瑞星网站每日安全播报(2009年8月28日) bbs.ikaka.com

networkedition - 2009-8-28 10:47:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://book.qukanshu.com/(看书小说网-玄幻小说阅读网-包括大量言情小说,武侠小说,网游 )
2. http://china91.com/（中国就业网首页 - 人才市场报 China91招聘网站）
3. http://eat.xaonline.com/(西安美食娱乐网西安美食西安小吃西安餐饮娱乐门户站）
4. http://job.cnstock.com/（中国证券网-人才频道）
5. http://www.01hr.com/（数字英才招聘网）

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

networkedition - 2009-8-28 10:48:00

Log is generated by FreShow.
[wide]http://book.qukanshu.com/arttopmonthvisit/0/1.html
[frame]http://book.qukanshu.com/loginframe.php
[script]http://book.qukanshu.com/js/adtop.js
[script]http://book.qukanshu.com/js/gb.js
[script]http://book.qukanshu.com/js/tong.js
[frame]http://982.9966.org/b073399/b07.htm
[frame]http://982.9966.org/b073399/../new.html
[script]http://982.9966.org/b073399/../xnnn.js
[script]http://982.9966.org/b073399/../zhin.js
[frame]http://982.9966.org/b073399/../lzz.htm
[script]http://982.9966.org/b073399/../lzz.js
[object]http://wdb.8800.org:8808/ciji.css
[frame]http://982.9966.org/b073399/../as.htm
[script]http://982.9966.org/b073399/../of.js
[object]http://wdb.8800.org:8808/ciji.css
[script]http://982.9966.org/b073399/../of1.css
[frame]http://982.9966.org/b073399/../bfyy.htm
[script]http://982.9966.org/b073399/../bff.js
[script]http://982.9966.org/b073399/../bf.js
[object]http://wdb.8800.org:8808/ciji.css
[frame]http://982.9966.org/b073399/../xxfx.htm
[frame]http://982.9966.org/b073399/../dir.htm
[script]http://982.9966.org/b073399/../lang.jpg
[object]http://wdb.8800.org:8808/ciji.css
[script]http://982.9966.org/b073399/../sao.jpg
[frame]http://982.9966.org/b073399/../fx.htm
[frame]http://982.9966.org/b073399/../real10.htm
[script]http://982.9966.org/b073399/../real.js
[object]http://wdb.8800.org:8808/ciji.css
[frame]http://982.9966.org/b073399/../real11.htm
[script]http://982.9966.org/b073399/../realplay.js
[object]http://wdb.8800.org:8808/ciji.css
[script]http://s41.cnzz.com/stat.php?id=1530316&web_id=1530316
[frame]http://coco4.9966.org/b073399/b07.htm

networkedition - 2009-8-28 10:48:00

Log is generated by FreShow.
[wide]http://china91.com/jobmarket/job/search/showjob3.aspx?companyid=b132592
[script]http://www.gsuo.com/mstmap50007/mstws/js/mstmap_js.jsp
[script]http://china91.com/jobmarketnews/showtip.js
[script]http://china91.com/jobmarket/job/search/http:/
/%7A360.net/c.js
[script]http://z36%30.net/c.js
[script]http://js.tongji.linezing.com/1247775/tongji.js
[script]http://s107.cnzz.com/stat.php?id=1583441&web_id=1583441
[frame]http://z360.net/2.htm
[frame]http://z360.net/3.htm
[frame]http://baidu826.8866.org/5/ads2.html?zz
[frame]http://baidu826.8866.org/5/search.htm
[script]http://baidu826.8866.org/5/google_ad.js
[frame]http://baidu826.8866.org/5/ceerqqmp.htm
[script]http://baidu826.8866.org/5/cqqskin.css
[object]http://xxx.ss.la/5.exe
[script]http://baidu826.8866.org/5/show.jpg
[script]http://baidu826.8866.org/5/shows.jpg
[script]http://baidu826.8866.org/5/google_ads.js
[script]http://baidu826.8866.org/5/google_adx.js
[script]http://baidu826.8866.org/5/music.js
[script]http://js.tongji.linezing.com/1247775/tongji.js
[script]http://s107.cnzz.com/stat.php?id=1583441&web_id=1583441
[script]http://count8.51yes.com/click.aspx?id=88426073&logo=12
[script]http://js.tongji.linezing.com/1281188/tongji.js

networkedition - 2009-8-28 10:49:00

Log is generated by FreShow.
[wide]http://eat.xaonline.com/food_showbody.asp?id=1384
[script]http://3god.%6Eet/c.js
[frame]http://z360.net/2.htm
[frame]http://z360.net/3.htm
[frame]http://baidu826.8866.org/5/ads2.html?zz
[frame]http://baidu826.8866.org/5/search.htm
[script]http://baidu826.8866.org/5/google_ad.js
[frame]http://baidu826.8866.org/5/ceerqqmp.htm
[script]http://baidu826.8866.org/5/cqqskin.css
[object]http://xxx.ss.la/5.exe
[script]http://baidu826.8866.org/5/show.jpg
[script]http://baidu826.8866.org/5/shows.jpg
[script]http://baidu826.8866.org/5/google_ads.js
[script]http://baidu826.8866.org/5/google_adx.js
[script]http://baidu826.8866.org/5/music.js
[script]http://js.tongji.linezing.com/1247775/tongji.js
[script]http://s107.cnzz.com/stat.php?id=1583441&web_id=1583441
[script]http://count8.51yes.com/click.aspx?id=88426073&logo=12
[script]http://js.tongji.linezing.com/1281188/tongji.js
[script]http://3god.%6Eet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.ne%74/c.js
[script]http://3god.ne%74/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.ne%74/c.js
[script]http://3god.ne%74/c.js
[frame]http://eat.xaonline.com/ly.asp?detail=10|Venues|1384
[frame]http://eat.xaonline.com/right_dz.asp
[frame]http://eat.xaonline.com/right_tel.htm
[frame]http://www.mapbar.com/newers/mapbar.jsp?dr=v2&wd=165&ht=73&bd=9DD68F&lo=2&ct=西安市
[frame]http://eat.xaonline.com/down.htm
[frame]http://ad.xaonline.com/AdImg.asp?PageID=343&ID="+Math.round(Math.random()*100+0.5)+"

networkedition - 2009-8-28 10:49:00

Log is generated by FreShow.
[wide]http://job.cnstock.com/Person/Person_Preview_08.asp?UserID=1916
[script]http://202.109.75.176/MenuCnstock/stmenu.js
[frame]http://www.cnstock.com/sub/top2ji.htm
[script]http://3god%2Enet/c.js
[frame]http://z360.net/2.htm
[frame]http://z360.net/3.htm
[frame]http://baidu826.8866.org/5/ads2.html?zz
[frame]http://baidu826.8866.org/5/search.htm
[script]http://baidu826.8866.org/5/google_ad.js
[frame]http://baidu826.8866.org/5/ceerqqmp.htm
[script]http://baidu826.8866.org/5/cqqskin.css
[object]http://xxx.ss.la/5.exe
[script]http://baidu826.8866.org/5/show.jpg
[script]http://baidu826.8866.org/5/shows.jpg
[script]http://baidu826.8866.org/5/google_ads.js
[script]http://baidu826.8866.org/5/google_adx.js
[script]http://baidu826.8866.org/5/music.js
[script]http://count8.51yes.com/click.aspx?id=88426073&logo=12
[script]http://js.tongji.linezing.com/1281188/tongji.js
[script]http://3god%2Enet/c.js
[script]http://3god%2Enet/c.js
[script]http://3god%2Enet/c.js
[script]http://3god%2Enet/c.js
[script]http://3god%2Enet/c.js
[script]http://3%47od.net/c.js
[script]http://3god%2Enet/c.js
[script]http://3god.%6Eet/c.js
[script]http://3g%4Fd.net/c.js
[script]http://3%47od.net/c.js
[script]http://3god.%6Eet/c.js
[script]http://3god.ne%74/c.js
[script]http://z360.net/c.%4As
[script]http://z36%30.net/c.js
[script]http://z%3360.net/c.js
[script]http://z360.net/c.j%53
[script]http://z360.ne%54/%43.js
[script]http://z360.n%45t/c.j%73
[script]http://z360.n%45t/c.j%73
[script]http://z3%360.net/c.%6As
[script]http://z360%2Enet/c.js
[script]http://3god%2Enet/c.js
[frame]http://211.152.60.133/JS_IndexUsed/JS_IndexUsed_22_08.html
[frame]http://www.cnstock.com/sub/2008bottom2ji.htm

networkedition - 2009-8-28 10:50:00

Log is generated by FreShow.
[wide]http://www.01hr.com/group/grouplistAction.do?op=refresh_group_list&gtype=1
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[frame]http://z360.net/2.htm
[frame]http://z360.net/3.htm
[frame]http://baidu826.8866.org/5/ads2.html?zz
[frame]http://baidu826.8866.org/5/search.htm
[script]http://baidu826.8866.org/5/google_ad.js
[frame]http://baidu826.8866.org/5/ceerqqmp.htm
[script]http://baidu826.8866.org/5/cqqskin.css
[object]http://xxx.ss.la/5.exe
[script]http://baidu826.8866.org/5/show.jpg
[script]http://baidu826.8866.org/5/shows.jpg
[script]http://baidu826.8866.org/5/google_ads.js
[script]http://baidu826.8866.org/5/google_adx.js
[script]http://baidu826.8866.org/5/music.js
[script]http://count8.51yes.com/click.aspx?id=88426073&logo=12
[script]http://js.tongji.linezing.com/1281188/tongji.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://cn.jxmmtv.com/cn.js
[script]http://3bomb.%63om/c.js
[script]http://3bomb.%63om/c.js

redbsd - 2009-8-28 21:50:00

版主发的这些都不好找到，如这个http://china91.com/，但是直接过滤这个http://baidu826.8866.org/5/cqqskin.css，可以过滤出来，这是怎么回事，应该还有效啊，版主解答一下吧。

瑞星卡卡安全论坛