I manage a DNN website that I haven't done anything with in last few months. Today I needed to ftp a couple of image files to the site and I noticed some new files in the DNN install folder and in the portal folder as well. They are named:  "ErrorPage.aspx", "bc.aspx" and "xml.asp;.jpg"

The bc.aspx contains mostly code, but there is a commented header in it that indicates "INSOMNIA SECURITY :: InsomniaShell.aspx" along with some other "credit notices"...

Does anyone know what these files might be and/or who "Insomnia Security" is?

Thanks.

Jim

The site is up and running just fine -- or at least it appears to be.

Do you think this might be some sort of hack? I haven't spoken the my client as of yet, but do you think they (or someone) may have given direct access to the server  for some sort of security testing? Or could this have done via the DNN portal? I will call my client in the morning, but I wanted to do a little research first.

Thanks for any additional info you might have.

you should also remove all suspicious files, especially all .asp and unknown .aspx files, check the database for manipulations and change all admin passwords

---

Cheers from Germany,
Sebastian Leupold

   

Speed up your DNN Websites with TurboDNN