Yesterday Scholar's It school station again to hang the horse. This is really depressing, because it is another time to hang the horse, not the first time. Because last night a friend to my reaction, open it College Station, browser prompts a Trojan horse. I hurried to the interrogation, looking for the Trojan. But also very grateful to stand on the front line has been to someone else's website hanging horse garbage people, because you repeatedly to my site hanging horse, let me find a very easy way to find the location of the Trojan horse. This method is simple and effective, not exclusive, so write to share with everyone.
The website that hangs a horse generally, use a browser to open, will prompt the website to be hanged horse, forbid open. Internet Explorer generally will be in the lower right corner pop-up small window reminder form, and Google Browser and 360 of browsers, etc., will generally directly prohibit access to the horse-hanging website. Here's a screenshot to illustrate the problem. (I use Google browser)
(browser opens the hint of the horse website being hanged)
And then open "Please visit Google Security Scan Diagnostics page", screenshot as follows:
(This will show the domain of the Trojan)
Next good to do, landing server, open your site folder, click Search, in the search box to enter the domain of the Trojan key words, such as "Lovebb"
(search results, found out)
Here, we will find that the Trojan hangs in a JS file. Special note, the site hanging horse will generally hang in the JS file, of course, do not rule out the possibility of hanging elsewhere.
(Open this JS file to view)
Opened and found that looks very normal. In fact, from the left is not hard to see, this JS file is not just the two lines of code, at the bottom there.
Sure enough.
This tells us that it's hard to find these malicious code if it's just a random look. But if we search, it's easy to find. Here, we look for the Trojan project is over, the JS file in the relevant code deletion, replacement, it can be. Of course, the most important thing is that the following work, the server set up the relevant write permission to avoid the site is hanging horse again.
Author Information: Scholar, it College Station (www.itxyz.net) stationmaster. New 7474.html "> Grassroots webmaster Exchange 4 Group 33527887, Welcome to join the exchange." Reprint please keep, thank you.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.