I know that but when I clicked on to get to the site I landed on a page that had this on it
*******************************************
Backdoor By CyBeSteR
Enjoy
We are:77.27.28.72.cpe.echoes.net (72.28.27.77)
Server is:
System type:Linux web24c40 2.6.31.12.With.Dirk.Immutable+nfs_fingerprint #4 SMP Tue Mar 9 14:04:43 EST 2010 i686 unknown
Our permissions:uid=91097(ncvape.com) gid=100(users) groups=65533(nobody),65534(nogroup)
Execute command:
hange directory:Upload file:
total 528
drwxr-xr-x 19 ncvape.com nobody 4096 Apr 17 00:11 .
drwxrwx--- 10 ncvape.com 59277295 4096 Apr 8 10:11 ..
-rw-r--r-- 1 ncvape.com nobody 17988 Jan 5 23:23 LICENSE.eProc
-rw-r--r-- 1 ncvape.com nobody 904 Jan 5 23:23 README.eProc
-rw-r--r-- 1 ncvape.com users 2365 Apr 11 22:13 account2.php
drwxr-xr-x 5 ncvape.com nobody 4096 Apr 16 23:12 admin
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 ajax
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 cache
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 docs
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 download
drwxr-xr-x 3 ncvape.com nobody 4096 Apr 16 23:12 editors
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 email
drwxr-xr-x 4 ncvape.com nobody 4096 Apr 16 23:12 eprocessingnetwork_payment_module_Version1-01
-rw-r--r-- 1 ncvape.com nobody 323 Jan 5 23:23 eprocfail.php
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 extras
-rw-r--r-- 1 ncvape.com users 2365 Apr 12 12:45 extras.php
-rw------- 1 ncvape.com users 2365 Apr 16 23:12 hc-1.php
-rw------- 1 ncvape.com users 2365 Apr 16 23:12 hc.php
-rw------- 1 ncvape.com users 165260 Apr 12 23:20 hc.tar.gz
drwxr-xr-x 25 ncvape.com nobody 8192 Apr 16 23:12 images
drwxr-xr-x 14 ncvape.com nobody 4096 Apr 16 23:12 includes
-rw-r--r-- 1 ncvape.com users 2365 Apr 12 20:04 index-1.php
-rw-r--r-- 1 ncvape.com nobody 4562 Dec 30 21:58 index.php
-rw-r--r-- 1 ncvape.com nobody 1471 Dec 30 21:58 install.txt
-rw-r--r-- 1 ncvape.com nobody 16328 Dec 30 21:58 ipn_main_handler.php
-rw-r--r-- 1 ncvape.com nobody 14948 Dec 30 21:58 license.txt
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 media
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 12 12:45 module_version
-rw-r--r-- 1 ncvape.com nobody 2117 Dec 30 21:58 nddbc.html
-rw-r--r-- 1 ncvape.com nobody 3974 Dec 30 21:58 nochex_apc_handler.php
-rw-r--r-- 1 ncvape.com nobody 657 Dec 30 21:58 page_not_found.php
-rw------- 1 ncvape.com users 165273 Apr 17 00:10 plt.tar.gz
drwxr-xr-x 2 ncvape.com nobody 4096 Apr 16 23:12 pub
-rw-r--r-- 1 ncvape.com nobody 924 Jan 13 16:48 stock_attribute.sql
-rw-r--r-- 1 ncvape.com nobody 1336 Jan 13 16:48 stock_attribute_german.sql
drwxr-xr-x 3 ncvape.com users 4096 Apr 17 00:11 www
drwxr-xr-x 3 ncvape.com users 4096 Apr 16 23:12 www-hsbc.co.uk
drwxr-xr-x 5 ncvape.com nobody 4096 Apr 16 23:12 zc_install23
Command completed
*****************************************************************