http://www.8336.cn
Log generated by networkedition use mdecoder 0.41
[root]http://76.73.65.58/
    [script]http://76.73.65.58/1.js
    [script]http://76.73.65.58/stat.JS
        [iframe]http://www.yahu365.com/qingchunweimei/201001/02-5321.html
            [script]http://www.yahu365.com/topad.js
            [script]http://www.yahu365.com/youad.js
            [script]http://www.yahu365.com/images/kk.gif
                [iframe]http://43iii.2288.org:801/c023399/c.htm
                [script]http://43iii.2288.org:801/c023399/c.js
                [script]http://43iii.2288.org:801/c023399/a.jpg
                [exe]http://www.8336.cn.exe
            [script]http://43iii.2288.org:801/c023399/b.jpg
            [script]http://www.yahu365.com/zuoad.js

有广告嫌疑
孔子快来啊，有人闹事

http://43iii.2288.org:801/c023399/a.jpg
解密出来是
http://sbl123.3322.org:8088/c02.exe
你为什么跑到http://www.8336.cn.exe？
故本人认为有广告嫌疑

Log is generated by FreShow.
[wide]http://www.yahu365.com/qingchunweimei/201001/02-5321.html
    [script]http://www.yahu365.com/topad.js
        [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
            [frame]http://pagead2.googlesyndication.com/pagead/+$(k(c))+' marginwidth=
    [script]http://www.yahu365.com/youad.js
        [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://www.yahu365.com/images/kk.gif
        [frame]http://43iii.2288.org:801/c023399/c.htm
            [script]http://43iii.2288.org:801/c023399/c.js
            [script]http://43iii.2288.org:801/c023399/a.jpg
                [object]http://sbl123.3322.org:8088/c02.exe
            [script]http://43iii.2288.org:801/c023399/b.jpg
    [script]http://www.yahu365.com/zuoad.js