I'm not sure how this happened, but my server techs notified me about some php files inside the includes folder sending out 50k worth of emails. I'm not sure how anyone would be able to upload that. I doubt its because my username/password was compromised for the domain. im finding these files littered through out the directories: http://prntscr.com/rhf93
In those files they contain all similar encoded php code:
Does anyone know what its doing or how i can decipher the code? And most of all how was it uploaded?