瑞星卡卡安全论坛

Log generated by networkedition use mdecoder 0.50
[root]http://www.rzdghb.gov.cn/(山东日照东港区环保局)
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
        [virus]http://cin7409.a26.czwow.com/1.exe
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
    [script]http://www.rzdghb.gov.cn/js.asp
        [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)
    [exp]http://cin7409.a26.czwow.com/j21.htm(Exploit.IEAurora.a)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

Log is generated by FreShow.
[wide]http://www.rzdghb.gov.cn/
    [frame]http://%63%69%6E%37%34%30%39%2E%61%32%36%2E%63%7A%77%6F%77%2E%63%6F%6D/j21.htm
        [object]http://cin7409.a26.czwow.com/1.exe
    [frame]http://%63%69%6E%37%34%30%39%2E%61%32%36%2E%63%7A%77%6F%77%2E%63%6F%6D/j21.htm
        [object]http://cin7409.a26.czwow.com/1.exe
    [script]http://www.rzdghb.gov.cn/js.asp
        [frame]http://%63%69%6E%37%34%30%39%2E%61%32%36%2E%63%7A%77%6F%77%2E%63%6F%6D/j21.htm
            [object]http://cin7409.a26.czwow.com/1.exe
    [frame]http://%63%69%6E%37%34%30%39%2E%61%32%36%2E%63%7A%77%6F%77%2E%63%6F%6D/j21.htm
        [object]http://cin7409.a26.czwow.com/1.exe
    [frame]http://%63%69%6E%37%34%30%39%2E%61%32%36%2E%63%7A%77%6F%77%2E%63%6F%6D/j21.htm
        [object]http://cin7409.a26.czwow.com/1.exe

关于:hxxp://www.nxnddsj.gov.cn/解密的日志(全体输出 -  10):

Level  0>http://www.nxnddsj.gov.cn/
Level  1>http://tjxt.nxnews.net/count/count.js
Level  2>http://www.crcf.org.cn/logo.gif?cndddniac44
Level  3>http://ferrari15.3322.org:9999/wm/c039644/c03.htm
Level  4>http://count42.51yes.com/click.aspx?id=425571802&logo=12
Level  4>http://ferrari15.3322.org:9999/wm/c039644/pack.css
Level  5>http://b.164t.com:9999/y/c03.exe
Level  4>http://ferrari15.3322.org:9999/wm/c039644/pack.js
Level  1>http://www.nxnddsj.gov.cn/+swfpath+
Level  1>http://www.nxnddsj.gov.cn/images/data1.js

日志由 Redoce2.0第88次修正版于 2010-3-16 19:18:04 生成。

BD密钥

解不出来么。。。。用BD密钥无法解出来