详细操作过程：
1、点“开始”选“运行”，输入“cmd",然后“确定”，进入到dos状态
2、打入以下命令进入到d盘的gs中的log目录中：
d:
cd \muserver\gameserver\log
3、打命令,注意要查的字串要加引号"，2004????.log 换成你要查的log文件是实际名称：
find "要查找的字串" 2004?????.log > aaa.txt
执行以上命令后，就会把符合查询字串的内容全部输出到aaa.txt文件中了，然后查看aaa.txt文件就可以了。
我用此方法破了好几次装备失盗案，查询一个500m的log文件大约需要1-2分钟，而生成的文件一般只有几百k(比如一个角色的所有在线记录，包括打怪经验、登录登出、交易、仓库、身上物品、pk、购售物品、点装备等）
够详细够简单了吧？
根据以上思路，我发现了一个查获所有刷钱者的方法，现在详述如下：
角色正常死亡时其记录是：
00:03:08 [******][心怡520] death reduces money 17345987 - 536473
由于刷钱者都是在钱是7亿以上时出现负值，所以刷钱者的log文件中就会出现如下语句：
20:33:24 [ccs008][日日日日曰] death reduces money 818346613 - -18968324
20:39:17 [2977332][岵觳鹱颈窠] death reduces money 938381801 - -15255895
看到最后了没有，他的钱数是减负数，这也就是刷钱的原因之所在，关键字是“- -”,你只要在log文件中查找"- -"就可以将所有刷钱的记录选择出来了。命令如下：
find "- -" 20040310.log > sq.txt
然后就会生成一个关于刷钱者刷钱厉害的sq.txt文件，你查看这个文件就可以知道谁刷钱了！如果sq.txt用excel打开，把空格和[符号作为分隔符，你还能进一步进行统计和分析（分类排序、次数、所刷钱数等），当然可以把偶然用了一两次的排除在外，把故意用的人员挑出来，然后封号或其它处理你就看着办吧。
处理这些大约需要10分钟。
我的sq.txt中一段：
05:19:56 [kirth0030][女乃女乃的] death reduces money 817231201 - -19002821
05:20:10 [kirth0030][女乃女乃的] death reduces money 835659087 - -18432886
05:20:18 [1538529280][gm魔法师] death reduces money 779165061 - -20180124
05:20:24 [kirth0030][女乃女乃的] death reduces money 853534137 - -17880050
05:20:27 [1538529280][gm魔法师] death reduces money 798734932 - -19574871
05:20:35 [1538529280][gm魔法师] death reduces money 817717707 - -18987775
05:20:39 [kirth0030][女乃女乃的] death reduces money 870868085 - -17343948
05:20:45 [1538529280][gm魔法师] death reduces money 836130998 - -18418291
05:20:52 [waigua][jianrenjun] death reduces money 891012997 - -16720910
05:20:54 [1538529280][gm魔法师] death reduces money 853991891 - -17865893
05:20:55 [kirth0030][女乃女乃的] death reduces money 887682015 - -16823930
05:21:02 [1538529280][gm魔法师] death reduces money 871316957 - -17330066
05:21:05 [waigua][jianrenjun] death reduces money 907227430 - -16219433
05:21:09 [kirth0030][女乃女乃的] death reduces money 903991527 - -16319512
05:21:15 [123890][哈接滚] death reduces money 808307128 - -19278823
05:21:18 [waigua][jianrenjun] death reduces money 922955430 - -15733000
05:21:21 [kirth0030][女乃女乃的] death reduces money 919816604 - -15830077
05:21:22 [1538529280][gm魔法师] death reduces money 888122271 - -16810314
05:21:29 [waigua][jianrenjun] death reduces money 938211590 - -15261160
05:21:32 [kirth0030][女乃女乃的] death reduces money 935166928 - -15355324
05:21:33 [1538529280][gm魔法师] death reduces money 904423425 - -16306154
05:22:16 [123890][哈接滚] death reduces money 778490127 - -20200999
05:22:26 [1538529280][gm魔法师] death reduces money 920235545 - -15817120
05:22:42 [1538529280][gm魔法师] death reduces money 935573301 - -15342756
05:22:52 [waigua][jianrenjun] death reduces money 952922765 - -14806175
05:22:57 [1538529280][gm魔法师] death reduces money 950450924 - -14882623
05:22:59 [kirth0030][女乃女乃的] death reduces money 949974293 - -14897365
05:23:09 [123890][哈接滚] death reduces money 798490989 - -19582415
05:23:11 [waigua][jianrenjun] death reduces money 967270205 - -14362440
05:23:21 [kirth0030][女乃女乃的] death reduces money 964410187 - -14450894
05:23:27 [waigua][jianrenjun] death reduces money 981187221 - -13932016
05:23:29 [123890][哈接滚] death reduces money 817471382 - -18995393
05:23:41 [kirth0030][女乃女乃的] death reduces money 978413004 - -14017817
05:23:47 [waigua][jianrenjun] death reduces money 994681877 - -13514656
05:23:54 [kirth0030][女乃女乃的] death reduces money 992000586 - -13597582
05:24:00 [waigua][jianrenjun] death reduces money 1007781393 - -13109516
05:24:08 [kirth0030][女乃女乃的] death reduces money 1005180541 - -13189955
05:24:16 [waigua][jianrenjun] death reduces money 1020487924 - -12716531
05:24:22 [kirth0030][女乃女乃的] death reduces money 1017969947 - -12794406
05:24:35 [waigua][jianrenjun] death reduces money 1032808409 - -12335485
05:24:40 [kirth0030][女乃女乃的] death reduces money 1030370821 - -12410874
05:24:50 [waigua][jianrenjun] death reduces money 1044764129 - -11965720
05:24:56 [kirth0030][女乃女乃的] death reduces money 1042399669 - -12038848
05:25:07 [waigua][jianrenjun] death reduces money 1056356328 - -11607199
05:25:07 [123890][哈接滚] death reduces money 767979453 - -20526071
05:25:15 [kirth0030][女乃女乃的] death reduces money 1054067651 - -11677982
05:25:19 [waigua][jianrenjun] death reduces money 1067605611 - -11259283
05:25:29 [kirth0030][女乃女乃的] death reduces money 1065385594 - -11327943
05:25:30 [123890][哈接滚] death reduces money 787875192 - -19910739
05:25:33 [waigua][jianrenjun] death reduces money 1078517415 - -10921804
05:25:44 [kirth0030][女乃女乃的] death reduces money 1076363999 - -10988405
05:25:47 [123890][哈接滚] death reduces money 807174059 - -19313867
那一天共有38个刷钱者，我要对其进行处理了。
我用以下代码在sql查询分析器中运行，分别输入违规人员的id，然后就可以全部处理了，源码如下：（你可能更改）
/* 清除所有刷钱者钱的程序 mu当家的*/
/*对其进行删除所有mu币和减少经验一半!*/
use muonline
declare @varid nvarchar(10)
/*只需要替换下边变量中的名称，就可以一个个地去处理了,注意引用的是id，不是角色名*/
select @varid = '刷钱者id'
/*以下是删除其所有角色身上的钱*/
select accountid,name,experience,money from dbo.character where accountid=@varid
update dbo.character set money=0,experience=experience/2 where accountid=@varid
/*以下是删除其仓库中的钱*/
select accountid,money from dbo.warehouse where accountid=@varid
update dbo.warehouse set money=0 where accountid=@varid
/*以下是记录违规一次 我在 memb_info 表中增加了一个wg（int）字段，用于记录违规次数
如果你没有这个字段，就把以下几行删除了吧 */
select memb___id,wg from dbo.memb_info where memb___id=@varid
update dbo.memb_info set wg=wg+1 where memb___id=@varid
---------------------------------------------------------------------------------
原贴：http://bbs.china-mu.com/dispbbs.asp?boardID=10&ID=64650
作者：ydll
---------------------------------------------------------------------------------
