瑞星网站每日安全播报(2009年7月17日) bbs.ikaka.com

networkedition - 2009-7-17 13:04:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://chinese.xmu.edu.cn/(厦门大学中文系)
2. http://cz.zufe.edu.cn/（浙江财经学院）
3. http://dept.cugb.edu.cn/(中国地质大学 )
4. http://logistics.sjtu.edu.cn/(上海交通大学)
5. http://shmc.shmu.edu.cn/(复旦大学上海医学院)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

networkedition - 2009-7-17 13:05:00

Log is generated by FreShow.
[wide]http://chinese.xmu.edu.cn/
[script]http://chinese.xmu.edu.cn/Scripts/AC_RunActiveContent.js
[script]http://chinese.xmu.edu.cn/mm_menu.js
[script]http://chinese.xmu.edu.cn/new.asp?order=click&shu=21
[script]http://chinese.xmu.edu.cn/include/cnt.asp
[script]http://chinese.xmu.edu.cn/news.asp?typeid=10&shu=40
[script]http://www.xsdg.cn/n.js
[frame]http://ghbrty.3322.org/a0036159/a03.htm
[frame]http://ghbrty.3322.org/a0036159/new.html
[script]http://ghbrty.3322.org/a0036159/../xnnn.js
[script]http://ghbrty.3322.org/a0036159/../zhin.js
[frame]http://ghbrty.3322.org/a0036159/../../lzz.htm
[script]http://ghbrty.3322.org/a0036159/../../lzz.js
[object]http://liz.8866.org:8808/a/lzz.css
[frame]http://ghbrty.3322.org/a0036159/../../as.htm
[script]http://ghbrty.3322.org/a0036159/../../as.js
[frame]http://ghbrty.3322.org/a0036159/../../bfyy.htm
[script]http://ghbrty.3322.org/a0036159/../../bff.js
[script]http://ghbrty.3322.org/a0036159/../../bf.js
[object]http://liz.8866.org:8808/a/bf.css
[frame]http://ghbrty.3322.org/a0036159/../dir.htm
[script]http://ghbrty.3322.org/a0036159/../og.jpg
[object]http://liz.8866.org:8808/a/dir.css
[script]http://ghbrty.3322.org/a0036159/../go.jpg
[frame]http://ghbrty.3322.org/a0036159/../apple4.htm
[frame]http://ghbrty.3322.org/a0036159/fx.htm
[frame]http://ghbrty.3322.org/a0036159/../active.htm
[frame]http://ghbrty.3322.org/a0036159/../cx.htm
[frame]http://ghbrty.3322.org/a0036159/../real10.htm
[script]http://ghbrty.3322.org/a0036159/../real.js
[object]http://liz.8866.org:8808/a/re.css
[frame]http://ghbrty.3322.org/a0036159/../real11.htm
[script]http://ghbrty.3322.org/a0036159/../realplay.js
[object]http://liz.8866.org:8808/a/real11.css
[script]http://ghbrty.3322.org/a0036159/../wewew.js
[object]http://liz.8866.org:8808/Baidu.cab
[script]http://js.tongji.linezing.com/1170422/tongji.js

networkedition - 2009-7-17 13:05:00

Log is generated by FreShow.
[wide]http://cz.zufe.edu.cn/
[script]http://%63%6B%74%36%2E%63%6E
[frame]http://qwweea.cn/kill.htm?qq
[frame]http://qwweea.cn/360.htm
[script]http://qwweea.cn/go.jpg
[object]http://qwweea.cn/down.exe
[script]http://qwweea.cn/go1.jpg
[script]http://js.tongji.linezing.com/1195242/tongji.js
[script]http://s60.cnzz.com/stat.php?id=1519130&web_id=1519130&show=pic
[frame]http://cz.zufe.edu.cn/WebTop.asp
[frame]http://cz.zufe.edu.cn/imgmove.asp
[frame]http://cz.zufe.edu.cn/cjxw/logo.htm
[script]http://%63%6B%74%36%2E%63%6E

networkedition - 2009-7-17 13:06:00

Log is generated by FreShow.
[wide]http://dept.cugb.edu.cn/clxy/index.asp
[script]http://www.emxdj.com/n.js
[frame]http://ghbrty.3322.org/a0036159/a03.htm
[frame]http://ghbrty.3322.org/a0036159/new.html
[script]http://ghbrty.3322.org/a0036159/../xnnn.js
[script]http://ghbrty.3322.org/a0036159/../zhin.js
[frame]http://ghbrty.3322.org/a0036159/../../lzz.htm
[script]http://ghbrty.3322.org/a0036159/../../lzz.js
[object]http://liz.8866.org:8808/a/lzz.css
[frame]http://ghbrty.3322.org/a0036159/../../as.htm
[script]http://ghbrty.3322.org/a0036159/../../as.js
[frame]http://ghbrty.3322.org/a0036159/../../bfyy.htm
[script]http://ghbrty.3322.org/a0036159/../../bff.js
[script]http://ghbrty.3322.org/a0036159/../../bf.js
[object]http://liz.8866.org:8808/a/bf.css
[frame]http://ghbrty.3322.org/a0036159/../dir.htm
[script]http://ghbrty.3322.org/a0036159/../og.jpg
[object]http://liz.8866.org:8808/a/dir.css
[script]http://ghbrty.3322.org/a0036159/../go.jpg
[frame]http://ghbrty.3322.org/a0036159/../apple4.htm
[frame]http://ghbrty.3322.org/a0036159/fx.htm
[frame]http://ghbrty.3322.org/a0036159/../active.htm
[frame]http://ghbrty.3322.org/a0036159/../cx.htm
[frame]http://ghbrty.3322.org/a0036159/../real10.htm
[script]http://ghbrty.3322.org/a0036159/../real.js
[object]http://liz.8866.org:8808/a/re.css
[frame]http://ghbrty.3322.org/a0036159/../real11.htm
[script]http://ghbrty.3322.org/a0036159/../realplay.js
[object]http://liz.8866.org:8808/a/real11.css
[script]http://ghbrty.3322.org/a0036159/../wewew.js
[object]http://liz.8866.org:8808/Baidu.cab
[script]http://js.tongji.linezing.com/1170422/tongji.js

networkedition - 2009-7-17 13:07:00

Log is generated by FreShow.
[wide]http://logistics.sjtu.edu.cn/cycx/otype.asp?owen1=创业资讯收集
[script]http://%63%6B%74%31%2E%63%6E
[frame]http://qwweea.cn/kill.htm?qq
[frame]http://qwweea.cn/360.htm
[script]http://qwweea.cn/go.jpg
[object]http://qwweea.cn/down.exe
[script]http://qwweea.cn/go1.jpg
[script]http://js.tongji.linezing.com/1195242/tongji.js
[script]http://s60.cnzz.com/stat.php?id=1519130&web_id=1519130&show=pic
[script]http://%63%6B%74%31%2E%63%6E
[script]http://%63%6B%74%36%2E%63%6E
[script]http://%63%6B%74%31%2E%63%6E
[script]http://%63%6B%74%31%2E%63%6E
[script]http://%63%6B%74%36%2E%63%6E
[script]http://cpro.baidu.com/cpro/ui/ui.js
[frame]http://unstat.baidu.com/bdun.bsc?tn=bdwxl_superaoyi_pg&cv=0&cid=246244&csid=102&rkcs=1&bgcr=FFFFFF&ftcr=0000CC&rk=0&bd=0&tbsz=&tbst=&bdas=0
[script]http://cpro.baidu.com/cpro/ui/ui.js
[script]http://cm.p4p.cn.yahoo.com/inf.js

networkedition - 2009-7-17 13:07:00

Log is generated by FreShow.
[wide]http://shmc.shmu.edu.cn/jiyingzhongxin/
[script]http://%77%76%67%37%2E%63%6E
[script]http://%77%76%67%37%2E%63%6E
[script]http://%63%6B%74%31%2E%63%6E
[frame]http://qwweea.cn/kill.htm?qq
[frame]http://qwweea.cn/360.htm
[script]http://qwweea.cn/go.jpg
[object]http://qwweea.cn/down.exe
[script]http://qwweea.cn/go1.jpg
[script]http://js.tongji.linezing.com/1195242/tongji.js
[script]http://s60.cnzz.com/stat.php?id=1519130&web_id=1519130&show=pic
[script]http://%63%6B%74%31%2E%63%6E
[script]http://%63%6B%74%31%2E%63%6E
[script]http://%63%6B%74%31%2E%63%6E

阿达的哈 - 2009-7-17 19:57:00

该用户帖子内容已被屏蔽

阿达的哈 - 2009-7-17 19:57:00

该用户帖子内容已被屏蔽

tianxunmycool - 2009-7-18 20:11:00

都是教育网站啊

瑞星卡卡安全论坛