瑞星卡卡安全论坛

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Log generated by networkedition use mdecoder 0.67
[root]http://dbyb.zqu.edu.cn/Edit/uploadfile/ie.htm
    [script]http://dbyb.zqu.edu.cn/Edit/uploadfile/party.css
[virus]http://dbyb.zqu.edu.cn/Edit/uploadfile/bb.exe
    [script]http://dbyb.zqu.edu.cn/Edit/uploadfile/css.css
    [script]http://dbyb.zqu.edu.cn/Edit/uploadfile/js.css

Log generated by networkedition use mdecoder 0.67
[root]http://war3.uuu9.com/Soft/201104/20537.shtml(DotA Allstars v6.70c AI修正版-神话对抗-游久魔兽争霸)
    [script]http://war3.uuu9.com/skin/20081223/js/lib/jquery.js
    [script]http://war3.uuu9.com/skin/20081223/js/tab.js
    [script]http://www.uuu9.com/code/tool/index.js
        [script]http://www.uuu9.com/skin2010/js/j.js
        [script]http://dev.uuu9.com/js/tool/SSOT.js?v=1
        [script]http://biz5.sandai.net/portal/uuu9/top.js
            [flash]http://20110615.biz5.sandai.net/portal/image/42/n1307691484442.jpg
    [script]http://biz5.sandai.net/portal/uuu9/top1.js
        [flash]http://20110615.biz5.sandai.net/portal/image/93/n1307698472993.swf
    [script]http://war3.uuu9.com/Soft/GetHits.aspx?HitsType=1&SoftID=20537
    [script]http://war3.uuu9.com/Soft/GetHits.aspx?HitsType=2&SoftID=20537
    [script]http://war3.uuu9.com/Soft/GetHits.aspx?HitsType=3&SoftID=20537
    [script]http://war3.uuu9.com/Soft/GetHits.aspx?HitsType=0&SoftID=20537
    [script]http://war3.uuu9.com/score.aspx?channelid=1&articleid=20537
    [iframe]http://war3.uuu9.com/Soft/showsoftdownhtm/1_20537.htm
        [script]http://pstatic.xunlei.com/js/webThunderDetect.js
        [script]http://www.uuu9.com/js/tongji.js
        [iframe]http://qqb1gaio.3322.org:8832/XM03/index.html
        [virus]http://58.221.36.199:8832/xx/xm03.css
            [exp]http://qqb1gaio.3322.org:8832/XM03/ff.htm(Exploit.Ie0dayCVE0806.a)
                [script]http://qqb1gaio.3322.org:8832/XM03/ap.js
            [iframe]http://qqb1gaio.3322.org:8832/XM03/fl.htm
                [flash]http://qqb1gaio.3322.org:8832/XM03/nb.swf
    [iframe]http://war3.uuu9.com/Soft/showsoftdownhtm/2_20537.htm
        [script]http://pstatic.xunlei.com/js/webThunderDetect.js
        [script]http://www.uuu9.com/js/tongji.js
    [script]http://tucao.uuu9.com/js/Cooike.js
    [script]http://tucao.uuu9.com/js/huati.js
        [script]http://news.uuu9.com/zt/jiduan/js/JCookie.js
    [script]http://dev.uuu9.com/js/tool/fenxiang.js
    [script]http://comment.uuu9.com/JS/pagenewcomment2.js
        [script]http://comment.uuu9.com/JS/jquery-1.4.2.js
    [iframe]http://comment.uuu9.com/frameComment.html
        [script]http://comment.uuu9.com/Js/jquery.js
            [script]http://:
        [script]http://comment.uuu9.com/Js/jquery.form.js
        [script]http://comment.uuu9.com/Js/iframe_comment.js
    [script]http://comment.uuu9.com/JS/pagenewcomment1.js
    [iframe]http://war3.uuu9.com/taolun_all.aspx?ModuleType=2&ArticleID=20537&CommentNum=5&ContentNum=200
        [iframe]http://passport.uuu9.com/pllogin.aspx?c=FFFCF3&f=663300
    [script]http://biz5.sandai.net/portal/uuu9/focus.js
        [flash]http://20110615.biz5.sandai.net/portal/image/22/n1308035996122.swf
    [script]http://www.uuu9.com/js/copyright_js.js
        [script]http://biz5.sandai.net/portal/uuu9/top.js
    [script]http://www.uuu9.com/js/tongji.js
    [script]http://war3.uuu9.com/Soft/201104/google-analytics.com/ga.js
    [script]http://www.uuu9.com/gg/tc/tips/tips.js
        [script]http://biz5.sandai.net/portal/uuu9/uuu9_tips.js
            [flash]http://20110615.biz5.sandai.net/portal/image/11/n1307696475311.jpg
    [script]http://www.uuu9.com/gg/tc/tips/startTips.js
    [script]http://stat.uuu9.com/stat/pdsy/is/JS/193.js

Log generated by networkedition use mdecoder 0.67
[root]http://eco.btbu.edu.cn/images/ie.htm
    [script]http://eco.btbu.edu.cn/images/hm.baidu.com/h.js?a3748f59cb5d70137101fb041e498cdb
    [script]http://eco.btbu.edu.cn/images/party.css
[virus]http://125.223.1.135/newspic/dd.exe
    [script]http://eco.btbu.edu.cn/images/css.css
    [script]http://eco.btbu.edu.cn/images/js.css

Log generated by networkedition use mdecoder 0.67
[root]http://job.njtu.edu.cn/images/Theme/1.html(Exploit.Ie0dayCVE0806.a)
    [virus]http://3.ajehe.info:86/1.exe

Log generated by networkedition use mdecoder 0.67
[root]http://www.cxkx.gov.cn/editor/css/mm/wmqqxy.html(Exploit.Ie0dayCVE0806.a)
    [script]http://www.cxkx.gov.cn/editor/css/mm/yt.jpg
    [virus]http://www.bjsjwmz.com/upload_files/my.exe

传播性不大，例如http://www.bjsjwmz.com/upload_files/my.exe 该地址 普通网民很少有输入链接直接访问的。基于80端口EXE运行通过Windows最新漏洞远程执行代码那个可以把，这个EXE过时了。我下载来看了...不是每日更新的...

hehe  是直接扫描的么

4,5都还活着。