随着信息技术的发展,网络应用已经渗入到我们的日常生活中,同时也带来一些计算机网络安全的隐患,如病毒、木马、垃圾邮件、黑客攻击等。本文通过对一台典型的受攻击的网络服务器进行取证分析,给出该服务器的整个检查过程以及发现问题后该如何处理和补救的相关解决方法。 With the development of information technology, network applications have infiltrated into our daily life, but also bring some hidden dangers of computer network security, such as viruses, Trojans, spam, hacking and so on. In this paper, the forensic analysis of a typical attacked web server gives the whole inspection process of the server and the related solutions of how to deal with and remedy the problem after the problem is found.