站。

回复 2楼 Micropoint 的帖子

回复 3楼 loveyuwei 的帖子