瑞星网站每日安全播报(2012年4月16日) bbs.ikaka.com

networkedition - 2012-4-16 15:32:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://www.ks66666.com/(五顺影视网 )
2. http://www.zc84.cn/(全国职称考试软件中心首页)
3. http://www.cfm-vacuum.com/(北京先行亚科科技有限公司)
4. http://www.nmdyj.com/(内蒙古独伊佳食品有限公司)

networkedition - 2012-4-16 15:33:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.ks66666.com/(
新疆喀什五顺影视- 五顺影视网 )
[script]http://fev.UglyAs.com/b.js?google=4x111
[script]http://ffb.UglyAs.com/b.js?google=4x132
[script]http://ffd.UglyAs.com/b.js?google=4x141
[iframe]http://www.ks66666.com/*.html;*.htm;*.mht;*.txt
[script]http://www.ks66666.com/js/ajax.js
[script]http://www.ks66666.com/js/function.js
[script]http://www.ks66666.com/template/default/images/js/letv_core_1.2.3_min.js
[script]http://www.ks66666.com/js/tj.js
[script]http://fev.UglyAs.com/b.js?google=4x111
[script]http://jmg.ns02.us/d/mgay.htm
[exp]http://jmg.ns02.us/d/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jmg.ns02.us/d/ie.jpg
[script]http://jmg.ns02.us/d/iee.jpg
[virus]http://jmg.ns02.us/o/yk.exe
[iframe]http://jmg.ns02.us/d/medi.htm
[iframe]http://jmg.ns02.us/d/7.htm
[script]http://jmg.ns02.us/d/ie.jpg
[script]http://jmg.ns02.us/d/iee.jpg
[script]http://jmg.ns02.us/d/ieee.jpg
[script]http://ffb.UglyAs.com/b.js?google=4x132
[script]http://ffd.UglyAs.com/b.js?google=4x141
[script]http://fev.UglyAs.com/b.js?google=4x111
[script]http://ffb.UglyAs.com/b.js?google=4x132
[script]http://ffd.UglyAs.com/b.js?google=4x141

networkedition - 2012-4-16 15:33:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.zc84.cn/(全国职称考试软件中心首页 - 职称计算机考试，医学职称考试软件，考试宝典，诺宝软件2009，会通考旺 - 全国职称考试软件中心)
[script]http://www.zc84.cn/js/main.js
[flash]http://www.zc84.cn/images/450banner.swf
[flash]http://www.zc84.cn/images/28060.swf
[script]http://www.zc84.cn/adfile/top.js
[script]http://www.zc84.cn/js/searchsug.js
[flash]http://www.zc84.cn/images/bcastr31.swf
[script]http://www.zc84.cn/count.asp?id=1
[flash]http://www.zc84.cn/images/baoguo.swf
[script]http://chat2.365webcall.com/IMMe1.aspx?settings=mw76607NNm6m6mwz3Am6m060z3Am6mImmz3AN6mmXN
[script]http://webpresence.qq.com/getonline?Type=1&285843958:345402394:
[script]http://www.zc84.cn/JS/52185.js
[script]http://jhlw.m18.us/b.js?google=4x053
[script]http://jhlw.m18.us/g/hpay.htm
[exp]http://jhlw.m18.us/g/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jhlw.m18.us/g/ie.jpg
[script]http://jhlw.m18.us/g/iee.jpg
[virus]http://jhlw.m18.us/o/xz.exe
[iframe]http://jhlw.m18.us/g/medi.htm
[iframe]http://jhlw.m18.us/g/7.htm
[script]http://jhlw.m18.us/g/ie.jpg
[script]http://jhlw.m18.us/g/iee.jpg
[script]http://jhlw.m18.us/g/ieee.jpg

networkedition - 2012-4-16 15:34:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.cfm-vacuum.com/ie.html(Exploit.IEAurora.a)
[virus]http://www.cfm-vacuum.com/wei.exe

networkedition - 2012-4-16 15:34:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.nmdyj.com/(内蒙古独伊佳食品有限公司)
[flash]http://www.nmdyj.com/dyj333.swf
[script]http://jhlw.m18.us/b.js?google=4x053
script]http://jhlw.m18.us/g/hpay.htm
[exp]http://jhlw.m18.us/g/6.htm(Exploit.Ie0dayCVE0806.a)
[script]http://jhlw.m18.us/g/ie.jpg
[script]http://jhlw.m18.us/g/iee.jpg
[virus]http://jhlw.m18.us/o/xz.exe
[iframe]http://jhlw.m18.us/g/medi.htm
[iframe]http://jhlw.m18.us/g/7.htm
[script]http://jhlw.m18.us/g/ie.jpg
[script]http://jhlw.m18.us/g/iee.jpg
[script]http://jhlw.m18.us/g/ieee.jpg

jzking121 - 2012-4-16 21:39:00

:kaka4: 4个挂马的，三个同一家！挂马集团啊！！！

whatisright - 2012-4-17 14:03:00

这家的挂马在瑞星可以天天看到。

瑞星卡卡安全论坛