http://shop.goldmay.com/被挂马

dapan

http://bbs.hongyue.com/index.php

http://shop.goldmay.com/


有朋友说系统在打开《园艺家论坛》和国美网店时首页的时候报Infostealer病毒。杀毒软件是Symantec Endpoint Protection。

dapan

朋友今早上这两个网站时杀软报马，刚好我也在那时,登陆那两个网站买东西。 网银的安全啊。

[ 本帖最后由 dapan 于 2009-8-29 18:44 编辑 ]

dapan

好怕好怕真金白银的安全.

wcyxj123

没去这。。。

fantrasive

路过，晚饭时间

asinasina

用freshow没找到
应该没有吧
第一个

开始自动解析 - http://bbs.hongyue.com/index.php
L1 - http://bbs.hongyue.com/include/javascript/common.js
L1 - http://bbs.hongyue.com/include/javascript/menu.js
L1 - http://bbs.hongyue.com/include/javascript/ajax.js
L1 - http://bbs.hongyue.com/forumdata/cache/google_var.js
L1 - http://bbs.hongyue.com/include/javascript/google.js
L1 - http://bbs.hongyue.com/./images/HomeShow/altitle.js
可能的Flash溢出 - http://bbs.hongyue.com/./images/HomeShow/focus.swf
L1 - http://bbs.hongyue.com/archiver/
可能的Flash溢出 - http://bbs.hongyue.com/images/HomeShow/focus.swf
L2 - http://bbs.hongyue.com/include/javascript/seccode.php?update=
L2 - http://www.google.cn/search?
L2 - http://www.comsenz.com)
L2 - http://bbs.hongyue.com/ - 跳过 - 重复检测
L3 - http://www.google.cn/[
L3 -
L3 - http://www.google.cn/gen_204?mgmhp=shp0&ct=c&cd=

此分析日志由 ttf 使用 Astox v1 Build 1100 在 2009年8月29日19时1分27秒 生成。

[ 本帖最后由 asinasina 于 2009-8-29 19:02 编辑 ]

悠柚

原始 - http://shop.goldmay.com/
开始自动解析 - http://shop.goldmay.com/
L1 - http://shop.goldmay.com/js/common.js
L1 - http://shop.goldmay.com/js/index.js
L1 - http://shop.goldmay.com/js/transport.js
L1 - http://shop.goldmay.com/js/utils.js
L1 - http://shop.goldmay.com/themes/bluesky/images/btn_signin.gif
L1 - http://shop.goldmay.com/themes/bluesky/images/btn_search.gif
L1 - http://shop.goldmay.com/themes/bluesky/images/btn_order_query.gif
L1 - http://shop.goldmay.com/themes/bluesky/images/btn_subscription.gif
L1 - http://shop.goldmay.com/themes/bluesky/images/btn_unsubscription.gif
L1 - http://shop.goldmay.com/data/flashdata/redfocus/cycle_image.js
L2 - http://www.ecshop.com/
可能的Flash溢出 - http://shop.goldmay.com/data/flashdata/redfocus/data/flashdata/redfocus/redfocus.swf
L3 - http://www.ecshop.com/images/bcastr.swf?bcastr_xml_url=promote.xml


此分析日志由 悠柚 使用 Astox v1 Build 1100 在 2009年8月29日19时0分40秒 生成。

asinasina

hXXp://shop.goldmay.com/data/flashdata/redfocus/data/flashdata/redfocus/redfocus.swf

404 Not Found

Not Found
The requested URL /data/flashdata/redfocus/data/flashdata/redfocus/redfocus.swf was not found on this server.

Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.

IllusionWing

貌似是统计代码的问题

taoyuan237

发个图看下