Possible malicous file

technobabble

Thanks, scanning now. Sucuri didn't find anything which I had tried before posting.

Nic

You could try here too:
https://www.virustotal.com/

technobabble

Took a chance to download the file and then upload to http://virustotal.com.

So far: PHP.Agent-AQ[Trj], VULCB21.Webshell, Trojan Mailfinder.PHP.Mailer.ac (and .p)

Thanks guys...time to boot this customer.

MattSpeller

http://www.saveurdujour.com/images/Maille-380g.gif

@technobabble said:

Thanks guys...time to boot this customer.

Booting a customer for a virus? does that mean we can do end user replacements too if they get viruses?

Dashrender

@thecreativeone91 said:

@technobabble said:

Thanks guys...time to boot this customer.

Booting a customer for a virus? does that mean we can do end user replacements too if they get viruses?

I was wondering that too... booting a client because of a virus?

MattSpeller

@thecreativeone91 said:

does that mean we can do end user replacements too if they get viruses?

YES.

Although I don't know where we're going to find completely new staff for every business ever.

@MattSpeller said:

@thecreativeone91 said:

does that mean we can do end user replacements too if they get viruses?

YES.

Although I don't know where we're going to find completely new staff for every business ever.

Plenty of people looking for jobs out there.

Dashrender

@thecreativeone91 said:

@MattSpeller said:

@thecreativeone91 said:

does that mean we can do end user replacements too if they get viruses?

YES.

Although I don't know where we're going to find completely new staff for every business ever.

Plenty of people looking for jobs out there.

But do you want to hire those people?

technobabble

@thecreativeone91

LOL...no, the customer seemed sketchy when he signed up for hosting services and then added that file to the server. So booting = cancelling his service.

scottalanmiller

@technobabble said:

@thecreativeone91

LOL...no, the customer seemed sketchy when he signed up for hosting services and then added that file to the server. So booting = cancelling his service.

Oh, you are thinking that it was intentional?

technobabble

@scottalanmiller Yep...just checked with my cc provider and they have been trying to buy products and the cards are failing multiple times...I'm calling this fraud and scamming.

dafyre

@technobabble Report his {censored} <content removed by moderator> @)(#&$)@&#$ to the Feds.

Reid Cooper

@technobabble said:

@scottalanmiller Yep...just checked with my cc provider and they have been trying to buy products and the cards are failing multiple times...I'm calling this fraud and scamming.

Sounds like it is time to run away.