瑞星网站每日安全播报(2010年5月20日) bbs.ikaka.com

networkedition - 2010-5-20 15:44:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://web.scau.edu.cn/(华南农业大学)
2. http://3320.net/(爬爬书库)
3. http://www.wsjol.com/(文三街在线)
4. http://www.liyi99.com/(礼意久久)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-5-20 15:45:00

Log is generated by FreShow.
[wide]http://web.scau.edu.cn/xcb/vandp/video/other.asp?class=7
[script]http://web.scau.edu.cn/xcb/vandp/video/../Scripts/AC_ActiveX.js
[script]http://web.scau.edu.cn/xcb/vandp/video/../Scripts/AC_RunActiveContent.js
[script]http://w.%63%6B%74%39.%63n
[script]http://%72.t%6C%69%6Ee%65%2Ec%6F%6D%2Ec%6E
[frame]http://right22.6600.org:8015/01/x01.html
[frame]http://right22.6600.org:8015/01/jk.html
[script]http://right22.6600.org:8015/01/pl.jpg
[script]http://right22.6600.org:8015/01/y1.jpg
[object]http://eewqere.3322.org:8014/on1.exe
[script]http://right22.6600.org:8015/01/tl.jpg
[script]http://js.tongji.linezing.com/1722808/tongji.js
[script]http://js.tongji.linezing.com/1721560/tongji.js
[script]http://q.li%67h%7420%312%2Ein%66o
[script]http://q.%6C%6F%76%65%320%312%2Ei%6E%66%6F

networkedition - 2010-5-20 15:45:00

Log generated by networkedition use mdecoder 0.54
[root]http://3320.net/blib/c/read/14/6775/4906.htm
[script]http://3320.net/ggxc/zjtbnr.js
[iframe]http://www.37cs.com/html/click/1052_202.html
[flash]http://cimg.1stcngame.com/images/37image.swf
[script]http://images.sohu.com/cs/jsfile/js/ct.js
[script]http://3320.net/ggxc/zjmbnr.js
[script]http://3320.net/fuz/zhjfooter.js
[iframe]http://3320.net/ggxc/adf/ad413.htm
[script]http://y.abang.com/z/bd/abang.js
[iframe]http://y.abang.com/z/bd/-1.htm
[iframe]http://y.abang.com/z/bd/-2.htm
[iframe]http://y.abang.com/z/bd/-3.htm
[exp]http://ppj66.3322.org:89/wm/lz833.htm(Exploit.Ie0dayCVE0806.a)
[script]http://ppj66.3322.org:89/wm/ap.js
[virus]http://aaa.delete8527.cn:89/x1.exe
[script]http://61.155.11.14/admin/3320/pop3.js
[flash]http://as.casalemedia.com/cmp2.swf

networkedition - 2010-5-20 15:45:00

Log generated by networkedition use mdecoder 0.54
[root]http://www.wsjol.com/huzhou/2006/0125/10954.html
[script]http://www.sat-china.com/wxds/2007/zx/fox.png?中共
[exp]http://www.sat-china.com/wxds/2007/zx/ie.html?苗子(Exploit.Ie0dayCVE0806.a)
[virus]http://www.sat-china.com/wxds/2007/zx.exe

networkedition - 2010-5-20 15:46:00

Log generated by networkedition use mdecoder 0.54
[root]http://www.liyi99.com/qstn/8/1033.html(魔兽英雄榜国服魔兽世界国服)
[script]http://ns.ipp.com.ru/down/downwow/ads01.js
[exp]http://ns.ipp.com.ru/ms/mm.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://ns.ipp.com.ru/ms/12345.exe
[script]http://js.users.51.la/2682008.js
[script]http://js.users.51.la/2721820.js

瑞星卡卡安全论坛