Zhichuang website web Trojan file monitoring assistant

Real-time monitoring of the ASP/PHP/ASPX... files of the specified website in the server and scanning for Trojans or suspicious files. If the creation or writing of a known Trojan file is monitored, the file can be automatically renamed and intercepted, making it invalid and unable to run. If a suspicious file is monitored, the monitoring log is written and manually processed by the server administrator.

For example, the server WEB directory is d:home website 111wwwroot. When there are ASP/PHP/ASPX... files uploaded, BBS forum attachments uploaded, and Trojan files uploaded in this directory, they will be monitored immediately. At the same time, the files will be filtered and scanned. If they are found to be known Trojan files, they will be automatically renamed and intercepted. If a suspicious file is found, it will be written to the monitoring log file for the server administrator to review and audit.

The real-time active defense monitoring module operates in "trigger" mode and occupies very low system resources. This file will only be filtered and scanned when ASP/PHP/ASPX...etc. files are created, written, modified, read.