That would be a hack. They replace the Default/index.htm files with this. Just need to lock down IIS a bit more....
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 06, 2001 11:07 AM
To: NT System Admin Issues
Subject: hack or virus?
We have someone that came to us about hosting a site for them. When we went
to look at their site, before we moved it over to us, we found it wasn't
what they had put on their site.
http://www.e-z-learning.com is the site. Is this a hack or a virus? I
have seen this before on someone's site that wanted us to host for them, but
I thought it was someone playing games at the time.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm