x.js(请看24楼！！！！！！！！！）

显示全部楼层 · 发表于 2009-10-2 19:30:38

[frame]http://acb.dns0755.net/365/3.htm
[frame]http://acb.dns0755.net/365/4.htm
这些呢??

显示全部楼层 · 发表于 2009-10-2 19:31:48

关于:hxxp://acb.dns0755.net/365/4.htm解密的日志(全体输出 -  3):

Level  0>http://acb.dns0755.net/365/4.htm
Level  1>http://acb.dns0755.net/365/2.css  ●
Level  2>http://acb.dns0755.net/e/ee.exe  ●

日志由 Redoce2.0第16次修正版于 2009-10-2 19:31:43 生成。

显示全部楼层 · 发表于 2009-10-2 19:53:06

thank!

显示全部楼层 · 发表于 2009-10-5 00:02:59

thank all

显示全部楼层 · 发表于 2009-10-5 00:23:56

原始 - hxxp://acd.dns0755.net/370/360safe.htm
开始自动解析 - hxxp://acd.dns0755.net/370/360safe.htm
L1 - 正在解析 hxxp://acd.dns0755.net/370/iie.swf
L1 - 正在解析 hxxp://acd.dns0755.net/370/fff.swf
L1 - hxxp://acd.dns0755.net/370/at.htm
L1 - hxxp://acd.dns0755.net/370/fa.js
L1 - 正在解析 hxxp://acd.dns0755.net/370/<EMBED src=iie.swf
L1 - 正在解析 hxxp://acd.dns0755.net/370/<EMBED src=fff.swf
L2 - hxxp://acd.dns0755.net/370/at.js
L2 - hxxp://acd.dns0755.net/370/xie.htm
L2 - hxxp://acd.dns0755.net/370/office.htm
L2 - hxxp://acd.dns0755.net/370/newlz.htm
L2 - hxxp://acd.dns0755.net/370/off.htm
L2 - hxxp://acd.dns0755.net/370/bf.htm
L2 - hxxp://acd.dns0755.net/370/fa.htm
L3 - hxxp://acd.dns0755.net/370/myrea.htm
L3 - hxxp://acd.dns0755.net/370/myreal.htm
L3 - 正在解析 hxxp://acd.dns0755.net/370/us0.swf
L3 - 正在解析 hxxp://acd.dns0755.net/370/us1.swf
L3 - 正在解析 hxxp://acd.dns0755.net/370/us3.swf
L3 - 正在解析 hxxp://acd.dns0755.net/370/us2.swf
L3 - hxxp://acd.dns0755.net/370/office.css
L3 - hxxp://acd.dns0755.net/370/newlz.js
L3 - hxxp://acd.dns0755.net/370/newlz.css
自动解析 - Auto XOR - 高度可疑 - hxxp://acd.dns0755.net/d/ee.exe
L4 - hxxp://acd.dns0755.net/370/myrea.css
L4 - hxxp://acd.dns0755.net/370/breal.css
关注 - hxxp://acd.dns0755.net/d/ee.exe

输出的对象 - hxxp://acd.dns0755.net/d/ee.exe

此分析日志由 Illusion Wing 使用 Astox v1 Build 1220 在 2009年10月5日0时23分26秒生成。

显示全部楼层 · 发表于 2009-10-5 12:53:48

自动解析

Log generated by ttf use mdecoder 0.26
[root]http://acd.dns0755.net/370/360safe.htm
[iframe]http://acd.dns0755.net/370/at.htm
      [script]http://acd.dns0755.net/370/at.js
         [iframe]http://acd.dns0755.net/370/myrea.htm
            [script]http://acd.dns0755.net/370/myrea.css
                  [exe]http://acf.dns0755.net/e/ee.exe
         [iframe]http://acd.dns0755.net/370/myreal.htm
            [script]http://acd.dns0755.net/370/breal.css
      [iframe]http://acd.dns0755.net/370/xie.htm
         [script]http://acd.dns0755.net/370/us0.swf
         [script]http://acd.dns0755.net/370/us1.swf
            [exe]http://acf.dns0755.net/e/ee.exe
         [script]http://acd.dns0755.net/370/us3.swf
         [script]http://acd.dns0755.net/370/us2.swf
      [iframe]http://acd.dns0755.net/370/office.htm
         [script]http://acd.dns0755.net/370/office.css
            [exe]http://acf.dns0755.net/e/ee.exe
      [iframe]http://acd.dns0755.net/370/newlz.htm
         [script]http://acd.dns0755.net/370/newlz.js
         [script]http://acd.dns0755.net/370/newlz.css
            [exe]http://acf.dns0755.net/e/ee.exe
      [iframe]http://acd.dns0755.net/370/off.htm
         [script]http://acd.dns0755.net/370/off.css
            [exe]http://acf.dns0755.net/e/ee.exe
      [iframe]http://acd.dns0755.net/370/bf.htm
         [script]http://acd.dns0755.net/370/breal.css
            [exe]http://acf.dns0755.net/e/ee.exe
         [script]http://acd.dns0755.net/370/bf.js
[script]http://acd.dns0755.net/370/fa.js
      [iframe]http://acd.dns0755.net/370/fa.htm
         [iframe]http://acd.dns0755.net/370/ff.html
         [iframe]http://acd.dns0755.net/370/ie.html
         [iframe]http://acd.dns0755.net/370/ff.html
         [iframe]http://acd.dns0755.net/370/ie.html
         [iframe]http://acd.dns0755.net/370/ff.html
         [iframe]http://acd.dns0755.net/370/ff.html

显示全部楼层 · 发表于 2009-10-5 13:05:25

Log is generated by FreShow.
[wide]http://acd.dns0755.net/370/360safe.htm
[frame]http://acd.dns0755.net/370/at.htm
      [script]http://acd.dns0755.net/370/at.js
         [frame]http://acd.dns0755.net/370/myrea.htm
            [script]http://acd.dns0755.net/370/myrea.css
                  [object]http://acf.dns0755.net/e/ee.exe
         [frame]http://acd.dns0755.net/370/myreal.htm
      [frame]http://acd.dns0755.net/370/xie.htm
         [script]http://acd.dns0755.net/370/us0.swf
         [script]http://acd.dns0755.net/370/us1.swf
            [object]http://acf.dns0755.net/e/ee.exe
         [script]http://acd.dns0755.net/370/us3.swf
         [script]http://acd.dns0755.net/370/us2.swf
      [frame]http://acd.dns0755.net/370/office.htm
         [script]http://acd.dns0755.net/370/office.css
            [object]http://acf.dns0755.net/e/ee.exe
      [frame]http://acd.dns0755.net/370/newlz.htm
         [script]http://acd.dns0755.net/370/newlz.js
         [script]http://acd.dns0755.net/370/newlz.css
            [object]http://acf.dns0755.net/e/ee.exe
      [frame]http://acd.dns0755.net/370/off.htm
         [script]http://acd.dns0755.net/370/off.css
            [object]http://acf.dns0755.net/e/ee.exe
      [frame]http://acd.dns0755.net/370/bf.htm
         [script]http://acd.dns0755.net/370/breal.css
            [object]http://acf.dns0755.net/e/ee.exe
         [script]http://acd.dns0755.net/370/bf.js
[script]http://acd.dns0755.net/370/fa.js
      [frame]http://acd.dns0755.net/370/fa.htm
[script]http://js.tongji.linezing.com/806392/tongji.js

发现MD要取代freshow了。。

[其它] x.js(请看24楼！！！！！！！！！）

回复 21楼 sam.to 的帖子