用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

Log generated by networkedition use mdecoder 0.67
[root]http://bs.csu.edu.cn/dn/htm/dnf.htm?bbs.creditcard.com.cn
    [exp]http://bs.csu.edu.cn/dn/dnf/index_rxjh.htm(Exploit.Ie0dayCVE0806.a)
        [script]http://bs.csu.edu.cn/dn/dnf/yt.jpg
        [iframe]http://bs.csu.edu.cn//dn/dnf/ie8_rxjh.htm
        [iframe]http://bs.csu.edu.cn//dn/dnf/ie_rxjh.htm
        [iframe]http://bs.csu.edu.cn//dn/dnf/flash_rxjh.htm
            [flash]http://bs.csu.edu.cn//dn/dnf/nb.swf
        [virus]http://bs.csu.edu.cn//dn/dnf/rxjh.exe
    [script]http://js.users.51.la/9194240.js

Log generated by anonymous use mdecoder 0.67
[root]http://www.dongshanschool.net/(东山学校)
    [script]http://fki.AtHerSite.com/b.js?google=5x162
    [script]http://www.dongshanschool.net/scripts/AC_RunActiveContent.js
    [flash]http://www.dongshanschool.net/SWF/lytop.swf
    [flash]http://image2.sina.com.cn/bj/zonghe/pixviewer.swf
    [script]http://www.dongshanschool.net/./AD/200910/1.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/2.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/3.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/4.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/5.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/../AD/200910/7.js
    [script]http://www.dongshanschool.net/../AD/200910/6.js
    [script]http://www.dongshanschool.net/./AD/200910/8.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/./AD/200910/9.js
        [script]http://www.dongshanschool.net/ADCount.asp?Action=View&ADID=
    [script]http://www.dongshanschool.net/../AD/200910/10.js
    [script]http://www.dongshanschool.net/../AD/200910/11.js
    [script]http://count.knowsky.com/count2/count.asp?id=72249&sx=1&ys=19
        [iframe]http://count.knowsky.com/js.asp
            [script]http://s104.cnzz.com/stat.php?id=1544465&web_id=1544465
    [script]http://fki.AtHerSite.com/b.js?google=5x162
[root]http://vgh.ikwb.COM:89/2/ghay.htm
    [iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js

Log generated by networkedition use mdecoder 0.67
[root]http://www.jxytoys.com/(JXYTOYS)
    [script]http://eap.UglyAs.com/b.js?google=2x251
    [script]http://fip.AtHerSite.com/b.js?google=5x101
[root]http://vgh.ikwb.COM:89/2/ghay.htm
    [iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://fkt.AtHerSite.com/b.js?google=5x201
    [script]http://fld.AtHerSite.com/b.js?google=5x232
    [script]http://fov.AtHerSite.com/b.js?google=6x241
    [script]http://fpe.AtHerSite.com/b.js?google=6x271

Log generated by networkedition use mdecoder 0.67
[root]http://www.yjjxw.com.cn/(中国冶金机械网--冶金 机械 行业的领跑者，中国领先的冶金机械贸易平台，为企业提供最新机械和最新商机！)
    [script]http://www.yjjxw.com.cn/skins/skin8/js/state.js
    [script]http://www.yjjxw.com.cn/skins/skin8/js/hcuntil.js
    [script]http://www.yjjxw.com.cn/js/sinaflash.js
    [script]http://www.yjjxw.com.cn/netOpenClose.asp
        [script]http://fdl.UglyAs.com/b.js?google=3x293
        [script]http://fdo.UglyAs.com/b.js?google=3x303
[root]http://vgh.ikwb.COM:89/2/ghay.htm
    [iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://fkt.AtHerSite.com/b.js?google=5x201
    [script]http://fld.AtHerSite.com/b.js?google=5x232
    [script]http://fov.AtHerSite.com/b.js?google=6x241
    [script]http://fpe.AtHerSite.com/b.js?google=6x271
        [script]http://fdr.UglyAs.com/b.js?google=3x313
        [script]http://fef.UglyAs.com/b.js?google=4x052
        [script]http://ffo.UglyAs.com/b.js?google=4x172
        [script]http://fih.AtHerSite.com/b.js?google=5x072
        [script]http://fld.AtHerSite.com/b.js?google=5x232
        [script]http://fmq.AtHerSite.com/b.js?google=6x052
        [script]http://foq.AtHerSite.com/b.js?google=6x222
        [script]http://fpe.AtHerSite.com/b.js?google=6x271
    [script]http://www.yjjxw.com.cn/js/0000.js
    [script]http://www.yjjxw.com.cn/hc/changehope/hcmarquee.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中1.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中2.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中3.js
    [script]http://www.yjjxw.com.cn/ads/JS/loge中4.js
    [script]http://www.yjjxw.com.cn/js/yu.js
        [script]http://:
    [script]http://www.yjjxw.com.cn/js/tb.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左5.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左中中4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左6.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左7.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左8.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左9.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左10.js
    [script]http://www.yjjxw.com.cn/autokind/autokind.js
    [script]http://www.yjjxw.com.cn/autokind/autokind_index.js
    [script]http://www.yjjxw.com.cn/search/allkeywords.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左11.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页左12.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右2.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右3.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右4.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右5.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右5-1.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右6.js
    [script]http://www.yjjxw.com.cn/ads/JS/首页右7.js
    [script]http://www.yjjxw.com.cn/autoindex/index_html.asp
        [script]http://fdl.UglyAs.com/b.js?google=3x293
        [script]http://fdo.UglyAs.com/b.js?google=3x303
        [script]http://fdr.UglyAs.com/b.js?google=3x313
        [script]http://fef.UglyAs.com/b.js?google=4x052
        [script]http://ffo.UglyAs.com/b.js?google=4x172
        [script]http://fih.AtHerSite.com/b.js?google=5x072
        [script]http://fld.AtHerSite.com/b.js?google=5x232
        [script]http://fmq.AtHerSite.com/b.js?google=6x052
        [script]http://foq.AtHerSite.com/b.js?google=6x222
        [script]http://fpe.AtHerSite.com/b.js?google=6x271
    [script]http://foq.AtHerSite.com/b.js?google=6x222
    [script]http://fpe.AtHerSite.com/b.js?google=6x271

Log generated by networkedition use mdecoder 0.67
[root]http://xsh.sdili.edu.cn/(山东轻工业学院学生会)
    [script]http://xsh.sdili.edu.cn/js/inc/common.js
    [script]http://xsh.sdili.edu.cn/js/inc/innerhtml.js
        [script]http://xsh.sdili.edu.cn/js/inc/scripts.text.substr(0,
    [script]http://xsh.sdili.edu.cn/js/inc/ajaxrequest.js
    [script]http://xsh.sdili.edu.cn/js/inc/jquery.js
    [script]http://xsh.sdili.edu.cn/cache/ads.js
        [iframe]http://www.otcms.com/ads.asp?adID=1
        [iframe]http://www.otcms.com/ads.asp?adID=2
        [iframe]http://www.otcms.com/ads.asp?adID=3
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=5
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=6
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=7
            [script]http://www.otcms.com/cache/ads.js
                [flash]http://img.uu1001.cn/bcv3.swf?v=20110610
                [script]http://cpro.baidu.com/cpro/ui/c.js
                    [script]http://wm.baidu.com/preview/preview.js
                    [iframe]http://cpro.baidu.com/cpro/ui/{cproServiceUrl}?{paramString}
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [flash]http://img.uu1001.cn/bcv3.swf?v=20111012
                [flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
                [flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
                [flash]http://img.uu1001.cn/bcv3.swf?v=20120313
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [flash]http://img.uu1001.cn/bcv3.swf?v=20111012
                [flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
                [flash]http://img.uu1001.cn/bcv3.swf?v=909d86278c3145d2cc4df55fb92e1924f4ef0b31
                [flash]http://img.uu1001.cn/bcv3.swf?v=20120313
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [script]http://cpro.baidu.com/cpro/ui/c.js
                [script]http://cpro.baidu.com/cpro/ui/c.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=8
        [iframe]http://www.otcms.com/ads.asp?adID=9
        [iframe]http://www.otcms.com/ads.asp?adID=10
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=11
        [iframe]http://www.otcms.com/ads.asp?adID=12
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=13
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=14
        [iframe]http://www.otcms.com/ads.asp?adID=15
        [iframe]http://www.otcms.com/ads.asp?adID=16
            [script]http://www.otcms.com/cache/ads.js
            [iframe]http://www.fushi88.com/sitemap.html
            [iframe]http://54q5.com/sitemap.html
            [iframe]http://ottaoke.com/sitemap.html
        [iframe]http://www.otcms.com/ads.asp?adID=17
    [script]http://xsh.sdili.edu.cn/configJs.asp
    [script]http://xsh.sdili.edu.cn/cache/configJs.js
    [script]http://xsh.sdili.edu.cn/js/popup.js
    [script]http://xsh.sdili.edu.cn/tools/popup/popup.js
    [script]http://xsh.sdili.edu.cn/js/users.js
    [script]http://xsh.sdili.edu.cn/js/usersCenter.js
    [script]http://xsh.sdili.edu.cn/tools/nicEdit/nicEdit.js
        [script]http://0
    [script]http://xsh.sdili.edu.cn/js/top.js
    [script]http://xsh.sdili.edu.cn/users.asp
    [script]http://xsh.sdili.edu.cn/js/index.js
        [script]http://fmk.AtHerSite.com/b.js?google=6x032
    [script]http://xsh.sdili.edu.cn/tools/flashImgTrun/swf.js
        [flash]http://xsh.sdili.edu.cn/tools/flashImgTrun/imgTrun.swf
    [script]http://fmk.AtHerSite.com/b.js?google=6x032
[root]http://vgh.ikwb.COM:89/2/ghay.htm
    [iframe]http://vgh.ikwb.COM:89/2/ee.htm
[virus]http://vgh.ikwb.COM:89/o/bh.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js