瑞星网站每日安全播报(2010年1月19日) bbs.ikaka.com

networkedition - 2010-1-19 11:24:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://bbs.msncn.com/（MSNCN网站导航论坛）
2. http://game.wuhan.net.cn/(武汉热线游戏频道）
3. http://mag2.js.vnet.cn/(江苏互联星空)
4. http://quacor.sx.chinanews.com.cn/(夸克电影网 - 中新山西新闻网)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-1-19 11:25:00

Log is generated by FreShow.
[wide]http://bbs.msncn.com/forumdisplay.php?fid=17
[script]http://bbs.msncn.com/forumdata/cache/common.js?7Xx
[object]http://bbs.xcdx169.net/include/log.js?YVUTIX
[frame]http://bbs.xcdx169.net/uc/data/logs/log.htm?晕18
[script]http://bbs.xcdx169.net/uc/data/logs/log.js
[object]http://bbs.xcdx169.net/uc/data/logs/log.css
[script]http://pagead2.googlesyndication.com/pagead/show_ads.js
[script]http://bbs.msncn.com/include/js/slide.js
[script]http://s80.cnzz.com/stat.php?id=384419&web_id=384419
[script]http://count39.51yes.com/click.aspx?id=390150539&logo=12

networkedition - 2010-1-19 11:25:00

Log generated by networkedition use mdecoder 0.30
[root]http://game.wuhan.net.cn/game/html/cheat/pcgame/20090504/28244.html
[script]http://game.wuhan.net.cn/game/include/whgameajax2.js
[script]http://www.wuhan.net.cn/top/top950.js
[exe]http://www.wuhan.net.cn/top/css/style.css
[script]http://www.wuhan.net.cn/top/top950.js
[script]http://game.wuhan.net.cn/game/plus/ad_js.php?aid=29
[script]http://game.wuhan.net.cn/game/templets/templets/js/minmax.js
[script]http://game.wuhan.net.cn/game/plus/count.php?view=yes&aid=28244&mid=1
[script]http://game.wuhan.net.cn/game/plus/ad_js.php?aid=39
[script]http://game.wuhan.net.cn/game/plus/feedback_js.php?aid=28244
[script]http://ww.keyruns.co.cc/phpmyadmin/css/yx/images.gif
[script]http://game.wuhan.net.cn/game/plus/ad_js.php?aid=39
[script]http://game.wuhan.net.cn/game/plus/ad_js.php?aid=40
[script]http://ad.googlesyndications.co.cc/data/backup/yx/logo.gif
[iframe]http://ad.googlesyndications.co.cc/data/backup/yx/kk.htm?01
[exe]http://ad.googlesyndications.co.cc/data/yx.exe
[script]http://game.wuhan.net.cn/game/plus/ad_js.php?aid=41
[script]http://game.wuhan.net.cn/game/plus/count.php?aid=28244&mid=1

networkedition - 2010-1-19 11:26:00

Log generated by networkedition use mdecoder 0.30
[root]http://mag2.js.vnet.cn/
[script]http://mag2.js.vnet.cn/templets/default/swfobject.js
[script]http://mag2.js.vnet.cn/templets/default/pic_float.js
[script]http://mag2.js.vnet.cn/templets/default/top.js
[script]http://img0.niupan.com/html/tiyu/zt/wj.jpg?133
[iframe]http://img0.niupan.com/html/tiyu/zt/wj/index11.htm?54321
[script]http://img0.niupan.com/html/tiyu/zt/wj/wjsw.js
[exe]http://www.xiaoshuo8.cc/92/92071/78.exe
[iframe]http://js.vnet.cn/top_1024.jsp
[iframe]http://www1.js.vnet.cn/jsvnet2007/topnav1024.html
[exe]http://www1.js.vnet.cn/jsvnet2007/css/style1.css
[script]http://mag2.js.vnet.cn/templets/default/foot.js
[iframe]http://www1.js.vnet.cn/bottom_fs.html
[exe]http://www1.js.vnet.cn/jsvnet2007/css/style1.css

networkedition - 2010-1-19 11:26:00

Log generated by networkedition use mdecoder 0.30
[root]http://quacor.sx.chinanews.com.cn/show.php?contentid=39501
[script]http://quacor.sx.chinanews.com.cn/image/swfobject.js
[script]http://quacor.sx.chinanews.com.cn/image/jquery-1.3.2.min.js
[script]http://quacor.sx.chinanews.com.cn/image/global.js
[script]http://ad.googlesyndications.co.cc/data/backup/yx/images.png?sds
[iframe]http://www.ms8.cc/mym/cache/tpl/safe.htm?13
[exe]http://ad.googlesyndications.co.cc/data/r1.exe
[iframe]http://www.sx.chinanews.com.cn/ym.html
[script]http://www.chinanews.com/cnsurl-2.js
[script]http://js.e.s33.51.la/966.js
[script]http://www.quacor.com/data/js.php?id=168&catid=169&referer=/show.php?contentid=39501
[iframe]http://www.sx.chinanews.com.cn/yw.html
[script]http://js.users.51.la/268030.js
[script]http://js.e.s33.51.la/966.js

biscuitlyt - 2010-1-20 12:57:00

好强啊

瑞星卡卡安全论坛