[Vishal]

On my server for some reason PHP Bulk Emailer seems to present. I am not sure if the files came along with cs-cart.

It is present at /shop/skins/

food.php 600 chmod
head.php 600 chmod
mysql.info.php 600 chmod
nat.php 600 chmod

Any idea if the files came with cs-cart or is my server compromised.

Thank you for the help.

[TonyK]

There are NO php files under /skins/

your server is comprimised.

[Vishal]

Any idea if this is cuz of cs-cart or something?

[TonyK]

No way to tell, except your host can investigate the log files. if its shared hosting, it could a million and one possibilities.

[Vishal]

I guess we are talking at both the posts.. lets just talk here :

Its is a dedicted server.

[snorocket]

delete any php file under skins/ dir and for now I'd change all your passwords ect...looks like you've been hacked.

[Vishal]

the db1.php seems to have uploaded some content under root folder and affected few other sites on the server. Seems like I am going to have to make the call for reformat and restart.

[TonyK]

most likely.