Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
My server's been hacked EMERGENCY

I have been design an asp.net site with .net framework 3.5 all thing is good until my site hacked suddenly it says a chines group and some other text by picture jpg they put files into the ftp server I delete them and they put them again I change all password and they do it again I think they are some script programmer and I can do nothing by deleting method, please help me.

share|improve this question

migrated from stackoverflow.com Jan 14 '10 at 9:39

This question came from our site for professional and enthusiast programmers.

marked as duplicate by voretaq7 Jul 28 '12 at 0:57

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
Do you have an uplaod form on your website? –  user33121 Jan 14 '10 at 9:23
    
You shouldn't be running an FTP server in this day and age. –  Joe Jan 14 '10 at 9:31
    
What is a solution I can't stop my working –  kamiar3001 Jan 14 '10 at 9:33
    
Joe: What's wrong with FTP? It's still good for fileservers that allow anonymous access. –  grawity Jan 14 '10 at 14:11

4 Answers 4

I think it's pretty clear that you don't have the technical skills to be able to complete this job -- it's a difficult problem, with many potential areas of exploration and avenues of attack that need to be secured. I would recommend engaging the services of an experienced systems administrator to investigate these options, cleanup the infection, and deploy the appropriate safeguards to prevent it happening again.

share|improve this answer

They replaced default.aspx instead of my default.aspx I have upload or script uploading I don't know exactly whay they are doing some complex operation.

share|improve this answer

As a developer, you should know if your app is secure or not. In the other hand, even if you have the most perfect and protected app, if there is a huge hole at system level, your programming skills won't worth too much and you'll be cracked anyway. Just hire a sysadmin so your system can be properly secured.

share|improve this answer

Yes womble I know I am developer not system administrator but I don't know where is the hole they attack again and again I think it is more complicated that you can explain but I want to know about how to prevent I know how to pay for system administrator and how to find him I want to know how they attack I had upload by some script on the ftp server by Injection or not some else method ?

share|improve this answer
    
Please add these sort of things as comments or amend your question, they are not answers. –  Sam Jan 14 '10 at 12:06

Not the answer you're looking for? Browse other questions tagged or ask your own question.