Hi,
There is some strange file that are on the root of different website.
Some of my friend told me that it is a IIS6 security hole. Does
anybody have a solution ???
It's just html file.
Like those :
default.html
tromnk.htm
The content of those file was :
Ir4Dex Back By Zakix your DATA H4Xored =)
core-project
Mr.Trojan
Was Here
wWw.StarHack.Org "
wWw.Trojan-Tr.Org
it may 'just' be an html file, but if you didn't put it there then someone Mr.Trojan
else has access to your server.
my best first step advice, PULL THE PLUG NOW! this will stop it from being
used to attack anyone else or getting further into your network.
then research the problem, find how it got on, and what else may have been
damaged. copy off only files that you can PROVE have not been contaminated,
then my second step advice is to flatten the box and start over, making sure
that you plug all the security holes this time before it goes live on the
internet.
news:1180702113.839289.151040@p77g2000hsh.googlegroups.com.. .
> Hi,
>
> There is some strange file that are on the root of different website.
> Some of my friend told me that it is a IIS6 security hole. Does
> anybody have a solution ???
>
> It's just html file.
>
> Like those :
>
> default.html
> tromnk.htm
>
> The content of those file was :
>
> Ir4Dex Back By Zakix your DATA H4Xored =)
> core-project
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> Was Here
>
>
> wWw.StarHack.Org "
>
> wWw.Trojan-Tr.Org
>
>
>
>
>
>
width="400" height="400">