注意此答案未有完全的swf网马，建议联系时将所有swf网马解密一遍。自己尝试做完后再参考答案。
Log is generated by FreShow.
[wide]http://cn.xm12.host.35.com/
[frame]http://aa99gg.6600.org/aa/a3.htm?wwcc
[frame]http://aa99gg.6600.org/aa/index.htm
[frame]http://aa99gg.6600.org/aa/he.htm
[script]http://aa99gg.6600.org/aa/h.js
[object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/test.htm
[script]http://aa99gg.6600.org/aa/go.jpg
[object]http://kapa8080.com/svchost.exe [script]http://aa99gg.6600.org/aa/go1.jpg
[frame]http://aa99gg.6600.org/aa/02.htm
[script]http://aa99gg.6600.org/aa/02.js
[object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/pp.htm
[frame]http://aa99gg.6600.org/aa/p.htm
[frame]http://aa99gg.6600.org/aa/pef.pdf
[object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/f.htm
[frame]http://aa99gg.6600.org/aa/i.html
[object]http://aa99gg.6600.org/aa/i16.swf [object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/f.html
[object]http://aa99gg.6600.org/aa/f16.swf [object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/of.htm
[script]http://aa99gg.6600.org/aa/a.js
[object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/r.htm
[script]http://aa99gg.6600.org/aa/r.js
[object]http://kapa8080.com/svchost.exe [frame]http://aa99gg.6600.org/aa/r.html
[script]http://aa99gg.6600.org/aa/url.js
[script]http://aa99gg.6600.org/aa/rl.js
[object]http://kapa8080.com/svchost.exe 用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
