x.js(请看24楼！！！！！！！！！）

显示全部楼层 · 发表于 2009-9-30 12:41:27

x.js5

网页分析:250662772 分析工具:mdecoder 0.26
[root]http://abt.dns0755.net/365/360.htm
[iframe]http://abt.dns0755.net/365/yt.htm
      [script]http://abt.dns0755.net/365/yt.js
         [iframe]http://abt.dns0755.net/365/3.htm
            [script]http://abt.dns0755.net/365/3.css
                  [exe]http://abu.dns0755.net/e/dd.exe
         [iframe]http://abt.dns0755.net/365/4.htm
            [script]http://abt.dns0755.net/365/2.css
      [iframe]http://abt.dns0755.net/365/xie.htm
         [script]http://abt.dns0755.net/365/av0.swf
         [script]http://abt.dns0755.net/365/av1.swf
            [exe]http://abu.dns0755.net/e/dd.exe
         [script]http://abt.dns0755.net/365/av3.swf
         [script]http://abt.dns0755.net/365/av2.swf
      [iframe]http://abt.dns0755.net/365/office.htm
         [script]http://abt.dns0755.net/365/office.css
            [exe]http://abu.dns0755.net/e/dd.exe
      [iframe]http://abt.dns0755.net/365/newlz.htm
         [script]http://abt.dns0755.net/365/newlz.js
         [script]http://abt.dns0755.net/365/newlz.css
            [exe]http://abu.dns0755.net/e/dd.exe
      [iframe]http://abt.dns0755.net/365/of.htm
         [script]http://abt.dns0755.net/365/of.css
            [exe]http://abu.dns0755.net/e/dd.exe
      [iframe]http://abt.dns0755.net/365/bf.htm
         [script]http://abt.dns0755.net/365/2.css
            [exe]http://abu.dns0755.net/e/dd.exe
         [script]http://abt.dns0755.net/365/bf.js
[script]http://abt.dns0755.net/365/aa.js
      [iframe]http://abt.dns0755.net/365/aa.htm
         [iframe]http://abt.dns0755.net/365/ff.html
         [iframe]http://abt.dns0755.net/365/ie.html
         [iframe]http://abt.dns0755.net/365/ff.html
         [iframe]http://abt.dns0755.net/365/ie.html
         [iframe]http://abt.dns0755.net/365/ff.html
         [iframe]http://abt.dns0755.net/365/ff.html

显示全部楼层 · 发表于 2009-9-30 12:45:28

自动解密还是解不全啊,漏了一个http://abu.dns0755.net/e/ddd.exe

显示全部楼层 · 发表于 2009-9-30 14:31:37

关于:hxxp://abu.dns0755.net/365/360.htm解密的日志(全体输出 -  48):

Level  0>http://abu.dns0755.net/365/360.htm
Level  1>http://js.tongji.linezing.com/806392/tongji.js
Level  1>http://www.linezing.com  ●
Level  1>http://img.tongji.linezing.com/806392/tongji.gif
Level  1>http://abu.dns0755.net/365/iie.swf  ●
Level  1>http://abu.dns0755.net/365/fff.swf  ●
Level  1>http://abu.dns0755.net/365/yt.htm
Level  2>http://abu.dns0755.net/365/bf.htm
Level  3>http://abu.dns0755.net/365/bf.js
Level  3>http://abu.dns0755.net/365/2.css  ●
Level  4>http://abu.dns0755.net/e/dd.exe  ●
Level  2>http://abu.dns0755.net/365/of.htm
Level  3>http://abu.dns0755.net/365/of.css  ●
Level  4>http://abu.dns0755.net/e/dd.exe  ●
Level  2>http://abu.dns0755.net/365/newlz.htm
Level  3>http://abu.dns0755.net/365/newlz.css  ●
Level  4>http://abu.dns0755.net/e/dd.exe  ●
Level  3>http://abu.dns0755.net/365/newlz.js
Level  2>http://abu.dns0755.net/365/office.htm
Level  3>http://abu.dns0755.net/365/office.css  ●
Level  4>http://abu.dns0755.net/e/dd.exe  ●
Level  2>http://abu.dns0755.net/365/xie.htm
Level  3>http://abu.dns0755.net/365/av2.swf  ●
Level  3>http://abu.dns0755.net/365/av3.swf  ●
Level  3>http://abu.dns0755.net/365/av1.swf  ●
Level  4>http://abu.dns0755.net/e/dd.exe  ●
Level  3>http://abu.dns0755.net/365/av0.swf  ●
Level  2>http://abu.dns0755.net/365/yt.js
Level  3>http://abu.dns0755.net/365/4.htm
Level  4>http://abu.dns0755.net/365/2.css  ●
Level  5>http://abu.dns0755.net/e/dd.exe  ●
Level  3>http://abu.dns0755.net/365/3.htm
Level  4>http://abu.dns0755.net/365/3.css  ●
Level  5>http://abu.dns0755.net/e/dd.exe  ●
Level  1>http://abu.dns0755.net/365/aa.js
Level  2>http://abu.dns0755.net/365/aa.htm
Level  3>http://abu.dns0755.net/365/ff.html
Level  4>http://abu.dns0755.net/365/xp.swf  ●
Level  4>http://abu.dns0755.net/365/done.swf  ●
Level  4>http://abu.dns0755.net/e/ddd.exe  ●
Level  3>http://abu.dns0755.net/365/ff.html
Level  3>http://abu.dns0755.net/365/ie.html
Level  4>http://abu.dns0755.net/365/xp.swf  ●
Level  4>http://abu.dns0755.net/365/done.swf  ●
Level  4>http://abu.dns0755.net/e/ddd.exe  ●
Level  3>http://abu.dns0755.net/365/ff.html
Level  3>http://abu.dns0755.net/365/ie.html
Level  3>http://abu.dns0755.net/365/ff.html

日志由 Redoce2.0第40次修正版于 2009-9-30 14:31:32 生成。

显示全部楼层 · 发表于 2009-9-30 14:48:53

[script]hXtp://abt.dns0755.net/365/bf.js
[script]htXp://abt.dns0755.net/365/aa.js
[iframe]hXp://abt.dns0755.net/365/aa.htm
[iframe]hXtp://abt.dns0755.net/365/ff.html

这３个呢？？

显示全部楼层 · 发表于 2009-9-30 14:50:47

关于:hxxp://abt.dns0755.net/365/aa.js解密的日志(全体输出 -  14):

Level  0>http://abt.dns0755.net/365/aa.js
Level  1>http://abt.dns0755.net/365/aa.htm
Level  2>http://abt.dns0755.net/365/ff.html
Level  3>http://abt.dns0755.net/365/xp.swf  ●
Level  3>http://abt.dns0755.net/365/done.swf  ●
Level  3>http://abu.dns0755.net/e/ddd.exe  ●
Level  2>http://abt.dns0755.net/365/ff.html
Level  2>http://abt.dns0755.net/365/ie.html
Level  3>http://abt.dns0755.net/365/xp.swf  ●
Level  3>http://abt.dns0755.net/365/done.swf  ●
Level  3>http://abu.dns0755.net/e/ddd.exe  ●
Level  2>http://abt.dns0755.net/365/ff.html
Level  2>http://abt.dns0755.net/365/ie.html
Level  2>http://abt.dns0755.net/365/ff.html

日志由 Redoce2.0第40次修正版于 2009-9-30 14:58:07 生成。

[ 本帖最后由 linjw 于 2009-9-30 14:58 编辑 ]

显示全部楼层 · 发表于 2009-9-30 14:53:02

再谢！

显示全部楼层 · 发表于 2009-10-2 16:45:07

3d16feedc80cb57ffbca40dd64ef7397 x.j2s

显示全部楼层 · 发表于 2009-10-2 17:25:09

Log is generated by FreShow.
[unknown]
[frame]http://acb.dns0755.net/365/360.htm
      [frame]http://acb.dns0755.net/365/yt.htm
         [script]http://acb.dns0755.net/365/yt.js
            [frame]http://acb.dns0755.net/365/3.htm
            [frame]http://acb.dns0755.net/365/4.htm
                  [object]http://acb.dns0755.net/365/2.css
                     [object]http://acb.dns0755.net/e/ee.exe
         [frame]http://acb.dns0755.net/365/xie.htm
            [script]http://acb.dns0755.net/365/av0.swf
            [script]http://acb.dns0755.net/365/av1.swf
                  [object]http://acb.dns0755.net/e/ee.exe
            [script]http://acb.dns0755.net/365/av3.swf
            [script]http://acb.dns0755.net/365/av2.swf
         [frame]http://acb.dns0755.net/365/office.htm
         [frame]http://acb.dns0755.net/365/newlz.htm
            [script]http://acb.dns0755.net/365/newlz.js
            [script]http://acb.dns0755.net/365/newlz.css
                  [object]http://acb.dns0755.net/e/ee.exe
         [frame]http://acb.dns0755.net/365/of.htm
         [frame]http://acb.dns0755.net/365/bf.htm
            [script]http://acb.dns0755.net/365/2.css
                  [object]http://acb.dns0755.net/e/ee.exe
            [script]http://acb.dns0755.net/365/bf.js
      [script]http://acb.dns0755.net/365/aa.js
         [frame]http://acb.dns0755.net/365/aa.htm
         [frame]http://acb.dns0755.net/365/aa.htm
      [script]http://js.tongji.linezing.com/806392/tongji.js

接着继续，还没分析完

显示全部楼层 · 发表于 2009-10-2 17:39:13

Level 5>http://acb.dns0755.net/365/2.css ●
Level 6>http://acb.dns0755.net/e/ee.exe ●

显示全部楼层 · 发表于 2009-10-2 17:39:48

关于:hxxp://acb.dns0755.net/365/360.htm解密的日志(全体输出 -  43):

Level  0>http://acb.dns0755.net/365/360.htm
Level  1>http://js.tongji.linezing.com/806392/tongji.js
Level  1>http://acb.dns0755.net/365/aa.js
Level  2>http://acb.dns0755.net/365/aa.htm
Level  3>http://acb.dns0755.net/365/ff.html
Level  4>http://acb.dns0755.net/365/xp.swf
Level  4>http://acb.dns0755.net/365/done.swf
Level  4>http://acb.dns0755.net/e/eee.exe  ●
Level  3>http://acb.dns0755.net/365/ie.html
Level  4>http://acb.dns0755.net/365/xp.swf
Level  4>http://acb.dns0755.net/365/done.swf
Level  4>http://acb.dns0755.net/e/eee.exe  ●
Level  1>http://acb.dns0755.net/365/yt.htm
Level  2>http://acb.dns0755.net/365/bf.htm
Level  3>http://acb.dns0755.net/365/bf.js
Level  3>http://acb.dns0755.net/365/2.css
Level  4>http://acb.dns0755.net/e/ee.exe  ●
Level  2>http://acb.dns0755.net/365/of.htm
Level  3>http://acb.dns0755.net/365/of.css
Level  4>http://acb.dns0755.net/e/ee.exe  ●
Level  2>http://acb.dns0755.net/365/newlz.htm
Level  3>http://acb.dns0755.net/365/newlz.css
Level  4>http://acb.dns0755.net/e/ee.exe  ●
Level  3>http://acb.dns0755.net/365/newlz.js
Level  2>http://acb.dns0755.net/365/office.htm
Level  3>http://acb.dns0755.net/365/office.css
Level  4>http://acb.dns0755.net/e/ee.exe  ●
Level  2>http://acb.dns0755.net/365/xie.htm
Level  3>http://acb.dns0755.net/365/av2.swf
Level  3>http://acb.dns0755.net/365/av3.swf
Level  3>http://acb.dns0755.net/365/av1.swf
Level  4>http://acb.dns0755.net/e/ee.exe  ●
Level  3>http://acb.dns0755.net/365/av0.swf
Level  2>http://acb.dns0755.net/365/yt.js
Level  3>http://acb.dns0755.net/365/4.htm
Level  4>http://acb.dns0755.net/365/2.css
Level  5>http://acb.dns0755.net/e/ee.exe  ●
Level  3>http://acb.dns0755.net/365/3.htm
Level  4>http://acb.dns0755.net/365/3.css
Level  5>http://acb.dns0755.net/e/ee.exe  ●
Level  1>http://acb.dns0755.net/365/iie.swf  ●
Level  2>http://acb.dns0755.net/365/WIN 9,0,115,0i.swf  ●
Level  3>http://acb.dns0755.net/e/ee.exe  ●

网页分析:250662772

[其它] x.js(请看24楼！！！！！！！！！）

回复 14楼 sam.to 的帖子