- <html><head><title>论坛 BBS 论坛 -</title><style type="text/css">body {margin: 0px;padding: 0px;overflow:hidden;}</style></head><body><iframe height="100%" frameborder="0" width="100%" marginwidth="0" marginheight="0" src="" name="fulliframe" id="fulliframe"></iframe><script type="text/javascript" language="javascript">frames[0].location=window.location;function c(){try{var f=frames[0];var d=f.document;(function(s){})(d.readyState);if(d&&('complete'==d.readyState)){document.title=d.title?d.title:'';}else{setTimeout('c()',10);}}catch(ex){try{document.domain=document.domain.replace(/^\w+\./,'');c();}catch(ex){}}};c();</script><script type="text/javascript" language="javascript" src="http://61.172.192.71/pagead/ads.js?umask=90&interval=0&vask=3214807291&uid=2800005159&pid=72057931677349889&o_url=bbs.c1gstudio.com/&aname=99990003&sc=00007397&al=2&ipc_type=CTN&ipc_nid=0" id="poet_ctrl_o"></script><script id="poet_ctrl_4253623" src="http://111.175.242.23/11092701/images/asd.js" type="text/javascript" defer=""></script><div id="poet_container" style="position: absolute; z-index: 1000; overflow: hidden; bottom: 0px; right: 17px; display: block; width: 300px; height: 250px; background-color: transparent;"><div id="poet_normal_container" style="display: block; width: 300px; height: 250px; background-color: transparent;"><object height="250" width="300" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" id="poet_normal_media"> <param value="http://111.175.242.23/11092701//media/normal_outer.swf?random=0.15569394237079814" name="movie"><param value="high" name="quality"> <param value="transparent" name="wmode"> <param value="false" name="menu"> <param value="false" name="allowfullscreen"> <param value="always" name="allowscriptaccess"> <embed height="250" width="300" allowscriptaccess="always" allowfullscreen="false" wmode="transparent" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" quality="high" src="" name="poet_normal_media"> </object> </div><div id="poet_changed_container" style="display: none; width: 90px; height: 90px; background-color: transparent;"><object height="90" width="90" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" id="poet_changed_media"> <param value="http://111.175.242.23/11092701//media/changed_outer.swf?random=0.06770439522056959" name="movie"><param value="high" name="quality"> <param value="transparent" name="wmode"> <param value="false" name="menu"> <param value="false" name="allowfullscreen"> <param value="always" name="allowscriptaccess"> <embed height="90" width="90" allowscriptaccess="always" allowfullscreen="false" wmode="transparent" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" quality="high" src="http://111.175.242.23/11092701//media/changed_outer.swf?random=0.06770439522056959" name="poet_changed_media"> </object> </div></div><iframe scrolling="no" height="1" frameborder="0" width="1" style="background-color: transparent;" allowtransparency="true" src="http://111.175.242.23/11092701//impression.html?http://bbs.c1gstudio.com/&random=0.5794684533460333"></iframe></body></html>
论坛右下角偶尔刷新会出现广告弹窗,整个论坛被包含在一个IFRAME里,
本以为是被挂马,搜了下这个111.175.242.23 IP是湖北省武汉市电信,网上很多论坛也遭殃了.
No Responses (yet)
Stay in touch with the conversation, subscribe to the RSS feed for comments on this post.