Are you sure the bad HTML is in the skin and not on the PC? This probably sounds funny but my last company had an internal virus that somehow swapped out links to ones like that but it was on the client side, not the server.

If it is in the skin, I would review security to ensure someone isn't gaining access to the server. Internal or external. Maybe set up monitoring.

Lastly, I would check permissions on the skins folder and any custom modules that allow uploads. Make sure you do not allow any .net file to be uploaded as per the settings within the website.

Mark

 Thank you Mark for your inputs.

The bad HTML is in random locations within the skin files on the Server. And it doesnt happen to just 1 one file. Usually in the C:\inetpub\wwwroot\Portals\1\Skins\SKINNAME\index.ascx or similar files in other portals.

I will try to monitor this server more closely to ensure no one else except me and the other developer are able to access this server. This happened to older server as well as newly setup server though so I doubt it is the cause.

I am not sure what are the correct permissions for skin folders. What are the least required permissions for these folders?

About the "Make sure you do not allow any .net file to be uploaded as per the settings within the website.", how exactly should I do this?

Suxipo