引用:
网址均来自瑞星每日安全播报，我们详细分析其中所挂恶意网址，对于已失效的恶意网址就不再分析。



引用:
注：以下分析出的恶意网址均包含有真实网马下载地址，请勿直接下载并运行，以免系统中招。





用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

Log generated by 1006162666 use mdecoder 0.67
[root]http://ciee.cau.edu.cn/dqpy/index.asp(ｵｳﾆ・ｮﾑ・- ﾐﾅﾏ｢ﾓ・酥､ｳﾌﾑｧﾔｺ)
    [flash]http://ciee.cau.edu.cn/dqpy/images/bgover.swf
    [iframe]http://ciee.cau.edu.cn/dqpy/./xu_admin/list.htm
    [script]http://ciee.cau.edu.cn/dqpy/count.asp

Log generated by 1006162666 use mdecoder 0.67
[root]http://v.gxtv.cn/memory/ie.html

Log generated by 1006162666 use mdecoder 0.67
[root]http://www.ecvv.com/member_site.html?url=http://www.zuodan.net&companyId=1061143
    [iframe]http://www.ecvv.com/HeadOfComapny.html?companyId=1061143
        [script]http://www.ecvv.com/JS/common.js
        [script]http://www.ecvv.com/JS/Search.js
    [iframe]http://www.zuodan.net
        [script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
            [iframe]http://121.12.169.200:171/win7/index.html?id=124
                [script]http://121.12.169.200:171/win7/chk.php?id=
                [script]http://121.12.169.200:171/win7/safe.js
                [iframe]http://121.12.169.200:171/win7/about:blank
        [script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
        [script]http://img/pic-js/prototype.js
        [script]http://img/pic-js/scriptaculous.js?load=effects
        [script]http://img/pic-js/lightbox.js
        [script]http://img/scriptswf.js
        [iframe]http://ad.html
        [script]http://32w.keccs.be.ma/css.js?width=700&height=600&keyword=uf556
    [script]http://www.google-analytics.com/urchin.js

Log generated by 1006162666 use mdecoder 0.67
[root]http://www.scinfo.gov.cn/zhutan/class1/Index.html(ﾋ・ｿﾆｼｼﾐﾅﾏ｢ﾍ・>> ﾖｿﾀ獸ｨﾀ逸ｫ >> ﾖﾐｹ晗ｿﾀ獸ｨﾀ・
    [flash]http:///zhutan/images/top.swf
    [script]http://www.scinfo.gov.cn/zhutan/JS/Article_Hot2.js
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Evil.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Flash.htm
        [exp]http://www.hb600.com/Inc/DEEPSNOW/Ms06014.htm(Exploit.Ms06014.a)
            [virus]http://www.hb600.com/Inc/DEEPSNOW/DEEP.exe
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Lz.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Bfyy.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/MsAccess.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Cx.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm
        [iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/bfyy.htm
    [exp]http://www.hb600.com/Inc/DEEPSNOW/Ms06014.htm(Exploit.Ms06014.a)
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Ms08011.htm
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/MsAccess.htm
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Cx.htm
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Lz.htm
    [exp]http://www.hb600.com/Inc/DEEPSNOW/MS07004.htm(Exploit.Ms07004.c)
        [virus]http://www.hb600.com/Inc/DEEPSNOW/DEEP.exe
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Ms08053.htm
    [iframe]http://www.hb600.com/Inc/DEEPSNOW/Real.htm

Log generated by 1006162666 use mdecoder 0.67
[root]http://www1.aufe.edu.cn/jianfei/Folder/style/118861.html(ppsｹﾙｷｽﾏﾂﾔﾘ)
    [script]http://www.91mir3sf.cn/123/guanggao/tan.js
    [script]http://www.91mir3sf.cn/123/guanggao/tuitan.js
    [iframe]http://www.91mir3sf.cn/123/guanggao/top.asp
    [iframe]http://www.91mir3sf.cn/123/guanggao/zhong.asp
    [iframe]http://www.txhtjy.com/stu/anhey.html
        [iframe]http://www.txhtjy.com/stu/love.html
            [iframe]http://www.txhtjy.com/stu/n73.htm
                [iframe]http://www.txhtjy.com/stu/ahf.htm
                    [iframe]http://www.txhtjy.com/stu/i1.htm
                    [iframe]http://www.txhtjy.com/stu/f2.htm
                        [script]http://www.txhtjy.com/stu/swfobject.js
                        [flash]http://www.txhtjy.com/stu/f115.swf
                        [flash]http://www.txhtjy.com/stu/f47.swf
                        [flash]http://www.txhtjy.com/stu/f45.swf
                        [flash]http://www.txhtjy.com/stu/f64.swf
                        [iframe]http://www.txhtjy.com/stu/f10.htm
                    [iframe]http://www.txhtjy.com/stu/i1.htm
            [iframe]http://www.txhtjy.com/stu/18.htm
                [script]http://www.txhtjy.com/stu/party.css
            [exp]http://www.txhtjy.com/stu/19.htm(Exploit.Ie0dayCVE0806.a)
                [virus]http://www.txhtjy.com/stu/ufo.exe
            [iframe]http://www.txhtjy.com/stu/n95.htm
                [iframe]http://www.txhtjy.com/stu/of.htm

知道了