瑞星卡卡安全论坛

首页 » 技术交流区 » 恶意网站交流 » 每日网马播报 » 瑞星网站每日安全播报(2010年11月17日)
networkedition - 2010-11-17 10:55:00


引用:
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。



引用:
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。



引用:


1. http://2009ftf.ccidnet.com/(赛迪网-工业和信息化融合的网络服务平台)
2. http://www.9ask.cn/(法律咨询/在线律师咨询/法规-中顾法律网)
3. http://www.akcz.gov.cn/(安康财政网欢迎您！)
4. http://www.hnxcxf.gov.cn/(许昌市信访局)
5. http://www.jddpc.gov.cn/(浙江省建德发展和改革局)


用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
networkedition - 2010-11-17 10:55:00
Log generated by networkedition use mdecoder 0.67
[root]http://2009ftf.ccidnet.com/jszsq/smdlnews/smdl311x5385.html
    [iframe]http://www.live01.com/2222/IE.html
        [script]http://www.live01.com/2222/party.css
[virus]http://www.live01.com/2222/sm.exe 
        [script]http://www.live01.com/2222/css.css
        [script]http://www.live01.com/2222/js.css
    [script]http://js.users.51.la/4056434.js
networkedition - 2010-11-17 10:56:00
Log is generated by FreShow.
[wide]http://www.9ask.cn/souask/q/q1036704.htm
    [script]http://www.9ask.cn/souask/js/jquery-126min.js
    [script]http://www.9ask.cn/souask/js/dialog.js
        [frame]http://www.9ask.cn/souask/js/"+url+"
    [script]http://www.9ask.cn/souask/js/qfornew.js
    [script]http://www.9ask.cn/souask/js/getcookie.asp
    [script]http://img.9ask.cn/public/js/9askindextop.js
    [script]http://img.9ask.cn/search/js/qiehuan.js
        [frame]http://55xxx360.8866.org:888/FM01/index.html
            [object]http://dl.a8lm.info:86/xx/fm01.css
            [script]http://55xxx360.8866.org:888/FM01/\"http:\/\/js.tongji.linezing.com\/1611657\/tongji.js\"
            [script]http://55xxx360.8866.org:888/FM01/ap.js
        [script]http://img.9ask.cn/search/js/\"http:\/\/js.users.51.la\/2718301.js\"
    [script]http://www.9ask.cn/common/incloginjs_top3.asp
    [script]http://www.9ask.cn/souask/q/
    [script]http://www.9ask.cn/common/sum.asp?zcid=11
    [frame]http://www.9ask.cn/souask/q/../buchong.asp?qid=1036704
    [script]http://www.9ask.cn/souask/js/getgg.asp?fenleiid=11&topic=民事类&zcname=198
    [script]http://www.9ask.cn/common/js/area.js
    [script]http://www.9ask.cn/souask/q/
    [script]http://news.9ask.cn/js/foot09_js.js
    [script]http://www.google-analytics.com/urchin.js
    [script]http://www.9ask.cn/souask/js/sheyMsg.js
    [script]http://www.9ask.cn/souask/js/askit.js
    [script]http://www.9ask.cn/souask/js/wordmove1.js
    [script]http://www.9ask.cn/souask/js/oask_ad.asp?qid=1036704
networkedition - 2010-11-17 10:56:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.akcz.gov.cn/
    [flash]http://www.akcz.gov.cn/ak/ak.swf
    [exp]http://www.bjsrmyy.com/manageradmin/databackup/ie.htm(Exploit.Ie0dayCVE0806.a)
        [virus]http://www.bjsrmyy.com/manageradmin/databackup/pack.exe
    [iframe]http://www.bjsrmyy.com/manageradmin/databackup/test.html
        [script]http://www.bjsrmyy.com/manageradmin/databackup/scvhost.txt
networkedition - 2010-11-17 10:57:00
Log is generated by FreShow.
[wide]http://www.hnxcxf.gov.cn/
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
        [frame]http://121.12.169.200:171/win7/index.html?id=124
            [object]http://121.12.169.200:171/win7/boom-3.html?id=124
                [object]http://121.12.169.200:171/win7/124/a.jpg
                    [object]http://web.9bic.net:6668/Down/my/124.exe
                [script]http://121.12.169.200:171/win7/ap.js
        [frame]http://32v.conna.dtdns.net/
        [frame]http://count25.51yes.com/sa.aspx?id=259340713&refe='+window.parent.location+'&location=http%3A//'+paramsArr[0]+'&color=32x&resolution=1280x1024&returning=1&language=zh-cn&ua=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%3B%20SV1%3B%20.NET%20CLR%202.0.50727%3B%20.NET%20CLR%203.0.04506.30%29
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
    [script]http://www.hnxcxf.gov.cn/include/zf11.js
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=164&list=10&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=20&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=156&list=8&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=30&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=157&list=8&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=40&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=160&list=8&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=40&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=159&list=8&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=40&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=165&list=8&icon=1&tj=0&font=9&hot=0&new=1&line=2&lmname=0&open=1&n=40&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=166&list=6&icon=1&tj=0&font=9&hot=0&new=0&line=2&lmname=0&open=1&n=24&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/newscodejs.asp?lm2=162&list=10&icon=1&tj=0&font=9&hot=0&new=0&line=2&lmname=0&open=1&n=24&more=1&t=0&week=0&zzly=0&hit=0&pls=0
    [script]http://www.hnxcxf.gov.cn/news/piccodejs.asp?lm2=0&x=5&y=1&w=125&h=100&open=1&n=20
    [frame]http://www.hnxcxf.gov.cn/1.asp
    [frame]http://www.hnxcxf.gov.cn/link0.asp
    [script]http://www.hnxcxf.gov.cn/news/js-tp.asp?id=6
    [script]http://www.hnxcxf.gov.cn/count/counter.asp
    [script]http://www.hnxcxf.gov.cn/count/online.asp
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
networkedition - 2010-11-17 10:57:00
Log is generated by FreShow.
[wide]http://www.jddpc.gov.cn
    [script]http://www.jddpc.gov.cn/js/jquery-1.1.2.js
    [script]http://www.jddpc.gov.cn/js/jquery.jdmenu.js
    [script]http://www.jddpc.gov.cn/js/jquery.dimensions.js
    [script]http://www.jddpc.gov.cn/js/jquery.bgiframe.js
    [script]http://www.jddpc.gov.cn/scripts/ac_runactivecontent.js
    [script]http://www.jddpc.gov.cn/js/menu.js
    [script]http://www.jddpc.gov.cn/ad/200905/2.js
    [script]http://www.jddpc.gov.cn/ad/200807/1.js
    [script]http://32v.conna.dtdns.net/asd.js?s=201&col=ffdd00
        [frame]http://121.12.169.200:171/win7/index.html?id=124
[object]http://121.12.169.200:171/win7/boom-3.html?id=124
                [object]http://121.12.169.200:171/win7/124/a.jpg
                    [object]http://web.9bic.net:6668/Down/my/124.exe
                [script]http://121.12.169.200:171/win7/ap.js
        [frame]http://32v.conna.dtdns.net/
        [frame]http://count25.51yes.com/sa.aspx?id=259340713&refe='+window.parent.location+'&location=http%3A//'+paramsArr[0]+'&color=32x&resolution=1280x1024&returning=1&language=zh-cn&ua=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%3B%20SV1%3B%20.NET%20CLR%202.0.50727%3B%20.NET%20CLR%203.0.04506.30%29
1
查看完整版本: 瑞星网站每日安全播报(2010年11月17日)
© 2000 - 2025 Rising Corp. Ltd.