提醒管理员 -卡饭论坛居然遭劫持！

tanbebe

今天想找个AVAST的授权文件 无意中路过这里发现 论坛居然被劫持这里应该算是中国最大的反病毒大众论坛吧

看图吧



如果你使用的是遨游3浏览器 在选项里面
修改自定义 UserAgent 字符串 :下面添加baidu.com
刷新论坛就能看到


如果你是ie
请导入下面注册表就能看到
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent]
@="Googlebot/2.1"
"Compatible"="+http://www.baidu.com/search/spider.html"


顺便提醒下管理员Discuz! X1.5的最新漏洞补了没？ http://www.sitedirsec.com/exploit-1419.html

wdsoft

额，完全是看不懂的状态中，，，

mpgk

回复 1楼 tanbebe 的帖子

谢谢你的提醒，非常感谢您对卡饭的支持，我回尽快把你的问题反馈给管理员的，期待你更多的建议，祝你愉快，谢谢

wwdboy

这个牛啊

Hank↗

<li><a href="http://www.360nrba.com/html/renren/show.php?action-viewnews-itemid-5271236">0</a></li>
<li><a href="http://www.plajs.com/news/jiemi/view.php?action-viewnews-itemid-3701312">1</a></li>
<li><a href="http://www.lyghj.cn/forum/2011/content.php?action-viewnews-itemid-5092237">2</a></li>
<li><a href="http://www.onlineyou.com.cn/html/id/zttid.php?action-viewnews-itemid-6718450">3</a></li>
<li><a href="http://www.hbqx.gov.cn/show/game/smdl.php?action-viewnews-itemid-4835133">4</a></li>
<li><a href="http://www.huashengcrafts.com/news/photo/listnews.php?action-viewnews-itemid-253895">5</a></li>
<li><a href="http://www.to8to.com/html/qiwen/play.php?action-viewnews-itemid-6345439">6</a></li>
<li><a href="http://www.0830123.com/news/top/view.php?action-viewnews-itemid-1929190">7</a></li>
<li><a href="http://hwtx888.com/map/zhuanti/view.php?action-viewnews-itemid-2503677">8</a></li>
<li><a href="http://www.xinfadi.com.cn/home/tq/2011.php?action-viewnews-itemid-51743">9</a></li>
<li><a href="http://www.yanyijie.net/html/top/content.php?action-viewnews-itemid-8477154">10</a></li>
<li><a href="http://bar.66wz.com/view/pangyou/listnews.php?action-viewnews-itemid-7467392">11</a></li>
<li><a href="http://www.lyghj.cn/forum/read/2011.php?action-viewnews-itemid-7668923">12</a></li>
<li><a href="http://www.plajs.com/news/qiwen/qnyhid.php?action-viewnews-itemid-9317953">13</a></li>
<li><a href="http://137137.net/html/jiemi/question.php?action-viewnews-itemid-9907031">14</a></li>
<li><a href="http://posgd.com/news/renren/show.php?action-viewnews-itemid-3115685">15</a></li>
<li><a href="http://www.shuangjiu.com/news/2011/2011.php?action-viewnews-itemid-4562311">16</a></li>
<li><a href="http://www.armyonline.cn/html/id/2011.php?action-viewnews-itemid-3968048">17</a></li>
<li><a href="http://shop.jnds.com.cn/news/zt/wowid.php?action-viewnews-itemid-2194297">18</a></li>
<li><a href="http://www.333cn.com/view/20110507/listnews.php?action-viewnews-itemid-6213812">19</a></li>
<li><a href="http://www.qingchunxing.com/html/new/question.php?action-viewnews-itemid-6781639">20</a></li>
<li><a href="http://posgd.com/news/renren/show.php?action-viewnews-itemid-3853868">21</a></li>
<li><a href="http://diy.bajing.cn/content/pangyou/map.php?action-viewnews-itemid-5893374">22</a></li>
<li><a href="http://shop.jnds.com.cn/news/2011/news.php?action-viewnews-itemid-2114874">23</a></li>
<li><a href="http://www.333cn.com/news/top/rxjh.php?action-viewnews-itemid-148655">24</a></li>
<li><a href="http://www.npi.org.cn/enews/map/read/2011.php?action-viewnews-itemid-8937083">25</a></li>
<li><a href="http://www.0599ji.cn/map/top/map.php?action-viewnews-itemid-9442207">26</a></li>
<li><a href="http://www.6188.com/html/ask/content.php?action-viewnews-itemid-5003026">27</a></li>
<li><a href="http://diy.bajing.cn/content/pangyou/map.php?action-viewnews-itemid-3834563">28</a></li>
<li><a href="http://www.0599ji.cn/map/photo/content.php?action-viewnews-itemid-6547405">29</a></li>
<li><a href="http://www.333cn.com/news/zhuanti/show.php?action-viewnews-itemid-273444">30</a></li>
<li><a href="http://www.333cn.com/news/wenzhang/forum.php?action-viewnews-itemid-6446332">31</a></li>
<li><a href="http://www.npi.org.cn/enews/map/qiwen/forum.php?action-viewnews-itemid-8477483">32</a></li>
<li><a href="http://search.yxbao.com/html/qiwen/2011.php?action-viewnews-itemid-5934517">33</a></li>
<li><a href="http://www.onxiu.cn/archiver/20110428/news.php?action-viewnews-itemid-5921083">34</a></li>
<li><a href="http://www.syzy.com.cn/bbs/uc_server/js/news/zhuanti/news.php?action-viewnews-itemid-6425835">35</a></li>
<li><a href="http://www.ldong.net/list/top/play.php?action-viewnews-itemid-9135620">36</a></li>
<li><a href="http://www.smtms.com/cert/news/pangyou/qqid.php?action-viewnews-itemid-971849">37</a></li>
<li><a href="http://www.0830123.com/news/epr/dmlq.php?action-viewnews-itemid-7725017">38</a></li>
<li><a href="http://www.100tennis.com/map/20110428/content.php?action-viewnews-itemid-9312132">39</a></li>
<li><a href="http://www.zzkzsp.com/news/0429/show.php?action-viewnews-itemid-9751689">40</a></li>
<li><a href="http://www.buy366.net/home/bbs/view.php?action-viewnews-itemid-932631">41</a></li>
<li><a href="http://www.100tennis.com/map/id/map.php?action-viewnews-itemid-3443004">42</a></li>
<li><a href="http://www.xywy.com/html/2011/show.php?action-viewnews-itemid-148245">43</a></li>
<li><a href="http://www.0830123.com/news/sun/index.php?action-viewnews-itemid-9278439">44</a></li>
<li><a href="http://www.yanyijie.net/html/zt/question.php?action-viewnews-itemid-6230622">45</a></li>
<li><a href="http://www.6188.com/html/id/show.php?action-viewnews-itemid-2485510">46</a></li>
<li><a href="http://bbs.daysview.com/forum/renren/play.php?action-viewnews-itemid-4643071">47</a></li>
<li><a href="http://www.chinaptc.com/news/zt/play.php?action-viewnews-itemid-1232550">48</a></li>
<li><a href="http://www.to8to.com/html/20110429/content.php?action-viewnews-itemid-9580164">49</a></li>
<li><a href="http://www.qhyxyy.com/html/read/mhxy.php?action-viewnews-itemid-243172">50</a></li>
<li><a href="http://www.wzwmw.com/home/top/view.php?action-viewnews-itemid-4296350">51</a></li>
<li><a href="http://www.shuangjiu.com/news/game/show.php?action-viewnews-itemid-9849154">52</a></li>
<li><a href="http://www.ai84.com/show/qiwen/content.php?action-viewnews-itemid-2268750">53</a></li>
<li><a href="http://www.cnsinglong.com/view/zt/view.php?action-viewnews-itemid-4011065">54</a></li>
<li><a href="http://www.gv123.com/images/200908/forum/20110505/wowid.php?action-viewnews-itemid-6576911">55</a></li>
<li><a href="http://www.smtms.com/cert/news/20110428/map.php?action-viewnews-itemid-7978086">56</a></li>
<li><a href="http://www.alvitools.com/news/ask/news.php?action-viewnews-itemid-5531403">57</a></li>
<li><a href="http://www.cegov.cn/news/hcb/play.php?action-viewnews-itemid-7165644">58</a></li>
<li><a href="http://www.ai84.com/show/photo/content.php?action-viewnews-itemid-2317736">59</a></li>
<li><a href="http://www.cnsinglong.com/view/sun/2011.php?action-viewnews-itemid-467047">60</a></li>
<li><a href="http://www.szruihong.com/news/jiemi/csolid.php?action-viewnews-itemid-1676597">61</a></li>
<li><a href="http://www.plajs.com/news/jiemi/view.php?action-viewnews-itemid-2599488">62</a></li>
<li><a href="http://www.sunya.com.cn/news/photo/show.php?action-viewnews-itemid-346938">63</a></li>
<li><a href="http://www.smtms.com/cert/news/zhuanti/show.php?action-viewnews-itemid-5072505">64</a></li>
<li><a href="http://www.chaoshan.cn/html/gli/news.php?action-viewnews-itemid-376714">65</a></li>
<li><a href="http://buxingjie365.com/list/game/question.php?action-viewnews-itemid-9826868">66</a></li>
<li><a href="http://www.luckychinatown.com/forum/pangyou/content.php?action-viewnews-itemid-8844667">67</a></li>
<li><a href="http://www.333cn.com/news/wenzhang/forum.php?action-viewnews-itemid-5416405">68</a></li>
<li><a href="http://www.itnxbathroom.com/news/game/content.php?action-viewnews-itemid-4220865">69</a></li>
<li><a href="http://www.333cn.com/view/game/show.php?action-viewnews-itemid-7692272">70</a></li>
<li><a href="http://www.zhongliu999.cn/html/jiemi/2011.php?action-viewnews-itemid-3242163">71</a></li>
<li><a href="http://www.ywwtrl.com/news/zt/show.php?action-viewnews-itemid-7318213">72</a></li>
<li><a href="http://www.szruihong.com/news/20110429/news.php?action-viewnews-itemid-8968231">73</a></li>
<li><a href="http://bbs.daysview.com/forum/zhuanti/forum.php?action-viewnews-itemid-597355">74</a></li>
<li><a href="http://www.wzwmw.com/home/jiemi/view.php?action-viewnews-itemid-9342642">75</a></li>
<li><a href="http://huilun2005.com/news/0428/view.php?action-viewnews-itemid-1577635">76</a></li>
<li><a href="http://www.9358.com/map/zhuanti/question.php?action-viewnews-itemid-3141558">77</a></li>
<li><a href="http://old.cqcb.com/html/top/view.php?action-viewnews-itemid-4362407">78</a></li>
<li><a href="http://www.333cn.com/view/2011/news.php?action-viewnews-itemid-761311">79</a></li>
<li><a href="http://www.smtms.com/cert/news/ask/listnews.php?action-viewnews-itemid-1838053">80</a></li>
<li><a href="http://www.npi.org.cn/html/top/show.php?action-viewnews-itemid-682520">81</a></li>
<li><a href="http://bar.66wz.com/view/pangyou/listnews.php?action-viewnews-itemid-9137828">82</a></li>
<li><a href="http://www.hmrrc.org.cn/html/photo/question.php?action-viewnews-itemid-6954425">83</a></li>
<li><a href="http://www.zeview.com/html/renren/question.php?action-viewnews-itemid-4712026">84</a></li>
<li><a href="http://posgd.com/news/20110429/map.php?action-viewnews-itemid-395520">85</a></li>
<li><a href="http://www.wzwmw.com/home/kds/2011.php?action-viewnews-itemid-1045023">86</a></li>
<li><a href="http://www.99shijue.com.cn/archiver/id/show.php?action-viewnews-itemid-8589756">87</a></li>
<li><a href="http://www.360nrba.com/html/pangyou/play.php?action-viewnews-itemid-2226441">88</a></li>
<li><a href="http://www.loveruby.cn/content/qiwen/question.php?action-viewnews-itemid-6463598">89</a></li>
<li><a href="http://www.sfs99.com/map/bbs/show.php?action-viewnews-itemid-6485392">90</a></li>
<li><a href="http://www.zeview.com/html/renren/question.php?action-viewnews-itemid-2312026">91</a></li>
<li><a href="http://www.zhongliu999.cn/html/qiwen/play.php?action-viewnews-itemid-4869608">92</a></li>
<li><a href="http://www.guangshenghao.com/news/renren/content.php?action-viewnews-itemid-9327067">93</a></li>
<li><a href="http://lovehome-hk.com/data/view/photo/play.php?action-viewnews-itemid-9235584">94</a></li>
<li><a href="http://bbs.daysview.com/forum/renren/play.php?action-viewnews-itemid-4054612">95</a></li>
<li><a href="http://www.0830123.com/news/new/content.php?action-viewnews-itemid-4370601">96</a></li>
<li><a href="http://www.guangshenghao.com/news/top/map.php?action-viewnews-itemid-8777270">97</a></li>
<li><a href="http://www.0599ji.cn/map/sun/view.php?action-viewnews-itemid-439739">98</a></li>
<li><a href="http://www.dx114.net/view/bij/zt.php?action-viewnews-itemid-2986922">99</a></li>

最终全都指向 http://www.game163.in/*这也就是有些饭友发现的漏洞吧

theone

感谢，已修正了被修改的文件。

正在查是通过什么方式进入服务器的，不过限于技术有限，不一定能查找到真正的原因，可能会需要通过其他方式来解决。

再次感谢！

乐活

都看不懂啊

jinyuming

升级到Discuz! X2 Beta 怎么样？

光之优雅

回复 8楼 jinyuming 的帖子

目前Discuz! X2 还在测试中，为了论坛的数据安全，应该暂时还不会更新

saga3721

怪不得傲游3会弹框说有未验证的网站，可能有截获服务器数据……