瑞星网站每日安全播报(2010年8月5日) bbs.ikaka.com

networkedition - 2010-8-5 12:54:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://bbs.game.mop.com/(猫扑游戏频道综合社区·魔兽世界中国论坛)
2. http://oce.pku.edu.cn/(欢迎访问北京大学继续教育部 )
3. http://www.enoya.com/(纵横财经社区 )
4. http://hlx.szpt.edu.cn/(医学技术与护理学院 )
5. http://join.fjut.edu.cn/(福建工程学院 )

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

networkedition - 2010-8-5 12:54:00

Log is generated by FreShow.
[wide]http://bbs.game.mop.com/viewthread.php?tid=1553601
[script]http://bbs.game.mop.com/include/javascript/common.js
[script]http://bbs.game.mop.com/include/javascript/menu.js
[script]http://bbs.game.mop.com/include/javascript/ajax.js
[object]http://nbbbs.enet.com.cn/ucenter/data/avatar/games.html
[object]http://www.fm5.cn/modules/aggregator/sys.exe
[script]http://stat.ent.mop.com/js/mmov_1.js
[script]http://ovsmbt.mop.com/ov.js
[ani]http://bbs.game.mop.com/images/alliance/alliance_2.gif)
[frame]http://mopgg.mop.com/adshow.jsp?p=1705
[ani]http://bbs.game.mop.com/images/alliance/alliance_7.gif)
[script]http://bbs.game.mop.com/include/javascript/tooltip.js
[script]http://bbs.game.mop.com/include/javascript/rewardinfo.js
[script]http://bbs.game.mop.com/include/javascript/viewthread.js
[script]http://bbs.game.mop.com/include/wowarad.js
[ani]http://bbs.game.mop.com/images/alliance/alliance_9.gif)
[frame]http://mopgg.mop.com/adshow.jsp?p=96
[script]http://s4.cnzz.com/stat.php?id=2149344&web_id=2149344
[script]http://tjj.mop.com/calculate?id=208
[script]http://tjj.mop.com/calculate?id=27
[script]http://www.google-analytics.com/urchin.js
[script]http://txt.mop.com/dzhjs/stat/userstat1.js
[script]http://bbs.game.mop.com/include/javascript/msn.js

networkedition - 2010-8-5 12:55:00

Log generated by networkedition use mdecoder 0.54
[root]http://oce.pku.edu.cn/html/news_info/h.php?10036.html
[script]http://hsxw.net/css/3.js
[iframe]http://hsxw.net/css/3.html?_360safeparam
[script]http://hsxw.net/css/b.js
[exe]http://hsxw.net/css/lzg.exe
[script]http://js.users.51.la/2990373.js

networkedition - 2010-8-5 12:55:00

Log generated by networkedition use mdecoder 0.54
[root]http://www.enoya.com/( 纵横财经社区 )
[script]http://www.enoya.com/include/js/common.js?yMm
[flash]http://data.enoya.com/newenoya1.swf
[script]http://www.enoya.com/attachments/day_090203/09023610069ds64c535e609265.jpg
[script]http://www.hmgc.com.cn/Ad/g.gif?¨
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[script]http://36029.9966.org:6677/a/pps.js
[virus]http://82shdx.3322.org:6677/a/fs.exe
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[exp]http://36029.9966.org:6677/a/ads.html(Exploit.Ie0dayCVE0806.a)
[script]http://www.enoya.com/include/js/slide.js
[script]http://www.enoya.com/api/javascript.php?key=Yhome_list1
[script]http://www.enoya.com/api/javascript.php?key=Yhome_list279
[script]http://www.enoya.com/include/js/floatadv.js?yMm

networkedition - 2010-8-5 12:56:00

Log generated by networkedition use mdecoder 0.54
[root]http://hlx.szpt.edu.cn/qq/0d5264ca11a9fbd8.html
[script]http://js.users.51.la/3995029.js
[exp]http://p1.UJDE90ONLINE.INFO/2.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://p1.ujde90s.info/xx1.exe

networkedition - 2010-8-5 12:56:00

Log generated by networkedition use mdecoder 0.54
[root]http://join.fjut.edu.cn/com1/49f9f64c3599bd34.html
[script]http://js.users.51.la/3995029.js
[exp]http://p1.UJDE90ONLINE.INFO/2.htm(Exploit.Ie0dayCVE0806.a)
[virus]http://p1.ujde90s.info/xx1.exe

jks_风 - 2010-8-5 21:43:00

汗第一个就不会解密 :kaka6:

jks_风 - 2010-8-6 6:37:00

Log is generated by FreShow.
[wide]http://oce.pku.edu.cn/html/news_info/h.php?10036.html
[script]http://hsxw.net/css/3.js
[frame]http://hsxw.net/css/3.html?_360safeparam
[object]http://hsxw.net/css/lzg.exe
[script]http://js.users.51.la/2990373.js

jks_风 - 2010-8-6 6:44:00

Log is generated by FreShow.
[wide]http://www.enoya.com/
[script]http://www.enoya.com/include/js/common.js?yMm
[script]http://www.enoya.com/attachments/day_090203/09023610069ds64c535e609265.jpg
[frame]http://fe234.jr60.3322.org:808/wm/A3.html
[object]http://ns1.vv05.info:166/wm/x/zr03.exe
[script]http://w%77w.%68m%67c.c%6Fm.c%6E/A%64/%67.g%69f?¨
[frame]http://36029.6600.org:6677/a/ads.html
[object]http://82shdx.3322.org:6677/a/fs.exe
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[frame]http://36029.6600.org:6677/a/ads.html
[script]http://www.enoya.com/include/js/slide.js
[script]http://www.enoya.com/api/javascript.php?key=Yhome_list1
[script]http://www.enoya.com/api/javascript.php?key=Yhome_list279
[script]http://s42.cnzz.com/stat.php?id=30284&web_id=30284
[script]http://count1.51yes.com/click.aspx?id=18546285&logo=1
[script]http://www.enoya.com/include/js/floatadv.js?yMm

jks_风 - 2010-8-6 6:46:00

Log is generated by FreShow.
[wide]http://join.fjut.edu.cn/com1/49f9f64c3599bd34.html
[script]http://js.users.51.la/3995029.js
[frame]http://join.fjut.edu.cn/com1/
[object]http://p1.UJDE90ONLINE.INFO/2.htm
[object]http://p1.ujde90s.info/xx1.exe

瑞星卡卡安全论坛