瑞星网站每日安全播报(2009年12月10日) bbs.ikaka.com

networkedition - 2009-12-10 16:26:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://www.wjw.cn/ （全球五金网）
2. http://bars.edong.com/(中国E动网）
3. http://guangzhou.dqccc.com/（地球城）
4. http://lx.niupan.com/（牛盘网）

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2009-12-10 16:26:00

Log generated by networkedition use mdecoder 0.30
[root]http://www.wjw.cn/merchants/mbr060412160948131639/MER071011105055534436.xhtml
[script]http://www.wjw.cn/club/script/marquee.js
[script]http://www.wjw.cn/club/script/alitalk.js
[script]http://www.wjw.cn/javascript/wjwflash.js
[script]http://www.wjw.cn/club/script/menucss.js
[script]http://www.wjw.cn/club/script/imgchange.js
[script]http://8881.ss.la/
[iframe]http://c.8883.ss.la/5/google.htm
[iframe]http://c.8883.ss.la/4/search.htm
[script]http://c.8883.ss.la/4/google_ad.js
[iframe]http://c.8883.ss.la/4/cqqmp.htm
[script]http://c.8883.ss.la/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://c.8883.ss.la/4/show.jpg
[script]http://c.8883.ss.la/4/shows.jpg
[script]http://c.8883.ss.la/4/google_ads.js
[iframe]http://c.8883.ss.la/4/ec1.htm
[script]http://c.8883.ss.la/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/fyfl.htm
[iframe]http://c.8883.ss.la/4/ecof.htm
[script]http://c.8883.ss.la/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/fydvd.htm
[iframe]http://c.8883.ss.la/4/fycry.htm
[script]http://c.8883.ss.la/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://c.8883.ss.la/4/google_adx.js
[iframe]http://c.8883.ss.la/4/cqq0.htm
[script]http://c.8883.ss.la/4/cqq2s.css
[script]http://c.8883.ss.la/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/ecb.htm
[iframe]http://c.8883.ss.la/4/ecbbb.htm
[script]http://c.8883.ss.la/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/fyr.htm
[script]http://c.8883.ss.la/4/rr.js
[iframe]http://c.8883.ss.la/4/evilr.htm
[script]http://c.8883.ss.la/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/fyre1.htm
[script]http://c.8883.ss.la/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://c.8883.ss.la/4/zz.js
[iframe]http://c.8883.ss.la/4/fylz.htm
[script]http://c.8883.ss.la/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://c.8883.ss.la/4/ecfox.htm
[iframe]http://c.8883.ss.la/4/ecffx.htm
[script]http://c.8883.ss.la/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://c.8883.ss.la/4/music.js
[iframe]http://c.8883.ss.la/4/sfpf.htm
[iframe]http://c.8883.ss.la/c.asp
[iframe]http://kan0002.9966.org/htmlasp/imgasp/asp.html?c279
[iframe]http://kan0002.9966.org/htmlasp/imgasp/share.html
[iframe]http://kan0002.9966.org/htmlasp/imgasp/a4.htm
[iframe]http://kan0002.9966.org/htmlasp/imgasp/ubb.htm
[iframe]http://kan0002.9966.org/htmlasp/imgasp/a90.htm
[iframe]http://kan0002.9966.org/htmlasp/imgasp/ring.htm
[iframe]http://kan0002.9966.org/htmlasp/imgasp/rings.htm
[iframe]http://kan0002.9966.org/htmlasp/imgasp/host.html
[script]http://kan0002.9966.org/htmlasp/imgasp/a.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/b.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/uupk.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/c.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/d.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/e.jpg
[script]http://kan0002.9966.org/htmlasp/imgasp/f.jpg
[iframe]http://kan0002.9966.org/htmlasp/imgasp/asp.html?c279
[iframe]http://kan0002.9966.org/htmlasp/imgasp/asp.html?c279
[iframe]http://kan0002.9966.org/htmlasp/imgasp/asp.html?c279
[iframe]http://kan0002.9966.org/htmlasp/imgasp/asp.html?c279
[iframe]http://a.ppmmoo.cn/tj.htm
[script]http://amos.im.alisoft.com/muliuserstatus.aw?beginnum=0&site=cnwujing&uids=10075081
[script]http://www.wjw.cn/club/script/alitalkshow.js?10075081

networkedition - 2009-12-10 16:27:00

Log generated by networkedition use mdecoder 0.30
[root]http://bars.edong.com/htdocs/siteadmin/014.htm
[exe]http://bars.edong.com/htdocs/siteadmin/ok.exe

networkedition - 2009-12-10 16:28:00

Log generated by networkedition use mdecoder 0.30
[root]http://guangzhou.dqccc.com/citymap/detail_663212.html
[script]http://guangzhou.dqccc.com/citymap/../common/func.js
[script]http://pic.dq3c.cn/js/mootools-1.2.1.js
[script]http://pic.dq3c.cn/js/map/mapengine.js
[script]http://pic.dq3c.cn/js/map/mapenginesearch.js
[script]http://pic.dq3c.cn/js/map/mapdetail.js
[script]http://pic.dq3c.cn/js/map/city_u.js
[iframe]http://www.gzfgc.org/
[script]http://318x.com
[iframe]http://318x.com/a.htm
[iframe]http://aa1100.2288.org/htmlasp/dasp/alt.html?ff
[iframe]http://aa1100.2288.org/htmlasp/dasp/news.html
[iframe]http://aa1100.2288.org/htmlasp/dasp/ec1.htm
[script]http://aa1100.2288.org/htmlasp/dasp/14.js
[exe]http://down.adminmimi.com.cn/playcom/down.css
[script]http://aa1100.2288.org/htmlasp/dasp/15.js
[script]http://aa1100.2288.org/htmlasp/dasp/17.js
[script]http://aa1100.2288.org/htmlasp/dasp/16.js
[script]http://aa1100.2288.org/htmlasp/dasp/18.js
[script]http://aa1100.2288.org/htmlasp/dasp/19.js
[iframe]http://aa1100.2288.org/htmlasp/dasp/photo.htm
[script]http://aa1100.2288.org/htmlasp/dasp/uuah.jpg
[script]http://aa1100.2288.org/htmlasp/dasp/uuah1.jpg
[script]http://aa1100.2288.org/htmlasp/dasp/uuuah.jpg
[exe]http://down.adminmimi.com.cn/playcom/down.css
[script]http://aa1100.2288.org/htmlasp/dasp/uuah3.jpg
[script]http://aa1100.2288.org/htmlasp/dasp/uuah4.jpg
[script]http://aa1100.2288.org/htmlasp/dasp/uuah5.jpg
[iframe]http://aa1100.2288.org/htmlasp/dasp/cqq0.htm
[script]http://aa1100.2288.org/htmlasp/dasp/91.js
[exe]http://down.adminmimi.com.cn/playcom/down.css
[script]http://aa1100.2288.org/htmlasp/dasp/90.js
[iframe]http://aa1100.2288.org/htmlasp/dasp/ecqfun.htm
[iframe]http://aa1100.2288.org/htmlasp/dasp/fyfl.htm
[iframe]http://aa1100.2288.org/htmlasp/dasp/sfi.htm
[script]http://aa1100.2288.org/htmlasp/dasp/swfobject.js
[flash]http://aa1100.2288.org/htmlasp/dasp/i115.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/i47.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/i45.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/i64.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[iframe]http://aa1100.2288.org/htmlasp/dasp/sff.htm
[script]http://aa1100.2288.org/htmlasp/dasp/swfobject.js
[flash]http://aa1100.2288.org/htmlasp/dasp/f115.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/f47.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/f45.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[flash]http://aa1100.2288.org/htmlasp/dasp/f64.swf
[exe]http://down.adminmimi.com.cn/playcom/down.css
[iframe]http://aa1100.2288.org/htmlasp/dasp/sfi.htm
[iframe]http://aa1100.2288.org/htmlasp/dasp/baidu.htm
[iframe]http://aa1100.2288.org/htmlasp/dasp/ecof.htm
[script]http://aa1100.2288.org/htmlasp/dasp/oopk.jpg
[script]http://aa1100.2288.org/htmlasp/dasp/agg.jpg
[script]http://pic.dq3c.cn/js/showad/180_340.js
[iframe]http://pic.dq3c.cn/file/180_340.html

networkedition - 2009-12-10 16:28:00

Log generated by networkedition use mdecoder 0.30
[root]http://lx.niupan.com/biyunchangshi/guagua/yt.htm?9??4
[script]http://lx.niupan.com/biyunchangshi/guagua/nop.jpg
[script]http://lx.niupan.com/biyunchangshi/guagua/ml.jpg
[script]http://lx.niupan.com/biyunchangshi/guagua/rl.jpg
[exe]http://www.itonghui.com/css/152.css
[script]http://lx.niupan.com/biyunchangshi/guagua/kl.jpg

lxbk - 2009-12-11 10:50:00

:kaka1: :kaka1: :kaka1:

让我来帮你 - 2009-12-11 11:10:00

好，谢谢。

瑞星卡卡安全论坛