Log generated by networkedition use mdecoder 0.54
[root]http://lib.xijing.edu.cn/Skin/4/lpt1.drvmy245/wenda./lpt6.ntwnc956.asp?h=/ttoomzjtr.html(天津联通新势力卡发信息怎么开通上网套餐发多少开通啊？ --lib.xijing.edu.cn)
    [script]http://js.160ads.com/i.js
        [script]http://js.160ads.com/+s(sr)+
        [iframe]http://js.160ads.com/+s(sr)+
    [script]http://js.160ads.com/i.js
    [exp]http://1013a5.3322.org:224/yy2/index.htm(Exploit.Ie0dayCVE0806.a)
        [script]http://1013a5.3322.org:224/yy2/mj.js
        [virus]http://99lgr.3322.org:224/yy2/kox.exe
    [exp]http://1013a5.3322.org:224/yy2/index.htm(Exploit.Ie0dayCVE0806.a)
    [exp]http://1013a5.3322.org:224/yy2/index.htm(Exploit.Ie0dayCVE0806.a)

用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

这么快失效
Log is generated by FreShow.
[wide]http://lib.xijing.edu.cn/Skin/4/lpt1.drvmy245/wenda./lpt6.ntwnc956.asp?h=/ttoomzjtr.html
    [script]http://js.160ads.com/i.js
    [script]http://js.160ads.com/i.js
    [script]http://js.tongji.linezing.com/1347479/tongji.js