r57 shell and c99 hacks

[starman2049]

I just today discovered that my web site has somehow been compromised and the r57shell and c99 hacks have been installed by malicious intruders. I only post here because the only point on my web site that has been modifed and affected is inside of oscommerce.

 

I don't know how they did it, but it was done Feb 2008 and has gone undetected until today.

 

So far, the files affected are in the root catalog directory:

 

- product_orders.php

- tell_a_friend.php

- product_data.php

 

I suggest you take a quick momement to look at these files and see if they are comprimised. You will see ASCII spiders, references to r57 and c99 at the top..

 

I don't blame oscommerce, but suggest people check out their sites to be safe...