WHMCS - Suspicious File Found...

[Marc]

imo : considering the filename and content it just looks like some hacker tried to exploit a whmcs security hole (or other script than whmcs) for example injecting some code in a form input, then output result of the attack was this crap file.

you'll probably get interesting infos about this crap from reading your server logs

[shadow.prx]

I don't think this has to do with WHMCS setup. If the script was any kind of malware, it's probably a hole in the server.

P.S.: Just wanted to remind you. WHMCS got hacked by social engineering and not any kind of exploit.

The original hack was a social engineered but the 3 after were not their were two exploits found in the whcms script and in their forums which was also hacked


OT: Just delete it and do a virus scan of your server and look through make sure their is nothing else fishy in their also as someone suggested go through all your logs just to see whats been going on

[traxport121]

Keep your WHMCS fully updated, and be in touch with their latest security patches. Also, use an antivirus like ClamAV to keep your files clean.