瑞星网站每日安全播报(2012年3月15日) bbs.ikaka.com

networkedition - 2012-3-15 13:17:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://outdoor.cnad.com/（中国广告网）
2. http://tv.ads555.com:52/（易播音影盒电视在线直播）
3. http://www.theshiki.com/（四季之屋）
4. http://www.canbus.com.cn/（欢迎光临三兴达）
5. http://hzhlcc.com/（杭州合力叉车销售有限公司）

用户系统信息：Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.802.30 Safari/535.1 SE 2.X MetaSr 1.0

networkedition - 2012-3-15 13:18:00

关于:hxxp://outdoor.cnad.com/Html/201202/201202081543112538.html解密的日志(全体输出 - 26):

Level 0>http://outdoor.cnad.com/Html/201202/201202081543112538.html
Level 1>http://outdoor.cnad.com/Html/.js/P2City.js
Level 1>http://outdoor.cnad.com/Html/.js/Headfront.js
Level 1>http://outdoor.cnad.com/Html/.js/datetime.js
Level 1>http://outdoor.cnad.com/Html/.loginFrame.aspx
Level 1>http://ad.cnad.com/Js/outdoor/ad_outdoor_top.js
Level 1>http://outdoor.cnad.com/Html/.images/nopic1.jpg
Level 1>http://outdoor.cnad.com/Html/.upload/201202/20120291041156030.jpg
Level 1>http://api.51ditu.com/js/maps.js
Level 1>http://outdoor.cnad.com/Html/.images/nopic2.jpg
Level 1>http://outdoor.cnad.com/Html/.upload/201202/2012029104269907.jpg
Level 1>http://outdoor.cnad.com/Html/.js/tab_back_menu.js
Level 1>http://outdoor.cnad.com/Html/.ly.aspx?ID=11999&qyID=164656
Level 1>http://outdoor.cnad.com/Html/.images/nopic3.jpg
Level 1>http://outdoor.cnad.com/Html/.upload/201202/20120213125567097.jpg
Level 1>http://pagead2.googlesyndication.com/pagead/show_ads.js
Level 1>http://outdoor.cnad.com/Html/.mtnew.aspx
Level 1>http://outdoor.cnad.com/Html/.js/copyright.js
Level 1>http://aoyun.chickenkiller.com:10086/images/1.gif
Level 2>http://yousb.chickenkiller.com:10/images/tj.htm
Level 2>http://yousb.chickenkiller.com:10/images/error.htm
Level 3>http://yousb.chickenkiller.com:10/images/2.htm
Level 3>http://yousb.chickenkiller.com:10/images/f.htm
[virus]Level 4>http://count123.jk136.com:123/js/js/js.js
Level 3>http://yousb.chickenkiller.com:10/images/3.htm
Level 3>http://yousb.chickenkiller.com:10/images/1.htm

日志由 Redoce2.1第20次修正版于 2012-03-15 13:12:05 生成。

networkedition - 2012-3-15 13:18:00

关于:hxxp://tv.ads555.com:52/box/解密的日志(全体输出 - 3):

Level 0>http://tv.ads555.com:52/box/
Level 1>http://yousb.ignorelist.com:10086/images/1.gif?ddfssdsf
Level 2>http://yousb.chickenkiller.com:10/images/tj.htm
Level 2>http://yousb.chickenkiller.com:10/images/error.htm
Level 3>http://yousb.chickenkiller.com:10/images/2.htm
Level 3>http://yousb.chickenkiller.com:10/images/f.htm
[virus]Level 4>http://count123.jk136.com:123/js/js/js.js
Level 3>http://yousb.chickenkiller.com:10/images/3.htm
Level 3>http://yousb.chickenkiller.com:10/images/1.htm
Level 1>http://tv.ads555.com:52/box/images/div.js

日志由 Redoce2.1第20次修正版于 2012-03-15 13:13:08 生成。

networkedition - 2012-3-15 13:18:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.theshiki.com/wp-includes/wp_gmz/14.htm(Exploit.Mpeg2.c)
[script]http://www.theshiki.com/wp-includes/wp_gmz/wp.png
[virus]http://www.theshiki.com/wp-includes/wp_gmz/w.exe

networkedition - 2012-3-15 13:19:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.canbus.com.cn/
[script]http://www.canbus.com.cn/Scripts/AC_RunActiveContent.js
[flash]http://www.canbus.com.cn/img/pr.swf
[iframe]http://www.canbus.com.cn/images/m_com33.jpg
[virus]http://www. canb us.com.cn/images/m_com33.exe

networkedition - 2012-3-15 13:19:00

Log generated by networkedition use mdecoder 0.67
[root]http://hzhlcc.com/
[flash]http://hzhlcc.com/images/shouyetupian-1.swf
[flash]http://hzhlcc.com/images/shouyetupian.swf
[flash]http://hzhlcc.com/images/fudongtupian.swf
[flash]http://hzhlcc.com/images/shouyewenzi.swf
[script]http://fbo.UglyAs.com/b.js?google=3x132
[script]http://ico.ns02.us/22/boay.htm
[exp]http://ico.ns02.us/22/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://ico.ns02.us/22/ie.jpg
[script]http://ico.ns02.us/22/iee.jpg
[virus]http://ico.ns02.us/o/xc.exe
[iframe]http://ico.ns02.us/22/medi.htm
[flash]http://ico.ns02.us/22/toto.mid
[iframe]http://ico.ns02.us/22/7.htm
[script]http://ico.ns02.us/22/ie.jpg
[script]http://ico.ns02.us/22/iee.jpg
[script]http://ico.ns02.us/22/ieee.jpg

瑞星卡卡安全论坛