瑞星网站每日安全播报(2009年12月8日) bbs.ikaka.com

networkedition - 2009-12-8 10:37:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://e-zone.9e3.com/ （E-ZONE-----E族人傻博客）
2. http://hd.eastmoney.com/(投资者教育 - 东方财富网）
3. http://www.37c.com.cn/（37度医学网）
4. http://www.wjw.cn/（全球五金网-五金机电综合服务商）
5. http://ga.mlr.gov.cn/(全国地质资料目录网络中心)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2009-12-8 10:37:00

Log generated by networkedition use mdecoder 0.30
[root]http://e-zone.9e3.com/html/blog/2007/4/11/2007411134314.html
[script]http://e-zone.9e3.com/web/ubb.js
[script]http://e-zone.9e3.com/mb/count.asp?typ=4
[script]http://e-zone.9e3.com/js/mb_blog_01.js
[script]http://e-zone.9e3.com/mb/blog_click.asp?tab_name=blog&id=5654
[script]http://e-zone.9e3.com/mb/reremark.asp?id=5654
[script]http://963.ss.la
[iframe]http://dsfdfe44.8866.org/5/google.htm
[iframe]http://dsfdfe44.8866.org/4/search.htm
[script]http://dsfdfe44.8866.org/4/google_ad.js
[iframe]http://dsfdfe44.8866.org/4/cqqmp.htm
[script]http://dsfdfe44.8866.org/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/show.jpg
[script]http://dsfdfe44.8866.org/4/shows.jpg
[script]http://dsfdfe44.8866.org/4/google_ads.js
[iframe]http://dsfdfe44.8866.org/4/ec1.htm
[script]http://dsfdfe44.8866.org/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyfl.htm
[iframe]http://dsfdfe44.8866.org/4/ecof.htm
[script]http://dsfdfe44.8866.org/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fydvd.htm
[iframe]http://dsfdfe44.8866.org/4/fycry.htm
[script]http://dsfdfe44.8866.org/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/google_adx.js
[iframe]http://dsfdfe44.8866.org/4/cqq0.htm
[script]http://dsfdfe44.8866.org/4/cqq2s.css
[script]http://dsfdfe44.8866.org/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecb.htm
[iframe]http://dsfdfe44.8866.org/4/ecbbb.htm
[script]http://dsfdfe44.8866.org/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyr.htm
[script]http://dsfdfe44.8866.org/4/rr.js
[iframe]http://dsfdfe44.8866.org/4/evilr.htm
[script]http://dsfdfe44.8866.org/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyre1.htm
[script]http://dsfdfe44.8866.org/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/zz.js
[iframe]http://dsfdfe44.8866.org/4/fylz.htm
[script]http://dsfdfe44.8866.org/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecfox.htm
[iframe]http://dsfdfe44.8866.org/4/ecffx.htm
[script]http://dsfdfe44.8866.org/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/music.js
[iframe]http://dsfdfe44.8866.org/4/sfpf.htm
[iframe]http://iuqwh.8800.org/asuhd/index.htm?ly
[iframe]http://a.ppmmoo.cn/tj.htm

networkedition - 2009-12-8 10:38:00

Log generated by networkedition use mdecoder 0.30
[root]http://hd.eastmoney.com/zhuanti/yinhua/
[script]http://hd.eastmoney.com/zhuanti/yinhua/mainjs/function.js
[script]http://hd.eastmoney.com/zhuanti/yinhua/mainjs/default.js
[script]http://hd.eastmoney.com/zhuanti/yinhua/mainjs/jscript.js
[script]http://hd.eastmoney.com/zhuanti/yinhua/mainjs/top.js
[script]http://hd.eastmoney.com/zhuanti/yinhua/getuserinfo.aspx
[script]http://8881.ss.la/
[iframe]http://dsfdfe44.8866.org/5/google.htm
[iframe]http://dsfdfe44.8866.org/4/search.htm
[script]http://dsfdfe44.8866.org/4/google_ad.js
[iframe]http://dsfdfe44.8866.org/4/cqqmp.htm
[script]http://dsfdfe44.8866.org/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/show.jpg
[script]http://dsfdfe44.8866.org/4/shows.jpg
[script]http://dsfdfe44.8866.org/4/google_ads.js
[iframe]http://dsfdfe44.8866.org/4/ec1.htm
[script]http://dsfdfe44.8866.org/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyfl.htm
[iframe]http://dsfdfe44.8866.org/4/ecof.htm
[script]http://dsfdfe44.8866.org/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fydvd.htm
[iframe]http://dsfdfe44.8866.org/4/fycry.htm
[script]http://dsfdfe44.8866.org/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/google_adx.js
[iframe]http://dsfdfe44.8866.org/4/cqq0.htm
[script]http://dsfdfe44.8866.org/4/cqq2s.css
[script]http://dsfdfe44.8866.org/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecb.htm
[iframe]http://dsfdfe44.8866.org/4/ecbbb.htm
[script]http://dsfdfe44.8866.org/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyr.htm
[script]http://dsfdfe44.8866.org/4/rr.js
[iframe]http://dsfdfe44.8866.org/4/evilr.htm
[script]http://dsfdfe44.8866.org/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyre1.htm
[script]http://dsfdfe44.8866.org/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/zz.js
[iframe]http://dsfdfe44.8866.org/4/fylz.htm
[script]http://dsfdfe44.8866.org/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecfox.htm
[iframe]http://dsfdfe44.8866.org/4/ecffx.htm
[script]http://dsfdfe44.8866.org/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/music.js
[iframe]http://dsfdfe44.8866.org/4/sfpf.htm
[iframe]http://iuqwh.8800.org/asuhd/index.htm?ly
[iframe]http://a.ppmmoo.cn/tj.htm
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[script]http://8881.ss.la/
[iframe]http://js1.eastmoney.com/count.aspx?id=579

networkedition - 2009-12-8 10:39:00

Log generated by networkedition use mdecoder 0.30
[root]http://www.37c.com.cn/topic/047/04701.asp
[script]http://963.ss.la
[iframe]http://dsfdfe44.8866.org/5/google.htm
[iframe]http://dsfdfe44.8866.org/4/search.htm
[script]http://dsfdfe44.8866.org/4/google_ad.js
[iframe]http://dsfdfe44.8866.org/4/cqqmp.htm
[script]http://dsfdfe44.8866.org/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/show.jpg
[script]http://dsfdfe44.8866.org/4/shows.jpg
[script]http://dsfdfe44.8866.org/4/google_ads.js
[iframe]http://dsfdfe44.8866.org/4/ec1.htm
[script]http://dsfdfe44.8866.org/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyfl.htm
[iframe]http://dsfdfe44.8866.org/4/ecof.htm
[script]http://dsfdfe44.8866.org/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fydvd.htm
[iframe]http://dsfdfe44.8866.org/4/fycry.htm
[script]http://dsfdfe44.8866.org/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/google_adx.js
[iframe]http://dsfdfe44.8866.org/4/cqq0.htm
[script]http://dsfdfe44.8866.org/4/cqq2s.css
[script]http://dsfdfe44.8866.org/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecb.htm
[iframe]http://dsfdfe44.8866.org/4/ecbbb.htm
[script]http://dsfdfe44.8866.org/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyr.htm
[script]http://dsfdfe44.8866.org/4/rr.js
[iframe]http://dsfdfe44.8866.org/4/evilr.htm
[script]http://dsfdfe44.8866.org/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyre1.htm
[script]http://dsfdfe44.8866.org/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/zz.js
[iframe]http://dsfdfe44.8866.org/4/fylz.htm
[script]http://dsfdfe44.8866.org/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecfox.htm
[iframe]http://dsfdfe44.8866.org/4/ecffx.htm
[script]http://dsfdfe44.8866.org/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/music.js
[iframe]http://dsfdfe44.8866.org/4/sfpf.htm
[iframe]http://iuqwh.8800.org/asuhd/index.htm?ly
[iframe]http://a.ppmmoo.cn/tj.htm
[script]http://z360.net/c.js
[iframe]http://318x.com/a.htm
[iframe]http://318x.com/b.htm
[script]http://z360.net/c.js
[script]http://963.ss.la
[script]http://z360.net/c.js
[script]http://z360.net/c.js
[script]http://963.ss.la
[script]http://z360.net/c.js
[script]http://z360.net/c.js
[script]http://963.ss.la
[script]http://z360.net/c.js
[script]http://z360.net/c.js
[script]http://963.ss.la
[script]http://z360.net/c.js
[script]http://z360.net/c.js
[script]http://963.ss.la
[script]http://z360.net/c.js
[script]http://z360.net/c.js

networkedition - 2009-12-8 10:39:00

Log generated by networkedition use mdecoder 0.30
[root]http://www.wjw.cn/merchants/mbr090410123023190725/mer090411123728061576.xhtml
[script]http://www.wjw.cn/club/script/marquee.js
[script]http://www.wjw.cn/club/script/alitalk.js
[script]http://www.wjw.cn/javascript/wjwflash.js
[script]http://www.wjw.cn/club/script/menucss.js
[script]http://www.wjw.cn/club/script/imgchange.js
[script]http://8881.ss.la/
[iframe]http://dsfdfe44.8866.org/5/google.htm
[iframe]http://dsfdfe44.8866.org/4/search.htm
[script]http://dsfdfe44.8866.org/4/google_ad.js
[iframe]http://dsfdfe44.8866.org/4/cqqmp.htm
[script]http://dsfdfe44.8866.org/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/show.jpg
[script]http://dsfdfe44.8866.org/4/shows.jpg
[script]http://dsfdfe44.8866.org/4/google_ads.js
[iframe]http://dsfdfe44.8866.org/4/ec1.htm
[script]http://dsfdfe44.8866.org/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyfl.htm
[iframe]http://dsfdfe44.8866.org/4/ecof.htm
[script]http://dsfdfe44.8866.org/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fydvd.htm
[iframe]http://dsfdfe44.8866.org/4/fycry.htm
[script]http://dsfdfe44.8866.org/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/google_adx.js
[iframe]http://dsfdfe44.8866.org/4/cqq0.htm
[script]http://dsfdfe44.8866.org/4/cqq2s.css
[script]http://dsfdfe44.8866.org/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecb.htm
[iframe]http://dsfdfe44.8866.org/4/ecbbb.htm
[script]http://dsfdfe44.8866.org/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyr.htm
[script]http://dsfdfe44.8866.org/4/rr.js
[iframe]http://dsfdfe44.8866.org/4/evilr.htm
[script]http://dsfdfe44.8866.org/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/fyre1.htm
[script]http://dsfdfe44.8866.org/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/zz.js
[iframe]http://dsfdfe44.8866.org/4/fylz.htm
[script]http://dsfdfe44.8866.org/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://dsfdfe44.8866.org/4/ecfox.htm
[iframe]http://dsfdfe44.8866.org/4/ecffx.htm
[script]http://dsfdfe44.8866.org/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/music.js
[iframe]http://dsfdfe44.8866.org/4/sfpf.htm
[iframe]http://iuqwh.8800.org/asuhd/index.htm?ly
[iframe]http://a.ppmmoo.cn/tj.htm
[script]http://amos.im.alisoft.com/muliuserstatus.aw?beginnum=0&site=cnwujing&uids=liubin520630
[script]http://www.wjw.cn/club/script/alitalkshow.js?liubin520630

networkedition - 2009-12-8 10:41:00

Log is generated by FreShow.
[wide]http://ga.mlr.gov.cn/SearchGo.aspx
[object]http://wgwggg.cn:1/1.js
[frame]http://dsfdfe44.8866.org/5/google.htm
[frame]http://dsfdfe44.8866.org/4/search.htm
[script]http://dsfdfe44.8866.org/4/google_ad.js
[frame]http://dsfdfe44.8866.org/4/cqqmp.htm
[script]http://dsfdfe44.8866.org/4/cqqskin.css
[object]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/show.jpg
[script]http://dsfdfe44.8866.org/4/shows.jpg
[script]http://dsfdfe44.8866.org/4/google_ads.js
[script]http://dsfdfe44.8866.org/4/google_adx.js
[frame]http://dsfdfe44.8866.org/4/cqq0.htm
[script]http://dsfdfe44.8866.org/4/cqq2s.css
[script]http://dsfdfe44.8866.org/4/cqq2.css
[object]http://xxx.ss.la/4.exe
[frame]http://dsfdfe44.8866.org/4/ecb.htm
[frame]http://dsfdfe44.8866.org/4/ecbbb.htm
[script]http://dsfdfe44.8866.org/4/ecfff.js
[object]http://xxx.ss.la/4.exe
[frame]http://dsfdfe44.8866.org/4/fyr.htm
[script]http://dsfdfe44.8866.org/4/rr.js
[frame]http://dsfdfe44.8866.org/4/evilr.htm
[script]http://dsfdfe44.8866.org/4/evilrr.js
[object]http://xxx.ss.la/4.exe
[frame]http://dsfdfe44.8866.org/4/fyre1.htm
[script]http://dsfdfe44.8866.org/4/fyr1.js
[object]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/zz.js
[frame]http://dsfdfe44.8866.org/4/fylz.htm
[script]http://dsfdfe44.8866.org/4/xxxxz.js
[object]http://xxx.ss.la/4.exe
[frame]http://dsfdfe44.8866.org/4/ecfox.htm
[frame]http://dsfdfe44.8866.org/4/ecffx.htm
[script]http://dsfdfe44.8866.org/4/ecfox.js
[object]http://xxx.ss.la/4.exe
[script]http://dsfdfe44.8866.org/4/music.js
[frame]http://dsfdfe44.8866.org/4/sfpf.htm
[frame]http://dsfdfe44.8866.org/4/sf.pdf
[object]http://xxx.ss.la/4.exe

瑞星卡卡安全论坛