瑞星网站每日安全播报(2012年7月3日) bbs.ikaka.com

networkedition - 2012-7-3 15:39:00

引用:

网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。

引用:

注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。

引用:

1. http://www.canbus.com.cn/(三兴达科技有限公司)
2. http://www.qhlyfw.com/(青藏旅游接待服务中心)
3. http://www.kpcatv.com/(开平有线宽频网)
4. http://www.hkyyjt.com/(恒康医药集团)
5. http://www.sz-hotel.com/（嵊州宾馆）

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

networkedition - 2012-7-3 15:39:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.canbus.com.cn/
[script]http://www.canbus.com.cn/Scripts/AC_RunActiveContent.js
[flash]http://www.canbus.com.cn/img/pr.swf
[iframe]http://www.canbus.com.cn/images/m_com33.jpg
[virus]http://www.canbus.com.cn/images/m_com33.exe

networkedition - 2012-7-3 15:40:00

Log generated by anonymous use mdecoder 0.67
[root]http://www.qhlyfw.com/(青藏旅游接待服务中心)
[script]http://fns.AtHerSite.com/b.js?google=6x143
[script]http://vjr.ikwb.COM:89/2/jray.htm
[iframe]http://vjr.ikwb.COM:89/2/eege.htm
[virus]http://vjr.ikwb.COM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://www.qhlyfw.com/../inc/save.js
[iframe]http://www.qhlyfw.com/*
[script]http://www.qhlyfw.com/inc/function.js
[script]http://www.qhlyfw.com/inc/save.js
[iframe]http://www.qhlyfw.com/banner/pic.asp
[script]http://fns.AtHerSite.com/b.js?google=6x143
[flash]http://www.qhlyfw.com/images/top.swf
[script]http://www.qhlyfw.com/hm.baidu.com/h.js?bb370ad6243f65f19323d96f186e32a7
[script]http://fns.AtHerSite.com/b.js?google=6x143

networkedition - 2012-7-3 15:40:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.kpcatv.com/vod/index.html(开平有线宽频)
[script]http://fpw.AtHerSite.com/b.js?google=7x022
[script]http://fkp.AtHerSite.com/b.js?google=5x183
[script]http://vjs.ikwb.COM:89/2/jray.htm
[iframe]http://vjs.ikwb.COM:89/2/eege.htm
[virus]http://vjs.ikwb.COM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fpn.AtHerSite.com/b.js?google=6x293

networkedition - 2012-7-3 15:41:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.hkyyjt.com/(恒康医药集团)
[script]http://fld.AtHerSite.com/b.js?google=5x232
[script]http://vjs.ikwb.COM:89/2/jray.htm
[iframe]http://vjs.ikwb.COM:89/2/eege.htm
[virus]http://vjs.ikwb.COM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://foz.AtHerSite.com/b.js?google=6x252
[script]http://fpz.AtHerSite.com/b.js?google=7x032

networkedition - 2012-7-3 15:41:00

Log generated by networkedition use mdecoder 0.67
[root]http://www.sz-hotel.com/(嵊州宾馆攀登者的驿站成功者的港湾)
[script]http://flr.AtHerSite.com/b.js?google=5x281
[script]http://vjs.ikwb.COM:89/2/jray.htm
[iframe]http://vjs.ikwb.COM:89/2/eege.htm
[virus]http://vjs.ikwb.COM:89/o/bn.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[flash]http://www.sz-hotel.com/images/index.swf
[script]http://zjnet.zjaic.gov.cn/bsjs/330683/33068300000153.js

瑞星卡卡安全论坛