瑞星卡卡安全论坛

Log generated by networkedition use mdecoder 0.41
[root]http://www.hinews.cn/info/system/2007/10/08/dnf/1133.html
    [script]http://www.thisdoor.com/ad/ad.js?IDJCJK
        [iframe]http://jkwd.xywy.com/20091104/tmp/dnf.html?天08
            [script]http://jkwd.xywy.com/20091104/tmp/c.js
                [exe]http://jkwd.xywy.com/20091104/tmp/dn.exe
            [script]http://jkwd.xywy.com/20091104/tmp/b.js
    [script]http://js.users.51.la/3074814.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

Log is generated by FreShow.
[wide]http://www.hinews.cn/info/system/2007/10/08/dnf/1133.html
    [script]http://www.thisdoor.com/ad/ad.js?IDJCJK
        [frame]http://www.thisdoor.com/ad/http:\/\/jkwd.xywy.com\/20091104\/tmp\/dnf.html?天08
    [script]http://js.users.51.la/3074814.js


这个网马不会这么快就失效了吧....进行不下去了又...

frame那里是不是应该先去掉"\"再filter？
我是这么做的
跟老师的结果一样

谢谢你,OK了,又知道了一点东西,嘿嘿

Log is generated by FreShow.
[wide]http://www.hinews.cn/info/system/2007/10/08/dnf/1133.html
    [script]http://www.thisdoor.com/ad/ad.js?IDJCJK
        [frame]http://www.thisdoor.com/ad/http:\/\/jkwd.xywy.com\/20091104\/tmp\/dnf.html?天08
            [script]http://jkwd.xywy.com/20091104/tmp/c.js
                [object]http://jkwd.xywy.com/20091104/tmp/dn.exe
            [script]http://jkwd.xywy.com/20091104/tmp/b.js
    [script]http://js.users.51.la/3074814.js