瑞星网站每日安全播报(2009年12月29日) bbs.ikaka.com

networkedition - 2009-12-29 11:01:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://88mm.wxjy.com.cn/（无锡教育网）
2. http://gryy.ydbc.com.cn/(国瑞医药网-医导网国瑞医药医药）
3. http://jkgls.51kang.com/（健康管理师之家--国内最大的健康管理师社区）
4. http://youxi.12799.com/(在线小游戏_4399小游戏_小游戏大全_更多好玩的小游戏)

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2009-12-29 11:01:00

Log generated by networkedition use mdecoder 0.30
[root]http://88mm.wxjy.com.cn/huodong/090526/index1.asp
[iframe]http://8096.qrqr.net/indexx.htm
[exe]http://gxp118.3322.org/321.exe

networkedition - 2009-12-29 11:02:00

Log generated by networkedition use mdecoder 0.30
[root]http://gryy.ydbc.com.cn/
[script]http://gryy.ydbc.com.cn/data/config.js
[script]http://gryy.ydbc.com.cn/images/js/jquery.min.js
[script]http://gryy.ydbc.com.cn/images/js/css.js
[script]http://gryy.ydbc.com.cn/images/js/common.js
[iframe]http://www.tqzygz.com/5/12/1.htm
[script]http://gryy.ydbc.com.cn/images/js/login.js
[iframe]http://www.tqzygz.com/5/12/1.htm
[script]http://gryy.ydbc.com.cn/images/js/validator.js
[script]http://gryy.ydbc.com.cn/data/js.php?id=1
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[script]http://gryy.ydbc.com.cn/data/js.php?id=7
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[script]http://gryy.ydbc.com.cn/vote/vote.php?voteid=1&action=js
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/1.htm
[iframe]http://www.tqzygz.com/5/12/sv14.htm
[script]http://www.tqzygz.com/5/12/14.js
[exe]http://www.8mhh.com/2009/0527/12.exe
[script]http://www.tqzygz.com/5/12/15.js
[script]http://www.tqzygz.com/5/12/17.js
[script]http://www.tqzygz.com/5/12/16.js
[script]http://www.tqzygz.com/5/12/18.js
[iframe]http://www.tqzygz.com/5/12/sf.htm
[script]http://www.tqzygz.com/5/12/job.jpg
[exe]http://www.8mhh.com/2009/0527/12.exe
[script]http://www.tqzygz.com/5/12/good.jpg
[script]http://www.tqzygz.com/5/12/c.jpg
[script]http://www.tqzygz.com/5/12/d.jpg
[script]http://www.tqzygz.com/5/12/e.jpg
[script]http://www.tqzygz.com/5/12/f.jpg
[iframe]http://www.tqzygz.com/5/12/svdv.htm
[iframe]http://www.tqzygz.com/5/12/silver.htm
[iframe]http://www.tqzygz.com/5/12/svfl9.htm
[iframe]http://www.tqzygz.com/5/12/of.htm
[script]http://www.tqzygz.com/5/12/of1.jpg
[script]http://www.tqzygz.com/5/12/of.js
[exe]http://www.8mhh.com/2009/0527/12.exe
[script]http://www.tqzygz.com/5/12/of3.jpg
[script]http://www.tqzygz.com/5/12/of.jpg
[script]http://www.tqzygz.com/5/12/of2.jpg
[iframe]http://www.tqzygz.com/5/12/sv90.htm
[script]http://www.tqzygz.com/5/12/91.js
[exe]http://www.8mhh.com/2009/0527/12.exe
[script]http://www.tqzygz.com/5/12/92.js
[script]http://www.tqzygz.com/5/12/93.js
[iframe]http://www.tqzygz.com/5/12/fox.htm
[iframe]http://www.tqzygz.com/5/12/svfl0.htm
[iframe]http://www.tqzygz.com/5/12/ff.html
[script]http://www.tqzygz.com/5/12/if.js
[script]http://www.tqzygz.com/5/12/ff.jpg
[iframe]http://www.tqzygz.com/5/12/ie.html
[script]http://www.tqzygz.com/5/12/if.js
[script]http://www.tqzygz.com/5/12/ie.jpg
[iframe]http://www.tqzygz.com/5/12/ff.html
[iframe]http://www.tqzygz.com/5/12/ie.html
[iframe]http://www.tqzygz.com/5/12/ff.html
[iframe]http://www.tqzygz.com/5/12/ff.html

networkedition - 2009-12-29 11:02:00

Log generated by networkedition use mdecoder 0.30
[root]http://jkgls.51kang.com/
[script]http://a.ppmmoo.cn
[iframe]http://8884.ss.la/445/ad.htm
[iframe]http://8884.ss.la/445/gvff.htm
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gv14.htm
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gvgg.htm
[script]http://8884.ss.la/445/ruixing.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gvbf.htm
[script]http://8884.ss.la/445/baozi.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gv122122.htm
[iframe]http://8884.ss.la/445/gv122121.htm
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gvxxz.htm
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/gvfl.htm
[iframe]http://8884.ss.la/445/gv11.html
[script]http://8884.ss.la/445/swfobject.js
[flash]http://8884.ss.la/445/./gg115.swf
[exe]http://tj.7766.org/h.exe
[flash]http://8884.ss.la/445/./gg47.swf
[flash]http://8884.ss.la/445/./gg16.swf
[flash]http://8884.ss.la/445/./gg45.swf
[flash]http://8884.ss.la/445/./gg64.swf
[flash]http://8884.ss.la/445/./gg28.swf
[iframe]http://8884.ss.la/445/gv22.html
[script]http://8884.ss.la/445/swfobject.js
[flash]http://8884.ss.la/445/./vv115.swf
[flash]http://8884.ss.la/445/./vv28.swf
[flash]http://8884.ss.la/445/./vv16.swf
[flash]http://8884.ss.la/445/./vv45.swf
[flash]http://8884.ss.la/445/./vv64.swf
[flash]http://8884.ss.la/445/./vv47.swf
[iframe]http://8884.ss.la/445/gv11.html
[iframe]http://8884.ss.la/445/gvcx.htm
[script]http://8884.ss.la/445/cx.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/445/i7.htm
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/google.htm
[iframe]http://8884.ss.la/4/ie7.htm
[iframe]http://8884.ss.la/4/search.htm
[script]http://8884.ss.la/4/google_ad.js
[iframe]http://8884.ss.la/4/cqqmp.htm
[script]http://8884.ss.la/4/cqqskin.css
[exe]http://xxx.ss.la/4.exe
[script]http://8884.ss.la/4/show.jpg
[script]http://8884.ss.la/4/shows.jpg
[script]http://8884.ss.la/4/google_ads.js
[iframe]http://8884.ss.la/4/ec1.htm
[script]http://8884.ss.la/4/ec4.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyfl.htm
[iframe]http://8884.ss.la/4/ecof.htm
[script]http://8884.ss.la/4/off.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/fydvd.htm
[iframe]http://8884.ss.la/4/fycry.htm
[script]http://8884.ss.la/4/cry.css
[exe]http://xxx.ss.la/4.exe
[script]http://8884.ss.la/4/google_adx.js
[iframe]http://8884.ss.la/4/cqq0.htm
[script]http://8884.ss.la/4/cqq2s.css
[script]http://8884.ss.la/4/cqq2.css
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/ecb.htm
[iframe]http://8884.ss.la/4/ecbbb.htm
[script]http://8884.ss.la/4/ecfff.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyr.htm
[script]http://8884.ss.la/4/rr.js
[iframe]http://8884.ss.la/4/evilr.htm
[script]http://8884.ss.la/4/evilrr.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyre1.htm
[script]http://8884.ss.la/4/fyr1.js
[exe]http://xxx.ss.la/4.exe
[script]http://8884.ss.la/4/zz.js
[iframe]http://8884.ss.la/4/fylz.htm
[script]http://8884.ss.la/4/xxxxz.js
[exe]http://xxx.ss.la/4.exe
[iframe]http://8884.ss.la/4/ecfox.htm
[iframe]http://8884.ss.la/4/ecffx.htm
[script]http://8884.ss.la/4/ecfox.js
[exe]http://xxx.ss.la/4.exe
[script]http://8884.ss.la/4/music.js
[iframe]http://8884.ss.la/4/sfpf.htm
[iframe]http://8884.ss.la/4/ax.htm
[exe]http://8884.ss.la/4.exe
[iframe]http://www.sesesemml.cn/?81462476
[iframe]http://a.mmzfc.cn/zz/a.htm?81462476
[iframe]http://8884.ss.la/a.htm?81462476
[iframe]http://ersyrt5h.7766.org/web/40/index.html
[script]http://ersyrt5h.7766.org/web/40/a.jpg
[script]http://ersyrt5h.7766.org/web/40/c.jpg
[script]http://ersyrt5h.7766.org/web/40/d.css
[script]http://ersyrt5h.7766.org/web/40/e.jpg
[script]http://ersyrt5h.7766.org/web/40/f.css
[iframe]http://herrttt.3322.org/web/40/index.html
[iframe]http://fffsder.7766.org/htmlasp/imgasp/asp.html?z2
[iframe]http://a.ppmmoo.cn/tj.htm

networkedition - 2009-12-29 11:03:00

Log generated by networkedition use mdecoder 0.30
[root]http://youxi.12799.com/flash/3264.htm
[script]http://youxi.12799.com/js/topper.js
[script]http://youxi.12799.com/js/jquery-1.2.pack.js
[script]http://:
[script]http://youxi.12799.com/js/common.js
[iframe]http://pl.7k7k.com/index.htm?id=
[script]http://youxi.12799.com/js/copyright.js
[script]http://js.users.51.la/1001119.js
[iframe]http://www.kuikli.com/x/style.gif
[script]http://www.kuikli.com/x/style.png

瑞星卡卡安全论坛