卡饭上看到的 有的地方如果粗心点就漏了。。后半部分和前面的类似 就没分析了
关于:hxxp://www.qdnrm.com/解密的日志(全体输出 - 55):
Level 0>http://www.qdnrm.com/
Level 1>http://s137.cnzz.com/stat.php?id=1223603&web_id=1223603&show=pic
Level 1>http://www.qdnrm.com/html/youqin.html
Level 2>http://www.qdnrm.com/img/hs.jpg
Level 1>http://www.qdnrm.com/qdn/uploadfiles_2072/200908/2009082216294059.jpg
Level 1>http://www.qdnrm.com/ad/200901/3.js
Level 2>http://%64%64%62%2e%78%6f%72%67%2e%70%6c/x.js
Level 3>http://myaq.dns0755.net/bb/360.htm
Level 4>http://js.tongji.linezing.com/806392/tongji.js
Level 4>http://myaq.dns0755.net/bb/aa.js
Level 5>http://myaq.dns0755.net/bb/aa.htm
Level 6>http://myaq.dns0755.net/bb/ff.html
Level 7>http://myaq.dns0755.net/bb/xp.swf
Level 7>http://myaq.dns0755.net/bb/done.swf
Level 7>http://myaq.dns0755.net/a/nnn.exe ●
Level 6>http://myaq.dns0755.net/bb/ie.html
Level 7>http://myaq.dns0755.net/bb/xp.swf
Level 7>http://myaq.dns0755.net/bb/done.swf
Level 7>http://myaq.dns0755.net/a/nnn.exe ●
Level 8>http://go.microsoft.com/fwlink/?linkid=8180
Level 9>http://go.microsoft.com/library/svy/broker.js
Level 7>http://myaq.dns0755.net/a/nnn.exe ●
Level 4>http://myaq.dns0755.net/bb/yt.htm
Level 5>http://myaq.dns0755.net/bb/bf.htm
Level 6>http://myaq.dns0755.net/bb/bf.js
Level 6>http://myaq.dns0755.net/bb/2.css
Level 7>http://myaq.dns0755.net/a/nn.exe ●
Level 5>http://myaq.dns0755.net/bb/of.htm
Level 6>http://myaq.dns0755.net/bb/of.css
Level 7>http://myaq.dns0755.net/a/nn.exe ●
Level 5>http://myaq.dns0755.net/bb/newlz.htm
Level 6>http://myaq.dns0755.net/bb/newlz.css
Level 7>http://myaq.dns0755.net/a/nn.exe ●
Level 5>http://myaq.dns0755.net/bb/office.htm
Level 5>http://myaq.dns0755.net/bb/xie.htm
Level 6>http://myaq.dns0755.net/bb/av2.swf
Level 6>http://myaq.dns0755.net/bb/av3.swf
Level 6>http://myaq.dns0755.net/bb/av1.swf
Level 7>http://myaq.dns0755.net/a/nn.exe ●
Level 5>http://myaq.dns0755.net/bb/yt.js
Level 6>http://myaq.dns0755.net/bb/4.htm
Level 7>http://myaq.dns0755.net/bb/unescape
Level 7>http://myaq.dns0755.net/bb/2.css
Level 8>http://myaq.dns0755.net/a/nn.exe ●
Level 6>http://myaq.dns0755.net/bb/3.htm
Level 7>http://myaq.dns0755.net/bb/3.css
Level 8>http://myaq.dns0755.net/a/nn.exe ●
Level 4>http://myaq.dns0755.net/bb/iie.swf
Level 1>http://www.qdnrm.com/ad/200901/4.js
Level 1>http://www.qdnrm.com/ad/200903/13.js
Level 1>http://www.qdnrm.com/ad/200906/14.js
Level 1>http://www.qdnrm.com/ad/200901/5.js
Level 1>http://www.qdnrm.com/ad/200902/7.js
Level 1>http://www.qdnrm.com/ad/200902/6.js
Level 1>http://www.qdnrm.com/ad/200902/8.js
Analyzed by backway
用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2
