瑞星网站每日安全播报(2012年3月26日) bbs.ikaka.com

networkedition - 2012-3-26 13:46:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://10086so.com/（移动搜索）
2. http://www.lionsgroup.com.cn/（莱恩斯集团）
3. http://www.maysun.net/（上海明硕国际货物运输代理有限公司）
4. http://www.nxsx.com/（三新集团）
5. http://www1.mail.nx.cn/（宁夏医科大学急救护理学精品课程）

用户系统信息：Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.802.30 Safari/535.1 SE 2.X MetaSr 1.0

networkedition - 2012-3-26 13:46:00

Log generated by networkedition use mdecoder 0.67
[root]http://10086so.com/10086/ie.htm(svfox ie 0day)
[script]http://10086so.com/10086/ie.js
[virus]http://1.00079.net/20120220.exe

networkedition - 2012-3-26 13:47:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.lionsgroup.com.cn/
[script]http://www.lionsgroup.com.cn/js/jquery.js
[script]http://faq.UglyAs.com/b.js?google=3x051
[script]http://jbn.ns02.us/a/bnay.htm
[exp]http://jbn.ns02.us/a/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[virus]http://jbn.ns02.us/o/xn.exe
[iframe]http://jbn.ns02.us/a/medi.htm
[flash]http://jbn.ns02.us/a/toto.mid
[iframe]http://jbn.ns02.us/a/7.htm
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[script]http://jbn.ns02.us/a/ieee.jpg

networkedition - 2012-3-26 13:47:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.maysun.net/ma/x6.htm(Exploit.Ie0dayCVE0806.c)
[script]http://www.maysun.net/ma/a.jpg
[script]http://www.maysun.net/ma/b.jpg
[script]http://www.maysun.net/ma/c.jpg
[script]http://www.maysun.net/ma/d.jpg
[virus]http://www.maysun.net/Server.exe

networkedition - 2012-3-26 13:47:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.nxsx.com/
[script]http://faj.UglyAs.com/b.js?google=3x031
[script]http://jbn.ns02.us/a/bnay.htm
[exp]http://jbn.ns02.us/a/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[virus]http://jbn.ns02.us/o/xn.exe
[iframe]http://jbn.ns02.us/a/medi.htm
[flash]http://jbn.ns02.us/a/toto.mid
[iframe]http://jbn.ns02.us/a/7.htm
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[script]http://jbn.ns02.us/a/ieee.jpg
[script]http://faj.UglyAs.com/b.js?google=3x031
[script]http://fcu.UglyAs.com/b.js?google=3x241
[script]http://fcx.UglyAs.com/b.js?google=3x251
[flash]http://www.nxsx.com/Img/index_2.swf
[iframe]http://wdliao.xkwm.cn/coon/index.htm
[iframe]http://wdliao.xkwm.cn/sofe/index.htm
[script]http://faj.UglyAs.com/b.js?google=3x031
[script]http://faj.UglyAs.com/b.js?google=3x031
[script]http://fcu.UglyAs.com/b.js?google=3x241
[script]http://fcx.UglyAs.com/b.js?google=3x251

networkedition - 2012-3-26 13:48:00

Log generated by networkedition use mdecoder 0.67
[root]http://www1.mail.nx.cn/power/p-10/0/index.htm(宁夏医科大学护理学院-护理学精品课程-课程资源-宁夏医科大学,护理学院,精品课程- Powered By Sixxxgine)
[script]http://www1.mail.nx.cn/data/js/scripts.js
[script]http://www1.mail.nx.cn/data/js/flash.js
[flash]http://www1.mail.nx.cn/data/skins/chinese/images/top.swf
[iframe]http://www1.mail.nx.cn/power/p-10/0/200805291708.htm
[script]http://faj.UglyAs.com/b.js?google=3x031
[script]http://jbn.ns02.us/a/bnay.htm
[exp]http://jbn.ns02.us/a/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[virus]http://jbn.ns02.us/o/xn.exe
[iframe]http://jbn.ns02.us/a/medi.htm
[flash]http://jbn.ns02.us/a/toto.mid
[iframe]http://jbn.ns02.us/a/7.htm
[script]http://jbn.ns02.us/a/ie.jpg
[script]http://jbn.ns02.us/a/iee.jpg
[script]http://jbn.ns02.us/a/ieee.jpg
[script]http://fcu.UglyAs.com/b.js?google=3x241
[script]http://fcx.UglyAs.com/b.js?google=3x251

瑞星卡卡安全论坛