networkedition - 2010-10-11 11:10:00
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。
1. http://www.bidding.hunan.gov.cn/(湖南省招标投标监管网)
2. http://www.dragontv.cn/(东方卫视)
3. http://hx.qust.edu.cn/(青岛科技大学-化学与分子工程学院)
4. http://tec.suda.edu.cn/(苏州大学 - 应用技术学院)
5. http://www.cqupt.edu.cn/(重庆邮电大学主页)
用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
networkedition - 2010-10-11 11:10:00
Log generated by networkedition use mdecoder 0.54
[root]http://www.bidding.hunan.gov.cn/item/list/12556.html(龙之谷韩服40剑圣)
[script]http://www.cdgs.gov.cn/manager/css/lzg2.js
[exp]http://www.lsrc.cn/js/test1test.html(Exploit.Ie0dayCVE0806.c)
[script]http://www.lsrc.cn/js/pack.js
[script]http://www.lsrc.cn/js/pack.css
[virus]http://www.lsrc.cn/js/lzg123.exe
[script]http://js.users.51.la/4070460.js
networkedition - 2010-10-11 11:11:00
Log generated by networkedition use mdecoder 0.54
[root]http://www.dragontv.cn/data/tlbb/tl20101917106.html(天龙八步官方网站,天龙八部官方网站,天龙八部2官方网站
--天龙八部官方网站)
[flash]http://player.youku.com/player.php/sid/XMTU1Nzk5ODg4=/v.swf
[script]http://js.users.51.la/3794335.js
[script]http://a5.lvguihua.com:8081/user/inc/tl/css.png
[exp]http://a2.lvguihua.com:8081/user/inc/tl/ie.html?轻(Exploit.Ie0dayCVE0806.a)
[virus]http://121.12.170.183:8081/user/inc/tl.exe
[exp]http://a3.lvguihua.com:8081/user/inc/tl/ie6.html?犯(Exploit.Ie0dayCVE0806.a)
[virus]http://121.12.170.183:8081/user/inc/tl.exe
networkedition - 2010-10-11 11:11:00
Log generated by networkedition use mdecoder 0.54
[root]http://hx.qust.edu.cn/2010/wd.htm(跳转到外挂网)
[iframe]http://rf.fsdd.5qieting.com.:7115/mmwd/ie.html
[script]http://rf.fsdd.5qieting.com.:7115/mmwd/party.css
[virus]http://www.jx2dbtwg.com/dnf/03.css
[script]http://rf.fsdd.5qieting.com.:7115/mmwd/css.css
[script]http://rf.fsdd.5qieting.com.:7115/mmwd/js.css
networkedition - 2010-10-11 11:11:00
Log generated by networkedition use mdecoder 0.54
[root]http://tec.suda.edu.cn/axym/pic/mh.asp(跳转到外挂网)
[exp]http://www.360sb.in:360/mh/ie.html(Exploit.Ie0dayCVE0806.a)
[virus]http://www.360sb.in:360/mh/001.exe
networkedition - 2010-10-11 11:12:00
Log generated by networkedition use mdecoder 0.54
[root]http://www.cqupt.edu.cn/tsg/tools/lzg.php?/article/iXr7Iv4a4a.html
[script]http://www.cqupt.edu.cn/templets/images/logo1.htm
[script]http://202.201.48.18/dwtzb/lzg/xyq.js
[exp]http://202.201.48.18/dwtzb/lzg/wie.html(Exploit.Ie0dayCVE0806.a)
[virus]http://202.201.48.18/dwtzb/lzg/g1.exe
[exp]http://202.201.48.18/dwtzb/lzg/wie6.html(Exploit.Ie0dayCVE0806.a)
[virus]http://202.201.48.18/dwtzb/lzg/g1.exe
[script]http://js.users.51.la/3427769.js
09kaka - 2010-10-11 14:54:00
Log is generated by FreShow.
[wide]http://www.dragontv.cn/data/tlbb/tl20101917106.html
[script]http://www.dragontv.cn/data/tlbb/
[ani]http://www.13vv.com/game/images/tlbb_01.gif
[script]http://js.users.51.la/3794335.js
[script]http://a5.lvguihua.com:8081/user/inc/tl/css.png
[frame]http://a2.lvguihua.com:8081/user/inc/tl/ie.html?Çá
[object]http://121.12.170.183:8081/user/inc/tl.exe
[frame]http://a3.lvguihua.com:8081/user/inc/tl/ie6.html?·¸
[object]http://121.12.170.183:8081/user/inc/tl.exe
09kaka - 2010-10-11 14:55:00
Log is generated by FreShow.
[wide]http://tec.suda.edu.cn/axym/pic/mh.asp
[frame]http://www.360sb.in:360/mh/ie.html
[object]http://www.360sb.in:360/mh/001.exe
[frame]http://www.360sb.in:360/mh/ie6.html
[object]http://www.360sb.in:360/mh/001.exe
[script]http://count36.51yes.com/click.aspx?id=369288899&logo=12
© 2000 - 2024 Rising Corp. Ltd.