瑞星卡卡安全论坛

Log is generated by FreShow.
[wide]http://ezit.ccidnet.com/html/shouji/xinwen/200912/11/14828.html
    [script]http://game.hsw.cn/skin/js/wow.js?664315
        [frame]http://www.hngqt.cn/fw/ad/wo.htm?0309
            [object]http://www.hngqt.cn/fw/ad/wo.exe
    [script]http://js.users.51.la/3546245.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

Log is generated by FreShow.
[wide]http://ezit.ccidnet.com/html/shouji/xinwen/200912/11/14828.html
    [script]http://game.hsw.cn/skin/js/wow.js?664315
        [frame]http://game.hsw.cn/skin/js/http:\/\/www.hngqt.cn\/fw\/ad\/wo.htm?0309
            [object]http://www.hngqt.cn/fw/ad/wo.exe
    [script]http://js.users.51.la/3546245.js

C2密钥

关于:hxxp://jkwd.xywy.com/解密的日志(全体输出 -  3):

Level  1>http://game.hsw.cn/skin/js/wow.js?664315
Level  2>http://www.hngqt.cn/fw/ad/wo.htm?0309
Level  3>http://www.hngqt.cn/fw/ad/wo.exe

日志由 Redoce2.0第88次修正版于 2010-3-16 20:04:40 生成。

c2

Log is generated by FreShow.
[wide]http://ezit.ccidnet.com/html/shouji/xinwen/200912/11/14828.html
    [script]http://game.hsw.cn/skin/js/wow.js?664315
        [frame]http://www.hngqt.cn/fw/ad/wo.htm?0309
            [object]http://www.hngqt.cn/fw/ad/wo.exe
    [script]http://js.users.51.la/3546245.js