瑞星网站每日安全播报(2010年7月29日) bbs.ikaka.com

networkedition - 2010-7-29 13:43:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://ac.gamespot.com.cn/(动画基地论坛)
2. http://ygb.swu.edu.cn/(西南大学研究生工作部 )
3. http://xsc.nxtvu.edu.cn/(宁夏广播电视大学欢迎你)
4. http://www1.swfc.edu.cn/(西南林业大学

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-7-29 13:43:00

Log is generated by FreShow.
[wide]http://ac.gamespot.com.cn/
[script]http://www.crcf.org.cn/css/ad.gif?¨
[frame]http://36020.9966.org:6677/a/ads.html
[object]http://82wasd.3322.org:6677/a/ak.exe
[script]http://ac.gamespot.com.cn/forumdata/cache/common.js?Hnb
[script]http://www.gamespot.com.cn/shared/wangjing/wangjing.js

networkedition - 2010-7-29 13:44:00

Log is generated by FreShow.
[wide]http://ygb.swu.edu.cn/mediaNews/html/jinritoutiao/2010/0517/1441.html
[frame]http://121.12.170.183:8081/user/inc/wm/ie.html?8JDRNL
[object]http://121.12.170.183:8081/user/inc/wm.exe
[script]http://js.users.51.la/3280897.js

networkedition - 2010-7-29 13:44:00

Log is generated by FreShow.
[wide]http://xsc.nxtvu.edu.cn/jiuye/hlep/iwe1giwe1gmuewei.html
[object]http://zwmjs.3322.org:82/jo.htm
[object]http://zwmJs.3322.org:82/5.exe
[script]http://count12.51yes.com/click.aspx?id=126167012&logo=12
[script]http://xsc.nxtvu.edu.cn/jiuye/hlep/BAPGF5
[frame]http://xsc.nxtvu.edu.cn/jiuye/hlep/
[script]http://count12.51yes.com/click.aspx?id=126167012&logo=12

networkedition - 2010-7-29 13:45:00

Log generated by networkedition use mdecoder 0.54
[root]http://www1.swfc.edu.cn/zyxy/gamelist/gejg.html
[iframe]http://b12.17wanmei.com/zxzx.html
[exp]http://www.tschk.com/Files/home/yx/zx.html(Exploit.Ie0dayCVE0806.a)
[script]http://www.tschk.com/Files/home/yx/yt.jpg
[virus]http://www.yesoff.com/api/class/dll/zz.exe
[script]http://js.users.51.la/3912534.js
[exe]http://b12.17wanmei.com/cate.css

jks_风 - 2010-7-29 16:09:00

Log is generated by FreShow.
[wide]http://ac.gamespot.com.cn/
[script]http://www.crcf.org.cn/css/ad.gif?¨
[frame]http://36021.8866.org:6677/a/ads.html
[object]http://82wasd.3322.org:6677/a/ak.exe
[script]http://ac.gamespot.com.cn/forumdata/cache/common.js?Hnb
[script]http://www.gamespot.com.cn/shared/wangjing/wangjing.js

jks_风 - 2010-7-29 16:09:00

Log is generated by FreShow.
[wide]http://ygb.swu.edu.cn/mediaNews/html/jinritoutiao/2010/0517/1441.html
[frame]http://121.12.170.183:8081/user/inc/wm/ie.html?8JDRNL
[object]http://121.12.170.183:8081/user/inc/wm.exe
[script]http://js.users.51.la/3280897.js

jks_风 - 2010-7-29 16:14:00

有些iframe FreShow貌似过滤不出来需要手动来分析和看代码
Log is generated by FreShow.
[wide]http://xsc.nxtvu.edu.cn/jiuye/hlep/iwe1giwe1gmuewei.html
[object]http://zwmjs.3322.org:82/jo.html
[object]http://zwmJs.3322.org:82/5.exe
[object]http://player.56.com/v_MzE0ODQ1MzY.swf
[script]http://xsc.nxtvu.edu.cn/jiuye/hlep/BAPGF5
[frame]http://xsc.nxtvu.edu.cn/jiuye/hlep/
[script]http://count12.51yes.com/click.aspx?id=126167012&logo=12

jks_风 - 2010-7-29 16:16:00

Log is generated by FreShow.
[wide]http://www1.swfc.edu.cn/zyxy/gamelist/gejg.html
[frame]http://b12.17wanmei.com/zxzx.html
[frame]http://www.tschk.com/Files/home/yx/zx.html
[object]http://www.yesoff.com/api/class/dll/zz.exe
[script]http://s9.cnzz.com/stat.php?id=2046632&web_id=2046632
[script]http://js.users.51.la/3912534.js

小傻大呆 - 2010-7-29 21:26:00

Log is generated by FreShow.
[wide]http://ac.gamespot.com.cn/
[script]http://www.crcf.org.cn/css/ad.gif?¨
[frame]http://36021.7766.org:6677/a/ads.html
[object]http://82eufha.3322.org:6677/a/icbc.exe
[script]http://ac.gamespot.com.cn/forumdata/cache/common.js?Hnb
[script]http://www.gamespot.com.cn/shared/wangjing/wangjing.js

BD的....

瑞星卡卡安全论坛