首页被修改。求教解决办法。

2016-07-07 15:13 来源:www.chinab4c.com 作者:ecshop专家

ffffffffff.jpg
我的网站是www.zpbuy.net请问该怎么解决啊

回答:
这个很容易的找到代码删除了 就OK了

我找了index 里面没有呀。怎么办啊

谁知道告诉我下呢


我找了index 里面没有呀。怎么办啊
①号男配角 发表于 2013-1-4 17:04


为什么你就片面的认为是在index里呢,
还是查一下 themes/模板文件夹/library/page_footer.lbi 吧可能在这个里面

如果这个文件里也没有,那就用编辑软件进行全目录搜索,

如果整个目录下都没找到这些代码,那就是你的服务器遭遇了 ARP攻击

  1. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0"><a href="http://www.shoppinguggboots.org/">cheap ugg boots</a><a href="http://www.shoppinguggboots.org/">ugg boots</a><a href="http://www.christmasuggboots.org/">ugg boots sale</a><a href="http://www.uggbootschristmas.org/">discount ugg boots</a><a href="http://www.theugg-boots.com/">ugg boots</a><a href="http://www.thecheap-uggs.com/">cheap uggs</a><a href="http://www.cheap-uggsstore.com/">cheap uggs store</a><a href="http://www.uggbootsoutletsale.org/">ugg boots sale</a></marquee></div>

  2. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0">
  3. <a href="http://www.uggscheapboots.org/">ugg boots</a>
  4. <a href="http://www.uggscheapboots.org/">ugg boots sale</a>
  5. <a href="http://www.uggoutletsite.com/">UGG outlet</a>
  6. <a href="http://www.uggsaleoutlet.org/">UGGs outlet</a>
  7. <a href="http://www.discountuggsonline.org/">Discount UGGs</a>
  8. <a href="http://www.uggs**alesite.com/">UGGs On Sale</a>
  9. <a href="http://www.uggbootssalestore.org/">ugg boots sale</a>
  10. <a href="http://www.uggsoutletsale.org/">ugg boots on sale</a>
  11. </marquee></div>
  12. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0"><a href=http://www.uggbootszone.org/>ugg boots</a><a href=http://www.uggbootsuksale.org/>discount ugg boots</a><a href=http://www.u99sboots.com/>uggs</a><a href=http://www.monclerjacketsusa.com/>moncler jackets</a><a href=http://www.u99bootsuk.com/>cheap ugg boots</a><a href=http://www.cheapghdsaustralia.com/>cheap ghds</a><a href=http://www.uggsoutlets.org/>uggs outlets</a><a href=http://www.u99bootsus.com/>ugg boots sale</a></marquee></div><meta http-equiv="Content-Type" content="text/html; charset=gbk">
  13. <script type="text/javascript">
  14. var process_request = "{$lang.process_request}";
  15. var btn_buy = "{$lang.btn_buy}";
  16. var is_cancel = "{$lang.is_cancel}";
  17. var select_spe = "{$lang.select_spe}";
  18. </script>
  19. <div class="block clearfix">
  20. <div class="logo fl"><a href="../index.php"><img src="images/logo.gif" alt="{$page_title}" /></a></div>
  21. <div class="topright fr">
  22. <ul>
  23. <li class="topnav tr">
  24. {insert_scripts files='transport.js,utils.js'}
  25. <font id="ECS_MEMBERZONE">{* ECSHOP 提醒您:根据用户id来调用member_info.lbi显示不同的界面 *}{insert name='member_info'} </font>

  26. <!--{if $navigator_list.top}-->
  27. <!-- {foreach name=nav_top_list from=$navigator_list.top item=nav} -->
  28. <a href="{$nav.url}" <!-- {if $nav.opennew eq 1} --> target="_blank" <!-- {/if} -->>{$nav.name}</a>
  29. <!-- {if !$smarty.foreach.nav_top_list.last} -->
  30. |
  31. <!-- {/if} -->
  32. <!-- {/foreach} -->
  33. <!-- {/if} -->
  34. </li>
  35. <li class="searchbox">
  36. <form id="searchForm" name="searchForm" method="get" action="search.php" **ubmit="return checkSearchForm()">
  37. <input name="keywords" type="text" id="keyword" class="keybg1" onfocus="myonfocus();" onblur="myonblur();" value="{$search_keywords|escape}" />
  38. <input name="imageField" type="submit" value="" class="bnt_scarch" />
  39. <a href="search.php?act=advanced_search"><img src="images/advanced.gif"></a><br />
  40. {if $searchkeywords}
  41. <div class="hot_search">
  42. {foreach name=keywords from=$searchkeywords item=val}
  43. <a href="search.php?keywords={$val|escape:url}">{$val}</a>
  44. <!-- {if !$smarty.foreach.keywords.last} -->
  45. |
  46. <!-- {/if} -->
  47. {/foreach}
  48. </div>
  49. {/if}
  50. </div>
  51. </form>
  52. <script type="text/javascript">
  53. {literal}
  54. if(document.getElementById('keyword').value==""){
  55. document.getElementById('keyword').className="keybg";
  56. }
  57. <!--
  58. function checkSearchForm()
  59. {
  60. if(document.getElementById('keyword').value)
  61. {
  62. return true;
  63. }
  64. else
  65. {
  66. alert("{$lang.no_keywords}");
  67. return false;
  68. }
  69. }
  70. function myonfocus(){
  71. var keys = document.getElementById('keyword');
  72. keys.className = "";
  73. }
  74. function myonblur(){
  75. var keys = document.getElementById('keyword');
  76. if(keys.value==""){
  77. keys.className = "keybg";
  78. }else{
  79. keys.className = "";
  80. }
  81. }
  82. -->
  83. {/literal}
  84. </script>
  85. </li>
  86. </ul>
  87. </div>
  88. </div>
  89. <div class="block pagenavbox blank">
  90. <div class="nav fl">
  91. <ul class="clearfix">
  92. <li {if $navigator_list.config.index eq 1} class="curs"{/if}>{if $navigator_list.config.index eq 1} <span class="l"></span><span class="r"></span>{/if}<a href="../index.php">{$lang.home}</a></li>
  93. <!-- {foreach name=nav_middle_list from=$navigator_list.middle item=nav} -->
  94. <li {if $nav.active eq 1} class="curs"{/if}>{if $nav.active eq 1} <span class="l"></span><span class="r"></span>{/if}<a href="{$nav.url}" {if $nav.opennew eq 1}target="_blank" {/if}>{$nav.name}</a></li>
  95. <!-- {/foreach} -->
  96. </ul>
  97. </div>
  98. <div class="cart clearfix fr">
  99. <ul>
  100. <li class="w180">
  101. <div id="ECS_CARTINFO" class="none">
  102. {insert_scripts files='transport.js'}
  103. {insert name='cart_info'}
  104. </div>
  105. 购物车有 <font id="a1">0</font> 件商品
  106. </li>
  107. <li class="w90"><a href="flow.php">去结算</a></li>
  108. </ul>
  109. <script type="text/javascript">cart();</script>
  110. </div>
  111. </div>
复制代码

找到了这个。哪些是可以删除的啊

找个懂些的修改下,修改前备份下源文件哦!

找到里面的木马。然后删除。估计是有木马。

应该是有上传的马,,先把被挂链的地方删了,再找马,然后删掉!~

themes\default\index.dwt 里查看有没有
themes\default\library\page_footer.lbi
themes\default\library\page_header.lbi
这些地方都要检查

收藏了先.....学习

全站检查下看看

被挂马了 尽快清除

晕了,还有牧马啊,