瑞星网站每日安全播报(2009年6月10日) bbs.ikaka.com

networkedition - 2009-6-10 11:11:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不在分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://bbs.fige.com.cn/440100/viewtopic.php?p=1444(飞鸽传书网）
2. http://jxfc.jx163.com/html/jiangxifucai/gedicaixun/200902/05-30197.html(江西福利彩票网 - 江西热线)
3. http://love.cnyw.net/party/(义乌交友中心--义乌热线交友频道)
4. http://www.21hdtv.com/Html/Article/News/Business/20080326/2008032620964_10.html(世纪电器网_中国家电网购第一门户)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

networkedition - 2009-6-10 11:11:00

Log is generated by FreShow.
[wide]http://bbs.fige.com.cn/440100/viewtopic.php?p=1444
[script]http://wwwworldweb.com/scr.js
[frame]http://wwwdegrees.info/index.php
[frame]http://wwwdegrees.info/pdf.php?id=129
[object]http://wwwdegrees.info/load.php?id=129&spl=4
[frame]http://wwwdegrees.info/pdf.php?id=129
[frame]http://wwwdegrees.info/pdf.php?id=129
[script]http://wwwworldweb.com/scr.js
[script]http://wwwworldweb.com/scr.js
[script]http://wwwworldweb.com/scr.js
[script]http://wwwworldweb.com/scr.js
[script]http://wwwworldweb.com/scr.js
[script]http://lm.35.com/counter/counter.js

networkedition - 2009-6-10 11:13:00

Log is generated by FreShow.
[wide]http://jxfc.jx163.com/html/jiangxifucai/gedicaixun/200902/05-30197.html
[script]http://www.jx163.com/public/JS/head_1024_NoAd.js
[frame]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|top_banner&db=jxdxinfo&border=0&local=yes
[script]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|top_banner&db=jxdxinfo&local=yes&js=on
[frame]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|article_left&db=jxdxinfo&border=0&local=yes
[script]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|article_left&db=jxdxinfo&local=yes&js=on
[frame]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|google_left&db=jxdxinfo&border=0&local=yes
[script]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|google_left&db=jxdxinfo&local=yes&js=on
[script]http://jxfc.jx163.com//plus/count.php?aid=30197&mid=&view=yes
[script]http://jxdxinfo.allyes.com/main/adfshow?user=jxdxinfo|jxfc.jx163|google_article&db=jxdxinfo&border=0&local=yes&js=ie
[script]http://e6t.3322.org/c.js
[script]http://e6t.3322.org/c.js
[script]http://3%62omb.com/c.js
[frame]http://www.2009pppp.cn/llsg/2.htm
[script]http://js.tongji.cn.yahoo.com/908507/ystat.js
[script]http://dt.tongji.cn.yahoo.com/ystat.do?unit_id=908507&uv=29564748992259193452&nuv=0&cna=&cg=0&mid=0&mmland=0&ade=0&adtm=0&sttm=0&cpa=0&ss=2113699172&usn=14&ec=1&ref=http%3A//www.china-lottery.net/indexnew.asp&url=http%3A//www.china-lottery.net/news/newsshow.asp%3Fid%3D18810%26title%3Dcsxw&dom=china-lottery.net&ha=1720&ft=0&nac=Microsoft%20Internet%20Explorer&agt=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%3B%20SV1%29&clr=32-bit&scr=1024x768&lng=zh-cn&jvm=1&flu=10.0&tm=1233799213&tc=1034fe68&ut=0&cnu=0.48075319968659913
[script]http://3%62omb.com/c.js
[frame]http://l3ie445b.cn/a/a100.htm
[frame]http://l3ie445b.cn/a/index.htm
[frame]http://l3ie445b.cn/a/flash.htm
[frame]http://l3ie445b.cn/a/a44.htm
[script]http://l3ie445b.cn/a/14.js
[object]http://www.f21f2.com/wm/14.exe
[frame]http://l3ie445b.cn/a/office.htm
[script]http://l3ie445b.cn/a/of.js
[object]http://www.f21f2.com/wm/of.exe
[frame]http://l3ie445b.cn/a/02.htm
[script]http://l3ie445b.cn/a/set.js
[object]http://www.f21f2.com/wm/02.exe
[frame]http://l3ie445b.cn/a/pef.pdf
[object]http://www.f21f2.com/wm/pd.exe
[script]http://l3ie445b.cn/a/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[frame]http://l3ie445b.cn/a/a100.htm
[script]http://3%62omb.com/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"
[frame]http://www.2009pppp.cn/llsg/2.htm
[script]http://js.tongji.cn.yahoo.com/908507/ystat.js
[script]http://dt.tongji.cn.yahoo.com/ystat.do?unit_id=908507&uv=29564748992259193452&nuv=0&cna=&cg=0&mid=0&mmland=0&ade=0&adtm=0&sttm=0&cpa=0&ss=2113699172&usn=15&ec=1&ref=http%3A//www.china-lottery.net/indexnew.asp&url=http%3A//www.china-lottery.net/news/newsshow.asp%3Fid%3D18810%26title%3Dcsxw&dom=china-lottery.net&ha=1720&ft=0&nac=Microsoft%20Internet%20Explorer&agt=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%3B%20SV1%29&clr=32-bit&scr=1024x768&lng=zh-cn&jvm=1&flu=10.0&tm=1233799213&tc=1034fe68&ut=0&cnu=0.16880187810088182
[script]http://www.jx163.com/public/JS/footer_fc_1024.js

networkedition - 2009-6-10 11:14:00

Log is generated by FreShow.
[wide]http://love.cnyw.net/party/
[script]http://bbc.ch.ma/js.js?google_ad_format=50x90_as
[frame]http://bbc.ch.ma/http:\/\/tv.cztv.tv\/cc\/360.htm
[frame]http://tv.cztv.tv/cc/x.htm
[script]http://tv.cztv.tv/cc/all.css
[frame]http://tv.cztv.tv/cc/3.htm
[object]http://tv.cztv.tv/cc/3.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/4.htm
[object]http://tv.cztv.tv/cc/2.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/1.htm
[script]http://tv.cztv.tv/cc/1.css
[object]http://ccav.sarl.tk/vc.css
[script]http://tv.cztv.tv/cc/15.js
[script]http://tv.cztv.tv/cc/16.js
[frame]http://tv.cztv.tv/cc/office.htm
[object]http://tv.cztv.tv/cc/office.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/newlz.htm
[object]http://tv.cztv.tv/cc/newlz.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/s.htm
[object]http://tv.cztv.tv/cc/office.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/bf.htm
[script]http://tv.cztv.tv/cc/2.css
[object]http://ccav.sarl.tk/vc.css
[script]http://tv.cztv.tv/cc/bf.js
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/cx.htm
[object]http://tv.cztv.tv/cc/2.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/2.htm
[object]http://tv.cztv.tv/cc/2.css
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/pp.htm
[frame]http://tv.cztv.tv/cc/pp.pdf
[object]http://ccav.sarl.tk/vc.css
[frame]http://tv.cztv.tv/cc/7.htm
[script]http://tv.cztv.tv/cc/7.css
[object]http://ccav.sarl.tk/vc.css
[script]http://js.tongji.cn.yahoo.com/806392/ystat.js

networkedition - 2009-6-10 11:15:00

Log is generated by FreShow.
[wide]http://www.21hdtv.com/Html/Article/News/Business/20080326/2008032620964_10.html
[script]http://www.21hdtv.com/js/search.js
[script]http://www.21hdtv.com/js/jquery132min.js
[script]http://shop.21hdtv.com/Jscript/kftooltip.js
[script]http://www.21hdtv.com/shop/Hits.aspx?NewsIDE=2008032620964
[script]http://www.21hdtv.com/js/newstop.js
[script]http://www.21hdtv.com/webadmin/Template/oldNewsDetailTop.js
[script]http://3b3.org/c.js
[frame]http://l3ie445b.cn/a/a100.htm
[frame]http://l3ie445b.cn/a/index.htm
[frame]http://l3ie445b.cn/a/flash.htm
[frame]http://l3ie445b.cn/a/a44.htm
[script]http://l3ie445b.cn/a/14.js
[object]http://www.f21f2.com/wm/14.exe
[frame]http://l3ie445b.cn/a/office.htm
[script]http://l3ie445b.cn/a/of.js
[object]http://www.f21f2.com/wm/of.exe
[frame]http://l3ie445b.cn/a/02.htm
[script]http://l3ie445b.cn/a/set.js
[object]http://www.f21f2.com/wm/02.exe
[frame]http://l3ie445b.cn/a/pef.pdf
[object]http://www.f21f2.com/wm/pd.exe
[script]http://l3ie445b.cn/a/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[frame]http://l3ie445b.cn/a/a100.htm
[script]http://3b3.org/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://www.51mdq.com/lookjs/13.js
[script]http://www.51mdq.com/js/foot.js

13岁帅哥 - 2009-6-10 22:25:00

恐怖！

小脸 - 2009-6-11 10:38:00

不值这么多!

xuminV - 2009-6-11 12:29:00

只要平时的时候注意这些网站的名称就可以了。

singerh - 2009-6-15 20:29:00

那个02.exe貌似我是中过的，但是后来我找到线程路径然后把所有的,exe文件都删了后来就好了。

瑞星卡卡安全论坛