file permissions

Discussion in 'Windows / IIS' started by dannypr, Jun 15, 2010.

  1. Hello,
    My site was attacked by some virus that injected malicious scripts into
    some files of my site.
    How can I set the file permission so that viruses won't be able to write to my files.
    I tried changing the file permissions through file zilla ftp and succeeded but when I checked again the file permissions returned to the previous settings.

    Thanks,
    Danny
     
  2. mjp

    mjp

    You can't change file or directory permissions with an FTP client. That only works on a unix/linux server. Windows file permissions are different.

    But that's not your problem anyway.

    If someone wrote to your files and they are static files (not generated from a database), then whoever did it has your FTP user/pass. They typically get that login through a virus or keylogger on your computer. That's what you need to look at.

    Here are links to a few free virus/malware detection tools:

    http://www.microsoft.com/security/malwareremove/default.mspx
    http://vil.nai.com/vil/stinger/
    http://www.safer-networking.org/en/spybotsd/index.html

    Once you clean up your computers you should go in to your DiscountASP.NET account and change all of your passwords. Of course that applies to pretty much everything you log in to online. Consider all of those to be compromised.

    If the pages are generated from a database there is another possible exploit, but it's far less common and it doesn't sound like that's the case for you.
     
  3. Bruce

    Bruce DiscountASP.NET Staff

    The hacker may also be using a security hole of your application to compromise your site. This is very common if you use popular canned apps.
     

Share This Page