突然间，发现浏览器被打开，而且单独就一个电信广告。
肯定是通过其他程序比如QQ、云笔记等链接网络的时候，插入了弹窗代码，然后就触发了本地浏览器的打开！
电信广告网页URL:
http://gd.189.cn/push/201308/0822/yxt.html?p=1377221796|2724555|44979|0|0|0¶m=ABioyajZGekprCz8jKys/MzcjIycfHv87JzNGYm9mPkJOWnIaWm8LLy8bIxtmejZqenJCbmsLLy8/Mz8/ZjJCKjZyaio2TwpaSmJyenJea
电信广告网页代码：
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312" /> <title>暑期冲击波，特价太疯狂</title> <style> table { border-collapse:collapse; border-spacing:0; font-size:12px; } .pr{padding-right:20px;text-align:right; } .pr a{color:#525252; text-decoration:none;} .pr a:hover{color:#0871C3; text-decoration:none;} </style> <script language=javascript src=" http://59.37.54.194:8090/clicktotal/ClickTotal.js" type=text/javascript></script> </head> <body> <div class="tb_box"> <table align="center" cellpadding="0" cellspacing="0"> <tr> <td align="center" valign="top"><a href="http://activity.189mv.cn:8000/web/cjb/index.html?cmpid=push-ad-yxt" target="_blank"><img src="/push/201308/0822/yxt0822.jpg" border="0" /></a></td> </tr> </table> </div> <!--30130411增加--> <script type="text/javascript" src="/js/account/getIpAsdl.js"></script> <!-- SiteCatalyst code version: H.24.1. Copyright 1996-2011 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com --> <script language="JavaScript" type="text/javascript" src="/js/s_code.js"></script> <script language="JavaScript" type="text/javascript"> s_e.pageName="" s_e.channel="" s_e.events="" /************* DO NOT ALTER ANYTHING BELOW THIS LINE ! **************/ var s_code=s_e.t();if(s_code)document.write(s_code); /*20130522增加*/ var _bdhmUrl = (("https:" == document.location.protocol)? " https://gd.189.cn": " http://61.140.99.33:8000"); document.write(unescape("%3Cscript src='" + _bdhmUrl + "/TrackWeb/Const.js' type='text/javascript'%3E%3C/script%3E")); document.write(unescape("%3Cscript src='" + _bdhmUrl + "/TrackWeb/event-min.js' type='text/javascript'%3E%3C/script%3E")); </script> <!-- End SiteCatalyst code version: H.22.1. --></body> </html>
引用的js有：
http://59.37.54.194:8090/clicktotal/ClickTotal.js
if (document.all){ window.attachEvent('onload',RegEvents) } else{ window.addEventListener('load',RegEvents,false); } function RegEvents() { document.onclick=function(ev) { ev = ev || window.event; var target = ev.target || ev.srcElement; if (target.tagName.toLowerCase() == "img" ){ if ( target.parentNode.tagName.toLowerCase() == "a" ){ return LinkClickEvent(); } } else{ if(target.tagName.toLowerCase() == "a" || target.tagName.toLowerCase() == "input" || target.tagName.toLowerCase() == "map" || target.tagName.toLowerCase() == "area") { //只有超链接和按钮才激发该事件 return LinkClickEvent(); } } } //注册iframe CreatFrame(); } function LinkClickEvent(){ var URL = "http://59.37.54.194:8090/clicktotal/PushClickSubmit.aspx";//统计点击率的页面 var iframe = window.clickiframe; if(window.location.search=="") iframe.location= URL+window.parent.location.search; else iframe.location= URL+window.location.search; return true; } function CreatFrame(){ var iframe = document.createElement('iframe'); iframe.src="about:blank"; iframe.id="clickiframe"; iframe.name="clickiframe"; iframe.width = 0; iframe.height=0; iframe.frameBorder=0; document.body.appendChild(iframe); }
源码下面还有插入一段隐式的js代码，简单查看是：
var _bdhmUrl = ( ("https:" == document.location.protocol)? " https://gd.189.cn": " http://61.140.99.33:8000"); // _bdhmUrl = http://61.140.99.33:8000 unescape("%3Cscript src='" + _bdhmUrl + "/TrackWeb/Const.js' type='text/javascript'%3E%3C/script%3E") //"<script src=' http://61.140.99.33:8000/TrackWeb/Const.js' type='text/javascript'></script>" unescape("%3Cscript src='" + _bdhmUrl + "/TrackWeb/event-min.js' type='text/javascript'%3E%3C/script%3E") //"<script src=' http://61.140.99.33:8000/TrackWeb/event-min.js' type='text/javascript'></script>"
trackweb/const.js内容是：
var jsdata_3 = []; //点击页面 var jsdata_2 = [ 'http://gd.189.cn/' ,'http://gd.189.cn/common/login.jsp' ,'http://gd.189.cn/service/account/index.jsp' ,'http://gd.189.cn/service/pay/' ,'http://gd.189.cn/gz/internet/index.html' ,'http://gd.189.cn/gz/internet/ADSL_intro_new.htm' ,'http://gd.189.cn/internet/kdxy/index.html' ,'http://gd.189.cn/ts/' ,'http://gd.189.cn/service/index_gz.html' ,'http://gd.189.cn/vip/index.html' ,'http://m.gd.189.cn/gz/', 'http://127.0.0.1:18080/TrackWeb/' ]; //采集自定义元素页面--离开时采集 var jsdata_1 = [{page:'http://localhost:18080/TrackWeb/orderedit.html', type:'js', object_name:'trktest2', active_type:'1'}]; //采集自定义元素页面--进入时采集 var jsdata_0 = [ {page:'/TrackWeb/orderedit.html', type:'js', object_name:'orderpay,orderstate', active_type:'0'}, {page:'http://localhost:18080/TrackWeb/orderedit.html', type:'js', object_name:'trktest1', active_type:'0'}, {page:'/TrackWeb/orderconfirm.html', type:'js', object_name:'trkOrderState', active_type:'0'}]; //不采集page事件页面 var visit_url_filter = ['/push/']; var chn_attr_name = 'trkPageType';
http://gd.189.cn/js/account/getIpAsdl.js
好一个判断IP是否是ADSL的JS代码啊！！
//设置cookie function setCookie(c_name, value, expiredays,path){ var exdate=new Date(); exdate.setDate(exdate.getDate() + expiredays); document.cookie=c_name+ "=" + escape(value) + ((expiredays==null) ? "" : ";expires="+exdate.toGMTString())+((path==null) ? "" : ";path="+path); } function getCookie(name) { var arr,reg=new RegExp("(^| )"+name+"=([^;]*)(;|$)"); if(arr=document.cookie.match(reg)) return unescape(arr[2]); else return null; } function getAccByIp(){ $.ajax({ url:"/getAnalyAccByIp.do", // data:{favourableBalanceNum:favourableBalanceNum,codeRAM1:codeRAM1}, type:"post", dataType:"json", error:function(){ //alert("Error occurs!"); }, success:function(data) { // alert("data=" + data); // alert("data.resultcode=" + data.resultcode); if(data.resultcode == "0"){ // 成功 var latnName=data.latnName; var ipAddr=data.ipAddr; var accAccount=data.accAccount; var adslSpeed=data.adslSpeed; setCookie("adslAccount",accAccount,180,"/"); } else{ } } }); } //写宽带账号cookie var adsl=getCookie("adslAccount"); var svId=getCookie("svid"); if((!adsl||adsl==""||adsl=='null'||adsl==null||adsl=="gzDSL86758010@163.gd")&&svId&&svId!=''&&svId!='null'&&svId!=null){ try { getAccByIp(); } catch (e) { } } //写自助服务查询最后一次记录 try { //alert(parent.window.location.pathname+parent.window.location.search); var funcPage={"/service/order/query_order.jsp?search_value=ywbl":"yewu_jindu","/service/order/query_order.jsp?search_value=gzsg":"toushu_jindu","/service/order/query_order.jsp?search_value=wsts":"zixun_jindu","/MalfunctionQry.do":"malfunction","/AdslInstallQry.do":"adsInstall","/service/Get/Customer/Info.do":"cusInfo","/service/jf/integral.do?method=query":"integralQuery","/service/bill/billNowQuery.jsp":"billNow","/service/Bill/Balance/BalanceQueryAll.do":"Balance","/pay/qryNQBILL.action":"NQBILL","/service/bill/feiyong_zhangdan.jsp":"zhangdan","/service/bill/feiyong_xiangdan.jsp":"xiangdan","/service/bill/feiyong_taocan.do":"taocan","/service/Bill/App/CreditQuery.do":"credit","/service/manage/jindu_jiaofei.jsp":"jiaofei_jindu","/service/Get/Customer/Product.do":"cusProduct","/service/Bill/App/CdmaPukQuery.do":"puk","/service/bill/cdmaPuk/queryPuk.jsp":"puk","/service/manage/mmgl.jsp":"password","/suggest.do":"suggest","/malfunction/Allege.do":"allege","/appeal.do":"appeal","/appeal.do":"appeal","/service/teltool/docdmaNumSearch.do":"cdmaNumSearch","/support/support_domesticnum.jsp":"domesticNum","/support/domesticNumQuery.do":"domesticNum","/support/businessNdSearchNew.do":"businessNdSearch"}; var cookieValue=funcPage[parent.window.location.pathname+parent.window.location.search]; //alert(cookieValue); if(cookieValue&&cookieValue!=""){ setCookie("lastQuery",cookieValue,360,"/"); } } catch (e) { }
/* Adobe Tag Container Loader version: 1.0.7 Copyright 1996-2013 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com */ var s=new TagContainerLoader() s.tagContainerDC="d2" s.tagContainerNamespace="eshipgdt" s.tagContainerName="eshipgdtprd" s.loadTagContainer(); var s_e={};s_e.t=function(){}; /************* DO NOT ALTER ANYTHING BELOW THIS LINE ! **************/ function TagContainerLoader(){var t=this,w=t.w=window;t.d=w.document;t._c='s_l';if(!w.s_c_il){w.s_c_il=[];w.s_c_in=0}t._il=w.s_c_il;t._in=w.s_c_in;t._il[t._in]=t;w.s_c_in++;t.timeout=5000;t.to= new Function('var t=s_c_il['+t._in+'];if(t.mt)t.mt(0)');t.loadTagContainer=function(){var t=this,l,p=t.d.body,n,a=t.tagContainerServer?t.tagContainerServer:'www.adobetag.com',b= t.tagContainerServerSecure?t.tagContainerServerSecure:a,c=t.d.cookie,d=t.tagContainerEnv?t.tagContainerEnv:(c?(c.indexOf('s_tagEnv=dev')>=0?'dev':(c.indexOf('s_tagEnv=stage')>=0?'stage':'live')): 'live'),u=(t.w.location.protocol.toLowerCase().indexOf('https')>=0?'https://'+b:'http://'+a)+'/'+(t.tagContainerDC?t.tagContainerDC+'/':'')+t.tagContainerNamespace+'/'+d+'/'+t.tagContainerName+'.js' if(t.tagContainerURL)u=t.tagContainerURL;if(t.timeout)t.ti=setTimeout(t.to,t.timeout);if(t.d.getElementsByTagName){l=t.d.getElementsByTagName('HEAD');if(l&&l[0])p=l[0]}else p=0;if( p&&!t.tagContainerSynchronous){n=t.d.createElement('SCRIPT');if(n){n.type='text/javascript';n.setAttribute('async','async');n.src=u;if(p.firstChild)p.insertBefore(n,p.firstChild);else p.appendChild(n) }}else t.d.write('<sc'+'ript language="JavaScript" type="text/javascript" sr'+'c="'+u+'"></sc'+'ript>')};t.fs=function(x,y){if(x&&y){var a=x.split(','),b=y.split(','),i,j;for(i=0;i<a.length;i++){ for(j=0;j<b.length;j++)if(a[i]==b[j])return 1}}return 0};t.aa=function(a){var b=0,i;if(a){b=[];for(i=0;i<a.length;i++)b[i]=a[i]}return b};t.wl=[];t.wq=[];t.createAsynchronousCustomTagHandler=function( o,f){var t=this,x,i;if(!f){f=o;o=0;x=t.w}else{if(!t.w[o])t.w[o]={};x=t.wl[o]=t.w[o]}if(typeof(f)!='object')f=[f];for(i=0;i<f.length;i++)if(!x[f[i]])x[f[i]]=new Function('var t=s_c_il['+t._in+ '];t.wq[t.wq.length]={'+(o?'o:"'+o+'",':'')+'f:"'+f[i]+'",a:t.aa(arguments)}')};t.as=function(x){var y=[],i;for(i=1;i<x.length;i++)y[y.length]=x[i];return y};t.s=0;t.contextData={} t.retrieveLightData={};if(!w.s_giq)w.s_giq=[];t._gi=w.s_gi;w.s_gi=new Function('u','var t=s_c_il['+t._in+ '],w=t.w,l=t._il,i,j,x,s;u=u.toLowerCase();if(l)for(j=0;j<2;j++)for(i=0;i<l.length;i++){s=l[i];x=s._c;if((!x||x=="s_c"||(j>0&&x=="s_l"))&&s.oun&&(s.oun==u||(s.fs&&s.sa&&s.fs(s.oun,u)))){'+ 'if(s.sa)s.sa(u);return s}}if(!t.oun){t.sa(u);return t}if(t._gi)return t._gi(u);s=new TagContainerLoader();s.tagContainerName="s_tca_"+w.s_giq.length;s.sa(u);w.s_giq[w.s_giq.length]=s;return s');t.sa= function(u){var t=this;if(t.s)t.s.sa(u);t.un=u;if(!t.oun)t.oun=u;else if(!t.fs(t.oun,u))t.oun+=','+u};t.tq=[];t.track=t.t=function(vo){var t=this,m;if(t.s)return t.s.t(vo);if(!vo)vo={};for(m in t){if( m!='un'||t.u!=t.un)vo[m]=t[m]}t.tq[t.tq.length]=vo;t.lnk=t.linkName=t.linkType='';return '';};t.trackLink=t.tl=function(o,u,n,vo){var t=this;if(t.s)return t.s.tl(o,u,v,vo);t.lnk=o;t.linkType=u t.linkName=n;return t.t(vo)};t.trackLight=function(p,ss,i,vo){var t=this;if(t.s)return t.s.trackLight(p,ss,i,vo);t.lightProfileID=p;t.lightStoreForSeconds=ss;t.lightIncrementBy=i;return t.t(vo)} t.lmq=[];t.loadModule=function(n,u,d){var t=this;if(t.s)return t.s.loadModule(n,u,d);t.lmq[t.lmq.length]={n:n,u:u,d:d};return 0};t.ml=[];t.mmq=[];t.mo=function(m,f){var t=this,i;t.ml[m]=t[m]={};if(f) for(i=0;i<f.length;i++)t[m][f[i]]=new Function('var t=s_c_il['+t._in+'];t.mmq[t.mmq.length]={m:"'+m+'",f:"'+f[i]+'",a:t.aa(arguments)}')};t.mo('Media',['open','play','stop','close','track']);t.mo( 'Survey',['launch']);t.mci=[];t.mn=[];t.mc=function(n,m,p,k){var t=this,b,l=0;if(typeof(mboxFactoryDefault)=='undefined'||t.d.getElementById(m)==null)return;if(!mboxFactoryDefault.isEnabled()){ clearInterval(t.mci[k]);t.mt(true);return}if(typeof(mboxFactoryDefault.get(t.mn[0],0))!='undefined')l=mboxFactoryDefault.get(t.mn[0],0).isShown();if(k==0||l){clearInterval(t.mci[k]);b= mboxFactoryDefault.create(n,p.split("&"));if(b)b.load()}};if(!w.mboxCreate&&!w.mboxDefine&&!w.mboxUpdate){w.mboxVersion='mini';if(!t.d.getElementById('mboxScriptContainer'))t.d.write( '<div id="mboxScriptContainer" style="display:none;visibility:hidden;"></div><style>.mboxDefault{visibility:hidden;}</style>');t.mt=function(f){var t=this,i,j,d;if(typeof(mboxFactoryDefault)== 'undefined'||f){for(i in t.mci)clearInterval(t.mci[i]);d=(t.d.getElementsByClassName)?t.d.getElementsByClassName('mboxDefault'):t.d.getElementsByTagName('div');for(j in d)if(d[j].className== "mboxDefault")d[j].style.visibility="visible"}};t.mpi={};t.mp=function(x,m){var t=this;t.mpi[x]=setInterval(function(){if(typeof(mboxFactoryDefault)==='undefined')return;m();clearInterval(t.mpi[x])}, 13)};w.mboxCreate=function(n){var j=0,i,m,p,k;for(i in t.mn)if(t.mn[i]==n)j++;t.mn[t.mn.length]=n;m='mboxMarker-default-'+n+'-'+j;t.d.write('<div id="'+m+ '" style="visibility:hidden;display:none"> </div>');p=t.as(arguments).join("&");k=t.mci.length;t.mci[k]=setInterval(function(){t.mc(n,m,p,k);},5)};w.mboxDefine=function(d,n){var a=t.as(arguments) t.mp('define_'+n,function(){mboxFactoryDefault.create(n,a,d);})};w.mboxUpdate=function(n){var a=t.as(arguments),x;x='update_'+n;t.mpi[x]=setInterval(function(){if(typeof(mboxFactoryDefault)=== 'undefined'||typeof(mboxFactoryDefault.get(n))==='undefined')return;mboxFactoryDefault.update(n,a);clearInterval(t.mpi[x]);},13)};w.mboxLoadSCPlugin=function(s){(function(){if(typeof( mboxFactoryDefault)==='undefined'||typeof(mboxExternalLoadSCPlugin)==='undefined'||(s._c=='s_l'&&!s.s)){setTimeout(arguments.callee,19);return}if(s._c=='s_l')s=s.s;mboxExternalLoadSCPlugin(s)})()};}}
好卑鄙无耻的中国电信深圳宽带！
以后见一次，我就发一次，盼望早点对这些垄断行业进行惩罚。以及引进民资，让你们这些狗日的国企去死！
谁来惩治一下可恶的垄断企业，可恶的国企啊！