it looks like i lefta security hole open and a few sites of mine got defaced. What is the best way to fix this and get everything back to normal??? drop me an e-mail please brendan@puder.com its pretty urgent I picked it uyp before my clients did and i wnat it resolved before 9am tommorow so they will be none the wiser.

Thanks in advance

-puder

fyi its a win 2k box running IIS5

i woudl even be willgin to pay for some advice i'll paypal you a few bucks if you can help me fix it ASAP!!!

im afraid you will have to do a format/clean re-install of the operating system. there is no other way to be absolutely certain that the attacker doesnt still have full control of your system.

cheers,
paul

Yup,

Full wipe and reinstall, otherwise you may not be 100% that they havent left something behind for future use.

and be sure to upgrade to the newest SP's :)

I'd suggest downloading and running the Microsoft Baseline Security Analyser - it might help you to pinpoint where your weaknesses are.

Also, the the exloit was one the cam out recently, you may be able to restore from backup.

hire a sysadmin

Format the drive. The best solution if you don't want to leave anything for chance.