账号通
    

账号  

密码  

34725

查看

85

回复
主题:[公告]郑重声明:挂马者及被挂马的用户注意了 [收藏主题] 转到:  
goon2005 当前离线

740

主题

1

广播

0

粉丝
添加关注
级别:六年级

用户积分:3504 分
登录次数:229 次
注册时间:2006/10/31
最后登录:2018/2/26
goon2005 发表于:2009/10/1 10:56:00   | 只看该作者 查看该作者主题 61楼 
科汛在线商城系统(NET)
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:47 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:47 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:48 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.asa - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:49 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:49 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:51 W3SVC1994837639 124.172.159.118 POST /css/css.asa - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:30:52 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:52 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 POST /html/indexs.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 POST /js/sjs.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /index.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /Index.html - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /Template/rss.html.asp;.html - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:59 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/Template&CurrPath=/Template&OldFileName=rss.html.asp%3B.html&NewFileName=rss.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:00 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:00 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.html.asp;.html - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:03 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/KS_Data&CurrPath=/KS_Data&OldFileName=kesionbak.html.asp%3B.html&NewFileName=kesionbak.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.asp - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:05 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:07 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/Images&CurrPath=/Images&OldFileName=2009060259291.html.asp%3B.html&NewFileName=2009060259291.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:07 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /css/css.html.asp;.html - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:31:10 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/css&CurrPath=/css&OldFileName=css.html.asp%3B.html&NewFileName=css.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:11 W3SVC1994837639 124.172.159.118 POST /css/css.asp - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /html/indexs.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:14 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/html&CurrPath=/html&OldFileName=indexs.html.asp%3B.html&NewFileName=indexs.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:14 W3SVC1994837639 124.172.159.118 POST /html/indexs.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /js/sjs.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:17 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/js&CurrPath=/js&OldFileName=sjs.html.asp%3B.html&NewFileName=sjs.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:17 W3SVC1994837639 124.172.159.118 POST /js/sjs.asp - 80 - 222.245.208.83 - 404 0 2

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
科汛官方 当前离线

47268

主题

145

广播

405

粉丝
添加关注
级别:管理员

用户积分:101604 分
登录次数:7935 次
注册时间:2006/12/7
最后登录:2023/12/14
科汛官方 发表于:2009/10/1 10:59:00   | 只看该作者 查看该作者主题 62楼 
做在线知识付费 选科汛云开店
以下是引用goon2005在2009-10-1 10:56:00的发言:
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:45 W3SVC1994837639 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:47 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:47 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:48 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.asa - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:49 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:49 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:50 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:51 W3SVC1994837639 124.172.159.118 POST /css/css.asa - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:30:52 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:52 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 POST /html/indexs.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:53 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 POST /js/sjs.asa - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:55 W3SVC1994837639 124.172.159.118 GET /admin/include/Login.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /index.asp - 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /Index.html - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:30:58 W3SVC1994837639 124.172.159.118 POST /Template/rss.html.asp;.html - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:30:59 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/Template&CurrPath=/Template&OldFileName=rss.html.asp%3B.html&NewFileName=rss.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:00 W3SVC1994837639 124.172.159.118 POST /Template/rss.asp - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:00 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:01 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.html.asp;.html - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:03 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/KS_Data&CurrPath=/KS_Data&OldFileName=kesionbak.html.asp%3B.html&NewFileName=kesionbak.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /KS_Data/kesionbak.asp - 80 - 222.245.208.83 - 403 1 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:04 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:05 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:07 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/Images&CurrPath=/Images&OldFileName=2009060259291.html.asp%3B.html&NewFileName=2009060259291.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:07 W3SVC1994837639 124.172.159.118 POST /Images/2009060259291.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:09 W3SVC1994837639 124.172.159.118 POST /css/css.html.asp;.html - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:31:10 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/css&CurrPath=/css&OldFileName=css.html.asp%3B.html&NewFileName=css.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:11 W3SVC1994837639 124.172.159.118 POST /css/css.asp - 80 - 222.245.208.83 - 404 0 3
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:12 W3SVC1994837639 124.172.159.118 POST /html/indexs.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:14 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/html&CurrPath=/html&OldFileName=indexs.html.asp%3B.html&NewFileName=indexs.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:14 W3SVC1994837639 124.172.159.118 POST /html/indexs.asp - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=AddTemplateFile 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /admin/KS.Template.asp Action=TemplateSave 80 - 222.245.208.83 - 302 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 GET /admin/Login.asp - 80 - 222.245.208.83 - 200 0 0
2009-09-29 04:31:16 W3SVC1994837639 124.172.159.118 POST /js/sjs.html.asp;.html - 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:17 W3SVC1994837639 124.172.159.118 POST /KS.Template.asp Action=FileReName&Path=/js&CurrPath=/js&OldFileName=sjs.html.asp%3B.html&NewFileName=sjs.asp 80 - 222.245.208.83 - 404 0 2
2009-09-29 04:31:17 W3SVC1994837639 124.172.159.118 POST /js/sjs.asp - 80 - 222.245.208.83 - 404 0 2

 

 

 

 

从你的这个日志里看得出是通过KS.Template.asp 上传的后门,请清除木马及删除我上面说的这两个文件后,做下观察!

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
goon2005 当前离线

740

主题

1

广播

0

粉丝
添加关注
级别:六年级

用户积分:3504 分
登录次数:229 次
注册时间:2006/10/31
最后登录:2018/2/26
goon2005 发表于:2009/10/1 10:52:00   | 只看该作者 查看该作者主题 63楼 
科汛在线网校系统
2009-09-30 16:23:15 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:23:16 W3SVC212652932 124.172.159.118 POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:24:35 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
yifeng 当前离线

59

主题

0

广播

0

粉丝
添加关注
级别:学前班

用户积分:472 分
登录次数:87 次
注册时间:2009/8/28
最后登录:2010/6/29
yifeng 发表于:2009/10/1 10:52:00   | 只看该作者 查看该作者主题 64楼 

E:\web\KS_Inc\highslide\graphics\outlinesk

有这样一图片289582993.asp;.gif

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
goon2005 当前离线

740

主题

1

广播

0

粉丝
添加关注
级别:六年级

用户积分:3504 分
登录次数:229 次
注册时间:2006/10/31
最后登录:2018/2/26
goon2005 发表于:2009/10/1 10:51:00   | 只看该作者 查看该作者主题 65楼 
科汛在线考试系统(NET)
 2009-09-29 23:44:55 W3SVC212652932 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-29 23:44:55 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 00:54:53 W3SVC212652932 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 00:54:53 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 00:55:54 W3SVC212652932 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 00:55:54 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:02:30 W3SVC212652932 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:02:30 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:08:15 W3SVC212652932 124.172.159.118 POST /admin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:08:15 W3SVC212652932 124.172.159.118 POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
goodniao 当前离线

263

主题

0

广播

0

粉丝
添加关注
级别:二年级

用户积分:1884 分
登录次数:46 次
注册时间:2007/4/22
最后登录:2012/2/13
goodniao 发表于:2009/10/1 10:45:00   | 只看该作者 查看该作者主题 66楼 
还不对,应该是这几句2009-09-30 16:38:50 10.10.1.5 POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:38:50 10.10.1.5 POST /KS_Editor/fckeditor/editor/plugins/autogrow/inedx.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:38:50 10.10.1.5 POST /KS_Editor/fckeditor/editor/plugins/autogrow/bottum.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:38:50 10.10.1.5 POST /Space/C00N.asp - 80 - 124.172.242.16 - 404 0 2
2009-09-30 16:38:50 10.10.1.5 GET /upfiles/yingyinjiaoxue/DownUrl/200809/北京欢迎你2008北京奥运歌曲welcome.mp3 - 80 - 113.105.241.78 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 206 0 121
2009-09-30 16:38:50 10.10.1.5 POST /Admin/Skin/1/help.asp;.jpg - 80 - 124.172.242.16 - 404 0 64
2009-09-30 16:38:51 10.10.1.5 POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 16:38:55 10.10.1.5 POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
dongri888 当前离线

504

主题

2

广播

2

粉丝
添加关注
级别:五年级

用户积分:13121 分
登录次数:779 次
注册时间:2008/12/15
最后登录:2015/6/3
dongri888 发表于:2009/10/1 10:45:00   | 只看该作者 查看该作者主题 67楼 
 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
呆呆520 当前离线

53

主题

0

广播

0

粉丝
添加关注
级别:学前班

用户积分:486 分
登录次数:7 次
注册时间:2009/4/27
最后登录:2009/10/1
呆呆520 发表于:2009/10/1 12:31:00   | 只看该作者 查看该作者主题 68楼 

我的也被挂了,苦恼啊

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
yuechang8 当前离线

354

主题

9

广播

0

粉丝
添加关注
级别:三年级

用户积分:1908 分
登录次数:202 次
注册时间:2006/11/5
最后登录:2021/1/15
yuechang8 发表于:2009/10/1 23:54:00   | 只看该作者 查看该作者主题 69楼 
科汛在线网校系统
以下是引用阿霸在2009-10-1 13:29:00的发言:

愉快的10.1就这样被kesion搞了下,提个小解决办法。

 

kesion看来真的要正面交锋了,法律的手段要拿出来。

希望kesion官方能认真对待系统,希望能内部或者请黑客专家检测科讯网站程序的安全性。

科讯安全系数要增强,要完善。

 

放假挂马的确毒,严重谴责。

 

强烈建议科汛报警!!!

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
阿霸 当前离线

445

主题

0

广播

0

粉丝
添加关注
级别:版主

用户积分:6313 分
登录次数:501 次
注册时间:2008/8/31
最后登录:2018/1/14
阿霸 发表于:2009/10/1 13:29:00   | 只看该作者 查看该作者主题 70楼 
做在线知识付费 选科汛云开店

愉快的10.1就这样被kesion搞了下,提个小解决办法。

网站有备份的先覆盖回来,然后设置网站只读。就是只能运行不能改的那种。

清理了不用的和挂马文件后。把管理文件夹整个删掉,需要用的时候再上传上去,绝对保险。

发现木马的文件创建时间在9.28,估计也就是上次挂马事件那些鸟人干的。

 

kesion看来真的要正面交锋了,法律的手段要拿出来。

希望kesion官方能认真对待系统,希望能内部或者请黑客专家检测科讯网站程序的安全性。

科讯安全系数要增强,要完善。

 

放假挂马的确毒,严重谴责。

 

 
  支持(0) | 反对(0) 回到顶部顶端 回到底部底部
<上一主题 | 下一主题 >
Powered By KesionCMS Version X1
厦门科汛软件有限公司 © 2006-2016 页面执行0.20313秒 powered by KesionCMS 9.0