I received a notice in the past two days that one of the company's websites could not be accessed. After visiting, I found that the page prompted the following error:
The code copy is as follows:
msxml3.dll error '80072ee7'
The server name or address could not be resolved
The prompt should be that the domain name or address cannot be resolved. Baidu Yibian adds resolution or DNS settings in the hosts file. From my actual situation, this is not the problem, because the server on which this website was located was unable to access the external network before, and it can be accessed normally, but it was not accessible in the past two days. After checking the prompt file, we found that the file is a global.asa file, and the modification time has been in the past two days, and we have not updated the website. So, the first thought is "Are you being hung with a Trojan?" Then check the content of the file and found that an unknown URL was visited. It was initially concluded that the problem should be here. Rename the global.asa file and restart the website. The website access is OK!
So it is basically confirmed that the website was hung with a Trojan. Fortunately, the server cannot access the Internet, otherwise I don’t know what the consequences will be, so I quickly find and fix the vulnerability!