Virus redirecting websites

Hello, I wonder if I may ask some advice for a problem with my server. It is currently running windows 2003 server with SQL 2005. For some reason on a couple of the websites, when the URL is typed into the browser, the site is being redirected to a site which tries to download a virus on the computer. It is only affecting 3 out of the 10 sites I have running on the server. I have checked IIS (deleted and recreated the IIS entry for the troubled sites) and tried to reinstate a previous backup of the database in case that was infected. I have checked the aspx code and don’t see any problems or redirect statements in there. I have also tried to reupload the dll in case that was infected.

I have run an Avast virus checker and cleaner but it doesn’t find any viruses.

I cannot work out what has happened here and how whatever has infected my server is able to redirect to a site with viruses. I hope someone out there can help me with some advice!

Thank you in advance.


Welcome to the forums, koups. :slight_smile:

I am not sure if it is possible but if you could run HijackThis on that server and post the log here perhaps someone can help. Hopefully, someone will let us know if doing this is possible. ???


i don’t think you’re infected… it seems that some of the web spaces were hacked (look into the affected pages for some strange script injection etc)… and check if you have all latest hotfixes installed…