用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Log generated by networkedition use mdecoder 0.67
[root]http://www.qhstv.com/Style/lzg/lzg.html(龙之谷辅助工具|龙之谷无敌，挤线工具免费下载-xyq163.net)
    [script]http://www.cdgs.gov.cn/manager/css/lzg2.js
        [exp]http://www.lsrc.cn/ad/test1test.html(Exploit.Ie0dayCVE0806.c)
            [script]http://www.lsrc.cn/ad/pack.js
            [script]http://www.lsrc.cn/ad/pack.css
            [virus]http://www.lsrc.cn/ad/lzg123.exe

Log is generated by FreShow.
[wide]http://job.wedchina.com/person/ViewCompanyDetails.aspx?CompanyId=12128&JobId=6329
    [script]http://220.231.180.83:60000/ads_fei5.php?REFERER=http://www.wedchina.com
        [object]http://8823d23.3322.org:171/win7/index.html?id=156
            [object]http://8823d23.3322.org:171/win7/boom-3.html?id=156
                [object]http://8823d23.3322.org:171/win7/156/a.jpg
                    [object]http://web.9bic.net:6668/Down/my/156.exe
                [script]http://8823d23.3322.org:171/win7/ap.js
    [frame]http://www.womgood.com/

Log generated by networkedition use mdecoder 0.67
[root]http://wiki.mbalib.com/
    [script]http://wiki.mbalib.com/w/skins/common/IEFixes.js
    [script]http://wiki.mbalib.com/w/skins/common/jquery.js
        [script]http://:
    [script]http://wiki.mbalib.com/w/index.php?title=-&action=raw&gen=js
        [script]http://wiki.mbalib.com/w/skins/common/IEFixes.js
        [script]http://wiki.mbalib.com/w/skins/common/jquery.js
        [script]http://wiki.mbalib.com/w/index.php?title=-&action=raw&gen=js
        [script]http://wiki.mbalib.com/w/skins/common/wikibits.js
        [script]http://wiki.mbalib.com/w/skins/common/ajax.js
        [script]http://a.mbalib.com/services/AH01.js
        [script]http://a.mbalib.com/services/AH02.js
        [script]http://a.mbalib.com/services/A01.js
        [script]http://a.mbalib.com/services/A06.js
        [script]http://a.mbalib.com/services/A02.js
        [script]http://a.mbalib.com/services/A03.js
        [script]http://a.mbalib.com/services/A05.js
        [script]http://a.mbalib.com/services/A07.js
        [script]http://js.users.51.la/1195328.js
    [script]http://wiki.mbalib.com/w/skins/common/wikibits.js
    [script]http://wiki.mbalib.com/w/skins/common/ajax.js
        [script]http://www.google-citys.com/main.js
            [exp]http://www.google-citys.com/sense.html(Exploit.Ie0dayCVE0806.a)
[virus]http://www.qlangewang.com/exeomn.exe
                [script]http://www.google-citys.com/yt.jpg
                [script]http://a.mbalib.com/services/AH01.js
    [script]http://a.mbalib.com/services/AH02.js
    [script]http://a.mbalib.com/services/A01.js
    [script]http://a.mbalib.com/services/A06.js
    [script]http://a.mbalib.com/services/A02.js
    [script]http://a.mbalib.com/services/A03.js
    [script]http://a.mbalib.com/services/A05.js
    [script]http://a.mbalib.com/services/A07.js
    [script]http://js.users.51.la/1195328.js

Log generated by networkedition use mdecoder 0.67
[root]http://www.58com.com/web/spstorehouse/class3.aspx?id=1573(好好想你_词曲库_中国原创音乐_CCTV_原创歌曲_原创大赛_专题报道_影视制作_录音棚)
    [script]http://www.58com.com/web/spstorehouse/../../js/pagechange.js
    [script]http://www.58com.com/web/spstorehouse/../../js/xmlhttp.js
    [script]http://www.58com.com/web/spstorehouse/../../js/ucoll.js
    [script]http://www.58com.com/web/spstorehouse/../../js/message.js
    [script]http://www.58com.com/web/spstorehouse/../../js/JavascriptCore.js
    [script]http://www.58com.com/web/spstorehouse/../../js/comm.js
    [script]http://www.58com.com/web/spstorehouse/../../js/showmsgstr.js
    [script]http://www.58com.com/ajaxpro/prototype.ashx
    [script]http://www.58com.com/ajaxpro/core.ashx
    [script]http://www.58com.com/ajaxpro/converter.ashx
    [script]http://www.58com.com/ajaxpro/WebUI.web.spstorehouse.class3,WebUI.ashx
    [script]http://www.58com.com/ajaxpro/WebUI.web.spstorehouse.Head,WebUI.ashx
    [script]http://www.58com.com/web/spstorehouse/../../js/Search.js
    [script]http://bjdtpy.com/x.js
        [iframe]http://nnmmahs.8866.org:885/GwN2/index.html?1
    [virus]http://dl.a8lm.info:86/xx/gwn2.css
  [script]http://nnmmahs.8866.org:885/GwN2/ap.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://bjdtpy.com/x.js
    [script]http://wood086.com/x.js
        [iframe]http://nnmmahs.8866.org:885/GwN2/index.html?1
    [script]http://wood086.com/x.js
    [script]http://wood086.com/x.js
    [script]http://wood086.com/x.js
    [script]http://wood086.com/x.js
    [script]http://makeupcn.cn/x.js
        [iframe]http://nnmmahs.8866.org:885/GwN2/index.html?1
    [iframe]http://www.58com.com/web/spstorehouse/../../htmledit/edit.htm
        [flash]http://www.58com.com/web/spstorehouse/../../htmledit/+path+
        [flash]http://www.58com.com/web/spstorehouse/../../htmledit/+path+

Log generated by networkedition use mdecoder 0.67
[root]http://www.njedu.gov.cn/
    [script]http://www.njedu.gov.cn/image/movelogo.js
        [exp]http://www.lxy520.com/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)
            [script]http://www.lxy520.com/pack.js
            [script]http://www.lxy520.com/pack.css
            [virus]http://www.lxy520.com/1234.exe
        [exp]http://www.lxy520.com/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)
    [script]http://www.njedu.gov.cn/image/lib/scroll.js
    [script]http://www.njedu.gov.cn/images/tz.js
        [flash]http://www.njenet.net.cn/include/homepage/lib/xuan.swf
        [exp]http://www.lxy520.com/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)
        [exp]http://www.lxy520.com/CUTE-IE.html(Exploit.Ie0dayCVE0806.c)