phpnet.sonico.com.virgilioit.superhighest.ru:8080

qianwenxiang

关于:hxxp://www.animaberlin.de/fotoaufnahmen/index.htm解密的日志(全体输出 -  10):
Level  0>hxxp://www.animaberlin.de/fotoaufnahmen/index.htm
Level  1>hxxp://php-net.sonico.com.virgilio-it.superhighest.ru:8080/gittigidiyor.com/gittigidiyor.com/google.com.eg/google.com/doctissimo.fr
Level  2>hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/index.php?ja=&jl=hxxp://php-net.sonico.com.virgilio-it.superhighest.ru:8080/gittigidiyor.com/gittigidiyor.com/google.com.eg/google.com/doctissimo.fr
Level  3>hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/pics/jquery.jxx
Level  4>hxxp://yourreadykit.ru:8080/main.php?id=0
Level  4>hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/pics/pics/java.html
Level  5>{::无法加载::}hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/pics/pics/JavaJ.jar
Level  5>{::无法加载::}hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/pics/pics/Games.jar
Level  5>hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/welcome.php?id=9&hey32
Level  4>hxxp://phpnet.sonico.com.virgilioit.superhighest.ru:8080/pics/pics/ChangeLog.pdf
日志由 Redoce2.0第91次修正版于 2010-4-4 18:22:11 生成。

welcome.php是exe文件 每个ip访问只允许访问一次 需要referrer