|
I have a huge problem with pages on my server being hijacked. A snippet of code gets added after the end of a closed html tag. the code contain a link to a website with javascript or iframe tags.
This code basically open dozens of websites (popups) there fore disabling my website.
The code appears on different pages within the site every 2-4hours even when is change permissions to the actual file. it seems to be copying the file each time and overwriting it.
the code contains the following data,
coon.js
nb88.cn
I have change the permission for each folder on the server but its still comes back.
Also ive noticed that the code does not appear when i have 2 connections open to the server using Terminal Services, but as soon as 1 closes the code appears.
I need a solutions to this, any comments are welcome.
|