Log generated by networkedition use mdecoder 0.54
[root]http://ex.ce.net.cn/8tm/js/mdbwww/xjwj/htdocs/upimgbt/New/2520.html
    [script]http://ad.2112111.com/web/mhxy/mhxy.js
        [exp]http://222.122.157.173/TelJobFiles/CompanyFiles/2007/game/mhxy/IE.htm(Exploit.Ie0dayCVE0806.a)
            [script]http://222.122.157.173/TelJobFiles/CompanyFiles/2007/game/mhxy/ap.js
            [virus]http://ad.2112111.com/xz/mhxy/1.exe
        [exp]http://222.122.157.173/TelJobFiles/CompanyFiles/2007/game/mhxy/IE2.htm(Exploit.Ie0dayCVE0806.a)
            [virus]http://ad.2112111.com/xz/mhxy/1.exe
        [exp]http://222.122.157.173/TelJobFiles/CompanyFiles/2007/game/mhxy/MM.htm(Exploit.IEAurora.a)
            [virus]http://ad.2112111.com/xz/mhxy/1.exe
        [iframe]http://ad.2112111.com/web/mhxy/index.htm
    [script]http://ad.2112111.com/ad/tc.js

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)

关于:hxxp://ex.ce.net.cn/8tm/js/mdbwww/xjwj/htdocs/upimgbt/New/2520.html解密的日志(全体输出 -  11):

Level  0>http://ex.ce.net.cn/8tm/js/mdbwww/xjwj/htdocs/upimgbt/New/2520.html
Level  1>http://count31.51yes.com/click.aspx?id=317732936&logo=12
Level  1>http://ad.2112111.com/ad/tc.js
Level  1>http://ad.2112111.com/web/mhxy/mhxy.js
Level  2>http://ad.2112111.com/web/mhxy/index.htm
Level  2>http://222.122.157.173/teljobfiles/companyfiles/2007/game/mhxy/mm.htm
Level  2>http://222.122.157.173/teljobfiles/companyfiles/2007/game/mhxy/ie2.htm
Level  3>http://ad.2112111.com/xz/mhxy/1.exeyy
Level  2>http://222.122.157.173/teljobfiles/companyfiles/2007/game/mhxy/ie.htm
Level  3>http://222.122.157.173/teljobfiles/companyfiles/2007/game/mhxy/ap.js
Level  3>http://ad.2112111.com/xz/mhxy/1.exewwwwwwww

日志由 Redoce2.0第15次修正版于 2010-4-30 14:16:41 生成。