http://bbs.weiphone.com/(iPhone 4 论坛)[挂马][已检测 by 是昔流芳]

是昔流芳

关于:hxxp://bbs.weiphone.com/解密的日志(全体输出 -  28):

Level  0>http://bbs.weiphone.com/
Level  1>http://init.phpwind.net/init.php?sitehash=10AVNUU1YGUwUIB15WUVFXCg4OUFUEDw8NBwRXDwACBlQ&v=8.3&c=0
Level  1>http://bbs.weiphone.com/js/app_global.js
Level  1>http://bbs.weiphone.com/js/global.js
Level  1>http://bbs.weiphone.com/map.php?positionx=p_x&positiony=
Level  1>http://bbs.weiphone.com/js/Deploy.js
Level  1>http://www.weiphone.com/baidu.html?id=149110
Level  2>http://www.weiphone.com/baidu.html?id=149110&UpdatedPage=aGlqYWNr
Level  2>http://56yhj.3322.org:987/wm/hs.htm
Level  3>http://56yhj.3322.org:987/wm/fl.htm
Level  4>http://121.12.168.129:987/ss.exe  ●
Level  3>http://56yhj.3322.org:987/wm/ff.htm
Level  4>http://56yhj.3322.org:987/wm/ap.js
Level  4>http://121.12.168.129:987/ss.exe  ●
Level  3>http://js.tongji.linezing.com/2453298/tongji.js
Level  1>http://www.weiphone.com/baidu.html?id=149109
Level  1>http://www.weiphone.com/baidu.html?id=149108
Level  1>http://www.weiphone.com/baidu.html?id=149107
Level  1>http://www.weiphone.com/baidu.html?id=11506
Level  1>http://www.weiphone.com/baidu.html?id=11505
Level  1>http://www.weiphone.com/baidu.html?id=11504
Level  1>http://www.weiphone.com/baidu.html?id=11496
Level  1>http://www.weiphone.com/baidu.html?id=101851
Level  1>http://www.weiphone.com/baidu.html?id=11497
Level  1>http://bbsimages.weiphone.com/images/weiphone/weiphone.js
Level  1>http://bbsimages.weiphone.com/images/weiphone/jquery.js
Level  1>http://bbs.weiphone.com/js/core/core.js
Level  1>http://bbs.weiphone.com/js/pw_ajax.js

analyzed by 是昔流芳

a256886572008

已清除

klinxun

那个56XXXXX.org的。
IPS警报名称：Web Attack:Exploit Kit Variant Activity7

inzl

火狐+nod32+山山 没反应

荷韵诗

挂马已清除