瑞星卡卡安全论坛

首页 » 技术交流区 » 恶意网站交流 » 每日网马播报 » 瑞星网站每日安全播报(2012年8月27日)
networkedition - 2012-8-27 15:03:00


引用:
网址均来自瑞星每日安全播报,我们详细分析其中所挂恶意网址,对于已失效的恶意网址就不再分析。



引用:
注:以下分析出的恶意网址均包含有真实网马下载地址,请勿直接下载并运行,以免系统中招。



引用:


1.  http://www.yjjxw.com.cn/(中国冶金机械网)
2.  http://www.dongshanschool.net/(东山学校)
3.  http://www.aiftc.com/(安徽国际货物运输公司)
4.  http://www.gzzjzx.net/(广州市海珠区六中珠江中学)




用户系统信息:Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.802.30 Safari/535.1 SE 2.X MetaSr 1.0
networkedition - 2012-8-27 15:03:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.yjjxw.com.cn/(中国冶金机械网--冶金 机械 行业的领跑者,中国领先的冶金机械贸易平台,为企业提供最新机械和最新商机!)
    [script]http://www.yjjxw.com.cn/skins/skin8/js/state.js
    [script]http://www.yjjxw.com.cn/skins/skin8/js/hcuntil.js
    [script]http://www.yjjxw.com.cn/js/sinaflash.js
    [script]http://www.yjjxw.com.cn/netOpenClose.asp
        [script]http://fdl.UglyAs.com/b.js?google=3x293
        [script]http://fdo.UglyAs.com/b.js?google=3x303
[script]http://vgr.Jkub.com:66/3/gray.htm
    [iframe]http://vgr.Jkub.com:66/3/360f0u.htm
[virus]http://vgr.Jkub.com:66/o/dk.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
        [script]http://fdr.UglyAs.com/b.js?google=3x313
        [script]http://fef.UglyAs.com/b.js?google=4x052
        [script]http://ffo.UglyAs.com/b.js?google=4x172
        [script]http://fih.AtHerSite.com/b.js?google=5x072
        [script]http://fld.AtHerSite.com/b.js?google=5x232
        [script]http://fmq.AtHerSite.com/b.js?google=6x052
        [script]http://foq.AtHerSite.com/b.js?google=6x222
        [script]http://fqt.AtHerSite.com/b.js?google=7x101
        [script]http://fsg.AtHerSite.com/b.js?google=7x231
        [script]http://fwk.FindHere.org/b.js?google=8x272
    [script]http://www.yjjxw.com.cn/js/0000.js
    [script]http://www.yjjxw.com.cn/hc/changehope/hcmarquee.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中1.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中2.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中3.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中4.js
    [script]http://www.yjjxw.com.cn/js/yu.js
        [script]http://:
    [script]http://www.yjjxw.com.cn/js/tb.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左5.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左6.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左7.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左8.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左9.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左10.js
    [script]http://www.yjjxw.com.cn/autokind/autokind.js
    [script]http://www.yjjxw.com.cn/autokind/autokind_index.js
    [script]http://www.yjjxw.com.cn/search/allkeywords.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左11.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左12.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右5.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右5-1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右6.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右7.js
    [script]http://www.yjjxw.com.cn/autoindex/index_html.asp
        [script]http://fdl.UglyAs.com/b.js?google=3x293
        [script]http://fdo.UglyAs.com/b.js?google=3x303
        [script]http://fdr.UglyAs.com/b.js?google=3x313
        [script]http://fef.UglyAs.com/b.js?google=4x052
        [script]http://ffo.UglyAs.com/b.js?google=4x172
        [script]http://fih.AtHerSite.com/b.js?google=5x072
        [script]http://fld.AtHerSite.com/b.js?google=5x232
        [script]http://fmq.AtHerSite.com/b.js?google=6x052
        [script]http://foq.AtHerSite.com/b.js?google=6x222
        [script]http://fqt.AtHerSite.com/b.js?google=7x101
        [script]http://fsg.AtHerSite.com/b.js?google=7x231
        [script]http://fwk.FindHere.org/b.js?google=8x272
    [script]http://fsg.AtHerSite.com/b.js?google=7x231
    [script]http://fwk.FindHere.org/b.js?google=8x272
networkedition - 2012-8-27 15:04:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.dongshanschool.net/(东山学校)
    [script]http://fki.AtHerSite.com/b.js?google=5x162
[script]http://vgr.Jkub.com:66/3/gray.htm
    [iframe]http://vgr.Jkub.com:66/3/360f0u.htm
[virus]http://vgr.Jkub.com:66/o/dk.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://www.dongshanschool.net/scripts/AC_RunActiveContent.js
    [flash]http://www.dongshanschool.net/SWF/lytop.swf
    [flash]http://image2.sina.com.cn/bj/zonghe/pixviewer.swf
    [script]http://www.dongshanschool.net/./AD/200910/1.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/2.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/3.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/4.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/5.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/../AD/200910/7.js
    [script]http://www.dongshanschool.net/../AD/200910/6.js
    [script]http://www.dongshanschool.net/./AD/200910/8.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/9.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/../AD/200910/10.js
    [script]http://www.dongshanschool.net/../AD/200910/11.js
    [script]http://count.knowsky.com/count2/count.asp?id=72249&sx=1&ys=19
        [iframe]http://count.knowsky.com/js.asp
    [script]http://fki.AtHerSite.com/b.js?google=5x162
networkedition - 2012-8-27 15:04:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.aiftc.com/(安徽国际货物运输公司)
    [script]http://www.aiftc.com/Scripts/AC_RunActiveContent.js
    [flash]http://www.aiftc.com/flash/789abc.swf
    [script]http://dut.UglyAs.com/b.js?google=1x073
[script]http://vgr.Jkub.com:66/3/gray.htm
    [iframe]http://vgr.Jkub.com:66/3/360f0u.htm
[virus]http://vgr.Jkub.com:66/o/dk.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
networkedition - 2012-8-27 15:04:00
Log generated by anonymous use mdecoder 0.67
[root]http://www.gzzjzx.net/
    [script]http://www.gzzjzx.net/Scripts/AC_RunActiveContent.js
    [flash]http://www.gzzjzx.net/home8.swf
[script]http://eaq.UglyAs.com/b.js?google=2x252
    [script]http://fds.UglyAs.com/b.js?google=3x041
    [script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://vgr.Jkub.com:66/3/gray.htm
    [iframe]http://vgr.Jkub.com:66/3/360f0u.htm
[virus]http://vgr.Jkub.com:66/o/dk.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fnb.AtHerSite.com/b.js?google=6x091
    [script]http://frx.AtHerSite.com/b.js?google=7x201
    [script]http://frz.AtHerSite.com/b.js?google=7x203
1
查看完整版本: 瑞星网站每日安全播报(2012年8月27日)