Suspended Account

[almassira-reg22]

Hello ! Some One Hack My Account & Upload Shell, My Site register.pcriot.com has suspended.
I Want To Unsuspend My Site Or Account Because It\'s Important Please, Thanks.

 

[stpvoice]

Hello,

Just to confirm, are you saying that someone who you have not given any login information to etc has logged into your account and uploaded the file(s) in question?

 

[Livewire]

After further review I am flagging this account as Do Not Unsuspend. There are some seriously strange files uploaded here within 24hr of the original account creation time, all of which are HEAVILY indicating that they're meant for password logging. Virtually every file I checked had this at the top:

fwrite($handle, $_POST['username'] . ',' . $_POST['password'] . "\n");

I'm also curious why there's files here that appear to be facebook files. That would certainly seem to be a -bad- combination when put together with a password and username storing system.