IIS properties changed ?

[GerritR]

My IIS 5.0 has been hacked for two times now
Somebody is able to remove the index.htm and index.html from the settings from 1 homepage in my iis server default.html etc are still there.
I have installed all security patches.
What can this be.
So it's not the files from the directory (they are still there) but de settings from the homepage properties page wich I manually added.

Please adv,
Gerrit

 

[lck092580]

Do you have a firewall?.. IIS is not the only way to get into a server.

T

 

[GerritR]

No, I do not have a firewall, but I have installed all security patches, iis lockdown tool and removed all services that use ip ports not used.

Can you tell me what to check ?

Thanks,

GErrit.