Hi all

My websites were all attacked last night by someone who overwrote all default.asp, index.htm files etc with their own which just contained one line: "hacked by maxo turkhs hacker turkhackertimi@hotmail.com". I don't know why they attacked my sites or how they got in; I think my hosting company eukhost have some questions to answer, which they're not currently keen to do.

I've tidied up the HTML sites but my DNN site is failing to work properly. It is displaying the standard skin and though I have uploaded my skin several times I am getting errors when logged in as host or admin eg "Could Not Load Skin: /Portals/0/Skins/aldworth_spring4/page.ascx, Error: The file '/DesktopModules/ArtMenuSO/ArtMenuSO.ascx' does not exist."

I have tried to remove various skins, reinstalling my latest one but nothing seems to work. Is it possible to reinstall without losing the website? I can run a SQL backup and have done so but I don't know if it's possible to reinstall DNN and keep the data, or is that likely to be corrupt too?

I hope someone can help as I'm pretty stuck at the moment. It's a shame as it had taken many long days of struggling to get the website running as DNN is not an easy to use or understand platform - at least not at my age! The version running is 5.02.03 (74)

Thanks
John

 Hi John!

Is your problem sorted out? Reinstalling the menu & the skins again can do the trick. I've heard about Eukhost & it's one of the most reputed company in the UK. I havent tried them, but reviews say so. Best bet would be to recheck with their technical support again. If you have the database intact, then try reinstalling a fresh copy of the DNN instance & restore the DB & the web.config files from the backup. It'd help :)

Im sorry to hear about your site problems, but wanted to add a quick note for your benefit (and the benefit of any other commuity members). When we see an issue where files such as default.asp, index.htm are on a website, and other files have been overwritten, this typically indicates a server level issue (e.g. missing mIcrosoft patches). This is because a number of automated hacking tools search out servers with missing patches, perform the exploit automatically (often a buffer overflow, allowing them to execute code in the context of the system account), and deploy a "payload" of files to every website. As these attacks typically can't determine what application servers are running they dump a copy of files of many type i.e. .htm,.html,.asp,.aspx,.cfm,.php -often these are index/default pages so that they load as the default document. In many cases the site can be fixed by running windows update to install missing patches, and then restoring your site from your database/file backup.

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US