Solved

IIS5.0  hacked

Posted on 2006-07-05
6
233 Views
Last Modified: 2013-12-04
Our IIS5.0 running on 2000serversp4 was hacked. The hackers put a d.text file in and overwrote the html files of each domain names.
It says you've been hacked by cyberlords-Islam.. then a file says it ownz ,,,,
we have applied fixes problem still there. HOw can we restore the files?
thx
0
Comment
Question by:ungeek
  • 2
6 Comments
 
LVL 70

Expert Comment

by:Chris Dent
ID: 17051772

Restore them from a backup or replace them from the original site files which presumably someone has.

Chris
0
 

Author Comment

by:ungeek
ID: 17052139
Backup was comprised and the client didn't save site files.
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 250 total points
ID: 17052415

Hmm... Undelete type tools may help depending on how the files were replaced (that is, modified or replaced). It may be worth a try. It's pretty much all that's left really. Clients really really should maintain full copies of their sites, hosting a site is always a risk no matter how up to date and secure the platform is.

Chris

0
 
LVL 32

Assisted Solution

by:r-k
r-k earned 250 total points
ID: 17063750
Try GetDataBack (http://www.runtime.org/gdb.htm)
The free demo version will at least tell you what can be recovered.
0

Featured Post

Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now