瑞星卡卡安全论坛

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

Log generated by networkedition use mdecoder 0.67
[root]http://cc.cc88cc.com/css/11/index.html?www.lightnovel.cn
    [iframe]http://cc.cc88cc.com/css/11/f.htm
        [iframe]http://cc.cc88cc.com/css/11/jj.html
            [script]http://cc.cc88cc.com/css/11/j1.js
            [script]http://cc.cc88cc.com/css/11/j2.js
            [script]http://cc.cc88cc.com/css/11/j3.js
    [iframe]http://cc.cc88cc.com/css/11/z.htm
        [exp]http://cc.cc88cc.com/css/11/b6.htm(Exploit.Ie0dayCVE0806.a)
            [script]http://cc.cc88cc.com/css/11/b1.txt
            [script]http://cc.cc88cc.com/css/11/b2.txt
            [script]http://cc.cc88cc.com/css/11/b3.txt
            [script]http://cc.cc88cc.com/css/11/b4.txt
            [script]http://cc.cc88cc.com/css/11/b5.txt
            [virus]http://youbet.cc88cc.com/css/11/wow.exe
    [script]http://js.users.51.la/5140165.js

Log generated by networkedition use mdecoder 0.67
[root]http://office.sdjtu.edu.cn/jgzy/wfxy/tzgg/ShowArticle.asp?ArticleID=228(2011第四届国际设计美术大奖赛)
    [script]http://ffl.UglyAs.com/b.js?google=4x162
[root]http://vhn.ikwb.COM:89/2/hnay.htm
    [iframe]http://vhn.ikwb.COM:89/2/eee.htm
[virus]http://KPhCBn.ikwb.COM:89/o/bj.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/JS/prototype.js
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/JS/scriptaculous.js
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/JS/checklogin.js
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/js/menu.js
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/js/stm31.js
    [flash]http://office.sdjtu.edu.cn/jgzy/wfxy/Skin/sealove/top.swf
    [script]http://office.sdjtu.edu.cn/jgzy/wfxy/js/date.js

Log generated by networkedition use mdecoder 0.67
[root]http://old.suburbs510.com/news/2011/qn/qn.html?www.hoonb.com(Exploit.Ie0dayCVE0806.a)(倩女幽魂资料数据库-【倩女幽魂资料网】)
    [script]http://old.suburbs510.com/news/2011/qn/yt.jpg
    [iframe]http://old.suburbs510.com/news/2011/qn/flash.html
    [virus]http://zlwh.cc/webroot/ad/q.exe

Log generated by networkedition use mdecoder 0.67
[root]http://www.dqacw.com/archiver/?fid-71.html(大庆爱车网-顷力打造百湖油城第一汽车资讯平台! -  Powered by Discuz! Archiver)
    [script]http://fah.UglyAs.com/b.js?google=3x022
[root]http://vhn.ikwb.COM:89/2/hnay.htm
    [iframe]http://vhn.ikwb.COM:89/2/eee.htm
[virus]http://KPhCBn.ikwb.COM:89/o/bj.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://fas.UglyAs.com/b.js?google=3x053

Log generated by anonymous use mdecoder 0.67
[root]http://www.hopefly.com/sharp(寒枫在线-脑筋急转弯)
    [iframe]http://www.hopefly.com/../top.htm
    [iframe]http://www.hopefly.com/menu.htm
    [iframe]http://www.hopefly.com/../bottom.htm
    [script]http://dbp.IsGre.at/b.js?google=07x163
    [script]http://ddj.IsGre.at/b.js?google=08x012
[root]http://vhn.ikwb.COM:89/2/hnay.htm
    [iframe]http://vhn.ikwb.COM:89/2/eee.htm
[virus]http://KPhCBn.ikwb.COM:89/o/bj.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://dej.IsGre.at/b.js?google=08x142
    [script]http://dep.IsGre.at/b.js?google=08x162
    [script]http://det.IsGre.at/b.js?google=08x173
    [script]http://dex.IsGre.at/b.js?google=08x192

hxxp://vhn.ikwb.COM:89/2/eee.htm 是暴雷漏洞利用代码 看来这个0day目前已经被国内挂马爱好者青睐了