http://dylianmeng4.info/dianshi/movie.htm

显示全部楼层 · 发表于 2009-11-20 13:21:14

Log generated by 619875192use mdecoder 0.30
[root]http://dylianmeng4.info/dianshi/movie.htm
[iframe]http://www.90ca.cn/wm/google.htm
[iframe]http://www.hkzj520.com/wmm/baidu.html
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe
[exe]http://121.12.109.63/2/mediaplayer.exe

显示全部楼层 · 发表于 2009-11-20 23:58:28

显示全部楼层 · 发表于 2009-11-21 00:10:45

这应该不算挂马而是下载有恶意软件。。

显示全部楼层 · 发表于 2009-11-21 11:33:56

全部打包

[ 本帖最后由 a256886572008 于 2009-11-21 12:09 编辑 ]

显示全部楼层 · 发表于 2009-11-21 11:45:22

[ 本帖最后由 a256886572008 于 2009-11-21 12:01 编辑 ]

显示全部楼层 · 发表于 2009-11-21 12:10:07

原帖由 asinasina 于 2009-11-21 00:10 发表
这应该不算挂马而是下载有恶意软件。。

显示全部楼层 · 发表于 2009-11-21 12:44:08

Log generated by ttf use mdecoder 0.28
[root]http://dylianmeng4.info/dianshi/movie.htm
[iframe]http://www.90ca.cn/wm/google.htm
      [script]http://www.90ca.cn/wm/moive.js
         [iframe]http://www.90ca.cn/wm/fyfl.htm
            [iframe]http://www.90ca.cn/wm/sfi.htm
                  [swf]http://www.90ca.cn/wm/./i115.swf
                  [swf]http://www.90ca.cn/wm/./i47.swf
                  [swf]http://www.90ca.cn/wm/./i45.swf
                  [swf]http://www.90ca.cn/wm/./i64.swf
                  [swf]http://www.90ca.cn/wm/./i28.swf
                  [swf]http://www.90ca.cn/wm/./i16.swf
                  [script]http://www.90ca.cn/wm/swfobject.css
            [iframe]http://www.90ca.cn/wm/sff.htm
                  [swf]http://www.90ca.cn/wm/./f115.swf
                  [swf]http://www.90ca.cn/wm/./f47.swf
                  [swf]http://www.90ca.cn/wm/./f45.swf
                  [swf]http://www.90ca.cn/wm/./f64.swf
                  [swf]http://www.90ca.cn/wm/./f28.swf
                  [swf]http://www.90ca.cn/wm/./f16.swf
            [iframe]http://www.90ca.cn/wm/sfi.htm
                  [swf]http://www.90ca.cn/wm/./i115.swf
                  [swf]http://www.90ca.cn/wm/./i47.swf
                  [swf]http://www.90ca.cn/wm/./i45.swf
                  [swf]http://www.90ca.cn/wm/./i64.swf
                  [swf]http://www.90ca.cn/wm/./i28.swf
                  [swf]http://www.90ca.cn/wm/./i16.swf
      [iframe]http://www.90ca.cn/wm/search.htm
         [script]http://www.90ca.cn/wm/google_ad.js
            [iframe]http://www.90ca.cn/wm/ec1.htm
                  [script]http://www.90ca.cn/wm/ec4.js
                     [exe]http://www.90ca.cn/wm.exe
                  [script]http://www.90ca.cn/wm/ec5.js
                  [script]http://www.90ca.cn/wm/ec6.js
            [iframe]http://www.90ca.cn/wm/cqqmp.htm
                  [script]http://www.90ca.cn/wm/cqqtemp.css
                  [script]http://www.90ca.cn/wm/cqqskin.css
                     [exe]http://www.90ca.cn/wm.exe
                  [script]http://www.90ca.cn/wm/show.jpg
                  [script]http://www.90ca.cn/wm/shows.jpg
            [iframe]http://www.90ca.cn/wm/ecdvd.htm
                  [script]http://www.90ca.cn/wm/dvdx.js
                  [script]http://www.90ca.cn/wm/dvd.js
                     [exe]http://www.90ca.cn/wm.exe
         [script]http://www.90ca.cn/wm/google_ads.js
            [iframe]http://www.90ca.cn/wm/cqq0.htm
                  [script]http://www.90ca.cn/wm/cqq2s.css
                  [script]http://www.90ca.cn/wm/cqq2.css
                     [exe]http://www.90ca.cn/wm.exe
            [iframe]http://www.90ca.cn/wm/ecqfun.htm
                  [iframe]http://www.90ca.cn/wm/ecof.htm
                     [script]http://www.90ca.cn/wm/off.css
                        [exe]http://www.90ca.cn/wm.exe
                     [script]http://www.90ca.cn/wm/offx.css
                     [script]http://www.90ca.cn/wm/offxx.css
         [script]http://www.90ca.cn/wm/google_adx.js
            [iframe]http://www.90ca.cn/wm/fyr.htm
                  [script]http://www.90ca.cn/wm/rr.js
                     [iframe]http://www.90ca.cn/wm/evilr.htm
                        [script]http://www.90ca.cn/wm/evilrr.js
                              [exe]http://www.90ca.cn/wm.exe
                        [script]http://www.90ca.cn/wm/evilrrs.js
                     [iframe]http://www.90ca.cn/wm/fyre1.htm
                        [script]http://www.90ca.cn/wm/fyr1.js
                              [exe]http://www.90ca.cn/wm.exe
                  [script]http://www.90ca.cn/wm/zz.js
                     [iframe]http://www.90ca.cn/wm/fylz.htm
                        [script]http://www.90ca.cn/wm/xxxxz.js
                        [script]http://www.90ca.cn/wm/xxxxzx.js
            [iframe]http://www.90ca.cn/wm/ecfox.htm
                  [iframe]http://www.90ca.cn/wm/ecffx.htm
                     [script]http://www.90ca.cn/wm/ecfox.js
                     [script]http://www.90ca.cn/wm/ecfoxx.js
         [script]http://www.90ca.cn/wm/music.js
[iframe][quote]http://www.hkzj520.com/wmm/baidu.html

[/quote]
太多了，到下面基本相同就没解了
但是这个我确定挂马了

http://www.hkzj520.com/wmm/baidu.html
hXXp://www.hkzj520.com/wmm/mpeg2use.gXX]http://www.hkzj520.com/wmm/mpeg2use.gXX

最后是GXX改为GIF即可
&v换%u ,:换0还是没解出来，谁帮下忙，吃个饭去

[ 本帖最后由 asinasina 于 2009-11-21 14:10 编辑 ]

显示全部楼层 · 发表于 2009-11-21 14:02:33

进这个帖子

显示全部楼层 · 发表于 2009-11-21 14:04:16

把網頁監控關掉，這個誤報超嚴重的。

显示全部楼层 · 发表于 2009-11-21 14:07:56

是360浏览器

[其它] http://dylianmeng4.info/dianshi/movie.htm

回复 8楼王子带着刀的帖子

回复 9楼 a256886572008 的帖子

[其它] http://dylianmeng4.info/dianshi/movie.htm

回复 8楼 王子带着刀 的帖子

回复 9楼 a256886572008 的帖子

回复 8楼王子带着刀的帖子