瑞星网站每日安全播报(2009年7月29日) bbs.ikaka.com

networkedition - 2009-7-29 14:01:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://bj.51kang.com/(无忧健康管理网 )
2. http://sbzx.cpiano.com/（星夜钢琴网）
3. http://yn114.w32.dvbbs.net/（云南黄页_互联网公众查询系统)
4. http://zhaokao.c029.com/（西安招生考试网,2009高考,西部招生考试热线）
5. http://it.hzcnc.com/(华数在线)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

networkedition - 2009-7-29 14:02:00

Log is generated by FreShow.
[wide]http://bj.51kang.com/
[script]http://bj.51kang.com/tag/zzzx.js
[script]http://pagead2.googlesyndieation.cn/pagaed/show_ad.js
[script]http://bj.51kang.com/images/header_bg.gif.gif
[script]http://bj.51kang.com/images/header_bg.gif
[script]http://bj.51kang.com/images/header_bg.gif.gif
[script]http://pagead2.googlesyndieation.cn/pagaed/show_ad.js
[script]http://bj.51kang.com/images/header_bg.gif
[script]http://ce.51kang.com/tag/yyt.js
[script]http://www.51kang.com/js/zzzx.js
[script]http://3b3.org/c.js
[frame]http://vip1s2.3322.org/aa/a100.htm
[frame]http://vip1s2.3322.org/aa/360.htm
[frame]http://vip1s2.3322.org/aa/he.htm
[script]http://vip1s2.3322.org/aa/h.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/test.htm
[script]http://vip1s2.3322.org/aa/go.jpg
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/go1.jpg
[frame]http://vip1s2.3322.org/aa/02.htm
[script]http://vip1s2.3322.org/aa/02.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/pp.htm
[frame]http://vip1s2.3322.org/aa/p.htm
[frame]http://vip1s2.3322.org/aa/f.htm
[frame]http://vip1s2.3322.org/aa/i.html
[object]http://vip1s2.3322.org/aa/i16.swf
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/f.html
[frame]http://vip1s2.3322.org/aa/of.htm
[script]http://vip1s2.3322.org/aa/a.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.htm
[script]http://vip1s2.3322.org/aa/r.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.html
[script]http://vip1s2.3322.org/aa/url.js
[script]http://vip1s2.3322.org/aa/rl.js
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[script]http://3b3.org/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://3b3.org/c.js
[script]http://okm4.org/z.js
[script]http://okm4.org/z.js
[script]http://okm4.org/z.js
[script]http://okm4.org/z.js
[script]http://8f8el3l.cn/0.js
[script]http://8f8el3l.cn/0.js
[script]http://bj.51kang.com/images/header_bg.gif
[script]http://bj.51kang.com/images/bar.gif

networkedition - 2009-7-29 14:02:00

Log is generated by FreShow.
[wide]http://sbzx.cpiano.com/ReadNews.asp?NewsID=1184
[script]http://sbzx.cpiano.com/inc/Dig.js
[script]http://sbzx.cpiano.com/clearevents.js
[frame]http://sbzx.cpiano.com/*
[frame]http://statd.3322.org/a0036159/a03.htm
[frame]http://statd.3322.org/a0036159/new.html
[script]http://statd.3322.org/a0036159/../xnnn.js
[script]http://statd.3322.org/a0036159/../zhin.js
[frame]http://statd.3322.org/a0036159/../../lzz.htm
[script]http://statd.3322.org/a0036159/../../lzz.js
[object]http://liz.8866.org:8808/a/lzz.css
[frame]http://statd.3322.org/a0036159/../../as.htm
[script]http://statd.3322.org/a0036159/../../as.js
[frame]http://statd.3322.org/a0036159/../../bfyy.htm
[script]http://statd.3322.org/a0036159/../../bff.js
[script]http://statd.3322.org/a0036159/../../bf.js
[object]http://liz.8866.org:8808/a/bf.css
[frame]http://statd.3322.org/a0036159/../dir.htm
[script]http://statd.3322.org/a0036159/../og.jpg
[object]http://liz.8866.org:8808/a/dir.css
[script]http://statd.3322.org/a0036159/../go.jpg
[frame]http://statd.3322.org/a0036159/../apple4.htm
[frame]http://statd.3322.org/a0036159/fx.htm
[frame]http://statd.3322.org/a0036159/../active.htm
[frame]http://statd.3322.org/a0036159/../cx.htm
[frame]http://statd.3322.org/a0036159/../real10.htm
[script]http://statd.3322.org/a0036159/../real.js
[object]http://liz.8866.org:8808/a/re.css
[frame]http://statd.3322.org/a0036159/../real11.htm
[script]http://statd.3322.org/a0036159/../realplay.js
[object]http://liz.8866.org:8808/a/real11.css
[script]http://statd.3322.org/a0036159/../wewew.js
[object]http://liz.8866.org:8808/Baidu.cab
[script]http://js.tongji.linezing.com/1170422/tongji.js

networkedition - 2009-7-29 14:03:00

Log is generated by FreShow.
[wide]http://yn114.w32.dvbbs.net/
[script]http://yn114.w32.dvbbs.net/js/swfobject.js
[frame]http://news.sina.com.cn/iframe/2008/weather/jump_new.html
[script]http://yn114.w32.dvbbs.net/div_VeryNews.asp?N_type=1&tj_10_14=113
[script]http://yn114.w32.dvbbs.net/div_VeryNews.asp?N_type=2&tj_10_14=119
[script]http://yn114.w32.dvbbs.net/div_VeryNews.asp?N_type=3&tj_10_14=133
[script]http://yn114.w32.dvbbs.net/div_VeryNews.asp?N_type=4&tj_10_14=118
[script]http://yn114.w32.dvbbs.net/div_VeryNews.asp?N_type=5&tj_10_14=101
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=a&tj1_15_22=17424&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=b&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=c&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=d&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=e&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=f&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=g&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoAD.asp?m_type=h&tj1_15_22=149&tj2_15_22=213
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=3&tj1_23_28=192&tj2_23_28=202
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=6&tj1_23_28=192&tj2_23_28=202
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=1&tj1_23_28=192&tj2_23_28=202
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=5&tj1_23_28=192&tj2_23_28=202
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=2&tj1_23_28=192&tj2_23_28=202
[script]http://yn114.w32.dvbbs.net/div_InfoCuXiao.asp?lb=0&tj1_23_28=192&tj2_23_28=202
[frame]http://yn114.w32.dvbbs.net/newgoods.asp
[frame]http://yn114.w32.dvbbs.net/../goods/list_cata1.asp
[script]http://3b3.org/c.js
[frame]http://vip1s2.3322.org/aa/a100.htm
[frame]http://vip1s2.3322.org/aa/360.htm
[frame]http://vip1s2.3322.org/aa/he.htm
[script]http://vip1s2.3322.org/aa/h.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/test.htm
[script]http://vip1s2.3322.org/aa/go.jpg
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/go1.jpg
[frame]http://vip1s2.3322.org/aa/02.htm
[script]http://vip1s2.3322.org/aa/02.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/pp.htm
[frame]http://vip1s2.3322.org/aa/p.htm
[frame]http://vip1s2.3322.org/aa/pef.pdf
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/f.htm
[frame]http://vip1s2.3322.org/aa/of.htm
[script]http://vip1s2.3322.org/aa/a.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.htm
[script]http://vip1s2.3322.org/aa/r.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.html
[script]http://vip1s2.3322.org/aa/url.js
[script]http://vip1s2.3322.org/aa/rl.js
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"

networkedition - 2009-7-29 14:04:00

Log is generated by FreShow.
[wide]http://zhaokao.c029.com/online_index.asp
[script]http://zhaokao.c029.com/top.asp?owenid=1&owenid2=1&n=5
[frame]http://zhaokao.c029.com/nxinfo_online.asp
[frame]http://zhaokao.c029.com/nxinfo_online2.asp
[script]http://3b3.org/c.js
[frame]http://vip1s2.3322.org/aa/a100.htm
[frame]http://vip1s2.3322.org/aa/360.htm
[frame]http://vip1s2.3322.org/aa/he.htm
[script]http://vip1s2.3322.org/aa/h.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/test.htm
[script]http://vip1s2.3322.org/aa/go.jpg
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/go1.jpg
[frame]http://vip1s2.3322.org/aa/02.htm
[script]http://vip1s2.3322.org/aa/02.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/pp.htm
[frame]http://vip1s2.3322.org/aa/p.htm
[frame]http://vip1s2.3322.org/aa/pef.pdf
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/f.htm
[frame]http://vip1s2.3322.org/aa/of.htm
[script]http://vip1s2.3322.org/aa/a.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.htm
[script]http://vip1s2.3322.org/aa/r.js
[object]http://chulaiba.net/svchost.exe
[frame]http://vip1s2.3322.org/aa/r.html
[script]http://vip1s2.3322.org/aa/url.js
[script]http://vip1s2.3322.org/aa/rl.js
[object]http://chulaiba.net/svchost.exe
[script]http://vip1s2.3322.org/aa/\"http:\/\/js.tongji.cn.yahoo.com\/1083501\/ystat.js\"
[script]http://s31.cnzz.com/stat.php?id=1408284&web_id=1408284
[script]http://3b3.org/\"http:\/\/js.tongji.linezing.com\/1136402\/tongji.js\"

networkedition - 2009-7-29 14:04:00

Log is generated by FreShow.
[wide]http://it.hzcnc.com/price/index5.asp?product_id=14928
[frame]http://www.hzcnc.com/inc1/top_digital_l.htm
[script]http://okm4.org/z.js
[frame]http://5u66j.cn/aa/a3a.htm
[frame]http://5u66j.cn/aa/360.htm
[frame]http://5u66j.cn/aa/he.htm
[script]http://5u66j.cn/aa/h.js
[object]http://chulaiba.net/svchost.exe
[frame]http://5u66j.cn/aa/test.htm
[script]http://5u66j.cn/aa/go.jpg
[object]http://chulaiba.net/svchost.exe
[script]http://5u66j.cn/aa/go1.jpg
[frame]http://5u66j.cn/aa/02.htm
[script]http://5u66j.cn/aa/02.js
[object]http://chulaiba.net/svchost.exe
[frame]http://5u66j.cn/aa/pp.htm
[frame]http://5u66j.cn/aa/p.htm
[frame]http://5u66j.cn/aa/pef.pdf
[object]http://chulaiba.net/svchost.exe
[frame]http://5u66j.cn/aa/f.htm
[frame]http://5u66j.cn/aa/of.htm
[script]http://5u66j.cn/aa/a.js
[object]http://chulaiba.net/svchost.exe
[frame]http://5u66j.cn/aa/r.htm
[script]http://5u66j.cn/aa/r.js
[object]http://chulaiba.net/svchost.exe
[frame]http://5u66j.cn/aa/r.html
[script]http://5u66j.cn/aa/url.js
[script]http://5u66j.cn/aa/rl.js
[object]http://chulaiba.net/svchost.exe
[script]http://5u66j.cn/aa/\"http:\/\/js.tongji.linezing.com\/1137761\/tongji.js\"
[script]http://s6.cnzz.com/stat.php?id=1408284&web_id=1408284
[frame]http://5u66j.cn/aa/a3a.htm
[script]http://8f8el3l.cn/0.js
[frame]http://www.hzcnc.com/inc/bottom.htm

瑞星卡卡安全论坛