Hi,

When backing up our site down to a local drive my antivirus suspects an 'ASP backdoor threat' from the following 2 files located in the root\portals\0\64 folder for our site:

SQL.asp.jpg

SQL.asp;.jpg

Are these files likely to be virus infected ?

Are these files used much/at all by DNN ?  Can I delete them without damaging my site just to avoid these annoying antivirus messages ?

We did have our site hacked back in December 2010 (cleaned the site afterwards and moved hosts as it happened repeatedly with our old host).

Since January 2011 we have been with discountasp.net for hosting and the site has not been hacked (as far as I am aware) so wonder if these files are residue from the previous problems ?

We are running DNN v5.6.3 and have been for a long while.

Is there anything else I should check to ensure we haven't got an ongoing issue ?

Thanks Cathal,

Our site was built in November 2009 so we would be using the latest version available at that time.

Looking at previous backups of the site this '...portals/0/64' folder and these 2 files appear to have become present between April and August last year (2011).

Checked and there are no unexplained/unexpected host or admin users.

We are on a shared server with discountasp.net so not sure I can do anything about IIS6 if thats what in place - but we can change our database password and will !

Thanks for your help Cathal, much appreciated.  Anything else worth checking before we breath a sigh of relief and think our site is 'clean' ?