首页被修改。求教解决办法。

2016-07-07 15:13 来源：www.chinab4c.com 作者：ecshop专家

ffffffffff.jpg
我的网站是www.zpbuy.net请问该怎么解决啊

回答：
这个很容易的找到代码删除了 就OK了

我找了index 里面没有呀。怎么办啊

谁知道告诉我下呢


我找了index 里面没有呀。怎么办啊
①号男配角 发表于 2013-1-4 17:04


为什么你就片面的认为是在index里呢，
还是查一下 themes/模板文件夹/library/page_footer.lbi 吧可能在这个里面

如果这个文件里也没有，那就用编辑软件进行全目录搜索，

如果整个目录下都没找到这些代码，那就是你的服务器遭遇了 ARP攻击

  1. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0"><a href="http://www.shoppinguggboots.org/">cheap ugg boots</a><a href="http://www.shoppinguggboots.org/">ugg boots</a><a href="http://www.christmasuggboots.org/">ugg boots sale</a><a href="http://www.uggbootschristmas.org/">discount ugg boots</a><a href="http://www.theugg-boots.com/">ugg boots</a><a href="http://www.thecheap-uggs.com/">cheap uggs</a><a href="http://www.cheap-uggsstore.com/">cheap uggs store</a><a href="http://www.uggbootsoutletsale.org/">ugg boots sale</a></marquee></div>

  3. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0">
  4. <a href="http://www.uggscheapboots.org/">ugg boots</a>
  5. <a href="http://www.uggscheapboots.org/">ugg boots sale</a>
  6. <a href="http://www.uggoutletsite.com/">UGG outlet</a>
  7. <a href="http://www.uggsaleoutlet.org/">UGGs outlet</a>
  8. <a href="http://www.discountuggsonline.org/">Discount UGGs</a>
  9. <a href="http://www.uggs**alesite.com/">UGGs On Sale</a>
  10. <a href="http://www.uggbootssalestore.org/">ugg boots sale</a>
  11. <a href="http://www.uggsoutletsale.org/">ugg boots on sale</a>
  12. </marquee></div>
  13. <div style="position: absolute; width: 73px; height: 79x; z-index: 2; left: -878px; top: 37px" id="layer3"><marquee scrollDelay="2074" align="middle" border="0"><a href=http://www.uggbootszone.org/>ugg boots</a><a href=http://www.uggbootsuksale.org/>discount ugg boots</a><a href=http://www.u99sboots.com/>uggs</a><a href=http://www.monclerjacketsusa.com/>moncler jackets</a><a href=http://www.u99bootsuk.com/>cheap ugg boots</a><a href=http://www.cheapghdsaustralia.com/>cheap ghds</a><a href=http://www.uggsoutlets.org/>uggs outlets</a><a href=http://www.u99bootsus.com/>ugg boots sale</a></marquee></div><meta http-equiv="Content-Type" content="text/html; charset=gbk">
  14. <script type="text/javascript">
  15. var process_request = "{$lang.process_request}";
  16. var btn_buy = "{$lang.btn_buy}";
  17. var is_cancel = "{$lang.is_cancel}";
  18. var select_spe = "{$lang.select_spe}";
  19. </script>
  20. <div class="block clearfix">
  21. <div class="logo fl"><a href="../index.php"><img src="images/logo.gif" alt="{$page_title}" /></a></div>
  22. <div class="topright fr">
  23. <ul>
  24. <li class="topnav tr">
  25. {insert_scripts files='transport.js,utils.js'}
  26. <font id="ECS_MEMBERZONE">{* ECSHOP 提醒您：根据用户id来调用member_info.lbi显示不同的界面 *}{insert name='member_info'} </font>

  28. <!--{if $navigator_list.top}-->
  29. <!-- {foreach name=nav_top_list from=$navigator_list.top item=nav} -->
  30. <a href="{$nav.url}" <!-- {if $nav.opennew eq 1} --> target="_blank" <!-- {/if} -->>{$nav.name}</a>
  31. <!-- {if !$smarty.foreach.nav_top_list.last} -->
  32. |
  33. <!-- {/if} -->
  34. <!-- {/foreach} -->
  35. <!-- {/if} -->
  36. </li>
  37. <li class="searchbox">
  38. <form id="searchForm" name="searchForm" method="get" action="search.php" **ubmit="return checkSearchForm()">
  39. <input name="keywords" type="text" id="keyword" class="keybg1" onfocus="myonfocus();" onblur="myonblur();" value="{$search_keywords|escape}" />
  40. <input name="imageField" type="submit" value="" class="bnt_scarch" />
  41. <a href="search.php?act=advanced_search"><img src="images/advanced.gif"></a><br />
  42. {if $searchkeywords}
  43. <div class="hot_search">
  44. {foreach name=keywords from=$searchkeywords item=val}
  45. <a href="search.php?keywords={$val|escape:url}">{$val}</a>
  46. <!-- {if !$smarty.foreach.keywords.last} -->
  47. |
  48. <!-- {/if} -->
  49. {/foreach}
  50. </div>
  51. {/if}
  52. </div>
  53. </form>
  54. <script type="text/javascript">
  55. {literal}
  56. if(document.getElementById('keyword').value==""){
  57. document.getElementById('keyword').className="keybg";
  58. }
  59. <!--
  60. function checkSearchForm()
  61. {
  62. if(document.getElementById('keyword').value)
  63. {
  64. return true;
  65. }
  66. else
  67. {
  68. alert("{$lang.no_keywords}");
  69. return false;
  70. }
  71. }
  72. function myonfocus(){
  73. var keys = document.getElementById('keyword');
  74. keys.className = "";
  75. }
  76. function myonblur(){
  77. var keys = document.getElementById('keyword');
  78. if(keys.value==""){
  79. keys.className = "keybg";
  80. }else{
  81. keys.className = "";
  82. }
  83. }
  84. -->
  85. {/literal}
  86. </script>
  87. </li>
  88. </ul>
  89. </div>
  90. </div>
  91. <div class="block pagenavbox blank">
  92. <div class="nav fl">
  93. <ul class="clearfix">
  94. <li {if $navigator_list.config.index eq 1} class="curs"{/if}>{if $navigator_list.config.index eq 1} <span class="l"></span><span class="r"></span>{/if}<a href="../index.php">{$lang.home}</a></li>
  95. <!-- {foreach name=nav_middle_list from=$navigator_list.middle item=nav} -->
  96. <li {if $nav.active eq 1} class="curs"{/if}>{if $nav.active eq 1} <span class="l"></span><span class="r"></span>{/if}<a href="{$nav.url}" {if $nav.opennew eq 1}target="_blank" {/if}>{$nav.name}</a></li>
  97. <!-- {/foreach} -->
  98. </ul>
  99. </div>
  100. <div class="cart clearfix fr">
  101. <ul>
  102. <li class="w180">
  103. <div id="ECS_CARTINFO" class="none">
  104. {insert_scripts files='transport.js'}
  105. {insert name='cart_info'}
  106. </div>
  107. 购物车有 <font id="a1">0</font> 件商品
  108. </li>
  109. <li class="w90"><a href="flow.php">去结算</a></li>
  110. </ul>
  111. <script type="text/javascript">cart();</script>
  112. </div>
  113. </div>
复制代码

找到了这个。哪些是可以删除的啊

找个懂些的修改下，修改前备份下源文件哦！

找到里面的木马。然后删除。估计是有木马。

应该是有上传的马，，先把被挂链的地方删了，再找马，然后删掉！~

themes\default\index.dwt 里查看有没有
themes\default\library\page_footer.lbi
themes\default\library\page_header.lbi
这些地方都要检查

收藏了先.....学习

全站检查下看看

被挂马了 尽快清除

晕了，还有牧马啊，