瑞星卡卡安全论坛

Log generated by networkedition use mdecoder 0.67
[root]http://www.wojucn.com/ad/ie.html(Exploit.Ie0dayCVE0806.a)
http://www.wojucn.com/img/wow111.exe
    [script]http://www.wojucn.com/ad/js.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; .NET CLR 2.0.50727)

freeshow 一下没了，但通过工具扫描后，提示：
http://www.wojucn.com/ad/index.html?hljagri
此页面确认挂马
    嵌入不可见的恶意框架  http://www.wojucn.com/ad/css.html
    嵌入不可见的恶意框架  http://www.wojucn.com/ad/1.htm
    嵌入不可见的恶意脚本  http://www.wojucn.com/ad/pcc.js
    嵌入不可见的恶意框架  http://www.wojucn.com/ad/ie.html
    嵌入不可见的恶意脚本  http://www.wojucn.com/ad/js.js

http://www.wojucn.com/
http://www.wojucn.com/index.files/base.js
http://www.wojucn.com/index.files/config_201106211200.js
http://www.wojucn.com/index.files/usertrack.js
http://www.wojucn.com/index.files/main_201108231200.js
http://www.wojucn.com/index.files/monitor.js
http://www.wojucn.com/index.files/sug.js
http://www.wojucn.com/index.files/ua2.js