Re: Web Site Hacked

From: Jeff (Jeff_at_discussions.microsoft.com)
Date: 09/09/05 

Date: Fri, 9 Sep 2005 13:46:05 -0700

Well, it appears as though I forgot to dump my cache after I restored the
index and default.htm. Now everything is fine. I'm still a little concerned
however. I had up to date virus definitions - and Symantec even showed that
it caught two viruses and quarantined them - maybe the virus inflicted the
damage before the Antivirus software had the chance to quarantine it??

"Dave" wrote:

> that would sound more like a dns hijacking. if the ip comes up with the
> right site check the dns entry for the domain name and see where it is
> pointing... you didn't forget to renew your domain name registration did
> you??
>
> "Jeff" <Jeff@discussions.microsoft.com> wrote in message
> news:3DB3C237-46B8-486B-8E8A-C3269A7EAD07@microsoft.com...
> >I have a website hosted on IIS 4.0 Server. For some reason when you go to
> > www.company.com, it brings up a foriegn site. It says something about
> > iskorpitx. However, if I browse to the IP, the website comes up fine. I've
> > already restored the index and default.htm files but it doesn't seem to
> > help.
> > My virus scanner caught something earlier and quarantined it - however
> > apparently the damaged was done. How can I clean this problem up?
>
>
>

Relevant Pages

  • Re: Web Site Hacked
    ... Jeff wrote: ... I had up to date virus definitions - and Symantec even showed that ... > damage before the Antivirus software had the chance to quarantine it?? ...
    (microsoft.public.inetserver.iis.security)
  • Re: Quaratine folder
    ... It allows you the ability to restore ... | your virus definitions and/or antivirus software. ... |> Most virus software I've used default to Quarantine rather than what I ...
    (microsoft.public.windowsxp.basics)
  • istsvc virus
    ... I recently updated my virus definitions (after far too ... virus called "istsvc", but could not clean, quarantine, or ...
    (microsoft.public.security.virus)