Clear Trojans + fix vulnerabilities = completely fix website Trojans

Source: Internet
Author: User

Clear Trojans

1. Find the trojan label to prevent website intrusion, such as <script language = "javascript" src = "webhorse address"> </script> or

<Iframe width = 420 height = 330 frameborder = 0
Scrolling = auto src = network horse address> </iframe>, or you have blocked the network horse website with 360 or virus software. Sqldatabase is infected with Trojans, generally JS Trojans.

2. After finding the malicious code, the next step is to clear the Trojan horse. If the webpage is infected with Trojans, you can use manual or batch clear the Trojan horse, I will not discuss it in detail here. I will focus on the SQL database.

Qingma explained the meaning of this sentence with the statement "update table name set field name = replace (field name, aaa: replace the content containing aaa in the field name with null, so that you can

Delete network horses in batches from one table to one table.

If your website program or database is not backed up, you can perform the preceding two steps to clear the Trojan horse. If your website program is backed up, you can directly overwrite the original file.

Fix vulnerabilities .)

1. Modify the user name and password of the website background and the default path of the background.
2. Change the database name. If it is an ACCESS database, it is best not to use mdb for the file extension. If it is changed to ASP, the file name can also contain several special symbols.
3. check whether there are any injection or cross-site vulnerabilities on the website. If yes, it is equivalent to anti-injection or cross-site patching.
4. Check the uploaded files on the website. If there is a common spoofing Upload Vulnerability, filter the corresponding code.
5. Do not expose the back-end address of the website as much as possible, so that the Administrator and password can be guessed by social engineering.
6. Write some anti-Trojan code to make the Framework Code and other anti-Trojan Code invalid.
7. disabling the FSO permission is also an absolute method.
8. Modify the read and write permissions of some folders on the website.
9. If you are your own server, it is necessary not only to secure your website programs, but also to secure your servers!


In order to make your website more secure, we recommend that you not only perform basic maintenance on your own, but also invite professional website security companies if necessary. They can perform more system maintenance on the website and provide professional networks.

The solution to website Trojans can better solve website security problems.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.