瑞星网站每日安全播报(2010年3月25日) bbs.ikaka.com

networkedition - 2010-3-25 13:18:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://sh.sojiji.com/（上海社集网上海业主生活社区）
2. http://www.a.com.cn/(中华广告网 - 国内最专业的广告行业门户网站)
3. http://www.du8.com/(电子书小说_读吧网 du8.com)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-3-25 13:20:00

Log is generated by FreShow.
[wide]http://sh.sojiji.com/
[script]http://sh.sojiji.com/Static/Js/Index/NewLogin.js
[frame]http://sh.sojiji.com/Default/NewLogin.aspx
[script]http://sh.sojiji.com/Static/Js/Index/NewLogin.js
[frame]http://sh.sojiji.com/Default/
[frame]http://sh.sojiji.com/zhuanti/newindex/
[frame]http://www.tq121.com.cn/citybook/soufun/index.php?city=上海
[object]http://fefgttty.9966.org:811/new/15.html
[frame]http://fefgttty.9966.org:811/new/../wm/15/index.html
[frame]http://fefgttty.9966.org:811/new/../wm/15/qc.html
[script]http://fefgttty.9966.org:811/new/../wm/15/rl.jpg
[object]http://zhufuwu3.9966.org:811/aaaa/s8/s15.exe
[script]http://fefgttty.9966.org:811/new/../wm/15/y1.jpg
[script]http://fefgttty.9966.org:811/new/../wm/15/tl.jpg
[script]http://fefgttty.9966.org:811/new/\"http://tongji.linezing.com/1530018/tongji.js\"
[script]http://fefgttty.9966.org:811/new/\"http://tongji.linezing.com/1530019/tongji.js\"
[script]http://sh.sojiji.com/jscript/search/option.js
[script]http://sh.sojiji.com/jscript/search/city.js
[script]http://sh.sojiji.com/jscript/search/Stype_1.js
[script]http://sh.sojiji.com/jscript/search/Stype_2.js
[script]http://sh.sojiji.com/jscript/search/Stype_3.js

networkedition - 2010-3-25 13:21:00

Log generated by networkedition use mdecoder 0.50
[root]http://www.a.com.cn/cn/yxch/xiejue/10704.html
[iframe]http://afs.host.173iis.com/admin/198200/19800/top.html
[iframe]http://afs.host.173iis.com/admin/198200/19800/lady.html
[iframe]http://afs.host.173iis.com/admin/198200/19800/xo.htm
[script]http://afs.host.173iis.com/admin/198200/19800/ooxx.css
[exp]http://afs.host.173iis.com/admin/198200/19800/water.htm(Exploit.Mpeg2.b)
[script]http://afs.host.173iis.com/admin/198200/19800/wat.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/sons.jpg
[virus]http://afs.host.173iis.com/admin/198200/19800/a5.exe
[script]http://afs.host.173iis.com/admin/198200/19800/c.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/d.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/e.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/f.jpg
[iframe]http://afs.host.173iis.com/admin/198200/19800/nivea.htm
[iframe]http://afs.host.173iis.com/admin/198200/19800/snow.htm
[iframe]http://afs.host.173iis.com/admin/198200/19800/xi.htm
[iframe]http://afs.host.173iis.com/admin/198200/19800/xf.htm
[iframe]http://afs.host.173iis.com/admin/198200/19800/xi.htm
[exp]http://afs.host.173iis.com/admin/198200/19800/nivea9.htm(Exploit.Ms09002.a)
[script]http://afs.host.173iis.com/admin/198200/19800/91.js
[virus]http://afs.host.173iis.com/admin/198200/19800/a5.exe
[script]http://afs.host.173iis.com/admin/198200/19800/90.js
[iframe]http://afs.host.173iis.com/admin/198200/19800/nivea2.htm
[iframe]http://afs.host.173iis.com/admin/198200/19800/rain.htm
[script]http://afs.host.173iis.com/admin/198200/19800/of.js
[script]http://afs.host.173iis.com/admin/198200/19800/of3.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/of.jpg
[script]http://afs.host.173iis.com/admin/198200/19800/of2.jpg
[iframe]http://afs.host.173iis.com/admin/198200/19800/ani.html
[iframe]http://afs.host.173iis.com/admin/198200/19800/CUTE-IE.html
[script]http://afs.host.173iis.com/admin/198200/19800/pack.js
[script]http://afs.host.173iis.com/admin/198200/19800/pack.css
[exe]http://afs.host.173iis.com/admin/198200/19800/a5.exe
[iframe]http://afs.host.173iis.com/admin/198200/19800/ie.htm
[exe]http://afs.host.173iis.com/admin/198200/19800/a5.exe
[script]http://js.users.51.la/3603630.js
[exe]http://www.w2sf.com/ui.css

networkedition - 2010-3-25 13:22:00

Log is generated by FreShow.
[wide]http://www.du8.com/books/outepzw13459/1.shtml
[script]http://www.du8.com/books/out/epzw/13/459_data.js
[object]http://www.epzw.com/files/article/html/13/13459/955416.html
[script]http://www.epzw.com/configs/article/pagetop1.js
[script]http://www.epzw.com/configs/article/pagetopttt.js
[script]http://www.epzw.com/scripts/ajax.js
[script]http://www.epzw.com/configs/article/pagebottom.js
[object]http://club.9istyle.com/wap/include/main/ie.html?332
[object]http://club.9istyle.com/wap/include/bbbb.exe
[script]http://www.epzw.com/configs/article/pagebottom4.js
[script]http://www.du8.com/books/out/read.js
[frame]http://www.du8.com/books/out/epzw/13/459_top.shtml?page='+pg.page+'
[frame]http://www.du8.com/books/outepzw13459/'+urlarr[pg.page-1]+'

fengxingjudy - 2010-3-25 15:28:00

无名老师，你为什么不把每一个网马利用的漏洞都标记出来呢，总是标记一部分...

瑞星卡卡安全论坛