astronautic-benchmark.php" virus script

Question

have anyone heard about this:

astronautic-benchmark.php script was uploaded to my web site and did something there. I am curious what they did since they were not ve

Answer 1

This script among other things downloads a compressed file, which ostensibly contains other malware or really anything the scammers want. In my case there was a php mailer (probably for spamming) and tons of base64 encoded emails with horrible things in them saved to path indicated by the $curx=$cdir.$md5urx;

This very same thing happened to a site that I manage. The SEF ( Search Engine Friendly ) Joomla links stopped working. Since they require URL rewriting.