networkedition - 2012-7-9 17:15:00
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。
1. http://www.hsclgs.com/(衡山齿轮有限责任公司)
2. http://www.szvtc.cn/(随州职业技术学院)
3. http://xsh.sdili.edu.cn/(山东轻工业学院学生会)
4. http://www.7-wind.com/(湖北七色风模特推广)
用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)
networkedition - 2012-7-9 17:16:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.hsclgs.com/
[script]http://fnr.AtHerSite.com/b.js?google=6x142
[script]http://vnh.Jkub.com:89/2/nhay.htm
[iframe]http://vnh.Jkub.com:89/2/ezc.htm
[virus]http://vnh.Jkub.com:89/o/bu.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://www.hsclgs.com/flash.js
[flash]http://www.hsclgs.com/loading3.swf
networkedition - 2012-7-9 17:16:00
Log generated by networkedition use mdecoder 0.67
[root]http://www.szvtc.cn/fzysx/About.aspx?id=1(随州职业技术学院服装与艺术设计系)
[script]http://www.szvtc.cn/fzysx/Scripts/AC_RunActiveContent.js
[flash]http://www.szvtc.cn/fzysx/img/nav.swf
[script]http://www.szvtc.cn/fzysx/js/flash.js
[exp]http://www.sysbaby.com/images/index.htm(Exploit.Mpeg2.c)
[script]http://www.sysbaby.com/images/go.jpg
[virus]http://www.ncxhsd.com/admin/ewebeditor/UploadFile/2010312161625886.exe
[flash]http://www.szvtc.cn/fzysx/images/di.swf
networkedition - 2012-7-9 17:16:00
Log generated by networkedition use mdecoder 0.67
[root]http://xsh.sdili.edu.cn/(山东轻工业学院学生会)
[script]http://xsh.sdili.edu.cn/js/inc/common.js
[script]http://xsh.sdili.edu.cn/js/inc/innerhtml.js
[script]http://xsh.sdili.edu.cn/js/inc/scripts.text.substr(0,
[script]http://xsh.sdili.edu.cn/js/inc/ajaxrequest.js
[script]http://xsh.sdili.edu.cn/js/inc/jquery.js
[script]http://xsh.sdili.edu.cn/cache/ads.js
[iframe]http://www.otcms.com/ads.asp?adID=1
[script]http://www.otcms.com/cache/ads.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20110610
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://wm.baidu.com/preview/preview.js
[iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[flash]http://img.uu1001.cn/bcv3.swf?v=20111012
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
[flash]http://img.uu1001.cn/bcv3.swf?v=20120313
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://otcms.com/qqkf/jquery.js
[script]http://otcms.com/qqkf/ServiceQQ.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[script]http://cpro.baidu.com/cpro/ui/c.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=2
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=3
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=5
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=6
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=7
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=8
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=9
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=10
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=11
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=12
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=13
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=14
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=15
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=16
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[iframe]http://www.otcms.com/ads.asp?adID=17
[script]http://www.otcms.com/cache/ads.js
[iframe]http://bai35.com/sitemap.html
[iframe]http://54q5.com/sitemap.html
[iframe]http://otcms.org/sitemap.html
[iframe]http://ottaoke.com/sitemap.html
[script]http://xsh.sdili.edu.cn/configJs.asp
[script]http://xsh.sdili.edu.cn/cache/configJs.js
[script]http://xsh.sdili.edu.cn/js/popup.js
[script]http://xsh.sdili.edu.cn/tools/popup/popup.js
[script]http://xsh.sdili.edu.cn/js/users.js
[script]http://xsh.sdili.edu.cn/js/usersCenter.js
[script]http://xsh.sdili.edu.cn/tools/nicEdit/nicEdit.js
[script]http://0
[script]http://xsh.sdili.edu.cn/js/top.js
[script]http://xsh.sdili.edu.cn/users.asp
[script]http://xsh.sdili.edu.cn/js/index.js
[script]http://fmk.AtHerSite.com/b.js?google=6x032
[script]http://vnh.Jkub.com:89/2/nhay.htm
[iframe]http://vnh.Jkub.com:89/2/ezc.htm
[virus]http://vnh.Jkub.com:89/o/bu.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://xsh.sdili.edu.cn/tools/flashImgTrun/swf.js
[flash]http://xsh.sdili.edu.cn/tools/flashImgTrun/imgTrun.swf
[script]http://fmk.AtHerSite.com/b.js?google=6x032
networkedition - 2012-7-9 17:17:00
Log generated by anonymous use mdecoder 0.67
[root]http://www.7-wind.com/
[flash]http://www.7-wind.com/flash/swf03.swf
[flash]http://www.tudou.com/v/GMCTLGA_-EY/&rpid=81570317/v.swf
[script]http://s11.cnzz.com/stat.php?id=2075331&web_id=2075331
[script]http://code.54kefu.net/kefu/js/60/59060.js
[script]http://webpresence.qq.com/getonline?Type=1&69153177:410679738:1547231702:1622412109:1609418469:
[script]http://code2.54kefu.net/kefu/js/60/59060_code.js
[script]http://fqr.AtHerSite.com/b.js?google=7x092
[script]http://vnh.Jkub.com:89/2/nhay.htm
[iframe]http://vnh.Jkub.com:89/2/ezc.htm
[virus]http://vnh.Jkub.com:89/o/bu.exe
[script]http://js.tongji.linezing.com/2800225/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/2800225//clickcollect.js
© 2000 - 2024 Rising Corp. Ltd.