瑞星网站每日安全播报(2009年7月10日) bbs.ikaka.com

networkedition - 2009-7-10 14:31:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://app.hexun.com/(和讯)
2. http://active.zgjrw.com/（中国金融网－全球最大的中文金融门户）
3. http://www.20ju.com/(草根网 - IT资讯精读 )
4. http://114.shangdu.com/(商都网 - 114搜号 - 全新大黄页)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

networkedition - 2009-7-10 14:32:00

http://app.hexun.com/palz/tie.aspx?t_id=140&page=727
|->http://app.hexun.com/palz/js/check.js
|->http://app.hexun.com/palz/images/167x96.swf
|->http://app.hexun.com/hl/ad.js
|->http://www.glintsun.com/include/fs.asp
|->http://www.glintsun.com/include/xxx.html
| |->http://www.glintsun.com/include/darkst.png
|->http://qhjjyy.7766.org/akqhuc/cc.htm?333
| |->http://qhjjyy.7766.org/avastindex/cc1w.htm
| | |->http://qhjjyy.7766.org/avastindex/just.txt
| | |-> http://bymami.8866.org/avast/daye360.exe
| |->http://js.tongji.linezing.com/1186652/tongji.js
|->http://www.glintsun.com/include/05.js
|->http://www.glintsun.com/include/06.js
|->http://www.glintsun.com/include/s.asp
|->http://js.users.51.la/2964764.js
|->http://icon.ajiang.net/icon_0.gif

networkedition - 2009-7-10 14:33:00

Log is generated by FreShow.
[wide]http://active.zgjrw.com/News/2009527/index/057351512800.html
[script]http://www.zgjrw.com/Expand/Js/zgjrwflash.js
[script]http://active.zgjrw.com/News/2009527/index/
[script]http://active.zgjrw.com/expand/Count/NewsCount.asp?NewsId=/News/2009527/index/057351512800.html
[frame]http://active.zgjrw.com/expand/Readiframe/banner.html
[script]http://active.zgjrw.com/Expand/Js/zgjrwflash.js
[frame]http://active.zgjrw.com/expand/Readiframe/Readright1_jd.html
[script]http://active.zgjrw.com/Expand/Js/Face.js
[frame]http://www.weizuyao.com/gglink/links.asp
[script]http://%61%61%61%2E%68%61%6F%31%37%31%37%38%2E%63%6F%6D/tj.js
[frame]http://4reghr.8866.org/aa/a3.htm?hxhx
[frame]http://4reghr.8866.org/aa/index.htm
[script]http://4reghr.8866.org/aa/go.jpg
[object]http://z999hu.cn/wm/svchost.exe
[script]http://4reghr.8866.org/aa/go1.jpg
[script]http://4reghr.8866.org/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[script]http://js.users.51.la/2856189.js
[frame]http://www.openidea.cn/zgjrw/600-50.html
[frame]http://active.zgjrw.com/expand/Readiframe/Readbottom1_1.html?keyword=%D2%A2%B6%BC%C7%F8%D0%C5%D3%C3%C1%AA%C9%E7&mekey=%D2%A2%B6%BC%C7%F8%D0%C5%D3%C3%C1%AA%C9%E7+%C9%EE%C8%EB%D1%A7%CF%B0%CA%B5%BC%F9%BF%C6%D1%A7%B7%A2%D5%B9%B9%DB%BB%EE%B6%AF
[frame]http://active.zgjrw.com/expand/Readiframe/Readright1_1.html?Channel=148
[script]http://www.zgjrw.com/ZL2.js
[script]http://active.zgjrw.com/Expand/Js/Expand.js

networkedition - 2009-7-10 14:34:00

Log is generated by FreShow.
[wide]http://www.20ju.com/content/V26231.htm
[script]http://tt99lov.cn/0.js
[frame]http://bybyybyb.com/aa/a3.htm?llll
[frame]http://bybyybyb.com/aa/index.htm
[script]http://bybyybyb.com/aa/go.jpg
[object]http://z999hu.cn/wm/svchost.exe
[script]http://bybyybyb.com/aa/go1.jpg
[script]http://bybyybyb.com/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[script]http://tt99lov.cn/\"http:\/\/count29.51yes.com\/click.aspx?id=298952206&logo=12\"
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/js/caogen.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/js/Hit/26231.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://www.20ju.com/js/Msg.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://www.20ju.com/js/leftbottom.js
[script]http://www.google.com/coop/cse/brand?form=cse-search-box&lang=zh-Hans
[script]http://www.20ju.com/js/right.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/content/ht</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/content/</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/content/ht</font
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/content/htt</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.20ju.com/content/http:</a
[script]http://tt99lov.cn/0.js
[script]http://tt99</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://tt99</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://t</a
[script]http://tt99lov.cn/0.js
[script]http://tt99lov.cn/0.js
[script]http://www.google-analytics.com/urchin.js

networkedition - 2009-7-10 14:35:00

Log is generated by FreShow.
[wide]http://114.shangdu.com/ShowCop.asp?CopID=22023
[script]http://3b3.org/c.js
[frame]http://1314bblc.com/aa/a100.htm
[frame]http://1314bblc.com/aa/index.htm
[script]http://1314bblc.com/aa/go.jpg
[object]http://z999hu.cn/wm/svchost.exe
[script]http://1314bblc.com/aa/go1.jpg
[script]http://1314bblc.com/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[script]http://3b3.org/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[frame]http://www.shangdu.com/newfile2007/sdpagetop.html
[script]http://js.tongji.cn.yahoo.com/842368/ystat.js
[frame]http://www.shangdu.com/newfile2007/sou.html
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[frame]http://114.shangdu.com/
[frame]http://114.shangdu.com/

Mr辉少 - 2009-7-11 0:28:00

位5①4为他

星罗棋布 - 2009-7-11 0:57:00

只下载，不运行~~:kaka12:

星罗棋布 - 2009-7-11 1:00:00

试了几个都已经打不开了~~

黛玉儿 - 2009-7-13 2:28:00

可不是吗？昨天一天都郁闷死了，皆因打开了一个QQ恶意网址，让病毒乘虚而入了，严重死机！唯有重装系统才终于OK了！

朋♂友 - 2009-7-13 12:41:00

感谢提供:kaka1:

瑞星卡卡安全论坛