Website risk Solution Series 1 _ search and removal after being reported to be tampered

Tampering is also called a dark chain. Then, it is generally used for black hat seo. How can I find a website after it is reported to be tampered?
In general, hidden links, tampering, and so on will not be displayed clearly. If a website is reported to be tampered with, how can we query and remove this malicious tag? Today, we will teach you how to simply remove manual searches.

Here is an example.
Www.aoyuan.com.cn
This is an enterprise website titled China aoyuan Real Estate Group Co., Ltd.
We used sanv for query and found 44 malicious links.

 

How can this website be reported to remove tampering? The key is to display 48 keywords or 44 links. We use Google Chrome to open the website and right-click to view the source code.

(If the website also contains Trojans, you are not recommended to open them directly. You can add view-source: URL before the URL, and then directly access the source code ), then press F3 to call up the query. In the upper right corner, we take the second key link for query. You can see? Do you know where the link is hidden?

Next, let's analyze why we can't see it. Pay attention to the place where the first red coil is in the figure. We can see <div style = \ "position: absolute; top:-987px; left:-987px; \ ">? Www.2cto.com
Here, we use js to write down the hidden link in the webpage and then write it into a div layer. The top margin and left margin of the div layer are both negative, for example, the area 1 is the area we see in the browser, and this layer is in area 2 because the top margin and the left margin are both negative, so naturally we can't see it.

 

Finally, let's talk about how to clear the malicious code of this website. After deleting the lines 324 to 346 in the figure, we can clearly understand the malicious code. We can use the health check to perform a review to release the tampering alarm.