With a new install, the day after installation files were infected with a link to a virus. Script was inserted at the end of every file in every sub-directory with a .js extension. Has anyone else experienced this?

Hi Luiz, We originally installed 5.2.1 and someone hacked it and caused a similar problem with Javascript injection. It launched a virus that infected visitor's computers when they went to the website. We then installed 5.4.1 and the same thing happened in a matter of a few days. Our local computer is virus free, I used Spybot Search & Destroy to clean the computers each time which works well. After the hacker infected the 5.4.1 install I tried to upgrade to 5.4.2 but it didn't fix the issue entirely. The virus was gone but some JS files were corrupted and the FCK editor would not display. We couldn't fix it so i instilled a new install of 5.4.2 and am in the process of setting the site up for a 3rd time. There must be some vulnerability somewhere. Did you have a similar problem? If so, did the version upgrade to 5.4.2 resolve the issue? Thanks for your reply to my post.

The only thing the instructions say about permissions is: File System: Create a folder on the web server where DotNetNuke will be deployed. For the remainder of the document, we will assume this is C:\DotNetNuke, however, you are free to choose any suitable drive and folder. Set the permissions on this folder so the account IIS will use has “Full Control” permissions to the folder. If IIS does not have Full Control permissions, right click on the root folder. Click “Sharing and Security” followed by the Security tab. If the Security tab is not present, you must “turn off” simple file sharing for the folder by selecting Tools > Folder Options, then click the View tab. Uncheck “Use simple file sharing” and click OK. You can now right-click the folder and access the Security tab. On the Security tab, check that the appropriate account has Full Control permissions to the folder (Windows XP uses the ASPNET account and other editions of Windows use the NETWORK SERVICE account). --- However, we actually only give Modify, not Full Control.