site hacked twice...changed index.cfm

Greetings,

This is the 2nd time in 3 days that my site is being hacked...the index.cfm page is being changed and it loads up a page that points to www.yourmistake.com !!

When I check the ftp and logs there is absolutely no traces of files being changed or deleted and the index.cfm that is changed has the same date than the one that was previously edited by myself!

Why would someone change only the index.cfm if he had access to the server somehow and why isn't any file deleted or changed other than that?

I run CFMX and MS SQL and there doesn't seem to be any changed datas in the db!

Cheers!

 

 

 

 

Top