为配合网警找出恶意捣蛋者,希望广大使用科汛系统被挂马的用户能互相协调配合!

 

请您在此跟帖提供以下资料:

1、IIS日志文件 (如果有请上传),日志文件里面有IP  主要就是几号传马这个时间段日志

2、你被挂的网站名称

3、网站网址

4、你的联系人/联系电话/QQ等

 

 

 

 

 

2009-09-15 19:02:37 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 211.174.62.68 - 403 1 0
2009-09-15 19:02:37 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 19:02:37 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 19:02:38 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 19:02:38 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 211.174.62.68 - 404 0 2
2009-09-15 20:31:31 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 211.174.62.68 - 403 1 0
2009-09-15 20:31:31 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 20:31:32 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 20:31:32 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 20:31:32 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 211.174.62.68 - 404 0 2
2009-09-15 22:34:02 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 211.174.62.68 - 403 1 0
2009-09-15 22:34:02 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 22:34:02 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 22:34:04 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-15 22:34:06 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 211.174.62.68 - 404 0 2

 2009-09-16 00:35:43 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 211.174.62.68 - 403 1 0
2009-09-16 00:35:43 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-16 00:35:43 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-16 00:35:47 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 211.174.62.68 - 404 0 2
2009-09-16 00:35:47 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 211.174.62.68 - 404 0 2
2009-09-16 08:10:40 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 58.61.36.103 - 403 1 0
2009-09-16 08:10:47 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 58.61.36.103 - 404 0 2
2009-09-16 08:10:52 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 58.61.36.103 - 404 0 64
2009-09-16 08:10:59 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 58.61.36.103 - 404 0 64
2009-09-16 08:11:07 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 58.61.36.103 - 404 0 64
2009-09-16 09:44:56 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 58.61.36.103 - 403 1 64
2009-09-16 09:44:56 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/plugins/tablecommands/inedx.asp - 80 - 58.61.36.103 - 404 0 64
2009-09-16 09:44:56 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/bottum.asp - 80 - 58.61.36.103 - 404 0 64
2009-09-16 09:44:56 W3SVC1994837639 124.172.159.118 POST /API/C00N.asp - 80 - 58.61.36.103 - 404 0 2
2009-09-16 09:44:56 W3SVC1994837639 124.172.159.118 POST /KS_Editor/fckeditor/editor/dialog/fck_template/help.asp;.jpg - 80 - 58.61.36.103 - 404 0 64

再顶

好奇怪的一个问题，我一个独立的网站kesionv6，任何搜索引擎都没收录就被挂马了。

 

什么推广都没做，这样都能中招。牛中之牛。。。。。

 

严重怀疑是不是内部人耍游戏？找个软件替换官方都没有指导，损失都给用户承担了。

 

真负责，不靠谱。

我顶   让更多人   看到此贴

 

http://www.21-sj.com  新世纪贸易商行

http://www.dmzfjj.cn 斗门住户基金中心

http://www.dmjmj.cn 斗门区经贸局

http://www.zh-zd.com 珠海市中德计算机有限公司

http://www.zh-bk.com 珠海市碧科水处理

http://wwwbeebecn.com 个人站点

http://www.dm268.com 斗门生活圈

http://www.zhyiwu.com  珠海购物狂

http://www.jmm520.com 中国女性礼品网

http://www.6883891.com 金海达商行

http://www.zhdiy.com.cn 珠海购物狂

http://www.elkcn.com 衣拉客服饰

http://www.olocn.com 澳龙服饰

http://www.am100.net 灵通家园

 

以上站点放同一台服务器上面,全被挂上马,现在损失严重.

联系人:陈生 QQ:42517027 电话:13527298811 (如果有需要的可以要求我协助,我全力支持和配合你们的工作)

 

请科汛管理员帮手联合一起报警!谢谢~

 

QQ：1144809352