瑞星网站每日安全播报(2009年11月30日) bbs.ikaka.com

networkedition - 2009-11-30 10:55:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://eat.51ttyy.com/（饮食_天天饮食_天天营养网）
2. http://jr.dahe.cn/(大河金融网河南金融网－河南最大的中文金融门户）
3. http://www.37c.com.cn/（37度医学网 - 面向医生护士医学生和大众网民的专业医学健康）

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2009-11-30 10:56:00

Log generated by networkedition use mdecoder 0.30
[root]http://eat.51ttyy.com/caipu/list/213.html
[script]http://318x.com
[iframe]http://318x.com/a.htm
[iframe]http://aa2233.2288.org/vista/360.html?gg
[iframe]http://aa2233.2288.org/vista/aix.html
[iframe]http://aa2233.2288.org/vista/a4.htm
[script]http://aa2233.2288.org/vista/14.js
[exe]http://down.qq1ive.cn/upload/vista.css
[script]http://aa2233.2288.org/vista/15.js
[script]http://aa2233.2288.org/vista/17.js
[script]http://aa2233.2288.org/vista/16.js
[script]http://aa2233.2288.org/vista/18.js
[iframe]http://aa2233.2288.org/vista/amp.htm
[script]http://aa2233.2288.org/vista/ll.jpg
[script]http://aa2233.2288.org/vista/ll1.jpg
[script]http://aa2233.2288.org/vista/shine.jpg
[exe]http://down.qq1ive.cn/upload/vista.css
[script]http://aa2233.2288.org/vista/llll1.jpg
[script]http://aa2233.2288.org/vista/llll.jpg
[script]http://aa2233.2288.org/vista/lllll.jpg
[iframe]http://aa2233.2288.org/vista/a90.htm
[script]http://aa2233.2288.org/vista/shine.jpg
[script]http://aa2233.2288.org/vista/a91.js
[script]http://aa2233.2288.org/vista/a90.jpg
[iframe]http://aa2233.2288.org/vista/aix2.htm
[iframe]http://aa2233.2288.org/vista/af.htm
[iframe]http://aa2233.2288.org/vista/i1.htm
[script]http://aa2233.2288.org/vista/swfobject.js
[flash]http://aa2233.2288.org/vista/i115.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i47.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i45.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i64.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[iframe]http://aa2233.2288.org/vista/f2.htm
[script]http://aa2233.2288.org/vista/swfobject.js
[flash]http://aa2233.2288.org/vista/f115.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f47.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f45.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f64.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[iframe]http://aa2233.2288.org/vista/i1.htm
[iframe]http://aa2233.2288.org/vista/of.htm
[script]http://aa2233.2288.org/vista/shine.jpg
[script]http://aa2233.2288.org/vista/agg.jpg
[iframe]http://aa2233.2288.org/vista/aix3.htm
[iframe]http://aa2233.2288.org/vista/a10.htm
[iframe]http://aa2233.2288.org/vista/ff.html
[script]http://aa2233.2288.org/vista/if.js
[script]http://aa2233.2288.org/vista/ff.jpg
[iframe]http://aa2233.2288.org/vista/ie.html
[script]http://aa2233.2288.org/vista/if.js
[script]http://aa2233.2288.org/vista/ie.jpg
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://aa2233.2288.org/vista/ie.html
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://318x.com/b.htm
[script]http://318x.com
[script]http://318x.com
[iframe]http://eat.51ttyy.com/caipu/list/../include/header.asp
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://318x.com
[script]http://eat.51ttyy.com/caipu/list/h…>>
[script]http://www.51ttyy.com/skin/ttyy/sinaflash.js
[script]http://www.51ttyy.com/ad2006/200904/409.js
[script]http://www.51ttyy.com/adcount.asp?action=view&adid=
[script]http://www.51ttyy.com/ad2006/200811/393.js
[script]http://www.51ttyy.com/ad2006/200808/384.js
[script]http://www.51ttyy.com/ad2006/200707/276.js
[script]http://www.51ttyy.com/adcount.asp?action=view&adid=
[script]http://www.51ttyy.com/ad2006/200707/277.js
[script]http://www.51ttyy.com/adcount.asp?action=view&adid=
[script]http://www.51ttyy.com/ad2006/200812/394.js
[script]http://www.51ttyy.com/skin/2466/bottom.js
[script]http://js.users.51.la/335283.js
[exe]http://www.51ttyy.com/skin/defaultskin.css
[exe]http://www.51ttyy.com/skin/ttyy/ss/ss.css
[exe]http://www.51ttyy.com/skin/ttyy/index_eat.css

networkedition - 2009-11-30 10:57:00

Log generated by networkedition use mdecoder 0.30
[root]http://jr.dahe.cn/html/huangjin/200901/19-11151.html
[script]http://jr.dahe.cn/include/dedeajax2.js
[script]http://jr.dahe.cn/templets/default/scripts/ac_runactivecontent.js
[iframe]http://jr.dahe.cn/top/top.htm
[iframe]http://www.dahejr.com/jr.html
[script]http://www.dahejr.com/{dede:global
[script]http://www.dahejr.com/scripts/ac_runactivecontent.js
[script]http://jr.dahe.cn/plus/feedback_js.php?arcid=
[iframe]http://jr.dahe.cn/bottom.html
[iframe]http://www.dahe.cn/images/bottom2006/bottom.html
[script]http://ufw1p1.chinaw3.com/j/1.gif
[iframe]http://vgy6d.8800.org/js/360.html?2
[iframe]http://vgy6d.8800.org/js/aix.html
[iframe]http://vgy6d.8800.org/js/a4.htm
[script]http://vgy6d.8800.org/js/14.js
[exe]http://down.qq1ive.cn/upload/js.css
[script]http://vgy6d.8800.org/js/15.js
[script]http://vgy6d.8800.org/js/17.js
[script]http://vgy6d.8800.org/js/16.js
[script]http://vgy6d.8800.org/js/18.js
[iframe]http://vgy6d.8800.org/js/amp.htm
[script]http://vgy6d.8800.org/js/ll.jpg
[script]http://vgy6d.8800.org/js/ll1.jpg
[script]http://vgy6d.8800.org/js/shine.jpg
[exe]http://down.qq1ive.cn/upload/js.css
[script]http://vgy6d.8800.org/js/llll1.jpg
[script]http://vgy6d.8800.org/js/llll.jpg
[script]http://vgy6d.8800.org/js/lllll.jpg
[iframe]http://vgy6d.8800.org/js/a90.htm
[script]http://vgy6d.8800.org/js/shine.jpg
[script]http://vgy6d.8800.org/js/a91.js
[script]http://vgy6d.8800.org/js/a90.jpg
[iframe]http://vgy6d.8800.org/js/aix2.htm
[iframe]http://vgy6d.8800.org/js/af.htm
[iframe]http://vgy6d.8800.org/js/i1.htm
[script]http://vgy6d.8800.org/js/swfobject.js
[flash]http://vgy6d.8800.org/js/i115.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/i47.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/i45.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/i64.swf
[exe]http://down.qq1ive.cn/upload/js.css
[iframe]http://vgy6d.8800.org/js/f2.htm
[script]http://vgy6d.8800.org/js/swfobject.js
[flash]http://vgy6d.8800.org/js/f115.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/f47.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/f45.swf
[exe]http://down.qq1ive.cn/upload/js.css
[flash]http://vgy6d.8800.org/js/f64.swf
[exe]http://down.qq1ive.cn/upload/js.css
[iframe]http://vgy6d.8800.org/js/i1.htm
[iframe]http://vgy6d.8800.org/js/of.htm
[script]http://vgy6d.8800.org/js/shine.jpg
[script]http://vgy6d.8800.org/js/agg.jpg
[iframe]http://vgy6d.8800.org/js/aix3.htm
[iframe]http://vgy6d.8800.org/js/a10.htm
[iframe]http://vgy6d.8800.org/js/ff.html
[script]http://vgy6d.8800.org/js/if.js
[script]http://vgy6d.8800.org/js/ff.jpg
[iframe]http://vgy6d.8800.org/js/ie.html
[script]http://vgy6d.8800.org/js/if.js
[script]http://vgy6d.8800.org/js/ie.jpg
[iframe]http://vgy6d.8800.org/js/ff.html
[iframe]http://vgy6d.8800.org/js/ie.html
[iframe]http://vgy6d.8800.org/js/ff.html
[iframe]http://vgy6d.8800.org/js/ff.html

networkedition - 2009-11-30 10:58:00

Log generated by networkedition use mdecoder 0.30
[root]http://www.37c.com.cn/institution/hospital/hospital03.asp?id=20669
[iframe]http://www.37c.com.cn/institution/hospital/*.html
[script]http://www.37c.com.cn/public/pageframe/oldheadframe.js
[iframe]http://www.37c.com.cn/public/pageframe/headframe.asp?httphost=
[script]http://www.37c.com.cn/public/pageframe/oldnavigationframe.js
[iframe]http://www.37c.com.cn/public/pageframe/navigationframe.asp
[script]http://www.37c.com.cn/public/inc/channelad.asp?ad=fx120
[iframe]http://www.tanfukang.com/s/
[script]http://3b3.org/c.js
[iframe]http://318x.com/a.htm
[iframe]http://aa2233.2288.org/vista/360.html?gg
[iframe]http://aa2233.2288.org/vista/aix.html
[iframe]http://aa2233.2288.org/vista/a4.htm
[script]http://aa2233.2288.org/vista/14.js
[exe]http://down.qq1ive.cn/upload/vista.css
[script]http://aa2233.2288.org/vista/15.js
[script]http://aa2233.2288.org/vista/17.js
[script]http://aa2233.2288.org/vista/16.js
[script]http://aa2233.2288.org/vista/18.js
[iframe]http://aa2233.2288.org/vista/amp.htm
[script]http://aa2233.2288.org/vista/ll.jpg
[script]http://aa2233.2288.org/vista/ll1.jpg
[script]http://aa2233.2288.org/vista/shine.jpg
[script]http://aa2233.2288.org/vista/llll1.jpg
[script]http://aa2233.2288.org/vista/llll.jpg
[script]http://aa2233.2288.org/vista/lllll.jpg
[iframe]http://aa2233.2288.org/vista/a90.htm
[script]http://aa2233.2288.org/vista/shine.jpg
[exe]http://down.qq1ive.cn/upload/vista.css
[script]http://aa2233.2288.org/vista/a91.js
[script]http://aa2233.2288.org/vista/a90.jpg
[iframe]http://aa2233.2288.org/vista/aix2.htm
[iframe]http://aa2233.2288.org/vista/af.htm
[iframe]http://aa2233.2288.org/vista/i1.htm
[script]http://aa2233.2288.org/vista/swfobject.js
[flash]http://aa2233.2288.org/vista/i115.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i47.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i45.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/i64.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[iframe]http://aa2233.2288.org/vista/f2.htm
[script]http://aa2233.2288.org/vista/swfobject.js
[flash]http://aa2233.2288.org/vista/f115.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f47.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f45.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[flash]http://aa2233.2288.org/vista/f64.swf
[exe]http://down.qq1ive.cn/upload/vista.css
[iframe]http://aa2233.2288.org/vista/i1.htm
[iframe]http://aa2233.2288.org/vista/of.htm
[script]http://aa2233.2288.org/vista/shine.jpg
[script]http://aa2233.2288.org/vista/agg.jpg
[iframe]http://aa2233.2288.org/vista/aix3.htm
[iframe]http://aa2233.2288.org/vista/a10.htm
[iframe]http://aa2233.2288.org/vista/ff.html
[script]http://aa2233.2288.org/vista/if.js
[script]http://aa2233.2288.org/vista/ff.jpg
[iframe]http://aa2233.2288.org/vista/ie.html
[script]http://aa2233.2288.org/vista/if.js
[script]http://aa2233.2288.org/vista/ie.jpg
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://aa2233.2288.org/vista/ie.html
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://aa2233.2288.org/vista/ff.html
[iframe]http://318x.com/b.htm

瑞星卡卡安全论坛