一个51nb的js.娃哈哈哈哈哈安徽[挂马][已检测 by 是昔流芳]

显示全部楼层 · 发表于 2010-7-31 17:38:00

本帖最后由是昔流芳于 2010.7.31 18:52 编辑

直接看图
这个是连接地址
今天下午刚碰到的..
http://www.51nb.com/forum/viewthread.php?tid=631806

显示全部楼层 · 发表于 2010-7-31 18:37:31

卡巴不报……

显示全部楼层 · 发表于 2010-7-31 18:51:32

关于:hxxp://www.51nb.com/forum/viewthread.php?tid=631806解密的日志(全体输出 -  59):

Level  0>http://www.51nb.com/forum/viewthread.php?tid=631806
Level  1>http://www.51nb.com/forum/include/javascript/common.js
Level  1>http://www.51nb.com/forum/include/javascript/menu.js
Level  1>http://www.51nb.com/forum/include/javascript/ajax.js
Level  1>http://www.51nb.com/forum/weather.js
Level  1>http://safe.189.cn/safe.gif
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  3>http://36023.2288.org:6677/a/pps.js
Level  3>http://82qwed.3322.org:6677/a/cdb.exe  ●
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  2>http://36023.2288.org:6677/a/ads.html
Level  1>http://cpro.baidu.com/cpro/ui/c.js
Level  1>http://pagead2.googlesyndication.com/pagead/show_sdo.js
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://pagead2.googlesyndication.com/pagead/show_ads.js
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://pagead2.googlesyndication.com/pagead/show_ads.js
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://www.51nb.com/forum/redirect.php?tid=631806&goto=gotoppid&ppid=+this.value;
Level  1>http://pagead2.googlesyndication.com/pagead/show_ads.js
Level  1>http://cpro.baidu.com/cpro/ui/c.js
Level  1>http://www.51nb.com/forum/e.keyCode
Level  1>http://www.51nb.com/forum/viewthread.php?tid=631806&extra=&page=2;
Level  1>http://cpro.baidu.com/cpro/ui/c.js
Level  1>http://s75.cnzz.com/stat.php?id=162486&web_id=162486&show=pic
Level  1>http://www.51nb.com/forum/include/big5style.js

analyzed by 是昔流芳

显示全部楼层 · 发表于 2010-7-31 19:03:03

显示全部楼层 · 发表于 2010-7-31 19:26:15

卡巴畅游 MISS

显示全部楼层 · 发表于 2010-8-1 11:05:21

失效了

显示全部楼层 · 发表于 2010-8-1 12:01:47

回复 1楼 dmmc 的帖子

AVG报2个病毒

显示全部楼层 · 发表于 2010-8-1 20:47:57

回复 7楼 lianyeguzhou 的帖子

是吧.AVG还是挺强的.不过我在用ESET4

显示全部楼层 · 发表于 2010-8-1 20:49:42

回复 6楼 三生缘石 的帖子

恩,可能被清了吧

显示全部楼层 · 发表于 2010-8-2 07:40:25

回复 8楼 dmmc 的帖子

是啊，感觉网页防护很强的

[其它] 一个51nb的js.娃哈哈哈哈哈安徽[挂马][已检测 by 是昔流芳]