瑞星网站每日安全播报(2012年7月2日) bbs.ikaka.com

networkedition - 2012-7-2 17:04:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://sfjs.hbxftc.com/(国家骨干高等职业院校建设专题网站)
2. http://www.areabus.com/(阿尔网)
3. http://www.ynlyfw.com/(昆明中国国际旅行社)
4. http://xsh.sdili.edu.cn/(山东轻工业学院学生会)

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

networkedition - 2012-7-2 17:04:00

Log generated by networkedition use mdecoder 0.67
[root]http://sfjs.hbxftc.com/(国家骨干高等职业院校建设专题网站)
[flash]http://sfjs.hbxftc.com/images/ggyx.swf
[script]http://sfjs.hbxftc.com/css/xlcd.js
[script]http://sfjs.hbxftc.com/sfjsht/css/tpll.js
[script]http://sfjs.hbxftc.com/sfjsht/css/highslide.js
[script]http://foy.AtHerSite.com/b.js?google=6x251
[script]http://vji.ikwb.COM:89/2/jiay.htm
[iframe]http://vji.ikwb.COM:89/2/eefe.htm
[virus]http://KPjCBi.ikwbPEFK93OM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js

networkedition - 2012-7-2 17:04:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.areabus.com/ggxx_11763732.html(【供应空心并联电抗器，10KV并】_供应空心并联电抗器，10KV并价格/报价,供应空心并联电抗器，10KV并厂家/厂商/经销商/公司_ | 游艺设施 - 阿尔商务网)
[script]http://fpd.AtHerSite.com/b.js?google=6x263
[script]http://vji.ikwb.COM:89/2/jiay.htm
[iframe]http://vji.ikwb.COM:89/2/eefe.htm
[virus]http://KPjCBi.ikwbPEFK93OM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://www.areabus.com/Ex_Big5.js
[script]http://www.areabus.com/bus/sichuan.js
[script]http://www.areabus.com/bus/text.js
[script]http://www.areabus.com/bus/share.js
[script]http://v2.jiathis.com/code/jia.js?uid=895370
[script]http://www.areabus.com/bus/business_show_middle.js
[script]http://www.areabus.com/bus/text_fangpian.js
[script]http://www.areabus.com/#/bus/neirong_tishi.js
[script]http://www.areabus.com/bus/gg_search.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://wm.baidu.com/preview/preview.js
[iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
[script]http://www.areabus.com/#/bus/zhuanti_left.js
[script]http://www.areabus.com/bus/baidu_search.js
[script]http://www.areabus.com/bus/tool.js
[script]http://www.areabus.com/bus/tupian_200_200.js
[script]http://www.areabus.com/bus/baidu_zhuti_200_90.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://www.areabus.com/#/bus/baidu_120_90.js
[script]http://www.areabus.com/bottom.js
[script]http://www.areabus.com/hm.baidu.com/h.js?acca4bf65969312eb59edd17d0e8a154

networkedition - 2012-7-2 17:05:00

Log generated by anonymous use mdecoder 0.67
[root]http://www.ynlyfw.com/(云南旅行社|昆明旅行社|云南国旅|昆明国旅|云南旅游|昆明旅游|大理旅游|丽江旅游|香格里拉|西双版纳—昆明中国国际旅行社www.ynlyfw.com)
[script]http://www.ynlyfw.com/skin/main.js
[iframe]http://www.ynlyfw.com/conn/toplogin.asp
[script]http://fod.AtHerSite.com/b.js?google=6x181
[script]http://vji.ikwb.COM:89/2/jiay.htm
[iframe]http://vji.ikwb.COM:89/2/eefe.htm
[virus]http://KPjCBi.ikwbPEFK93OM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fpo.AtHerSite.com/b.js?google=6x301
[script]http://www.ynlyfw.com/skin/sinaflash1.js
[iframe]http://www.ynlyfw.com/conn/leftlogin.asp
[script]http://fod.AtHerSite.com/b.js?google=6x181
[script]http://fpo.AtHerSite.com/b.js?google=6x301
[script]http://dgt.zoosnet.net/JS/LsJS.aspx?siteid=DGT77733269&float=1
[script]http://dgt.zoosnet.net/js/JS7248S+
[script]http://www.ynlyfw.com/hm.baidu.com/h.js?f4f2ff1ace17d02bfaab856948a6c7aa
[script]http://fod.AtHerSite.com/b.js?google=6x181
[script]http://fpo.AtHerSite.com/b.js?google=6x301

networkedition - 2012-7-2 17:05:00

Log generated by networkedition use mdecoder 0.67
[root]http://xsh.sdili.edu.cn/(山东轻工业学院学生会)
[script]http://xsh.sdili.edu.cn/js/inc/common.js
[script]http://xsh.sdili.edu.cn/js/inc/innerhtml.js
[script]http://xsh.sdili.edu.cn/js/inc/scripts.text.substr(0,
[script]http://xsh.sdili.edu.cn/js/inc/ajaxrequest.js
[script]http://xsh.sdili.edu.cn/js/inc/jquery.js
[script]http://xsh.sdili.edu.cn/cache/ads.js
[iframe]http://www.otcms.com/ads.asp?adID=1
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=2
[script]http://www.otcms.com/cache/ads.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20110610
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://wm.baidu.com/preview/preview.js
[iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=3
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=5
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=6
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=7
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=8
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=9
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=10
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=11
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=12
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=13
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=14
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=15
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=16
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=17
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[script]http://xsh.sdili.edu.cn/configJs.asp
[script]http://xsh.sdili.edu.cn/cache/configJs.js
[script]http://xsh.sdili.edu.cn/js/popup.js
[script]http://xsh.sdili.edu.cn/tools/popup/popup.js
[script]http://xsh.sdili.edu.cn/js/users.js
[script]http://xsh.sdili.edu.cn/js/usersCenter.js
[script]http://xsh.sdili.edu.cn/tools/nicEdit/nicEdit.js
[script]http://0
[script]http://xsh.sdili.edu.cn/js/top.js
[script]http://xsh.sdili.edu.cn/users.asp
[script]http://xsh.sdili.edu.cn/js/index.js
[script]http://fmk.AtHerSite.com/b.js?google=6x032
[script]http://vji.ikwb.COM:89/2/jiay.htm
[iframe]http://vji.ikwb.COM:89/2/eefe.htm
[virus]http://KPjCBi.ikwbPEFK93OM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://xsh.sdili.edu.cn/tools/flashImgTrun/swf.js
[flash]http://xsh.sdili.edu.cn/tools/flashImgTrun/imgTrun.swf
[script]http://fmk.AtHerSite.com/b.js?google=6x032

瑞星卡卡安全论坛