My website has become taken over by a virus that injects malicious javascript code into the default.aspx page causing a redirect to http://reddii.ru/traffic/sploit1/ and sometimes causing a redirect to a PDF file on http://reddii.ru/traffic/sploit1/.

Here is the code the virus keeps injecting, try adding this to your default.aspx file so you can simulate what is happening to my website:

 I just wanted to find out if anyone else has had this problem and what to do to stop the virus from keep injecting itself into my default.aspx file.

[Moderator edit: I shortened the last string, to make the script unusable for others. Please do NEVER post offending code, others may reuse.]

please discuss security issues privately with our security team at security@dotnetnuke.com

BTW, to check all your database tables for the entry(s) with the url string you can use a sproc such as http://vyaskn.tripod.com/search_all_columns_in_all_tables.htm

Cathal