瑞星卡卡安全论坛

首页 » 技术交流区 » 恶意网站交流 » 每日网马播报 » 瑞星网站每日安全播报(2012年2月17日)
networkedition - 2012-2-17 13:42:00


引用:
网址均来自瑞星每日安全播报,我们详细分析其中所挂恶意网址,对于已失效的恶意网址就不再分析。



引用:
注:以下分析出的恶意网址均包含有真实网马下载地址,请勿直接下载并运行,以免系统中招。



引用:


1.  http://movie.euooo.com/(易优影视)
2.  http://sd.zhaoba.net/(找吧网)
3.  http://www.jnskkx.com/(晋宁资讯网)
4.  http://www.mggsj.com/(安徽省明光市工商行政管理局红盾信息网)


用户系统信息:Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727)
networkedition - 2012-2-17 13:44:00
Log generated by networkedition use mdecoder 0.67
[root]http://movie.euooo.com/(首页-【易优影视_精彩 由你 开始】)
    [script]http://movie.euooo.com/js/common.js
    [script]http://movie.euooo.com/js/function.js
    [script]http://movie.euooo.com/js/ads/index-top-middle.js
        [script]http://cpro.baidu.com/cpro/ui/c.js
            [script]http://wm.baidu.com/preview/preview.js
            [iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
    [script]http://movie.euooo.com/js/ads/index-top-right.js
        [script]http://cpro.baidu.com/cpro/ui/f.js
        [script]http://pic.2bj.cn/upload/2BJTC.js
    [script]http://movie.euooo.com/js/ads/index-nav-banner.js
        [iframe]http://code3.2bj.cn:8899/click.html?adid=857&uid=awbq
            [script]http://code3.2bj.cn:8899/cf.aspx?action=adget&ad_id=&username=
        [script]http://cpro.baidu.com/cpro/ui/c.js
    [script]http://movie.euooo.com/js/ads/index-bottom.js
        [iframe]http://code.2bj.cc:8899/lbclick.html?&adid=264|246|206|168&uid=awbq
            [script]http://code.2bj.cc:8899/cf.aspx?action=adget&ad_id=&username=
        [iframe]http://code3.2bj.cc:8899/click.html?adid=205&uid=awbq
            [script]http://code3.2bj.cc:8899/cf.aspx?action=adget&ad_id=&username=
        [iframe]http://code3.2bj.cc:8899/click.html?adid=253&uid=awbq
            [script]http://code3.2bj.cc:8899/cf.aspx?action=adget&ad_id=&username=
        [script]http://cpro.baidu.com/cpro/ui/f.js
            [iframe]http://cpro.baidu.com/cpro/ui/uijs.php?{paramString}
            [script]http://wm.baidu.com/preview/floatPreview.js
        [script]http://cpro.baidu.com/cpro/ui/f.js
    [iframe]http://www.euooo.com/bbs/include/javascript/ff.html
        [flash]http://www.euooo.com/bbs/include/javascript/xp.swf
        [script]http://www.euooo.com/bbs/include/javascript/ff.js
http://www.euooo.com/bbs/include/javascript/1.exe
    [iframe]http://www.euooo.com/bbs/include/javascript/svfl0.htm
        [iframe]http://www.euooo.com/bbs/include/javascript/ff.html
        [iframe]http://www.euooo.com/bbs/include/javascript/ie.html
        [iframe]http://www.euooo.com/bbs/include/javascript/ff.html
        [iframe]http://www.euooo.com/bbs/include/javascript/ie.html
        [iframe]http://www.euooo.com/bbs/include/javascript/ie.html
        [iframe]http://www.euooo.com/bbs/include/javascript/ff.html
    [iframe]http://www.euooo.com/bbs/include/javascript/ie.html
        [flash]http://www.euooo.com/bbs/include/javascript/xp.swf
        [script]http://www.euooo.com/bbs/include/javascript/ie.js
    [script]http://www.jiathis.com/code/jiathis_r.js
    [script]http://js.users.51.la/2229670.js
networkedition - 2012-2-17 13:45:00
Log generated by networkedition use mdecoder 0.67
[root]http://sd.zhaoba.net/(石岛找吧网 - 找工作 找房子 找车子 找爱情 找东西 找商机 就上找吧网 金点子传媒 DM广告 DM加盟 DM广告加盟 DM报纸 DM杂志 DM刊号 DM招商 莱芜金点子广告 莱芜人才网 莱芜信息港 莱芜在线 莱芜都市网)
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
[iframe]http://readysb.chickenkiller.com:10/images/2.htm
[virus]http://count123.jk136.com:123/js/js/js.js
[iframe]http://readysb.chickenkiller.com:10/images/1.htm
            [iframe]http://readysb.chickenkiller.com:10/images/tj.htm
[script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://www.zhaoba.net/template/default/js/ind_slide.js
    [script]http://www.zhaoba.net/mypub/noerr.js
    [script]http://www.zhaoba.net/template/default/js/global.js
        [flash]http://www.zhaoba.net/template/default/js/seccode.php?update=
    [script]http://www.zhaoba.net/login.php?part=islogin
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
        [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://www.zhaoba.net/template/default/js/mall_head.js
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://sd.zhaoba.net/template/default/js/current_date.js
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://sd.zhaoba.net/template/default/js/ScrollPicSettings.js
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
    [script]http://aoyun.chickenkiller.com:10086/images/1.gif
networkedition - 2012-2-17 13:45:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.jnskkx.com/Co/co/flash.html
[virus]http://www.jnskkx.com/Co/co/123.exe
networkedition - 2012-2-17 13:46:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.mggsj.com/wMcms_ReadNews.asp?NewsID=1157(桥头工商所查处无照经营加油站_桥头工商所_基层传真_wMcms2008-2010)
    [script]http://dxe.UglyAs.com/b.js?google=1x281
[script]http://gre.ns02.us/66/eeay.htm
    [exp]http://gre.ns02.us/66/6.htm(Exploit.Ie0dayCVE0806.a)
        [script]http://gre.ns02.us/66/ie.jpg
        [script]http://gre.ns02.us/66/iee.jpg
[virus]http://gre.ns02.us/o/vv.exe
    [iframe]http://gre.ns02.us/66/medi.htm
        [flash]http://gre.ns02.us/66/toto.mid
    [iframe]http://gre.ns02.us/66/7.htm
        [script]http://gre.ns02.us/66/ie.jpg
        [script]http://gre.ns02.us/66/iee.jpg
        [script]http://gre.ns02.us/66/ieee.jpg
[script]http://dyt.UglyAs.com/b.js?google=2x103
    [script]http://dzl.UglyAs.com/b.js?google=2x171
    [script]http://dyt.UglyAs.com/b.js?google=2x103
    [script]http://dzl.UglyAs.com/b.js?google=2x171
    [script]http://dxe.UglyAs.com/b.js?google=1x281
    [script]http://dyt.UglyAs.com/b.js?google=2x103
    [script]http://dzl.UglyAs.com/b.js?google=2x171
    [script]http://dyt.UglyAs.com/b.js?google=2x103
    [script]http://dzl.UglyAs.com/b.js?google=2x171
    [script]http://www.mggsj.com/inc/menu_fun.js
    [flash]http://www.mggsj.com/photo/top.swf
1
查看完整版本: 瑞星网站每日安全播报(2012年2月17日)