somebody hacked my iis server (iis-6) and inserted some aspx extension file in my directory (like shell) when i run these files they shows me all my drives, data and my system process, how can i know how these file inserted and how can i block these files???

I think it will be better to post in the http://forums.iis.net/ forums. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration