http://www.bidding.hunan.gov.cn/（湖南省招标投标监管网） bbs.ikaka.com

networkedition - 2010-8-3 10:41:00

Log generated by networkedition use mdecoder 0.54
[root]http://www.bidding.hunan.gov.cn/item/list/12556.html
[exp]http://www.hnjsz.cn/shumen/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)
[script]http://www.hnjsz.cn/shumen/pack.js
[script]http://www.hnjsz.cn/shumen/pack.css
[virus]http://www.hnjsz.cn/shumen/sm.exe
[exp]http://www.hnjsz.cn/shumen/ie.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://www.hnjsz.cn/shumen/sm.exe
[exp]http://www.hnjsz.cn/shumen/duke.htm(Exploit.IEAurora.a)
[virus]http://www.hnjsz.cn/shumen/sm.exe
[script]http://js.users.51.la/4011529.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

鹰丶风少 - 2010-8-3 14:53:00

这次的马和前几天的一个网站为同一人所挂，木马文件都一样:kaka10:

jks_风 - 2010-8-3 20:21:00

<div style="display:none;">
如果你把你的网马给我个。我就不换了QQ:147789XXX
</div>

<body>

汗，现在小孩子都喜欢。。。诶大站拿不下就去整教育网:kaka6: 搞笑

jks_风 - 2010-8-3 20:27:00

FreShow有几个iframe过滤不出来
Log is generated by FreShow.
[wide]http://www.bidding.hunan.gov.cn/item/list/12556.html
[object]http://www.hnjsz.cn/shumen/CUTE-IE.html
[script]http://www.hnjsz.cn/shumen/pack.js
[script]http://www.hnjsz.cn/shumen/pack.css
[object]http://www.hnjsz.cn/shumen/sm.exe
[object]http://www.hnjsz.cn/shumen/duke.htm
[object]http://www.hnjsz.cn/shumen/sm.exe
[object]http://www.hnjsz.cn/shumen/ie.htm
[object]http://www.hnjsz.cn/shumen/sm.exe
[frame]http://www.bidding.hunan.gov.cn/item/list/
[frame]http://www.bidding.hunan.gov.cn/item/list/
[frame]http://www.bidding.hunan.gov.cn/item/list/
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://js.users.51.la/4011529.js

瑞星卡卡安全论坛