ASP error script and trojan



Our web server is found that is hacked occassionally. The server will have
the following issues.

1. webpage directory will be added some *.htm file, part of file contents
are shown as follows.
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd";>
<html>
<head>
<title>Hacked Mr.Trojan-Msn: Trojan@xxxxxxxxxxxxx</title>
<meta http-equiv="Content-Type" content="text/html;
..............

2. ASP error scripts will be popup and the the main web site cannot be
accessed. The website can be accessed again after close the error scripts
window manually.

According to our webpage designer, our server is infected with trojan. But
we've scanned and can't find anything through virus scanner.

Actually, what anti-hack or anti-virus software will install on your IIS
Server? Any comments?

Below lists the web server info.
- Windows 2000 Server w/ built in IIS 5.0
- All windows secuirty / pack is always be udpated.
- Symantec Antivirus 10.0
- Hardware firewall only open http port for this server.


.



Relevant Pages

  • Re: write with cURL
    ... execute permissions. ... This is assuming that the PHP script runs ... of potential security risks from other users on the same server. ... web server itself is part of the group. ...
    (alt.php)
  • Re: web service architecture question
    ... To assume that we have all the security we will ever need is a bad one. ... ways to breach a server, and the separatin of the web and app server is one ... You can use remoting or web services. ... The web server will be exposed outside the ...
    (microsoft.public.dotnet.framework.webservices)
  • RE: System.Data.SqlClient "Timeout expired" causing ASP.net web applic
    ... There are many values here that can shutdown the aspnet_wp. ... > update tables on a Web Server running SQL Server 2000. ... > formation(DataSet currentBalances): Timeout expired. ...
    (microsoft.public.dotnet.languages.vb)
  • RE: System.Data.SqlClient "Timeout expired" causing ASP.net web applic
    ... There are many values here that can shutdown the aspnet_wp. ... > update tables on a Web Server running SQL Server 2000. ... > formation(DataSet currentBalances): Timeout expired. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: System.Data.SqlClient "Timeout expired" causing ASP.net web applic
    ... There are many values here that can shutdown the aspnet_wp. ... > update tables on a Web Server running SQL Server 2000. ... > formation(DataSet currentBalances): Timeout expired. ...
    (microsoft.public.dotnet.framework.adonet)