networkedition - 2012-1-13 10:56:00
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。
1. http://www.pkpan.com/(PK网盘)
2. http://www.mumbar.cn/(西安育儿网)
3. http://www.130v.com/( 轻音乐网)
4. http://www.qomolangmaglacier.com/(珠峰冰川)
5. http://trade.96963.com/(哈尔滨信息港同城交易网)
用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727)
networkedition - 2012-1-13 10:57:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.pkpan.com/huodong/
[script]http://diy.IsGre.at/b.js?google=09x253
[script]http://gdm.ns02.us/11/omay.htm
[exp]http://gdm.ns02.us/11/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://gdm.ns02.us/11/ie.jpg
[script]http://gdm.ns02.us/11/iee.jpg
[exp]http://gdm.ns02.us/o/uo.exe
[iframe]http://gdm.ns02.us/11/7.htm
[script]http://gdm.ns02.us/11/ie.jpg
[script]http://gdm.ns02.us/11/iee.jpg
[script]http://gdm.ns02.us/11/ieee.jpg
networkedition - 2012-1-13 10:57:00
Log generated by networkedition use mdecoder 0.67
[root]http://mumbar.cn/(西安育儿网-怀孕-育儿-育儿知识,妈妈,亲子,喂养,婴儿)
[script]http://mumbar.cn/include/dedeajax2.js
[script]http://t.crabdance.com:10086/images/1.gif?GIUVN
[iframe]http://bugs.chickenkiller.com:10/images/2.htm
[virus]http://bbs.jk136.com:123/js/js/js.js
[iframe]http://bugs.chickenkiller.com:10/images/1.htm
[iframe]http://bugs.chickenkiller.com:10/images/tj.htm
[script]http://mumbar.cn/images/js/j.js
[script]http://t.crabdance.com:10086/images/1.gif?JQIED
[iframe]http://bugs.chickenkiller.com:10/images/2.htm
[iframe]http://bugs.chickenkiller.com:10/images/1.htm
[iframe]http://bugs.chickenkiller.com:10/images/tj.htm
[flash]http://mumbar.cn/templets/images/bcastr3.swf
[iframe]http://unstat.baidu.com/bdun.bsc?tn=kouming_pg&cv=0&cid=1200407&csid=301&bgcr=ffffff&ftcr=000000&urlcr=0000ff&tbsz=260&sropls=1,2,3,4,5,6&defid=2
[script]http://mumbar.cn/templets/js/bottom.js
[script]http://t.crabdance.com:10086/images/1.gif?XWTSU
[iframe]http://bugs.chickenkiller.com:10/images/2.htm
[iframe]http://bugs.chickenkiller.com:10/images/1.htm
[iframe]http://bugs.chickenkiller.com:10/images/tj.htm
networkedition - 2012-1-13 10:57:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.130v.com/
[script]http://static.130v.com:81/skin/skin_01/function.js
[script]http://static.130v.com:81/skin/skin_01/ajax.js
[script]http://code.woiring.com/mmscode/bigbanner/06181723524292831289.js?id=06181723524292831289
[script]http://static.130v.com:81/js/gb_big5.js
[script]http://js.a3p4.com/i.js
[script]http://js.a3p4.com/+s(sr)+
[iframe]http://js.a3p4.com/+s(sr)+
[script]http://js.a3p4.com/i.js
[iframe]http://7xuxing.com/edit/h.html
[exp]http://7xuxing.com/edit/jf.htm(Exploit.Ie0dayCVE0806.a)
[script]http://7xuxing.com/edit/jf.gif
[virus]http://7xuxing.com/edit/schost.exe
[iframe]http://7xuxing.com/edit/flash.html.htm
[exp]http://7xuxing.com/edit/of.htm(Exploit.OfficeSpreadsheet.a)
[script]http://7xuxing.com/edit/ubbi.jpg
[script]http://7xuxing.com/edit/qcc.jpg
[virus]http://7xuxing.com/edit/schost.exe
networkedition - 2012-1-13 10:58:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.qomolangmaglacier.com/plus/list.php?tid=17
[script]http://dtr.UglyAs.com/b.js?google=12x293
[script]http://gdm.ns02.us/11/omay.htm
[exp]http://gdm.ns02.us/11/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://gdm.ns02.us/11/ie.jpg
[script]http://gdm.ns02.us/11/iee.jpg
[exp]http://gdm.ns02.us/o/uo.exe
[script]http://dtr.UglyAs.com/b.js?google=12x293
networkedition - 2012-1-13 10:58:00
Log generated by networkedition use mdecoder 0.67
[root]http://trade.96963.com/tl/b6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://trade.96963.com/tl/b1.txt
[script]http://trade.96963.com/tl/b2.txt
[script]http://trade.96963.com/tl/b3.txt
[script]http://trade.96963.com/tl/b4.txt
[script]http://trade.96963.com/tl/b5.txt
[virus]http://trade.96963.com/tl/q.exe
© 2000 - 2024 Rising Corp. Ltd.