ASP error script and trojan

Our web server is found that is hacked occassionally. The server will have
the following issues.

1. webpage directory will be added some *.htm file, part of file contents
are shown as follows.
"http://www.w3.org/TR/html4/loose.dtd">




???????:447e7363.151700453@msnews.microsoft.com...
> >According to our webpage designer, our server is infected with trojan.
> >But
>>we've scanned and can't find anything through virus scanner.
>>
>>Actually, what anti-hack or anti-virus software will install on your IIS
>>Server? Any comments?
>
> You have been hacked and don't know how or what might be happening.
> Flatten the box. Wipe the drives, reinstall from scratch and restore
> only known good files. Lock the box down this time. Use the security
> checklists at Microsoft.
>

Thanks for your reply and I have some questions.
---- Wipe the drives, reinstall from scratch and restore only known good
files.
You mean reinstall the whole box / windows??

--- Lock the box down this time. Use the security checklists at Microsoft.
security checklists? can be found within Microsoft site??

Re: ASP error script and trojan

a) Yes, as you may not know what other backdoor the hacker has installed.

b) www.microsoft.com/iis/ for start, then google MS site for "IIS Security"

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Eco" wrote in message
news:Od0LCmbgGHA.4892@TK2MSFTNGP02.phx.gbl...
>
> "Jeff Cochran"
> ???????:447e7363.151700453@msnews.microsoft.com...
>> >According to our webpage designer, our server is infected with trojan.
>> >But
>>>we've scanned and can't find anything through virus scanner.
>>>
>>>Actually, what anti-hack or anti-virus software will install on your IIS
>>>Server? Any comments?
>>
>> You have been hacked and don't know how or what might be happening.
>> Flatten the box. Wipe the drives, reinstall from scratch and restore
>> only known good files. Lock the box down this time. Use the security
>> checklists at Microsoft.
>>
>
> Thanks for your reply and I have some questions.
> ---- Wipe the drives, reinstall from scratch and restore only known good
> files.
> You mean reinstall the whole box / windows??
>
> --- Lock the box down this time. Use the security checklists at
> Microsoft.
> security checklists? can be found within Microsoft site??
>
>