Kolti.php script

[dolalu]

I've had this email come today, it said

 

You've got a backdoor PHP script on your webserver at

 

http://www.mammamiacards.co.uk/images/kolti.php

 

Remove it ASAP !

 

what is and where the hell did it come from. What does it do? Quite worried as i use payment facilities on the website

 

I take it i remove it from my server, but how do i ensure it does not return??

 

Luke

[dolalu]

I have now deleted the file, it allowed access to all folders in my FTP account.

 

Why is this? has anyone seen it before???