networkedition - 2010-12-7 13:17:00
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。
1. http://www.58com.com/(原创中国网_中国原创音乐_CCTV_原创歌曲_原创大赛)
2. http://cs.hsit.edu.cn/（欢迎访问黄石理工学院计算机学院 ）
3. http://hlxy.ntu.edu.cn/(南通大学)
4. http://www.hcit.edu.cn/（欢迎访问淮安信息职业技术学院）
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
networkedition - 2010-12-7 13:17:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.58com.com/web/spstorehouse/class3.aspx?id=36180(外婆桥_词曲库_中国原创音乐_CCTV_原创歌曲_原创大赛_专题报道_影视制作_录音棚)
[script]http://www.58com.com/web/spstorehouse/../../js/pagechange.js
[script]http://www.58com.com/web/spstorehouse/../../js/xmlhttp.js
[script]http://www.58com.com/web/spstorehouse/../../js/ucoll.js
[script]http://www.58com.com/web/spstorehouse/../../js/message.js
[script]http://www.58com.com/web/spstorehouse/../../js/JavascriptCore.js
[script]http://www.58com.com/web/spstorehouse/../../js/comm.js
[script]http://www.58com.com/web/spstorehouse/../../js/showmsgstr.js
[script]http://www.58com.com/ajaxpro/prototype.ashx
[script]http://www.58com.com/ajaxpro/core.ashx
[script]http://www.58com.com/ajaxpro/converter.ashx
[script]http://www.58com.com/ajaxpro/WebUI.web.spstorehouse.class3,WebUI.ashx
[script]http://www.58com.com/ajaxpro/WebUI.web.spstorehouse.Head,WebUI.ashx
[script]http://www.58com.com/web/spstorehouse/../../js/Search.js
[script]http://bjdtpy.com/x.js
[exp]http://yyyyaus.9966.org:8843/GwN2/index.html?1(Exploit.Ie0dayCVE0806.a)
[virus]http://f1.ad58.info:8843/xx/gwn2.css
[script]http://makeupcn.cn/x.js
[exp]http://yyyyaus.9966.org:8843/GwN2/index.html?1(Exploit.Ie0dayCVE0806.a)
[script]http://yyyyaus.9966.org:8843/GwN2/ap.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[script]http://makeupcn.cn/x.js
[iframe]http://www.58com.com/web/spstorehouse/../../htmledit/edit.htm
[flash]http://www.58com.com/web/spstorehouse/../../htmledit/+path+
[flash]http://www.58com.com/web/spstorehouse/../../htmledit/+path+
networkedition - 2010-12-7 13:17:00
Log generated by networkedition use mdecoder 0.67
[root]http://cs.hsit.edu.cn/question/12901.html
[script]http://js.users.51.la/4153335.js
[script]http://www.miscoffiec.com/mh/test.js
[exp]http://www.dlfanhua.cn/admin/bak/mh/mh.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://www.dlfanhua.cn/admin/bak/mh/mh.exe
networkedition - 2010-12-7 13:18:00
Log generated by networkedition use mdecoder 0.67
[root]http://hlxy.ntu.edu.cn/(欢迎访问南通大学护理学院网站！)
[script]http://bry.IsGre.at/b.js?google=12x071
[iframe]http://cjw.25u.com/11/91ay.htm
[iframe]http://cjw.25u.com/11/av.htm
[exp]http://cjw.25u.com/11/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://cjw.25u.com/11/ie.jpg
[script]http://cjw.25u.com/11/iee.jpg
[virus]http://cjw.25u.com/o/bo.exe
[iframe]http://cjw.25u.com/11/7.htm
[script]http://cjw.25u.com/11/ie.jpg
[script]http://cjw.25u.com/11/iee.jpg
[script]http://cjw.25u.com/11/ieee.jpg
[flash]http://hlxy.ntu.edu.cn/swf.swf
[flash]http://hlxy.ntu.edu.cn/hj.swf
[iframe]http://hlxy.ntu.edu.cn/gundong.asp
networkedition - 2010-12-7 13:18:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.hcit.edu.cn/hcit2009/admin/inc/jjl/index.html
[iframe]http://www.hcit.edu.cn/hcit2009/admin/inc/jjl/load.html
[exp]http://www.hcit.edu.cn/hcit2009/admin/inc/jjl/1.html(Exploit.Ie0dayCVE0806.a)
[virus]http://qq.sbwanwan.com:9999/ll.exe
[iframe]http://www.hcit.edu.cn/hcit2009/admin/inc/jjl/2.html
© 2000 - 2025 Rising Corp. Ltd.