Hey all Dotnetnukers;

My office and I have flown into what I can only call a panic after the latest seemingly-harmless development on my site.
We host a number of sites on DotNetNuke, and the most recent one, which I developed, suddenly displayed a line of background images advertising WebHosting4Life without my consent.
The problem went away with ease; If we delete the WH4L.gif image in the root directory, even the line of code in the Body tag referencing the image disappears; What we are concerned about is that every site of ours has this WH4L.gif file in the root directory, and specifically that this might be a sign of our site having been hacked.

Does this image come standard with Dotnetnuke installations? Checking the "Created On" dates only reveal that this file is generated along with the rest of the site.
Furthermore, this background image only showed on my site. Could I have accidentally set it, or would this be external code someone inserted?

Thanks in advance for any answers. If we have been hacked, it's best we find out quick; we host a lot of vital info.

Ah thanks- That's good to know.

For what it's worth - whenever I setup a fresh DNN installation, as soon as the site is setup - I got in and delete all image files from the \Portals\0 directory, except for portal.css . I've found it's a good way to keep the 'root' clean when rolling out a new site.

---

Wells Doty Jr
Online Content Development