Need Help With Hacking

Hi,

I have a problem. My website is being hacked using some sort of hacking kit. There are a few ASP files being uploaded to my images folder(not sure how) and then they can be opened and view all my files on my site. These files can be editted/deleted/uploaded/downloaded etc.

The files are named:

swart.asp
cyberspy.asp
r57.asp

and a few more.

The passwords for my site are kept secure, are long and contain numbers and letters etc and have never been given out.

How are these files being uploaded without this information?

Hope you can help

Many thanks

Joe

PM me the link to your site and I can do some testing on it to determine what vulerabilities your site might have.

Sounds as though they may have used brute force to break your ftp password - I know you said it was alphanumeric but even then that doesn't make it totally secure plus they may have broke the administrators account for your domain.

You need to lock down your site - password protect folders, if you have complete control of the server then in IIS there is a ftp manager where you can only allow ftp access from your IP.

if you have page where you allow visitors/users to upload stuff, probably
they're using this page. you must check the uploaded files before saving
them to disk!