HI
one of my Windows 2008 (iis 7.0) 32bit machines looks to have some kind of hack!
We provide shared hosting on this server, and on some customers domains if you go to their domain /airmaxuk.html it loads a website selling cheap airmax trainers!
the file airmaxuk.html i cant find on the server, nothing is in IISRewrite or any 3rd party rewrite files (.htaccess)
I cant find anywhere in IIS thats causing this! I have AVG Business antivirus 2013 on the server, that could not find anything, so i downloaded Trend House call scanner and that too couldn't find anything!
Process mon doesn't show any unusual processes running.
has anyone else seen anything like this before? if so how did you fix?