瑞星网站每日安全播报(2012年6月27日) bbs.ikaka.com

networkedition - 2012-6-27 14:18:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://bs.csu.edu.cn/(中南大学商学院)
2. http://www.dongshanschool(东山学校)
3. http://www.jxytoys.com/(JXYTOYS)
4. http://www.yjjxw.com.cn/(中国冶金机械网)
5. http://xsh.sdili.edu.cn/（山东轻工业学院学生会）

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

networkedition - 2012-6-27 14:19:00

Log generated by networkedition use mdecoder 0.67
[root]http://bs.csu.edu.cn/dn/htm/dnf.htm?bbs.creditcard.com.cn
[exp]http://bs.csu.edu.cn/dn/dnf/index_rxjh.htm(Exploit.Ie0dayCVE0806.a)
[script]http://bs.csu.edu.cn/dn/dnf/yt.jpg
[iframe]http://bs.csu.edu.cn//dn/dnf/ie8_rxjh.htm
[iframe]http://bs.csu.edu.cn//dn/dnf/ie_rxjh.htm
[iframe]http://bs.csu.edu.cn//dn/dnf/flash_rxjh.htm
[flash]http://bs.csu.edu.cn//dn/dnf/nb.swf
[virus]http://bs.csu.edu.cn//dn/dnf/rxjh.exe
[script]http://js.users.51.la/9194240.js

networkedition - 2012-6-27 14:19:00

Log generated by anonymous use mdecoder 0.67
[root]http://www.dongshanschool.net/(东山学校)
[script]http://fki.AtHerSite.com/b.js?google=5x162
[script]http://www.dongshanschool.net/scripts/AC_RunActiveContent.js
[flash]http://www.dongshanschool.net/SWF/lytop.swf
[flash]http://image2.sina.com.cn/bj/zonghe/pixviewer.swf
[script]http://www.dongshanschool.net/./AD/200910/1.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/./AD/200910/2.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/./AD/200910/3.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/./AD/200910/4.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/./AD/200910/5.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/../AD/200910/7.js
[script]http://www.dongshanschool.net/../AD/200910/6.js
[script]http://www.dongshanschool.net/./AD/200910/8.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/./AD/200910/9.js
[script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
[script]http://www.dongshanschool.net/../AD/200910/10.js
[script]http://www.dongshanschool.net/../AD/200910/11.js
[script]http://count.knowsky.com/count2/count.asp?id=72249&sx=1&ys=19
[iframe]http://count.knowsky.com/js.asp
[script]http://s104.cnzz.com/stat.php?id=1544465&web_id=1544465
[script]http://fki.AtHerSite.com/b.js?google=5x162
[root]http://vgh.ikwb.COM:89/2/ghay.htm
[iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js

networkedition - 2012-6-27 14:19:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.jxytoys.com/(JXYTOYS)
[script]http://eap.UglyAs.com/b.js?google=2x251
[script]http://fip.AtHerSite.com/b.js?google=5x101
[root]http://vgh.ikwb.COM:89/2/ghay.htm
[iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fkt.AtHerSite.com/b.js?google=5x201
[script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://fov.AtHerSite.com/b.js?google=6x241
[script]http://fpe.AtHerSite.com/b.js?google=6x271

networkedition - 2012-6-27 14:20:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.yjjxw.com.cn/(中国冶金机械网--冶金机械行业的领跑者，中国领先的冶金机械贸易平台，为企业提供最新机械和最新商机！)
[script]http://www.yjjxw.com.cn/skins/skin8/js/state.js
[script]http://www.yjjxw.com.cn/skins/skin8/js/hcuntil.js
[script]http://www.yjjxw.com.cn/js/sinaflash.js
[script]http://www.yjjxw.com.cn/netOpenClose.asp
[script]http://fdl.UglyAs.com/b.js?google=3x293
[script]http://fdo.UglyAs.com/b.js?google=3x303
[root]http://vgh.ikwb.COM:89/2/ghay.htm
[iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fkt.AtHerSite.com/b.js?google=5x201
[script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://fov.AtHerSite.com/b.js?google=6x241
[script]http://fpe.AtHerSite.com/b.js?google=6x271
[script]http://fdr.UglyAs.com/b.js?google=3x313
[script]http://fef.UglyAs.com/b.js?google=4x052
[script]http://ffo.UglyAs.com/b.js?google=4x172
[script]http://fih.AtHerSite.com/b.js?google=5x072
[script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://fmq.AtHerSite.com/b.js?google=6x052
[script]http://foq.AtHerSite.com/b.js?google=6x222
[script]http://fpe.AtHerSite.com/b.js?google=6x271
[script]http://www.yjjxw.com.cn/js/0000.js
[script]http://www.yjjxw.com.cn/hc/changehope/hcmarquee.js
[script]http://www.yjjxw.com.cn/ads/JS/loge中1.js
[script]http://www.yjjxw.com.cn/ads/JS/loge中2.js
[script]http://www.yjjxw.com.cn/ads/JS/loge中3.js
[script]http://www.yjjxw.com.cn/ads/JS/loge中4.js
[script]http://www.yjjxw.com.cn/js/yu.js
[script]http://:
[script]http://www.yjjxw.com.cn/js/tb.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左1.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左2.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左3.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左4.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左5.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左中中1.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左中中2.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左中中3.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左中中4.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左6.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左7.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左8.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左9.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左10.js
[script]http://www.yjjxw.com.cn/autokind/autokind.js
[script]http://www.yjjxw.com.cn/autokind/autokind_index.js
[script]http://www.yjjxw.com.cn/search/allkeywords.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左11.js
[script]http://www.yjjxw.com.cn/ads/JS/首页左12.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右1.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右2.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右3.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右4.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右5.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右5-1.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右6.js
[script]http://www.yjjxw.com.cn/ads/JS/首页右7.js
[script]http://www.yjjxw.com.cn/autoindex/index_html.asp
[script]http://fdl.UglyAs.com/b.js?google=3x293
[script]http://fdo.UglyAs.com/b.js?google=3x303
[script]http://fdr.UglyAs.com/b.js?google=3x313
[script]http://fef.UglyAs.com/b.js?google=4x052
[script]http://ffo.UglyAs.com/b.js?google=4x172
[script]http://fih.AtHerSite.com/b.js?google=5x072
[script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://fmq.AtHerSite.com/b.js?google=6x052
[script]http://foq.AtHerSite.com/b.js?google=6x222
[script]http://fpe.AtHerSite.com/b.js?google=6x271
[script]http://foq.AtHerSite.com/b.js?google=6x222
[script]http://fpe.AtHerSite.com/b.js?google=6x271

networkedition - 2012-6-27 14:20:00

Log generated by networkedition use mdecoder 0.67
[root]http://xsh.sdili.edu.cn/(山东轻工业学院学生会)
[script]http://xsh.sdili.edu.cn/js/inc/common.js
[script]http://xsh.sdili.edu.cn/js/inc/innerhtml.js
[script]http://xsh.sdili.edu.cn/js/inc/scripts.text.substr(0,
[script]http://xsh.sdili.edu.cn/js/inc/ajaxrequest.js
[script]http://xsh.sdili.edu.cn/js/inc/jquery.js
[script]http://xsh.sdili.edu.cn/cache/ads.js
[iframe]http://www.otcms.com/ads.asp?adID=1
[iframe]http://www.otcms.com/ads.asp?adID=2
[iframe]http://www.otcms.com/ads.asp?adID=3
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=5
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=6
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=7
[script]http://www.otcms.com/cache/ads.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20110610
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://wm.baidu.com/preview/preview.js
[iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=8
[iframe]http://www.otcms.com/ads.asp?adID=9
[iframe]http://www.otcms.com/ads.asp?adID=10
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=11
[iframe]http://www.otcms.com/ads.asp?adID=12
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=13
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=14
[iframe]http://www.otcms.com/ads.asp?adID=15
[iframe]http://www.otcms.com/ads.asp?adID=16
[script]http://www.otcms.com/cache/ads.js
[iframe]http://www.fushi88.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=17
[script]http://xsh.sdili.edu.cn/configJs.asp
[script]http://xsh.sdili.edu.cn/cache/configJs.js
[script]http://xsh.sdili.edu.cn/js/popup.js
[script]http://xsh.sdili.edu.cn/tools/popup/popup.js
[script]http://xsh.sdili.edu.cn/js/users.js
[script]http://xsh.sdili.edu.cn/js/usersCenter.js
[script]http://xsh.sdili.edu.cn/tools/nicEdit/nicEdit.js
[script]http://0
[script]http://xsh.sdili.edu.cn/js/top.js
[script]http://xsh.sdili.edu.cn/users.asp
[script]http://xsh.sdili.edu.cn/js/index.js
[script]http://fmk.AtHerSite.com/b.js?google=6x032
[script]http://xsh.sdili.edu.cn/tools/flashImgTrun/swf.js
[flash]http://xsh.sdili.edu.cn/tools/flashImgTrun/imgTrun.swf
[script]http://fmk.AtHerSite.com/b.js?google=6x032
[root]http://vgh.ikwb.COM:89/2/ghay.htm
[iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js

瑞星卡卡安全论坛