瑞星网站每日安全播报(2011年7月26日) bbs.ikaka.com

networkedition - 2011-7-26 10:08:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://www.332pay.com/(332支付平台)
2. http://www.5253.com/(小游戏_在线小游戏)
3. http://www.bbylw.com/(彬彬有礼|【送礼-知礼】)
4. http://www.caderm.org/(中国医学救援协会)
5. http://www.hxxfgj.com/(中国收藏礼品投资网)

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

networkedition - 2011-7-26 10:09:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.332pay.com/users/asp/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)
[script]http://www.332pay.com/users/asp/pack.js
[script]http://www.332pay.com/users/asp/pack.css
[iframe]http://www.332pay.com/users/asp/nb.html
[iframe]http://www.332pay.com/users/asp/fl.html
[exp]http://www.332pay.com/users/asp/wm.html(Exploit.Ie0dayCVE0806.a)
[virus]http://www.332pay.com/users/asp/setup.exe
[virus]http://www.332pay.com/users/asp/setup.exe

networkedition - 2011-7-26 10:09:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.5253.com/baidu/yy.html
[virus]http://www.5253.com/baidu/xxxcb.exe
[script]http://www.5253.com/baidu/y1.js
[script]http://www.5253.com/baidu/y2.js
[script]http://www.5253.com/baidu/y3.js

networkedition - 2011-7-26 10:09:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.bbylw.com/jq/qq/ie6.html
[virus]http://www.bbylw.com/jq/qq/qq.exe

networkedition - 2011-7-26 10:10:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.caderm.org/images/dd.html
[virus]http://www.caderm.org/images/op.exe
[script]http://www.caderm.org/images/ap.js

networkedition - 2011-7-26 10:10:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.hxxfgj.com/js/ie.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://www.ysxgyy.com/content/1001/server.exe

瑞星卡卡安全论坛