瑞星卡卡安全论坛

Log is generated by FreShow.
[wide]http://www.rentiart.com/ddrtys/2008-10/5/0926573.htm
    [script]http://www.rentiart.com/JS/adsjs/1.js
        [script]http://wvw.rentiart.com/JS/adsjs/1.js
    [script]http://www.rentiart.com/JS/AdsJS/2.js
        [script]http://wvw.rentiart.com/JS/adsjs/2.js
    [script]http://www.rentiart.com/JS/AdsJS/news.js
        [script]http://wvw.rentiart.com/JS/adsjs/news.js
    [script]http://www.rentiart.com/JS/AdsJS/new_r.js
        [script]http://wvw.rentiart.com/js/adsjs/new_r.js
    [script]http://www.rentiart.com/js/adsjs/News_vod.js
    [script]http://www.rentiart.com/js/adsjs/News_zj.js
        [script]http://wvw.rentiart.com/JS/adsjs/news_zj.js
    [script]http://www.rentiart.com/js/adsjs/News_zj1.js
    [script]http://www.rentiart.com/JS/syy.js
    [script]http://www.rentiart.com/js/News_W.js
    [script]http://www.rentiart.com/JS/AdsJS/new.js
        [script]http://wvw.rentiart.com/JS/adsjs/new.js
            [frame]http://www.918v.com/index.htm
                [frame]http://qtxdff.3322.org:801/c01/c01.htm
                    [object]http://qtxdff.3322.org:801/c01/ps.htm
                        [object]http://qtxdff.3322.org:801/c01/c.js
                            [object]http://qtxdff.3322.org:801/c01/a.jpg
                                [object]http://ddxcrf.cn:8088/c01.exe
            [script]http://wvw.rentiart.com/JS/adsjs/\"http://wvw.rentiart.com/js/adsjs/qq1.js\"
            [script]http://wvw.rentiart.com/JS/adsjs/\"http://wvw.rentiart.com/js/adsjs/y6y6.js\"
    [script]http://www.rentiart.com/JS/AdsJS/3.js
    [script]http://www.rentiart.com/JS/tj.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

就这个网马请教斑竹，如此深层次的链接，你怎么知道是
[script]http://www.rentiart.com/JS/AdsJS/new.js
        [script]http://wvw.rentiart.com/JS/adsjs/new.js
            [frame]http://www.918v.com/index.htm
                [frame]http://qtxdff.3322.org:801/c01/c01.htm
                    [object]http://qtxdff.3322.org:801/c01/ps.htm
                        [object]http://qtxdff.3322.org:801/c01/c.js
                            [object]http://qtxdff.3322.org:801/c01/a.jpg
                                [object]http://ddxcrf.cn:8088/c01.exe
这块，难道第一层的script你是一个一个试出来的？

那个就往下一步一步解就行了:kaka6: 没啥特殊的:kaka3: