瑞星网站每日安全播报(2011年1月28日) bbs.ikaka.com

networkedition - 2011-1-28 16:42:00

引用:
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://ciee.cau.edu.cn/　　　开放的中国农业大学欢迎您！
2. http://v.gxtv.cn/　　　广西电视网 - 首页 - Powered by Vicwor...
3. http://www.ecvv.com/　　　B2B Marketplace: China Manufac...
4. http://www.scinfo.gov.cn/　　　遂昌科技信息网--您身边的网上科普学校
5. http://www1.aufe.edu.cn/　　　安徽财经大学网络中心

用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

networkedition - 2011-1-28 16:43:00

Log generated by 1006162666 use mdecoder 0.67
[root]http://ciee.cau.edu.cn/dqpy/index.asp(ｵｳﾆ・ｮﾑ・- ﾐﾅﾏ｢ﾓ・酥､ｳﾌﾑｧﾔｺ)
[flash]http://ciee.cau.edu.cn/dqpy/images/bgover.swf
[iframe]http://ciee.cau.edu.cn/dqpy/./xu_admin/list.htm
[script]http://ciee.cau.edu.cn/dqpy/count.asp

networkedition - 2011-1-28 16:44:00

Log generated by 1006162666 use mdecoder 0.67
[root]http://v.gxtv.cn/memory/ie.html

networkedition - 2011-1-28 16:44:00

Log generated by 1006162666 use mdecoder 0.67
[root]http://www.ecvv.com/member_site.html?url=http://www.zuodan.net&companyId=1061143
[iframe]http://www.ecvv.com/HeadOfComapny.html?companyId=1061143
[script]http://www.ecvv.com/JS/common.js
[script]http://www.ecvv.com/JS/Search.js
[iframe]http://www.zuodan.net
[script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
[iframe]http://121.12.169.200:171/win7/index.html?id=124
[script]http://121.12.169.200:171/win7/chk.php?id=
[script]http://121.12.169.200:171/win7/safe.js
[iframe]http://121.12.169.200:171/win7/about:blank
[script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
[script]http://img/pic-js/prototype.js
[script]http://img/pic-js/scriptaculous.js?load=effects
[script]http://img/pic-js/lightbox.js
[script]http://img/scriptswf.js
[iframe]http://ad.html
[script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
[script]http://www.google-analytics.com/urchin.js

networkedition - 2011-1-28 16:45:00

Log generated by 1006162666 use mdecoder 0.67
[root]http://www.scinfo.gov.cn/zhutan/class1/Index.html(ﾋ・ｿﾆｼｼﾐﾅﾏ｢ﾍ・>> ﾖｿﾀ獸ｨﾀ逸ｫ >> ﾖﾐｹ晗ｿﾀ獸ｨﾀ・
[flash]http:///zhutan/images/top.swf
[script]http://www.scinfo.gov.cn/zhutan/JS/Article_Hot2.js
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Evil.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Flash.htm
[exp]http://www.hb600.com/Inc/DEEPSNOW/Ms06014.htm(Exploit.Ms06014.a)
[virus]http://www.hb600.com/Inc/DEEPSNOW/DEEP.exe
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Lz.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Bfyy.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/MsAccess.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Cx.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/bfyy.htm
[exp]http://www.hb600.com/Inc/DEEPSNOW/Ms06014.htm(Exploit.Ms06014.a)
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Ms08011.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/MsAccess.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Cx.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Lz.htm
[exp]http://www.hb600.com/Inc/DEEPSNOW/MS07004.htm(Exploit.Ms07004.c)
[virus]http://www.hb600.com/Inc/DEEPSNOW/DEEP.exe
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Ms08053.htm
[iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm

networkedition - 2011-1-28 16:46:00

Log generated by 1006162666 use mdecoder 0.67
[root]http://www1.aufe.edu.cn/jianfei/Folder/style/118861.html(ppsｹﾙｷｽﾏﾂﾔﾘ)
[script]http://www.91mir3sf.cn/123/guanggao/tan.js
[script]http://www.91mir3sf.cn/123/guanggao/tuitan.js
[iframe]http://www.91mir3sf.cn/123/guanggao/top.asp
[iframe]http://www.91mir3sf.cn/123/guanggao/zhong.asp
[iframe]http://www.txhtjy.com/stu/anhey.html
[iframe]http://www.txhtjy.com/stu/love.html
[iframe]http://www.txhtjy.com/stu/n73.htm
[iframe]http://www.txhtjy.com/stu/ahf.htm
[iframe]http://www.txhtjy.com/stu/i1.htm
[iframe]http://www.txhtjy.com/stu/f2.htm
[script]http://www.txhtjy.com/stu/swfobject.js
[flash]http://www.txhtjy.com/stu/f115.swf
[flash]http://www.txhtjy.com/stu/f47.swf
[flash]http://www.txhtjy.com/stu/f45.swf
[flash]http://www.txhtjy.com/stu/f64.swf
[iframe]http://www.txhtjy.com/stu/f10.htm
[iframe]http://www.txhtjy.com/stu/i1.htm
[iframe]http://www.txhtjy.com/stu/18.htm
[script]http://www.txhtjy.com/stu/party.css
[exp]http://www.txhtjy.com/stu/19.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://www.txhtjy.com/stu/ufo.exe
[iframe]http://www.txhtjy.com/stu/n95.htm
[iframe]http://www.txhtjy.com/stu/of.htm

lyq317005 - 2011-2-5 19:48:00

知道了

瑞星卡卡安全论坛