AndyII
Verified User
- Joined
- Oct 3, 2006
- Messages
- 574
Anyone here have any experience with this so called shell script named c99.php.
I just acquired a new client and If I hadnt needed to help him with moving his site, I would have never seen these files, I have heard of them before so when I saw them I deleted them before the site was active.
at first I thought of keeping a copy of them for study, but when I tried to download one of the files, my AV popped up and deleted as a trojan, the name was .admincp.php, other files there were backdoor.pl, this also was deleted by AV, .ssh.php, c99hix.php, server.exe, temp.php, nc, c99.php, others that were there.............................
I just acquired a new client and If I hadnt needed to help him with moving his site, I would have never seen these files, I have heard of them before so when I saw them I deleted them before the site was active.
at first I thought of keeping a copy of them for study, but when I tried to download one of the files, my AV popped up and deleted as a trojan, the name was .admincp.php, other files there were backdoor.pl, this also was deleted by AV, .ssh.php, c99hix.php, server.exe, temp.php, nc, c99.php, others that were there.............................