用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.1; QQDownload 691; .NET CLR 2.0.50727; LBBROWSER)

Log generated by networkedition use mdecoder 0.67
[root]http://bs.csu.edu.cn/dn/htm/mhxy.htm?www.ceozxw.com
    [exp]http://bs.csu.edu.cn/dn/mhxy/index_mhxy.htm(Exploit.Ie0dayCVE0806.a)
        [script]http://bs.csu.edu.cn/dn/mhxy/yt.jpg
        [iframe]http://bs.csu.edu.cn/dn/mhxy/ie8_mhxy.htm
        [iframe]http://bs.csu.edu.cn/dn/mhxy/ie_mhxy.htm
        [iframe]http://bs.csu.edu.cn/dn/mhxy/flash_mhxy.htm
            [flash]http://bs.csu.edu.cn/dn/mhxy/nb.swf
        [virus]http://bs.csu.edu.cn/dn/mhxy/mhxy.exe
    [script]http://js.users.51.la/6548307.js

Log generated by anonymous use mdecoder 0.67
[root]http://www.gzzjzx.net/
    [script]http://www.gzzjzx.net/Scripts/AC_RunActiveContent.js
    [flash]http://www.gzzjzx.net/home8.swf
[script]http://eaq.UglyAs.com/b.js?google=2x252
[script]http://vqj.Jkub.com:89/3/jjay.htm
    [iframe]http://vqj.Jkub.com:89/3/glr.htm
[virus]http://vqj.Jkub.com:89/o/cd.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
[script]http://fds.UglyAs.com/b.js?google=3x041
    [script]http://fld.AtHerSite.com/b.js?google=5x232
    [script]http://fnb.AtHerSite.com/b.js?google=6x091
    [script]http://frr.AtHerSite.com/b.js?google=7x181

Log generated by networkedition use mdecoder 0.67
[root]http://www.hsclgs.com/
    [script]http://fnr.AtHerSite.com/b.js?google=6x142
[script]http://vqj.Jkub.com:89/3/jjay.htm
    [iframe]http://vqj.Jkub.com:89/3/glr.htm
[virus]http://vqj.Jkub.com:89/o/cd.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://www.hsclgs.com/flash.js
    [flash]http://www.hsclgs.com/loading3.swf

Log generated by networkedition use mdecoder 0.67
[root]http://www.xianxiongfeng.com/(西安雄峰印刷包装有限公司)
    [flash]http://www.xianxiongfeng.com/images/main.swf
    [script]http://www.eootv.com/tv.js?ptype=13&fn=38352091120109816&w=408&h=370&ipos=4&cid=9651&cycle=0
    [script]http://flz.AtHerSite.com/b.js?google=5x303
[script]http://vqj.Jkub.com:89/3/jjay.htm
    [iframe]http://vqj.Jkub.com:89/3/glr.htm
[virus]http://vqj.Jkub.com:89/o/cd.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
    [script]http://fnA.AtHerSite.com/b.js?google=6x083
    [script]http://fnl.AtHerSite.com/b.js?google=6x122

Log generated by networkedition use mdecoder 0.67
[root]http://www.ynlyfw.com/(云南旅行社|昆明旅行社|云南国旅|昆明国旅|云南旅游|昆明旅游|大理旅游|丽江旅游|香格里拉|西双版纳—昆明中国国际旅行社www.ynlyfw.com)
    [script]http://www.ynlyfw.com/skin/main.js
    [iframe]http://www.ynlyfw.com/conn/toplogin.asp
        [script]http://fqf.AtHerSite.com/b.js?google=7x052
[script]http://vqj.Jkub.com:89/3/jjay.htm
    [iframe]http://vqj.Jkub.com:89/3/glr.htm
[virus]http://vqj.Jkub.com:89/o/cd.exe
    [script]http://js.tongji.linezing.com/2800225/tongji.js
        [script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
        [script]http://js.tongji.linezing.com/2800225//clickcollect.js
        [script]http://fqn.AtHerSite.com/b.js?google=7x081
    [script]http://www.ynlyfw.com/skin/sinaflash1.js
    [iframe]http://www.ynlyfw.com/conn/leftlogin.asp
        [script]http://fqf.AtHerSite.com/b.js?google=7x052
        [script]http://fqn.AtHerSite.com/b.js?google=7x081
    [script]http://dgt.zoosnet.net/JS/LsJS.aspx?siteid=DGT77733269&float=1
        [script]http://dgt.zoosnet.net/js/JS7248S+
    [script]http://www.ynlyfw.com/hm.baidu.com/h.js?f4f2ff1ace17d02bfaab856948a6c7aa
    [script]http://frj.AtHerSite.com/b.js?google=7x152