Gen.Variant.Strictor.29584_013b8df242

HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.Strictor.29584 (B) (Emsisoft), Gen:Variant.Strictor.29584 (AdAware), TrojanFlyStudio.YR (Lavasoft MAS) Behaviour: Trojan The description has been au...
Blog rating:1 out of5 with1 ratings

Gen.Variant.Strictor.29584_013b8df242

by malwarelabrobot on January 13th, 2015 in Malware Descriptions.

HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.Strictor.29584 (B) (Emsisoft), Gen:Variant.Strictor.29584 (AdAware), TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 013b8df2426e3992807e30f992ee7f71
SHA1: 48d1c3801d5ce8db702e6f6e82761fcaba04ac04
SHA256: 5d7dbd9aced30a3ec509a26939523cb4be458f6e23d865f09e74773368cb18ba
SSDeep: 49152:MLdsdgvN2DMXi5 1OVsYs8dFYvanGVhr7i:CWdgvQAXi5uOV6CFYv4u7i
Size: 2736128 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: Inprise Corporation
Created at: 2015-01-06 12:59:47
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

cacls.exe:308
cacls.exe:1396
cacls.exe:1872
cacls.exe:492
cacls.exe:572
attrib.exe:876
attrib.exe:340
attrib.exe:652
attrib.exe:1288
qudongrensheng.dat:440

The Trojan injects its code into the following process(es):

wscntmx.exe:1576
%original file name%.exe:1136

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process wscntmx.exe:1576 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\b.bat (255 bytes)
%System%\drivers\etc\hosts.ics (21721 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\cj[1].txt (3645 bytes)
C:\a.bat (356 bytes)
%System%\drivers\etc\hosts (21186 bytes)

The process %original file name%.exe:1136 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\gg[1].png (5255 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\578724578[1].js (246 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rndmode_on[1].gif (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\046bt[1].gif (2479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\pic2[1].gif (431 bytes)
%System%\drivers\etc\protocol (799 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_stop[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgtitle[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\top[1].png (3116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zsf[1].gif (20145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_on[1].gif (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmbud[1].js (7042 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (751 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.8[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\1gg[1].png (14378 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\imgchg[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\1gg[2].png (13375 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_on[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[2].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.3[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\stat[1].php (1163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[2].gif (43 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[2].txt (166 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\logo[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.10[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_pauz_off[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[2] (975 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[2].htm (3309 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_stop_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (523 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_next[1].gif (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[2].gif (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_stop[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (721 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic2[1].gif (431 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\jiaqun[1].htm (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.6[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (18132 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\exobudset[1].js (467 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gif008[1].gif (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_next[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_off[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.2[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.8[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[2].gif (14958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\578724578[1].js (140 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\yds[1].gif (27521 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\zaoma[2].jpg (6397 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgtitle[2].gif (114 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (751 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\imgchg[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bingxue[2].gif (4453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.7[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (322 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_pauz_on[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\lhr[1].gif (16714 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_stop_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\zaoma[1].jpg (5767 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (332 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmbud[1].js (5605 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play_on[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zs[1].gif (28316 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_rept_off[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\yds[2].gif (25401 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\pic1[1].gif (428 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\icon[1].png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgnav[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\style[1].css (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\top[1].png (3176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\zaoma[1].jpg (4323 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bg[1].gif (763 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.7[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\imgchg[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.2[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgheader[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.5[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\2014052276129177[2].gif (832 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_stop[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\style[1].css (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgh[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\8090[2].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[3].gif (14828 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\6330cf46f68cd2c7c40a422626d1cb30[1].png (930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic1[1].gif (428 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgh[2].gif (1707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\xmb1[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.9[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_pauz_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[3].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.4[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bg[1].gif (763 bytes)
%System%\drivers\etc\lmhosts.sam (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\6330cf46f68cd2c7c40a422626d1cb30[1].png (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[1].gif (289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\2014052276129177[1].gif (832 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.10[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\gif008[1].gif (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.4[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\time[1].js (638 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\lszwg[1].htm (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.7[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_play[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\core[1].php (753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.0[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\group[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\lhr[1].gif (17238 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[3].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\gg[2].png (4078 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (402 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_pauz_off[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\zs[1].gif (30483 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_next[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.0[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.6[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[2].php (1097 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (402 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\logo[1].gif (231 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.0[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\12adfb.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bfzs[2].gif (9435 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zsf[2].gif (20294 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\exobudset[1].js (467 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rept_on[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1] (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_prev[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.9[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\zs[1].gif (28453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_pauz_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[1].php (1097 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[2].gif (289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgnav[1].gif (3 bytes)
%System%\drivers\etc\services (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_play_on[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\icon[1].png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_stop_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Desktop\·ÀIEÖ÷Ò³ÐÞ¸Ä-ä¯ÀÀÆ÷.exe (1858 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\core[1].php (753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_mute_on[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gua[1].gif (8526 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\core[1].php (753 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[2].txt (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.6[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bgh[1].gif (169 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\pic1[1].gif (428 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb3[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bingxue[1].gif (4631 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.4[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bfzs[1].gif (5805 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\logo[2].gif (231 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_play[1].gif (2 bytes)
%System%\drivers\etc\networks (407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\1gg[1].png (15660 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\046bt[2].gif (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_mute_off[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\6330cf46f68cd2c7c40a422626d1cb30[1] (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\core[1].php (753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\exobudset[2].js (467 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.2[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_pauz_off[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgheader[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bgnav[1].gif (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player59[1].htm (2739 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1].png (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gua[2].gif (11914 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[1].htm (1179 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_off[2].gif (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb2[1].gif (289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rept_off[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\606781[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\pic2[1].gif (431 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_rept_on[1].gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\578724578[1].js (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\8090[1].gif (1302 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\gg[1].png (4406 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\icon[1].png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\time[1].js (1276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\941pojie[1].htm (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_off[1].gif (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgtitle[1].gif (111 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bgheader[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\jbc[1].gif (12151 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[1].gif (10260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\jbc[1].gif (14667 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\top[1].png (3181 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rndmode_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmbud[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.8[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.3[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgtitle[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_play_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[2].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_pauz_off[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.10[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[2] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[2].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_stop_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_next[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_stop[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic2[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.6[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\exobudset[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_off[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.2[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.8[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\578724578[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\zaoma[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.7[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\578724578[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\pic1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bg[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\imgchg[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.3[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[1].php (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_stop[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\6330cf46f68cd2c7c40a422626d1cb30[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgh[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\xmb1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.9[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_pauz_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.4[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.4[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\time[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb3[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\zs[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_next[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.0[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.6[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\logo[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.0[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\12adfb.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\exobudset[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.9[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_pauz_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\icon[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.10[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.7[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\core[1].php (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgnav[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\1gg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_stop_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\6330cf46f68cd2c7c40a422626d1cb30[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.2[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\imgchg[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_pauz_off[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player59[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rept_off[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\pic2[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_rept_on[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\578724578[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\gg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb3[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_play[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\time[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_off[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bgheader[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\top[1].png (0 bytes)

The process qudongrensheng.dat:440 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\hao123_res.tmp (35 bytes)

Registry activity

The process cacls.exe:308 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "70 F0 0C 99 37 64 46 0A 89 CC D1 0C 28 26 07 D5"

The process cacls.exe:1396 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "07 D9 F8 07 C3 43 C7 41 C1 5E 16 95 69 5C 8B 34"

The process cacls.exe:1872 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "39 63 49 6B 00 BF 62 B2 F1 B5 C2 49 EC 94 66 C2"

The process cacls.exe:492 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7C B7 3E F4 37 E2 DD D0 A0 F1 51 F5 0A 0F 22 7A"

The process cacls.exe:572 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "24 87 64 7D 3A CC 39 F4 F8 AB 98 2E 3B 2F 36 EA"

The process attrib.exe:876 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 C1 19 3B F8 4A 2E A5 E7 00 48 7A A5 5D 4E 73"

The process attrib.exe:340 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9D 8F 48 34 EF 2A 51 EB C3 6C 20 8D F1 7A DC B0"

The process attrib.exe:652 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "53 98 16 50 9C 7B 5F 83 99 FF D3 39 8B E1 5B A6"

The process attrib.exe:1288 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "82 35 5C FB 66 4C 43 34 D4 0A EF 54 4C DF D3 04"

The process wscntmx.exe:1576 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "23 6E 1A CB 94 60 5A B1 75 F3 DD 84 E0 CF 17 CC"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"wscntmx" = "D:\\wscntmx.exe"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process %original file name%.exe:1136 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CB E9 A7 CC 80 BA AD E6 69 96 A8 4B 1C A9 58 FF"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1276x846x32(BGR 0)" = "31,31,31,31"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process qudongrensheng.dat:440 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "42 B9 E6 BD 25 05 13 A7 A1 EC B2 55 87 FC 10 BC"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\WinHelp32\Parameters]
"ServiceDll" = "%System%\ackbpw.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]
"krnlsrvc" = "WinHelp32"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\WinHelp32\Parameters]
"seRVicemAIN" = "RunDllEntry"

[HKLM\System\CurrentControlSet\Services\WinHelp32]
"Description" = "Windows Help System for X32 windows desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Dropped PE files

MD5 File path
eef5b77f19b00f327c3d0a400234ca74 c:\Documents and Settings\"%CurrentUserName%"\Desktop\·ÀIEÖ÷Ò³ÐÞ¸Ä-ä¯ÀÀÆ÷.exe
623cdebf1ed65aaba993745ad979881f c:\WINDOWS\system32\ackbpw.dll

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 65537 bytes in size. The following strings are added to the hosts file listed below:

162.211.182.39 988.pa579.com
162.211.182.39 adsr.ds.sdo.com
162.211.182.39 tb.25jx.net
162.211.182.39 ko.u25u.com
162.211.182.39 hc.25jx.net
162.211.182.39 kk.u25u.com
162.211.182.39 www.kaifu1.com
162.211.182.39 cx.j550.com
162.211.182.39 www.chengdongsteel.com
162.211.182.39 ss.u25u.com
162.211.182.39 ye.25jx.net
162.211.182.39 ss.u25u.com
162.211.182.39 p.u25u.com
162.211.182.39 x.j550.com
162.211.182.39 nl.25jx.net
162.211.182.39 sw.u25u.com
162.211.182.39 5.25jx.net
162.211.182.39 9.k1f.net
162.211.182.39 9k2.wd258.com
162.211.182.39 www.9377b.com
162.211.182.39 www.5ding.com
162.211.182.39 www.lyh23.com
162.211.182.39 x.25jx.net
162.211.182.39 cc.u25u.com
162.211.182.39 tg.95k.com
162.211.182.39 www.bjwcl.com
162.211.182.39 www.9377o.com
162.211.182.39 bdtg.9377e.com
162.211.182.39 bbs.121210.com
162.211.182.39 121210.com
162.211.182.39 www.121210.com
162.211.182.39 g.02qu.com
162.211.182.39 6.u25u.com
162.211.182.39 bbs.wg78.com
162.211.182.39 wg78.com
162.211.182.39 f.25jx.net
162.211.182.39 y.j550.com
162.211.182.39 1.nanyang2012.com
162.211.182.39 sx.fans8979.com
162.211.182.39 d.416191.com
162.211.182.39 www.121210.com/forum.php
162.211.182.39 youxi.baidu.com
162.211.182.39 d.k1f.net
162.211.182.39 dd.yang898.com
162.211.182.39 dd.yang858.com
162.211.182.39 www.daishichuchen.com
162.211.182.39 www.yzshule.com
162.211.182.39 fb.98zsjm.com
162.211.182.39 www.hqa.cn.com
162.211.182.39 www.zx-cj.com
162.211.182.39 www.628552.com
162.211.182.39 y.02qu.com
162.211.182.39 d.416191.com
162.211.182.39 www.sith.cc
162.211.182.39 www.9377t.com
162.211.182.39 www.tianxiang-intl.com
162.211.182.39 www.yn30.com
162.211.182.39 1.bzhtwqx.com
162.211.182.39 www.zzhttex.com
162.211.182.39 haocq.131sf.com
162.211.182.39 zhaof.aassdd.net
162.211.182.39 zhaof.98zslc.com
162.211.182.39 zhaof.youxizx.net
162.211.182.39 www.300sf.com
162.211.182.39 www.45uc.com
162.211.182.39 www.chasf.com
162.211.182.39 999.wd258.com
162.211.182.39 yyy.wd258.com
162.211.182.39 go.sf999.com
162.211.182.39 www.haost.com
162.211.182.39 1.hhyouxi.net
162.211.182.39 cq.98zslc.com
162.211.182.39 www.112fu.com
162.211.182.39 www.kaiqu.com
162.211.182.39 1.youxizx.net
162.211.182.39 www.777sf.com
162.211.182.39 www.hdjddl.com
162.211.182.39 112fu.huashengshipin.com
162.211.182.39 58sf.58sf-1.com
162.211.182.39 www.yx19.com
162.211.182.39 www.yx31.com
162.211.182.39 dn.67cx.com
162.211.182.39 t.u25u.com
162.211.182.39 w.hsdbm.com
162.211.182.39 dd.yang808.com
162.211.182.39 iwan.baidu.com
162.211.182.39 www.83cq.com
162.211.182.39 1.aassdd.net
162.211.182.39 www.hfhybjgs.com
162.211.182.39 www.haoqj.com
162.211.182.39 www.haojuezhan.com
162.211.182.39 www.zskunshang.com
162.211.182.39 a.mt30.net
162.211.182.39 www.377f.com
162.211.182.39 t.25jx.net
162.211.182.39 d.be-real.cn
162.211.182.39 d.diaoyiyuan.cn
162.211.182.39 www.xlmqt.com
162.211.182.39 www.528day.com
162.211.182.39 www.789zt.com
162.211.182.39 6.shangwanghui.com
162.211.182.39 1.shangwanghui.com
162.211.182.39 yx.minyouxi.com
162.211.182.39 1.678bigfoot.com
162.211.182.39 45uc.0731gfang.com
162.211.182.39 d.baidudiyi.net
162.211.182.39 u1.yhwl88.net
162.211.182.39 pojie.wwpan.com
162.211.182.39 www.9945.com
162.211.182.39 www.23u.com
162.211.182.39 www.haofu.com
162.211.182.39 www.sf184.com
162.211.182.39 www.sfw.com
162.211.182.39 www.5pk.com
162.211.182.39 tg.applx85.com
162.211.182.39 aa.liaochengjiayuan.com
162.211.182.39 ht.v58d.com
162.211.182.39 45uc.pf8898.com
162.211.182.39 61.115163.com
162.211.182.39 haocq.0553dx.com
162.211.182.39 d.baidudiyi.net
162.211.182.39 1.baidudiyi.net
162.211.182.39 11.baidudiyi.net
162.211.182.39 www.hycartoon.com
162.211.182.39 6.115163.com
162.211.182.39 www.sybnzh.cn
162.211.182.39 aa.kitefeung.com
162.211.182.39 11s.pf8898.com
162.211.182.39 1.mt30.net
162.211.182.39 www.snzad.com
162.211.182.39 www.uq2558.com
162.211.182.39 www.hada5688.com
162.211.182.39 www.zzctech.com
162.211.182.39 www.kf521.com
162.211.182.39 www.skycn1.com/pan144174_-1.html
162.211.182.39 ss99.927wz.com
162.211.182.39 zhaocq.aassdd.net
162.211.182.39 haocq.youxizx.net
162.211.182.39 160uc.600co.com
162.211.182.39 fa.oz9es.com
162.211.182.39 nx.5cn.cc
162.211.182.39 889tt.d3yy.cn
162.211.182.39 vip.jzc123.com
162.211.182.39 www.oryin.com
162.211.182.39 776tt.d3yy.cn
162.211.182.39 www.meihaomianjia.com
162.211.182.39 www.zgr999.com
162.211.182.39 www.yxzhaofu.com
162.211.182.39 pk6666.isitestar.cn
162.211.182.39 www.lwmoyu.com
162.211.182.39 www.pk515.com
162.211.182.39 www.uc277.com
162.211.182.39 www.uc828.com
162.211.182.39 885ok.52fanfou.com
162.211.182.39 www.pk05.com
162.211.182.39 3355t.jybz66.com
162.211.182.39 www.134p.com
162.211.182.39 88pkdxy.plpl123.com
162.211.182.39 rt.5cn.cc
162.211.182.39 www.521jjj.com
162.211.182.39 www.wst86.cn
162.211.182.39 1199t.kao77.com
162.211.182.39 6677y.szxmmw.com
162.211.182.39 www.weilai99.com
162.211.182.39 zhaocq.98zslc.com
162.211.182.39 lk.yhwl88.net
162.211.182.39 9911.9zph.com
162.211.182.39 z.67cx.com
162.211.182.39 www.longyi-group.com
162.211.182.39 www.genehi.com
162.211.182.39 www.362g.com
162.211.182.39 www.3sbl.net
162.211.182.39 www.herbalife888.cn
162.211.182.39 ns.78lc.net
162.211.182.39 dd.guidawang.com
162.211.182.39 3355t.jybz66.com
162.211.182.39 www.sf123uu.com
162.211.182.39 1.25jx.net
162.211.182.39 xd.qicaimofang.com
162.211.182.39 www.sz-lb.com
162.211.182.39 www.zo6knln.com
162.211.182.39 www.o68js.com
162.211.182.39 pk789a.52fanfou.com
162.211.182.39 zhaocq.700uc.com
162.211.182.39 www.06954.com
162.211.182.39 168tg.psc8.com
162.211.182.39 www.69945.com
162.211.182.39 160uc.600co.com
162.211.182.39 www.09846.com
162.211.182.39 88pkjx.mei12a.com
162.211.182.39 www.xhtk.net
162.211.182.39 www.45569.com
162.211.182.39 www.njzs58.com
162.211.182.39 8pk.mei12a.com
162.211.182.39 88pkh1.kkk21sd.com
162.211.182.39 88pkdxw.mei12a.com
162.211.182.39 88pkdxy.mei12a.com
162.211.182.39 www.anansf.com
162.211.182.39 www.haowz.com
162.211.182.39 999.23dpw.com
162.211.182.39 st.scdcyb.com
162.211.182.39 xs.qicaimofang.com
162.211.182.39 zhaosf.2866101.com
162.211.182.39 www.jyjyh.com
162.211.182.39 www.zhaohuajx.com
162.211.182.39 www.8iss.com
162.211.182.39 www.jnlvjie.com
162.211.182.39 sf123.21daikuan.com
162.211.182.39 zhaosf.2866101.com
162.211.182.39 tuiguang.8iss.com
162.211.182.39 tuiguang.8msm.com
162.211.182.39 fe.yueworld.net
162.211.182.39 920aa.changyc.com
162.211.182.39 xb.qicaimofang.com
162.211.182.39 www.yx003.com
162.211.182.39 www1.pkokok.com
162.211.182.39 cz.yueworld.net
162.211.182.39 tuiguang.muu9.com
162.211.182.39 haosf.98zsjm.com
162.211.182.39 www.75945.com
162.211.182.39 www.lpf010.com
162.211.182.39 www.6000pk.com
162.211.182.39 9pk.2766161.com
162.211.182.39 www.zhaof7.com
162.211.182.39 www.cqhr.org
162.211.182.39 www.ddzhe.com
162.211.182.39 pk789.52fanfou.com
162.211.182.39 160uc.com
162.211.182.39 www.1nhh.com
162.211.182.39 www.52sol.com
162.211.182.39 www.cpu500.com
162.211.182.39 www.2381sfcq.com
162.211.182.39 www.uc37.com
162.211.182.39 www.98pk97.com
162.211.182.39 www.hbcyly.com
162.211.182.39 haosf.lfweibo.com
162.211.182.39 cq.kgfanli.com
162.211.182.39 www.999yc.com
162.211.182.39 www1.jjj.com
162.211.182.39 zhaosf.acrmbs.com
162.211.182.39 www.uc900.com
162.211.182.39 www2.jjj.com
162.211.182.39 www3.jjj.com
162.211.182.3 1711ok.zz135.com
162.211.182.39 w13518.hr.jw.tczj.net
162.211.182.39 zhaofu7.com
162.211.182.39 tuiguang.592097.com
162.211.182.39 v.yueworld.net
162.211.182.39 zhaosf.ofyn.net
162.211.182.39 dk.qicaimofang.com
162.211.182.39 578101.com
162.211.182.39 www.578101.com
162.211.182.39 www.126disk.com
162.211.182.39 tui99.592097.com
162.211.182.39 tui99.8msm.com
162.211.182.39 dd.guidawang.com
162.211.182.39 bb.fushilu.com
162.211.182.39 www.zhaofu7.com
162.211.182.39 www.baiduzhaokf.com
162.211.182.39 www.haosf.com
162.211.182.39 www.jsl-cn.com
162.211.182.39 www.88858.com
162.211.182.39 www.heshilurong.com
162.211.182.39 www.168fm.com
162.211.182.39 www.artobrain.com
162.211.182.39 wwv.jb345.com
162.211.182.39 www.zhaosf9999.com
162.211.182.39 www.uc1000.com
162.211.182.39 www4.jjj.com
162.211.182.39 www.uc900.com
162.211.182.39 www.uc900.com
162.211.182.39 www.cctv-kowann.com
162.211.182.39 www5.jjj.com
162.211.182.39 www.artobrain.com
162.211.182.39 www.jxytqz.com
162.211.182.39 www.as9z.com
162.211.182.39 pk789.52fanfou.com:81
162.211.182.39 36cq.dg8681.com:3636
162.211.182.39 www.444yx.com
162.211.182.39 www.993yx.com
162.211.182.39 jjj.com
162.211.182.39 www1.99s.com
162.211.182.39 www2.99s.com
162.211.182.39 99s.com
162.211.182.39 www99s.com
162.211.182.39 www.uc1000.com
162.211.182.39 2410.eodfmr.cn
162.211.182.39 www.www99s.com
162.211.182.39 www.woool99s.com
162.211.182.39 www3.99s.com
162.211.182.39 9k1.pa579.com
162.211.182.39 new.fa111.com
162.211.182.39 www4.99s.com
162.211.182.39 www5.99s.com
162.211.182.39 www.09445.com
162.211.182.39 www.cdxxzs.com
162.211.182.39 www.angelsimple.cn
162.211.182.39 www.lida00.cn
162.211.182.39 www.zbzishen.com
162.211.182.39 www.86jiewang.cn
162.211.182.39 www.itcr.cn
162.211.182.39 www.99u.net.ru
162.211.182.39 www.wan345.com
162.211.182.39 www.525uc.com
162.211.182.39 www.1cq.com
162.211.182.39 www.jjj.com
162.211.182.39 www.99s.com
162.211.182.39 www.gm005.com
162.211.182.39 www.68kf.com
162.211.182.39 wwk.astbw.com
162.211.182.39 zz.sf163.com
162.211.182.39 www.sotrip.com
162.211.182.39 33k.pa579.com
162.211.182.39 www.555sf.com
162.211.182.39 www.66hst.com
162.211.182.39 66hst.com
162.211.182.39 www.xin45.com
162.211.182.39 xin45.com
162.211.182.39 www.zhaocq.com
162.211.182.39 1.52yanzheng.sinaapp.com
162.211.182.39 www.175sf.com
162.211.182.39 www.yxyhx.com
162.211.182.39 www.168fm.com
162.211.182.39 habourbiotech.com
162.211.182.39 www.pydwlm.com
162.211.182.39 www.ux99.com
162.211.182.39 www.hn17173.net
162.211.182.39 www.5s98.com
162.211.182.39 www.880s.com
162.211.182.39 www.118uc.com
162.211.182.39 www.zf777.com
162.211.182.39 81.2381f.com
162.211.182.39 www.njkaidu.com
162.211.182.39 www.9szf.com
162.211.182.39 www.999zsf.com
162.211.182.39 www.85zf.com
162.211.182.39 www.951pk.com
162.211.182.39 www.851pk.com
162.211.182.39 988.pa579.com
162.211.182.39 ad.97uu.com
162.211.182.39 www.i8pk.com
162.211.182.39 www.sf996.com
162.211.182.39 www.0579st.com
162.211.182.39 www.mc1314.com
162.211.182.39 gm016.comforum.php
162.211.182.39 www.whsfzx.com
162.211.182.39 dd.sh-tongy.com
162.211.182.39 111.kaihu365.com
162.211.182.39 www.dddgm.com
162.211.182.39 www.ok126.net
162.211.182.39 www.wanshituliao.com
162.211.182.39 www.zaxue.net
162.211.182.39 www.4006517008.com
162.211.182.39 www.tcrhy.com
162.211.182.39 www.vdisk.cnyy6018
162.211.182.39 www.sf383.com
162.211.182.39 www.001gm.net
162.211.182.39 www.006it.com
162.211.182.39 www.gm5555.com
162.211.182.39 www.yxyhx.com
162.211.182.39 www.3jidi-gz.com
162.211.182.39 www.100gczg.com
162.211.182.39 haosf.lgknow.com
162.211.182.39 habourbiotech.com
162.211.182.39 www.satsalt.com
162.211.182.39 tg1.37.com
162.211.182.39 pi.nuwa-mountain.org
162.211.182.39 www.jafdc.net
162.211.182.39 941pk.com
162.211.182.39 www.5iwowo.com
162.211.182.39 www.bonopt.com
162.211.182.39 www.jzdkfj.com
162.211.182.39 henuedu.cn
162.211.182.39 www.sdjialiang.com
162.211.182.39 www.10010cq.com
162.211.182.39 www.z0137cx.comkwcs
162.211.182.39 www.0512rc.net
162.211.182.39 www.dahanjg.com
162.211.182.39 www.ht-vision.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.jfy8rv.comzjp6bw
162.211.182.39 www.yxyhx.com
162.211.182.39 www.9uzg.com
162.211.182.39 www.gm667.com
162.211.182.39 www.znspyq.com9dzf7w
162.211.182.39 www.18-81.net
162.211.182.39 www.ht-vision.com
162.211.182.39 www.gmwly.com
162.211.182.39 user.qzone.qq.com5674167
162.211.182.39 t.qq.comchuanqisf8997
162.211.182.39 www.njjqgck.com
162.211.182.39 www.hkalu.com
162.211.182.39 www.60sf.com
162.211.182.39 www.pk123.com
162.211.182.39 www.52anzu.com
162.211.182.39 www1.52anzu.com
162.211.182.39 52anzu.com
162.211.182.39 www.sopojie.com
162.211.182.39 www1.sopojie.com
162.211.182.39 sopojie.com
162.211.182.39 www.wf22.com
162.211.182.39 xingyoufz.wwpan.com
162.211.182.39 www.36ok.com
162.211.182.39 www.32fa.com
162.211.182.39 wws.99acc.com
162.211.182.39 www.916cq.com
162.211.182.39 1711ok.sh77577.com
162.211.182.39 www.18uc.com
162.211.182.39 18uc.com
162.211.182.39 88pk.com
162.211.182.39 www.88pk.com
162.211.182.39 162.212.180.86
162.211.182.39 36ok.com
162.211.182.39 118.99.26.156
162.211.182.39 23.234.60.34
162.211.182.39 www.52anzu.net
162.211.182.39 www.77250.com
162.211.182.39 77250.com
162.211.182.39 www1.52anzu.net
162.211.182.39 tt.1kuv.com
162.211.182.39 www.33ok.com
162.211.182.39 916cq.com
162.211.182.39 91ww.91fu.com
162.211.182.39 www1.pk777.com
162.211.182.39 www.sf999.com
162.211.182.39 www.yeahooo.net
162.211.182.39 1.townhall.cn
162.211.182.39 www.bjjijiubao.com
162.211.182.39 1.xa1314.com.cn
162.211.182.39 www.yvwtjf.com/rkwwcq
162.211.182.39 www.stylepacking.com
162.211.182.39 www.cnfengye.com
162.211.182.39 www.zazgame.com
162.211.182.39 www.zrplay.com
162.211.182.39 www.yczdwj.com
162.211.182.39 www.zheyutegang.com
162.211.182.39 www.sf123.com
162.211.182.39 www.daqiandoor.com
162.211.182.39 www.77d8.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.wwesf.com
162.211.182.39 www.7988ok.com
162.211.182.39 www.shfengyi.com
162.211.182.39 pg.iflu.com.cn
162.211.182.39 www.gdtrane.com
162.211.182.39 www.scxlm.com
162.211.182.39 www.kisspk.com
162.211.182.39 www.cqxz.com.cn
162.211.182.39 www.kanonsh.com
162.211.182.39 www.gm1208.com
162.211.182.39 www.provoxav.com
162.211.182.39 dgdimei.com
162.211.182.39 www.cntzdh.com
162.211.182.39 www.hanwise.com
162.211.182.39 www.mfttj.com
162.211.182.39 www.shenqi.com
162.211.182.39 www.52345.com
162.211.182.39 81f.hao899.com
162.211.182.39 www.sf123.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.daqiandoor.com
162.211.182.39 www.941jb.com
162.211.182.39 2sogo.com
162.211.182.39 mobanbbs.com
162.211.182.39 91ww.555uc.com
162.211.182.39 www.99j.com
162.211.182.39 www.91ww.com
162.211.182.39 www.777uc.com
162.211.182.39 www.xbkdq.com
162.211.182.39 66sf.77zhao.com
162.211.182.39 www.184pk.com
162.211.182.39 www.sf999.com
162.211.182.39 www.pk777.com
162.211.182.39 www.alfatoyota.com
162.211.182.39 mobanbbs.com
162.211.182.39 www.stbshg.com
162.211.182.39 www.daqiandoor.com
162.211.182.39 www.1cq.com/1cqlwg.htm
162.211.182.39 www.xbkdq.com
162.211.182.39 www.sf123.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.buyishijia.com
162.211.182.39 www.sf999.com
162.211.182.39 www.shenqi.com
162.211.182.39 www.52345.com
162.211.182.39 www.92045.com
162.211.182.39 www.926.com
162.211.182.39 www.99j.com
162.211.182.39 www.945pk.com
162.211.182.39 8uc.haosf33.com
162.211.182.39 www.91ww.com
162.211.182.39 www.8uu.com
162.211.182.39 81f.hao883.com
162.211.182.39 81f.hao979.com
162.211.182.39 81f.hao899.com
162.211.182.39 www.81f.com
162.211.182.39 www.nihao119.com
162.211.182.39 www.66sf.com
162.211.182.39 kkkfu.sylytz.com
162.211.182.39 83aa.sf078.com
162.211.182.39 521fu.9173uc.com
162.211.182.39 www.777uc.com
162.211.182.39 www.pk777.com
162.211.182.39 www.30ok-1.com
162.211.182.39 www.haocq.com
162.211.182.39 www.1000ok.com
162.211.182.39 wvw.rq23.com
162.211.182.39 wvw.2013wan.com
162.211.182.39 wvw.9377z.com
162.211.182.39 mmm.wopaijs.com
162.211.182.39 www.yyy279.com
162.211.182.39 wvw.9377s.com
162.211.182.39 www.zhujiutx.com
162.211.182.39 www.hbwxkj.com
162.211.182.39 www.sh-chengshan.com
162.211.182.39 zhaosfcq.com
162.211.182.39 www.subpig.net
162.211.182.39 www.jlzcfx.com
162.211.182.39 www.66sf.com
162.211.182.39 www.cdxxlh.com
162.211.182.39 www.83uc.com
162.211.182.39 www.shjwd.com
162.211.182.39 www.jingming-sh.com
162.211.182.39 www.aerosun.cn
162.211.182.39 www.qdhd.com.cn
162.211.182.39 www.flyxg.com
162.211.182.39 www.zggljt.com
162.211.182.39 www.99mc.com
162.211.182.39 www.138zg.com
162.211.182.39 www.523zg.com
162.211.182.39 www.98zg.com
162.211.182.39 www.78zg.cn
162.211.182.39 www.99ting.cn
162.211.182.39 www.27zg.com
162.211.182.39 www.92sanduo.com
162.211.182.39 www.527zg.com
162.211.182.39 www.xstylxx.com
162.211.182.39 www.xrsd-water.com
162.211.182.39 www.tttjsq.com
162.211.182.39 www.y1995.com
162.211.182.39 www.883sf.com
162.211.182.39 sf123.com
162.211.182.39 changjing.759rsq.com
162.211.182.39 xinqing.kqgf69.com
162.211.182.39 www.xahdc.com
162.211.182.39 www.haotl.com
162.211.182.39 www.chinajin-hui.com
162.211.182.39 www.fullkang.net.com
162.211.182.39 tanxian.u895.com
162.211.182.39 www.m526.com
162.211.182.39 www.majorsoul.com
162.211.182.39 changjing.pbbxy.com
162.211.182.39 sf225.com
162.211.182.39 www.haosf.com
162.211.182.39 www.tcrhy.com
162.211.182.39 www.001gm.net
162.211.182.39 cqdl321.com
162.211.182.39 www.b9jojo.com
162.211.182.39 www.9kf.com
162.211.182.39 www.sf138.com
162.211.182.39 www.628118.com
162.211.182.39 www.hezol.com
162.211.182.39 www.qjkutrgw.com
162.211.182.39 www.ashijia.com
162.211.182.39 www.1200sf.com
162.211.182.39 www.aarongj.com
162.211.182.39 www.53my.com
162.211.182.39 www.888cnc.com
162.211.182.39 www.sf3000.com
162.211.182.39 www.29u.in
162.211.182.39 www.96sf.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.sf800.com
162.211.182.39 www.77mxd.com
162.211.182.39 www.9uzg.com
162.211.182.39 www.sf999.com.ru
162.211.182.39 www.szmajsy.com
162.211.182.39 www.jptea.cn
162.211.182.39 www.cqpk11.com
162.211.182.39 www.insdfjisd.com
162.211.182.39 www.828kk.com
162.211.182.39 www.irrchina.com
162.211.182.39 www.22nf.com
162.211.182.39 www.jiutianzs.com
162.211.182.39 www.103la.com
162.211.182.39 www.889ok.com
162.211.182.39 huanshou.8236r.com
162.211.182.39 www.1129f.com
162.211.182.39 345ye.861sf.com
162.211.182.39 www.861sf.com
162.211.182.39 861sf.com
162.211.182.39 www.sf985.com
162.211.182.39 www.bonopt.com
162.211.182.39 cq45.cn
162.211.182.39 www.cq45.cn
162.211.182.39 www.bgdtw.com
162.211.182.39 www.930t.com
162.211.182.39 www.tianhuao.com
162.211.182.39 www.99a.net.ru
162.211.182.39 www.hmyigou.com
162.211.182.39 www.fzjx.net
162.211.182.39 www.ez-max.net
162.211.182.39 www.zhuoranfm.com
162.211.182.39 www.ccadly.net
162.211.182.39 www.chinasysw.com
162.211.182.39 www.dyjkdd.com
162.211.182.39 www.cnbaoerte.com
162.211.182.39 www.sf895.com
162.211.182.39 www.joywei.com
162.211.182.39 www.yalincs.com
162.211.182.39 www.kkstar.com
162.211.182.39 www.949g.com
162.211.182.39 www.zhaosf.com.co
162.211.182.39 www.3000ok.com.cn
162.211.182.39 n813.com
162.211.182.39 uc88.com
162.211.182.39 qu45.com
162.211.182.39 www.aop9988.com
162.211.182.39 www.sdytgj.com
162.211.182.39 www.gzgien.com
162.211.182.39 www.chuanqige.com
162.211.182.39 51my8.com
162.211.182.39 www.99j.com.es
162.211.182.39 www.sf452.com
162.211.182.39 www.981sf.com
162.211.182.39 www.sf382.com
162.211.182.39 www.hldly.com
162.211.182.39 www.sf062.com
162.211.182.39 www.8345sf.com
162.211.182.39 www.sdfwesq.com
162.211.182.39 www.sjxt123.com
162.211.182.39 www.daqiandoor.com
162.211.182.39 www.125sf.com
162.211.182.39 www.xieqiyy.com
162.211.182.39 www.ldyeya.com
162.211.182.39 www.088sf.net
162.211.182.39 83so.com
162.211.182.39 www.sf421.com
162.211.182.39 www.4f920.com
162.211.182.39 www.tiaolou8.com
162.211.182.39 www.taocooler.com
162.211.182.39 www.wanpp.com
162.211.182.39 www.fhzsm.com
162.211.182.39 www.pt12319.com
162.211.182.39 www.hx-lace.com
162.211.182.39 www.jiagao.net
162.211.182.39 76776.com
162.211.182.39 www.htwjcy.com
162.211.182.39 www.win757.com
162.211.182.39 www.hnjxzz.cn
162.211.182.39 www.xmdvip.com
162.211.182.39 swqzp.com
162.211.182.39 www.tungsten-moly.com
162.211.182.39 jingyan.986jj.com
162.211.182.39 www.xxf888.com
162.211.182.39 www.cnrsyy.com
162.211.182.39 www.txingzuo.com
162.211.182.39 www.ykmir.com
162.211.182.39 www.xjxianping.cn
162.211.182.39 www.web01.cn
162.211.182.39 www.yijiaedu.cn
162.211.182.39 dushisuanlafen.cn
162.211.182.39 www.zzyichen.com
162.211.182.39 www.cnnoblelight.com
162.211.182.39 klkemu.net
162.211.182.39 www.faith-forever.com
162.211.182.39 www.bopuai.cn
162.211.182.39 www.xzchuitou.cn
162.211.182.39 www.ccxbzk.cn
162.211.182.39 www.915788.com
162.211.182.39 www.sdxtcnc.com
162.211.182.39 www.sz-stv.com
162.211.182.39 www.fjoss.com
162.211.182.39 www.204sf.com
162.211.182.39 www.tech-sss.com
162.211.182.39 www.mywowpl.com
162.211.182.39 www.shi-yi.net
162.211.182.39 www.hzlyfashion.com
162.211.182.39 www.freeshu.com
162.211.182.39 www.chinatianmei.com
162.211.182.39 00pk.com
162.211.182.39 www.tqb88.com
162.211.182.39 4593.9kf.com
162.211.182.39 www.120yi.com
162.211.182.39 www.hdmchina.com
162.211.182.39 www.zzfuxi.com
162.211.182.39 www.sdicl.com
162.211.182.39 www.ebontec.com
162.211.182.39 www.3000oksf.com
162.211.182.39 www.shqing8.com
162.211.182.39 www.666mir.com
162.211.182.39 www.adchy.com
162.211.182.39 www.pyprint.com
162.211.182.39 www.56chuanqi.com
162.211.182.39 www.simicc.com
162.211.182.39 www.a5zg.com
162.211.182.39 www.szhcgroup.com
162.211.182.39 www.57ssy.com
162.211.182.39 www.qingzhou8.com
162.211.182.39 tt292.com
162.211.182.39 www.jiatianneiyi.com
162.211.182.39 www.leeed.com
162.211.182.39 www.20020505.com
162.211.182.39 www.kl-chem.com
162.211.182.39 www.tjzssd.com
162.211.182.39 www.nnhxjh.com
162.211.182.39 www.dwmir.com
162.211.182.39 www.kk519.com
162.211.182.39 www.chinanewhope.net
162.211.182.39 www.yalimei-group.com
162.211.182.39 www.jiulongbelt.com
162.211.182.39 www.dushisuanlafen.cn
162.211.182.39 www.cn0796.com
162.211.182.39 www.hnfengyuan.com
162.211.182.39 www.yixinghai.com
162.211.182.39 www.zgtjsteel.com
162.211.182.39 www.51disky.com
162.211.182.39 www.zhybbs.com
162.211.182.39 www.91kaixue.com
162.211.182.39 www.fyplay.com
162.211.182.39 www.wowidc.com
162.211.182.39 www.jiahongtex.com
162.211.182.39 www.diselife.com
162.211.182.39 www.yygdz.com
162.211.182.39 www.kexingco.com
162.211.182.39 www.88fb.com
162.211.182.39 www.botaofan.com
162.211.182.39 www.zzhdjx.cn
162.211.182.39 www.cntuliao.com
162.211.182.39 www.m5y6.cn
162.211.182.39 www.songzhilu.com
162.211.182.39 zhaopeng.net
162.211.182.39 www.xiayunfei.com
162.211.182.39 soyoesd.cn
162.211.182.39 www.523zg.com
162.211.182.39 regongjixie.com
162.211.182.39 www.mir87.com
162.211.182.39 chinachengyang.cn
162.211.182.39 www.dgguanglin.com
162.211.182.39 www.huayuebz.com
162.211.182.39 www.xxsw028.com
162.211.182.39 www.myppchina.com
162.211.182.39 www.gzsuper.com
162.211.182.39 www.txhtc.com
162.211.182.39 www.cdcx1956.com
174.128.248.72 www.yaliwood.com
162.211.182.39 www.flower024.com
162.211.182.39 www.5ttb.com
162.211.182.39 www.i193.com
162.211.182.39 www.shweiheng.com
162.211.182.39 www.65wt.com
162.211.182.39 u17766.com
162.211.182.39 www.600sf.com
162.211.182.39 www.baodaobike.com
162.211.182.39 www.56fabu.com
162.211.182.39 www.pt12319.com
162.211.182.39 pk.sydahe.com
162.211.182.39 cnpeishi.cn
162.211.182.39 www.2-55.com
162.211.182.39 www.cdfufu.com
162.211.182.39 www.bzydzs.com
162.211.182.39 www.dhl.gov.cn
162.211.182.39 www.81cq.com
162.211.182.39 www.sxfyxyq.com
162.211.182.39 111wt.com
162.211.182.39 81sf.com
162.211.182.39 44dy.com
162.211.182.39 30wy.com
162.211.182.39 999wg.net
162.211.182.39 915m.com
162.211.182.39 66kf.net
162.211.182.39 www.qs930.com
162.211.182.39 www.shutu.cc
162.211.182.39 sf666.75gm.com
162.211.182.39 www.kkksf.com
162.211.182.39 www.zhao3f.com
162.211.182.39 6cq.cc
162.211.182.39 u7u73.com
162.211.182.39 sf923.com
162.211.182.39 oryin.com
162.211.182.39 gm777.com
162.211.182.39 gm333.com
162.211.182.39 cseht.com
162.211.182.39 520f.com
162.211.182.39 258x.com
162.211.182.39 57ww.com
162.211.182.39 57591.com
162.211.182.39 33sf.com
162.211.182.39 sf509.com
162.211.182.39 803cq.com
162.211.182.39 25930.com
162.211.182.39 812315.com
162.211.182.39 11cq.cn
162.211.182.39 94ww.com
162.211.182.39 777wt.com
162.211.182.39 www.99mc.com
162.211.182.39 980cq.com
162.211.182.39 hdhjgs.com
162.211.182.39 51zzsf.com
162.211.182.39 0574k.com
162.211.182.39 wjlon.cn
162.211.182.39 d518.com
162.211.182.39 sf29.com
162.211.182.39 222sf.com
162.211.182.39 23qianbao.com
162.211.182.39 195ca.com
162.211.182.39 118967.com
162.211.182.39 10000ok.com
162.211.182.39 72cq.com
162.211.182.39 5zaoxie.com
162.211.182.39 555beian.com
162.211.182.39 55hj.com
162.211.182.39 45758.com
162.211.182.39 41345.com
162.211.182.39 258sf.com
162.211.182.39 9000sf.com
162.211.182.39 87sf.com
162.211.182.39 89946.com
162.211.182.39 88f.com
162.211.182.39 86rs.com
162.211.182.39 77yu.com
162.211.182.39 81592.com
162.211.182.39 74981.com
162.211.182.39 818wy.com
162.211.182.39 9826w.com
162.211.182.39 www.myidc.cc
162.211.182.39 www.whygjt.com
162.211.182.39 www.nd-zk.com
162.211.182.39 haosf.com.cn
162.211.182.39 www.sf3000ok.com
162.211.182.39 www.145930.com
162.211.182.39 www.80ww.com
162.211.182.39 www.258x.com
162.211.182.39 www.sf509.com
162.211.182.39 www.tjklm.com
162.211.182.39 17sz.net
162.211.182.39 www.81sf.com
162.211.182.39 www.0663yh.com
162.211.182.39 whygjt.com
162.211.182.39 www.cc816.com
162.211.182.39 www.bohaomj.com
162.211.182.39 www.blbfg.com
162.211.182.39 jndd.com.cn
162.211.182.39 www.ba45.com
162.211.182.39 www.bjwztc.com
162.211.182.39 www.bangbangtuan.com
162.211.182.39 1.wzca.com.cn
162.211.182.39 www.51yygw.com
162.211.182.39 www.912kf.com
162.211.182.39 www.eduqc.com
162.211.182.39 www.ebssfp.com
162.211.182.39 www.dingfengtop.com
162.211.182.39 www.dc-superglue.com
162.211.182.39 www.daweilp.com
162.211.182.39 www.czacyq.com
162.211.182.39 www.cqxiexin.com
162.211.182.39 www.cltqgs.com
162.211.182.39 www.cnaxchem.com
162.211.182.39 www.chengdajc.com
162.211.182.39 www.cdztnt.com
162.211.182.39 www.chinawoollen.com
162.211.182.39 www.chinaenyu.com
162.211.182.39 www.ihc360.com
162.211.182.39 www.hrener.com
162.211.182.39 www.howelltoy.com
162.211.182.39 www.fzqmw.com
162.211.182.39 www.hongweimotor.com
162.211.182.39 www.gardenhn.com
162.211.182.39 www.fzghj.com
162.211.182.39 www.fhouse360.com
162.211.182.39 www.fdzyy.com
162.211.182.39 www.fujunsh.com
162.211.182.39 www.funkan.com
162.211.182.39 www.pxfangbao.com
162.211.182.39 www.pk138.com
162.211.182.39 www.oursuzuki.com
162.211.182.39 www.movfox.com
162.211.182.39 www.nbyongxiang.com
162.211.182.39 www.maoshanchem.com
162.211.182.39 www.longyundianli.com
162.211.182.39 www.linxiatravel.com
162.211.182.39 www.jhrace.com
162.211.182.39 www.jxytoys.com
162.211.182.39 www.kpaofeite.com
162.211.182.39 www.jiang456.com
162.211.182.39 www.szgargen.com
162.211.182.39 www.szelcc.com
162.211.182.39 www.sun-sand-sea.com
162.211.182.39 www.shzhuwang.com
162.211.182.39 www.ssbrakepad.com
162.211.182.39 www.shxianghao.com
162.211.182.39 www.shchenggang.com
162.211.182.39 www.quhi-tech.com
162.211.182.39 www.sh16pu.com
162.211.182.39 www.reach-way.com
162.211.182.39 www.sddzauto.com
162.211.182.39 www.yhszy.com
162.211.182.39 www.xinfengjixie.com
162.211.182.39 www.xiduanpress.com
162.211.182.39 www.xuyetrade.com
162.211.182.39 www.xaxhny.com
162.211.182.39 www.wzxiyin.com
162.211.182.39 www.wxlujia.com
162.211.182.39 www.usnaike.com
162.211.182.39 www.tyhzh.com
162.211.182.39 www.szhmxled.com
162.211.182.39 yaosf.net
162.211.182.39 www.zjyingguan.com
162.211.182.39 www.zzwzgn.com
162.211.182.39 www.zjtsmj.com
162.211.182.39 www.zjgujia.com
162.211.182.39 www.30fu.com
162.211.182.39 www.zgshunxing.com
162.211.182.39 www.zhcrane.com
162.211.182.39 www.zhao5f.com
162.211.182.39 www.ytjiangyou.com
162.211.182.39 www.yinghongjixie.com
162.211.182.39 www.zwyt.net
162.211.182.39 zzhdjx.cn
162.211.182.39 www.szmhk.com
162.211.182.39 www.ccggge.com
162.211.182.39 www.0007590.com
162.211.182.39 941qq.com
162.211.182.39 www4.29u.com
162.211.182.39 www.nlcoad.com
162.211.182.39 26ss.com
162.211.182.39 zhaohaosf.net
162.211.182.39 www.eanfang.com
162.211.182.39 www.ntwmyy.com
162.211.182.39 eanfang.com
162.211.182.39 www.88pknb.com
162.211.182.39 www.hh8gg.pw
162.211.182.39 www.hycygy.com
162.211.182.39 114code.com
162.211.182.39 www.legendpw.net
162.211.182.39 www.dgyuanyang.com
162.211.182.39 www.sf999.name
162.211.182.39 www.125kkk.com
162.211.182.39 go.sf999.com
162.211.182.39 wwww.017cq.com
162.211.182.39 cnc.sf999.com
162.211.182.39 www.xztd888.com
162.211.182.39 www.iyqxkcqw.com
162.211.182.39 www.fenfa1688.com
162.211.182.39 www.huahuiye.com
162.211.182.39 www.sdqinuo.com
162.211.182.39 www.njhxztz.com
162.211.182.39 www.qibone.com
162.211.182.39 www.aimkm.com
162.211.182.39 www.195eeweqsc.com
162.211.182.39 www.007sf.com
162.211.182.39 www.512qz.com
162.211.182.39 www.jxdpx.com
162.211.182.39 www.haosf.org
162.211.182.39 www.17123.com
162.211.182.39 999sf.com
162.211.182.39 www.7000hj.com
162.211.182.39 67pp.com
162.211.182.39 56chuanqi.com
162.211.182.39 www.k8765.com
162.211.182.39 www.haosf9999.com
162.211.182.39 www.fw000.com
162.211.182.39 www.gm333.com
162.211.182.39 www.anmeiexpo.com
162.211.182.39 www.999sf.com
162.211.182.39 www.95ok.com
162.211.182.39 sedio.cc
162.211.182.39 www.5d5y.com
162.211.182.39 www.gm777.com
162.211.182.39 zhaosf.88654.com
162.211.182.39 www.xifulei.com
162.211.182.39 www.sf903.com
162.211.182.39 www.syjm.net
162.211.182.39 www.sf7000.com
162.211.182.39 www.nbwanfeng.com
162.211.182.39 677g.com
162.211.182.39 sf63.com
162.211.182.39 www.91kang.com
162.211.182.39 cqniangzao.com
162.211.182.39 www.999ok.com
162.211.182.39 92gg.com
162.211.182.39 921ww.com
162.211.182.39 520sf.com
162.211.182.39 239ok.com
162.211.182.39 shdongqiao.com
162.211.182.39 sd-yuhui.com
162.211.182.39 meiri.vqkp35.com
162.211.182.39 moni.227y.com
162.211.182.39 gzonisi.cn
162.211.182.39 345cc.cn.com
162.211.182.39 chinayat.com
162.211.182.39 www.3f6f.com
162.211.182.39 www.258sf.com
162.211.182.39 www.13su.com
162.211.182.39 www.118967.com
162.211.182.39 www.sardar.cc
162.211.182.39 www.21sjzg.com
162.211.182.39 www.0769hongri.com
162.211.182.39 www.0574k.com
162.211.182.39 www.020rencai.net
162.211.182.39 uc99.com
162.211.182.39 www.001info.com
162.211.182.39 www.67pp.net
162.211.182.39 www.666666s.com
162.211.182.39 www.66kf.net
162.211.182.39 www.5zaoxie.com
162.211.182.39 www.55hj.com
162.211.182.39 www.520sf.com
162.211.182.39 www.51miehun.co
162.211.182.39 www.51huigo.com
162.211.182.39 www.45758.com
162.211.182.39 www.5199g.com
162.211.182.39 www.30wy.com
162.211.182.39 www.941qq.com
162.211.182.39 www.922gg.com
162.211.182.39 www.88f.com
162.211.182.39 www.88102888.com
162.211.182.39 www.921ww.com
162.211.182.39 www.89946.com
162.211.182.39 www.818wy.com
162.211.182.39 www.86rs.com
162.211.182.39 www.789sf.net
162.211.182.39 www.77yu.com
162.211.182.39 www.789is.com
162.211.182.39 www.6836999.com
162.211.182.39 www.boxianfengguan.com
162.211.182.39 www.allaboutprogram.com
162.211.182.39 www.avoio.com
162.211.182.39 www.autohid.com
162.211.182.39 www.aptx4869.net
162.211.182.39 www.art-verb.com
162.211.182.39 www.94haokan.com
162.211.182.39 www.dj149.com
162.211.182.39 www.dgdtw.com
162.211.182.39 www.digrj.com
162.211.182.39 www.dgzichi.com
162.211.182.39 www.cqsfcn.com
162.211.182.39 www.dfhero.com
162.211.182.39 www.dabanwu.com
162.211.182.39 www.chuanqisifu99.com
162.211.182.39 www.chinakelly.com
162.211.182.39 www.cfaninfo.com
162.211.182.39 www.cgxgf.com
162.211.182.39 www.byetee.com
162.211.182.39 www.idcdong.com
162.211.182.39 www.i-blinks.com
162.211.182.39 www.hnlangjie.com
162.211.182.39 www.hxfamily.com
162.211.182.39 www.hzruili.com
162.211.182.39 www.hnggfz.com
162.211.182.39 www.hzkjy.com
162.211.182.39 www.hlmodule.com
162.211.182.39 www.hbwyw.net
162.211.182.39 www.hbqdxjmf.com
162.211.182.39 www.gzxlzs.com
162.211.182.39 www.gzplay.com
162.211.182.39 www.gxxjl.com
162.211.182.39 www.guanhaiyujia.com
162.211.182.39 www.dqzypx.com
162.211.182.39 www.krksjx.com
162.211.182.39 www.lishi99.com
162.211.182.39 www.leiming-bulb.com
162.211.182.39 www.lanyue2003.com
162.211.182.39 www.laosf.com
162.211.182.39 www.jzfsk.com
162.211.182.39 www.knschina.com
162.211.182.39 www.jsxgm.com
162.211.182.39 www.jshhw.com
162.211.182.39 www.jka77.com
162.211.182.39 www.jn333.com
162.211.182.39 www.j8y.net
162.211.182.39 www.jieer.net
162.211.182.39 www.jietewq.com
162.211.182.39 www.i-dphoto.com
162.211.182.39 www.pgmary.com
162.211.182.39 www.pxfyzs.com
162.211.182.39 www.pai4f.com
162.211.182.39 www.njrybj.com
162.211.182.39 www.oshococo.com
162.211.182.39 www.nibou.net
162.211.182.39 www.newseaswan.com
162.211.182.39 www.myuheng.com
162.211.182.39 www.mzwq.info
162.211.182.39 www.lypfc.com
162.211.182.39 www.lzyinfeng.com
162.211.182.39 www.ly1000.com
162.211.182.39 www.lvislife.com
162.211.182.39 www.lx188.com
162.211.182.39 www.shundaglass.com
162.211.182.39 www.shyuanli.com
162.211.182.39 www.sh-liuxin.com
162.211.182.39 www.shi18.com
162.211.182.39 www.sf920.net
162.211.182.39 www.sea-reach.com
162.211.182.39 www.sertai.com
162.211.182.39 www.sf123-1.com
162.211.182.39 www.sf123.cc
162.211.182.39 www.saiyilong.com
162.211.182.39 www.scienthoer.com
162.211.182.39 www.ruichilida.com
162.211.182.39 www.qunhuan.net
162.211.182.39 www.qmxfw.com
162.211.182.39 www.qhsdkj.com
162.211.182.39 www.twdmly.com
162.211.182.39 www.szyangcai.com
162.211.182.39 www.tococi.com
162.211.182.39 www.tcbl88.com
162.211.182.39 www.sz-wells.com
162.211.182.39 www.szpangzhi.com
162.211.182.39 www.szjundaled.com
162.211.182.39 www.szcmon.com
162.211.182.39 www.szjlskj.com
162.211.182.39 www.szabj.com
162.211.182.39 www.syzwdj.com
162.211.182.39 www.syqtdz.com
162.211.182.39 www.sxhtdl.com
162.211.182.39 www.sougousf.com
162.211.182.39 www.zwnoon.com
162.211.182.39 www.zszhongzhi.com
162.211.182.39 www.z-sheng.com
162.211.182.39 www.zpmc-cz.com
162.211.182.39 www.zjtl.com
162.211.182.39 www.zjpages.com
162.211.182.39 www.zdhw-lighting.com
162.211.182.39 www.youxi119.com
162.211.182.39 www.ysmtc8.com
162.211.182.39 www.yongdingfm.com
162.211.182.39 www.yiqi163.com
162.211.182.39 www.yingxiangceliangyi.com
162.211.182.39 www.wjnmyy.com
162.211.182.39 www.wzcjyy.com
162.211.182.39 www.wudait.com
162.211.182.39 www.xhcsolar.com
162.211.182.39 www.kmnc.net
162.211.182.39 www2.8845sf.com
162.211.182.39 120sf.0755nk.net
162.211.182.39 www.muhon.com.cn
162.211.182.39 www1.8845sf.com
162.211.182.39 922gg.com
162.211.182.39 www.yts189.com
162.211.182.39 www.chakansdfj.com
162.211.182.39 www.steelrq.com
162.211.182.39 yindao.jfsm79.com
162.211.182.39 www.zx0411.com
162.211.182.39 www.kt516.com
162.211.182.39 66sf.69ao.com
162.211.182.39 www.lt925.com
162.211.182.39 www.45wj.com
162.211.182.39 www.tt371.com
162.211.182.39 www.goule88.com
162.211.182.39 www.ranwen.cm
162.211.182.39 www.verosale.com
162.211.182.39 grambox.com
162.211.182.39 down.16kbook.com
162.211.182.39 www.grambox.com
162.211.182.39 cq.51zzsf.com
162.211.182.39 www.ka688.com
162.211.182.39 www.hj010.com
162.211.182.39 www.64sf.com
162.211.182.39 www.921pk.com
162.211.182.39 kt516.com
162.211.182.39 www.gc771.com
162.211.182.39 www.su315.com
162.211.182.39 www.jindepower.com
162.211.182.39 88uc.sf19.cn
162.211.182.39 www.hrm123.net
162.211.182.39 www.bjyjy.com
162.211.182.39 www.uc99.com
162.211.182.39 wvw.9kf.com
162.211.182.39 97sf.com
162.211.182.39 www.70uc.com
162.211.182.39 www.zhaoqiqi.com
162.211.182.39 www.hnrbysc.com
162.211.182.39 www.69ao.com
162.211.182.39 32feef.11cq.cn
162.211.182.39 176.01kp.com
162.211.182.39 www.kuj8.com
162.211.182.39 81f.27-88.com
162.211.182.39 www.917se.com
162.211.182.39 www.fabumir.com
162.211.182.39 www.uc007.com
162.211.182.39 www.sf999.com.de
162.211.182.39 www.zhaosf.co
162.211.182.39 haosf12345.gm127.com
162.211.182.39 zhaosf.co
162.211.182.39 66sf.com
162.211.182.39 www.chuanqisf.com
162.211.182.39 zhuzaigua.com
162.211.182.39 www.1pk.com
162.211.182.39 28uc.com
162.211.182.39 chenmo.cc
162.211.182.39 www.sf22.com
162.211.182.39 www.sf405.com
162.211.182.39 www.cz45.com
162.211.182.39 115cq.com
162.211.182.39 www.803cq.com
162.211.182.39 www.25930.com
162.211.182.39 123f.com
162.211.182.39 hongxuda.com
162.211.182.39 haocqsf.com
162.211.182.39 www.100rcw.com
162.211.182.39 www.10000ok.com
162.211.182.39 www.05uc.com
162.211.182.39 www.23qianbao.com
162.211.182.39 www.222sf.com
162.211.182.39 www.72cq.com
162.211.182.39 www.ahmcks.com
162.211.182.39 www.90zzs.com
162.211.182.39 www.csqnw.com
162.211.182.39 www.dlz888.com
162.211.182.39 www.jx789.com
162.211.182.39 www.jsywg.com
162.211.182.39 www.tccyg.com
162.211.182.39 www.wcfm103.com
162.211.182.39 www.wjdhfz.com
162.211.182.39 www.zzz7.net
162.211.182.39 www.m3088tv.com
162.211.182.39 www.cxhdl.com
162.211.182.39 www.szbiaoyu.com
162.211.182.39 www.gzpioneer.com
162.211.182.39 www.mi-sc.com
162.211.182.39 www.hosisoft.com
162.211.182.39 www.huakangpc.com
162.211.182.39 www.zjkylsk.com
162.211.182.39 www.casscno.com
162.211.182.39 www.0808sf.com
162.211.182.39 www.jinhuachang.com
162.211.182.39 www.dongya888.com
162.211.182.39 www.fhxzd.com
162.211.182.39 www.sgwjg.com
162.211.182.39 www.pntfrc.com
162.211.182.39 www.sf9.cn
162.211.182.39 www.lxsqrfms.com
162.211.182.39 www.ygpkndz.com
162.211.182.39 www.jrxktdy.com
162.211.182.39 www.1007movie.net
162.211.182.39 30.9youwang.com
162.211.182.39 51huigo.com
162.211.182.39 51sf.com
162.211.182.39 520cq.com
162.211.182.39 520cq.net
162.211.182.39 765wg.com
162.211.182.39 789is.com
162.211.182.39 www.23vo.com
162.211.182.39 8aa.com
162.211.182.39 91545.com
162.211.182.39 941lt.com
162.211.182.39 99245.com
162.211.182.39 95sf.com
162.211.182.39 99ting.cn
162.211.182.39 99ting.com
162.211.182.39 aaa.xz667.com
162.211.182.39 ac198.com
162.211.182.39 aa.606wz.com
162.211.182.39 bbs.1x.la
162.211.182.39 dbconsys.com
162.211.182.39 gaosf.com
162.211.182.39 gg.herom2.net
162.211.182.39 hao-sf-123.com
162.211.182.39 haosf.org
162.211.182.39 hao119.com
162.211.182.39 laosf.com
162.211.182.39 search.sf999.com
162.211.182.39 sf3000.com
162.211.182.39 sf86.com
162.211.182.39 sf99.com
162.211.182.39 sf999.net
162.211.182.39 sfsf.d518.com
162.211.182.39 shenqi.com
162.211.182.39 www.fzrhcopper.com
162.211.182.39 ww.s1904.com
162.211.182.39 www.008fy.com
162.211.182.39 www.022hs.com
162.211.182.39 www.123qf.com
162.211.182.39 www.13xp.com
162.211.182.39 www.163fb.com
162.211.182.39 www.450sf.com
162.211.182.39 23vo.com
162.211.182.39 www.184pk.com
162.211.182.39 www.1x.la
162.211.182.39 www.23bb.net
162.211.182.39 www.28uc.com
162.211.182.39 www.33sf.com
162.211.182.39 450sf.com
162.211.182.39 www.55ip.com
162.211.182.39 www.58751.com
162.211.182.39 www.6090sf.com
162.211.182.39 www.67pp.com
162.211.182.39 www.77145.com
162.211.182.39 www.707wz.com
162.211.182.39 www.7pv.net
162.211.182.39 www.78x8.com
162.211.182.39 www.810f.com
162.211.182.39 www.8u8uu.com
162.211.182.39 www.915m.com
162.211.182.39 www.941cq.com
162.211.182.39 www.96cs.com
162.211.182.39 www.92gg.com
162.211.182.39 www.99245.com
162.211.182.39 www.sfniu.com
162.211.182.39 www.sihai-musical.com
162.211.182.39 www.cq588.com
162.211.182.39 91084.com
162.211.182.39 www.dobgame.com
162.211.182.39 www.fireol.com
162.211.182.39 www.fei24.com
162.211.182.39 www.game-114.com
162.211.182.39 www.gaosf.com
162.211.182.39 www.gmhaosf.com
162.211.182.39 www.hao3a.com
162.211.182.39 www.haosf.bz
162.211.182.39 www.htdqsec.com
162.211.182.39 www.hzhswj.com
162.211.182.39 www.pk920.com
162.211.182.39 www.liwoma.com
162.211.182.39 7000uc.com
162.211.182.39 www.nwpbl.com
162.211.182.39 www.ok3000.com
162.211.182.39 www.23c.com
162.211.182.39 www.pk555.com
162.211.182.39 www.pk920.com
162.211.182.39 www.rbtvs.com
162.211.182.39 www.91084.com
162.211.182.39 www.sdzblj.com
162.211.182.39 www.sf121.com
162.211.182.39 www.sebxa.com
162.211.182.39 www.sf3000.com
162.211.182.39 www.sf86.com
162.211.182.39 www.sf999.net
162.211.182.39 www.shuo321.com
162.211.182.39 www.shuiguanyin.com
162.211.182.39 www.sxzkzx.com
162.211.182.39 www.uc88.com
162.211.182.39 www.weihuangsz.com
162.211.182.39 www.weizhixs.com
162.211.182.39 www.wodewww.com
162.211.182.39 www.wsf520.com
162.211.182.39 23c.com
162.211.182.39 www.xcwsg.com
162.211.182.39 www.xjlgc.com
162.211.182.39 www.zhuzaicq.com
162.211.182.39 www1.uc88.com
162.211.182.39 www2.520cq.com
162.211.182.39 www5.29u.com
162.211.182.39 www4.520cq.com
162.211.182.39 www5.520cq.com
162.211.182.39 3000ko.com
162.211.182.39 www.sdjnxy.com
162.211.182.39 sf999.com
162.211.182.39 www.51okf.com
162.211.182.39 www.iiwoool.com
162.211.182.39 www.rxshige.com
162.211.182.39 www.dghke.com
162.211.182.39 www.7kkb.net
162.211.182.39 www.789518.com
162.211.182.39 www.cqfff.com
162.211.182.39 www4.beer51.com
162.211.182.39 www.cseht.com
162.211.182.39 www.82926.com
162.211.182.39 8uc.558uc.com
162.211.182.39 www.99cangzhou.com
162.211.182.39 www.pjzbw.com
162.211.182.39 www.52375.com
162.211.182.39 www.xdhmotor.com
162.211.182.39 www.shmeigu168.com
162.211.182.39 www.comvod.com
162.211.182.39 www.gz-sc.com
162.211.182.39 www.stylepacking.com
162.211.182.39 www.hnfdczj.com
162.211.182.39 www.wfxycc.com
162.211.182.39 www.26ss.com
162.211.182.39 www.hezhihui.com
162.211.182.39 www.wuxihuaxia.com
162.211.182.39 www.nblongyi.com
162.211.182.39 www.7zcq.com
162.211.182.39 7ugg.com
162.211.182.39 www.dliuren.com
162.211.182.39 www.wmult.com
162.211.182.39 www.3159wine.com
162.211.182.39 www.sf5137.com
162.211.182.39 www.cxxcqp.com
162.211.182.39 www.qz92.com
162.211.182.39 www.stronger-filter.com
162.211.182.39 www1.65cf.com
162.211.182.39 i8pk.com
162.211.182.39 www.trnly.com
162.211.182.39 www.zhaokj.com
162.211.182.39 www.yaojuezhan.com
162.211.182.39 www.tt2sf.com
162.211.182.39 www.qupaike.com
162.211.182.39 www.luowenqi.com
162.211.182.39 qqfcwgw.com
162.211.182.39 www.taosf.com.ru
162.211.182.39 www.zj-xd.com
162.211.182.39 www.mgszyc.com
162.211.182.39 9pk.dgjt.net
162.211.182.39 www.2umm.com
162.211.182.39 www.yxyhx.com
162.211.182.39 zhaokf.com
162.211.182.39 www.sf010.com
162.211.182.39 www.sfdawang.com
162.211.182.39 www.17fg.com
162.211.182.39 abc.top258.cn
162.211.182.39 www.gm7.cc
162.211.182.39 9kf.rzsport.com
162.211.182.39 ss.sg368.com
162.211.182.39 www.yy-bags.com
162.211.182.39 video.shunlo.com
162.211.182.39 www.45yes.com
162.211.182.39 www.cnyongli.com
162.211.182.39 www.sf03.com
162.211.182.39 www.88kf.net
162.211.182.39 www.88kf.com
162.211.182.39 www.sf168.com
162.211.182.39 555sf.com
162.211.182.39 www.ourbep.com
162.211.182.39 www.manmank.com
162.211.182.39 sebxa.com
162.211.182.39 hchxh.com
162.211.182.39 z34.sf19.cn
162.211.182.39 www.mobilefad.com
162.211.182.39 www.sf22-2.com
162.211.182.39 www.tlsfwz.com
162.211.182.39 www.westmm.com
162.211.182.39 7080st.com
162.211.182.39 www.sf322.com
162.211.182.39 www.zyjms.com
162.211.182.39 yy.7080st.com
162.211.182.39 jcniao.com
162.211.182.39 letanju.com
162.211.182.39 soso.8kst.com
162.211.182.39 www.taleclub.com
162.211.182.39 008cqsf.com
162.211.182.39 112sf.com
162.211.182.39 114.75sf.cn
162.211.182.39 123sf.com
162.211.182.39 138bt.com
162.211.182.39 138sf.com
162.211.182.39 139.limulu.com
162.211.182.39 163.fuatw.com
162.211.182.39 168.w198.net
162.211.182.39 168.zh-db.com
162.211.182.39 178bifen.com
162.211.182.39 17fg.com
162.211.182.39 23c.com
162.211.182.39 23ok.com
162.211.182.39 28yes.com
162.211.182.39 29u.com
162.211.182.39 500sf.com
162.211.182.39 513ux.com
162.211.182.39 515.zh-db.com
162.211.182.39 51xunt.com
162.211.182.39 520.szgumi.com
162.211.182.39 52345.com
162.211.182.39 523sf.com
162.211.182.39 523u.com
162.211.182.39 55z5.com
162.211.182.39 666sf.com
162.211.182.39 66cq.com
162.211.182.39 73sf.com
162.211.182.39 777gm.com
162.211.182.39 7uc.com
162.211.182.39 81f.com
162.211.182.39 81fu.com
162.211.182.39 8845.com
162.211.182.39 88858.com
162.211.182.39 www.qizhu.cc
162.211.182.39 www.as9z.com
162.211.182.39 8uu.com
162.211.182.39 91ww.com
162.211.182.39 92045.com
162.211.182.39 920sf.com
162.211.182.39 926.com
162.211.182.39 92fu.com
162.211.182.39 999hj.com
162.211.182.39 99j.com
162.211.182.39 9kf.com
162.211.182.39 9pk.k197.com
162.211.182.39 9pk.u7u73.com
162.211.182.39 ad.97uu.com
162.211.182.39 haocq.com
162.211.182.39 pk123.com
162.211.182.39 plinm.com
162.211.182.39 qiqi530.com
162.211.182.39 qq.007uc.com
162.211.182.39 sf138.com
162.211.182.39 sf168.com
162.211.182.39 sf176.com
162.211.182.39 sf215.com
162.211.182.39 sf222.com
162.211.182.39 sf30.com
162.211.182.39 sf777.com
162.211.182.39 www.xhnano.com
162.211.182.39 sogou.1000ok.com
162.211.182.39 ww.1388fu.com
162.211.182.39 www.005sf.com
162.211.182.39 www.008n.com
162.211.182.39 www.015999.com
162.211.182.39 www.023cz.com
162.211.182.39 www.023toilet.com
162.211.182.39 www.027fruit.com
162.211.182.39 www.0313hybj.com
162.211.182.39 www.0532oa.com
162.211.182.39 www.055735.com
162.211.182.39 www.07186.com
162.211.182.39 www.1000gsf.com
162.211.182.39 www.112sf.com
162.211.182.39 www.114haosf.com
162.211.182.39 www.115cq.com
162.211.182.39 www.11811445.com
162.211.182.39 www.11cq.cn
162.211.182.39 www.120sf.com
162.211.182.39 www.123cq.com
162.211.182.39 www.123f.com
162.211.182.39 www.123hj.com
162.211.182.39 www.123sf.com
162.211.182.39 www.123uu.com
162.211.182.39 www.130136.com
162.211.182.39 www.134sf.com
162.211.182.39 www.138bt.com
162.211.182.39 www.145sf.com
162.211.182.39 www.15ss.com
162.211.182.39 www.16753.com
162.211.182.39 www.17fabu8.com
162.211.182.39 www.215pk.com
162.211.182.39 www.22j.com
162.211.182.39 www.234sfww.com
162.211.182.39 www.23c.com
162.211.182.39 www.23fu.com
162.211.182.39 www.23ok.com
162.211.182.39 www.23sfu.cn
162.211.182.39 www.27sf.com
162.211.182.39 www.28yes.com
162.211.182.39 www.29u.com
162.211.182.39 www.3000ok.cc
162.211.182.39 www.3000pk.com
162.211.182.39 www.31cqsf.com
162.211.182.39 www.31i.cn
162.211.182.39 300sf.com
162.211.182.39 www.3300sf.com
162.211.182.39 www.33345.com
162.211.182.39 www.333ok.com
162.211.182.39 www.33pk.com
162.211.182.39 www.33wt.com
162.211.182.39 www.361cq.com
162.211.182.39 www.365taoba.com
162.211.182.39 www.371cyw.com
162.211.182.39 www.37ok.com
162.211.182.39 www.3dmeibang.com
162.211.182.39 www.3qsf.com
162.211.182.39 www.418sf.in
162.211.182.39 www.425sf.com
162.211.182.39 www.44dy.com
162.211.182.39 www.45195.com
162.211.182.39 www.34ok.com
162.211.182.39 www.8cq.cc
162.211.182.39 www.45bang.com
162.211.182.39 34ok.com
162.211.182.39 www.45hs.com
162.211.182.39 www.4nic-dy.com
162.211.182.39 www.500sf.com
162.211.182.39 www.51sf.com
162.211.182.39 www.52058.com
162.211.182.39 www.520cq.com
162.211.182.39 www.520jy.com
162.211.182.39 zhaosf.hsdbm.com
162.211.182.39 www.523sf.com
162.211.182.39 www.523u.com
162.211.182.39 www.531U.com
162.211.182.39 www.533ok.com
162.211.182.39 www.53sf.com
162.211.182.39 www.53uc.com
162.211.182.39 www.53w.com.cn
162.211.182.39 www.54ss.net
162.211.182.39 www.pk920.com
162.211.182.39 www.55z5.com
162.211.182.39 www.565sf.com
162.211.182.39 www.56ss.com
162.211.182.39 cdchuanghui.com
162.211.182.39 www.57591.com
162.211.182.39 www.57f.com
162.211.182.39 www.57fg.com
162.211.182.39 www.57ww.com
162.211.182.39 www.5800sf.com
162.211.182.39 www.58sf.com
162.211.182.39 www.58uc.com
162.211.182.39 www.5index.net
162.211.182.39 www.5qu.com
162.211.182.39 www.64pk.com
162.211.182.39 www.6645.com
162.211.182.39 www.666sf.com
162.211.182.39 www.676711.com
162.211.182.39 www.677g.com
162.211.182.39 www.67m2.com
162.211.182.39 www.686f.com
162.211.182.39 www.697sf.com
162.211.182.39 www.6cq.cc
162.211.182.39 www.73sf.com
162.211.182.39 www.75sf.cn
162.211.182.39 www.777gm.com
162.211.182.39 www.77d8.com
162.211.182.39 www.77kl.com
162.211.182.39 www.79j.com
162.211.182.39 www.7j773.com
162.211.182.39 www.7uc.com
162.211.182.39 www.80845.com
162.211.182.39 www.812315.com
162.211.182.39 www.81267.com
162.211.182.39 www.81fu.com
162.211.182.39 www.823f.com
162.211.182.39 www.82506.com
162.211.182.39 www.860572.com
162.211.182.39 www.860580.com
162.211.182.39 www.87sf.com
162.211.182.39 www.8845.com
162.211.182.39 www.88845.com
162.211.182.39 www.88858.com
162.211.182.39 www.89176.com
162.211.182.39 www.8aa.com
162.211.182.39 www.8uc.com
162.211.182.39 www.900hj.com
162.211.182.39 www.909f.com
162.211.182.39 www.9100sf.com
162.211.182.39 www.915301.com
162.211.182.39 www.91545.com
162.211.182.39 www.91ff.com
162.211.182.39 www.91wuc.com
162.211.182.39 www.920666.com
162.211.182.39 www.920gg.com
162.211.182.39 www.920sf.com
162.211.182.39 www.923u.com
162.211.182.39 www.92fu.com
162.211.182.39 www.92ww.com
162.211.182.39 www.93sf.com
162.211.182.39 www.94432.com
162.211.182.39 www.95sf.com
162.211.182.39 www.96645.com
162.211.182.39 www.9800sf.com
162.211.182.39 www.980cq.com
162.211.182.39 www.99964.com
162.211.182.39 www.999hj.com
162.211.182.39 www.999wg.net
162.211.182.39 www.99a.com
162.211.182.39 www.99ji.com
162.211.182.39 www.99pk.com
162.211.182.39 www.apbfhl.com
162.211.182.39 www.aifugu.com
162.211.182.39 www.33pk.com
162.211.182.39 33pk.com
162.211.182.39 www.bjhdshengda.com
162.211.182.39 www.bjtdyz.com
162.211.182.39 www.bsfzjx.com
162.211.182.39 www.bsrcsc.com
162.211.182.39 www.cnycta.com
162.211.182.39 www.cq45.com
162.211.182.39 www.cq91530.com
162.211.182.39 www.cqy6.com
162.211.182.39 www.csrxj.com
162.211.182.39 www.cy4f.com
162.211.182.39 www.fy371.com
162.211.182.39 www.gm888.com
162.211.182.39 www.gxxgy.com
162.211.182.39 www.gzxing.com
162.211.182.39 www.heli-cn.com
162.211.182.39 www.hnyuhai.com
162.211.182.39 www.hstztc.com
162.211.182.39 www.hwhaosf.com
162.211.182.39 www.7000uc.com
162.211.182.39 www.ksd777.com
162.211.182.39 www.laisf.com
162.211.182.39 www.laohaosf.com
162.211.182.39 www.lovewg.com
162.211.182.39 www.luckysz.com
162.211.182.39 www.mai101.com
162.211.182.39 www.mikating.com
162.211.182.39 www.mtv110.com
162.211.182.39 www.nj-row.com
162.211.182.39 www.nybxm.com
162.211.182.39 www.ocerlight.com
162.211.182.39 www.oksf.net
162.211.182.39 www.pk123.com
162.211.182.39 www.plinm.com
162.211.182.39 www.qiqi530.com
162.211.182.39 www.qzrt.com
162.211.182.39 www.recairen.com
162.211.182.39 www.rexuesf.in
162.211.182.39 www.sf0058.com
162.211.182.39 www.sf1003.com
162.211.182.39 www.sf17.com
162.211.182.39 www.sf176.com
162.211.182.39 www.sf215.com
162.211.182.39 www.sf222.com
162.211.182.39 www.sf231.com
162.211.182.39 www.sf29.com
162.211.182.39 www.sf30.com
162.211.182.39 www.sf520.com.cn
162.211.182.39 www.sf555.com
162.211.182.39 www.sf5858.com
162.211.182.39 www.sf63.com
162.211.182.39 www.sf777.com
162.211.182.39 www.sf8500.com
162.211.182.39 www.sf92045.com
162.211.182.39 www.sf930.com
162.211.182.39 www.sf99.com
162.211.182.39 www.shaibar.com
162.211.182.39 www.shamandi.com
162.211.182.39 www.ksjxyy.com
162.211.182.39 www.sktpcbic.com
162.211.182.39 www.stkj66.com
162.211.182.39 www.tj-aote.com
162.211.182.39 www.haosf999.com
162.211.182.39 www.wan45.com
162.211.182.39 www.whjdwxw.com
162.211.182.39 www.whlinuo.com
162.211.182.39 www.worldkcc.com
162.211.182.39 www.wtcqsf.com
162.211.182.39 www.xiaomeisf.com
162.211.182.39 www.xihaihotel.com
162.211.182.39 www.xindudu.com
162.211.182.39 www.xinganchem.com
162.211.182.39 www.ovytgnby.com
162.211.182.39 www.xinsf.com
162.211.182.39 www.yeschongcao.com
162.211.182.39 www.ynyeer.com
162.211.182.39 www.ysguandao.com
162.211.182.39 www.yxzhidao.com
162.211.182.39 www.zhaochenmo.com
162.211.182.39 www.zhaofg.com
162.211.182.39 www.zhaohaosf.net
162.211.182.39 www.zhaokf.com
162.211.182.39 www.zhaosf88.com
162.211.182.39 www.zhaoss.com
162.211.182.39 www1.pk123.com
162.211.182.39 www10.138sf.com
162.211.182.39 xiaomeisf.com
162.211.182.39 xinsf.com
162.211.182.39 www.500ok.com
162.211.182.39 www.wancm.com
162.211.182.39 jjj.la
162.211.182.39 zhaochenmo.com
162.211.182.39 zuhukang.com
162.211.182.39 www.shangkequ.com
162.211.182.39 www.9527cqsf.com
162.211.182.39 www.tjtuliao.com
162.211.182.39 www.szplas.com
162.211.182.39 www.hlxyx.com
162.211.182.39 www.012sf.com
162.211.182.39 www.zhaosf.cc
162.211.182.39 www.07sf.com
162.211.182.39 www.duoduosf.com
162.211.182.39 www.sf66666.com
162.211.182.39 www.my7su.com
162.211.182.39 www.725sf.com
162.211.182.39 725sf.com
162.211.182.39 www.96sf.com
162.211.182.39 www.pk196.com
162.211.182.39 www.letanju.com
162.211.182.39 50ss.com
162.211.182.39 www.50ss.com
162.211.182.39 sfdawang.com
162.211.182.39 taocq.com
162.211.182.39 www.73uu.com
162.211.182.39 www.taocq.com
162.211.182.39 www.30uc.com
162.211.182.39 www.nz999.net
162.211.182.39 www.ww45.com
162.211.182.39 www.xt-dz.com
162.211.182.39 www.pk99.com
162.211.182.39 www.1e2w.cn
162.211.182.39 8845.678uc.com
162.211.182.39 cq.3q33.com
162.211.182.39 www.baojingqi.net
162.211.182.39 www.didihc.com
162.211.182.39 www.bangnijie.com
162.211.182.39 www.chenmo.cc
162.211.182.39 www.sina35.com
162.211.182.39 www.175sf.com
162.211.182.39 sf123.cc
162.211.182.39 www.shfiro.com
162.211.182.39 bjyocy.com
162.211.182.39 www.pochanlawyer.com
162.211.182.39 www.138sf.cc
162.211.182.39 www.24cq.com
162.211.182.39 99pk.com
162.211.182.39 www.22cq.com
162.211.182.39 www.888ww.com
162.211.182.39 www.2sifu.com
162.211.182.39 wvw.uc99.com
162.211.182.39 123.uc99.com
162.211.182.39 999ok.com
162.211.182.39 www.sf99.cc
162.211.182.39 www.80sf.com
162.211.182.39 www.33221.com
162.211.182.39 www.pk9090.com
162.211.182.39 pk9090.com
162.211.182.39 www2.uc88.com
162.211.182.39 www3.uc88.com
162.211.182.39 www4.uc88.com
162.211.182.39 88845.com
162.211.182.39 www.sf9.com
162.211.182.39 www.700sf.com
162.211.182.39 920gg.com
162.211.182.39 www.23c.com
162.211.182.39 www.021sx.com
162.211.182.39 www.sf78.com
162.211.182.39 www.qjfang.cn
162.211.182.39 23c.com
162.211.182.39 www.yaofg.com
162.211.182.39 www.07ket.com
162.211.182.39 www.17hhg.com
162.211.182.39 www.46cq.com
162.211.182.39 www.wan345.com
162.211.182.39 www.htlq.com
162.211.182.39 www.nbkst.com
162.211.182.39 www.meishipai.com
162.211.182.39 www.987pk.com
162.211.182.39 www.weisf.com
162.211.182.39 www.baqisf.com
162.211.182.39 www.91530.com
162.211.182.39 www.zhaohaosf.com
162.211.182.39 www.s400.com
162.211.182.39 www.aichenmo.com
162.211.182.39 www.sf315.com
162.211.182.39 425sf.com
162.211.182.39 www.23gg.com
162.211.182.39 yaofg.com
162.211.182.39 www.44woool.com
162.211.182.39 www.17166.com
162.211.182.39 www.wt789.com
162.211.182.39 www.591maimai.com
162.211.182.39 www.gggsf.com
162.211.182.39 www.cecri.com
162.211.182.39 www.cnpxba.com
162.211.182.39 www.cqrcxx.com
162.211.182.39 www.zhaowt.net
162.211.182.39 3000ak.com
162.211.182.39 www.3000ak.com
162.211.182.39 027gg.net
162.211.182.39 www.85sf.com
162.211.182.39 www.cnxinghang.com
162.211.182.39 www.sf19.com
162.211.182.39 www.uc600.com
162.211.182.39 www.255uc.com
162.211.182.39 255uc.com
162.211.182.39 111.kaihu365.com
162.211.182.39 www.3000ok-1.com
162.211.182.39 www.3000ok.com
162.211.182.39 www.sf588.com
162.211.182.39 www.jjj3000ok.com
162.211.182.39 1000ok.com
162.211.182.39 www.33ok.com
162.211.182.39 www.666923.com
162.211.182.39 www.920313.com
162.211.182.39 www.616st.com
162.211.182.39 www.53my.com
162.211.182.39 www.945176.net
162.211.182.39 www.999sf.cc
162.211.182.39 933gg.com
162.211.182.39 haosf.com
162.211.182.39 www.haosf.com.cn
162.211.182.39 tg.cnm78.com
162.211.182.39 www.1213sf.com
162.211.182.39 www.678sf.com
162.211.182.39 www.250sf.com
162.211.182.39 www.92188.com
162.211.182.39 888.hyds888.com
162.211.182.39 www.646sf.com
162.211.182.39 www.82cq.com
162.211.182.39 sf99.cc
162.211.182.39 www.50ww.com
162.211.182.39 sf590.com
162.211.182.39 www.sf590.com
162.211.182.39 www.35fg.com
162.211.182.39 www.sf526.com
162.211.182.39 www.18ux.com
162.211.182.39 www.520cq.net
162.211.182.39 www.haosf12345.com
162.211.182.39 sf22.com
162.211.182.39 pk99.com
162.211.182.39 79j.com
162.211.182.39 55sf.com
162.211.182.39 www.55sf.com
162.211.182.39 www.zm63.com
162.211.182.39 926.syslx.com
162.211.182.39 1000ok.cc
162.211.182.39 www.1000ok.cc
162.211.182.39 3000ok.isosf.com
162.211.182.39 3000ok.com
162.211.182.39 tt.syslx.com
162.211.182.39 www.zhaofq.com
162.211.182.39 2013.cqmdl.com
162.211.182.39 www.19fu.com
162.211.182.39 19fu.com
162.211.182.39 www.zhaosifu.com
162.211.182.39 www.kom999.com
162.211.182.39 www.ok777.com
162.211.182.39 www.757sf.com
162.211.182.39 www.50999.com
162.211.182.39 33345.com
162.211.182.39 999zg.com
162.211.182.39 www.13ss.com
162.211.182.39 www.520zf.com
162.211.182.39 88pk.com
162.211.182.39 www.990yx.com
162.211.182.39 www.cqacura.com
162.211.182.39 www.tldsny.com
162.211.182.39 www.wzggwz.com
162.211.182.39 www.tjnhey.com
162.211.182.39 www.51friends.com
162.211.182.39 aa.707wz.com
162.211.182.39 www.cn-skf.com
162.211.182.39 www.6sf.com
162.211.182.39 www.jianfeixy.com
162.211.182.39 www.shkingdu.com
162.211.182.39 www.707wz.com
162.211.182.39 www.suoyinm.com
162.211.182.39 www.zcmeter.com
162.211.182.39 www.115book.com
162.211.182.39 9kst.com
162.211.182.39 9u.7080st.com
162.211.182.39 www.118uc.om
162.211.182.39 www.haofwd.com
162.211.182.39 www.zhaowoool.com
162.211.182.39 www.gdhttz.com
162.211.182.39 www.fzdbdz.com
162.211.182.39 www.tianguhotel.com
162.211.182.39 www.chinahjly.com
162.211.182.39 tgaxved8.com
162.211.182.39 5a189.com
162.211.182.39 www.wuwoool.com
162.211.182.39 www.shitongdg.com
162.211.182.39 www.sbqcssf.com
162.211.182.39 www.51cssf.net.cn
162.211.182.39 www.65535cs.com
162.211.182.39 zhao.559woool.com
162.211.182.39 www.559woool.com
162.211.182.39 www.5sdl.com
162.211.182.39 www.dandong-window.com
162.211.182.39 www.xinyumen.com
162.211.182.39 www.ahzhishang.com
162.211.182.39 www.xd163.com
162.211.182.39 www.trm-china.com
162.211.182.39 www.aoyue168.com
162.211.182.39 www.gdcable.com
162.211.182.39 www.zhuwulong.com
162.211.182.39 www.szjapson.com
162.211.182.39 www.swan-storage.com
162.211.182.39 www.cseptc.com
162.211.182.39 www.zcgddz.com
162.211.182.39 www.dycssf.com
162.211.182.39 www.9965478.com
162.211.182.39 www.jshgzb.com
162.211.182.39 www.qd-qinggang.com
162.211.182.39 gzgm.27pyki.com
162.211.182.39 www.hcs888.com
162.211.182.39 www.woool578.com
162.211.182.39 www.jntex.com
162.211.182.39 917wool.cn
162.211.182.39 chuanqifj.com
162.211.182.39 www.lqgz.com
162.211.182.39 www.suwoool.com
162.211.182.39 www.45ci.com
162.211.182.39 www.sdyjt.com
162.211.182.39 www1.bai12.com
162.211.182.39 www.889cs.com
162.211.182.39 www.cjphb.com
162.211.182.39 www.szosun.com
162.211.182.39 www.garment5.com
162.211.182.39 www.gm66.com
162.211.182.39 www.com15.com
162.211.182.39 www.emc120.com
162.211.182.39 ktjia.com
162.211.182.39 www.05woool.com
162.211.182.39 www.cnsjjs.com
162.211.182.39 www.jnxsfr.com
162.211.182.39 www.99cishan.com
162.211.182.39 44woool.com
162.211.182.39 www.mm886.net
162.211.182.39 www.shyssteel.com
162.211.182.39 www.ywool.com
162.211.182.39 www.hao123woool.com
162.211.182.39 aixin168.com
162.211.182.39 www.wooolfbw.com
162.211.182.39 www.525pc.com
162.211.182.39 www.zhaowooolsf.com
162.211.182.39 www.cn-tyn.com
162.211.182.39 www.917wool.cn
162.211.182.39 www.hy225.com
162.211.182.39 www.10gamer.com
162.211.182.39 www.zv2o.com
162.211.182.39 www.411wed.com
162.211.182.39 www.lewoool.com
162.211.182.39 gtcc2008.com
162.211.182.39 945pk.com
162.211.182.39 pk777.com
162.211.182.39 www.168gamer.com
162.211.182.39 new.guguyu.com
162.211.182.39 web.longhoo.net
162.211.182.39 www.8090yxs.com
162.211.182.39 aszt.6268.com
162.211.182.39 kf.07073.com
162.211.182.39 www.mcncc.com
162.211.182.39 www.wudijz.com
162.211.182.39 lhzs.9377.com
162.211.182.39 lhzs.37wan.com
162.211.182.39 lhzs.yaowan.com
162.211.182.39 lhzs.49you.com
162.211.182.39 lhzs.8090yxs.com
162.211.182.39 wz.49you.com
162.211.182.39 wz.6711.com
162.211.182.39 asqx.yaowan.com
162.211.182.39 www.sifucun.com
162.211.182.39 bbs.to4f.com
162.211.182.39 www.pg666.cn
162.211.182.39 www.yeyoubbs.com
162.211.182.39 www.ucwawa.com
162.211.182.39 www.hgyouxi.net
162.211.182.39 www.xiaolou8.com
162.211.182.39 bbs.houdao.com
162.211.182.39 www.iopq.com
162.211.182.39 wangyesifu.com
162.211.182.39 ok1399.com
162.211.182.39 www.wy090.com
162.211.182.39 www.yx315.net
162.211.182.39 www.yrabc.com
162.211.182.39 67uc.com
162.211.182.39 www.yxsjqk.com
162.211.182.39 www.wangyesifu.com
162.211.182.39 bbs.games.qq.com
162.211.182.39 www.uc266.com
162.211.182.39 www.luanshi.net
162.211.182.39 www.180b.com
162.211.182.39 www.gamemx.com
162.211.182.39 www.9kld.com
162.211.182.39 bbs2.99nets.me
162.211.182.39 www.to4f.com
162.211.182.39 ejxx.jdjy.cn
162.211.182.39 www.920520.com
162.211.182.39 www.gifts52.com
162.211.182.39 www.jjj.com.co
162.211.182.39 www.cq200.com
162.211.182.39 www.239ok.com
162.211.182.39 www.97heji.com
162.211.182.39 www.173bt.com
162.211.182.39 www.1745.com
162.211.182.39 www.96sf.com
162.211.182.39 www.sffb.net
162.211.182.39 www.5uwl.net
162.211.182.39 www.qtgcjx.com
162.211.182.39 www.bdqn.net
162.211.182.39 www.52anzu.net
162.211.182.39 www1.52anzu.net
162.211.182.39 www.52anzu.com
162.211.182.39 www1.52anzu.com
162.211.182.39 www2.52anzu.com
162.211.182.39 www.sopojie.com
162.211.182.39 www1.sopojie.com
162.211.182.39 uc.sydahe.com
162.211.182.39 www.1cq.com
162.211.182.39 1cq.com
162.211.182.39 www.tt0436.com
162.211.182.39 www.ximeiedu.com
162.211.182.39 www.zhanzz.com
162.211.182.39 dxkj888.com
162.211.182.39 www.cxzgled.com
162.211.182.39 www.sf999.com.cn
162.211.182.39 www.nbxywj.com
162.211.182.39 www.51zhaosf.com
162.211.182.39 30okok.com
162.211.182.39 www.33345ok.com
162.211.182.39 www.lanhaibyd.com
162.211.182.39 uc.turuyi.com
162.211.182.39 www.sinomax-tip.com
162.211.182.39 www.yiyuanit.com
162.211.182.39 mg60.com
162.211.182.39 3000ok.pro
162.211.182.39 uuu.turuyi.com
162.211.182.39 www.bjek120.com
162.211.182.39 sdjnbx.com
162.211.182.39 new.turuyi.com
162.211.182.39 www.bsssun.com
162.211.182.39 www.fu110.com
162.211.182.39 www.pdlmall.com
162.211.182.39 23bb.net
162.211.182.39 www.tde007.com
162.211.182.39 www.500ok.com
162.211.182.39 www.hlkg.net
162.211.182.39 www.17126.com
162.211.182.39 www.ideapack.com.cn
162.211.182.39 62bf2.mc520.com
162.211.182.39 www.tophereled.com
162.211.182.39 www.ch-gwang.com
162.211.182.39 www.sf12345.cc
162.211.182.39 www.sfwanjia.com
162.211.182.39 www.765cq.com
162.211.182.39 p22672.com
162.211.182.39 www.53245.com
162.211.182.39 www.335ok.com
162.211.182.39 335ok.com
162.211.182.39 www.zglzsy.com
162.211.182.39 sf.183a8.mc520.com
162.211.182.39 jiaocheng.x9858.com
162.211.182.39 www.led58.com
162.211.182.39 xx.turuyi.com
162.211.182.39 www.hongchuangalye.com
162.211.182.39 jinanzhongju.com
162.211.182.39 www.87sf.com
162.211.182.39 333.sydahe.com
162.211.182.39 185.17c94.mc520.com
162.211.182.39 461a9.170.mc520.com
162.211.182.39 www.fg12.com
162.211.182.39 www.cqsf185.com
162.211.182.39 haosf.zhaochaye.cn
162.211.182.39 www.gw-food.com
162.211.182.39 www.sf120.com
162.211.182.39 520.sydahe.com
162.211.182.39 qq.turuyi.com
162.211.182.39 www.505sf.com
162.211.182.39 www.zyxxedo.com
162.211.182.39 yy.turuyi.com
162.211.182.39 777.turuyi.com
162.211.182.39 www.920cq.com
162.211.182.39 www.99340.com
162.211.182.39 sss.sydahe.com
162.211.182.39 www.hycartoon.com
162.211.182.39 www.916cq.com
162.211.182.39 www.tootc.com
162.211.182.39 legalweek.cn
162.211.182.39 www.chuanqisf999.com
162.211.182.39 www.gf999.com
162.211.182.39 www.baiduhaosf.com
162.211.182.39 www.tzchanghong.com
162.211.182.39 www.mxjy.net
162.211.182.39 www.qicai130.com
162.211.182.39 www.sf123.org
162.211.182.39 sf123.com
162.211.182.39 www.pk930.com
162.211.182.39 www.chuanqisifu.eu
162.211.182.39 www.123dbc.com
162.211.182.39 7pv.net
162.211.182.39 www.soojin-dance.com
162.211.182.39 ko.sydahe.com
162.211.182.39 www.0532yinli.com
162.211.182.39 www.0717bbs.com
162.211.182.39 www.pk021.com
162.211.182.39 www.rfinfo.cn
162.211.182.39 www.m1ye.com
162.211.182.3


Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name: ?????
Product Version: 1.0.0.0
Legal Copyright: ?????? ????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ?????
Comments: ??????????(http://www.eyuyan.com)
Language: Russian (Russia)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 534743 536576 4.531 634490bdbaf0517acf0f6e797fab90a6
.rdata 540672 2091864 2093056 5.18058 9bfc07e264a4c9c71f585b480acd7e9f
.data 2633728 267146 65536 3.49964 16f3c2ed0e5d970d698d88e106ac6ae4
.rsrc 2904064 34688 36864 3.97524 fad832267be660e12d7ac9b5f77cea5e

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://jc.941pojie.com/cj.txt 125.88.186.134
hxxp://p21.tcdn.qq.com/wpa/images/group.png
hxxp://jc.941pojie.com/css/style.css 125.88.186.134
hxxp://jc.941pojie.com/img/gif008.gif 125.88.186.134
hxxp://jc.941pojie.com/img/zsf.gif 125.88.186.134
hxxp://jc.941pojie.com/img/bingxue.gif 125.88.186.134
hxxp://jc.941pojie.com/img/lhr.gif 125.88.186.134
hxxp://jc.941pojie.com/img/jbc.gif 125.88.186.134
hxxp://jc.941pojie.com/img/bfzs.gif 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è 222.186.30.87
hxxp://jc.941pojie.com/img/yds.gif 125.88.186.134
hxxp://jc.941pojie.com/img/gua.gif 125.88.186.134
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=5076676&show=pic2
hxxp://jc.941pojie.com/img/8090.gif 125.88.186.134
hxxp://jc.941pojie.com/img/qingtian.gif 125.88.186.134
hxxp://jc.941pojie.com/img/2014052276129177.gif 125.88.186.134
hxxp://jc.941pojie.com/img/046bt.gif 125.88.186.134
hxxp://jc.941pojie.com/img/icon.png 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/xmbud.js 222.186.30.87
hxxp://jc.941pojie.com/img/zs.gif 125.88.186.134
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=5076676&show=pic2&t=z
hxxp://z.gds.cnzz.com/stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=1255447200-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=142051709
hxxp://z.gds.cnzz.com/stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=333292132
hxxp://jc.941pojie.com/img/bg.gif 125.88.186.134
hxxp://z.gds.cnzz.com/stat.htm?id=5076676&r=http://www.941pojie.com/&lg=en-us&ntime=1421021050&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=47986809
hxxp://jc.941pojie.com/img/bgheader.gif 125.88.186.134
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=418977394 42.120.219.171
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=3325108&show=pic1
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=2003700200 42.120.219.171
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=3325108&show=pic1&t=z
hxxp://jc.941pojie.com/img/bgnav.gif 125.88.186.134
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=597884745 42.120.219.171
hxxp://icon.cnzz.com/img/pic2.gif 42.156.162.7
hxxp://cnzz.mmstat.com/app.gif?&cna=ff05DYiZXhsCASU5EL1uOoAQ 42.120.219.171
hxxp://cnzz.mmstat.com/app.gif?&cna=ff05DdrU2mcCASU5EL3gIDWK 42.120.219.171
hxxp://jc.941pojie.com/img/bgh.gif 125.88.186.134
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=1421349794 42.120.219.171
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=588029971 42.120.219.171
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.0.gif 222.186.30.87
hxxp://icon.cnzz.com/img/pic1.gif 42.156.162.7
hxxp://cnzz.mmstat.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy 42.120.219.171
hxxp://z.gds.cnzz.com/stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=796310978
hxxp://jc.941pojie.com/img/gg.png 125.88.186.134
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=56918711 42.120.219.171
hxxp://z.gds.cnzz.com/stat.htm?id=3325108&r=http://www.941pojie.com/&lg=en-us&ntime=1420734132&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=1115328117
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.1.gif 222.186.30.87
hxxp://zhanzhang.anquan.org/static/common/images/zhanzhang.png 183.60.243.220
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.2.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.3.gif 222.186.30.87
hxxp://z.gds.cnzz.com/stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=2021085708-1421021053-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=2054700002
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.4.gif 222.186.30.87
hxxp://jc.941pojie.com/img/top.png 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.5.gif 222.186.30.87
hxxp://jc.941pojie.com/img/1gg.png 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.6.gif 222.186.30.87
hxxp://jc.941pojie.com/img/logo.gif 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.7.gif 222.186.30.87
hxxp://jc.941pojie.com/img/zaoma.jpg 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.8.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.9.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/player.volmeter.10.gif 222.186.30.87
hxxp://jc.941pojie.com/img/bgtitle.gif 125.88.186.134
hxxp://www.zzsky.cn/service/player/player59/exobudset.js 222.186.30.87
hxxp://img.webscan.360.cn/status/pai/hash/6330cf46f68cd2c7c40a422626d1cb30 220.181.158.213
hxxp://www.zzsky.cn/service/player/config/578724578.js 222.186.30.87
hxxp://www.zzsky.cn/service/player/list/578724578.js 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/time.js 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/imgchg.js 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_mute_off.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_mute_on.gif 222.186.30.87
hxxp://js.users.51.la/606781.js 117.21.226.37
hxxp://www.zzsky.cn/service/player/player59/btn_rndmode_off.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_rndmode_on.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_rept_off.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_rept_on.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_play.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_play_on.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_pauz_off.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_pauz_on.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_stop.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_stop_on.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/xmb.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_prev.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/btn_next.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/xmb3.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/bg.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/xmb1.gif 222.186.30.87
hxxp://www.zzsky.cn/service/player/player59/xmb2.gif 222.186.30.87
hxxp://www.941pojie.com/img/bgnav.gif
hxxp://www.941pojie.com/img/1gg.png
hxxp://www.lszwg.com/img/qingtian.gif
hxxp://www.941pojie.com/img/bgtitle.gif
hxxp://www.941pojie.com/img/gg.png
hxxp://www.lszwg.com/img/top.png
hxxp://www.lszwg.com/img/bgtitle.gif
hxxp://www.lszwg.com/img/bgnav.gif
hxxp://www.lszwg.com/img/bg.gif
hxxp://zs25.cnzz.com/stat.htm?id=5076676&r=http://www.941pojie.com/&lg=en-us&ntime=1421021050&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=47986809 1.122.192.17
hxxp://hzs2.cnzz.com/stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=796310978 1.122.192.17
hxxp://www.lszwg.com/img/bgheader.gif
hxxp://s25.cnzz.com/stat.php?id=5076676&show=pic2 1.99.192.16
hxxp://www.941pojie.com/img/bg.gif
hxxp://www.941pojie.com/css/style.css
hxxp://hzs2.cnzz.com/stat.htm?id=3325108&r=http://www.941pojie.com/&lg=en-us&ntime=1420734132&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=1115328117 1.122.192.17
hxxp://pub.idqqimg.com/wpa/images/group.png 103.7.29.189
hxxp://www.lszwg.com/img/046bt.gif
hxxp://c.cnzz.com/core.php?web_id=3325108&show=pic1&t=z 195.27.31.246
hxxp://www.941pojie.com/img/qingtian.gif
hxxp://www.lszwg.com/img/2014052276129177.gif
hxxp://www.941pojie.com/img/8090.gif
hxxp://www.941pojie.com/img/lhr.gif
hxxp://www.lszwg.com/img/bingxue.gif
hxxp://zs25.cnzz.com/stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=1255447200-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=142051709 1.122.192.17
hxxp://zs25.cnzz.com/stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=333292132 1.122.192.17
hxxp://www.941pojie.com/img/jbc.gif
hxxp://www.lszwg.com/img/8090.gif
hxxp://www.lszwg.com/img/gif008.gif
hxxp://www.941pojie.com/img/icon.png
hxxp://www.lszwg.com/img/bgh.gif
hxxp://www.941pojie.com/img/top.png
hxxp://www.941pojie.com/img/2014052276129177.gif
hxxp://www.lszwg.com/img/gg.png
hxxp://pcookie.cnzz.com/app.gif?&cna=ff05DdrU2mcCASU5EL3gIDWK 42.120.219.171
hxxp://www.lszwg.com/img/icon.png
hxxp://www.941pojie.com/img/zsf.gif
hxxp://www.941pojie.com/img/yds.gif
hxxp://www.lszwg.com/img/jbc.gif
hxxp://c.cnzz.com/core.php?web_id=5076676&show=pic2&t=z 195.27.31.246
hxxp://www.lszwg.com/img/bfzs.gif
hxxp://www.lszwg.com/img/lhr.gif
hxxp://www.lszwg.com/img/zaoma.jpg
hxxp://www.941pojie.com/img/046bt.gif
hxxp://www.941pojie.com/img/zs.gif
hxxp://www.lszwg.com/css/style.css
hxxp://www.lszwg.com/img/zsf.gif
hxxp://www.941pojie.com/img/zaoma.jpg
hxxp://www.941pojie.com/img/bingxue.gif
hxxp://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy 42.120.219.171
hxxp://www.941pojie.com/img/gif008.gif
hxxp://www.941pojie.com/img/logo.gif
hxxp://s85.cnzz.com/stat.php?id=3325108&show=pic1 1.99.192.16
hxxp://pcookie.cnzz.com/app.gif?&cna=ff05DYiZXhsCASU5EL1uOoAQ 42.120.219.171
hxxp://www.lszwg.com/img/1gg.png
hxxp://www.lszwg.com/img/yds.gif
hxxp://www.941pojie.com/img/bfzs.gif
hxxp://www.941pojie.com/img/gua.gif
hxxp://www.941pojie.com/img/bgheader.gif
hxxp://www.lszwg.com/img/zs.gif
hxxp://www.941pojie.com/img/bgh.gif
hxxp://www.lszwg.com/img/logo.gif
hxxp://hzs2.cnzz.com/stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=2021085708-1421021053-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=2054700002 1.122.192.17
hxxp://www.lszwg.com/img/gua.gif
941pojie.meibu.net 110.28.187.170
vip.51.la 113.105.157.132
soso.hcjd56.com 61.174.41.254


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=2021085708-1421021053-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=2054700002 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hzs2.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:15 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..



GET /stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=333292132 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zs25.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:12 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..



GET /css/style.css HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:25 GMT
Content-Length: 3923
Content-Type: text/css
Content-Encoding: gzip
Content-Location: hXXp://VVV.941pojie.com/css/style.css
Last-Modified: Fri, 25 Jul 2014 01:50:27 GMT
Accept-Ranges: bytes
ETag: "8073a1ceaaa7cf1:56725"
Vary: Accept-Encoding
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
...........[K....^g`.C..!..{TRK..Y..c......uK.....V..........da."^..1.
y.L.d.../.&...N=..w<.L.VU.:u.W.U....[.~.._......G..>x.`U....>
..S.I....y.~n.}Y...l......../.y-]e....>......;.<......d[[email protected]..
1Z.m[.QS....?.........n..s5...q...]8.E..t..G...g..<,....yy..'./B...
..D^..U1no...P...HX.Vu...2 ?..-....X.M...A.....Y.8.dUES......U...v....
%Y......iW..e.....q..Dv.....%.....v.^..>>G...u. 2.:.".8...D%.').
...:.).v.\$...u...!ku...7.gBF...)yf...r{X......fy..l^pz(..w...,3....*.
. ='.....-H'D...1..^=.0/O.*.]..z.T..*6.2...B|..U..9.....;1z:....r.8..b
..:W.d3..4y.A....vI.$..Bkb60.!{........]..l......"...#s...\<.r.C.4.
.pSN....#Vu.KTE.8.Bc..}G.ez....He..v......u..i.Ou.v. ....P........DPD.
..........(.......3...$...*;....8..Gj.m..&.`.g....&oGy.......f....i.Wg
2.....(.nk.&'......QS.a8............|>...c.....\k29...h..9.....R..}
Q62~...{.;....BKL...f.*..:p.c. .....H?.K.Ue..Sh....9...uI5B.;.k.......
..n.-...b.T#......T..fr..}.......0..%....F.)........>.......VU1...T
c$9.M.....[%.h.uV.%..).G.q....q8....\.Ig..ri..P....d...6Q4`..m..v.].Y5
5.:......,.E..`../by.([email protected]... "@...1Po1..H..F..D[A.\.l6.d#....
.d.l.X..w..y.Yo...w...hs.d...'...!iOPnR........`..k.......Z:.U.C.\mb..
.!M%.........K...:........%....Z..2.l.Q...z...9..3..t,...2_.c......WE2
..I&*{jx;.#^^C.&..T...q"XN......n5-...TG.|E..q......_n~)3<......U..
@ ..7uM....=)(M.R..1V..[.'HYS.<k..8.Q(...s.eNGO....U.ad..f^.N}...d.
.#;W.-......''.}^.c`!] ......2)...k..p...62 ........mW=.....(.Y..jp...
.I,...=.v....<...).Mx...A.B...pNS..... ...U..6...v.l..3..X.)F;.
<<< skipped >>>

GET /img/bingxue.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 24166
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bingxue.gif
Last-Modified: Mon, 05 Jan 2015 11:03:47 GMT
Accept-Ranges: bytes
ETag: "806b1e47d728d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<....................!......-. *.('.2/.;..>,.10.21.54.%$
."!.-$.::.86.=<.?>.6#...........................................
...............)..:.. ..-..#..2..#..,..'..3..:..6..-$.6'.O..y..}..g..D
,.K*.@,.[&.S(.\&.C<.L/.d$.j#.l#.s!.u$.U..L..C..K..S..[..X..q..g..s.
.{..o..P..r2.i,.h;.y7.z>.z%.@@.BB.JJ.FE.II.KJ.IF.UH.MM.OO.UM.[M.WN.
[email protected].{e.........................................
............................................................%.....4..5
..9..1..,..(..".......................................................
..................................5..#..2..=..9..P..N..j..p..Q..J..V..
Z..Y..j..c..g..k..x..x................................................
......................................................................
.............................!.......!..NETSCAPE2.0.....!..ImageMagick
.gamma=0.45455.,......<........H......*\......#J.H.....3j...... C..
I....(S.\....5k\..)..L.6k..y3'O.=w...sh..=o.T*ti..5.J..rjT.N.j....W.\.
f..t...]..U.Vl..p..eK7...w.....o].|...l6......V..pc..#.]<y/.../k&..
.g.....m..i..E..i.uL.N[..M{....e........y...{...3...^..r....w>=zt..
.k..={w....K.N.|......n.......t/.>|.....?[........D.e r..v.....`..2
(...FH...fX...r.!........(..&.x..*....,..b.2.H..8.x..9..c.@.(..<.vZ
i..v..I....P.7..Q.'e...x..Vv..q.R...d.Y..f..\.iz.f.b..'.h....n..g.|>
;...M..(...I..{".g.X.....>....Jz...aZ..lnJ.....i.....j..jj....$....
*..........k.........`.............;d...*...V..e.a....v..........[....
{.....m...;........../..../.X. 0...<...&.-..O....{*1.k:.*..G.1.
<<< skipped >>>

GET /img/lhr.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:27 GMT
Content-Length: 81534
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/lhr.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..x....c..k............CH{.....r..............[.................
.............}.......S...lo....................................:......
......X^.............OS....(0...4......BI.......'1.loK................
................WWw.........B...kp...................lq...............
.........................lprr.....kq............$........&$...........
........1/N............XR.P4N.....$...................................
........(/......K.*.................................... .1......K%>
..............I.}.......$!=................mn...a.(d 8......X.........
..........................y..CB_......b........\..t.........}....U..(.
.....(.l..h..L..a.......................[..ke.......<..............
W........B=..........}u..........I.....c...lpr...DHW..w."_..{.......%.
...X^............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="
..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:n
s:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:
27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rd
f-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http:/
/ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sT
ype/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:Origi
nalDocumentID="xmp.did:9AA6DB8038C6E31182A8FC32D61CAE1A" xmpMM:Documen
tID="xmp.did:99FEADDEC63D11E3A860CA3CB076D0A3" xmpMM:InstanceID="xmp.i
id:99FEADDDC63D11E3A860CA3CB076D0A3" xmp:CreatorTool="Adobe Photoshop 
CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid
<<< skipped >>>

GET /img/bfzs.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:30 GMT
Content-Length: 33612
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bfzs.gif
Last-Modified: Sun, 02 Nov 2014 03:33:07 GMT
Accept-Ranges: bytes
ETag: "80db95b74df6cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<.......ppp............!!!..................666............
............HHHfff...ZZZ,,,...:::~~~ttt......ccc...___................
........111............@@@...xxxnnn...```...&&&{{{.........hhh........
....lll888\\\zzzjjjH.....kg........k...0.gk.....C...kL........p....(.r
.....M.kk9.........&&k.....&%.......DDD.BB....XXVVV...k.j......XT....B
?...........%&.?B.........TTT.TX......PPP...........*LLLUUU.X..&.CCC..
..B.===..........}}???VVV$$$...***........:......RRR...333...#.g.e.GGG
......(((JJJNNN..LD..KKK......SSS...&..........P...&.&B-.444FFF=..B.A.
.....OOO...1..B..<<<A....H...............X>....///}x...?.x
}.........BBBX.W.....[..5......&..-.}...}Y..}$5..X....?...............
....{.}................................}.{............................
....T...XXX...............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacke
t begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x
="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/
06-14:56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999
/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpM
M="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/x
ap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xm
pMM:OriginalDocumentID="xmp.did:3B42D090C64AE41185F6F1D2E9540C9C" xmpM
M:DocumentID="xmp.did:81963A304ACD11E48F8BAB284EA742E8" xmpMM:Instance
ID="xmp.iid:81963A2F4ACD11E48F8BAB284EA742E8" xmp:CreatorTool="Adobe P
hotoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID
<<< skipped >>>

GET /img/yds.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:31 GMT
Content-Length: 101408
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/yds.gif
Last-Modified: Thu, 13 Nov 2014 07:46:17 GMT
Accept-Ranges: bytes
ETag: "802a13e815ffcf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..[.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.............................................q..c..4cp...d......c.....
Q.0.l..p...!..NETSCAPE2.0.....!.......,......[........................
......................................................................
...................................!..!.."..%.."..%..(.. ..1..3..5..1.
.2..5..6..<.. ..?.#$.'(.('. ,./1.34.68.;=.###,,,222<<<.B..
E..I..E..L..Q..Q..U..R..U..V..X..Y..Z..]..^.._..c..i..e..g..k..m..q..t
..|.>A.@?.BE.FI.JM.NQ.RU.TW.VY.WZ.Z].[^.^a.^a.be.be.fi.fj.jm.jm.mq.
nr.qu.qu.vz.uz.y}.z}.CCCKKKSSS[[[dddllltttzzz}}}...... ..!.."..$..!. #
. $.!&.#'.$(.$(.%-.)*.& .( .',.(0. -.'..)/. /.,0. 0.,2.-3..6.14.09.34.
/5.17.28.38.37.39.4>.8<.6>.9|..}[email protected].;[email protected]...............
......................................................................
..................................................................
<<< skipped >>>

GET /img/2014052276129177.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 832
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/2014052276129177.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aX..................!..copyright. 1996 Charles H. Tupper  All rig
hts reserved. not to be used on another graphics download site or on s
oftware.  All other uses permitted.  hXXp://VVV.cyberspace.com/tup.!..
NETSCAPE2.0.....!.......,....X.....*.............0....H.........6.L...
.....? ..!.......,%...j...................<....H............!......
.,W...j...................<....H............!.......,....j.........
..........<....H............!.......,....j...................<..
..H............!.......,....j...................<....H............!
.......,....X.....*..................H...........L.........(..!.......
,1.........!..................H...........L...!.......,c.........!....
..............H...........L...!.......,..........!..................H.
..........L...!.......,....X.....)................n.H...........L.....
..>S..;HTTP/1.1 200 OK..Date: Mon, 12 Jan 2015 00:02:35 GMT..Conten
t-Length: 832..Content-Type: image/gif..Content-Location: hXXp://VVV.9
41pojie.com/img/2014052276129177.gif..Last-Modified: Thu, 14 Aug 2014 
07:47:36 GMT..Accept-Ranges: bytes..ETag: "05c92394b7cf1:56725"..Serve
r: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..GIF89aX..................
!..copyright. 1996 Charles H. Tupper  All rights reserved. not to be u
sed on another graphics download site or on software.  All other uses 
permitted.  hXXp://VVV.cyberspace.com/tup.!..NETSCAPE2.0.....!.......,
....X.....*.............0....H.........6.L........? ..!.......,%...j..
.................<....H............!.......,W...j..............
<<< skipped >>>

GET /img/046bt.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 6215
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/046bt.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aK....!......U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...
........U...........U...........U......$..$.U$..$..$$.$$U$$.$$.$I.$IU$
I.$I.$m.$mU$m.$m.$..$.U$..$..$..$.U$..$..$..$.U$..$..$..$.U$..$..I..I.
UI..I..I$.I$UI$.I$.II.IIUII.II.Im.ImUIm.Im.I..I.UI..I..I..I.UI..I..I..
I.UI..I..I..I.UI..I..m..m.Um..m..m$.m$Um$.m$.mI.mIUmI.mI.mm.mmUmm.mm.m
..m.Um..m..m..m.Um..m..m..m.Um..m..m..m.Um..m.......U.......$..$U.$..$
..I..IU.I..I..m..mU.m..m......U...........U...........U...........U...
........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U.
..........U...........U...........U.......$..$U.$..$..I..IU.I..I..m..m
U.m..m......U...........U...........U...........U...........U.......$.
.$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U.......
....U......!..NETSCAPE2.0.....!.......,....K..........H......*\......#
J.H..@`.1.$...9r....7..........cI........1........Ar.^.#...A0AR....]L.
K......Ux..!#.u$ ..........-..|.`f........ )R....I./1..A.(... .R..ML..
>|.....u.HP.J....s..*3.d..&.v....FO22.N...I.0A.4........r.R........
.Q.{`..{..n-p21t'.~4....@*..o...#)[email protected]<.r.....{`..!...|
..'^Xh.5[r....K..T.r..4. .......f\X.....e..QJPa..A....GC.(".fU...mEe.Z
K.FHf|.x..A.U!.a...J,iD.bo..]P.l...@...}$.(..3.W.MK.w.w..gV...&.._...A
.EG.B....}.t...J..P..1..L`.....6....F...!.......,....K..........H.....
.*\......#[email protected]``.%.E.#1r.......(...m.(0#I..<.$........C.
..I@:I....&.....l...O.:..C.. :.......).. ........H.b.8..V..H.$G.-I.f..
.*p%).Uk....%9.Z..........:...%..,I..L.......%...O.....jw......;..
<<< skipped >>>

GET /img/icon.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:36 GMT
Content-Length: 409
Content-Type: image/png
Content-Location: hXXp://VVV.941pojie.com/img/icon.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.............r.......sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<....IDAT8Oc`.........S6........
.K.........."......)o....mj.3.*.O..\.........w..wZ.....US.6......_s...
p....='R...X.?i.......?.|...2......h...#..k....=.............0 4D.....
2u......c.O>[.?a....9../.:........R...K....f...A...3%.c6...........
CK.2P.F..zs8..|w.p...0...c....m..a..5.........p.d<..?....IEND.B`.font>....


GET /img/zs.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:36 GMT
Content-Length: 108348
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/zs.gif
Last-Modified: Wed, 31 Dec 2014 14:17:59 GMT
Accept-Ranges: bytes
ETag: "80c52f94425d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?....(...
...H.sK\....?...h.yF:v..9.F.&..K.ec.t.U....S......#..N...U .....#.."W.
.........p.p..y.Z.`....q...C...".Tk.K.w.0..889.W....r...n=\.......k.E.
.@=y.. ..UV..>..&..ci.. X.UL....K.{7.*d.S..*V-M2.%V.*GCO....b.O.*/8
z.pps.!....Q.P...y..x..QM.3F.(..Sw.M.4..).....4...Tk 9..=(...g.....Up}
h@:..\..h.......D..`qB. ...<P9......0.EF.y...h...n.F.@!.S|..F...:.n
.M3(.....>p.4.p..."nO.*..Nv..Tf.v.n.)..-........Tvc.Uw...C~B...Q..c
.5.P;~u.>.9...."..........D:..Q.Q.....A8?.r.k.....tUY5F9.c..|..._c.
k.Q..b.I.....1\d..9..G...jL......de,K...][....ET.W%~...W.%...7.U.. ...
P.b...T.../......T/p.f...*..>T~..?.Z.....A..S3.........h.._..X..gsG
j;Q..=2....^IX* .$...la.C<.)c#n....O.I.D.R.k.vg...1.).I....?....dX#
..... =....._..C..._.T.....9Q.....O.....>..T....*#.....Q...EIE...yj
;[email protected][email protected]..#....^)3K..N(..
QKX....xv........#V*...p...I.O..]...f....#FgeU.$...[M.../....I-...
<<< skipped >>>

GET /img/logo.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:40 GMT
Content-Length: 4437
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/logo.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..F....a..a..b..c..c..d..d..d..d..e..e..e..e..e..f..f..f..f..g..
f..g..f..i..m..n..k..p..s..w..t..}..{..|....d..^..j..g..j..l..n..r..s.
.t..u..u..v..x..y..z..{..|..}..~......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......F.....#..H.....%.\......#J.H.....!:......  J
P.....(S.\9q.I.....xL..r:`....g../=.......H3>P.r`[email protected]....
..`...{u...Q.V%.....Y ...taZ.;[email protected]....|.\.......#Kf....$.3K6r
.a..X14.C.4i.Yw.........c.p......7..."......>...H......4hd..`..\...
.V...i..%.....z...3..._...'1b.....}.`h.C.V...u.P..V.........%.,!..A..^
*....p..6..YyB.; l..<.YdS.)....,..b3.. ..,..F,*vaK.-.pK..^....UgI.`
...*_Y..<.\.AxL.(.;;\..r;P.....(..4.I#...S.09.P..z.b.#...b @:.W..%#
.k.E....qh.2.......a.&......X....`..MH.U..f..b.O.c.1..P...L.B..-..B.*.
.K..a..;...ZW ....]A...V..I*.........t."s....c...m`.M%Vt....h...0B..e.
...)^...)......)`A\9i%2]a..p.j....!{...Ze.%....k6....6.....fKb...Zn.(.
.j....."........K3....@\...&A.qNp.m.1p.[..&?.......C...v...!..j.'.
<<< skipped >>>

GET /img/1gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:40 GMT
Content-Length: 56287
Content-Type: image/png
Content-Location: hXXp://VVV.941pojie.com/img/1gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR..............</.....sRGB.........gAMA......a.... c
HRM..z&..............u0...`..:....p..Q<...]IDATx^......u........d%Z
.d[.,..l X....-K.eI.D...#..1.x.....b...6......9..sN..........F.....} .
uOOOoOuMW..{!&...?m.m.m.m.m.m.m.m.m.a...\...=s..p..W...^...]..'.....|.
..........b.;&X._ ...3...}e..x0..1..c8^p$.{.Y...$..........y|...`..q..
.x.mX....<.&....x......{...m7{.`y.M1o,....%.g.5.....9c./....C......
}...8`^Z4p..o.6..T|?...I...k..V4...M..h%\........>q.M.-.5..n.m.[.@.
....................[.....r.....y....JMe.T...)....e......5.......O...p
R.4.........[.N......M...|V.h>..9...vV.....{Z...m......%....{..`.Ey
...C...a,.i...e..,.t\..v^..ZvU~........_.].?.........a..9.........tM..
...........g.......)......?Y.Y.g......?.].?.....[w1..p................
_s^~..9...0...wW...3.......z..... .q.]y....[W.......O[@[@[@[@[@[@[@[@[
`.......#..... ...B./Z(.....ys$o.,).=]...#O..._..b .`8....tRn...o.l,..
nk>[email protected]/..m='.ay..9c.....B...........a...>.
 .........KX^..a..;i......SK...ZvE~n9..F.t.5.....0..s../..Y...........
$?..".{..'...]....>...h;.........,i......v....<.......6k......rZ
.C......w..B;..;....:......5....:#...,...'....'.@8<................
...n....'r.....s.,im.b(..sg...Se..)2{*m...>......Se..i...<...Ny.
..xP.h7..n.28.......@*..2H 4P.....w.1@.....`[email protected].$..@...
.G..~....!..c.6B.':..'...>...h...Fn.D`....}..&.........Na.Q.4....2.
...y......... L0......h..h..........m{...........-.'`..&,o.r.....x};..
k8&?.z\.t.i.q......|.....k....k{....................y..9q..._.F...
<<< skipped >>>


GET /status/pai/hash/6330cf46f68cd2c7c40a422626d1cb30 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img.webscan.360.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: 360Server
Date: Mon, 12 Jan 2015 00:04:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
2669.............R&...PNG........IHDR......./......3......pHYs........
........MiCCPPhotoshop ICC profile..x..SwX...>..e.VB....l.."#....Y.
[email protected]....(.gA..Z.U\8.....}z............y.....&...j.
9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W. ..."....
.R...T.......S.d.....ly|B"......I>..................(G$.@..`U.R,...
...@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H.......K.3...
..w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o">!......
...N..._....p...u.k.[..V.h..][email protected].<......%b..0..>.
[email protected][email protected]..#......)..4.\,...X..P"M.y.R.D!.
.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@ ...........
\...L....D..*.A..............a.D@.$.<.B........A.T.:.............18
....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\
@.... [email protected].]...k....=.....K.ut.}..c..1.f..a\..E
`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z..
.xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ....
..O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-...
.igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2..g...oUX*.
*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c...
.F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!..
.{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.c.y.......
..G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b
.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..J.6...
<<< skipped >>>


GET /service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 Jan 2015 23:54:38 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.5
Content-type: text/html
<html>..<head>..<title>......................</ti
tle>..<META http-equiv=Content-Type content=text/html; charset=g
b2312 >..<meta name=keywords content="exobud mp">..<meta n
ame="description" content="">..<meta http-equiv="Content-Type" c
ontent="text/html; charset=gb2312">..<STYLE TYPE="text/css">.
.<!--..     A:LINK ..{... COLOR: silver;... TEXT-DECORATION: none ;
..}..     A:HOVER ..{... COLOR: white;... TEXT-DECORATION: none ;..}..
     A:ACTIVE ..{... COLOR: white;... TEXT-DECORATION: none ;..}..    
 A:VISITED ..{... COLOR: silver;... TEXT-DECORATION: none ;..}..     B
ODY ..{... MARGIN: 0px 0px 0px 0px;... BACKGROUND COLOR:#4B7EE9;..}.. 
.TITLE..{... FONT-FAMILY: "Verdana", "Arial", "Helvetica", "sans-serif
";... FONT-SIZE: 11px;... COLOR:#333333;... ;..}...TIME..{...FONT-FAMI
LY: "Verdana", "Arial", "Helvetica", "sans-serif";... FONT-SIZE: 10px;
... COLOR:#333333;... ;..}..-->..</STYLE>..<script languag
e="JavaScript">..<!--..function SymError()..{..  return true;..}
..window.onerror = SymError;..//-->..</script>..<SCRIPT La
nguage="JavaScript" src="xmbud.js"></SCRIPT>..<SCRIPT lang
uage=JavaScript>...function preload(imgObj,imgSrc) ...{...if (docum
ent.images) ...{....eval(imgObj ' = new Image()')....eval(imgObj '.src
 = "' imgSrc '"')...}...}...preload("meter0", "player.volmeter.0.gif")
;...preload("meter1", "player.volmeter.1.gif");...preload("meter2", "p
layer.volmeter.2.gif");...preload("meter3", "player.volmeter.3.gif
<<< skipped >>>


GET /core.php?web_id=5076676&show=pic2&t=z HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: c.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 753
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:12 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:12 GMT
Expires: Mon, 12 Jan 2015 00:19:12 GMT
X-Cache: MISS TCP_REFRESH_MISS dirn:0:172436065
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:12 GMT
X-Swift-CacheTime: 900
Via: cache5.de1[699,200-0,M], cache6.de1[700,0]
!function(){var p,q,r,a=encodeURIComponent,b="5076676",c="pic2",d="",e
="online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站&
271;统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m=
"0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h="
 f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k
.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createS
criptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?w
eb_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/i
mg/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><
;img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a h
ref='" q "' target=_blank title='" j "'>" j "</a>",k.createIc
on([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: applicati
on/javascript..Content-Length: 753..Connection: keep-alive..Date: Mon,
 12 Jan 2015 00:04:12 GMT..Last-Modified: Mon, 12 Jan 2015 00:04:12 GM
T..Expires: Mon, 12 Jan 2015 00:19:12 GMT..X-Cache: MISS TCP_REFRESH_M
ISS dirn:0:172436065..X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:12 GMT.
.X-Swift-CacheTime: 900..Via: cache5.de1[699,200-0,M], cache6.de1[700,
0]..!function(){var p,q,r,a=encodeURIComponent,b="5076676",c="pic2",d=
"",e="online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站
长统计",k=window["_CNZZDbridge_" b].bobject,l="http:
",m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push(
"h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0
<<< skipped >>>

GET /core.php?web_id=3325108&show=pic1&t=z HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: c.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 753
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:13 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:13 GMT
Expires: Mon, 12 Jan 2015 00:19:13 GMT
X-Cache: MISS TCP_REFRESH_MISS dirn:1:676262332
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:13 GMT
X-Swift-CacheTime: 900
Via: cache2.de1[327,200-0,M], cache6.de1[328,0]
!function(){var p,q,r,a=encodeURIComponent,b="3325108",c="pic1",d="",e
="online_v3.php",f="hzs2.cnzz.com",g="1",h="pic",i="z",j="站&
271;统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m=
"0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h="
 f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k
.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createS
criptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?w
eb_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/i
mg/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><
;img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a h
ref='" q "' target=_blank title='" j "'>" j "</a>",k.createIc
on([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: applicati
on/javascript..Content-Length: 753..Connection: keep-alive..Date: Mon,
 12 Jan 2015 00:04:13 GMT..Last-Modified: Mon, 12 Jan 2015 00:04:13 GM
T..Expires: Mon, 12 Jan 2015 00:19:13 GMT..X-Cache: MISS TCP_REFRESH_M
ISS dirn:1:676262332..X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:13 GMT.
.X-Swift-CacheTime: 900..Via: cache2.de1[327,200-0,M], cache6.de1[328,
0]..!function(){var p,q,r,a=encodeURIComponent,b="3325108",c="pic1",d=
"",e="online_v3.php",f="hzs2.cnzz.com",g="1",h="pic",i="z",j="站
长统计",k=window["_CNZZDbridge_" b].bobject,l="http:
",m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push(
"h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0
<<< skipped >>>


GET /service/player/player59/player.volmeter.2.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1792
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "aa6313743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:45 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q.......................}............................
.*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..@...*....x...{[email protected]..... ^..1.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._.............[......h`...P..... ..&.C.W|...
_\....v. ..~.a..>...%~...'0.b./..b"4T...8..G.X.(#.>.(d.3..#.H...
".40..NB.d.]L.. Xf.e Sp.e.S~)f.a2)..P..&.d..f.o..f.L.B..x....)..'.r...
...j..p.....2j...D*...JaC..f......).......Ba.....*.w@1.....*k.......~*
.....k...*..x.....&...J..,..F.........B......m..z.B.uPa.....n.-.......
.................r.!...GAG.r.....7....D....O\1......st...q8....[,q.(_\
q....2.'... =.a..8.Q..f.a..@.|F.C.l..H'...2.\..;h.t.SK.u.D....\o..
<<< skipped >>>

GET /service/player/player59/player.volmeter.1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "a2b4e3733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:49 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q..........................}..........................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..?...*....x...{....?F...u..... ^..1.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._......`y....,^.'....h`...P.......Z0a..z....
L.....:... ~(b..>...%rx..'0.b./[email protected]#.T....,..c.;..$. ....E..H...
.d.Kf!...Tie..H...Nr.d.Pz)f..,.%.`....b..f.lv.....i..~,...l..g.o.)h.o.
9(.........E..F*).Q.....f.........|.D.OT.....zj.O.*j....*k...* ......"
.P.......t.a....aG.......>......-..Z... .....*...S.KG...;...v......
...r./....n......p.!...C!..p.....7....w`A..p0q......qt...o4....Sl....\
..*O.2...l..=..C.8.,[email protected]'...L.M.......QO...C.a..\o}.
<<< skipped >>>

GET /service/player/player59/player.volmeter.2.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1792
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "aa6313743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:49 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q.......................}............................
.*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..@...*....x...{[email protected]..... ^..1.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._.............[......h`...P..... ..&.C.W|...
_\....v. ..~.a..>...%~...'0.b./..b"4T...8..G.X.(#.>.(d.3..#.H...
".40..NB.d.]L.. Xf.e Sp.e.S~)f.a2)..P..&.d..f.o..f.L.B..x....)..'.r...
...j..p.....2j...D*...JaC..f......).......Ba.....*.w@1.....*k.......~*
.....k...*..x.....&...J..,..F.........B......m..z.B.uPa.....n.-.......
.................r.!...GAG.r.....7....D....O\1......st...q8....[,q.(_\
q....2.'... =.a..8.Q..f.a..@.|F.C.l..H'...2.\..;h.t.SK.u.D....\o..
<<< skipped >>>

GET /service/player/player59/player.volmeter.4.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c7545743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:50 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.............................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._..........E../h..~..h ~..P..... ..>(..&p
...^....V0....N.b..>8".$.hB"........b.2..b.T....<.A..3..b.A.(..H
.9.".40..NB.d.RV...R."..\n...[[email protected]..'._,..!|..' K
|q..v..g.r..'..6....6jC..Tj...FaC..v.)[email protected]@.@.**...Z*.OT.........O.j..
....... .....k....l..&...y4...y......K....k...R......m....n...P.......
.......K....k.........,.... ...'.0.t@!...G,...X.A..X...._...2(A..$.\r.
M(1...o....s...1..F......<....B.q..e.a..D.A..?7...A..s.=....Vc}
<<< skipped >>>

GET /service/player/player59/player.volmeter.6.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1796
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c8e879743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:50 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..l..q..........................}......................
.......*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}...........
.............................................E..M..L..V..U..g..b..m..g
..]..h..m.....{................................p......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vu.......\
.^..5...\........B...*....x...{....BF...u..... ^........v..L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.PFk....-........G.^}
.....C...~A....._........._........_.L.....C.c.g....P..... ..>(...:
Ha.;<.E....F.O.1a..>h..%R...'0.b./..b.4.(#.62b..}....}\.E.3..#.H
..c#.4`..NB.d.RV...Q^.E......^[email protected]..'.r.)........
..D.y.i..p.I...6....>....Tj...R.C..F:...|:D...**......0`.........R.
jj...j*.".P@....,...k..... .{.....F...L$....f{-.......~.....k.....m.xX
.n..../.-......{/........,p./.q...#<..S......lA..p0q..[Lq..S.1.....
[email protected][email protected]....<..s.G....i.m..j.Q..L.L.......QO
<<< skipped >>>

GET /service/player/list/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 88
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "78bd357870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
mkList("hXXp://q799090710.8441.isp1688.com/941.mp3","........941......
.... - ....");......


GET /service/player/player59/time.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 638
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "f494e7743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
<!--.function show5(){if(!document.layers&&!document.all).return.va
r Digital=new Date().var hours=Digital.getHours().var minutes=Digital.
getMinutes().var seconds=Digital.getSeconds().var dn="AM".if(hours>
12){dn="PM".hours=hours-12.}if(hours==0).hours=12.if(minutes<=9).mi
nutes="0" minutes.if(seconds<=9).seconds="0" seconds.//change font 
size here to your desire.myclock=".............." hours ":" minutes ":
". seconds " " dn "</b></font>".if(document.layers){docume
nt.layers.liveclock.document.write(myclock).document.layers.liveclock.
document.close().}else if(document.all).liveclock.innerHTML=myclock.se
tTimeout("show5()",1000).}.//-->....


GET /service/player/player59/time.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 638
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "f494e7743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
<!--.function show5(){if(!document.layers&&!document.all).return.va
r Digital=new Date().var hours=Digital.getHours().var minutes=Digital.
getMinutes().var seconds=Digital.getSeconds().var dn="AM".if(hours>
12){dn="PM".hours=hours-12.}if(hours==0).hours=12.if(minutes<=9).mi
nutes="0" minutes.if(seconds<=9).seconds="0" seconds.//change font 
size here to your desire.myclock=".............." hours ":" minutes ":
". seconds " " dn "</b></font>".if(document.layers){docume
nt.layers.liveclock.document.write(myclock).document.layers.liveclock.
document.close().}else if(document.all).liveclock.innerHTML=myclock.se
tTimeout("show5()",1000).}.//-->....


GET /service/player/player59/imgchg.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1367
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "58fc7b6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:58 GMT
 toggleKey =new Object();.. toggleKey[0] = "_off";.. toggleKey[1] = "_
on";.. toggleKey[2] = "_ovr";.. toggleKey[3] = "_out";.. toggleKey[4] 
= "_mdn";.. toggleKey[5] = "_mup";..function imgChange(id , act){...if
(document.images){ document.images[id].src = eval("img."  id   toggleK
ey[act]   ".src");}..}..// ............ imgChange('img name' , 0).... 
imgChange('img  name' , 1) ...... if(document.images){...img = new Obj
ect();...// mute ...img.vmute_off = new Image();...img.vmute_off.src =
 "btn_mute_off.gif";...img.vmute_on = new Image();...img.vmute_on.src 
= "btn_mute_on.gif";......// ...img.pmode_off = new Image();...img.pmo
de_off.src = "btn_rndmode_off.gif";...img.pmode_on = new Image();...im
g.pmode_on.src = "btn_rndmode_on.gif";...// loop ...img.rept_off = new
 Image();...img.rept_off.src = "btn_rept_off.gif";...img.rept_on = new
 Image();...img.rept_on.src = "btn_rept_on.gif";...// Play ...img.play
t_off = new Image();...img.playt_off.src = "btn_play.gif";...img.playt
_on = new Image();...img.playt_on.src = "btn_play_on.gif";...// Pause 
& Play ...img.pauzt_off = new Image();...img.pauzt_off.src = "btn_pauz
_off.gif";...img.pauzt_on = new Image();...img.pauzt_on.src = "btn_pau
z_on.gif";...// Stop ...img.stopt_off = new Image();...img.stopt_off.s
rc = "btn_stop.gif";...img.stopt_on = new Image();...img.stopt_on.src 
= "btn_stop_on.gif";..}....
<<< skipped >>>

GET /service/player/player59/btn_rept_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "548ecb6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 2148
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "369656e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a8.%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*\......#J.H.b...3j..1.. .,\
......]...d..../...I....-\l1$...w.v.......:l*.)....Pe<A...!*K*.be..
.cv.U).... :..}..M..n..m.b..O..t.c...2s.5*...#J.....aG\.r#.. .2e...\..
[email protected]..#.![4......#..)..d..}....u.Y.k
.....tK.].[......2...........F)...X............'-.BM2.X....P....>..
........"@..v...%M@R.".8.!v ....8....BH..Y....S....%..cI.l.B.@.)@.T...
..L....e....AI.9J.r..4.q..`....d....h.2K.O.../.LPAF.h.E.!...49.1.6..P.
.cza........<2..J(..-=...F....9I....K0r../....................?`...
..2C&3l4C....B8{0..!y...I...*.-.....D...[...&kl.-&.m{K .......1H...[-.
......z.....r.....)./)Q...x..(.DB...6L.'.|RB..S<q.x..C.?..E.?|..L..
...J.#L.4..../[[email protected].?........&....4...4..D.A..L-u!z..
<<< skipped >>>

GET /service/player/player59/btn_pauz_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1487
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "2e5a356e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
..F...'[email protected]`...8k.......@}6.J.D. &.|..M....Z. :.......ha-S%U.
J..5.M...\`.........at.N.Z.(92.....U\.m.b..&.....!.....}..... .[h..m.*
o."L.......<.Y..T..V.`.T(E9.R...=...T....}.....Z.jb.....$L.P..%R.d.
.baC.0n...aqK.DQ' ..D.V.^.._.....14...8...3E.q.$..qU.%...3.. ...@.!Dc.
..%.....O<.......',p....@.......(B..D..@.....!......1Q\..7Y.1..#$..
.3...D4Bd.6N......2......*..`B.0@DE..}2..d......A.yo..B.SH1.h.}p.... .
.m.A..C.1...T...-Tp..-.....x.J.3..G.x... ..S.8..p.a...."......y....x..
.4.xp..WT..9..B.-y.Pk...pK#pLB.....J*..3..:....w$..0.8.H.].R..D....c.!
o.B.q..f.`F.k.2.........l........7.0..D,...W<1..g....k... .,..!7`..
(..2......0..r.4.l..8....;....
<<< skipped >>>

GET /service/player/player59/btn_stop_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1458
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "64ec2a6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:01 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}6.J... ).d.&.V...\. :.......p.-S.T.
H........^`.........ad...Y.(92.....U^.u.b..&.....!.....}..... .]h....*
l."L.."[email protected].`.Th.7.R...=..5T....}.....X.jb.....$L.P...Q.d..b.
[email protected]..%H..P^...C.H.3E........'\..1.. ....QC'.0....>.....
.C...QQ.:.!.4...........d......E48X...$*QB.\[email protected]...<.E....D2j.r.
.6.pBE...D.d......A....A..UL!.h........./..A..4.!..s.SE...P..T..C.0...
)i..g.y...,.P.N.......Q.N..\.....a..9.q./....eW\QE..4..0.......v..-..1
...>.G .`.....p......2...H"]tQJ.j....A......!.-..Q..|.A...n.m......
..{....k........../...,....<...'.... ....G,... `...g.1..t... ..q@.;
....
<<< skipped >>>

GET /service/player/player59/btn_prev.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "14437f6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:01 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.M.6)....'..Y......%.6.&CF....M:eH..^.
..3.!.U..,T...."RuV..%..!GIr\XkömL.!3..C......2......V........D.."..
...$...B.*W..bAn.f...x.f.. .Vt.R......&|.0!..*.(.zD#..0o..I..8.O)....i
..].,x...E..1H....<..#[email protected].,......x....a.&.<.. &d../=.......F
...r.(Dt.D..|..4~.....@Q...`!..Jl.D..............E....J)......Q1....pB
...Q.......#.....i.Y. X...?.c..E. ...P.A.1Tp........pR..5...0.."I9T...
.....93 R.......;..K3.|.A.VXA......0/.q......%z,.G$%p.....zb..A.......
@ ....!\p1..k.. .D.A..b......p..l.Q........v..... ....k.........k.... 
.............4.....,p...l...'[email protected]........;....
<<< skipped >>>

GET /service/player/player59/btn_rndmode_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 720
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "d865e36e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:02 GMT
GIF89a(.%..........9:n........................Fn.......z........E..M..
V..g..m.....{..........................s..z...........................
.................................................................!....
.*.,....(.%......pH,..H"b.l:..h...Z......z...xL...c.z.n..p.bN....|....
....~.........&........'.'.........'%.%.........$.$...................
............................................................4%.  .....
.3.P_...&H. `"B..0JD..c'..'P.0R....($(H.e..$92L..d.. r........ v&..i..
.F7.......P.X.. .T.PgZ......S.Z.;B...hGX8..l[.l..MkaDY."....W...{G..,.
o.....V........-,"/....^..83g.gC.....iN.G_]..5...Y........s..}.w...A..
...p.). _......=..N......_..}.......O.|....._...{.....O...............
7....h...&X.{.6.`..;....


GET /service/player/player59/btn_rept_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "2a19b66e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 2157
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "b2314d6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a8.%.....................................}.......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*T......#J.H."...3j..1.%,.,\
......^...d..../...I....-\p1....w.t..'....;l*.)....Pe@A....*L*.bU.. cw
.Y)....!;..}..M..n..m.b..O..t.S.."3t.9"...$J......G\.r#..0.2e...\...P3
d..DR.d.......UgU.n..T.!..m.......w..#..c.......#..). d..}....u.Z.k...
D.tL.Y.S......2...........F....Y............'-.2.2.X....P....>.....
....."@..v...%M@R.".8.!w$....8....BH..%D...T....%..cI.l.B.@.)@.U.....L
....e......%..T..*{...IF.9d.d.Yf.'...6>@a....0A.S....]..B/\H.C.dd.L
.f.J...&.(.....$.T.......9=...0=lB..}d........-,.*....c......(|.q...`.
.&.......0.....B8{4..!y...I...*.-.A...T.O.\...&l|..&....-.x3.&M... %\ 
o.$.0.....I.7.b..KH...U....V...7:.r.$......z..'%\....GpF0?....Q..D.@..
.4 ..........\...._...<..3.8... .\...>.|.(....=...L(>W.s!
<<< skipped >>>

GET /service/player/player59/btn_pauz_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1490
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "aa821d6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}>.J...,(.....W...^. :.Z.....x.m.
%V.N..VL.8..``...B.....q....[.,AB$)...W`.}.c .'...!.!.......#...,._h..
.Y p.$P.......>.i.I...X.h.th...T...M...U......K...^.z......&P.p..&S
.h..r...1p...q..I...R......9....:....el .s....i..F.....U&.....$...>
.r^.....'.L....F.E..........y.(s..=.B.6..!J..."......5;..c..L....lQ..L
[email protected][email protected].][email protected]@.F,.T...&.p..W....Op`F"-....F....!\Q.......Y
.........6.P..e.....t....X.B.2...(..QC.{......b.:W.S..Y..M:30....z....
B.....H....e... .S.0.......kk..<"G%%........1...C....G.....$.|..*w.
a....Q....K.....F.h..F.5.K....l...'|...7....;l...Wl........w.1...,..$.
<r.(....,....0.,..1.`..8..3....;....
<<< skipped >>>

GET /service/player/player59/xmb.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1678
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "786cff743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:06 GMT
GIF89a<.%....TY`...|........w{................{....................
......inv............hms...........................^ci.........uz.....
..............}....................glrw|.rv|...pu}...............\ah..
.......}.....y}...................rw~otzintejqbgo.........z..cho...pt{
mry]bh...............^cj....................................fjq...~..d
ip...|........[`gx}...................................................
......................................................................
...........................rw}......qu{]bi......dhp.........|.........
.....................................................vz.nsy...tx....y}
............................ty....tx~...............ims...............
......................................................................
..............!.......,....<.%........H......*,......#J.H."Du.3j...
... 7..I....(S.\i....0c..I.....r.......@..<G....H.*].....P.J.J....R
.i......`........h..]..-.vp...K....x..............@;.....pc...q1..."..
[email protected]/..$n ......rI...w..Fr.p.....).B............9.....\H...._...(.D
........i..÷ ..e.....n-.`v........6...vT..pj..<[email protected]`
......r....Y............s..=.p.6.....~,C.....H............H@C;.<.U;
...Y.....Q.....V...)e.P.QY.pE..Pb..wLST..h#.2..2. ..A.......%...Q:....
.x...E.Q..&L..!'X..#.\....p...'TP.,.8pF/[email protected]@.iN/...g.....
.B. ......3.t ....!.%0Mq@2.....@(s.L..0C3O....,........:?.QE..0...8..I
$h....]t.-...P..).`...TA.&......<....$..g.P..'...@[email protected]@aD*.P....
....9. B./..........4.F.<8..)!.L.........`..{.../ ..J0.d.B...q.
<<< skipped >>>

GET /service/player/player59/btn_next.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "cc4836e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:06 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.O.>1!.K.(..].%....&.>.6c.6..0QB
uh. _...;.A....,\..$..RvX..5.Q.GKv\X.E..mN.%;#.C....!.C..5...^..,....&
L..b... .(..... Y .jQN..)[email protected]....<...!.. .*..TC..1p..I..
x.P*.......^.,|...f..2J.G.u.x.$i.D..f..-.....D}.Y....'.@.. 'd..0?.....
.......M(Fx......G4...Mq.Ha...hA..Lt!...............E.....)......YQ...
......a... .C.$.....i6Aq!`.A.HTTP/1.1 200 OK..Content-Length: 1437..Co
ntent-Type: image/gif..Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT..A
ccept-Ranges: bytes..ETag: "cc4836e3b6dca1:1bc6"..Server: Microsoft-II
S/6.0..X-Powered-By: ASP.NET..Date: Sun, 11 Jan 2015 23:55:06 GMT..GIF
89a..%.......................................................}....
<<< skipped >>>

GET /service/player/player59/btn_rept_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "548ecb6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:08 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 2148
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "369656e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:08 GMT
GIF89a8.%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*\......#J.H.b...3j..1.. .,\
......]...d..../...I....-\l1$...w.v.......:l*.)....Pe<A...!*K*.be..
.cv.U).... :..}..M..n..m.b..O..t.c...2s.5*...#J.....aG\.r#.. .2e...\..
[email protected]..#.![4......#..)..d..}....u.Y.k
.....tK.].[......2...........F)...X............'-.BM2.X....P....>..
........"@..v...%M@R.".8.!v ....8....BH..Y....S....%..cI.l.B.@.)@.T...
..L....e....AI.9J.r..4.q..`....d....h.2K.O.../.LPAF.h.E.!...49.1.6..P.
.cza........<2..J(..-=...F....9I....K0r../....................?`...
..2C&3l4C....B8{0..!y...I...*.-.....D...[...&kl.-&.m{K .......1H...[-.
......z.....r.....)./)Q...x..(.DB...6L.'.|RB..S<q.x..C.?..E.?|..L..
...J.#L.4..../[[email protected].?........&....4...4..D.A..L-u!z..
<<< skipped >>>


GET /stat.php?id=3325108&show=pic1 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: s85.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:13 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:13 GMT
Cache-Control: max-age=5400,s-maxage=5400
X-Cache: MISS TCP_REFRESH_MISS dirn:2:672462476
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:13 GMT
X-Swift-CacheTime: 5400
Via: cache1.de1[656,200-0,M], cache10.de1[657,0]
2fe..(function(){function k(){this.c="3325108";this.R="z";this.N="pic1
";this.K="";this.M="";this.r="1421021053";this.P="hzs2.cnzz.com";this.
L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_c
nzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};
this.la()}function g(a,b){try{var c=.[];c.push("siteid=3325108");c.pus
h("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.refer
rer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator
.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Ma
th.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join(
"&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeU
RIComponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(
)..245d..,this.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),th
is.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),thi
s.da(),this.qa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){
g(a,"i failed")}},oa:function(){try{var a=this;e._czc={push:function()
{return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:functi
on(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(va
r b=0;b<a.length;b  ){var c=a[b];switch(c[0]){case "_setAccount":e.
_cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1
]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_auto
Pageview=c[1])}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("und
efined"===typeof e._cz_account||e._cz_account===this.c){e._cz_acco
<<< skipped >>>


GET /static/common/images/zhanzhang.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zhanzhang.anquan.org
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/png
Content-Length: 5075
Last-Modified: Wed, 03 Dec 2014 14:46:30 GMT
Connection: keep-alive
Expires: Mon, 12 Jan 2015 00:04:14 GMT
Cache-Control: max-age=0
Cache-Control: no-cache
Accept-Ranges: bytes
.PNG........IHDR...|.../.....!.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:12842C66B96C11E3B1D2FC24
D7F17EB2" xmpMM:DocumentID="xmp.did:12842C67B96C11E3B1D2FC24D7F17EB2"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12842C64B96C11E3B1
D2FC24D7F17EB2" stRef:documentID="xmp.did:12842C65B96C11E3B1D2FC24D7F1
7EB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......GIDATx..\.t.......! K..... Bd., ..,.
.........r.xT.*.[...*...ZE.E.., ..a..v....v.^.7...7....d...=gN.Y.....{
..L..5~Wo"..[.E..,...{..~............4I.\.E1.$.=.5..~....<.^...Q...
^.R.s.....:....DJ].7_.Q......Q ...C*....MX.......v..no.......g.fl"....
.S%MJ'.w...y... c..F...{.cg...'Z.-i...5...K...K$=...IU.........FT.b...
......Q)..O.L......D..K..~<H.;7......jS..U...9....QR%AI...T"*w..{..
B...............I{........g;|..8..g...".T....a..>.`.a).^Y^t-..fE..n
...........E...-......`.....q...C.&0!....r.........(.H....8~..kk.uI...
.QY.m...o.IZ.E....Kr.|..eP...V.]...n..\n. ht...G..i;..k.3..SPb.{..
<<< skipped >>>

GET /static/common/images/zhanzhang.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zhanzhang.anquan.org
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Mon, 12 Jan 2015 00:04:15 GMT
Content-Type: image/png
Content-Length: 5075
Last-Modified: Wed, 03 Dec 2014 14:46:30 GMT
Connection: keep-alive
Expires: Mon, 12 Jan 2015 00:04:15 GMT
Cache-Control: max-age=0
Cache-Control: no-cache
Accept-Ranges: bytes
.PNG........IHDR...|.../.....!.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:12842C66B96C11E3B1D2FC24
D7F17EB2" xmpMM:DocumentID="xmp.did:12842C67B96C11E3B1D2FC24D7F17EB2"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12842C64B96C11E3B1
D2FC24D7F17EB2" stRef:documentID="xmp.did:12842C65B96C11E3B1D2FC24D7F1
7EB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......GIDATx..\.t.......! K..... Bd., ..,.
.........r.xT.*.[...*...ZE.E.., ..a..v....v.^.7...7....d...=gN.Y.....{
..L..5~Wo"..[.E..,...{..~............4I.\.E1.$.=.5..~....<.^...Q...
^.R.s.....:....DJ].7_.Q......Q ...C*....MX.......v..no.......g.fl"....
.S%MJ'.w...y... c..F...{.cg...'Z.-i...5...K...K$=...IU.........FT.b...
......Q)..O.L......D..K..~<H.;7......jS..U...9....QR%AI...T"*w..{..
B...............I{........g;|..8..g...".T....a..>.`.a).^Y^t-..fE..n
...........E...-......`.....q...C.&0!....r.........(.H....8~..kk.uI...
.QY.m...o.IZ.E....Kr.|..eP...V.]...n..\n. ht...G..i;..k.3..SPb.{..
<<< skipped >>>


GET /stat.htm?id=3325108&r=http://VVV.941pojie.com/&lg=en-us&ntime=1420734132&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=1115328117 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hzs2.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..



GET /9.gif?abc=1&rnd=418977394 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:13 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DdrU2mcCASU5EL3gIDWK; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.mmstat.com
Set-Cookie: sca=74890201; path=/; domain=.cnzz.mmstat.com
Set-Cookie: atpsida=f8b93465f757282d2188cc64_1421021053; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DdrU2mcCASU5EL3gIDWK
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /9.gif?abc=1&rnd=597884745 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:13 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.mmstat.com
Set-Cookie: sca=06f3d268; path=/; domain=.cnzz.mmstat.com
Set-Cookie: atpsida=53742cc50c4815cac571f970_1421021053; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Mon, 12 Jan 2015 00:04:13 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=ff05DajU6X
YCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.m
mstat.com..Set-Cookie: sca=06f3d268; path=/; domain=.cnzz.mmstat.com..
Set-Cookie: atpsida=53742cc50c4815cac571f970_1421021053; expires=Thu, 
09-Jan-25 00:04:13 GMT; path=/; domain=.cnzz.mmstat.com..Location: htt
p://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy..Expires: T
hu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cach
e..GIF89a.............!.......,...........L..;....


GET /9.gif?abc=1&rnd=588029971 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive
Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; sca=06f3d268; atpsida=53742cc50c4815cac571f970_1421021053


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: atpsida=53742cc50c4815cac571f970_1421021054; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Mon, 12 Jan 2015 00:04:14 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: atpsida=53742c
c50c4815cac571f970_1421021054; expires=Thu, 09-Jan-25 00:04:14 GMT; pa
th=/; domain=.cnzz.mmstat.com..Location: hXXp://pcookie.cnzz.com/app.g
if?&cna=ff05DajU6XYCASU5EL1h9oQy..Expires: Thu, 01 Jan 1970 00:00:01 G
MT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!...
....,...........L..;..



GET /img/pic2.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 431
Last-Modified: Mon, 02 Dec 2013 05:46:13 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:14 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89aP.........eee000...........................e...00...0...........
.......................................!..Powered by AFEI.!.....S.,...
.P......` .di.h.....p,.tm.x..|....a..._..1i,...&3.\2...v{.-...xL.s.g.b
-h...5......;.=g......".......m......................m..............."
.........................".......m..............."..w.....u.n..m......
....".....H......*.Q.....#J.H.b...3j..Q... C..I......9.\)b...0c..I....
8[........;....


GET /img/pic1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 428
Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:14 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89a.......f..3...33.......................................!..NETSCA
PE2.0.....!..Powered by AFEI.!.......,.............I........08bX....d.
n...CS.3......_..`..H..H\8....)...S.b.UX.....(...r.L....tb]&"......#..
.o.V.a..D..o.V.a..........D..o.V.a..........D...........!.......,.....
........I........08bX....d.n...CS.3......_..`..H..H\8....).:[email protected]...
x ..........D.| .#.u.a....n~D..[....n..........D..[...n..........D....
.......;....


GET /img/pic1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 428
Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:14 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89a.......f..3...33.......................................!..NETSCA
PE2.0.....!..Powered by AFEI.!.......,.............I........08bX....d.
n...CS.3......_..`..H..H\8....)...S.b.UX.....(...r.L....tb]&"......#..
.o.V.a..D..o.V.a..........D..o.V.a..........D...........!.......,.....
........I........08bX....d.n...CS.3......_..`..H..H\8....).:[email protected]...
x ..........D.| .#.u.a....n~D..[....n..........D..[...n..........D....
.......;HTTP/1.1 200 OK..Server: Tengine/1.3.0..Date: Mon, 12 Jan 2015
 00:04:14 GMT..Content-Type: image/gif..Content-Length: 428..Last-Modi
fied: Fri, 16 Jan 2009 08:10:47 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=5..Expires: Tue, 13 Jan 2015 00:04:14 GMT..Cache-Control: m
ax-age=86400..Accept-Ranges: bytes..GIF89a.......f..3...33............
...........................!..NETSCAPE2.0.....!..Powered by AFEI.!....
...,.............I........08bX....d.n...CS.3......_..`..H..H\8....)...
S.b.UX.....(...r.L....tb]&"......#...o.V.a..D..o.V.a..........D..o.V.a
..........D...........!.......,.............I........08bX....d.n...CS.
3......_..`..H..H\8....).:[email protected] ..........D.| .#.u.a....n~D..[..
..n..........D..[...n..........D...........;..



GET /img/gif008.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 565
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/gif008.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a ..........R.......!..NETSCAPE2.0.....!.......,.... ....._....m.
..PZ.D.6.N...}Q)[email protected],.....|.... ..K.v.....-yJ.R6;....Tx...Y Y5i
......i...9......F..!.......,.... ....._........PZ.D.6.N...}Q)....M..1
@.i,.....|.... ..K.v.....-yJ.R6;....Tx...Y Y5i......i...9.....|E..!...
....,.... .....`........PZ.D.6.N...}Q)[email protected].<..h..0.
d..U....Q6S..U.5..r...R9i....[....r1.a.7......!.......,.... ....._....
....PZ.D.6.N...}Q)[email protected],.....|.... ..K.v.....-yJ.R6;....Tx...Y Y
5i......i...9.....|E..!.3Reduced 73% @ VVV.raspberryhill.com/gifwizard
.html..;....


GET /img/zsf.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 85308
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/zsf.gif
Last-Modified: Thu, 14 Aug 2014 07:47:38 GMT
Accept-Ranges: bytes
ETag: "089c3494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..Z....9Z.(\.,e.4i.<`.Lr.Uv.Gk.Ae.:s. f.5j.;r.4k..l.,h.4m.8n.
2m.1g..p..q.5p.9q.=x.4s.;u.6x.<x.5u.:v.6x.:y.Lu.Bn.Bt.Dw.Q{.Qw.Eu.H
v.Dy.J{[email protected]|.I}.R}.C~.H..Y..f..r..v..l..w..i..z..E..L..M..Y..U..\.
.R..Y..T..[..S..\..Z..C..K..M..N..P..S..X..P..Y..M..N..T..\..^..R..Z..
^..e..a..h..d..c..k..e..l..k..q..t..y..v..`..b..i..d..j..`..k..a..s..y
.._..^..l..t..{..{..l..d..j..j..t..{..u..|..t..z..u..y..~..v..|.....~.
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..............CWz!.......!..NETSCAPE2.0.....,......Z......9....8..."&l
t;H..6....4.."...1b.hp.G...U...d... n....H...}.H...o8.e{.......=...g..
.....Si..B.=.:..P......S.R......S.2....Sw..P..v..9.(..S..-J.....r.{.8.
N...g..m.....'..-n.l;....x..l.!C.)...i.7cN.m....q&.M;.3..W...[&hh....-
<8...qos.:8.m.o.|.M.u...O.........gk..Z..'..7.pZ....^l).f.....t....
...tRC..._H$...}.zd.I.m.........N....Z....b..5....x&.g"A. d...\..A..'"
.".TcA..h.C...S......7.y..7....I..d.KF9..U*.%.O.)..\~.e.^.i&.\N...d...
!.$..cT9..`.$C...9..c.:......L.y.......L..0.h..*.h..:..".VZ)....i2...)
.........."..\.j..(..%...L"...H2......F.*,.......J.%.n.....b.".,.k".*.
.%.h....^.........,.M..$.H&......$.. . r.%...H..L.l"q...".[r.%.3.p.q2.
...S....X.1..ol.....g..../"...2"F....5.L..8..3.H....<[email protected]
<<< skipped >>>

GET /img/bfzs.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:30 GMT
Content-Length: 33612
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bfzs.gif
Last-Modified: Sun, 02 Nov 2014 03:33:07 GMT
Accept-Ranges: bytes
ETag: "80db95b74df6cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<.......ppp............!!!..................666............
............HHHfff...ZZZ,,,...:::~~~ttt......ccc...___................
........111............@@@...xxxnnn...```...&&&{{{.........hhh........
....lll888\\\zzzjjjH.....kg........k...0.gk.....C...kL........p....(.r
.....M.kk9.........&&k.....&%.......DDD.BB....XXVVV...k.j......XT....B
?...........%&.?B.........TTT.TX......PPP...........*LLLUUU.X..&.CCC..
..B.===..........}}???VVV$$$...***........:......RRR...333...#.g.e.GGG
......(((JJJNNN..LD..KKK......SSS...&..........P...&.&B-.444FFF=..B.A.
.....OOO...1..B..<<<A....H...............X>....///}x...?.x
}.........BBBX.W.....[..5......&..-.}...}Y..}$5..X....?...............
....{.}................................}.{............................
....T...XXX...............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacke
t begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x
="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/
06-14:56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999
/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpM
M="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/x
ap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xm
pMM:OriginalDocumentID="xmp.did:3B42D090C64AE41185F6F1D2E9540C9C" xmpM
M:DocumentID="xmp.did:81963A304ACD11E48F8BAB284EA742E8" xmpMM:Instance
ID="xmp.iid:81963A2F4ACD11E48F8BAB284EA742E8" xmp:CreatorTool="Adobe P
hotoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID
<<< skipped >>>

GET /img/yds.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:31 GMT
Content-Length: 101408
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/yds.gif
Last-Modified: Thu, 13 Nov 2014 07:46:17 GMT
Accept-Ranges: bytes
ETag: "802a13e815ffcf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..[.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.............................................q..c..4cp...d......c.....
Q.0.l..p...!..NETSCAPE2.0.....!.......,......[........................
......................................................................
...................................!..!.."..%.."..%..(.. ..1..3..5..1.
.2..5..6..<.. ..?.#$.'(.('. ,./1.34.68.;=.###,,,222<<<.B..
E..I..E..L..Q..Q..U..R..U..V..X..Y..Z..]..^.._..c..i..e..g..k..m..q..t
..|.>A.@?.BE.FI.JM.NQ.RU.TW.VY.WZ.Z].[^.^a.^a.be.be.fi.fj.jm.jm.mq.
nr.qu.qu.vz.uz.y}.z}.CCCKKKSSS[[[dddllltttzzz}}}...... ..!.."..$..!. #
. $.!&.#'.$(.$(.%-.)*.& .( .',.(0. -.'..)/. /.,0. 0.,2.-3..6.14.09.34.
/5.17.28.38.37.39.4>.8<.6>.9|..}[email protected].;[email protected]...............
......................................................................
..................................................................
<<< skipped >>>

GET /img/2014052276129177.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 832
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/2014052276129177.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aX..................!..copyright. 1996 Charles H. Tupper  All rig
hts reserved. not to be used on another graphics download site or on s
oftware.  All other uses permitted.  hXXp://VVV.cyberspace.com/tup.!..
NETSCAPE2.0.....!.......,....X.....*.............0....H.........6.L...
.....? ..!.......,%...j...................<....H............!......
.,W...j...................<....H............!.......,....j.........
..........<....H............!.......,....j...................<..
..H............!.......,....j...................<....H............!
.......,....X.....*..................H...........L.........(..!.......
,1.........!..................H...........L...!.......,c.........!....
..............H...........L...!.......,..........!..................H.
..........L...!.......,....X.....)................n.H...........L.....
..>S..;....


GET /img/046bt.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:36 GMT
Content-Length: 6215
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/046bt.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aK....!......U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...
........U...........U...........U......$..$.U$..$..$$.$$U$$.$$.$I.$IU$
I.$I.$m.$mU$m.$m.$..$.U$..$..$..$.U$..$..$..$.U$..$..$..$.U$..$..I..I.
UI..I..I$.I$UI$.I$.II.IIUII.II.Im.ImUIm.Im.I..I.UI..I..I..I.UI..I..I..
I.UI..I..I..I.UI..I..m..m.Um..m..m$.m$Um$.m$.mI.mIUmI.mI.mm.mmUmm.mm.m
..m.Um..m..m..m.Um..m..m..m.Um..m..m..m.Um..m.......U.......$..$U.$..$
..I..IU.I..I..m..mU.m..m......U...........U...........U...........U...
........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U.
..........U...........U...........U.......$..$U.$..$..I..IU.I..I..m..m
U.m..m......U...........U...........U...........U...........U.......$.
.$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U.......
....U......!..NETSCAPE2.0.....!.......,....K..........H......*\......#
J.H..@`.1.$...9r....7..........cI........1........Ar.^.#...A0AR....]L.
K......Ux..!#.u$ ..........-..|.`f........ )R....I./1..A.(... .R..ML..
>|.....u.HP.J....s..*3.d..&.v....FO22.N...I.0A.4........r.R........
.Q.{`..{..n-p21t'.~4....@*..o...#)[email protected]<.r.....{`..!...|
..'^Xh.5[r....K..T.r..4. .......f\X.....e..QJPa..A....GC.(".fU...mEe.Z
K.FHf|.x..A.U!.a...J,iD.bo..]P.l...@...}$.(..3.W.MK.w.w..gV...&.._...A
.EG.B....}.t...J..P..1..L`.....6....F...!.......,....K..........H.....
.*\......#[email protected]``.%.E.#1r.......(...m.(0#I..<.$........C.
..I@:I....&.....l...O.:..C.. :.......).. ........H.b.8..V..H.$G.-I.f..
.*p%).Uk....%9.Z..........:...%..,I..L.......%...O.....jw......;..
<<< skipped >>>

GET /img/icon.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:36 GMT
Content-Length: 409
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/icon.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.............r.......sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<....IDAT8Oc`.........S6........
.K.........."......)o....mj.3.*.O..\.........w..wZ.....US.6......_s...
p....='R...X.?i.......?.|...2......h...#..k....=.............0 4D.....
2u......c.O>[.?a....9../.:........R...K....f...A...3%.c6...........
CK.2P.F..zs8..|w.p...0...c....m..a..5.........p.d<..?....IEND.B`.font>....


GET /img/zs.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:36 GMT
Content-Length: 108348
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/zs.gif
Last-Modified: Wed, 31 Dec 2014 14:17:59 GMT
Accept-Ranges: bytes
ETag: "80c52f94425d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?....(...
...H.sK\....?...h.yF:v..9.F.&..K.ec.t.U....S......#..N...U .....#.."W.
.........p.p..y.Z.`....q...C...".Tk.K.w.0..889.W....r...n=\.......k.E.
.@=y.. ..UV..>..&..ci.. X.UL....K.{7.*d.S..*V-M2.%V.*GCO....b.O.*/8
z.pps.!....Q.P...y..x..QM.3F.(..Sw.M.4..).....4...Tk 9..=(...g.....Up}
h@:..\..h.......D..`qB. ...<P9......0.EF.y...h...n.F.@!.S|..F...:.n
.M3(.....>p.4.p..."nO.*..Nv..Tf.v.n.)..-........Tvc.Uw...C~B...Q..c
.5.P;~u.>.9...."..........D:..Q.Q.....A8?.r.k.....tUY5F9.c..|..._c.
k.Q..b.I.....1\d..9..G...jL......de,K...][....ET.W%~...W.%...7.U.. ...
P.b...T.../......T/p.f...*..>T~..?.Z.....A..S3.........h.._..X..gsG
j;Q..=2....^IX* .$...la.C<.)c#n....O.I.D.R.k.vg...1.).I....?....dX#
..... =....._..C..._.T.....9Q.....O.....>..T....*#.....Q...EIE...yj
;[email protected][email protected]..#....^)3K..N(..
QKX....xv........#V*...p...I.O..]...f....#FgeU.$...[M.../....I-...
<<< skipped >>>

GET /img/zaoma.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:41 GMT
Content-Length: 20248
Content-Type: image/jpeg
Content-Location: hXXp://VVV.lszwg.com/img/zaoma.jpg
Last-Modified: Mon, 22 Sep 2014 02:36:08 GMT
Accept-Ranges: bytes
ETag: "01cc4f6dd6cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
......................................................................
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?..S.....(......d..I4..vr.#...A.g...].......N..
..mm5.vV..Ii.......c..9.Qoc..<K..l.......$......../.....i.:...on.oo
(.|.fU<.2T.'..E....~!R.*./...........2....j.Y....G1 M"...I.\z.:.b0.
.....D...... .j.].......\u.....E.9^e.q."....f........W.-l.w.S.:.....I.
...%H...../1...*..;......dR..5...,.B.aP..>.....s.........8*..}..lZ.
..CW..[..[(W.I!8.;c...0............B|=l.~..{......N.c.^XrI......*?....
....on.o...jO..~m...?...d..X....Ib[......xc^.`7.Er.2....}...(..O....MW
...d...g.....e..rH.$...............'....8jj.gd\......J....^..k...x.U .
...X..2A.J.hsK.[.x.pN.Z....}.....K..........am..i...8.3.. .Q...K....O.
K..Ak..........t.|...W........W..U.J...<9.TvK.E..}.-C..^....j....Y.
c.&.28D........(J..Tq..UU..QN..W.T...d..P.mn<).......|n...#.z.H..R.
>..J.;2U...Zh"..{x..iY~.........a.)Fi...,...>..h.K..o..D.0J.i...
[email protected]<.9....X.ck.T...P....]......m...{^.....G...7.T.'v=.....c0
<<< skipped >>>

GET /img/logo.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:42 GMT
Content-Length: 4437
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/logo.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..F....a..a..b..c..c..d..d..d..d..e..e..e..e..e..f..f..f..f..g..
f..g..f..i..m..n..k..p..s..w..t..}..{..|....d..^..j..g..j..l..n..r..s.
.t..u..u..v..x..y..z..{..|..}..~......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......F.....#..H.....%.\......#J.H.....!:......  J
P.....(S.\9q.I.....xL..r:`....g../=.......H3>P.r`[email protected]....
..`...{u...Q.V%.....Y ...taZ.;[email protected]....|.\.......#Kf....$.3K6r
.a..X14.C.4i.Yw.........c.p......7..."......>...H......4hd..`..\...
.V...i..%.....z...3..._...'1b.....}.`h.C.V...u.P..V.........%.,!..A..^
*....p..6..YyB.; l..<.YdS.)....,..b3.. ..,..F,*vaK.-.pK..^....UgI.`
...*_Y..<.\.AxL.(.;;\..r;P.....(..4.I#...S.09.P..z.b.#...b @:.W..%#
.k.E....qh.2.......a.&......X....`..MH.U..f..b.O.c.1..P...L.B..-..B.*.
.K..a..;...ZW ....]A...V..I*.........t."s....c...m`.M%Vt....h...0B..e.
...)^...)......)`A\9i%2]a..p.j....!{...Ze.%....k6....6.....fKb...Zn.(.
.j....."........K3....@\...&A.qNp.m.1p.[..&?.......C...v...!..j.'.
<<< skipped >>>

GET /img/bgtitle.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:42 GMT
Content-Length: 3274
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgtitle.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a~.#....Z........W..~..|....Z..=..............B..o}....'|...."`..
..%T.....q. x..|.....{.......:........... ...|....kM..........!...~...
.!.........{............. }.... ......x.....{..}.......... ...........
.|....".. }..........G........"......{........z..y..z........\.....M..
z....................x....!^.......!...{........T..Y.......m..:.......
.p.....!..<..5........"...L....=o.*K..v..v..y.1.........i.!..... ..
H..#....._..o..6..L..N......{.6e.#.."..!..`.. ..l.."~....K.. .........
...t..K..~....*n.)......L..z....].."..>.."z..y..........8..Q.....-l
....bn....Cu.0...|....8..;L....?.. .....G............k.'..<........
......\........7..#.....J..Li..o..w....(..*..x..}..m...m.&W....$..%..&
..LQ....O~....2u..w....[.....8i.%k.$..&..... .....)........... .......
..}...........z.... ,....~.#......(.$H[.8l..X......#J.H.....3j...... C
..I....(S.\.....0c...h..l..%...]-Cz.<;.....H.*].....P.J.J....X.j...
...`...K....h..]..j.6...K..S)f.~]{ ........L...... ^......#K.L.....3k.
......C..M.....f.KG*..p.$.9......s...........N...... _.......K.N......
k....q...L..v..%p.....m.......O...............(....h...&....6....F(...
V..mK...;..b.3*H........(....,....0.(..4.h..8....<....@.)..D.i..H&.
..L6...*.0...\.....p..W.S..O.)..d.i..h....l....p....C,..#.ly..q......*
....j....yB=...'9..#...NJi=.f....v.....*....j...............*....j....
..................J..D>......F ...Vk...f....v..... ....k...........
... .....-.\\...= ..=....=..L...'....7....G,...Wl...g....w... .,..$.l.
.(....,[email protected].../[email protected]'...L7...PG-..TWm..Xg...
<<< skipped >>>

GET /img/qingtian.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:42 GMT
Content-Length: 48579
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/qingtian.gif
Last-Modified: Sat, 27 Dec 2014 14:54:36 GMT
Accept-Ranges: bytes
ETag: "05ec8e521d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
........................................................[.............
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?.....-...P.2O.T...4.NU%....<.. .R..]q....\.
.^F.|;...g.....,.)l/. ...<G.K....=....r.a......(..Z?..)U.G.K...1.Td
[email protected]..>.....c...X.....O......b....D.w.Q.cW*\..{.....(.....
b.......YZ.K....yc..%....2$.F.. ...<..Wfv..a.........TY...{.. ...&l
t;..E..a.........TY...{.. ...<..E..a.........TY...{.. ...<..E..a
..J....H..]}.%..sV..g..k~..Lr@%} .t..>3......1.....(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(....;O...h...K.. ..l...p|.......#..`...1?a..c..=j.....P..
x.....*....a...i...........M.....2O.f..?.O.Q...k..".x.2..e_..O.......~
.^=.....^%.$......Tz...9...>....X.m...?.f.....w..Z...f...jy.._x....
.....?.z/...{.>8...h....h.T.........PY..\.8.3....Q:...wg.a.a2.$.Q.g
%.ROW...[[email protected].....)-...J.....#..}fJ..<.6..1ta....
<<< skipped >>>

GET /img/bg.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:44 GMT
Content-Length: 1065
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bg.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3...f..e..d..a..`..Rn.Je.Id.Gb.Mg.Oi.Qk.Pj.
Zw.Vq.^|.Xs.\y.Yt.`}.a~._|.f..Fa.Hc.Kf.Nj.Lg.Pl.So.Vt.Tp.Yv._~.[x.Zw.c
..b..^{....!.......,...............H......*\.0..l..J.H......i...c.. C.
...d.~(S.\..%.m0a.|...M..r.....O............&=.....G.5e..j..X..... ..`
........h..]..m..p...;7..r.....W.......L.pa{.. 6.......I.L..e..2k.....
..A..=.....S.FM.....b..G.....r............;w.... ........I.N.zux..k..]
;.........|...;....


GET /img/bgheader.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:45 GMT
Content-Length: 1978
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgheader.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.........................a}....BV..........Yu....Rk.^z....Ja.Nf.
=P.......... 8[xxxTo.......]x....I_....w..TVU...F[.d........3Ak...9M|.
...........[w....Vq.:Jw......IJK# ESm....e.._{.Uo....b..hhi4EoG]....OU
[email protected]....]dw
............Ys..........o~.............Pe.9Et...DX. <]...Mc........
..Xt.........._|.Pi.\i....Nj.......Qg....7Jx...'4Q...Jb...............
.........................Wq.b...................................... (C
..................Og....Zx............................................
........\y........................................Ph..................
.w..\a_`ab...1Dk............L_........................................
...DS....f..............\u.Kd.~~}...\s.sus>N}......]m.......Ql.....
.................,[email protected]...... C..I
....(S.\.....0c..I....8s...3e...]...a....s.`.....8."....S!.......;v.L1
.K....h..].....p...K....x............L...... ....c8.#.A..l...\0..u.R..
...104$H..j.......3..m.v...s...........N...... _.......K.N......k..=..
.:n.........i..O.v.....u..............t...k68...{..........D(...Vh...f
....v... .(..$.h..(....,....0.(..4.h..8~H..;..c;.....D.A...B. )...!.uD
iC.0L&......T....D...C.......D.A.l....p.)..t.i..x....|......*....j...&
....6....F*...Vj..i..............o.I.....H..Dd.S....U..0.E.u...5?x.F..
. ....k...&....6....F ...Vk...f....v..... ....k.......J....J......k..i
..f;D...... ..O...V]Xa..Dx0....1D...b...[.H..w... .,..$.l..(....,....0
.,..4.l..8....<[email protected]#=..IS....o|...[.K..4c...H....?.%
<<< skipped >>>

GET /img/bgnav.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:45 GMT
Content-Length: 3645
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgnav.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aa.N.............................................................
............EQ.Tk.Ma.CT.8Fr.$;[email protected].;M}a~.Zt.Tm.Ri.N
e.DW.CW.9Jxb..]x.Qi.H][email protected]}....Xv.c..\z.Yu.Xt.Vq.To.Jb.3Cme.
.d..c..^{.Zv.Zv.Rl.E[.7Hu5Fqb.._|.Zw.Yv.Xt.Xs.Vp.CX.BV.>Q.`}.^z.^|.
Zu.Uo.Tm.I_.AU.Ka.J`.BV.)6U`}.Sg................[z.Le.Kd.Sp.La.{|~....
.....TVX..............................................................
...... ..)..2..6..7..>..C..J..S..T..o.............................!
..&..&..(.. .. ..,........5..6..9..9..=..>..[..]..]..e..g..m..p..q.
.|...............................................0..6..G..T..W........
......................................................................
......sqo.............................................................
....................!.......,....a.N........2d..%4.(....C a..xH... ...
...... C..h... a:Vq...........H.4:^[email protected].(..H."m...P.O..e..'..U
..$x....'D@.....,[email protected]?..K..].(....e...b.......%..|..C..#)R..<
..e..3G.......C.....\('&.Y....&P|d..BE./].x..{..............._.{w...1k
....j.W^....F..[b ..1e......7.........O.~|.....2.I.-.....=T.B.DXaDc0..
E.b.`....a..f.....vx.. ..a.$.!..(.xC..ZX.......*....O.. .G..C.c.......
.6..0..I6.d..<)..TVI%.On#N...1F......L=...b.Q.-.p..&.....t.i..x....
|...&.<2I!.x ..$....)...!.x"...T....f....v....^....x..1...C..f!....
.a.,.$..'...H'....... .... J([email protected]."..B.).| ....k...
..n(..B."..2L.t..D.)..C.!x.K)..R.1......'....7....#..*....)..........&
gt;.....4.J#.8..*,....0.,..4..r#&......Q..?dPm....H1.<.H1H3...P
<<< skipped >>>

GET /img/bgh.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:45 GMT
Content-Length: 5439
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgh.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.......Wr.Jb.\v.Gb....Id.To.Yt.Pi....Mb....Nh.`}.H^.Fa.Me.Yt.j..
Wr.Yv....t..DY.Rk.z..k..^|.Nf.Ys.Nf.Sl.n..m.....a..|.....Ok.^{.q.....P
j.{..Nc....v..^y.Rk.f.....CX.H\.Ri.o..Xo.Un.J`.Qe.f..Vt....Yu.Rj.G\.k.
.F[.Xo.Pg.CZ.l..Tk.f..d..b..b..a~.c..c..e..d..a..`}._|.c..\x.c.....e..
^z.Xs.d..[w.`{.Zv.^{.]y.Kf.Je.b..]z.\y.Yv.Rn.Up.Vq._z.`..`}.[x.Tp.a|.b
..Mg._|.So.f.._|.\x.Up._~.Hc.Nj.Zt.[w.a..Lg.Qm.Pl.Uq.Pl.Xs.a~.Hc....Vq
.a~.~..Tm.e..Sn....d.....Vr.Mg.Zw.}..Zt.c..p..b..^z.Wr.d.._{.`{.t..Ni.
[x.Lf.Vq.Wt.Xs.Vt.Lf.^}....w..x..e..]{.q..Yv.Rm.Zu.b}.Up.[u.e..p..e..[
u._{.......]{.Xu....Qm.^{.Kb.b..]|.]x.]z.Rn.Rl.b..Og.c..c.....Ur.c..Sn
....l..n..h..u..To.Qh.Pl.......]z.Ld....~..Tm.s..Vo.Zv....g..`~.w..\w.
l..x..c~....Xt.Od.y..]y.Qj.K_.b.....Kc.[v....g..f........Rn....`..o...
..Vq.......!.......,.............t...C."..).7...#i..Q.D..4......./....
...K.x..u.w...X|.0.h.....S.P....M3.pAS.&...vbH.E&.).1....#..G.}s.5MQ.H
g....)E.D.vL..../#..5`.jN.d.|.......S.-.W...U...........eZ..."..I^.XI.
461....sF..I..\3....9.T.E.....^.W-../Jh...{.U.................n.../'~.
Zv.S...........g.*..y.Sd.g..;z%.....^H<.].'.~.Y...L......h...|....4
X...N.`..>...\(......a&v.(.....!.*..H....bzU......P..9.h`.>.h!..
..a......H..$.?6...Q*[email protected][email protected]'.R
..g.|.)..q.Z.......{...".8.&.yFJ...ZJ...(*).......vjj..B..>....@G".
...v.:E...* ....k.Z.........Z..c....l..BK...2.,~.2....&k ..z.n..r....*
$...:K.T..K ..hQE.T.kG.........o..2r...../..v........`.;...?.o..7.q...
L...3...&.|..*....`.{L..t.H.........0.:..3.R.}s...|.4Z....I....M..
<<< skipped >>>

GET /img/gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:46 GMT
Content-Length: 23328
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......'.............sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<..Z.IDATx^....VG....T.tv..O./s2
.y..5..i...A00......j< ........b....2X..l...v.....,6x_0...,6`6.6^.J
......s...........O....D.._Fd&U..,.?cL.\..........P.?.).....2...y.....
..)....o./....E|DK.*4).._L......./?.T.w.....,....7z].Zj..r...\.o..o.?&
gt;.y:......c...Bu_...~..|..q...J......s...X.....R..{G[.;.;.....r...OG
O....T...........h.ok.....h/[email protected]...;.G.......9..ON...??......./.
.e....~..S.......Nz..$.....=..g..S....#..x..?W...,...y.c..8..~.....>
;..~}..W.t ./.u. .%..c.#.%lY..O...Y|.....N}E.....{.....&O.s....G.#G!.%
y...!...0t....C.N...........=.O.......=. .z.~..i......:..l..,.........
......=w@......}..^....k..w..e..o~.s.7..q.............;X..w'....[..[..
....lX.|."....R,.N.;G,F.<.....RX.=..a...|.,...a\"3.7...X....^..r..M
..x.....T0..g.. .B...i.?BlE.K......_..Mx..............1...c=....o.....
...{.>9..<?.-.1..g...Rr.j.......C.....{..va....:}.....;.._y)cm..
.I...h...[..z.6.K......1g.......cd,..5..n!.._...g...,....'N..{..$.....
..B.....'.:G...7!..q../N6......<./.7.V.z.h.0.{.0..?..q.....s.~v....
?....t.>@.j-'....o.E.G?w..V....d.....gP......x............O.=D>.
..D..q....`.w|q.l.....[..^........../OO.../w|...................>..
.i0.....1.k.U1N#...._._"..s.I._.|..g...O.4... .(>.n.&}..!..b.4.`..N
 >..!>....8.qs8..R8..M.'.......?..Cxa.6..<..{.....C.w....(..~
...KY*..[....|[email protected]..'a...7.H.s.<.C.....y...._.:.../a...I^....
.c.W<.....<.1y.|..).........'B>...V<.=.4..G.?....YN.&l
<<< skipped >>>

GET /img/1gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:47 GMT
Content-Length: 56287
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/1gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR..............</.....sRGB.........gAMA......a.... c
HRM..z&..............u0...`..:....p..Q<...]IDATx^......u........d%Z
.d[.,..l X....-K.eI.D...#..1.x.....b...6......9..sN..........F.....} .
uOOOoOuMW..{!&...?m.m.m.m.m.m.m.m.m.a...\...=s..p..W...^...]..'.....|.
..........b.;&X._ ...3...}e..x0..1..c8^p$.{.Y...$..........y|...`..q..
.x.mX....<.&....x......{...m7{.`y.M1o,....%.g.5.....9c./....C......
}...8`^Z4p..o.6..T|?...I...k..V4...M..h%\........>q.M.-.5..n.m.[.@.
....................[.....r.....y....JMe.T...)....e......5.......O...p
R.4.........[.N......M...|V.h>..9...vV.....{Z...m......%....{..`.Ey
...C...a,.i...e..,.t\..v^..ZvU~........_.].?.........a..9.........tM..
...........g.......)......?Y.Y.g......?.].?.....[w1..p................
_s^~..9...0...wW...3.......z..... .q.]y....[W.......O[@[@[@[@[@[@[@[@[
`.......#..... ...B./Z(.....ys$o.,).=]...#O..._..b .`8....tRn...o.l,..
nk>[email protected]/..m='.ay..9c.....B...........a...>.
 .........KX^..a..;i......SK...ZvE~n9..F.t.5.....0..s../..Y...........
$?..".{..'...]....>...h;.........,i......v....<.......6k......rZ
.C......w..B;..;....:......5....:#...,...'....'.@8<................
...n....'r.....s.,im.b(..sg...Se..)2{*m...>......Se..i...<...Ny.
..xP.h7..n.28.......@*..2H 4P.....w.1@.....`[email protected].$..@...
.G..~....!..c.6B.':..'...>...h...Fn.D`....}..&.........Na.Q.4....2.
...y......... L0......h..h..........m{...........-.'`..&,o.r.....x};..
k8&?.z\.t.i.q......|.....k....k{....................y..9q..._.F...
<<< skipped >>>

GET /img/logo.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:49 GMT
Content-Length: 4437
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/logo.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..F....a..a..b..c..c..d..d..d..d..e..e..e..e..e..f..f..f..f..g..
f..g..f..i..m..n..k..p..s..w..t..}..{..|....d..^..j..g..j..l..n..r..s.
.t..u..u..v..x..y..z..{..|..}..~......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......F.....#..H.....%.\......#J.H.....!:......  J
P.....(S.\9q.I.....xL..r:`....g../=.......H3>P.r`[email protected]....
..`...{u...Q.V%.....Y ...taZ.;[email protected]....|.\.......#Kf....$.3K6r
.a..X14.C.4i.Yw.........c.p......7..."......>...H......4hd..`..\...
.V...i..%.....z...3..._...'1b.....}.`h.C.V...u.P..V.........%.,!..A..^
*....p..6..YyB.; l..<.YdS.)....,..b3.. ..,..F,*vaK.-.pK..^....UgI.`
...*_Y..<.\.AxL.(.;;\..r;P.....(..4.I#...S.09.P..z.b.#...b @:.W..%#
.k.E....qh.2.......a.&......X....`..MH.U..f..b.O.c.1..P...L.B..-..B.*.
.K..a..;...ZW ....]A...V..I*.........t."s....c...m`.M%Vt....h...0B..e.
...)^...)......)`A\9i%2]a..p.j....!{...Ze.%....k6....6.....fKb...Zn.(.
.j....."........K3....@\...&A.qNp.m.1p.[..&?.......C...v...!..j.'.
<<< skipped >>>


GET /css/style.css HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 3923
Content-Type: text/css
Content-Encoding: gzip
Content-Location: hXXp://VVV.lszwg.com/css/style.css
Last-Modified: Fri, 25 Jul 2014 01:50:27 GMT
Accept-Ranges: bytes
ETag: "8073a1ceaaa7cf1:56725"
Vary: Accept-Encoding
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
...........[K....^g`.C..!..{TRK..Y..c......uK.....V..........da."^..1.
y.L.d.../.&...N=..w<.L.VU.:u.W.U....[.~.._......G..>x.`U....>
..S.I....y.~n.}Y...l......../.y-]e....>......;.<......d[[email protected]..
1Z.m[.QS....?.........n..s5...q...]8.E..t..G...g..<,....yy..'./B...
..D^..U1no...P...HX.Vu...2 ?..-....X.M...A.....Y.8.dUES......U...v....
%Y......iW..e.....q..Dv.....%.....v.^..>>G...u. 2.:.".8...D%.').
...:.).v.\$...u...!ku...7.gBF...)yf...r{X......fy..l^pz(..w...,3....*.
. ='.....-H'D...1..^=.0/O.*.]..z.T..*6.2...B|..U..9.....;1z:....r.8..b
..:W.d3..4y.A....vI.$..Bkb60.!{........]..l......"...#s...\<.r.C.4.
.pSN....#Vu.KTE.8.Bc..}G.ez....He..v......u..i.Ou.v. ....P........DPD.
..........(.......3...$...*;....8..Gj.m..&.`.g....&oGy.......f....i.Wg
2.....(.nk.&'......QS.a8............|>...c.....\k29...h..9.....R..}
Q62~...{.;....BKL...f.*..:p.c. .....H?.K.Ue..Sh....9...uI5B.;.k.......
..n.-...b.T#......T..fr..}.......0..%....F.)........>.......VU1...T
c$9.M.....[%.h.uV.%..).G.q....q8....\.Ig..ri..P....d...6Q4`..m..v.].Y5
5.:......,.E..`../by.([email protected]... "@...1Po1..H..F..D[A.\.l6.d#....
.d.l.X..w..y.Yo...w...hs.d...'...!iOPnR........`..k.......Z:.U.C.\mb..
.!M%.........K...:........%....Z..2.l.Q...z...9..3..t,...2_.c......WE2
..I&*{jx;.#^^C.&..T...q"XN......n5-...TG.|E..q......_n~)3<......U..
@ ..7uM....=)(M.R..1V..[.'HYS.<k..8.Q(...s.eNGO....U.ad..f^.N}...d.
.#;W.-......''.}^.c`!] ......2)...k..p...62 ........mW=.....(.Y..jp...
.I,...=.v....<...).Mx...A.B...pNS..... ...U..6...v.l..3..X.)F;.
<<< skipped >>>

GET /img/bingxue.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 24166
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bingxue.gif
Last-Modified: Mon, 05 Jan 2015 11:03:47 GMT
Accept-Ranges: bytes
ETag: "806b1e47d728d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<....................!......-. *.('.2/.;..>,.10.21.54.%$
."!.-$.::.86.=<.?>.6#...........................................
...............)..:.. ..-..#..2..#..,..'..3..:..6..-$.6'.O..y..}..g..D
,.K*.@,.[&.S(.\&.C<.L/.d$.j#.l#.s!.u$.U..L..C..K..S..[..X..q..g..s.
.{..o..P..r2.i,.h;.y7.z>.z%.@@.BB.JJ.FE.II.KJ.IF.UH.MM.OO.UM.[M.WN.
[email protected].{e.........................................
............................................................%.....4..5
..9..1..,..(..".......................................................
..................................5..#..2..=..9..P..N..j..p..Q..J..V..
Z..Y..j..c..g..k..x..x................................................
......................................................................
.............................!.......!..NETSCAPE2.0.....!..ImageMagick
.gamma=0.45455.,......<........H......*\......#J.H.....3j...... C..
I....(S.\....5k\..)..L.6k..y3'O.=w...sh..=o.T*ti..5.J..rjT.N.j....W.\.
f..t...]..U.Vl..p..eK7...w.....o].|...l6......V..pc..#.]<y/.../k&..
.g.....m..i..E..i.uL.N[..M{....e........y...{...3...^..r....w>=zt..
.k..={w....K.N.|......n.......t/.>|.....?[........D.e r..v.....`..2
(...FH...fX...r.!........(..&.x..*....,..b.2.H..8.x..9..c.@.(..<.vZ
i..v..I....P.7..Q.'e...x..Vv..q.R...d.Y..f..\.iz.f.b..'.h....n..g.|>
;...M..(...I..{".g.X.....>....Jz...aZ..lnJ.....i.....j..jj....$....
*..........k.........`.............;d...*...V..e.a....v..........[....
{.....m...;........../..../.X. 0...<...&.-..O....{*1.k:.*..G.1.
<<< skipped >>>

GET /img/jbc.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:27 GMT
Content-Length: 64494
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/jbc.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<..........................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
................................................q..d...d@~m.4~m....d..
... ......@~m.!..NETSCAPE2.0.....!.......,......<..................
..........(. .."4$.. #.*#.7).7).<2.=4.00/>.~;<E:@IK6.D9,f=.}:
?.??_._N.tU X]!ec.^b.er0Sd#bYD.IC:VG*UI6ZR.pP.fU.{a.{g.~s.nc%l`=}m,{k3
}q8GFGJMTNPJOS_PMMSMUYTKYXWY[j]`^^afoOKecUukHtkT.rKxpYgghiktnrwsmhqnsx
vhvwy9..C..y{.?..~..|..W..r..e...>=.=F.[..P4.e..j..q..i..`..u..z..s
0.Z.._..^..\).u..f%.DC.xF.{U..E.}p..... .00.?A.|..@?.SR.^b.a^.no....|.
.....1.......................5.....P..g..z..d..u..j..y..}..R..p..U..n.
.........................,....................-.......................
...*..J..d..}..L..g..(..............)..6.....5..'..7..8..<..G..W..H
[email protected]......................
..................................................................
<<< skipped >>>

GET /img/lhr.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:30 GMT
Content-Length: 81534
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/lhr.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..x....c..k............CH{.....r..............[.................
.............}.......S...lo....................................:......
......X^.............OS....(0...4......BI.......'1.loK................
................WWw.........B...kp...................lq...............
.........................lprr.....kq............$........&$...........
........1/N............XR.P4N.....$...................................
........(/......K.*.................................... .1......K%>
..............I.}.......$!=................mn...a.(d 8......X.........
..........................y..CB_......b........\..t.........}....U..(.
.....(.l..h..L..a.......................[..ke.......<..............
W........B=..........}u..........I.....c...lpr...DHW..w."_..{.......%.
...X^............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="
..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:n
s:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:
27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rd
f-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http:/
/ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sT
ype/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:Origi
nalDocumentID="xmp.did:9AA6DB8038C6E31182A8FC32D61CAE1A" xmpMM:Documen
tID="xmp.did:99FEADDEC63D11E3A860CA3CB076D0A3" xmpMM:InstanceID="xmp.i
id:99FEADDDC63D11E3A860CA3CB076D0A3" xmp:CreatorTool="Adobe Photoshop 
CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid
<<< skipped >>>

GET /img/gua.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:33 GMT
Content-Length: 50630
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/gua.gif
Last-Modified: Sat, 24 Aug 2013 07:07:52 GMT
Accept-Ranges: bytes
ETag: "094f3a598a0ce1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..[.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.............................................q..i...iH...<......i..
..}.m4@=..H...!..NETSCAPE2.0.....!.......,......[.....................
.......#..$..'.(..$'.(6.0?'..&..&..8..2..!.,).6 .*/.;;.!0.>1.>')
.&7.7(.49.(((&)4)[email protected]>.R#8K&>S79F2M.=e..AA*DZ5HH8NR
<PO>ST.Jc/Pn1Ng3Qk7Xt=`}F..Z..F.'R..Z.2Y.3A/.E3.S=.f..x..b.6h.&l
t;p.=q.>[email protected].|b"|DJ.LS.YB.T\.Kl.eL.mR.wY.cl.jt.~`
.s|.FFFFHTD[[VVVKZ`YYeF`_Qmmfffijujv}xxx>d.e..j$.q&.x).~*.Cj.En.Ju.
^~.P|.N|.Q..g}.zz.X..r..s..^..{.._..O..R..W..Z..l..a..w..{..]..a..d..h
..m..n..r..w..}................M..R..V."b..\..a..b.!_.!b.#k.&p.f..m..t
..{..............%o.'s.*{.-..,.....1../..3..5..9..:..=..=..=..A..B..,.
....0../..1..5..9..C..G..K..O..Q......................................
..................................................................
<<< skipped >>>

GET /img/8090.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 9585
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/8090.gif
Last-Modified: Wed, 24 Dec 2014 03:51:10 GMT
Accept-Ranges: bytes
ETag: "08b95da2c1fd01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<............... ....$......W.....8..%..5.....1.....x......
........6.....]..o.....$........^../.....*..|........e...........A....
..................................<........C........c.....M........
.........3........b..;.....J.....z.....B.......................i......
.....4.............._..............l..T.....F.....K.....~........U....
....:...........}..'[email protected].....
......S..w........N..>........t..q..E.................a.....d..y...
..,..j.....p...........-..s.......................f...........Y.......
....X........h.....{..D.......................0..V...........O..2..G..
......(..u............................................................
......................................................................
....................!.......,......<........H......*\......#J.H....
.3j...... C..I....(S.\...@...(..A....\.......0e......iA3|.p3...P.J.J.*
E....`.a.....8.Z2...Q.2-J.m..[.~.;[email protected]. ^[email protected]
Y.....8....^...H`...^.t7...Yre..5...z2.....5......" ..z4.... _......!.
 .|b....XH..:e..x|.@[=.s...S/O..ki.*.>......w....... .W...$..Z..E.b
...An....... `. .G....( e....Rk..`M.:....b.@f&5..4.....8.h.`.,`X.'}PBe
.DS... ..i}...W^.E.B'....3.gcK.-..13J..w:.%$.FR........rI)Q.@....^....
.H0eG..I....i.........UhI...Z...Q....w..YD..n[2...7.0CW...!I. ..k.....
.>bZQoR.1..5>..Q..J...N.)[email protected]&eE....D,.
L.....[.Q.i...x....@.%.R...l.....<'../.k \>...kc6.....I).}..(...
.P...H....d/......N.k....G..T".0...YRk.LZde(....1.Vk....n.;...2...
<<< skipped >>>

GET /img/qingtian.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 48579
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/qingtian.gif
Last-Modified: Sat, 27 Dec 2014 14:54:36 GMT
Accept-Ranges: bytes
ETag: "05ec8e521d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
........................................................[.............
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?.....-...P.2O.T...4.NU%....<.. .R..]q....\.
.^F.|;...g.....,.)l/. ...<G.K....=....r.a......(..Z?..)U.G.K...1.Td
[email protected]..>.....c...X.....O......b....D.w.Q.cW*\..{.....(.....
b.......YZ.K....yc..%....2$.F.. ...<..Wfv..a.........TY...{.. ...&l
t;..E..a.........TY...{.. ...<..E..a.........TY...{.. ...<..E..a
..J....H..]}.%..sV..g..k~..Lr@%} .t..>3......1.....(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(....;O...h...K.. ..l...p|.......#..`...1?a..c..=j.....P..
x.....*....a...i...........M.....2O.f..?.O.Q...k..".x.2..e_..O.......~
.^=.....^%.$......Tz...9...>....X.m...?.f.....w..Z...f...jy.._x....
.....?.z/...{.>8...h....h.T.........PY..\.8.3....Q:...wg.a.a2.$.Q.g
%.ROW...[[email protected].....)-...J.....#..}fJ..<.6..1ta....
<<< skipped >>>

GET /img/bg.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:37 GMT
Content-Length: 1065
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bg.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3...f..e..d..a..`..Rn.Je.Id.Gb.Mg.Oi.Qk.Pj.
Zw.Vq.^|.Xs.\y.Yt.`}.a~._|.f..Fa.Hc.Kf.Nj.Lg.Pl.So.Vt.Tp.Yv._~.[x.Zw.c
..b..^{....!.......,...............H......*\.0..l..J.H......i...c.. C.
...d.~(S.\..%.m0a.|...M..r.....O............&=.....G.5e..j..X..... ..`
........h..]..m..p...;7..r.....W.......L.pa{.. 6.......I.L..e..2k.....
..A..=.....S.FM.....b..G.....r............;w.... ........I.N.zux..k..]
;.........|...;....


GET /img/bgnav.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 3645
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgnav.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aa.N.............................................................
............EQ.Tk.Ma.CT.8Fr.$;[email protected].;M}a~.Zt.Tm.Ri.N
e.DW.CW.9Jxb..]x.Qi.H][email protected]}....Xv.c..\z.Yu.Xt.Vq.To.Jb.3Cme.
.d..c..^{.Zv.Zv.Rl.E[.7Hu5Fqb.._|.Zw.Yv.Xt.Xs.Vp.CX.BV.>Q.`}.^z.^|.
Zu.Uo.Tm.I_.AU.Ka.J`.BV.)6U`}.Sg................[z.Le.Kd.Sp.La.{|~....
.....TVX..............................................................
...... ..)..2..6..7..>..C..J..S..T..o.............................!
..&..&..(.. .. ..,........5..6..9..9..=..>..[..]..]..e..g..m..p..q.
.|...............................................0..6..G..T..W........
......................................................................
......sqo.............................................................
....................!.......,....a.N........2d..%4.(....C a..xH... ...
...... C..h... a:Vq...........H.4:^[email protected].(..H."m...P.O..e..'..U
..$x....'D@.....,[email protected]?..K..].(....e...b.......%..|..C..#)R..<
..e..3G.......C.....\('&.Y....&P|d..BE./].x..{..............._.{w...1k
....j.W^....F..[b ..1e......7.........O.~|.....2.I.-.....=T.B.DXaDc0..
E.b.`....a..f.....vx.. ..a.$.!..(.xC..ZX.......*....O.. .G..C.c.......
.6..0..I6.d..<)..TVI%.On#N...1F......L=...b.Q.-.p..&.....t.i..x....
|...&.<2I!.x ..$....)...!.x"...T....f....v....^....x..1...C..f!....
.a.,.$..'...H'....... .... J([email protected]."..B.).| ....k...
..n(..B."..2L.t..D.)..C.!x.K)..R.1......'....7....#..*....)..........&
gt;.....4.J#.8..*,....0.,..4..r#&......Q..?dPm....H1.<.H1H3...P
<<< skipped >>>

GET /img/bgheader.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 1978
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgheader.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.........................a}....BV..........Yu....Rk.^z....Ja.Nf.
=P.......... 8[xxxTo.......]x....I_....w..TVU...F[.d........3Ak...9M|.
...........[w....Vq.:Jw......IJK# ESm....e.._{.Uo....b..hhi4EoG]....OU
[email protected]....]dw
............Ys..........o~.............Pe.9Et...DX. <]...Mc........
..Xt.........._|.Pi.\i....Nj.......Qg....7Jx...'4Q...Jb...............
.........................Wq.b...................................... (C
..................Og....Zx............................................
........\y........................................Ph..................
.w..\a_`ab...1Dk............L_........................................
...DS....f..............\u.Kd.~~}...\s.sus>N}......]m.......Ql.....
.................,[email protected]...... C..I
....(S.\.....0c..I....8s...3e...]...a....s.`.....8."....S!.......;v.L1
.K....h..].....p...K....x............L...... ....c8.#.A..l...\0..u.R..
...104$H..j.......3..m.v...s...........N...... _.......K.N......k..=..
.:n.........i..O.v.....u..............t...k68...{..........D(...Vh...f
....v... .(..$.h..(....,....0.(..4.h..8~H..;..c;.....D.A...B. )...!.uD
iC.0L&......T....D...C.......D.A.l....p.)..t.i..x....|......*....j...&
....6....F*...Vj..i..............o.I.....H..Dd.S....U..0.E.u...5?x.F..
. ....k...&....6....F ...Vk...f....v..... ....k.......J....J......k..i
..f;D...... ..O...V]Xa..Dx0....1D...b...[.H..w... .,..$.l..(....,....0
.,..4.l..8....<[email protected]#=..IS....o|...[.K..4c...H....?.%
<<< skipped >>>

GET /img/bgh.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 5439
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgh.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.......Wr.Jb.\v.Gb....Id.To.Yt.Pi....Mb....Nh.`}.H^.Fa.Me.Yt.j..
Wr.Yv....t..DY.Rk.z..k..^|.Nf.Ys.Nf.Sl.n..m.....a..|.....Ok.^{.q.....P
j.{..Nc....v..^y.Rk.f.....CX.H\.Ri.o..Xo.Un.J`.Qe.f..Vt....Yu.Rj.G\.k.
.F[.Xo.Pg.CZ.l..Tk.f..d..b..b..a~.c..c..e..d..a..`}._|.c..\x.c.....e..
^z.Xs.d..[w.`{.Zv.^{.]y.Kf.Je.b..]z.\y.Yv.Rn.Up.Vq._z.`..`}.[x.Tp.a|.b
..Mg._|.So.f.._|.\x.Up._~.Hc.Nj.Zt.[w.a..Lg.Qm.Pl.Uq.Pl.Xs.a~.Hc....Vq
.a~.~..Tm.e..Sn....d.....Vr.Mg.Zw.}..Zt.c..p..b..^z.Wr.d.._{.`{.t..Ni.
[x.Lf.Vq.Wt.Xs.Vt.Lf.^}....w..x..e..]{.q..Yv.Rm.Zu.b}.Up.[u.e..p..e..[
u._{.......]{.Xu....Qm.^{.Kb.b..]|.]x.]z.Rn.Rl.b..Og.c..c.....Ur.c..Sn
....l..n..h..u..To.Qh.Pl.......]z.Ld....~..Tm.s..Vo.Zv....g..`~.w..\w.
l..x..c~....Xt.Od.y..]y.Qj.K_.b.....Kc.[v....g..f........Rn....`..o...
..Vq.......!.......,.............t...C."..).7...#i..Q.D..4......./....
...K.x..u.w...X|.0.h.....S.P....M3.pAS.&...vbH.E&.).1....#..G.}s.5MQ.H
g....)E.D.vL..../#..5`.jN.d.|.......S.-.W...U...........eZ..."..I^.XI.
461....sF..I..\3....9.T.E.....^.W-../Jh...{.U.................n.../'~.
Zv.S...........g.*..y.Sd.g..;z%.....^H<.].'.~.Y...L......h...|....4
X...N.`..>...\(......a&v.(.....!.*..H....bzU......P..9.h`.>.h!..
..a......H..$.?6...Q*[email protected][email protected]'.R
..g.|.)..q.Z.......{...".8.&.yFJ...ZJ...(*).......vjj..B..>....@G".
...v.:E...* ....k.Z.........Z..c....l..BK...2.,~.2....&k ..z.n..r....*
$...:K.T..K ..hQE.T.kG.........o..2r...../..v........`.;...?.o..7.q...
L...3...&.|..*....`.{L..t.H.........0.:..3.R.}s...|.4Z....I....M..
<<< skipped >>>

GET /img/gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:39 GMT
Content-Length: 23328
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......'.............sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<..Z.IDATx^....VG....T.tv..O./s2
.y..5..i...A00......j< ........b....2X..l...v.....,6x_0...,6`6.6^.J
......s...........O....D.._Fd&U..,.?cL.\..........P.?.).....2...y.....
..)....o./....E|DK.*4).._L......./?.T.w.....,....7z].Zj..r...\.o..o.?&
gt;.y:......c...Bu_...~..|..q...J......s...X.....R..{G[.;.;.....r...OG
O....T...........h.ok.....h/[email protected]...;.G.......9..ON...??......./.
.e....~..S.......Nz..$.....=..g..S....#..x..?W...,...y.c..8..~.....>
;..~}..W.t ./.u. .%..c.#.%lY..O...Y|.....N}E.....{.....&O.s....G.#G!.%
y...!...0t....C.N...........=.O.......=. .z.~..i......:..l..,.........
......=w@......}..^....k..w..e..o~.s.7..q.............;X..w'....[..[..
....lX.|."....R,.N.;G,F.<.....RX.=..a...|.,...a\"3.7...X....^..r..M
..x.....T0..g.. .B...i.?BlE.K......_..Mx..............1...c=....o.....
...{.>9..<?.-.1..g...Rr.j.......C.....{..va....:}.....;.._y)cm..
.I...h...[..z.6.K......1g.......cd,..5..n!.._...g...,....'N..{..$.....
..B.....'.:G...7!..q../N6......<./.7.V.z.h.0.{.0..?..q.....s.~v....
?....t.>@.j-'....o.E.G?w..V....d.....gP......x............O.=D>.
..D..q....`.w|q.l.....[..^........../OO.../w|...................>..
.i0.....1.k.U1N#...._._"..s.I._.|..g...O.4... .(>.n.&}..!..b.4.`..N
 >..!>....8.qs8..R8..M.'.......?..Cxa.6..<..{.....C.w....(..~
...KY*..[....|[email protected]..'a...7.H.s.<.C.....y...._.:.../a...I^....
.c.W<.....<.1y.|..).........'B>...V<.=.4..G.?....YN.&l
<<< skipped >>>

GET /img/1gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:40 GMT
Content-Length: 56287
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/1gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR..............</.....sRGB.........gAMA......a.... c
HRM..z&..............u0...`..:....p..Q<...]IDATx^......u........d%Z
.d[.,..l X....-K.eI.D...#..1.x.....b...6......9..sN..........F.....} .
uOOOoOuMW..{!&...?m.m.m.m.m.m.m.m.m.a...\...=s..p..W...^...]..'.....|.
..........b.;&X._ ...3...}e..x0..1..c8^p$.{.Y...$..........y|...`..q..
.x.mX....<.&....x......{...m7{.`y.M1o,....%.g.5.....9c./....C......
}...8`^Z4p..o.6..T|?...I...k..V4...M..h%\........>q.M.-.5..n.m.[.@.
....................[.....r.....y....JMe.T...)....e......5.......O...p
R.4.........[.N......M...|V.h>..9...vV.....{Z...m......%....{..`.Ey
...C...a,.i...e..,.t\..v^..ZvU~........_.].?.........a..9.........tM..
...........g.......)......?Y.Y.g......?.].?.....[w1..p................
_s^~..9...0...wW...3.......z..... .q.]y....[W.......O[@[@[@[@[@[@[@[@[
`.......#..... ...B./Z(.....ys$o.,).=]...#O..._..b .`8....tRn...o.l,..
nk>[email protected]/..m='.ay..9c.....B...........a...>.
 .........KX^..a..;i......SK...ZvE~n9..F.t.5.....0..s../..Y...........
$?..".{..'...]....>...h;.........,i......v....<.......6k......rZ
.C......w..B;..;....:......5....:#...,...'....'.@8<................
...n....'r.....s.,im.b(..sg...Se..)2{*m...>......Se..i...<...Ny.
..xP.h7..n.28.......@*..2H 4P.....w.1@.....`[email protected].$..@...
.G..~....!..c.6B.':..'...>...h...Fn.D`....}..&.........Na.Q.4....2.
...y......... L0......h..h..........m{...........-.'`..&,o.r.....x};..
k8&?.z\.t.i.q......|.....k....k{....................y..9q..._.F...
<<< skipped >>>

GET /img/top.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:42 GMT
Content-Length: 23243
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/top.png
Last-Modified: Thu, 14 Aug 2014 07:47:38 GMT
Accept-Ranges: bytes
ETag: "089c3494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......F......:\.....bKGD..............pHYs.......... 
.... .IDATx...{t..}.......nt..J .Q....M.z..-.....5Y..d.h...:.Lv}.MN2..
Y....&qv2.x.....8^;.# vlZR2.i..![[email protected].  ..4..zW...]....."myN....
QU}..}.......{....F.m..F...H?....F.m..F.q..s.m..F.m...f.m..F.m...C.9..
F.m...{.m..F.m..F..1..s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..1.
.s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..x....f.m..F.m....f.....
.......6.h...6.$..Q#...?....h..6.h.G.u(.m..F.m..F.?..C.n3.6.h..6.x.Ay.
...F....&o.qu..p.P..|..O.......(.Y|.Z.d?.......xy...".......n....l_D..
X.d....&n.......^..._.Mn%......-.Xg.~..~....Xg......_.7<#...S.W..R.
...Jb-.....G..D..U]Wm.q% ~..^..88....#........%...W.A.K/.uC.......... 
KL.....-......................u.g.x..;NA..@$.>...^O~.GJ<D`#.E$w.
.X....\b....]..O.u..].p....9v..^............*.......G.F.S..*.A].G~..o#
..1r.8C.M...w...M...<.........0/...U..g..&...06>.Ek.U.r....c[.$.
...aX..7_.......-.Z...x.m.R.O..Kl....u...\..'9:4..|......si.....{R@k..
.U5g....r...,{.ws...*..px.4..M.....4B.-.....-.<....]....K_...."Nj`.
.5C.)>..........5c1.....1..A..s.. (....}.[........:zo..5=.s..&.;7y#
.v.U..e.".........=........-.3...........C.L>.c[....L....g)A.t.|g.u
.....\..Q...?.. ......dE.j.-.;..;.i .......8.......q..w..k`G..|.?....g
..Y...~......'.._mT.b..j.....E.0~v....n...^.RXV.7...b... ...P(..=y..O_
................>.b...;.r.]Y....y.f... ..3c\...|..n..<.....W.6=K
....3.Y.0........R.g'.fX........ds....)...7vo[..~...............[S..4?
tK.b......._.n...;........n.6.....^.....s..........?}Y.i5..Y.....1
<<< skipped >>>

GET /img/icon.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:43 GMT
Content-Length: 409
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/icon.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.............r.......sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<....IDAT8Oc`.........S6........
.K.........."......)o....mj.3.*.O..\.........w..wZ.....US.6......_s...
p....='R...X.?i.......?.|...2......h...#..k....=.............0 4D.....
2u......c.O>[.?a....9../.:........R...K....f...A...3%.c6...........
CK.2P.F..zs8..|w.p...0...c....m..a..5.........p.d<..?....IEND.B`.font>....


GET /img/zs.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:43 GMT
Content-Length: 108348
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/zs.gif
Last-Modified: Wed, 31 Dec 2014 14:17:59 GMT
Accept-Ranges: bytes
ETag: "80c52f94425d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?....(...
...H.sK\....?...h.yF:v..9.F.&..K.ec.t.U....S......#..N...U .....#.."W.
.........p.p..y.Z.`....q...C...".Tk.K.w.0..889.W....r...n=\.......k.E.
.@=y.. ..UV..>..&..ci.. X.UL....K.{7.*d.S..*V-M2.%V.*GCO....b.O.*/8
z.pps.!....Q.P...y..x..QM.3F.(..Sw.M.4..).....4...Tk 9..=(...g.....Up}
h@:..\..h.......D..`qB. ...<P9......0.EF.y...h...n.F.@!.S|..F...:.n
.M3(.....>p.4.p..."nO.*..Nv..Tf.v.n.)..-........Tvc.Uw...C~B...Q..c
.5.P;~u.>.9...."..........D:..Q.Q.....A8?.r.k.....tUY5F9.c..|..._c.
k.Q..b.I.....1\d..9..G...jL......de,K...][....ET.W%~...W.%...7.U.. ...
P.b...T.../......T/p.f...*..>T~..?.Z.....A..S3.........h.._..X..gsG
j;Q..=2....^IX* .$...la.C<.)c#n....O.I.D.R.k.vg...1.).I....?....dX#
..... =....._..C..._.T.....9Q.....O.....>..T....*#.....Q...EIE...yj
;[email protected][email protected]..#....^)3K..N(..
QKX....xv........#V*...p...I.O..]...f....#FgeU.$...[M.../....I-...
<<< skipped >>>

GET /img/zaoma.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:47 GMT
Content-Length: 20248
Content-Type: image/jpeg
Content-Location: hXXp://VVV.lszwg.com/img/zaoma.jpg
Last-Modified: Mon, 22 Sep 2014 02:36:08 GMT
Accept-Ranges: bytes
ETag: "01cc4f6dd6cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
......................................................................
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?..S.....(......d..I4..vr.#...A.g...].......N..
..mm5.vV..Ii.......c..9.Qoc..<K..l.......$......../.....i.:...on.oo
(.|.fU<.2T.'..E....~!R.*./...........2....j.Y....G1 M"...I.\z.:.b0.
.....D...... .j.].......\u.....E.9^e.q."....f........W.-l.w.S.:.....I.
...%H...../1...*..;......dR..5...,.B.aP..>.....s.........8*..}..lZ.
..CW..[..[(W.I!8.;c...0............B|=l.~..{......N.c.^XrI......*?....
....on.o...jO..~m...?...d..X....Ib[......xc^.`7.Er.2....}...(..O....MW
...d...g.....e..rH.$...............'....8jj.gd\......J....^..k...x.U .
...X..2A.J.hsK.[.x.pN.Z....}.....K..........am..i...8.3.. .Q...K....O.
K..Ak..........t.|...W........W..U.J...<9.TvK.E..}.-C..^....j....Y.
c.&.28D........(J..Tq..UU..QN..W.T...d..P.mn<).......|n...#.z.H..R.
>..J.;2U...Zh"..{x..iY~.........a.)Fi...,...>..h.K..o..D.0J.i...
[email protected]<.9....X.ck.T...P....]......m...{^.....G...7.T.'v=.....c0
<<< skipped >>>

GET /img/top.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:48 GMT
Content-Length: 23243
Content-Type: image/png
Content-Location: hXXp://VVV.lszwg.com/img/top.png
Last-Modified: Thu, 14 Aug 2014 07:47:38 GMT
Accept-Ranges: bytes
ETag: "089c3494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......F......:\.....bKGD..............pHYs.......... 
.... .IDATx...{t..}.......nt..J .Q....M.z..-.....5Y..d.h...:.Lv}.MN2..
Y....&qv2.x.....8^;.# vlZR2.i..![[email protected].  ..4..zW...]....."myN....
QU}..}.......{....F.m..F...H?....F.m..F.q..s.m..F.m...f.m..F.m...C.9..
F.m...{.m..F.m..F..1..s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..1.
.s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..x....f.m..F.m....f.....
.......6.h...6.$..Q#...?....h..6.h.G.u(.m..F.m..F.?..C.n3.6.h..6.x.Ay.
...F....&o.qu..p.P..|..O.......(.Y|.Z.d?.......xy...".......n....l_D..
X.d....&n.......^..._.Mn%......-.Xg.~..~....Xg......_.7<#...S.W..R.
...Jb-.....G..D..U]Wm.q% ~..^..88....#........%...W.A.K/.uC.......... 
KL.....-......................u.g.x..;NA..@$.>...^O~.GJ<D`#.E$w.
.X....\b....]..O.u..].p....9v..^............*.......G.F.S..*.A].G~..o#
..1r.8C.M...w...M...<.........0/...U..g..&...06>.Ek.U.r....c[.$.
...aX..7_.......-.Z...x.m.R.O..Kl....u...\..'9:4..|......si.....{R@k..
.U5g....r...,{.ws...*..px.4..M.....4B.-.....-.<....]....K_...."Nj`.
.5C.)>..........5c1.....1..A..s.. (....}.[........:zo..5=.s..&.;7y#
.v.U..e.".........=........-.3...........C.L>.c[....L....g)A.t.|g.u
.....\..Q...?.. ......dE.j.-.;..;.i .......8.......q..w..k`G..|.?....g
..Y...~......'.._mT.b..j.....E.0~v....n...^.RXV.7...b... ...P(..=y..O_
................>.b...;.r.]Y....y.f... ..3c\...|..n..<.....W.6=K
....3.Y.0........R.g'.fX........ds....)...7vo[..~...............[S..4?
tK.b......._.n...;........n.6.....^.....s..........?}Y.i5..Y.....1
<<< skipped >>>

GET /img/bgtitle.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.lszwg.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=795982027-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:49 GMT
Content-Length: 3274
Content-Type: image/gif
Content-Location: hXXp://VVV.lszwg.com/img/bgtitle.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a~.#....Z........W..~..|....Z..=..............B..o}....'|...."`..
..%T.....q. x..|.....{.......:........... ...|....kM..........!...~...
.!.........{............. }.... ......x.....{..}.......... ...........
.|....".. }..........G........"......{........z..y..z........\.....M..
z....................x....!^.......!...{........T..Y.......m..:.......
.p.....!..<..5........"...L....=o.*K..v..v..y.1.........i.!..... ..
H..#....._..o..6..L..N......{.6e.#.."..!..`.. ..l.."~....K.. .........
...t..K..~....*n.)......L..z....].."..>.."z..y..........8..Q.....-l
....bn....Cu.0...|....8..;L....?.. .....G............k.'..<........
......\........7..#.....J..Li..o..w....(..*..x..}..m...m.&W....$..%..&
..LQ....O~....2u..w....[.....8i.%k.$..&..... .....)........... .......
..}...........z.... ,....~.#......(.$H[.8l..X......#J.H.....3j...... C
..I....(S.\.....0c...h..l..%...]-Cz.<;.....H.*].....P.J.J....X.j...
...`...K....h..]..j.6...K..S)f.~]{ ........L...... ^......#K.L.....3k.
......C..M.....f.KG*..p.$.9......s...........N...... _.......K.N......
k....q...L..v..%p.....m.......O...............(....h...&....6....F(...
V..mK...;..b.3*H........(....,....0.(..4.h..8....<....@.)..D.i..H&.
..L6...*.0...\.....p..W.S..O.)..d.i..h....l....p....C,..#.ly..q......*
....j....yB=...'9..#...NJi=.f....v.....*....j...............*....j....
..................J..D>......F ...Vk...f....v..... ....k...........
... .....-.\\...= ..=....=..L...'....7....G,...Wl...g....w... .,..$.l.
.(....,[email protected].../[email protected]'...L7...PG-..TWm..Xg...
<<< skipped >>>


GET /app.gif?&cna=ff05DYiZXhsCASU5EL1uOoAQ HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: pcookie.cnzz.com


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DYiZXhsCASU5EL1uOoAQ; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: pcookie.cnzz.com


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pcookie.cnzz.com
Connection: Keep-Alive
Cookie: cna=ff05DdrU2mcCASU5EL3gIDWK


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Mon, 12 Jan 2015 00:04:14 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=ff05DajU6XYCA
SU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..



GET /service/player/player59/xmbud.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 16384
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:28 GMT
Accept-Ranges: bytes
ETag: "4675eb753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:42 GMT
var objMmInfo = null;..var intMmCnt = 0;..var intSelMmCnt=0;..var intA
ctMmCnt=0;..var cActIdx=0;..var cActTit="nAnT";..var strMmInfo ="Infom
ation";..var blnfpl=false;..var blnEnabled= false;..var blnEOT=false;.
.var arrSelMm=null;..var arrActMm=null;..var intExobudStat =0;..var ti
dTLab=null;..var tidErr=null;..var tidMsg=null;..var intErrCnt=0;..var
 blnRept=false;..var blnAutoProc = true;..var blnElaps=true; ..var int
Delay =500;..//window.onerror = killerror;..document.onkeydown = proce
ssKey;..function killerror() {return true;}..function processKey() { .
.if ( event.keyCode == 90 || event.keyCode == 0x25) {playPrev();this.b
lur();}.. else if ( event.keyCode == 67 ) {wmpStop();this.blur();}.. e
lse if ( event.keyCode == 86 || event.keyCode == 80) {startExobud();th
is.blur();}.. else if ( event.keyCode == 88 ) {wmpPP();this.blur();}..
 else if ( event.keyCode == 66 || event.keyCode == 0x27) {playNext();t
his.blur();}.. else if ( event.keyCode == 84 ) {chgTimeFmt();this.blur
();}.. else if ( event.keyCode == 65 ) {wmpMute();this.blur();}.. else
 if ( event.keyCode == 83 || event.keyCode == 82) {chgPMode();this.blu
r();}.. else if ( event.keyCode == 76 ) {chkRept();this.blur();}.. els
e if ( event.keyCode == 77 ) {openPlist();this.blur();}.. else if ( ev
ent.keyCode == 0x28 ) {wmpVolDn();this.blur();}.. else if ( event.keyC
ode == 0x26 ) {wmpVolUp();this.blur();}.. else if ( event.keyCode == 7
3 ) {alert(strMmInfo);}..} ..function wmpInit(){.. var wmps = Exobud.s
ettings;.. var wmpc = Exobud.ClosedCaption;.. wmps.autoStart=true;
<<< skipped >>>

GET /service/player/player59/xmbud.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 16384
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:28 GMT
Accept-Ranges: bytes
ETag: "4675eb753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:44 GMT
var objMmInfo = null;..var intMmCnt = 0;..var intSelMmCnt=0;..var intA
ctMmCnt=0;..var cActIdx=0;..var cActTit="nAnT";..var strMmInfo ="Infom
ation";..var blnfpl=false;..var blnEnabled= false;..var blnEOT=false;.
.var arrSelMm=null;..var arrActMm=null;..var intExobudStat =0;..var ti
dTLab=null;..var tidErr=null;..var tidMsg=null;..var intErrCnt=0;..var
 blnRept=false;..var blnAutoProc = true;..var blnElaps=true; ..var int
Delay =500;..//window.onerror = killerror;..document.onkeydown = proce
ssKey;..function killerror() {return true;}..function processKey() { .
.if ( event.keyCode == 90 || event.keyCode == 0x25) {playPrev();this.b
lur();}.. else if ( event.keyCode == 67 ) {wmpStop();this.blur();}.. e
lse if ( event.keyCode == 86 || event.keyCode == 80) {startExobud();th
is.blur();}.. else if ( event.keyCode == 88 ) {wmpPP();this.blur();}..
 else if ( event.keyCode == 66 || event.keyCode == 0x27) {playNext();t
his.blur();}.. else if ( event.keyCode == 84 ) {chgTimeFmt();this.blur
();}.. else if ( event.keyCode == 65 ) {wmpMute();this.blur();}.. else
 if ( event.keyCode == 83 || event.keyCode == 82) {chgPMode();this.blu
r();}.. else if ( event.keyCode == 76 ) {chkRept();this.blur();}.. els
e if ( event.keyCode == 77 ) {openPlist();this.blur();}.. else if ( ev
ent.keyCode == 0x28 ) {wmpVolDn();this.blur();}.. else if ( event.keyC
ode == 0x26 ) {wmpVolUp();this.blur();}.. else if ( event.keyCode == 7
3 ) {alert(strMmInfo);}..} ..function wmpInit(){.. var wmps = Exobud.s
ettings;.. var wmpc = Exobud.ClosedCaption;.. wmps.autoStart=true;
<<< skipped >>>

GET /service/player/player59/player.volmeter.0.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1795
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "c47ac9733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:44 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}.......................*s.0r.L~.Gu.S.
.O{.Q|.Ou.Pv.g.._..e.....f..l........}................................
........................E..M..L..V..U..g..b..m..g..]..h..m.....{......
..........................p...........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..;...*....x...{....;F...u..... ^..q.....>$.K...._.L
.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek.............G
.^}.....C...~A....._........._....\..h.......(....h....P.......Rh...ZH
.D..6....f... ~(b..j...%rX..'0.".P.q..4.......c. ..c.;..d. ....E.hH..|
a..N....TN...X,...N2...^r)f.L..%.h..%.`....G....t....[....l....~.)h...
I(.{.I..$.....F*).M.....f....v.(....D.z.j.....D...@@....*.........J...
. B...A..u.k..u.Q........2....V.-..Z. ......,....r.k..q..-..~..... o..
......{.......n.!...3...n.....7....G....D...F.....s.F.F.P1..[\2.#..r.,
G@..&....]....>.1..a....<....=.m..H'...L']....`...X.C.dd.u.e
<<< skipped >>>

GET /service/player/player59/player.volmeter.1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "a2b4e3733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:45 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q..........................}..........................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..?...*....x...{....?F...u..... ^..1.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._......`y....,^.'....h`...P.......Z0a..z....
L.....:... ~(b..>...%rx..'0.b./[email protected]#.T....,..c.;..$. ....E..H...
.d.Kf!...Tie..H...Nr.d.Pz)f..,.%.`....b..f.lv.....i..~,...l..g.o.)h.o.
9(.........E..F*).Q.....f.........|.D.OT.....zj.O.*j....*k...* ......"
.P.......t.a....aG.......>......-..Z... .....*...S.KG...;...v......
...r./....n......p.!...C!..p.....7....w`A..p0q......qt...o4....Sl....\
..*O.2...l..=..C.8.,[email protected]'...L.M.......QO...C.a..\o}.
<<< skipped >>>

GET /service/player/player59/player.volmeter.3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "2e3b2b743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:45 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._..........F..0l..~..h....P..... ..>...LX
.E.}|a..](....J.b....b..>...'0.b./..b. bA..|....T..#.2.(d. .8..E..H
....d.O:.d..p!. .d.e..H...P2...O..e.h.)f.e..f.o....n..D ......,...q...
....'.p.....6...Q."...J....f......)........J..U............J....:....*
.....k....k.I.q...&...y$.........F;...F......m..z.m.,.1..w....v.......
......!........o...Q.....E.P.....7....D....O\1.._L..u.........2\l...[.
q....r.....!<.a..8.,[email protected]'.t.2.\A.:h.t.SK.u..h1..i
<<< skipped >>>

GET /service/player/player59/player.volmeter.4.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c7545743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:45 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.............................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._..........E../h..~..h ~..P..... ..>(..&p
...^....V0....N.b..>8".$.hB"........b.2..b.T....<.A..3..b.A.(..H
.9.".40..NB.d.RV...R."..\n...[[email protected]..'._,..!|..' K
|q..v..g.r..'..6....6jC..Tj...FaC..v.)[email protected]@.@.**...Z*.OT.........O.j..
....... .....k....l..&...y4...y......K....k...R......m....n...P.......
.......K....k.........,.... ...'.0.t@!...G,...X.A..X...._...2(A..$.\r.
M(1...o....s...1..F......<....B.q..e.a..D.A..?7...A..s.=....Vc}
<<< skipped >>>

GET /service/player/player59/player.volmeter.5.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1798
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "904c5d743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:46 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........f......E...h.~..P..... ..>(...:
...X|.G._`......`..:H..!*".......-.... ..b.V....<.a..4.(..0.i..0..@
.d(...M....KF...T.2..\n)..]TIe.JB...R.Ye.e..f.o....r.9..)4.H!|..g M.Q.
.o.I..q.A...6.....`...Tj...NaC..v..........:.....*.Q\.......*.Q.j.....
*... B........J.....D.w..........& ...V.-..*..! x....~K.......U.{G...k
G... ...../..v.....,....0G..'...uH1...G,...D...._.1..o......D.t.l..r&l
t;......q...,3. ...!>....<..3.D....f.a..D.a..?7...6.\..<h
<<< skipped >>>

GET /service/player/player59/player.volmeter.6.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1796
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c8e879743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:46 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..l..q..........................}......................
.......*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}...........
.............................................E..M..L..V..U..g..b..m..g
..]..h..m.....{................................p......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vu.......\
.^..5...\........B...*....x...{....BF...u..... ^........v..L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.PFk....-........G.^}
.....C...~A....._........._........_.L.....C.c.g....P..... ..>(...:
Ha.;<.E....F.O.1a..>h..%R...'0.b./..b.4.(#.62b..}....}\.E.3..#.H
..c#.4`..NB.d.RV...Q^.E......^[email protected]..'.r.)........
..D.y.i..p.I...6....>....Tj...R.C..F:...|:D...**......0`.........R.
jj...j*.".P@....,...k..... .{.....F...L$....f{-.......~.....k.....m.xX
.n..../.-......{/........,p./.q...#<..S......lA..p0q..[Lq..S.1.....
[email protected][email protected]....<..s.G....i.m..j.Q..L.L.......QO
<<< skipped >>>

GET /service/player/player59/player.volmeter.7.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "08596743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:46 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........?........a.g.~..P..... ..>(...:
H..^8...}....N.Pa..Zh"..*".......-.... ..b.0fa..|[email protected](
...M....KF.d.NrA. [email protected] ......4...o.
i..o.....6.....`...Tj...NaC...*...|*D...**....j.BDq.....* .xDaj...z ."
.P@....,...k.....l.K.q...F ..y,A...f.....`...~.....k.....n.-.Q..w. ..v
.`H..../..v.....,...w...u$...R.!../.,...D...._.1..o....k.r.30Q..(....O
01C..o,..1.,....0..<[email protected]'m4.F....C..s.?....Vc}u.Zw].
<<< skipped >>>

GET /service/player/player59/player.volmeter.8.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1788
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "3821b3743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:47 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._............,0....Yx.....P..... ..>(...:
H.......\....X8.E...XB...".......-.... ..b.4.X..x....xXQ..7.."[email protected].
.$.J>)..P:[email protected]..&.n.I'.]4.. |....Mt..
....&..&....6.(.7L....V:..7<.........v.....J....*..W.......ZG...Z..
.. B..............k......t......a....k...*..  h....n......m......U.KG.
..;....k...v.............r.l..R.!........D....S<q..g....o.q.20!G.$.
\..O0A......._....C.l..8....5.aD.d.A..D.]..D.|s.3W....8...Q?M..OW=
<<< skipped >>>

GET /service/player/player59/player.volmeter.9.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1780
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "70bdcf743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:47 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.......................}..........................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
...........................E..M..L..V..U..g..b..m..g..]..h..m.....{...
.............................p........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vo.......\
.^..5...\...z....>...*....x...{....>F...u..... ^........F4.L....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek...........
..G.^}.....C...~A....._........._........._.. /....Wt..~..P..... ..>
;(...:H...fhB.KT.E.ylQ..8TXa...".......-.... [email protected]...!.
4...J2.d.NF...MN)e.Ub....t.e.~D...P6.d.a..f.k....n..f.t.i..\(.G |..g.J
p.g.l.`...&....6zh.P.!...J.E.......l.C..z.)...jj......T.......J.......
".P.....k........ l.."Q..v4...v...........pm..j.m..b.-...K..,.!..s....
r.p...v`.........{..o.!...?...o..o..D....?.1..Ol...K....K.C.q.!..#..D.
1t...^....@.,[email protected]/.4.J?-..P;M..V[-..f
<<< skipped >>>

GET /service/player/player59/player.volmeter.10.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1784
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "268cfb733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:47 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}................................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
.................................E..M..L..V..U..g..b..m..g..]..h..m...
..{................................p..................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..>...*....x...{....>F...u..... ^..q.....VTHL....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Fk...........
..G.^}.....C...~A....._........._..........?./Z..B./h..~..P..... ..>
;(...:H...fXa..r.D.]..G.U,a..."".......-.... ..b.4....*.x..y.!..yLa..0
[email protected](...M....KF.d.T^...J&.E..."..b....P.1..j..&.j....q.ig.x..'.^(.. .
.*..Jx.&..&....6.....0..~Tj...B1C.?tJ@.?|.)....j...........T..!....j..
.. B..............k......."qG.xD [email protected]..~ ...zK....[n.,.!..
u. [email protected]....?,C.s.a..
'[email protected];.t.T3-5.VW...W
<<< skipped >>>

GET /service/player/player59/exobudset.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 467
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "2e87666f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:49 GMT
<!--..//..............true........false..........//................
..//var blnAutoStart = true;..//..................//var blnRndPlay = f
alse; ..//....................var blnStatusBar = true; ..//...........
...........var blnShowVolCtrl = true;..//..........................var
 blnShowPlist = true;..//............SMI..........................var 
blnUseSmi = false;..//..................//var blnLoopTrk = true;..//..
....................var blnShowMmInfo =false;..-->....


GET /service/player/player59/player.volmeter.0.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1795
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "c47ac9733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:49 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}.......................*s.0r.L~.Gu.S.
.O{.Q|.Ou.Pv.g.._..e.....f..l........}................................
........................E..M..L..V..U..g..b..m..g..]..h..m.....{......
..........................p...........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..;...*....x...{....;F...u..... ^..q.....>$.K...._.L
.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek.............G
.^}.....C...~A....._........._....\..h.......(....h....P.......Rh...ZH
.D..6....f... ~(b..j...%rX..'0.".P.q..4.......c. ..c.;..d. ....E.hH..|
a..N....TN...X,...N2...^r)f.L..%.h..%.`....G....t....[....l....~.)h...
I(.{.I..$.....F*).M.....f....v.(....D.z.j.....D...@@....*.........J...
. B...A..u.k..u.Q........2....V.-..Z. ......,....r.k..q..-..~..... o..
......{.......n.!...3...n.....7....G....D...F.....s.F.F.P1..[\2.#..r.,
G@..&....]....>.1..a....<....=.m..H'...L']....`...X.C.dd.u.e
<<< skipped >>>

GET /service/player/player59/player.volmeter.3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "2e3b2b743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:49 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._..........F..0l..~..h....P..... ..>...LX
.E.}|a..](....J.b....b..>...'0.b./..b. bA..|....T..#.2.(d. .8..E..H
....d.O:.d..p!. .d.e..H...P2...O..e.h.)f.e..f.o....n..D ......,...q...
....'.p.....6...Q."...J....f......)........J..U............J....:....*
.....k....k.I.q...&...y$.........F;...F......m..z.m.,.1..w....v.......
......!........o...Q.....E.P.....7....D....O\1.._L..u.........2\l...[.
q....r.....!<.a..8.,[email protected]'.t.2.\A.:h.t.SK.u..h1..i
<<< skipped >>>

GET /service/player/player59/player.volmeter.5.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1798
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "904c5d743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:50 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........f......E...h.~..P..... ..>(...:
...X|.G._`......`..:H..!*".......-.... ..b.V....<.a..4.(..0.i..0..@
.d(...M....KF...T.2..\n)..]TIe.JB...R.Ye.e..f.o....r.9..)4.H!|..g M.Q.
.o.I..q.A...6.....`...Tj...NaC..v..........:.....*.Q\.......*.Q.j.....
*... B........J.....D.w..........& ...V.-..*..! x....~K.......U.{G...k
G... ...../..v.....,....0G..'...uH1...G,...D...._.1..o......D.t.l..r&l
t;......q...,3. ...!>....<..3.D....f.a..D.a..?7...6.\..<h
<<< skipped >>>

GET /service/player/player59/player.volmeter.8.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1788
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "3821b3743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:50 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._............,0....Yx.....P..... ..>(...:
H.......\....X8.E...XB...".......-.... ..b.4.X..x....xXQ..7.."[email protected].
.$.J>)..P:[email protected]..&.n.I'.]4.. |....Mt..
....&..&....6.(.7L....V:..7<.........v.....J....*..W.......ZG...Z..
.. B..............k......t......a....k...*..  h....n......m......U.KG.
..;....k...v.............r.l..R.!........D....S<q..g....o.q.20!G.$.
\..O0A......._....C.l..8....5.aD.d.A..D.]..D.|s.3W....8...Q?M..OW=
<<< skipped >>>

GET /service/player/player59/player.volmeter.7.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "08596743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:50 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........?........a.g.~..P..... ..>(...:
H..^8...}....N.Pa..Zh"..*".......-.... ..b.0fa..|[email protected](
...M....KF.d.NrA. [email protected] ......4...o.
i..o.....6.....`...Tj...NaC...*...|*D...**....j.BDq.....* .xDaj...z ."
.P@....,...k.....l.K.q...F ..y,A...f.....`...~.....k.....n.-.Q..w. ..v
.`H..../..v.....,...w...u$...R.!../.,...D...._.1..o....k.r.30Q..(....O
01C..o,..1.,....0..<[email protected]'m4.F....C..s.?....Vc}u.Zw].
<<< skipped >>>

GET /service/player/player59/player.volmeter.9.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1780
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "70bdcf743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:51 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.......................}..........................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
...........................E..M..L..V..U..g..b..m..g..]..h..m.....{...
.............................p........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vo.......\
.^..5...\...z....>...*....x...{....>F...u..... ^........F4.L....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek...........
..G.^}.....C...~A....._........._........._.. /....Wt..~..P..... ..>
;(...:H...fhB.KT.E.ylQ..8TXa...".......-.... [email protected]...!.
4...J2.d.NF...MN)e.Ub....t.e.~D...P6.d.a..f.k....n..f.t.i..\(.G |..g.J
p.g.l.`...&....6zh.P.!...J.E.......l.C..z.)...jj......T.......J.......
".P.....k........ l.."Q..v4...v...........pm..j.m..b.-...K..,.!..s....
r.p...v`.........{..o.!...?...o..o..D....?.1..Ol...K....K.C.q.!..#..D.
1t...^....@.,[email protected]/.4.J?-..P;M..V[-..f
<<< skipped >>>

GET /service/player/player59/player.volmeter.10.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1784
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "268cfb733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:51 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}................................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
.................................E..M..L..V..U..g..b..m..g..]..h..m...
..{................................p..................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..>...*....x...{....>F...u..... ^..q.....VTHL....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Fk...........
..G.^}.....C...~A....._........._..........?./Z..B./h..~..P..... ..>
;(...:H...fXa..r.D.]..G.U,a..."".......-.... ..b.4....*.x..y.!..yLa..0
[email protected](...M....KF.d.T^...J&.E..."..b....P.1..j..&.j....q.ig.x..'.^(.. .
.*..Jx.&..&....6.....0..~Tj...B1C.?tJ@.?|.)....j...........T..!....j..
.. B..............k......."qG.xD [email protected]..~ ...zK....[n.,.!..
u. [email protected]....?,C.s.a..
'[email protected];.t.T3-5.VW...W
<<< skipped >>>

GET /service/player/player59/exobudset.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 467
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "2e87666f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:51 GMT
<!--..//..............true........false..........//................
..//var blnAutoStart = true;..//..................//var blnRndPlay = f
alse; ..//....................var blnStatusBar = true; ..//...........
...........var blnShowVolCtrl = true;..//..........................var
 blnShowPlist = true;..//............SMI..........................var 
blnUseSmi = false;..//..................//var blnLoopTrk = true;..//..
....................var blnShowMmInfo =false;..-->....


GET /service/player/player59/player.volmeter.0.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1795
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "c47ac9733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:52 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}.......................*s.0r.L~.Gu.S.
.O{.Q|.Ou.Pv.g.._..e.....f..l........}................................
........................E..M..L..V..U..g..b..m..g..]..h..m.....{......
..........................p...........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..;...*....x...{....;F...u..... ^..q.....>$.K...._.L
.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek.............G
.^}.....C...~A....._........._....\..h.......(....h....P.......Rh...ZH
.D..6....f... ~(b..j...%rX..'0.".P.q..4.......c. ..c.;..d. ....E.hH..|
a..N....TN...X,...N2...^r)f.L..%.h..%.`....G....t....[....l....~.)h...
I(.{.I..$.....F*).M.....f....v.(....D.z.j.....D...@@....*.........J...
. B...A..u.k..u.Q........2....V.-..Z. ......,....r.k..q..-..~..... o..
......{.......n.!...3...n.....7....G....D...F.....s.F.F.P1..[\2.#..r.,
G@..&....]....>.1..a....<....=.m..H'...L']....`...X.C.dd.u.e
<<< skipped >>>

GET /service/player/player59/player.volmeter.1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "a2b4e3733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:52 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q..........................}..........................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..?...*....x...{....?F...u..... ^..1.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._......`y....,^.'....h`...P.......Z0a..z....
L.....:... ~(b..>...%rx..'0.b./[email protected]#.T....,..c.;..$. ....E..H...
.d.Kf!...Tie..H...Nr.d.Pz)f..,.%.`....b..f.lv.....i..~,...l..g.o.)h.o.
9(.........E..F*).Q.....f.........|.D.OT.....zj.O.*j....*k...* ......"
.P.......t.a....aG.......>......-..Z... .....*...S.KG...;...v......
...r./....n......p.!...C!..p.....7....w`A..p0q......qt...o4....Sl....\
..*O.2...l..=..C.8.,[email protected]'...L.M.......QO...C.a..\o}.
<<< skipped >>>

GET /service/player/player59/player.volmeter.2.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1792
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "aa6313743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:52 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q.......................}............................
.*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vq.......\
.^..5...\..... ..@...*....x...{[email protected]..... ^..1.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._.............[......h`...P..... ..&.C.W|...
_\....v. ..~.a..>...%~...'0.b./..b"4T...8..G.X.(#.>.(d.3..#.H...
".40..NB.d.]L.. Xf.e Sp.e.S~)f.a2)..P..&.d..f.o..f.L.B..x....)..'.r...
...j..p.....2j...D*...JaC..f......).......Ba.....*.w@1.....*k.......~*
.....k...*..x.....&...J..,..F.........B......m..z.B.uPa.....n.-.......
.................r.!...GAG.r.....7....D....O\1......st...q8....[,q.(_\
q....2.'... =.a..8.Q..f.a..@.|F.C.l..H'...2.\..;h.t.SK.u.D....\o..
<<< skipped >>>

GET /service/player/player59/player.volmeter.3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1794
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "2e3b2b743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:53 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._..........F..0l..~..h....P..... ..>...LX
.E.}|a..](....J.b....b..>...'0.b./..b. bA..|....T..#.2.(d. .8..E..H
....d.O:.d..p!. .d.e..H...P2...O..e.h.)f.e..f.o....n..D ......,...q...
....'.p.....6...Q."...J....f......)........J..U............J....:....*
.....k....k.I.q...&...y$.........F;...F......m..z.m.,.1..w....v.......
......!........o...Q.....E.P.....7....D....O\1.._L..u.........2\l...[.
q....r.....!<.a..8.,[email protected]'.t.2.\A.:h.t.SK.u..h1..i
<<< skipped >>>

GET /service/player/player59/player.volmeter.4.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c7545743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:53 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.............................}.......................*s
.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}....................
....................................E..M..L..V..U..g..b..m..g..]..h..m
.....{................................p...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..?...*....x...{....?F...u..... ^..q.....^dhL...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik. Fk....!........G.^}
.....C...~A....._........._..........E../h..~..h ~..P..... ..>(..&p
...^....V0....N.b..>8".$.hB"........b.2..b.T....<.A..3..b.A.(..H
.9.".40..NB.d.RV...R."..\n...[[email protected]..'._,..!|..' K
|q..v..g.r..'..6....6jC..Tj...FaC..v.)[email protected]@.@.**...Z*.OT.........O.j..
....... .....k....l..&...y4...y......K....k...R......m....n...P.......
.......K....k.........,.... ...'.0.t@!...G,...X.A..X...._...2(A..$.\r.
M(1...o....s...1..F......<....B.q..e.a..D.A..?7...A..s.=....Vc}
<<< skipped >>>

GET /service/player/player59/player.volmeter.5.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1798
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "904c5d743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:53 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........f......E...h.~..P..... ..>(...:
...X|.G._`......`..:H..!*".......-.... ..b.V....<.a..4.(..0.i..0..@
.d(...M....KF...T.2..\n)..]TIe.JB...R.Ye.e..f.o....r.9..)4.H!|..g M.Q.
.o.I..q.A...6.....`...Tj...NaC..v..........:.....*.Q\.......*.Q.j.....
*... B........J.....D.w..........& ...V.-..*..! x....~K.......U.{G...k
G... ...../..v.....,....0G..'...uH1...G,...D...._.1..o......D.t.l..r&l
t;......q...,3. ...!>....<..3.D....f.a..D.a..?7...6.\..<h
<<< skipped >>>

GET /service/player/player59/player.volmeter.6.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1796
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:25 GMT
Accept-Ranges: bytes
ETag: "c8e879743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:54 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..l..q..........................}......................
.......*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}...........
.............................................E..M..L..V..U..g..b..m..g
..]..h..m.....{................................p......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vu.......\
.^..5...\........B...*....x...{....BF...u..... ^........v..L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.PFk....-........G.^}
.....C...~A....._........._........_.L.....C.c.g....P..... ..>(...:
Ha.;<.E....F.O.1a..>h..%R...'0.b./..b.4.(#.62b..}....}\.E.3..#.H
..c#.4`..NB.d.RV...Q^.E......^[email protected]..'.r.)........
..D.y.i..p.I...6....>....Tj...R.C..F:...|:D...**......0`.........R.
jj...j*.".P@....,...k..... .{.....F...L$....f{-.......~.....k.....m.xX
.n..../.-......{/........,p./.q...#<..S......lA..p0q..[Lq..S.1.....
[email protected][email protected]....<..s.G....i.m..j.Q..L.L.......QO
<<< skipped >>>

GET /service/player/player59/player.volmeter.7.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1799
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "08596743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:54 GMT
GIF89aK.%.............................................................
......................................................................
........Pu.Rw.g..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
.......................................E..M..L..V..U..g..b..m..g..]..h
..m.....{................................p............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..R...(S.\.....-!..I....8s...3...@Y....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ft.L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik.0Fk....%........G.^}
.....C...~A....._........._.........?........a.g.~..P..... ..>(...:
H..^8...}....N.Pa..Zh"..*".......-.... ..b.0fa..|[email protected](
...M....KF.d.NrA. [email protected] ......4...o.
i..o.....6.....`...Tj...NaC...*...|*D...**....j.BDq.....* .xDaj...z ."
.P@....,...k.....l.K.q...F ..y,A...f.....`...~.....k.....n.-.Q..w. ..v
.`H..../..v.....,...w...u$...R.!../.,...D...._.1..o....k.r.30Q..(....O
01C..o,..1.,....0..<[email protected]'m4.F....C..s.?....Vc}u.Zw].
<<< skipped >>>

GET /service/player/player59/player.volmeter.8.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1788
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "3821b3743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:54 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..l..q..........................}.........................
....*s.0r.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}..............
..............................E..M..L..V..U..g..b..m..g..]..h..m.....{
................................p.....................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vs.......\
.^..5...\.....k..A...*....x...{.n..AF...u..... ^..q.....ND(L...._.L.r.
.. ........?...5@......`B....m..=.7...{..-|....ik..Fk.............G.^}
.....C...~A....._........._............,0....Yx.....P..... ..>(...:
H.......\....X8.E...XB...".......-.... ..b.4.X..x....xXQ..7.."[email protected].
.$.J>)..P:[email protected]..&.n.I'.]4.. |....Mt..
....&..&....6.(.7L....V:..7<.........v.....J....*..W.......ZG...Z..
.. B..............k......t......a....k...*..  h....n......m......U.KG.
..;....k...v.............r.l..R.!........D....S<q..g....o.q.20!G.$.
\..O0A......._....C.l..8....5.aD.d.A..D.]..D.|s.3W....8...Q?M..OW=
<<< skipped >>>

GET /service/player/player59/player.volmeter.9.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1780
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "70bdcf743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:55 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.......................}..........................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
...........................E..M..L..V..U..g..b..m..g..]..h..m.....{...
.............................p........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vo.......\
.^..5...\...z....>...*....x...{....>F...u..... ^........F4.L....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Ek...........
..G.^}.....C...~A....._........._........._.. /....Wt..~..P..... ..>
;(...:H...fhB.KT.E.ylQ..8TXa...".......-.... [email protected]...!.
4...J2.d.NF...MN)e.Ub....t.e.~D...P6.d.a..f.k....n..f.t.i..\(.G |..g.J
p.g.l.`...&....6zh.P.!...J.E.......l.C..z.)...jj......T.......J.......
".P.....k........ l.."Q..v4...v...........pm..j.m..b.-...K..,.!..s....
r.p...v`.........{..o.!...?...o..o..D....?.1..Ol...K....K.C.q.!..#..D.
1t...^....@.,[email protected]/.4.J?-..P;M..V[-..f
<<< skipped >>>

GET /service/player/player59/player.volmeter.10.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1784
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:24 GMT
Accept-Ranges: bytes
ETag: "268cfb733b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:55 GMT
GIF89aK.%.............................................................
......................................................................
.....Pu.Rw.g..q.................}................................*s.0r
.L~.Gu.S..O{.Q|.Ou.Pv.g.._..e.....f..l........}.......................
.................................E..M..L..V..U..g..b..m..g..]..h..m...
..{................................p..................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.%........H......*\.p....#J.H.....)h...... C.
..2...(S.\.....-!..I....8s...3...@W....'..F..TZti..?.25.....Vk.......\
.^..5...\...Z.k..>...*....x...{....>F...u..... ^..q.....VTHL....
_.L.r... ........?...5@......`B....m..=.7...{..-|....ik..Fk...........
..G.^}.....C...~A....._........._..........?./Z..B./h..~..P..... ..>
;(...:H...fXa..r.D.]..G.U,a..."".......-.... ..b.4....*.x..y.!..yLa..0
[email protected](...M....KF.d.T^...J&.E..."..b....P.1..j..&.j....q.ig.x..'.^(.. .
.*..Jx.&..&....6.....0..~Tj...B1C.?tJ@.?|.)....j...........T..!....j..
.. B..............k......."qG.xD [email protected]..~ ...zK....[n.,.!..
u. [email protected]....?,C.s.a..
'[email protected];.t.T3-5.VW...W
<<< skipped >>>

GET /service/player/player59/exobudset.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 467
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "2e87666f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:55 GMT
<!--..//..............true........false..........//................
..//var blnAutoStart = true;..//..................//var blnRndPlay = f
alse; ..//....................var blnStatusBar = true; ..//...........
...........var blnShowVolCtrl = true;..//..........................var
 blnShowPlist = true;..//............SMI..........................var 
blnUseSmi = false;..//..................//var blnLoopTrk = true;..//..
....................var blnShowMmInfo =false;..-->....


GET /service/player/config/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 70
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "1e5b337870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:56 GMT
var blnAutoStart=false;..var blnRndPlay=false;..var blnLoopTrk=true;..
....


GET /service/player/config/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 70
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "1e5b337870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:56 GMT
var blnAutoStart=false;..var blnRndPlay=false;..var blnLoopTrk=true;..
....


GET /service/player/config/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 70
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "1e5b337870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:56 GMT
var blnAutoStart=false;..var blnRndPlay=false;..var blnLoopTrk=true;..
....


GET /service/player/list/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 88
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "78bd357870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
mkList("hXXp://q799090710.8441.isp1688.com/941.mp3","........941......
.... - ....");......


GET /service/player/list/578724578.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 88
Content-Type: application/x-javascript
Last-Modified: Sun, 21 Sep 2014 07:48:44 GMT
Accept-Ranges: bytes
ETag: "78bd357870d5cf1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
mkList("hXXp://q799090710.8441.isp1688.com/941.mp3","........941......
.... - ....");......


GET /service/player/player59/time.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 638
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "f494e7743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:57 GMT
<!--.function show5(){if(!document.layers&&!document.all).return.va
r Digital=new Date().var hours=Digital.getHours().var minutes=Digital.
getMinutes().var seconds=Digital.getSeconds().var dn="AM".if(hours>
12){dn="PM".hours=hours-12.}if(hours==0).hours=12.if(minutes<=9).mi
nutes="0" minutes.if(seconds<=9).seconds="0" seconds.//change font 
size here to your desire.myclock=".............." hours ":" minutes ":
". seconds " " dn "</b></font>".if(document.layers){docume
nt.layers.liveclock.document.write(myclock).document.layers.liveclock.
document.close().}else if(document.all).liveclock.innerHTML=myclock.se
tTimeout("show5()",1000).}.//-->....


GET /service/player/player59/imgchg.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1367
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "58fc7b6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:58 GMT
 toggleKey =new Object();.. toggleKey[0] = "_off";.. toggleKey[1] = "_
on";.. toggleKey[2] = "_ovr";.. toggleKey[3] = "_out";.. toggleKey[4] 
= "_mdn";.. toggleKey[5] = "_mup";..function imgChange(id , act){...if
(document.images){ document.images[id].src = eval("img."  id   toggleK
ey[act]   ".src");}..}..// ............ imgChange('img name' , 0).... 
imgChange('img  name' , 1) ...... if(document.images){...img = new Obj
ect();...// mute ...img.vmute_off = new Image();...img.vmute_off.src =
 "btn_mute_off.gif";...img.vmute_on = new Image();...img.vmute_on.src 
= "btn_mute_on.gif";......// ...img.pmode_off = new Image();...img.pmo
de_off.src = "btn_rndmode_off.gif";...img.pmode_on = new Image();...im
g.pmode_on.src = "btn_rndmode_on.gif";...// loop ...img.rept_off = new
 Image();...img.rept_off.src = "btn_rept_off.gif";...img.rept_on = new
 Image();...img.rept_on.src = "btn_rept_on.gif";...// Play ...img.play
t_off = new Image();...img.playt_off.src = "btn_play.gif";...img.playt
_on = new Image();...img.playt_on.src = "btn_play_on.gif";...// Pause 
& Play ...img.pauzt_off = new Image();...img.pauzt_off.src = "btn_pauz
_off.gif";...img.pauzt_on = new Image();...img.pauzt_on.src = "btn_pau
z_on.gif";...// Stop ...img.stopt_off = new Image();...img.stopt_off.s
rc = "btn_stop.gif";...img.stopt_on = new Image();...img.stopt_on.src 
= "btn_stop_on.gif";..}....
<<< skipped >>>

GET /service/player/player59/imgchg.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1367
Content-Type: application/x-javascript
Last-Modified: Tue, 24 Nov 2009 19:22:17 GMT
Accept-Ranges: bytes
ETag: "58fc7b6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:58 GMT
 toggleKey =new Object();.. toggleKey[0] = "_off";.. toggleKey[1] = "_
on";.. toggleKey[2] = "_ovr";.. toggleKey[3] = "_out";.. toggleKey[4] 
= "_mdn";.. toggleKey[5] = "_mup";..function imgChange(id , act){...if
(document.images){ document.images[id].src = eval("img."  id   toggleK
ey[act]   ".src");}..}..// ............ imgChange('img name' , 0).... 
imgChange('img  name' , 1) ...... if(document.images){...img = new Obj
ect();...// mute ...img.vmute_off = new Image();...img.vmute_off.src =
 "btn_mute_off.gif";...img.vmute_on = new Image();...img.vmute_on.src 
= "btn_mute_on.gif";......// ...img.pmode_off = new Image();...img.pmo
de_off.src = "btn_rndmode_off.gif";...img.pmode_on = new Image();...im
g.pmode_on.src = "btn_rndmode_on.gif";...// loop ...img.rept_off = new
 Image();...img.rept_off.src = "btn_rept_off.gif";...img.rept_on = new
 Image();...img.rept_on.src = "btn_rept_on.gif";...// Play ...img.play
t_off = new Image();...img.playt_off.src = "btn_play.gif";...img.playt
_on = new Image();...img.playt_on.src = "btn_play_on.gif";...// Pause 
& Play ...img.pauzt_off = new Image();...img.pauzt_off.src = "btn_pauz
_off.gif";...img.pauzt_on = new Image();...img.pauzt_on.src = "btn_pau
z_on.gif";...// Stop ...img.stopt_off = new Image();...img.stopt_off.s
rc = "btn_stop.gif";...img.stopt_on = new Image();...img.stopt_on.src 
= "btn_stop_on.gif";..}....
<<< skipped >>>

GET /service/player/player59/btn_mute_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1490
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "c499d36d3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:58 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'S.l..e..0G.. ....6c.......@}:.:...,(....-....0. J.Z..........C.
....f.(.............Yt...Y.(5*.(.....pk.c.6.*.%;C.D....!.3.V..02k.q...
[email protected]_.....s..L.....t.R9.c..q,.p.j%....."H...J5K. .8z.
.(1oT..I..I..)...`..,9..Y..!../aT.9...3";D.F.....U1.....$.........ubI4
..a.(&@............'#.q.6.....P."....S....#.1.\..7Z.q...0.D.?.H$...iM.
.<a.-\$...-(Q. .P`..&..AtVD...Nx`.!.....F....$.`..S.........!....n.
a..4.Q...X...0TpA.0. C..x...:..h.y... ..cE9..U.7....%{.....y....J...:.
tp..XX.B:..B.....C.y,..%z0..$%.`..|...&/..l.@. n....J#.x..)v.1....Q...
.K....Q..}.......p...l...'|...7....;l...Wl........w.1...,..$.<r.(..
..,....0.,..1.`..8..3....;....
<<< skipped >>>

GET /service/player/player59/btn_mute_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1487
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "4871eb6d3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:59 GMT
GIF89a..%..............g5.......................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'S.t.....0I..!....6c.......@}:.:.D. ).t.V..3..0. J........vI.)B.
.....[....z........|ADj..W.")..(.....`k...5. .. ..D.........4.12k.Q..1
T..H.0A....BH.r.....9W..(P.q..H.......2.Z..B..V0......*.#D...8.h.B5.q.
..N`...`.`....T..`.. 8..X..A..._V.A..8......#.(q......1..._u....~.L..-
a....Pl`./;...p.$...|.a.(Cx....D.........4.L3.D0...`1.,.....[..c..EP.4
.d..,.h...L..D,..BA.)...tTH...N|@. /....F....%.....E0.n"`...>.b..F.
A..a.!.9.|.B..\0E.2h .9...F.:.z..v(.J$.P..an...9&.BI.v.....u.a...$sN9.
Ta..T. .3....#[email protected]...........*.T../.2....&`...(R..\.B..a....c.!o.b
.a.......x. /........l........7.0..D,...W<1..g....k... .,..!7`..(..
2......0..r.4.l..8....;....
<<< skipped >>>

GET /service/player/player59/btn_rndmode_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 720
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "d865e36e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:59 GMT
GIF89a(.%..........9:n........................Fn.......z........E..M..
V..g..m.....{..........................s..z...........................
.................................................................!....
.*.,....(.%......pH,..H"b.l:..h...Z......z...xL...c.z.n..p.bN....|....
....~.........&........'.'.........'%.%.........$.$...................
............................................................4%.  .....
.3.P_...&H. `"B..0JD..c'..'P.0R....($(H.e..$92L..d.. r........ v&..i..
.F7.......P.X.. .T.PgZ......S.Z.;B...hGX8..l[.l..MkaDY."....W...{G..,.
o.....V........-,"/....^..83g.gC.....iN.G_]..5...Y........s..}.w...A..
...p.). _......=..N......_..}.......O.|....._...{.....O...............
7....h...&X.{.6.`..;....


GET /service/player/player59/btn_rndmode_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 720
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "5c3dfb6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:54:59 GMT
GIF89a(.%..........9:n........................Fn.......z........E..M..
V..g..m.....{..........................s..z...........................
.................................................................!....
.*.,....(.%......pH,..H"b.l:..h...Z......z...xL...c.z.n..p.bN....|....
....~.........&........'.'.........'%.%.........$.$...................
............................................................4%.  .....
.3.P_...&H. `"B..0JD..c'..'P.0R....($(H.e..$92L..d.. r........ v&..i..
.F7.......P.X.. .T.PgZ......S.Z.;B...hGX8..l[.l..MkaDY."....W...{G..,.
o.....V........-,"/....^..83g.gC.....iN.G_]..5...Y........s..}.w...A..
...p.). _......=..N......_..}.......O.|....._...{.....O...............
7....h...&X.{.6.`..;....


GET /service/player/player59/btn_rept_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "2a19b66e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 2157
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "b2314d6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a8.%.....................................}.......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*T......#J.H."...3j..1.%,.,\
......^...d..../...I....-\p1....w.t..'....;l*.)....Pe@A....*L*.bU.. cw
.Y)....!;..}..M..n..m.b..O..t.S.."3t.9"...$J......G\.r#..0.2e...\...P3
d..DR.d.......UgU.n..T.!..m.......w..#..c.......#..). d..}....u.Z.k...
D.tL.Y.S......2...........F....Y............'-.2.2.X....P....>.....
....."@..v...%M@R.".8.!w$....8....BH..%D...T....%..cI.l.B.@.)@.U.....L
....e......%..T..*{...IF.9d.d.Yf.'...6>@a....0A.S....]..B/\H.C.dd.L
.f.J...&.(.....$.T.......9=...0=lB..}d........-,.*....c......(|.q...`.
.&.......0.....B8{4..!y...I...*.-.A...T.O.\...&l|..&....-.x3.&M... %\ 
o.$.0.....I.7.b..KH...U....V...7:.r.$......z..'%\....GpF0?....Q..D.@..
.4 ..........\...._...<..3.8... .\...>.|.(....=...L(>W.s!
<<< skipped >>>

GET /service/player/player59/btn_pauz_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1490
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "aa821d6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:00 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}>.J...,(.....W...^. :.Z.....x.m.
%V.N..VL.8..``...B.....q....[.,AB$)...W`.}.c .'...!.!.......#...,._h..
.Y p.$P.......>.i.I...X.h.th...T...M...U......K...^.z......&P.p..&S
.h..r...1p...q..I...R......9....:....el .s....i..F.....U&.....$...>
.r^.....'.L....F.E..........y.(s..=.B.6..!J..."......5;..c..L....lQ..L
[email protected][email protected].][email protected]@.F,.T...&.p..W....Op`F"-....F....!\Q.......Y
.........6.P..e.....t....X.B.2...(..QC.{......b.:W.S..Y..M:30....z....
B.....H....e... .S.0.......kk..<"G%%........1...C....G.....$.|..*w.
a....Q....K.....F.h..F.5.K....l...'|...7....;l...Wl........w.1...,..$.
<r.(....,....0.,..1.`..8..3....;....
<<< skipped >>>

GET /service/player/player59/btn_stop.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1466
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "86b2106f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:01 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}>.J..., .l.F.....4. :........ m.
.U.L...LM...b`...B.....q..N.Z.,AB$)I..Wb...#.a'....."........ ..,.ah..
.. m.$P.0b...!D.i.I...X.h.t.E..T...M!.5U......K...\.z......&P.p%..R.h.
.r...1p...I` .....t22k..B....#.E..H..Os$M.J..qU.)`[email protected]...`...|.
.E......oxRD....C dTC...D1. Rp..6...b1SL..6[..".',...*.."1.@qK.][email protected],
..,.T...)....O|`F"/....F.aK.&.pE.T.6.n#h...>.c..F.`..d.Q.9W|....d`.
.2l .8...F.v....z...%.\.Ma1dA.5...H&|....x........9"\.E.W....3..c..;..
..@...... k.}...&.....y4.l..(.K*.,.........6;D.C....d.b.....G... n..& 
....k/.............,....L...'....?....G,1..Tl...g|...w... {\..$.l..%..
.;....
<<< skipped >>>

GET /service/player/player59/xmb.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1678
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "786cff743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:01 GMT
GIF89a<.%....TY`...|........w{................{....................
......inv............hms...........................^ci.........uz.....
..............}....................glrw|.rv|...pu}...............\ah..
.......}.....y}...................rw~otzintejqbgo.........z..cho...pt{
mry]bh...............^cj....................................fjq...~..d
ip...|........[`gx}...................................................
......................................................................
...........................rw}......qu{]bi......dhp.........|.........
.....................................................vz.nsy...tx....y}
............................ty....tx~...............ims...............
......................................................................
..............!.......,....<.%........H......*,......#J.H."Du.3j...
... 7..I....(S.\i....0c..I.....r.......@..<G....H.*].....P.J.J....R
.i......`........h..]..-.vp...K....x..............@;.....pc...q1..."..
[email protected]/..$n ......rI...w..Fr.p.....).B............9.....\H...._...(.D
........i..÷ ..e.....n-.`v........6...vT..pj..<[email protected]`
......r....Y............s..=.p.6.....~,C.....H............H@C;.<.U;
...Y.....Q.....V...)e.P.QY.pE..Pb..wLST..h#.2..2. ..A.......%...Q:....
.x...E.Q..&L..!'X..#.\....p...'TP.,.8pF/[email protected]@.iN/...g.....
.B. ......3.t ....!.%0Mq@2.....@(s.L..0C3O....,........:?.QE..0...8..I
$h....]t.-...P..).`...TA.&......<....$..g.P..'...@[email protected]@aD*.P....
....9. B./..........4.F.<8..)!.L.........`..{.../ ..J0.d.B...q.
<<< skipped >>>

GET /service/player/player59/btn_next.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "cc4836e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:01 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.O.>1!.K.(..].%....&.>.6c.6..0QB
uh. _...;.A....,\..$..RvX..5.Q.GKv\X.E..mN.%;#.C....!.C..5...^..,....&
L..b... .(..... Y .jQN..)[email protected]....<...!.. .*..TC..1p..I..
x.P*.......^.,|...f..2J.G.u.x.$i.D..f..-.....D}.Y....'.@.. 'd..0?.....
.......M(Fx......G4...Mq.Ha...hA..Lt!...............E.....)......YQ...
......a... .C.$.....i6Aq!`[email protected]
........94$b.......=...3.....X`aE.....10.......C%{0".$&p.(...zr..C..C.
.... ...."^xA..l.. .F.a..d.......F.m.a........v..... ....k.........k..
.. .............4.....,p...l...'[email protected]........;....
<<< skipped >>>

GET /service/player/player59/xmb3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1064
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:27 GMT
Accept-Ranges: bytes
ETag: "58dd71753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:02 GMT
GIF89a..%.............................................................
......................................................................
.........................................*s.E..Fn.X~.......z..........
......................$t.7..E..M..V..Q..\..b..g..m.....{..............
.....................s..z.............................................
...............................................!.....r.,......%.......
..............*.......*..C.....)..... .>...>@@AC)41,.....:...:;;
.AB1_.......]...]fB>.@B_0.......[....fU.BDj#..6.f...fh.hON.Z0#D..H.
 ....&.....X\..0....#l.....#G2e.$I.%.......`..../...re$..A..Hi....X...
zE...<p$..#../(..d..j. V.Z..c.......k....=zT......N..p.{....w...!..
.%^.....KE#(..a.....L.H...&a...4.......#/.\..I... ."[email protected]%nq...
..o0a....\J...q;........H..cz...m....9.d.B..2f...S.......%r...@?...c..
..?....=...`....."....5(.y..'.m.6..(.D.....7.....Zm.e....\r..EX7..Pdg.
.j.@.&/[email protected]`a..T.bJ..l.
..l.).......1$hg.5....^....^....t.... $J....*...E*...T:...f*A..>...
..*..."`.............j*.....;....


GET /service/player/player59/bg.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 763
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "54619a6d3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:02 GMT
GIF89a(.%.............................................................
......................................................................
..}..............................................................!....
.?.,....(.%[email protected],..H.d.l:..h.B.Z......z...x......z.F'T.8\......}o..
..............1........#........>95.......5.......4..&.............
...;;....................%....  ......:&%&........:.......&<.'.....
...p'...0..@..{4hPC"E..'V..c....'J.h....&Q.,..F...N...2%..8s...2....:e
.% T...E........P...Q....W.R-.PD..X.^..U... ..U...B....m..,.......w!.p
|....!.......|.0a...'v.A...7\\..Y3f.7.w..y....^...zuk..a.H..u...cg.Q!.
...}....Fp.......E....C.>].u..7lH.}{w...{.>..x.0.._......C..O...
.................h...&....4....F(..."`...f....bx... .(..$....(....,...
.A..;....


GET /service/player/player59/xmb1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1134
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "fc4317753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:02 GMT
GIF89a#.%.............................................................
......................................................................
.........................................*s.E..Fn.X~.......z..........
......................$t.7..E..M..V..Q..\..b..g..m.....{..............
.....................s..z.............................................
...............................................!.....r.,....#.%.......
................*....*.... ......).C.......,...14)CA@@>....>....
..._1B.>;;:....:.......0_B.;>Bf]....]6.#..jD..Uf[.....$."..#0Zr9
y.....f.*\.0..#F..1"B..[Np`.R.........1.....$IB.L.20c......7%....... X
..%.e...Bm2()... 9|..q.*[email protected].......?..U....6'.L0.....$8p<.
R.G. .........("...EH..I.(q".._ |3k.b.....$6m../..KR3Y.d....W#Ab.....O
 Q......{...N....]7y..J.(R.G..\........%.n.....O~|.0a......./.yH..d9.)
.....c..).....iH``..i....5'...M!..S.1...J...4t.!.0..[x.....c.a!.,.8...
D J.1l7.......-..b.3.q..Dx..rO@W..~*J...PNQ../`B..j`Q.}.....L..e...Q.&
.\)B.M...s....~....%.....4..T.m2.....X...l..(......aA......u......z...
^....".a..........B..~...^x.....z......... ...J....&....4;...F....Vk..
.f.-..v..........k.(........;HTTP/1.1 200 OK..Content-Length: 1134..Co
ntent-Type: image/gif..Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT..A
ccept-Ranges: bytes..ETag: "fc4317753b6dca1:1bc6"..Server: Microsoft-I
IS/6.0..X-Powered-By: ASP.NET..Date: Sun, 11 Jan 2015 23:55:02 GMT..GI
F89a#.%...............................................................
..................................................................
<<< skipped >>>

GET /service/player/player59/btn_rndmode_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 720
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "5c3dfb6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a(.%..........9:n........................Fn.......z........E..M..
V..g..m.....{..........................s..z...........................
.................................................................!....
.*.,....(.%......pH,..H"b.l:..h...Z......z...xL...c.z.n..p.bN....|....
....~.........&........'.'.........'%.%.........$.$...................
............................................................4%.  .....
.3.P_...&H. `"B..0JD..c'..'P.0R....($(H.e..$92L..d.. r........ v&..i..
.F7.......P.X.. .T.PgZ......S.Z.;B...hGX8..l[.l..MkaDY."....W...{G..,.
o.....V........-,"/....^..83g.gC.....iN.G_]..5...Y........s..}.w...A..
...p.). _......=..N......_..}.......O.|....._...{.....O...............
7....h...&X.{.6.`..;....


GET /service/player/player59/btn_rept_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "548ecb6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 2148
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "369656e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:03 GMT
GIF89a8.%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*\......#J.H.b...3j..1.. .,\
......]...d..../...I....-\l1$...w.v.......:l*.)....Pe<A...!*K*.be..
.cv.U).... :..}..M..n..m.b..O..t.c...2s.5*...#J.....aG\.r#.. .2e...\..
[email protected]..#.![4......#..)..d..}....u.Y.k
.....tK.].[......2...........F)...X............'-.BM2.X....P....>..
........"@..v...%M@R.".8.!v ....8....BH..Y....S....%..cI.l.B.@.)@.T...
..L....e....AI.9J.r..4.q..`....d....h.2K.O.../.LPAF.h.E.!...49.1.6..P.
.cza........<2..J(..-=...F....9I....K0r../....................?`...
..2C&3l4C....B8{0..!y...I...*.-.....D...[...&kl.-&.m{K .......1H...[-.
......z.....r.....)./)Q...x..(.DB...6L.'.|RB..S<q.x..C.?..E.?|..L..
...J.#L.4..../[[email protected].?........&....4...4..D.A..L-u!z..
<<< skipped >>>

GET /service/player/player59/btn_pauz_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1487
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "2e5a356e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:04 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
..F...'[email protected]`...8k.......@}6.J.D. &.|..M....Z. :.......ha-S%U.
J..5.M...\`.........at.N.Z.(92.....U\.m.b..&.....!.....}..... .[h..m.*
o."L.......<.Y..T..V.`.T(E9.R...=...T....}.....Z.jb.....$L.P..%R.d.
.baC.0n...aqK.DQ' ..D.V.^.._.....14...8...3E.q.$..qU.%...3.. ...@.!Dc.
..%.....O<.......',p....@.......(B..D..@.....!......1Q\..7Y.1..#$..
.3...D4Bd.6N......2......*..`B.0@DE..}2..d......A.yo..B.SH1.h.}p.... .
.m.A..C.1...T...-Tp..-.....x.J.3..G.x... ..S.8..p.a...."......y....x..
.4.xp..WT..9..B.-y.Pk...pK#pLB.....J*..3..:....w$..0.8.H.].R..D....c.!
o.B.q..f.`F.k.2.........l........7.0..D,...W<1..g....k... .,..!7`..
(..2......0..r.4.l..8....;....
<<< skipped >>>

GET /service/player/player59/btn_stop.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1466
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "86b2106f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:04 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}>.J..., .l.F.....4. :........ m.
.U.L...LM...b`...B.....q..N.Z.,AB$)I..Wb...#.a'....."........ ..,.ah..
.. m.$P.0b...!D.i.I...X.h.t.E..T...M!.5U......K...\.z......&P.p%..R.h.
.r...1p...I` .....t22k..B....#.E..H..Os$M.J..qU.)`[email protected]...`...|.
.E......oxRD....C dTC...D1. Rp..6...b1SL..6[..".',...*.."1.@qK.][email protected],
..,.T...)....O|`F"/....F.aK.&.pE.T.6.n#h...>.c..F.`..d.Q.9W|....d`.
.2l .8...F.v....z...%.\.Ma1dA.5...H&|....x........9"\.E.W....3..c..;..
..@...... k.}...&.....y4.l..(.K*.,.........6;D.C....d.b.....G... n..& 
....k/.............,....L...'....?....G,1..Tl...g|...w... {\..$.l..%..
.;....
<<< skipped >>>

GET /service/player/player59/btn_stop_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1458
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "64ec2a6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:04 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}6.J... ).d.&.V...\. :.......p.-S.T.
H........^`.........ad...Y.(92.....U^.u.b..&.....!.....}..... .]h....*
l."L.."[email protected].`.Th.7.R...=..5T....}.....X.jb.....$L.P...Q.d..b.
[email protected]..%H..P^...C.H.3E........'\..1.. ....QC'.0....>.....
.C...QQ.:.!.4...........d......E48X...$*QB.\[email protected]...<.E....D2j.r.
.6.pBE...D.d......A....A..UL!.h........./..A..4.!..s.SE...P..T..C.0...
)i..g.y...,.P.N.......Q.N..\.....a..9.q./....eW\QE..4..0.......v..-..1
...>.G .`.....p......2...H"]tQJ.j....A......!.-..Q..|.A...n.m......
..{....k........../...,....<...'.... ....G,... `...g.1..t... ..q@.;
....
<<< skipped >>>

GET /service/player/player59/btn_prev.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "14437f6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:06 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.M.6)....'..Y......%.6.&CF....M:eH..^.
..3.!.U..,T...."RuV..%..!GIr\XkömL.!3..C......2......V........D.."..
...$...B.*W..bAn.f...x.f.. .Vt.R......&|.0!..*.(.zD#..0o..I..8.O)....i
..].,x...E..1H....<..#[email protected].,......x....a.&.<.. &d../=.......F
...r.(Dt.D..|..4~.....@Q...`!..Jl.D..............E....J)......Q1....pB
...Q.......#.....i.Y. X...?.c..E. ...P.A.1Tp........pR..5...0.."I9T...
.....93 R.......;..K3.|.A.VXA......0/.q......%z,.G$%p.....zb..A.......
@ ....!\p1..k.. .D.A..b......p..l.Q........v..... ....k.........k.... 
.............4.....,p...l...'[email protected]........;....
<<< skipped >>>

GET /service/player/player59/xmb3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1064
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:27 GMT
Accept-Ranges: bytes
ETag: "58dd71753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:06 GMT
GIF89a..%.............................................................
......................................................................
.........................................*s.E..Fn.X~.......z..........
......................$t.7..E..M..V..Q..\..b..g..m.....{..............
.....................s..z.............................................
...............................................!.....r.,......%.......
..............*.......*..C.....)..... .>...>@@AC)41,.....:...:;;
.AB1_.......]...]fB>.@B_0.......[....fU.BDj#..6.f...fh.hON.Z0#D..H.
 ....&.....X\..0....#l.....#G2e.$I.%.......`..../...re$..A..Hi....X...
zE...<p$..#../(..d..j. V.Z..c.......k....=zT......N..p.{....w...!..
.%^.....KE#(..a.....L.H...&a...4.......#/.\..I... ."[email protected]%nq...
..o0a....\J...q;........H..cz...m....9.d.B..2f...S.......%r...@?...c..
..?....=...`....."....5(.y..'.m.6..(.D.....7.....Zm.e....\r..EX7..Pdg.
.j.@.&/[email protected]`a..T.bJ..l.
..l.).......1$hg.5....^....^....t.... $J....*...E*...T:...f*A..>...
..*..."`.............j*.....;....


GET /service/player/player59/xmb1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 1134
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "fc4317753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:06 GMT
GIF89a#.%.............................................................
......................................................................
.........................................*s.E..Fn.X~.......z..........
......................$t.7..E..M..V..Q..\..b..g..m.....{..............
.....................s..z.............................................
...............................................!.....r.,....#.%.......
................*....*.... ......).C.......,...14)CA@@>....>....
..._1B.>;;:....:.......0_B.;>Bf]....]6.#..jD..Uf[.....$."..#0Zr9
y.....f.*\.0..#F..1"B..[Np`.R.........1.....$IB.L.20c......7%....... X
..%.e...Bm2()... 9|..q.*[email protected].......?..U....6'.L0.....$8p<.
R.G. .........("...EH..I.(q".._ |3k.b.....$6m../..KR3Y.d....W#Ab.....O
 Q......{...N....]7y..J.(R.G..\........%.n.....O~|.0a......./.yH..d9.)
.....c..).....iH``..i....5'...M!..S.1...J...4t.!.0..[x.....c.a!.,.8...
D J.1l7.......-..b.3.q..Dx..rO@W..~*J...PNQ../`B..j`Q.}.....L..e...Q.&
.\)B.M...s....~....%.....4..T.m2.....X...l..(......aA......u......z...
^....".a..........B..~...^x.....z......... ...J....&....4;...F....Vk..
.f.-..v..........k.(........;....


GET /service/player/player59/bg.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 763
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "54619a6d3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:07 GMT
GIF89a(.%.............................................................
......................................................................
..}..............................................................!....
.?.,....(.%[email protected],..H.d.l:..h.B.Z......z...x......z.F'T.8\......}o..
..............1........#........>95.......5.......4..&.............
...;;....................%....  ......:&%&........:.......&<.'.....
...p'...0..@..{4hPC"E..'V..c....'J.h....&Q.,..F...N...2%..8s...2....:e
.% T...E........P...Q....W.R-.PD..X.^..U... ..U...B....m..,.......w!.p
|....!.......|.0a...'v.A...7\\..Y3f.7.w..y....^...zuk..a.H..u...cg.Q!.
...}....Fp.......E....C.>].u..7lH.}{w...{.>..x.0.._......C..O...
.................h...&....4....F(..."`...f....bx... .(..$....(....,...
.A..;....


GET /service/player/player59/xmb2.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 289
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:27 GMT
Accept-Ranges: bytes
ETag: "da7d31753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:07 GMT
GIF89a..%...............................Fn.z........M..V..m...........
...............s..z...................................................
.................................................................!....
.".,......%...>@..p@ ..."..X*.....t8..e..H".F..x<0.L...l...:.6.B
 ..b0......}A.;....


GET /service/player/player59/xmb2.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=1; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 289
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:27 GMT
Accept-Ranges: bytes
ETag: "da7d31753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:07 GMT
GIF89a..%...............................Fn.z........M..V..m...........
...............s..z...................................................
.................................................................!....
.".,......%...>@..p@ ..."..X*.....t8..e..H".F..x<0.L...l...:.6.B
 ..b0......}A.;....


GET /service/player/player59/btn_rept_off.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 609
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "2a19b66e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:08 GMT
GIF89a..%..........9:n.....................Fn.......z........E..M..V..
g..m.....{.......................s..z.................................
.................................................................!....
.(.,......%......pH,..B.r.l:.JBbJ.R..,...z..0.A....4Y.n...8{C....<]
......|$.......%.......#......."......................$...............
.......................................$.........$.............d......
..?P#..`B....p......BT.!.#F..C...0....C...2eK.0Y..IS%..8U....#.~. H..:
[email protected]*.g..X....u...`...K.....<...v.Z.'...K.....L...wo..
..v.L.......X.........L.....'........7..M.....GG^..q..;....


GET /service/player/player59/btn_play.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 2157
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "b2314d6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:08 GMT
GIF89a8.%.....................................}.......................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.%........H......*T......#J.H."...3j..1.%,.,\
......^...d..../...I....-\p1....w.t..'....;l*.)....Pe@A....*L*.bU.. cw
.Y)....!;..}..M..n..m.b..O..t.S.."3t.9"...$J......G\.r#..0.2e...\...P3
d..DR.d.......UgU.n..T.!..m.......w..#..c.......#..). d..}....u.Z.k...
D.tL.Y.S......2...........F....Y............'-.2.2.X....P....>.....
....."@..v...%M@R.".8.!w$....8....BH..%D...T....%..cI.l.B.@.)@.U.....L
....e......%..T..*{...IF.9d.d.Yf.'...6>@a....0A.S....]..B/\H.C.dd.L
.f.J...&.(.....$.T.......9=...0=lB..}d........-,.*....c......(|.q...`.
.&.......0.....B8{4..!y...I...*.-.A...T.O.\...&l|..&....-.x3.&M... %\ 
o.$.0.....I.7.b..KH...U....V...7:.r.$......z..'%\....GpF0?....Q..D.@..
.4 ..........\...._...<..3.8... .\...>.|.(....=...L(>W.s!
<<< skipped >>>

GET /service/player/player59/btn_pauz_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1487
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "2e5a356e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:08 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
..F...'[email protected]`...8k.......@}6.J.D. &.|..M....Z. :.......ha-S%U.
J..5.M...\`.........at.N.Z.(92.....U\.m.b..&.....!.....}..... .[h..m.*
o."L.......<.Y..T..V.`.T(E9.R...=...T....}.....Z.jb.....$L.P..%R.d.
.baC.0n...aqK.DQ' ..D.V.^.._.....14...8...3E.q.$..qU.%...3.. ...@.!Dc.
..%.....O<.......',p....@.......(B..D..@.....!......1Q\..7Y.1..#$..
.3...D4Bd.6N......2......*..`B.0@DE..}2..d......A.yo..B.SH1.h.}p.... .
.m.A..C.1...T...-Tp..-.....x.J.3..G.x... ..S.8..p.a...."......y....x..
.4.xp..WT..9..B.-y.Pk...pK#pLB.....J*..3..:....w$..0.8.H.].R..D....c.!
o.B.q..f.`F.k.2.........l........7.0..D,...W<1..g....k... .,..!7`..
(..2......0..r.4.l..8....;....
<<< skipped >>>

GET /service/player/player59/btn_stop.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1466
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "86b2106f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:09 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}>.J..., .l.F.....4. :........ m.
.U.L...LM...b`...B.....q..N.Z.,AB$)I..Wb...#.a'....."........ ..,.ah..
.. m.$P.0b...!D.i.I...X.h.t.E..T...M!.5U......K...\.z......&P.p%..R.h.
.r...1p...I` .....t22k..B....#.E..H..Os$M.J..qU.)`[email protected]...`...|.
.E......oxRD....C dTC...D1. Rp..6...b1SL..6[..".',...*.."1.@qK.][email protected],
..,.T...)....O|`F"/....F.aK.&.pE.T.6.n#h...>.c..F.`..d.Q.9W|....d`.
.2l .8...F.v....z...%.\.Ma1dA.5...H&|....x........9"\.E.W....3..c..;..
..@...... k.}...&.....y4.l..(.K*.,.........6;D.C....d.b.....G... n..& 
....k/.............,....L...'....?....G,1..Tl...g|...w... {\..$.l..%..
.;....
<<< skipped >>>

GET /service/player/player59/btn_stop_on.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1458
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:16 GMT
Accept-Ranges: bytes
ETag: "64ec2a6f3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:09 GMT
GIF89a..%.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\...B..#J.HQ....3j...... C.
......'[email protected]`...8k.......@}6.J... ).d.&.V...\. :.......p.-S.T.
H........^`.........ad...Y.(92.....U^.u.b..&.....!.....}..... .]h....*
l."L.."[email protected].`.Th.7.R...=..5T....}.....X.jb.....$L.P...Q.d..b.
[email protected]..%H..P^...C.H.3E........'\..1.. ....QC'.0....>.....
.C...QQ.:.!.4...........d......E48X...$*QB.\[email protected]...<.E....D2j.r.
.6.pBE...D.d......A....A..UL!.h........./..A..4.!..s.SE...P..T..C.0...
)i..g.y...,.P.N.......Q.N..\.....a..9.q./....eW\QE..4..0.......v..-..1
...>.G .`.....p......2...H"]tQJ.j....A......!.-..Q..|.A...n.m......
..{....k........../...,....<...'.... ....G,... `...g.1..t... ..q@.;
....
<<< skipped >>>

GET /service/player/player59/xmb.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1678
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:26 GMT
Accept-Ranges: bytes
ETag: "786cff743b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:09 GMT
GIF89a<.%....TY`...|........w{................{....................
......inv............hms...........................^ci.........uz.....
..............}....................glrw|.rv|...pu}...............\ah..
.......}.....y}...................rw~otzintejqbgo.........z..cho...pt{
mry]bh...............^cj....................................fjq...~..d
ip...|........[`gx}...................................................
......................................................................
...........................rw}......qu{]bi......dhp.........|.........
.....................................................vz.nsy...tx....y}
............................ty....tx~...............ims...............
......................................................................
..............!.......,....<.%........H......*,......#J.H."Du.3j...
... 7..I....(S.\i....0c..I.....r.......@..<G....H.*].....P.J.J....R
.i......`........h..]..-.vp...K....x..............@;.....pc...q1..."..
[email protected]/..$n ......rI...w..Fr.p.....).B............9.....\H...._...(.D
........i..÷ ..e.....n-.`v........6...vT..pj..<[email protected]`
......r....Y............s..=.p.6.....~,C.....H............H@C;.<.U;
...Y.....Q.....V...)e.P.QY.pE..Pb..wLST..h#.2..2. ..A.......%...Q:....
.x...E.Q..&L..!'X..#.\....p...'TP.,.8pF/[email protected]@.iN/...g.....
.B. ......3.t ....!.%0Mq@2.....@(s.L..0C3O....,........:?.QE..0...8..I
$h....]t.-...P..).`...TA.&......<....$..g.P..'...@[email protected]@aD*.P....
....9. B./..........4.F.<8..)!.L.........`..{.../ ..J0.d.B...q.
<<< skipped >>>

GET /service/player/player59/btn_prev.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:15 GMT
Accept-Ranges: bytes
ETag: "14437f6e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:10 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.M.6)....'..Y......%.6.&CF....M:eH..^.
..3.!.U..,T...."RuV..%..!GIr\XkömL.!3..C......2......V........D.."..
...$...B.*W..bAn.f...x.f.. .Vt.R......&|.0!..*.(.zD#..0o..I..8.O)....i
..].,x...E..1H....<..#[email protected].,......x....a.&.<.. &d../=.......F
...r.(Dt.D..|..4~.....@Q...`!..Jl.D..............E....J)......Q1....pB
...Q.......#.....i.Y. X...?.c..E. ...P.A.1Tp........pR..5...0.."I9T...
.....93 R.......;..K3.|.A.VXA......0/.q......%z,.G$%p.....zb..A.......
@ ....!\p1..k.. .D.A..b......p..l.Q........v..... ....k.........k.... 
.............4.....,p...l...'[email protected]........;....
<<< skipped >>>

GET /service/player/player59/btn_next.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1437
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:14 GMT
Accept-Ranges: bytes
ETag: "cc4836e3b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:10 GMT
GIF89a..%.......................................................}.....
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,......%.....!..H..A...*\......#J.H.....3j...... C.
D.....'[email protected].. 3..........O.O.>1!.K.(..].%....&.>.6c.6..0QB
uh. _...;.A....,\..$..RvX..5.Q.GKv\X.E..mN.%;#.C....!.C..5...^..,....&
L..b... .(..... Y .jQN..)[email protected]....<...!.. .*..TC..1p..I..
x.P*.......^.,|...f..2J.G.u.x.$i.D..f..-.....D}.Y....'.@.. 'd..0?.....
.......M(Fx......G4...Mq.Ha...hA..Lt!...............E.....)......YQ...
......a... .C.$.....i6Aq!`[email protected]
........94$b.......=...3.....X`aE.....10.......C%{0".$&p.(...zr..C..C.
.... ...."^xA..l.. .F.a..d.......F.m.a........v..... ....k.........k..
.. .............4.....,p...l...'[email protected]........;....
<<< skipped >>>

GET /service/player/player59/xmb3.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive
Cookie: AJSTAT_ok_pages=2; AJSTAT_ok_times=1


HTTP/1.1 200 OK
Content-Length: 1064
Content-Type: image/gif
Last-Modified: Tue, 24 Nov 2009 19:22:27 GMT
Accept-Ranges: bytes
ETag: "58dd71753b6dca1:1bc6"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 11 Jan 2015 23:55:10 GMT
GIF89a..%.............................................................
......................................................................
.........................................*s.E..Fn.X~.......z..........
......................$t.7..E..M..V..Q..\..b..g..m.....{..............
.....................s..z.............................................
...............................................!.....r.,......%.......
..............*.......*..C.....)..... .>...>@@AC)41,.....:...:;;
.AB1_.......]...]fB>.@B_0.......[....fU.BDj#..6.f...fh.hON.Z0#D..H.
 ....&.....X\..0....#l.....#G2e.$I.%.......`..../...re$..A..Hi....X...
zE...<p$..#../(..d..j. V.Z..c.......k....=zT......N..p.{....w...!..
.%^.....KE#(..a.....L.H...&a...4.......#/.\..I... ."[email protected]%nq...
..o0a....\J...q;........H..cz...m....9.d.B..2f...S.......%r...@?...c..
..?....=...`....."....5(.y..'.m.6..(.D.....7.....Zm.e....\r..EX7..Pdg.
.j.@.&/[email protected]`a..T.bJ..l.
..l.).......1$hg.5....^....^....t.... $J....*...E*...T:...f*A..>...
..*..."`............



GET /9.gif?abc=1&rnd=2003700200 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:13 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DYiZXhsCASU5EL1uOoAQ; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.mmstat.com
Set-Cookie: sca=176a70bc; path=/; domain=.cnzz.mmstat.com
Set-Cookie: atpsida=644dca2fa9f9b87f2729245c_1421021053; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DYiZXhsCASU5EL1uOoAQ
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Mon, 12 Jan 2015 00:04:13 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=ff05DYiZXh
sCASU5EL1uOoAQ; expires=Thu, 09-Jan-25 00:04:13 GMT; path=/; domain=.m
mstat.com..Set-Cookie: sca=176a70bc; path=/; domain=.cnzz.mmstat.com..
Set-Cookie: atpsida=644dca2fa9f9b87f2729245c_1421021053; expires=Thu, 
09-Jan-25 00:04:13 GMT; path=/; domain=.cnzz.mmstat.com..Location: htt
p://pcookie.cnzz.com/app.gif?&cna=ff05DYiZXhsCASU5EL1uOoAQ..Expires: T
hu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cach
e..GIF89a.............!.......,...........L..;....


GET /9.gif?abc=1&rnd=1421349794 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive
Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; sca=06f3d268; atpsida=53742cc50c4815cac571f970_1421021053


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: atpsida=53742cc50c4815cac571f970_1421021054; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /9.gif?abc=1&rnd=56918711 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cnzz.mmstat.com
Connection: Keep-Alive
Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; sca=06f3d268; atpsida=53742cc50c4815cac571f970_1421021053


HTTP/1.1 302 Found
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: atpsida=53742cc50c4815cac571f970_1421021054; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.mmstat.com
Location: hXXp://pcookie.cnzz.com/app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Mon, 12 Jan 2015 00:04:14 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: atpsida=53742c
c50c4815cac571f970_1421021054; expires=Thu, 09-Jan-25 00:04:14 GMT; pa
th=/; domain=.cnzz.mmstat.com..Location: hXXp://pcookie.cnzz.com/app.g
if?&cna=ff05DajU6XYCASU5EL1h9oQy..Expires: Thu, 01 Jan 1970 00:00:01 G
MT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!...
....,...........L..;..



GET /service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 Jan 2015 23:54:44 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.5
Content-type: text/html
<html>..<head>..<title>......................</ti
tle>..<META http-equiv=Content-Type content=text/html; charset=g
b2312 >..<meta name=keywords content="exobud mp">..<meta n
ame="description" content="">..<meta http-equiv="Content-Type" c
ontent="text/html; charset=gb2312">..<STYLE TYPE="text/css">.
.<!--..     A:LINK ..{... COLOR: silver;... TEXT-DECORATION: none ;
..}..     A:HOVER ..{... COLOR: white;... TEXT-DECORATION: none ;..}..
     A:ACTIVE ..{... COLOR: white;... TEXT-DECORATION: none ;..}..    
 A:VISITED ..{... COLOR: silver;... TEXT-DECORATION: none ;..}..     B
ODY ..{... MARGIN: 0px 0px 0px 0px;... BACKGROUND COLOR:#4B7EE9;..}.. 
.TITLE..{... FONT-FAMILY: "Verdana", "Arial", "Helvetica", "sans-serif
";... FONT-SIZE: 11px;... COLOR:#333333;... ;..}...TIME..{...FONT-FAMI
LY: "Verdana", "Arial", "Helvetica", "sans-serif";... FONT-SIZE: 10px;
... COLOR:#333333;... ;..}..-->..</STYLE>..<script languag
e="JavaScript">..<!--..function SymError()..{..  return true;..}
..window.onerror = SymError;..//-->..</script>..<SCRIPT La
nguage="JavaScript" src="xmbud.js"></SCRIPT>..<SCRIPT lang
uage=JavaScript>...function preload(imgObj,imgSrc) ...{...if (docum
ent.images) ...{....eval(imgObj ' = new Image()')....eval(imgObj '.src
 = "' imgSrc '"')...}...}...preload("meter0", "player.volmeter.0.gif")
;...preload("meter1", "player.volmeter.1.gif");...preload("meter2", "p
layer.volmeter.2.gif");...preload("meter3", "player.volmeter.3.gif
<<< skipped >>>


GET /service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.zzsky.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 Jan 2015 23:54:43 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.5
Content-type: text/html
<html>..<head>..<title>......................</ti
tle>..<META http-equiv=Content-Type content=text/html; charset=g
b2312 >..<meta name=keywords content="exobud mp">..<meta n
ame="description" content="">..<meta http-equiv="Content-Type" c
ontent="text/html; charset=gb2312">..<STYLE TYPE="text/css">.
.<!--..     A:LINK ..{... COLOR: silver;... TEXT-DECORATION: none ;
..}..     A:HOVER ..{... COLOR: white;... TEXT-DECORATION: none ;..}..
     A:ACTIVE ..{... COLOR: white;... TEXT-DECORATION: none ;..}..    
 A:VISITED ..{... COLOR: silver;... TEXT-DECORATION: none ;..}..     B
ODY ..{... MARGIN: 0px 0px 0px 0px;... BACKGROUND COLOR:#4B7EE9;..}.. 
.TITLE..{... FONT-FAMILY: "Verdana", "Arial", "Helvetica", "sans-serif
";... FONT-SIZE: 11px;... COLOR:#333333;... ;..}...TIME..{...FONT-FAMI
LY: "Verdana", "Arial", "Helvetica", "sans-serif";... FONT-SIZE: 10px;
... COLOR:#333333;... ;..}..-->..</STYLE>..<script languag
e="JavaScript">..<!--..function SymError()..{..  return true;..}
..window.onerror = SymError;..//-->..</script>..<SCRIPT La
nguage="JavaScript" src="xmbud.js"></SCRIPT>..<SCRIPT lang
uage=JavaScript>...function preload(imgObj,imgSrc) ...{...if (docum
ent.images) ...{....eval(imgObj ' = new Image()')....eval(imgObj '.src
 = "' imgSrc '"')...}...}...preload("meter0", "player.volmeter.0.gif")
;...preload("meter1", "player.volmeter.1.gif");...preload("meter2", "p
layer.volmeter.2.gif");...preload("meter3", "player.volmeter.3.gif
<<< skipped >>>


GET /img/gif008.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 565
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/gif008.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a ..........R.......!..NETSCAPE2.0.....!.......,.... ....._....m.
..PZ.D.6.N...}Q)[email protected],.....|.... ..K.v.....-yJ.R6;....Tx...Y Y5i
......i...9......F..!.......,.... ....._........PZ.D.6.N...}Q)....M..1
@.i,.....|.... ..K.v.....-yJ.R6;....Tx...Y Y5i......i...9.....|E..!...
....,.... .....`........PZ.D.6.N...}Q)[email protected].<..h..0.
d..U....Q6S..U.5..r...R9i....[....r1.a.7......!.......,.... ....._....
....PZ.D.6.N...}Q)[email protected],.....|.... ..K.v.....-yJ.R6;....Tx...Y Y
5i......i...9.....|E..!.3Reduced 73% @ VVV.raspberryhill.com/gifwizard
.html..;....


GET /img/zsf.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:26 GMT
Content-Length: 85308
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/zsf.gif
Last-Modified: Thu, 14 Aug 2014 07:47:38 GMT
Accept-Ranges: bytes
ETag: "089c3494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..Z....9Z.(\.,e.4i.<`.Lr.Uv.Gk.Ae.:s. f.5j.;r.4k..l.,h.4m.8n.
2m.1g..p..q.5p.9q.=x.4s.;u.6x.<x.5u.:v.6x.:y.Lu.Bn.Bt.Dw.Q{.Qw.Eu.H
v.Dy.J{[email protected]|.I}.R}.C~.H..Y..f..r..v..l..w..i..z..E..L..M..Y..U..\.
.R..Y..T..[..S..\..Z..C..K..M..N..P..S..X..P..Y..M..N..T..\..^..R..Z..
^..e..a..h..d..c..k..e..l..k..q..t..y..v..`..b..i..d..j..`..k..a..s..y
.._..^..l..t..{..{..l..d..j..j..t..{..u..|..t..z..u..y..~..v..|.....~.
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..............CWz!.......!..NETSCAPE2.0.....,......Z......9....8..."&l
t;H..6....4.."...1b.hp.G...U...d... n....H...}.H...o8.e{.......=...g..
.....Si..B.=.:..P......S.R......S.2....Sw..P..v..9.(..S..-J.....r.{.8.
N...g..m.....'..-n.l;....x..l.!C.)...i.7cN.m....q&.M;.3..W...[&hh....-
<8...qos.:8.m.o.|.M.u...O.........gk..Z..'..7.pZ....^l).f.....t....
...tRC..._H$...}.zd.I.m.........N....Z....b..5....x&.g"A. d...\..A..'"
.".TcA..h.C...S......7.y..7....I..d.KF9..U*.%.O.)..\~.e.^.i&.\N...d...
!.$..cT9..`.$C...9..c.:......L.y.......L..0.h..*.h..:..".VZ)....i2...)
.........."..\.j..(..%...L"...H2......F.*,.......J.%.n.....b.".,.k".*.
.%.h....^.........,.M..$.H&......$.. . r.%...H..L.l"q...".[r.%.3.p.q2.
...S....X.1..ol.....g..../"...2"F....5.L..8..3.H....<[email protected]
<<< skipped >>>

GET /img/jbc.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:30 GMT
Content-Length: 64494
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/jbc.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<..........................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
................................................q..d...d@~m.4~m....d..
... ......@~m.!..NETSCAPE2.0.....!.......,......<..................
..........(. .."4$.. #.*#.7).7).<2.=4.00/>.~;<E:@IK6.D9,f=.}:
?.??_._N.tU X]!ec.^b.er0Sd#bYD.IC:VG*UI6ZR.pP.fU.{a.{g.~s.nc%l`=}m,{k3
}q8GFGJMTNPJOS_PMMSMUYTKYXWY[j]`^^afoOKecUukHtkT.rKxpYgghiktnrwsmhqnsx
vhvwy9..C..y{.?..~..|..W..r..e...>=.=F.[..P4.e..j..q..i..`..u..z..s
0.Z.._..^..\).u..f%.DC.xF.{U..E.}p..... .00.?A.|..@?.SR.^b.a^.no....|.
.....1.......................5.....P..g..z..d..u..j..y..}..R..p..U..n.
.........................,....................-.......................
...*..J..d..}..L..g..(..............)..6.....5..'..7..8..<..G..W..H
[email protected]......................
..................................................................
<<< skipped >>>

GET /img/gua.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:32 GMT
Content-Length: 50630
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/gua.gif
Last-Modified: Sat, 24 Aug 2013 07:07:52 GMT
Accept-Ranges: bytes
ETag: "094f3a598a0ce1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..[.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.............................................q..i...iH...<......i..
..}.m4@=..H...!..NETSCAPE2.0.....!.......,......[.....................
.......#..$..'.(..$'.(6.0?'..&..&..8..2..!.,).6 .*/.;;.!0.>1.>')
.&7.7(.49.(((&)4)[email protected]>.R#8K&>S79F2M.=e..AA*DZ5HH8NR
<PO>ST.Jc/Pn1Ng3Qk7Xt=`}F..Z..F.'R..Z.2Y.3A/.E3.S=.f..x..b.6h.&l
t;p.=q.>[email protected].|b"|DJ.LS.YB.T\.Kl.eL.mR.wY.cl.jt.~`
.s|.FFFFHTD[[VVVKZ`YYeF`_Qmmfffijujv}xxx>d.e..j$.q&.x).~*.Cj.En.Ju.
^~.P|.N|.Q..g}.zz.X..r..s..^..{.._..O..R..W..Z..l..a..w..{..]..a..d..h
..m..n..r..w..}................M..R..V."b..\..a..b.!_.!b.#k.&p.f..m..t
..{..............%o.'s.*{.-..,.....1../..3..5..9..:..=..=..=..A..B..,.
....0../..1..5..9..C..G..K..O..Q......................................
..................................................................
<<< skipped >>>

GET /img/8090.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:34 GMT
Content-Length: 9585
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/8090.gif
Last-Modified: Wed, 24 Dec 2014 03:51:10 GMT
Accept-Ranges: bytes
ETag: "08b95da2c1fd01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..<............... ....$......W.....8..%..5.....1.....x......
........6.....]..o.....$........^../.....*..|........e...........A....
..................................<........C........c.....M........
.........3........b..;.....J.....z.....B.......................i......
.....4.............._..............l..T.....F.....K.....~........U....
....:...........}..'[email protected].....
......S..w........N..>........t..q..E.................a.....d..y...
..,..j.....p...........-..s.......................f...........Y.......
....X........h.....{..D.......................0..V...........O..2..G..
......(..u............................................................
......................................................................
....................!.......,......<........H......*\......#J.H....
.3j...... C..I....(S.\...@...(..A....\.......0e......iA3|.p3...P.J.J.*
E....`.a.....8.Z2...Q.2-J.m..[.~.;[email protected]. ^[email protected]
Y.....8....^...H`...^.t7...Yre..5...z2.....5......" ..z4.... _......!.
 .|b....XH..:e..x|.@[=.s...S/O..ki.*.>......w....... .W...$..Z..E.b
...An....... `. .G....( e....Rk..`M.:....b.@f&5..4.....8.h.`.,`X.'}PBe
.DS... ..i}...W^.E.B'....3.gcK.-..13J..w:.%$.FR........rI)Q.@....^....
.H0eG..I....i.........UhI...Z...Q....w..YD..n[2...7.0CW...!I. ..k.....
.>bZQoR.1..5>..Q..J...N.)[email protected]&eE....D,.
L.....[.Q.i...x....@.%.R...l.....<'../.k \>...kc6.....I).}..(...
.P...H....d/......N.k....G..T".0...YRk.LZde(....1.Vk....n.;...2...
<<< skipped >>>

GET /img/qingtian.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:35 GMT
Content-Length: 48579
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/qingtian.gif
Last-Modified: Sat, 27 Dec 2014 14:54:36 GMT
Accept-Ranges: bytes
ETag: "05ec8e521d01:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
........................................................[.............
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?.....-...P.2O.T...4.NU%....<.. .R..]q....\.
.^F.|;...g.....,.)l/. ...<G.K....=....r.a......(..Z?..)U.G.K...1.Td
[email protected]..>.....c...X.....O......b....D.w.Q.cW*\..{.....(.....
b.......YZ.K....yc..%....2$.F.. ...<..Wfv..a.........TY...{.. ...&l
t;..E..a.........TY...{.. ...<..E..a.........TY...{.. ...<..E..a
..J....H..]}.%..sV..g..k~..Lr@%} .t..>3......1.....(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(......(......(......(......(......(......(......(......(.
.....(......(....;O...h...K.. ..l...p|.......#..`...1?a..c..=j.....P..
x.....*....a...i...........M.....2O.f..?.O.Q...k..".x.2..e_..O.......~
.^=.....^%.$......Tz...9...>....X.m...?.f.....w..Z...f...jy.._x....
.....?.z/...{.>8...h....h.T.........PY..\.8.3....Q:...wg.a.a2.$.Q.g
%.ROW...[[email protected].....)-...J.....#..}fJ..<.6..1ta....
<<< skipped >>>

GET /img/bg.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:37 GMT
Content-Length: 1065
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bg.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3...f..e..d..a..`..Rn.Je.Id.Gb.Mg.Oi.Qk.Pj.
Zw.Vq.^|.Xs.\y.Yt.`}.a~._|.f..Fa.Hc.Kf.Nj.Lg.Pl.So.Vt.Tp.Yv._~.[x.Zw.c
..b..^{....!.......,...............H......*\.0..l..J.H......i...c.. C.
...d.~(S.\..%.m0a.|...M..r.....O............&=.....G.5e..j..X..... ..`
........h..]..m..p...;7..r.....W.......L.pa{.. 6.......I.L..e..2k.....
..A..=.....S.FM.....b..G.....r............;w.... ........I.N.zux..k..]
;.........|...;HTTP/1.1 200 OK..Date: Mon, 12 Jan 2015 00:02:37 GMT..C
ontent-Length: 1065..Content-Type: image/gif..Content-Location: http:/
/VVV.941pojie.com/img/bg.gif..Last-Modified: Thu, 14 Aug 2014 07:47:36
 GMT..Accept-Ranges: bytes..ETag: "05c92394b7cf1:56725"..Server: Micro
soft-IIS/6.0..X-Powered-By: ASP.NET..GIF89a..................f..3.....
.........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3.
...........f..3..............f..3..............f..3..............f
<<< skipped >>>

GET /img/bgheader.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:37 GMT
Content-Length: 1978
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bgheader.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.........................a}....BV..........Yu....Rk.^z....Ja.Nf.
=P.......... 8[xxxTo.......]x....I_....w..TVU...F[.d........3Ak...9M|.
...........[w....Vq.:Jw......IJK# ESm....e.._{.Uo....b..hhi4EoG]....OU
[email protected]....]dw
............Ys..........o~.............Pe.9Et...DX. <]...Mc........
..Xt.........._|.Pi.\i....Nj.......Qg....7Jx...'4Q...Jb...............
.........................Wq.b...................................... (C
..................Og....Zx............................................
........\y........................................Ph..................
.w..\a_`ab...1Dk............L_........................................
...DS....f..............\u.Kd.~~}...\s.sus>N}......]m.......Ql.....
.................,[email protected]...... C..I
....(S.\.....0c..I....8s...3e...]...a....s.`.....8."....S!.......;v.L1
.K....h..].....p...K....x............L...... ....c8.#.A..l...\0..u.R..
...104$H..j.......3..m.v...s...........N...... _.......K.N......k..=..
.:n.........i..O.v.....u..............t...k68...{..........D(...Vh...f
....v... .(..$.h..(....,....0.(..4.h..8~H..;..c;.....D.A...B. )...!.uD
iC.0L&......T....D...C.......D.A.l....p.)..t.i..x....|......*....j...&
....6....F*...Vj..i..............o.I.....H..Dd.S....U..0.E.u...5?x.F..
. ....k...&....6....F ...Vk...f....v..... ....k.......J....J......k..i
..f;D...... ..O...V]Xa..Dx0....1D...b...[.H..w... .,..$.l..(....,....0
.,..4.l..8....<[email protected]#=..IS....o|...[.K..4c...H....?.%
<<< skipped >>>

GET /img/bgnav.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 3645
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bgnav.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89aa.N.............................................................
............EQ.Tk.Ma.CT.8Fr.$;[email protected].;M}a~.Zt.Tm.Ri.N
e.DW.CW.9Jxb..]x.Qi.H][email protected]}....Xv.c..\z.Yu.Xt.Vq.To.Jb.3Cme.
.d..c..^{.Zv.Zv.Rl.E[.7Hu5Fqb.._|.Zw.Yv.Xt.Xs.Vp.CX.BV.>Q.`}.^z.^|.
Zu.Uo.Tm.I_.AU.Ka.J`.BV.)6U`}.Sg................[z.Le.Kd.Sp.La.{|~....
.....TVX..............................................................
...... ..)..2..6..7..>..C..J..S..T..o.............................!
..&..&..(.. .. ..,........5..6..9..9..=..>..[..]..]..e..g..m..p..q.
.|...............................................0..6..G..T..W........
......................................................................
......sqo.............................................................
....................!.......,....a.N........2d..%4.(....C a..xH... ...
...... C..h... a:Vq...........H.4:^[email protected].(..H."m...P.O..e..'..U
..$x....'D@.....,[email protected]?..K..].(....e...b.......%..|..C..#)R..<
..e..3G.......C.....\('&.Y....&P|d..BE./].x..{..............._.{w...1k
....j.W^....F..[b ..1e......7.........O.~|.....2.I.-.....=T.B.DXaDc0..
E.b.`....a..f.....vx.. ..a.$.!..(.xC..ZX.......*....O.. .G..C.c.......
.6..0..I6.d..<)..TVI%.On#N...1F......L=...b.Q.-.p..&.....t.i..x....
|...&.<2I!.x ..$....)...!.x"...T....f....v....^....x..1...C..f!....
.a.,.$..'...H'....... .... J([email protected]."..B.).| ....k...
..n(..B."..2L.t..D.)..C.!x.K)..R.1......'....7....#..*....)..........&
gt;.....4.J#.8..*,....0.,..4..r#&......Q..?dPm....H1.<.H1H3...P
<<< skipped >>>

GET /img/bgh.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 5439
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bgh.gif
Last-Modified: Thu, 14 Aug 2014 07:47:36 GMT
Accept-Ranges: bytes
ETag: "05c92394b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a.......Wr.Jb.\v.Gb....Id.To.Yt.Pi....Mb....Nh.`}.H^.Fa.Me.Yt.j..
Wr.Yv....t..DY.Rk.z..k..^|.Nf.Ys.Nf.Sl.n..m.....a..|.....Ok.^{.q.....P
j.{..Nc....v..^y.Rk.f.....CX.H\.Ri.o..Xo.Un.J`.Qe.f..Vt....Yu.Rj.G\.k.
.F[.Xo.Pg.CZ.l..Tk.f..d..b..b..a~.c..c..e..d..a..`}._|.c..\x.c.....e..
^z.Xs.d..[w.`{.Zv.^{.]y.Kf.Je.b..]z.\y.Yv.Rn.Up.Vq._z.`..`}.[x.Tp.a|.b
..Mg._|.So.f.._|.\x.Up._~.Hc.Nj.Zt.[w.a..Lg.Qm.Pl.Uq.Pl.Xs.a~.Hc....Vq
.a~.~..Tm.e..Sn....d.....Vr.Mg.Zw.}..Zt.c..p..b..^z.Wr.d.._{.`{.t..Ni.
[x.Lf.Vq.Wt.Xs.Vt.Lf.^}....w..x..e..]{.q..Yv.Rm.Zu.b}.Up.[u.e..p..e..[
u._{.......]{.Xu....Qm.^{.Kb.b..]|.]x.]z.Rn.Rl.b..Og.c..c.....Ur.c..Sn
....l..n..h..u..To.Qh.Pl.......]z.Ld....~..Tm.s..Vo.Zv....g..`~.w..\w.
l..x..c~....Xt.Od.y..]y.Qj.K_.b.....Kc.[v....g..f........Rn....`..o...
..Vq.......!.......,.............t...C."..).7...#i..Q.D..4......./....
...K.x..u.w...X|.0.h.....S.P....M3.pAS.&...vbH.E&.).1....#..G.}s.5MQ.H
g....)E.D.vL..../#..5`.jN.d.|.......S.-.W...U...........eZ..."..I^.XI.
461....sF..I..\3....9.T.E.....^.W-../Jh...{.U.................n.../'~.
Zv.S...........g.*..y.Sd.g..;z%.....^H<.].'.~.Y...L......h...|....4
X...N.`..>...\(......a&v.(.....!.*..H....bzU......P..9.h`.>.h!..
..a......H..$.?6...Q*[email protected][email protected]'.R
..g.|.)..q.Z.......{...".8.&.yFJ...ZJ...(*).......vjj..B..>....@G".
...v.:E...* ....k.Z.........Z..c....l..BK...2.,~.2....&k ..z.n..r....*
$...:K.T..K ..hQE.T.kG.........o..2r...../..v........`.;...?.o..7.q...
L...3...&.|..*....`.{L..t.H.........0.:..3.R.}s...|.4Z....I....M..
<<< skipped >>>

GET /img/gg.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:38 GMT
Content-Length: 23328
Content-Type: image/png
Content-Location: hXXp://VVV.941pojie.com/img/gg.png
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......'.............sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<..Z.IDATx^....VG....T.tv..O./s2
.y..5..i...A00......j< ........b....2X..l...v.....,6x_0...,6`6.6^.J
......s...........O....D.._Fd&U..,.?cL.\..........P.?.).....2...y.....
..)....o./....E|DK.*4).._L......./?.T.w.....,....7z].Zj..r...\.o..o.?&
gt;.y:......c...Bu_...~..|..q...J......s...X.....R..{G[.;.;.....r...OG
O....T...........h.ok.....h/[email protected]...;.G.......9..ON...??......./.
.e....~..S.......Nz..$.....=..g..S....#..x..?W...,...y.c..8..~.....>
;..~}..W.t ./.u. .%..c.#.%lY..O...Y|.....N}E.....{.....&O.s....G.#G!.%
y...!...0t....C.N...........=.O.......=. .z.~..i......:..l..,.........
......=w@......}..^....k..w..e..o~.s.7..q.............;X..w'....[..[..
....lX.|."....R,.N.;G,F.<.....RX.=..a...|.,...a\"3.7...X....^..r..M
..x.....T0..g.. .B...i.?BlE.K......_..Mx..............1...c=....o.....
...{.>9..<?.-.1..g...Rr.j.......C.....{..va....:}.....;.._y)cm..
.I...h...[..z.6.K......1g.......cd,..5..n!.._...g...,....'N..{..$.....
..B.....'.:G...7!..q../N6......<./.7.V.z.h.0.{.0..?..q.....s.~v....
?....t.>@.j-'....o.E.G?w..V....d.....gP......x............O.=D>.
..D..q....`.w|q.l.....[..^........../OO.../w|...................>..
.i0.....1.k.U1N#...._._"..s.I._.|..g...O.4... .(>.n.&}..!..b.4.`..N
 >..!>....8.qs8..R8..M.'.......?..Cxa.6..<..{.....C.w....(..~
...KY*..[....|[email protected]..'a...7.H.s.<.C.....y...._.:.../a...I^....
.c.W<.....<.1y.|..).........'B>...V<.=.4..G.?....YN.&l
<<< skipped >>>

GET /img/top.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:39 GMT
Content-Length: 23243
Content-Type: image/png
Content-Location: hXXp://VVV.941pojie.com/img/top.png
Last-Modified: Thu, 14 Aug 2014 07:47:38 GMT
Accept-Ranges: bytes
ETag: "089c3494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.PNG........IHDR.......F......:\.....bKGD..............pHYs.......... 
.... .IDATx...{t..}.......nt..J .Q....M.z..-.....5Y..d.h...:.Lv}.MN2..
Y....&qv2.x.....8^;.# vlZR2.i..![[email protected].  ..4..zW...]....."myN....
QU}..}.......{....F.m..F...H?....F.m..F.q..s.m..F.m...f.m..F.m...C.9..
F.m...{.m..F.m..F..1..s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..1.
.s.m..F.m...f.m..F.m...C.9..F.m...{.m..F.m..F..x....f.m..F.m....f.....
.......6.h...6.$..Q#...?....h..6.h.G.u(.m..F.m..F.?..C.n3.6.h..6.x.Ay.
...F....&o.qu..p.P..|..O.......(.Y|.Z.d?.......xy...".......n....l_D..
X.d....&n.......^..._.Mn%......-.Xg.~..~....Xg......_.7<#...S.W..R.
...Jb-.....G..D..U]Wm.q% ~..^..88....#........%...W.A.K/.uC.......... 
KL.....-......................u.g.x..;NA..@$.>...^O~.GJ<D`#.E$w.
.X....\b....]..O.u..].p....9v..^............*.......G.F.S..*.A].G~..o#
..1r.8C.M...w...M...<.........0/...U..g..&...06>.Ek.U.r....c[.$.
...aX..7_.......-.Z...x.m.R.O..Kl....u...\..'9:4..|......si.....{R@k..
.U5g....r...,{.ws...*..px.4..M.....4B.-.....-.<....]....K_...."Nj`.
.5C.)>..........5c1.....1..A..s.. (....}.[........:zo..5=.s..&.;7y#
.v.U..e.".........=........-.3...........C.L>.c[....L....g)A.t.|g.u
.....\..Q...?.. ......dE.j.-.;..;.i .......8.......q..w..k`G..|.?....g
..Y...~......'.._mT.b..j.....E.0~v....n...^.RXV.7...b... ...P(..=y..O_
................>.b...;.r.]Y....y.f... ..3c\...|..n..<.....W.6=K
....3.Y.0........R.g'.fX........ds....)...7vo[..~...............[S..4?
tK.b......._.n...;........n.6.....^.....s..........?}Y.i5..Y.....1
<<< skipped >>>

GET /img/zaoma.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:40 GMT
Content-Length: 20248
Content-Type: image/jpeg
Content-Location: hXXp://VVV.941pojie.com/img/zaoma.jpg
Last-Modified: Mon, 22 Sep 2014 02:36:08 GMT
Accept-Ranges: bytes
ETag: "01cc4f6dd6cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
.....0Exif..MM.*.......1..............VVV.meitu.com....C..............
......................................................C...............
......................................................................
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?..S.....(......d..I4..vr.#...A.g...].......N..
..mm5.vV..Ii.......c..9.Qoc..<K..l.......$......../.....i.:...on.oo
(.|.fU<.2T.'..E....~!R.*./...........2....j.Y....G1 M"...I.\z.:.b0.
.....D...... .j.].......\u.....E.9^e.q."....f........W.-l.w.S.:.....I.
...%H...../1...*..;......dR..5...,.B.aP..>.....s.........8*..}..lZ.
..CW..[..[(W.I!8.;c...0............B|=l.~..{......N.c.^XrI......*?....
....on.o...jO..~m...?...d..X....Ib[......xc^.`7.Er.2....}...(..O....MW
...d...g.....e..rH.$...............'....8jj.gd\......J....^..k...x.U .
...X..2A.J.hsK.[.x.pN.Z....}.....K..........am..i...8.3.. .Q...K....O.
K..Ak..........t.|...W........W..U.J...<9.TvK.E..}.-C..^....j....Y.
c.&.28D........(J..Tq..UU..QN..W.T...d..P.mn<).......|n...#.z.H..R.
>..J.;2U...Zh"..{x..iY~.........a.)Fi...,...>..h.K..o..D.0J.i...
[email protected]<.9....X.ck.T...P....]......m...{^.....G...7.T.'v=.....c0
<<< skipped >>>

GET /img/bgtitle.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.941pojie.com
Connection: Keep-Alive
Cookie: CNZZDATA5076676=cnzz_eid=1255447200-1421021050-&ntime=1421021050


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:41 GMT
Content-Length: 3274
Content-Type: image/gif
Content-Location: hXXp://VVV.941pojie.com/img/bgtitle.gif
Last-Modified: Thu, 14 Aug 2014 07:47:37 GMT
Accept-Ranges: bytes
ETag: "80f22a494b7cf1:56725"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
GIF89a~.#....Z........W..~..|....Z..=..............B..o}....'|...."`..
..%T.....q. x..|.....{.......:........... ...|....kM..........!...~...
.!.........{............. }.... ......x.....{..}.......... ...........
.|....".. }..........G........"......{........z..y..z........\.....M..
z....................x....!^.......!...{........T..Y.......m..:.......
.p.....!..<..5........"...L....=o.*K..v..v..y.1.........i.!..... ..
H..#....._..o..6..L..N......{.6e.#.."..!..`.. ..l.."~....K.. .........
...t..K..~....*n.)......L..z....].."..>.."z..y..........8..Q.....-l
....bn....Cu.0...|....8..;L....?.. .....G............k.'..<........
......\........7..#.....J..Li..o..w....(..*..x..}..m...m.&W....$..%..&
..LQ....O~....2u..w....[.....8i.%k.$..&..... .....)........... .......
..}...........z.... ,....~.#......(.$H[.8l..X......#J.H.....3j...... C
..I....(S.\.....0c...h..l..%...]-Cz.<;.....H.*].....P.J.J....X.j...
...`...K....h..]..j.6...K..S)f.~]{ ........L...... ^......#K.L.....3k.
......C..M.....f.KG*..p.$.9......s...........N...... _.......K.N......
k....q...L..v..%p.....m.......O...............(....h...&....6....F(...
V..mK...;..b.3*H........(....,....0.(..4.h..8....<....@.)..D.i..H&.
..L6...*.0...\.....p..W.S..O.)..d.i..h....l....p....C,..#.ly..q......*
....j....yB=...'9..#...NJi=.f....v.....*....j...............*....j....
..................J..D>......F ...Vk...f....v..... ....k...........
... .....-.\\...= ..=....=..L...'....7....G,...Wl...g....w... .,..$.l.
.(....,[email protected].../[email protected]'...L7...PG-..TWm..Xg...
<<< skipped >>>


GET /stat.htm?id=5076676&r=http://VVV.941pojie.com/&lg=en-us&ntime=1421021050&cnzz_eid=795982027-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=47986809 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zs25.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:13 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..



GET /606781.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.zzsky.cn/service/player/player59/?user=578724578&playername=µã»÷ñöÌý941ÆƽâÍøÕ½¸è
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: js.users.51.la
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: max-age=300
Content-Length: 1879
Content-Type: application/x-javascript
Last-Modified: Wed, 07 Jan 2015 08:29:29 GMT
Accept-Ranges: bytes
ETag: "88e9eed542ad01:2f2"
Server: Microsoft-IIS/6.0
Date: Mon, 12 Jan 2015 00:04:36 GMT
Connection: close
document.write ('<a href="hXXp://VVV.51.la/?606781" target="_blank"
 title="我要啦免费统计 VIP &
#x7528;户">贵宾统计</a>\n');..v
ar a6781tf="51la";var a6781pu="";var a6781pf="51la";var a6781su=window
.location;var a6781sf=document.referrer;var a6781of="";var a6781op="";
var a6781ops=1;var a6781ot=1;var a6781d=new Date();var a6781color="";i
f (navigator.appName=="Netscape"){a6781color=screen.pixelDepth;} else 
{a6781color=screen.colorDepth;}..try{a6781tf=top.document.referrer;}ca
tch(e){}..try{a6781pu =window.parent.location;}catch(e){}..try{a6781pf
=window.parent.document.referrer;}catch(e){}..try{a6781ops=document.co
okie.match(new RegExp("(^| )AJSTAT_ok_pages=([^;]*)(;|$)"));a6781ops=(
a6781ops==null)?1: (parseInt(unescape((a6781ops)[2])) 1);var a6781oe =
new Date();a6781oe.setTime(a6781oe.getTime() 60*60*1000);document.cook
ie="AJSTAT_ok_pages=" a6781ops  ";path=/;expires=" a6781oe.toGMTString
();a6781ot=document.cookie.match(new RegExp("(^| )AJSTAT_ok_times=([^;
]*)(;|$)"));if(a6781ot==null){a6781ot=1;}else{a6781ot=parseInt(unescap
e((a6781ot)[2])); a6781ot=(a6781ops==1)?(a6781ot 1):(a6781ot);}a6781oe
.setTime(a6781oe.getTime() 365*24*60*60*1000);document.cookie="AJSTAT_
ok_times=" a6781ot ";path=/;expires=" a6781oe.toGMTString();}catch(e){
}..try{if(document.cookie==""){a6781ops=-1;a6781ot=-1;}}catch(e){}..a6
781of=a6781sf;if(a6781pf!=="51la"){a6781of=a6781pf;}if(a6781tf!=="51la
"){a6781of=a6781tf;}a6781op=a6781pu;try{lainframe}catch(e){a6781op
<<< skipped >>>


GET /img/pic2.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:13 GMT
Content-Type: image/gif
Content-Length: 431
Last-Modified: Mon, 02 Dec 2013 05:46:13 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:13 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89aP.........eee000...........................e...00...0...........
.......................................!..Powered by AFEI.!.....S.,...
.P......` .di.h.....p,.tm.x..|....a..._..1i,...&3.\2...v{.-...xL.s.g.b
-h...5......;.=g......".......m......................m..............."
.........................".......m..............."..w.....u.n..m......
....".....H......*.Q.....#J.H.b...3j..Q... C..I......9.\)b...0c..I....
8[........;....


GET /img/pic2.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 431
Last-Modified: Mon, 02 Dec 2013 05:46:13 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:14 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89aP.........eee000...........................e...00...0...........
.......................................!..Powered by AFEI.!.....S.,...
.P......` .di.h.....p,.tm.x..|....a..._..1i,...&3.\2...v{.-...xL.s.g.b
-h...5......;.=g......".......m......................m..............."
.........................".......m..............."..w.....u.n..m......
....".....H......*.Q.....#J.H.b...3j..Q... C..I......9.\)b...0c..I....
8[........;....


GET /img/pic1.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: icon.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.3.0
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 428
Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Tue, 13 Jan 2015 00:04:14 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GIF89a.......f..3...33.......................................!..NETSCA
PE2.0.....!..Powered by AFEI.!.......,.............I........08bX....d.
n...CS.3......_..`..H..H\8....)...S.b.UX.....(...r.L....tb]&"......#..
.o.V.a..D..o.V.a..........D..o.V.a..........D...........!.......,.....
........I........08bX....d.n...CS.3......_..`..H..H\8....).:[email protected]...
x ..........D.| .#.u.a....n~D..[....n..........D..[...n..........D....
.......;HTTP/1.1 200 OK..Server: Tengine/1.3.0..Date: Mon, 12 Jan 2015
 00:04:14 GMT..Content-Type: image/gif..Content-Length: 428..Last-Modi
fied: Fri, 16 Jan 2009 08:10:47 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=5..Expires: Tue, 13 Jan 2015 00:04:14 GMT..Cache-Control: m
ax-age=86400..Accept-Ranges: bytes..GIF89a.......f..3...33............
...........................!..NETSCAPE2.0.....!..Powered by AFEI.!....
...,.............I........08bX....d.n...CS.3......_..`..H..H\8....)...
S.b.UX.....(...r.L....tb]&"......#...o.V.a..D..o.V.a..........D..o.V.a
..........D...........!.......,.............I........08bX....d.n...CS.
3......_..`..H..H\8....).:[email protected] ..........D.| .#.u.a....n~D..[..
..n..........D..[...n..........D...........;..



GET /core.php?web_id=5076676&show=pic2&t=z HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: c.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 753
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:12 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:12 GMT
Expires: Mon, 12 Jan 2015 00:19:12 GMT
Age: 0
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:12 GMT
X-Swift-CacheTime: 900
Via: cache5.de1[699,200-0,H], cache5.de1[696,0]
!function(){var p,q,r,a=encodeURIComponent,b="5076676",c="pic2",d="",e
="online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站&
271;统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m=
"0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h="
 f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k
.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createS
criptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?w
eb_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/i
mg/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><
;img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a h
ref='" q "' target=_blank title='" j "'>" j "</a>",k.createIc
on([p])))}();....


GET /core.php?web_id=5076676&show=pic2&t=z HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: c.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 753
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:12 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:12 GMT
Expires: Mon, 12 Jan 2015 00:19:12 GMT
Age: 0
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:12 GMT
X-Swift-CacheTime: 900
Via: cache5.de1[0,200-0,H], cache5.de1[0,0]
!function(){var p,q,r,a=encodeURIComponent,b="5076676",c="pic2",d="",e
="online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站&
271;统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m=
"0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h="
 f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k
.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createS
criptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?w
eb_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/i
mg/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><
;img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a h
ref='" q "' target=_blank title='" j "'>" j "</a>",k.createIc
on([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: applicati
on/javascript..Content-Length: 753..Connection: keep-alive..Date: Mon,
 12 Jan 2015 00:04:12 GMT..Last-Modified: Mon, 12 Jan 2015 00:04:12 GM
T..Expires: Mon, 12 Jan 2015 00:19:12 GMT..Age: 0..X-Cache: HIT TCP_ME
M_HIT dirn:-2:-2..X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:12 GMT..X-S
wift-CacheTime: 900..Via: cache5.de1[0,200-0,H], cache5.de1[0,0]..!fun
ction(){var p,q,r,a=encodeURIComponent,b="5076676",c="pic2",d="",e="on
line_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站长
统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="0",
n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),
o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k
<<< skipped >>>


GET /stat.php?id=5076676&show=pic2 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: s25.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:10 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:10 GMT
Cache-Control: max-age=5400,s-maxage=5400
X-Cache: MISS TCP_REFRESH_MISS dirn:7:185459423
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:10 GMT
X-Swift-CacheTime: 5400
Via: cache10.de1[688,200-0,M], cache9.de1[689,0]
1f77..(function(){function k(){this.c="5076676";this.R="z";this.N="pic
2";this.K="";this.M="";this.r="1421021050";this.P="zs25.cnzz.com";this
.L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_
cnzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={}
;this.la()}function g(a,b){try{var c=.[];c.push("siteid=5076676");c.pu
sh("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.refe
rrer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigato
r.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*M
ath.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join
("&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decode
URIComponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U
(),this.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),this.ja()
,this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),
this.qa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i 
failed")}},oa:function(){try{var a=this;e._czc={push:function(){return
 a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){tr
y{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b
<a.length;b  ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_acc
ount="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.bre
ak;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPagevie
w=c[1])}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("undefined"
===typeof e._cz_account||e._cz_account===this.c){e._cz_account=thi
<<< skipped >>>


GET /app.gif?&cna=ff05DdrU2mcCASU5EL3gIDWK HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: pcookie.cnzz.com


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DdrU2mcCASU5EL3gIDWK; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pcookie.cnzz.com
Connection: Keep-Alive
Cookie: cna=ff05DdrU2mcCASU5EL3gIDWK


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;....


GET /app.gif?&cna=ff05DajU6XYCASU5EL1h9oQy HTTP/1.1


Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pcookie.cnzz.com
Connection: Keep-Alive
Cookie: cna=ff05DajU6XYCASU5EL1h9oQy


HTTP/1.1 200 OK
Server: Tengine
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=ff05DajU6XYCASU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Mon, 12 Jan 2015 00:04:14 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=ff05DajU6XYCA
SU5EL1h9oQy; expires=Thu, 09-Jan-25 00:04:14 GMT; path=/; domain=.cnzz
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..



GET /static/common/images/zhanzhang.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zhanzhang.anquan.org
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/png
Content-Length: 5075
Last-Modified: Wed, 03 Dec 2014 14:46:30 GMT
Connection: keep-alive
Expires: Mon, 12 Jan 2015 00:04:14 GMT
Cache-Control: max-age=0
Cache-Control: no-cache
Accept-Ranges: bytes
.PNG........IHDR...|.../.....!.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:12842C66B96C11E3B1D2FC24
D7F17EB2" xmpMM:DocumentID="xmp.did:12842C67B96C11E3B1D2FC24D7F17EB2"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12842C64B96C11E3B1
D2FC24D7F17EB2" stRef:documentID="xmp.did:12842C65B96C11E3B1D2FC24D7F1
7EB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......GIDATx..\.t.......! K..... Bd., ..,.
.........r.xT.*.[...*...ZE.E.., ..a..v....v.^.7...7....d...=gN.Y.....{
..L..5~Wo"..[.E..,...{..~............4I.\.E1.$.=.5..~....<.^...Q...
^.R.s.....:....DJ].7_.Q......Q ...C*....MX.......v..no.......g.fl"....
.S%MJ'.w...y... c..F...{.cg...'Z.-i...5...K...K$=...IU.........FT.b...
......Q)..O.L......D..K..~<H.;7......jS..U...9....QR%AI...T"*w..{..
B...............I{........g;|..8..g...".T....a..>.`.a).^Y^t-..fE..n
...........E...-......`.....q...C.&0!....r.........(.H....8~..kk.uI...
.QY.m...o.IZ.E....Kr.|..eP...V.]...n..\n. ht...G..i;..k.3..SPb.{..
<<< skipped >>>


GET /wpa/images/group.png HTTP/1.1
Accept: */*
Referer: hXXp://jc.941pojie.com/jiaqun.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pub.idqqimg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: X2S_Platform
Connection: keep-alive
Cache-Control: max-age=259200
Last-Modified: Fri, 12 Apr 2013 09:22:21 GMT
Content-Type: image/png
Content-Length: 1827
Keep-Alive: timeout=60 
X-Cache-Lookup: Hit From MemCache
.PNG........IHDR...Z.........w.{'....PLTEV...dE)r.Ip..........F.......
.F..Kyy...r.....~E ......m..c..........d3.....S.....r...S1...#.....c..
......A..l3....d.............ynvc......"..][email protected]..............&..I
...\BH.....................rHh........z4$...X..0.....R.....s@6...{RL(.
......Xs.y......S........%.........vb...4......bW...[%..........L..t..
s..c>'...2..............wsw..i.............yM...WwaR...?-.fU...~K;.
`H...t..V..:..d...........h/#.......Z74..........pt5(...K...vb=......l
M.........N.kr......I A............pVs..k.....f'.p.....c..%...SG.J;..r
6......fBr..o=5...T..J...jB......5.....|......n^....XLm3#......y.f.}X.
...]6...,y....8..........q.D-Mt....^* z= y>#.dK...^...........>.
.s..J..............B....q...................xy...'..t.....7..M...~Re..
......s: .K(.rP`)..^=.........3......G:V......WE..2.....pHYs..........
.......IDAT8....T.U...lCs..It.....5r,*....I.K.].5p.d....2.4Fw.m}.....e
.v7r.........S.D.IVR.&.....y8G;.................N.r...9.t......p9.....
].......,Ko..i.......Mh.|@..hyw..9...n..qo-....C.....s.fpo..:{..vtQQG.
.......'..zmr.......H...m.u4.;..t...7....C.........a...?....{)...W..4.
..u......(....l..Q.|......R.u.3K.;.!..}vy([.e.~YhG[^. y......C...<.
...~.<-^I3......$..B....z...?$......u...S.7....qF$?.wF..G..lkC#...=
...A...C.......#x...Ea.yvS(..P..e..2..*....yD]]d.\.....{..h.....5.UK.@
J....ux7...>5.H_....}...T]2x,EO7SEmf.6.u:sk(..4...-.,...o6;B...Me. 
.\..._.]SSs..._....?g.,.x.$.tL...)..u.<Mv`4..Q<QiU.1O.X%......q.
.-.w.h... **.....e}..E...'...51t...0...0v....)^1.'.^..U.u`| 3.8l.)
<<< skipped >>>


GET /cj.txt HTTP/1.1
Accept: */*
Accept-Language: en-us
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: jc.941pojie.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 00:02:12 GMT
Content-Length: 11685
Content-Type: text/plain
Content-Encoding: gzip
Content-Location: hXXp://jc.941pojie.com/cj.txt
Last-Modified: Sun, 11 Jan 2015 01:47:49 GMT
Accept-Ranges: bytes
ETag: "8010ae9a402dd01:56725"
Vary: Accept-Encoding
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
...........}Y..8...t..P..6A.......38.A^.......zI...VwUWvyp..>...=..
......_I.;...........F....\;:.o.K.xA.;C..BkGg.....:#....m..V.r...lw. p
..Y].U>..^........G...]7a.y..#O..-.|Y.........^...K.(J!5..PAjw.....
.l..o\*'.Z......~.=;....!...T;.3...0B..%..q.....x...lU....J...fF..r8.P
y.......r.q.DI.<E(......r.......W..]9.T....8<....qr.,?....R.Ze.j
....q.z....L.$>u.....t2|.s.d...^....s`...1Z-..e.,-..E.a7.W.5,.@....
.=.e{.xA.})......#|..[.i~P:Rjm6..e.?.;.e...O..G.......,....QX.\.$....q
.j5:..7.\(G........../.Z.!.^IU;`R.q..(".\.M..s....Ujk...>..........
....H....2..0...x!..S.<..<s.Y@mr b..m......rf....#m*....0j...l.9
..u....6.t....x ...k.uc...c....... 9..X.;.......%e...< 9..s.....f;.
zU`.>....^...}..0.SU..x....s#_T%....o.:......z..?rG..F...Mo....{u.&
lt;.....2.#rI."~....uj.. ..........G].J.....T..|.q..d*cd...O"..O....~.
..v.O.O?.........x.|..3G:....4....(..p...-...F....k.// vf-s..1..yfK..X
...G......./s...)...1*.^....5fB.E... .&D.......]....f.NY)..L.{m2.N`...
Wy`.nY..7....|..i.Lx.{[email protected]..{c....7....v.'.KS...8.X..^.......
..mj..E..yQD..w..q...QjF..#{.{.l....i..4..mI.9..Om....M...y.f...E.`.e.
K..-..I..3v....Qt8.......P.T./.O.1.....$1.N..^z....xi..C=.y\'.....ZA..
z8P.......S.....l.u..m.$.(...V...Y'..q..0F..P.....KeR.#4......G..1l...
.c.7.H.c>J~...*r]...a...A"..E3.. ...f.....$~....u7.WxX....B.z.A....
..hk.h.`.j.p........>..J.._(.90.X.@.[....t/....,..{...G...e....P..*
i..........,.b.......u.n?..i./r.Zdf..7,..V...E..E./..W..,.c-.q.....s..
.Yo..?.{.[...]..>......>.r.W.....&........F.....tI......]...
<<< skipped >>>


GET /status/pai/hash/6330cf46f68cd2c7c40a422626d1cb30 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img.webscan.360.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: 360Server
Date: Mon, 12 Jan 2015 00:04:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
2669.............R&...PNG........IHDR......./......3......pHYs........
........MiCCPPhotoshop ICC profile..x..SwX...>..e.VB....l.."#....Y.
[email protected]....(.gA..Z.U\8.....}z............y.....&...j.
9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W. ..."....
.R...T.......S.d.....ly|B"......I>..................(G$.@..`U.R,...
...@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H.......K.3...
..w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o">!......
...N..._....p...u.k.[..V.h..][email protected].<......%b..0..>.
[email protected][email protected]..#......)..4.\,...X..P"M.y.R.D!.
.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@ ...........
\...L....D..*.A..............a.D@.$.<.B........A.T.:.............18
....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\
@.... [email protected].]...k....=.....K.ut.}..c..1.f..a\..E
`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z..
.xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ....
..O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-...
.igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2..g...oUX*.
*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c...
.F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!..
.{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.c.y.......
..G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b
.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..J.6...
<<< skipped >>>


GET /stat.htm?id=5076676&r=&lg=en-us&ntime=none&cnzz_eid=1255447200-1421021050-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=142051709 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.941pojie.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: zs25.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:12 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..



GET /status/pai/hash/6330cf46f68cd2c7c40a422626d1cb30 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img.webscan.360.cn
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: 360Server
Date: Mon, 12 Jan 2015 00:04:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
2669.............R&...PNG........IHDR......./......3......pHYs........
........MiCCPPhotoshop ICC profile..x..SwX...>..e.VB....l.."#....Y.
[email protected]....(.gA..Z.U\8.....}z............y.....&...j.
9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W. ..."....
.R...T.......S.d.....ly|B"......I>..................(G$.@..`U.R,...
...@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H.......K.3...
..w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o">!......
...N..._....p...u.k.[..V.h..][email protected].<......%b..0..>.
[email protected][email protected]..#......)..4.\,...X..P"M.y.R.D!.
.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@ ...........
\...L....D..*.A..............a.D@.$.<.B........A.T.:.............18
....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\
@.... [email protected].]...k....=.....K.ut.}..c..1.f..a\..E
`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z..
.xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ....
..O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-...
.igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2..g...oUX*.
*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c...
.F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!..
.{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.c.y.......
..G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b
.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..J.6...
<<< skipped >>>


GET /stat.php?id=3325108&show=pic1 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: s85.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 10075
Connection: keep-alive
Date: Thu, 08 Jan 2015 16:22:12 GMT
Last-Modified: Thu, 08 Jan 2015 16:22:12 GMT
Cache-Control: max-age=5400,s-maxage=5400
Age: 286921
X-Cache: HIT TCP_MEM_HIT dirn:2:672462476
X-Swift-SaveTime: Thu, 08 Jan 2015 16:22:12 GMT
X-Swift-CacheTime: 5400
Via: cache1.de1[0,200-0,H], cache1.de1[1,0]
(function(){function k(){this.c="3325108";this.R="z";this.N="pic1";thi
s.K="";this.M="";this.r="1420734132";this.P="hzs2.cnzz.com";this.L="";
this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_C
V" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.
la()}function g(a,b){try{var c=.[];c.push("siteid=3325108");c.push("na
me=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer))
;c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.user
Agent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.ra
ndom()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}
catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICom
ponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(),thi
s.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),this.ja(),this.
j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.q
a(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed
")}},oa:function(){try{var a=this;e._czc={push:function(){return a.B.a
pply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var 
a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.
length;b  ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="
[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;cas
e "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1]
)}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("undefined"===typ
eof e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if
<<< skipped >>>

GET /stat.php?id=3325108&show=pic1 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: s85.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 12 Jan 2015 00:04:13 GMT
Last-Modified: Mon, 12 Jan 2015 00:04:13 GMT
Cache-Control: max-age=5400,s-maxage=5400
Age: 0
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Jan 2015 00:04:13 GMT
X-Swift-CacheTime: 5400
Via: cache1.de1[656,200-0,H], cache1.de1[604,0]
2fe..(function(){function k(){this.c="3325108";this.R="z";this.N="pic1
";this.K="";this.M="";this.r="1421021053";this.P="hzs2.cnzz.com";this.
L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_c
nzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};
this.la()}function g(a,b){try{var c=.[];c.push("siteid=3325108");c.pus
h("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.refer
rer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator
.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Ma
th.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join(
"&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeU
RIComponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(
)..245d..,this.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),th
is.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),thi
s.da(),this.qa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){
g(a,"i failed")}},oa:function(){try{var a=this;e._czc={push:function()
{return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:functi
on(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(va
r b=0;b<a.length;b  ){var c=a[b];switch(c[0]){case "_setAccount":e.
_cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1
]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_auto
Pageview=c[1])}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("und
efined"===typeof e._cz_account||e._cz_account===this.c){e._cz_acco
<<< skipped >>>


GET /stat.htm?id=3325108&r=&lg=en-us&ntime=none&cnzz_eid=181594268-1420734132-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=796310978 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.lszwg.com/
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hzs2.cnzz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine/1.4.1
Date: Mon, 12 Jan 2015 00:04:14 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 28 May 2013 02:57:17 GMT
Connection: close
Accept-Ranges: bytes
GIF89a.............!.......,...........D..;..

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_1136:

.text
`.rdata
@.data
.rsrc
t$(SSh
~%UVW
u.hPng
u$SShe
user32.dll
shlwapi.dll
kernel32.dll
EnumWindows
hXXp://cj.941pojie.com/wbzz.txt
941pojie.com
%System%\kss.ini
C:\kss.ini
%System%\drivers\etc
%System%\drivers\etc\hosts
127.0.0.1 VVV.52anzu.com
127.0.0.1 www1.52anzu.com
127.0.0.1 52anzu.com
127.0.0.1 VVV.sopojie.com
127.0.0.1 www1.sopojie.com
127.0.0.1 sopojie.com
127.0.0.1 1.52yanzheng.sinaapp.com
%System%\drivers\etc\protocol
tcp 6 TCP # Transmission control protocol
udp 17 UDP # User datagram protocol
%System%\drivers\etc\services
# This file contains port numbers for well-known services defined by IANA
# <service name> <port number>/<protocol> [aliases...] [#<comment>]
echo 7/tcp
echo 7/udp
discard 9/tcp sink null
discard 9/udp sink null
systat 11/tcp users #Active users
daytime 13/tcp
daytime 13/udp
qotd 17/tcp quote #Quote of the day
qotd 17/udp quote #Quote of the day
chargen 19/tcp ttytst source #Character generator
chargen 19/udp ttytst source #Character generator
ftp-data 20/tcp #FTP, data
ftp 21/tcp #FTP. control
telnet 23/tcp
smtp 25/tcp mail #Simple Mail Transfer Protocol
time 37/tcp timserver
time 37/udp timserver
rlp 39/udp resource #Resource Location Protocol
nameserver 42/tcp name #Host Name Server
nameserver 42/udp name #Host Name Server
nicname 43/tcp whois
domain 53/tcp #Domain Name Server
domain 53/udp #Domain Name Server
bootps 67/udp dhcps #Bootstrap Protocol Server
bootpc 68/udp dhcpc #Bootstrap Protocol Client
tftp 69/udp #Trivial File Transfer
gopher 70/tcp
finger 79/tcp
http 80/tcp www www-http #World Wide Web
kerberos 88/tcp krb5 kerberos-sec #Kerberos
kerberos 88/udp krb5 kerberos-sec #Kerberos
hostname 101/tcp hostnames #NIC Host Name Server
iso-tsap 102/tcp #ISO-TSAP Class 0
rtelnet 107/tcp #Remote Telnet Service
pop2 109/tcp postoffice #Post Office Protocol - Version 2
pop3 110/tcp #Post Office Protocol - Version 3
sunrpc 111/tcp rpcbind portmap #SUN Remote Procedure Call
sunrpc 111/udp rpcbind portmap #SUN Remote Procedure Call
auth 113/tcp ident tap #Identification Protocol
uucp-path 117/tcp
nntp 119/tcp usenet #Network News Transfer Protocol
ntp 123/udp #Network Time Protocol
epmap 135/tcp loc-srv #DCE endpoint resolution
epmap 135/udp loc-srv #DCE endpoint resolution
netbios-ns 137/tcp nbname #NETBIOS Name Service
netbios-ns 137/udp nbname #NETBIOS Name Service
netbios-dgm 138/udp nbdatagram #NETBIOS Datagram Service
netbios-ssn 139/tcp nbsession #NETBIOS Session Service
imap 143/tcp imap4 #Internet Message Access Protocol
pcmail-srv 158/tcp #PCMail Server
snmp 161/udp #SNMP
snmptrap 162/udp snmp-trap #SNMP trap
print-srv 170/tcp #Network PostScript
bgp 179/tcp #Border Gateway Protocol
irc 194/tcp #Internet Relay Chat Protocol
ipx 213/udp #IPX over IP
ldap 389/tcp #Lightweight Directory Access Protocol
https 443/tcp MCom
https 443/udp MCom
microsoft-ds 445/tcp
microsoft-ds 445/udp
kpasswd 464/tcp # Kerberos (v5)
kpasswd 464/udp # Kerberos (v5)
isakmp 500/udp ike #Internet Key Exchange
exec 512/tcp #Remote Process Execution
biff 512/udp comsat
login 513/tcp #Remote Login
who 513/udp whod
cmd 514/tcp shell
syslog 514/udp
printer 515/tcp spooler
talk 517/udp
ntalk 518/udp
efs 520/tcp #Extended File Name Server
router 520/udp route routed
timed 525/udp timeserver
tempo 526/tcp newdate
courier 530/tcp rpc
conference 531/tcp chat
netnews 532/tcp readnews
netwall 533/udp #For emergency broadcasts
uucp 540/tcp uucpd
klogin 543/tcp #Kerberos login
kshell 544/tcp krcmd #Kerberos remote shell
new-rwho 550/udp new-who
remotefs 556/tcp rfs rfs_server
rmonitor 560/udp rmonitord
monitor 561/udp
ldaps 636/tcp sldap #LDAP over TLS/SSL
doom 666/tcp #Doom Id Software
doom 666/udp #Doom Id Software
kerberos-adm 749/tcp #Kerberos administration
kerberos-adm 749/udp #Kerberos administration
kerberos-iv 750/udp #Kerberos version IV
kpop 1109/tcp #Kerberos POP
phone 1167/udp #Conference calling
ms-sql-s 1433/tcp #Microsoft-SQL-Server
ms-sql-s 1433/udp #Microsoft-SQL-Server
ms-sql-m 1434/tcp #Microsoft-SQL-Monitor
ms-sql-m 1434/udp #Microsoft-SQL-Monitor
wins 1512/tcp #Microsoft Windows Internet Name Service
wins 1512/udp #Microsoft Windows Internet Name Service
ingreslock 1524/tcp ingres
l2tp 1701/udp #Layer Two Tunneling Protocol
pptp 1723/tcp #Point-to-point tunnelling protocol
radius 1812/udp #RADIUS authentication protocol
radacct 1813/udp #RADIUS accounting protocol
nfsd 2049/udp nfs #NFS server
knetd 2053/tcp #Kerberos de-multiplexor
man 9535/tcp #Remote Man Server
%System%\drivers\etc\lmhosts.sam
# This is a sample LMHOSTS file used by the Microsoft TCP/IP for Windows.
# This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
# \0xnn (non-printing character support)
# browser and logon services behave in TCP/IP environments. To preload
# be able to read the lmhosts file successfully. This key is under
# The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
# 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
# 102.54.94.102 "appname \0x14" #special app server
# 102.54.94.123 popular #PRE #source server
# 102.54.94.117 localsrv #PRE #needed for the include
%System%\drivers\etc\networks
# campus 284.122.107
# london 284.122.108
D:\wscntmx.exe
`.data
@.vmp0
`.vmp1
.reloc
}~/%D(
.;6  (&%
1<76  '&
1=;;6  )%#
<;76  )%#
=<<7  ))%
=<<77  '%
=<<76 ))##
==<;7   '##
=<;76 ))##
=<<6  )'#
=<;76 ))#
==<;66 )'#
=<<66  (%
e{TP.cda8
U#ex'B-n}
MSVBVM60.DLL
5i.Id(HE
~32.bd~
.sKpK
.soAw?
.qT3<
D:\qudongrensheng.dat
__MSVCRT_HEAP_SELECT
KERNEL32.dll
USER32.dll
ShellExecuteExA
SHELL32.dll
GetCPInfo
@.reloc
<4,$?7/'
(3-!0,1'8"5.*2$
ADVAPI32.dll
WS2_32.dll
RegCloseKey
RegOpenKeyExA
RegSetKeySecurity
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegOpenKeyA
WinExec
ExitWindowsEx
MSVCRT.dll
ackpw.dll
SetImageFileKey
SOFTWARE\Microsoft\Windows NT\CurrentVersion
wininet.dll
C:\log.pif
ShellExecuteA
Shell32.dll
SYSTEM\CurrentControlSet\Services\%s\Parameters
RegOpenKeyEx(Svchost)
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
m32\svchost.exe -k krnlsrvc
%SystemRoot%\Syste
SYSTEM\CurrentControlSet\Services\%s
Rundll32 %s,RunUninsta3l
\lockmedia.tmp
hXXp://
%u MB
%s SP%d
%d.%d.%d.%d
GetProcessHeap
GET / HTTP/1.1
Host: %s:%d
Host: %s
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0;  hXXp://VVV.baidu.com/search/spider.html)
GET %s HTTP/1.1
Referer: hXXp://%s
GET %s?=%d HTTP/1.1
Mozilla/5.0 (compatible; Baiduspider/2.0;  hXXp://VVV.baidu.com/search/spider.html)
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0;  hXXp://VVV.baidu.com/search/spider.html)
#%d<<<<<I@C<<<<<%s!
4!4,41474>4{4
> >(>8>=>
%s\hao123_res.tmp
%s\ack%cpw.dll
\Script\DAR.rar
\Script\EDG.rarqjzy.dat
shell32.dll
\Internet Explorer\IEXPLORE.exe
%*.*f
CNotSupportedException
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
COMCTL32.DLL
CCmdTarget
GetKeyState
GetViewportOrgEx
GDI32.dll
WINMM.dll
WINSPOOL.DRV
ole32.dll
OLEAUT32.dll
COMCTL32.dll
CreateDialogIndirectParamA
UnhookWindowsHookEx
SetWindowsHookExA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
comdlg32.dll
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.*)|*.*||
Mpr.dll
Advapi32.dll
User32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
out.prn
%d.%d
%d / %d
%d/%d
Bogus message code %d
(%d-%d):
%ld%c
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCArchiveException@@
zcÁ
#include "l.chs\afxres.rc" // Standard components
IIIIIB(II<.Fg
7?_____ZZSSH%
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD\Internet Explorer.lnk
hXXp://cj.941pojie.com/tc.txt
hXXp://cj.941pojie.com/zy.txt
hXXp://cj.941pojie.com/cxbt.txt
.aspack
.adata
.xqrq
.pH`X|
.YON=
p*.LIAt
5].NQg
=.cw| r\
C @Qb%[email protected]
l(8i?ZiDf\.SQ
%C*pig
The procedure entry point %s could not be located in the dynamic link library %s
The ordinal %u could not be located in the dynamic link library %s
comctl32.dll
gdi32.dll
msimg32.dll
msvcrt.dll
msvfw32.dll
hXXp://VVV.eyybc.com
\skinh.she
M.GG^
%s T5
]E4%F(
.Funr
.yyw'
%sX@:`
J|.jv
p4%xcEm
.Jr1Z
7.YT"
.Uf!0
!a%U}
[I(3/#N0.bd
j"%u=w
q%Xn`
@|H.NI
.wdd!
S|%u4
5.ff)
;)?/\%~|/
U%D?~;
l2.Ue
9%crU
XKw-k}
zx/%FN[
LY.eo
z{.Do
%s=\RI
}j%c%Y)
Rx.GR
4o#.dM
IeS`%C
[n 4\.UY 
,4.qO,
gQ'.Io
%cLur?
s%DHB
]I%%X
I %d)
.aEd(
Õ6m*
5r.US
:mD].tB
fJ.WM_
fTpe
.LLbX
f%fUZ
.fOuV12
*_.dC
&-N}<
({?.cQm
R>o2.YN>
.Cqx~c
.`.Qw
.Onwj
Tn&.hL
**.dU
%s;7*
0%x@w
%C^L:
CX%xm
!n]%x
%X,Cr
*.Ea]S
Q.CGo
tn!ay%F
2.kKX
Avi.CT
xhZ_6%U
%SY!8i
&.PFy{xh
sG.qmf
5.ZrW
%Ucda
n.BjCw
.um ZZE7L
/^p%u$
I.NoQY
zu.ew
D/.nT
z.LP"
.IRIx
"%Sh9
&;%sUwa
kBS%dR
hXXp://VVV.baidu.com
7758521
VVV.lszwg.com
VVV.941pojie.comz%
VVV.meitu.com
M%u{$
;s.iF
9E.nV
X-.RP
>.xKA
uDPf
jc.941pojie.com/jiaqun.htm
F%*.*f
iphlpapi.dll
SHLWAPI.dll
MPR.dll
VERSION.dll
RASAPI32.dll
GetWindowsDirectoryA
oledlg.dll
WSOCK32.dll
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
%x.tmp
(*.htm;*.html)|*.htm;*.html
VVV.dywt.com.cn
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
.PAVCOleException@@
.PAVCOleDispatchException@@
hXXp://soso.hcjd56.com:88/
c:\%original file name%.exe
360.cn
hosts2.exe
6.1.7601.17514 (winsp1_rtm.101119-1850)
Rasmedia.dll
Microsoft Windows Operating System
6.1.7601.17514
4.20.0
Uninstall.exe
(*.*)
1.0.0.0
(hXXp://VVV.eyuyan.com)
1, 0, 6, 6
SkinH_EL.dll

wscntmx.exe_1576:

.text
`.data
.rsrc
@.vmp0
`.vmp1
.reloc
}~/%D(
.;6  (&%
1<76  '&
1=;;6  )%#
<;76  )%#
=<<7  ))%
=<<77  '%
=<<76 ))##
==<;7   '##
=<;76 ))##
=<<6  )'#
=<;76 ))#
==<;66 )'#
=<<66  (%
attrib -r -s -h %windir%\system32\drivers\etc\hosts.ics
attrib -r -s -h %windir%\system32\wbem\window\winxp.ics
#vb6chs.dll
%Program Files%\VB
\VB6.OLB
advapi32.dll
RegCloseKey
RegCreateKeyA
RegOpenKeyA
VBA6.DLL
e{TP.cda8
U#ex'B-n}
MSVBVM60.DLL
user32.dll
5i.Id(HE
~32.bd~
.sKpK
.soAw?
.qT3<
kernel32.dll
SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
Microsoft.XMLHTTP
hXXp://jc.941pojie.com/cj.txt
%System%\drivers\etc
%System%\drivers\etc\hosts
c:\windows\system32\drivers\etc\hosts
c:\windows\system32\drivers\etc\hosts.ics
c:\a.bat
c:\b.bat
zhaosf.com
Adodb.Stream
360.cn
windows
hosts2.exe

wscntmx.exe_1576_rwx_0041F000_00001000:

MSVBVM60.DLL
user32.dll

iexplore.exe_596:

%?9-*09,*19}*09
.text
`.data
.rsrc
msvcrt.dll
KERNEL32.dll
NTDLL.DLL
USER32.dll
SHLWAPI.dll
SHDOCVW.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
IE-X-X
rsabase.dll
System\CurrentControlSet\Control\Windows
dw15 -x -s %u
watson.microsoft.com
IEWatsonURL
%s -h %u
iedw.exe
Iexplore.XPExceptionFilter
jscript.DLL
mshtml.dll
mlang.dll
urlmon.dll
wininet.dll
shdocvw.DLL
browseui.DLL
comctl32.DLL
IEXPLORE.EXE
iexplore.pdb
ADVAPI32.dll
MsgWaitForMultipleObjects
IExplorer.EXE
IIIIIB(II<.Fg
7?_____ZZSSH%
)z.UUUUUUUU
,....Qym
````2```
{.QLQIIIKGKGKGKGKGKG
;33;33;0
8888880
8887080
browseui.dll
shdocvw.dll
6.00.2900.5512 (xpsp.080413-2105)
Windows
Operating System
6.00.2900.5512

wscntmx.exe_1576_rwx_00426000_00001000:

.soAw?
.qT3<
kernel32.dll

svchost.exe_1880:

.text
`.data
.rsrc
ADVAPI32.dll
KERNEL32.dll
NTDLL.DLL
RPCRT4.dll
NETAPI32.dll
ole32.dll
ntdll.dll
RegCloseKey
RegOpenKeyExW
GetProcessHeap
NtOpenKey
svchost.pdb
\PIPE\
Software\Microsoft\Windows NT\CurrentVersion\Svchost
\Registry\Machine\System\CurrentControlSet\Control\SecurePipeServers\
5.1.2600.5512 (xpsp.080413-2111)
svchost.exe
Windows
Operating System
5.1.2600.5512


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    cacls.exe:308
    cacls.exe:1396
    cacls.exe:1872
    cacls.exe:492
    cacls.exe:572
    attrib.exe:876
    attrib.exe:340
    attrib.exe:652
    attrib.exe:1288
    qudongrensheng.dat:440

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    C:\b.bat (255 bytes)
    %System%\drivers\etc\hosts.ics (21721 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\cj[1].txt (3645 bytes)
    C:\a.bat (356 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb1[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\gg[1].png (5255 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\578724578[1].js (246 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rndmode_on[1].gif (720 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\046bt[1].gif (2479 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\pic2[1].gif (431 bytes)
    %System%\drivers\etc\protocol (799 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_stop[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgtitle[1].gif (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\top[1].png (3116 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.1[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zsf[1].gif (20145 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_on[1].gif (720 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmbud[1].js (7042 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][2].txt (751 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][2].txt (582 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.8[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\1gg[1].png (14378 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\imgchg[1].js (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\1gg[2].png (13375 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_on[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.1[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[2].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.3[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\stat[1].php (1163 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[2].gif (43 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@mmstat[2].txt (166 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.1[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (254 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\logo[1].gif (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.10[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_pauz_off[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[2] (975 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[2].htm (3309 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_stop_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][2].txt (523 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_next[1].gif (211 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[2].gif (764 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_stop[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (721 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic2[1].gif (431 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\jiaqun[1].htm (250 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.6[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (18132 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\exobudset[1].js (467 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb3[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gif008[1].gif (565 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_next[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_rept_off[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.2[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.8[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[2].gif (14958 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\578724578[1].js (140 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\yds[1].gif (27521 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\zaoma[2].jpg (6397 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgtitle[2].gif (114 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (751 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\imgchg[1].js (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bingxue[2].gif (4453 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.7[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (322 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_pauz_on[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\lhr[1].gif (16714 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_stop_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\zaoma[1].jpg (5767 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (332 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmbud[1].js (5605 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_play_on[1].gif (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zs[1].gif (28316 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_rept_off[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\yds[2].gif (25401 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\pic1[1].gif (428 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\icon[1].png (409 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgnav[1].gif (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.3[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\style[1].css (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\top[1].png (3176 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[1].php (1177 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\zaoma[1].jpg (4323 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bg[1].gif (763 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.7[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\imgchg[1].js (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.2[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgheader[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.5[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\2014052276129177[2].gif (832 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_stop[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\style[1].css (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgh[1].gif (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\8090[2].gif (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[3].gif (14828 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\6330cf46f68cd2c7c40a422626d1cb30[1].png (930 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\pic1[1].gif (428 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\stat[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgh[2].gif (1707 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\xmb1[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.9[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_pauz_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[3].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.4[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bg[1].gif (763 bytes)
    %System%\drivers\etc\lmhosts.sam (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\6330cf46f68cd2c7c40a422626d1cb30[1].png (362 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[1].gif (289 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\2014052276129177[1].gif (832 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.5[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.10[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\gif008[1].gif (565 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.4[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\time[1].js (638 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\lszwg[1].htm (22 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.7[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_play[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\core[1].php (753 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.0[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\group[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\lhr[1].gif (17238 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[3].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\gg[2].png (4078 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][2].txt (402 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_pauz_off[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\zs[1].gif (30483 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_next[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.0[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\player.volmeter.6[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\stat[2].php (1097 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (402 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\logo[1].gif (231 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.0[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\12adfb.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bfzs[2].gif (9435 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\zsf[2].gif (20294 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\exobudset[1].js (467 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rept_on[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1] (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\btn_prev[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\player.volmeter.9[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\zs[1].gif (28453 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_pauz_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\stat[1].php (1097 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb2[2].gif (289 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgnav[1].gif (3 bytes)
    %System%\drivers\etc\services (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_play_on[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\icon[1].png (409 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_stop_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Desktop\·ÀIEÖ÷Ò³ÐÞ¸Ä-ä¯ÀÀÆ÷.exe (1858 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\core[1].php (753 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_mute_on[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gua[1].gif (8526 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\core[1].php (753 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@cnzz[2].txt (161 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.6[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bgh[1].gif (169 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\pic1[1].gif (428 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb3[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bingxue[1].gif (4631 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player.volmeter.4[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bfzs[1].gif (5805 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\logo[2].gif (231 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_play[1].gif (2 bytes)
    %System%\drivers\etc\networks (407 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\1gg[1].png (15660 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\046bt[2].gif (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_mute_off[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\core[1].php (753 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\exobudset[2].js (467 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player.volmeter.2[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\bg[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_pauz_off[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\bgheader[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bgnav[1].gif (117 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\player59[1].htm (2739 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E5E5SH2R\xmb[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\6330cf46f68cd2c7c40a422626d1cb30[1].png (362 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\gua[2].gif (11914 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\player59[1].htm (1179 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_off[2].gif (720 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\xmb2[1].gif (289 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rept_off[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\606781[1].js (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\btn_prev[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\pic2[1].gif (431 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\btn_rept_on[1].gif (609 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\578724578[1].js (88 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\8090[1].gif (1302 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\gg[1].png (4406 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\xmb3[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\icon[1].png (409 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\time[1].js (1276 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\941pojie[1].htm (22 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\btn_rndmode_off[1].gif (720 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\bgtitle[1].gif (111 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\bgheader[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\jbc[1].gif (12151 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\0XYZW5UV\qingtian[1].gif (10260 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\K1AZK5I7\jbc[1].gif (14667 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\C7O90NQP\top[1].png (3181 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\hao123_res.tmp (35 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "wscntmx" = "D:\\wscntmx.exe"

  5. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  6. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  7. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Average: 1 (1 vote)


Lavasoft is the maker of Ad-Aware, the world's most popular anti-malware software with over 450 million downloads.
© 2026 Lavasoft. All rights reserved.
Terms Of Use |   Privacy Policy


x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now