回复:www.missedashow.net 是否挂马
开头有段挂马的~不过一个ip只能连一次
关于:hxxp://www.missedashow.net/解密的日志(全体输出 - 10):
Level 0>hxxp://www.missedashow.net/
Level 1>hxxp://usps-com.t-online.de.bharatstudent-com.SuperbBlender.ru:8080/amazonaws.com/amazonaws.com/justin.tv/cnn.com/google.com.php
Level 2>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/index.php?ja=&jl=hxxp://usps-com.t-online.de.bharatstudent-com.SuperbBlender.ru:8080/amazonaws.com/amazonaws.com/justin.tv/cnn.com/google.com.php
Level 3>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/pics/jquery.jxx
Level 4>hxxp://yourreadykit.ru:8080/main.php?id=0Level 4>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/pics/pics/java.html
Level 5>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/pics/JavaJ.jar
Level 5>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/pics/Games.jar
Level 5>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/welcome.php?id=9&hey32Level 4>hxxp://uspscom.tonline.de.bharatstudentcom.superbblender.ru:8080/pics/pics/ChangeLog.pdf
日志由 Redoce2.0第91次修正版于 2010-4-4 19:37:58 生成。