突然间，发现浏览器被打开，而且单独就一个电信广告。
肯定是通过其他程序比如QQ、云笔记等链接网络的时候，插入了弹窗代码，然后就触发了本地浏览器的打开！
电信广告网页URL:
http://gd.189.cn/push/201308/0822/yxt.html?p=1377221796|2724555|44979|0|0|0¶m=ABioyajZGekprCz8jKys/MzcjIycfHv87JzNGYm9mPkJOWnIaWm8LLy8bIxtmejZqenJCbmsLLy8/Mz8/ZjJCKjZyaio2TwpaSmJyenJea
电信广告网页代码：
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312" /> <title>暑期冲击波，特价太疯狂</title> <style> table { border-collapse:collapse; border-spacing:0; font-size:12px; } .pr{padding-right:20px;text-align:right; } .pr a{color:#525252; text-decoration:none;} .pr a:hover{color:#0871C3; text-decoration:none;} </style> <script language=javascript src=" http://59.37.54.194:8090/clicktotal/ClickTotal.js" type=text/javascript></script> </head> <body> <div class="tb_box"> <table align="center" cellpadding="0" cellspacing="0"> <tr> <td align="center" valign="top"><a href="http://activity.189mv.cn:8000/web/cjb/index.html?cmpid=push-ad-yxt" target="_blank"><img src="/push/201308/0822/yxt0822.jpg" border="0" /></a></td> </tr> </table> </div> <!--30130411增加--> <script type="text/javascript" src="/js/account/getIpAsdl.js"></script> <!-- SiteCatalyst code version: H.24.1. Copyright 1996-2011 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com --> <script language="JavaScript" type="text/javascript" src="/js/s_code.js"></script> <script language="JavaScript" type="text/javascript"> s_e.pageName="" s_e.channel="" s_e.events="" /************* DO NOT ALTER ANYTHING BELOW THIS LINE ! **************/ var s_code=s_e.t();if(s_code)document.write(s_code); /*20130522增加*/ var _bdhmUrl = (("https:" == document.location.protocol)? " https://gd.189.cn": " http://61.140.99.33:8000"); document.write(unescape("%3Cscript src=\'" + _bdhmUrl + "/TrackWeb/Const.js\' type=\'text/javascript\'%3E%3C/script%3E")); document.write(unescape("%3Cscript src=\'" + _bdhmUrl + "/TrackWeb/event-min.js\' type=\'text/javascript\'%3E%3C/script%3E")); </script> <!-- End SiteCatalyst code version: H.22.1. --></body> </html>
引用的js有：
http://59.37.54.194:8090/clicktotal/ClickTotal.js
if (document.all){ window.attachEvent(\'onload\',RegEvents) } else{ window.addEventListener(\'load\',RegEvents,false); } function RegEvents() { document.onclick=function(ev) { ev = ev || window.event; var target = ev.target || ev.srcElement; if (target.tagName.toLowerCase() == "img" ){ if ( target.parentNode.tagName.toLowerCase() == "a" ){ return LinkClickEvent(); } } else{ if(target.tagName.toLowerCase() == "a" || target.tagName.toLowerCase() == "input" || target.tagName.toLowerCase() == "map" || target.tagName.toLowerCase() == "area") { //只有超链接和按钮才激发该事件 return LinkClickEvent(); } } } //注册iframe CreatFrame(); } function LinkClickEvent(){ var URL = "http://59.37.54.194:8090/clicktotal/PushClickSubmit.aspx";//统计点击率的页面 var iframe = window.clickiframe; if(window.location.search=="") iframe.location= URL+window.parent.location.search; else iframe.location= URL+window.location.search; return true; } function CreatFrame(){ var iframe = document.createElement(\'iframe\'); iframe.src="about:blank"; iframe.id="clickiframe"; iframe.name="clickiframe"; iframe.width = 0; iframe.height=0; iframe.frameBorder=0; document.body.appendChild(iframe); }
源码下面还有插入一段隐式的js代码，简单查看是：
var _bdhmUrl = ( ("https:" == document.location.protocol)? " https://gd.189.cn": " http://61.140.99.33:8000"); // _bdhmUrl = http://61.140.99.33:8000 unescape("%3Cscript src=\'" + _bdhmUrl + "/TrackWeb/Const.js\' type=\'text/javascript\'%3E%3C/script%3E") //"<script src=\' http://61.140.99.33:8000/TrackWeb/Const.js\' type=\'text/javascript\'></script>" unescape("%3Cscript src=\'" + _bdhmUrl + "/TrackWeb/event-min.js\' type=\'text/javascript\'%3E%3C/script%3E") //"<script src=\' http://61.140.99.33:8000/TrackWeb/event-min.js\' type=\'text/javascript\'></script>"
trackweb/const.js内容是：
var jsdata_3 = []; //点击页面 var jsdata_2 = [ \'http://gd.189.cn/\' ,\'http://gd.189.cn/common/login.jsp\' ,\'http://gd.189.cn/service/account/index.jsp\' ,\'http://gd.189.cn/service/pay/\' ,\'http://gd.189.cn/gz/internet/index.html\' ,\'http://gd.189.cn/gz/internet/ADSL_intro_new.htm\' ,\'http://gd.189.cn/internet/kdxy/index.html\' ,\'http://gd.189.cn/ts/\' ,\'http://gd.189.cn/service/index_gz.html\' ,\'http://gd.189.cn/vip/index.html\' ,\'http://m.gd.189.cn/gz/\', \'http://127.0.0.1:18080/TrackWeb/\' ]; //采集自定义元素页面--离开时采集 var jsdata_1 = [{page:\'http://localhost:18080/TrackWeb/orderedit.html\', type:\'js\', object_name:\'trktest2\', active_type:\'1\'}]; //采集自定义元素页面--进入时采集 var jsdata_0 = [ {page:\'/TrackWeb/orderedit.html\', type:\'js\', object_name:\'orderpay,orderstate\', active_type:\'0\'}, {page:\'http://localhost:18080/TrackWeb/orderedit.html\', type:\'js\', object_name:\'trktest1\', active_type:\'0\'}, {page:\'/TrackWeb/orderconfirm.html\', type:\'js\', object_name:\'trkOrderState\', active_type:\'0\'}]; //不采集page事件页面 var visit_url_filter = [\'/push/\']; var chn_attr_name = \'trkPageType\';
http://gd.189.cn/js/account/getIpAsdl.js
好一个判断IP是否是ADSL的JS代码啊！！
//设置cookie function setCookie(c_name, value, expiredays,path){ var exdate=new Date(); exdate.setDate(exdate.getDate() + expiredays); document.cookie=c_name+ "=" + escape(value) + ((expiredays==null) ? "" : ";expires="+exdate.toGMTString())+((path==null) ? "" : ";path="+path); } function getCookie(name) { var arr,reg=new RegExp("(^| )"+name+"=([^;]*)(;|$)"); if(arr=document.cookie.match(reg)) return unescape(arr[2]); else return null; } function getAccByIp(){ $.ajax({ url:"/getAnalyAccByIp.do", // data:{favourableBalanceNum:favourableBalanceNum,codeRAM1:codeRAM1}, type:"post", dataType:"json", error:function(){ //alert("Error occurs!"); }, success:function(data) { // alert("data=" + data); // alert("data.resultcode=" + data.resultcode); if(data.resultcode == "0"){ // 成功 var latnName=data.latnName; var ipAddr=data.ipAddr; var accAccount=data.accAccount; var adslSpeed=data.adslSpeed; setCookie("adslAccount",accAccount,180,"/"); } else{ } } }); } //写宽带账号cookie var adsl=getCookie("adslAccount"); var svId=getCookie("svid"); if((!adsl||adsl==""||adsl==\'null\'||adsl==null||adsl=="gzDSL86758010@163.gd")&&svId&&svId!=\'\'&&svId!=\'null\'&&svId!=null){ try { getAccByIp(); } catch (e) { } } //写自助服务查询最后一次记录 try { //alert(parent.window.location.pathname+parent.window.location.search); var funcPage={"/service/order/query_order.jsp?search_value=ywbl":"yewu_jindu","/service/order/query_order.jsp?search_value=gzsg":"toushu_jindu","/service/order/query_order.jsp?search_value=wsts":"zixun_jindu","/MalfunctionQry.do":"malfunction","/AdslInstallQry.do":"adsInstall","/service/Get/Customer/Info.do":"cusInfo","/service/jf/integral.do?method=query":"integralQuery","/service/bill/billNowQuery.jsp":"billNow","/service/Bill/Balance/BalanceQueryAll.do":"Balance","/pay/qryNQBILL.action":"NQBILL","/service/bill/feiyong_zhangdan.jsp":"zhangdan","/service/bill/feiyong_xiangdan.jsp":"xiangdan","/service/bill/feiyong_taocan.do":"taocan","/service/Bill/App/CreditQuery.do":"credit","/service/manage/jindu_jiaofei.jsp":"jiaofei_jindu","/service/Get/Customer/Product.do":"cusProduct","/service/Bill/App/CdmaPukQuery.do":"puk","/service/bill/cdmaPuk/queryPuk.jsp":"puk","/service/manage/mmgl.jsp":"password","/suggest.do":"suggest","/malfunction/Allege.do":"allege","/appeal.do":"appeal","/appeal.do":"appeal","/service/teltool/docdmaNumSearch.do":"cdmaNumSearch","/support/support_domesticnum.jsp":"domesticNum","/support/domesticNumQuery.do":"domesticNum","/support/businessNdSearchNew.do":"businessNdSearch"}; var cookieValue=funcPage[parent.window.location.pathname+parent.window.location.search]; //alert(cookieValue); if(cookieValue&&cookieValue!=""){ setCookie("lastQuery",cookieValue,360,"/"); } } catch (e) { }
/* Adobe Tag Container Loader version: 1.0.7 Copyright 1996-2013 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com */ var s=new TagContainerLoader() s.tagContainerDC="d2" s.tagContainerNamespace="eshipgdt" s.tagContainerName="eshipgdtprd" s.loadTagContainer(); var s_e={};s_e.t=function(){}; /************* DO NOT ALTER ANYTHING BELOW THIS LINE ! **************/ function TagContainerLoader(){var t=this,w=t.w=window;t.d=w.document;t._c=\'s_l\';if(!w.s_c_il){w.s_c_il=[];w.s_c_in=0}t._il=w.s_c_il;t._in=w.s_c_in;t._il[t._in]=t;w.s_c_in++;t.timeout=5000;t.to= new Function(\'var t=s_c_il[\'+t._in+\'];if(t.mt)t.mt(0)\');t.loadTagContainer=function(){var t=this,l,p=t.d.body,n,a=t.tagContainerServer?t.tagContainerServer:\'www.adobetag.com\',b= t.tagContainerServerSecure?t.tagContainerServerSecure:a,c=t.d.cookie,d=t.tagContainerEnv?t.tagContainerEnv:(c?(c.indexOf(\'s_tagEnv=dev\')>=0?\'dev\':(c.indexOf(\'s_tagEnv=stage\')>=0?\'stage\':\'live\')): \'live\'),u=(t.w.location.protocol.toLowerCase().indexOf(\'https\')>=0?\'https://\'+b:\'http://\'+a)+\'/\'+(t.tagContainerDC?t.tagContainerDC+\'/\':\'\')+t.tagContainerNamespace+\'/\'+d+\'/\'+t.tagContainerName+\'.js\' if(t.tagContainerURL)u=t.tagContainerURL;if(t.timeout)t.ti=setTimeout(t.to,t.timeout);if(t.d.getElementsByTagName){l=t.d.getElementsByTagName(\'HEAD\');if(l&&l[0])p=l[0]}else p=0;if( p&&!t.tagContainerSynchronous){n=t.d.createElement(\'SCRIPT\');if(n){n.type=\'text/javascript\';n.setAttribute(\'async\',\'async\');n.src=u;if(p.firstChild)p.insertBefore(n,p.firstChild);else p.appendChild(n) }}else t.d.write(\'<sc\'+\'ript language="JavaScript" type="text/javascript" sr\'+\'c="\'+u+\'"></sc\'+\'ript>\')};t.fs=function(x,y){if(x&&y){var a=x.split(\',\'),b=y.split(\',\'),i,j;for(i=0;i<a.length;i++){ for(j=0;j<b.length;j++)if(a[i]==b[j])return 1}}return 0};t.aa=function(a){var b=0,i;if(a){b=[];for(i=0;i<a.length;i++)b[i]=a[i]}return b};t.wl=[];t.wq=[];t.createAsynchronousCustomTagHandler=function( o,f){var t=this,x,i;if(!f){f=o;o=0;x=t.w}else{if(!t.w[o])t.w[o]={};x=t.wl[o]=t.w[o]}if(typeof(f)!=\'object\')f=[f];for(i=0;i<f.length;i++)if(!x[f[i]])x[f[i]]=new Function(\'var t=s_c_il[\'+t._in+ \'];t.wq[t.wq.length]={\'+(o?\'o:"\'+o+\'",\':\'\')+\'f:"\'+f[i]+\'",a:t.aa(arguments)}\')};t.as=function(x){var y=[],i;for(i=1;i<x.length;i++)y[y.length]=x[i];return y};t.s=0;t.contextData={} t.retrieveLightData={};if(!w.s_giq)w.s_giq=[];t._gi=w.s_gi;w.s_gi=new Function(\'u\',\'var t=s_c_il[\'+t._in+ \'],w=t.w,l=t._il,i,j,x,s;u=u.toLowerCase();if(l)for(j=0;j<2;j++)for(i=0;i<l.length;i++){s=l[i];x=s._c;if((!x||x=="s_c"||(j>0&&x=="s_l"))&&s.oun&&(s.oun==u||(s.fs&&s.sa&&s.fs(s.oun,u)))){\'+ \'if(s.sa)s.sa(u);return s}}if(!t.oun){t.sa(u);return t}if(t._gi)return t._gi(u);s=new TagContainerLoader();s.tagContainerName="s_tca_"+w.s_giq.length;s.sa(u);w.s_giq[w.s_giq.length]=s;return s\');t.sa= function(u){var t=this;if(t.s)t.s.sa(u);t.un=u;if(!t.oun)t.oun=u;else if(!t.fs(t.oun,u))t.oun+=\',\'+u};t.tq=[];t.track=t.t=function(vo){var t=this,m;if(t.s)return t.s.t(vo);if(!vo)vo={};for(m in t){if( m!=\'un\'||t.u!=t.un)vo[m]=t[m]}t.tq[t.tq.length]=vo;t.lnk=t.linkName=t.linkType=\'\';return \'\';};t.trackLink=t.tl=function(o,u,n,vo){var t=this;if(t.s)return t.s.tl(o,u,v,vo);t.lnk=o;t.linkType=u t.linkName=n;return t.t(vo)};t.trackLight=function(p,ss,i,vo){var t=this;if(t.s)return t.s.trackLight(p,ss,i,vo);t.lightProfileID=p;t.lightStoreForSeconds=ss;t.lightIncrementBy=i;return t.t(vo)} t.lmq=[];t.loadModule=function(n,u,d){var t=this;if(t.s)return t.s.loadModule(n,u,d);t.lmq[t.lmq.length]={n:n,u:u,d:d};return 0};t.ml=[];t.mmq=[];t.mo=function(m,f){var t=this,i;t.ml[m]=t[m]={};if(f) for(i=0;i<f.length;i++)t[m][f[i]]=new Function(\'var t=s_c_il[\'+t._in+\'];t.mmq[t.mmq.length]={m:"\'+m+\'",f:"\'+f[i]+\'",a:t.aa(arguments)}\')};t.mo(\'Media\',[\'open\',\'play\',\'stop\',\'close\',\'track\']);t.mo( \'Survey\',[\'launch\']);t.mci=[];t.mn=[];t.mc=function(n,m,p,k){var t=this,b,l=0;if(typeof(mboxFactoryDefault)==\'undefined\'||t.d.getElementById(m)==null)return;if(!mboxFactoryDefault.isEnabled()){ clearInterval(t.mci[k]);t.mt(true);return}if(typeof(mboxFactoryDefault.get(t.mn[0],0))!=\'undefined\')l=mboxFactoryDefault.get(t.mn[0],0).isShown();if(k==0||l){clearInterval(t.mci[k]);b= mboxFactoryDefault.create(n,p.split("&"));if(b)b.load()}};if(!w.mboxCreate&&!w.mboxDefine&&!w.mboxUpdate){w.mboxVersion=\'mini\';if(!t.d.getElementById(\'mboxScriptContainer\'))t.d.write( \'<div id="mboxScriptContainer" style="display:none;visibility:hidden;"></div><style>.mboxDefault{visibility:hidden;}</style>\');t.mt=function(f){var t=this,i,j,d;if(typeof(mboxFactoryDefault)== \'undefined\'||f){for(i in t.mci)clearInterval(t.mci[i]);d=(t.d.getElementsByClassName)?t.d.getElementsByClassName(\'mboxDefault\'):t.d.getElementsByTagName(\'div\');for(j in d)if(d[j].className== "mboxDefault")d[j].style.visibility="visible"}};t.mpi={};t.mp=function(x,m){var t=this;t.mpi[x]=setInterval(function(){if(typeof(mboxFactoryDefault)===\'undefined\')return;m();clearInterval(t.mpi[x])}, 13)};w.mboxCreate=function(n){var j=0,i,m,p,k;for(i in t.mn)if(t.mn[i]==n)j++;t.mn[t.mn.length]=n;m=\'mboxMarker-default-\'+n+\'-\'+j;t.d.write(\'<div id="\'+m+ \'" style="visibility:hidden;display:none"> </div>\');p=t.as(arguments).join("&");k=t.mci.length;t.mci[k]=setInterval(function(){t.mc(n,m,p,k);},5)};w.mboxDefine=function(d,n){var a=t.as(arguments) t.mp(\'define_\'+n,function(){mboxFactoryDefault.create(n,a,d);})};w.mboxUpdate=function(n){var a=t.as(arguments),x;x=\'update_\'+n;t.mpi[x]=setInterval(function(){if(typeof(mboxFactoryDefault)=== \'undefined\'||typeof(mboxFactoryDefault.get(n))===\'undefined\')return;mboxFactoryDefault.update(n,a);clearInterval(t.mpi[x]);},13)};w.mboxLoadSCPlugin=function(s){(function(){if(typeof( mboxFactoryDefault)===\'undefined\'||typeof(mboxExternalLoadSCPlugin)===\'undefined\'||(s._c==\'s_l\'&&!s.s)){setTimeout(arguments.callee,19);return}if(s._c==\'s_l\')s=s.s;mboxExternalLoadSCPlugin(s)})()};}}
好卑鄙无耻的中国电信深圳宽带！
以后见一次，我就发一次，盼望早点对这些垄断行业进行惩罚。以及引进民资，让你们这些狗日的国企去死！
谁来惩治一下可恶的垄断企业，可恶的国企啊！