瑞星网站每日安全播报(2010年3月16日) bbs.ikaka.com

networkedition - 2010-3-16 11:17:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://auto.shangdu.com/（商都汽车）
2. http://canamie.w272.bizcn.com/(加拿大投资移民)
3. http://job.icxo.com/(世界经理人—世界第一商人门户企业领袖互动平台职业经理人)
4. http://www.hao86.com/(中国求职指南网-求职,自荐书,自荐信,求职信)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-3-16 11:18:00

Log is generated by FreShow.
[wide]http://auto.shangdu.com/News/list/1483.html
[object]http://www.modedu.com/Center/database/top.html
[frame]http://www.modedu.com/Center/database/lady.html
[frame]http://www.modedu.com/Center/database/xo.htm
[script]http://www.modedu.com/Center/database/ooxx.css
[object]http://www.modedu.com/Center/database/a5.exe
[frame]http://www.modedu.com/Center/database/water.htm
[script]http://www.modedu.com/Center/database/wat.jpg
[script]http://www.modedu.com/Center/database/sons.jpg
[object]http://www.modedu.com/Center/database/a5.exe
[script]http://www.modedu.com/Center/database/c.jpg
[script]http://www.modedu.com/Center/database/d.jpg
[script]http://www.modedu.com/Center/database/e.jpg
[script]http://www.modedu.com/Center/database/f.jpg
[frame]http://www.modedu.com/Center/database/nivea.htm
[frame]http://www.modedu.com/Center/database/snow.htm
[frame]http://www.modedu.com/Center/database/xi.htm
[frame]http://www.modedu.com/Center/database/xf.htm
[frame]http://www.modedu.com/Center/database/xi.htm
[frame]http://www.modedu.com/Center/database/nivea9.htm
[script]http://www.modedu.com/Center/database/91.js
[object]http://www.modedu.com/Center/database/a5.exe
[script]http://www.modedu.com/Center/database/90.js
[frame]http://www.modedu.com/Center/database/nivea2.htm
[frame]http://www.modedu.com/Center/database/rain.htm
[script]http://www.modedu.com/Center/database/of.js
[object]http://www.modedu.com/Center/database/a5.exe
[script]http://www.modedu.com/Center/database/of3.jpg
[script]http://www.modedu.com/Center/database/of.jpg
[script]http://www.modedu.com/Center/database/of2.jpg
[frame]http://www.modedu.com/Center/database/ani.html
[object]http://www.modedu.com/Center/database/a5.exe
[script]http://js.users.51.la/3603630.js
[frame]http://auto.shangdu.com/News/list/
[script]http://js.users.51.la/3603630.js

networkedition - 2010-3-16 11:18:00

Log is generated by FreShow.
[wide]http://canamie.w272.bizcn.com/
[frame]http://17486.kkii.net
[script]http://17486.kkii.net/pack.js
[script]http://17486.kkii.net/pack.css
[object]http://course.shufe.edu.cn/itat/Server.exe
[script]http://canamie.w272.bizcn.com/js/MSClass.js
[script]http://canamie.w272.bizcn.com/

networkedition - 2010-3-16 11:19:00

Log generated by networkedition use mdecoder 0.50
[root]http://job.icxo.com/js/tools/main.htm
[iframe]http://job.icxo.com/js/tools/Imok.htm
[flash]http://job.icxo.com/js/tools/sviolaoding.swf
[exp]http://job.icxo.com/js/tools/Works.htm(Exploit.Ms08011.a)
[virus]http://job.icxo.com/js/z.exe
[exp]http://job.icxo.com/js/tools/14.htm(Exploit.Ms06014.a)
[virus]http://job.icxo.com/js/z.exe
[iframe]http://job.icxo.com/js/tools/Ac.htm
[exe]http://job.icxo.com/js/z.exe
[iframe]http://job.icxo.com/js/tools/Lz.htm
[exe]http://job.icxo.com/js/z.exe
[exp]http://job.icxo.com/js/tools/Bf.htm(Exploit.Baofeng.a)
[virus]http://job.icxo.com/js/z.exe
[exp]http://job.icxo.com/js/tools/Real.htm(Exploit.RealPlayerRmoc3260.b)
[virus]http://job.icxo.com/js/z.exe
[exp]http://job.icxo.com/js/tools/Thunder.htm(Exploit.XunleiPplayer.a)
[virus]http://job.icxo.com/js/z.exe
[exp]http://job.icxo.com/js/tools/sina.htm(Exploit.SianDloader.a)
[virus]http://job.icxo.com/js/z.exe

networkedition - 2010-3-16 11:20:00

Log generated by networkedition use mdecoder 0.50
[root]http://www.hao86.com/hot/dd/1460.html
[script]http://club.9istyle.com/wap/include/main/wow.jpg?OXCTKZ
[iframe]http://club.9istyle.com/wap/include/wov1/ie.html?爱aaa123
[exe]http://club.9istyle.com/wap/include/2828.exe
[script]http://js.users.51.la/3329381.js
[exe]http://club.9istyle.com/wap/include/wowui.css

njuptzc - 2010-3-16 20:45:00

Log is generated by FreShow.
[wide]http://canamie.w272.bizcn.com/
[frame]http://17486.kkii.net
[script]http://17486.kkii.net/pack.js
[script]http://17486.kkii.net/pack.css
[object]http://course.shufe.edu.cn/itat/Server.exe
[script]http://canamie.w272.bizcn.com/js/MSClass.js
[script]http://canamie.w272.bizcn.com/ http://image.p4p.sogou.com/accountjs/25/317225.js

fengxingjudy - 2010-3-17 15:05:00

真是速度啊，3月10号的漏洞都开始满天飞了。。。

瑞星卡卡安全论坛