瑞星卡卡安全论坛

首页 » 技术交流区 » 恶意网站交流 » 每日网马播报 » 瑞星网站每日安全播报(2010年1月20日)
networkedition - 2010-1-20 13:13:00


引用:
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。



引用:
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。



引用:

1. http://ndyle.blogbus.com/（南都娱乐 - 博客大巴）
2. http://pic.skyhu.com/(火狐图库）
3. http://xz.netsh.com/(乐趣网 - netsh.com 虚拟社区)
4. http://88mm.wxjy.com.cn/(2010无锡教育)
5. http://www.3158.cn/(3158致富网，致富经)


用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
networkedition - 2010-1-20 13:13:00
Log is generated by FreShow.
[wide]http://ndyle.blogbus.com/
    [frame]http://online.zcom.com/full/11913/online.html
    [frame]http://wwaa4.7766.org:2988/log/mid.html?y11
        [object]http://wwaa4.7766.org:2988/log/ie.html
            [object]http://tempxxp.3322.org:8277/log.css
        [object]http://201003.8866.org:2988/log/what.jpg
    [script]http://public.blogbus.com/blogbus/skin/common/resize.js
    [script]http://public.blogbus.com/blogbus/skin/common/helper1.js?v1023
    [script]http://counter.blogbus.com/counter.js.php
networkedition - 2010-1-20 13:14:00
Log is generated by FreShow.
[wide]http://pic.skyhu.com/html/youXi/200812/30/273.html
    [script]http://pic.skyhu.com/html/youXi/200812/30/../../../../js/jquery-skyhu.js
    [script]http://pic.skyhu.com/html/youXi/200812/30/../../../../js/cookie.js
        [script]http://www.crcf.org.cn/logo.gif?
            [frame]http://201003.8866.org:2988/log/mid.html?l
                [object]http://201003.8866.org:2988/log/ie.html
                http://tempxxp.3322.org:8277/log.css
                    [object]http://201003.8866.org:2988/log/what.jpg
    [script]http://pic.skyhu.com/html/youXi/200812/30/../../../../js/auto_play.js
    [script]http://pic.skyhu.com/html/youXi/200812/30/../../../../js/group.js
    [script]http://pic.skyhu.com/html/youXi/200812/30/../../../../js/ivy.js
    [script]http://pic.skyhu.com/getcommen.asp?id=273&num=10&max=10
    [frame]http://www.skyhu.com/SkyhuManage/news_skyhu.asp
    [script]http://bbs.skyhu.com/api/javascript.php?key=tukuluntanjing
    [script]http://pic.skyhu.com/hit.asp?id=273
    [frame]http://pic.skyhu.com/head/allfoot.htm
        [script]http://js.users.51.la/1641539.js
        [script]http://js.users.51.la/2386794.js
networkedition - 2010-1-20 13:14:00
Log is generated by FreShow.
[wide]http://xz.netsh.com/eden/bbs/787353/html/tree_7809930.html
    [script]http://xz.netsh.com/eden/forum/js/func.js
    [script]http://www.netsh.com/eden_advert/js/eden_note.js
    [frame]http://xz.netsh.com/eden/forum/count_notes_browse.php?p_iForumID=787353&p_iMainNoteID=7809930&p_iNoteID=7809930
    [script]http://xz.netsh.com/eden/js/menu.js
    [script]http://file0.che168.com/js.js
    [script]http://www.crcf.org.cn/logo.gif?netsh
        [frame]http://201003.8866.org:2988/log/mid.html?l
            [object]http://201003.8866.org:2988/log/ie.html
                [object]http://tempxxp.3322.org:8277/log.css
                    [object]http://201003.8866.org:2988/log/what.jpg
networkedition - 2010-1-20 13:14:00
Log is generated by FreShow.
[wide]http://88mm.wxjy.com.cn/ly/error.asp?info=系统已经禁止了你的发言！
    [frame]http://hack3389.cn/m.htm
        [frame]http://hack3389.cn/qq.html
        [script]http://count3.51yes.com/click.aspx?id=32621231&logo=12
    [frame]http://wz2d.2288.org/jxfhack.html
    [frame]http://8096.qrqr.net/indexx.htm
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://a7290268.3322.org:2008/index.htm
    [frame]http://8096.qrqr.net/indexx.htm
        [object]http://gxp118.3322.org/321.exe
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://hack3389.cn/m.htm
    [frame]http://wz2d.2288.org/jxfhack.html
    [frame]http://8096.qrqr.net/indexx.htm
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://a7290268.3322.org:2008/index.htm
    [frame]http://hack3389.cn/m.htm
    [frame]http://wz2d.2288.org/jxfhack.html
    [frame]http://8096.qrqr.net/indexx.htm
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://a7290268.3322.org:2008/index.htm
    [frame]http://8096.qrqr.net/indexx.htm
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://hack3389.cn/m.htm
    [frame]http://wz2d.2288.org/jxfhack.html
    [frame]http://8096.qrqr.net/indexx.htm
    [frame]http://www.kingji.com/cache/test.htm
    [frame]http://a7290268.3322.org:2008/index.htm
networkedition - 2010-1-20 13:19:00
Log generated by networkedition use mdecoder 0.30
[root]http://www.3158.cn/saygao.html?Urlid=12961&Url=http://www.3158.cn/?site=saygao_V1122
    [iframe]http://www.saygao.com/address/click/count.html?urlid=&url=+
        [script]http://js.users.51.la/3492528.js
        [script]http://js.users.51.la/3492528.js
        [script]http://www.saygao.com/address/click/open/1-1.js
            [script]http://8291.99rr.net/css.js
                [script]http://js.users.51.la/2706947.js
                [iframe]http://5a.klkl444.8866.org:169/360/3002/index.html
                    [script]http://ksll22.klkl444.8866.org:169/360/16/a.jpg
                          http://my.xingan5.cn:8886/Down/my/16.exe
                           
                            http://ksll22.klkl444.8866.org:169/360/16/d.css
                           
                            http://ksll22.klkl444.8866.org:169/360/16/f.css
                              http://js.tongji.linezing.com/615056/tongji.js
                            http://js.tongji.linezing.com/1389409/tongji.js
                    [script]http://www.saygao.com/address/click/open/1-2.js
    [iframe]http://www.3158.cn/saygao.html?Urlid=12961&Url=http://www.3158.cn/noresize
        [iframe]http://www.saygao.com/address/click/count.html?urlid=&url=+
        [iframe]http://www.3158.cn/saygao.html?Urlid=12961&Url=http://www.3158.cn/noresize
1
查看完整版本: 瑞星网站每日安全播报(2010年1月20日)
© 2000 - 2024 Rising Corp. Ltd.