Are you investigating a for signs of compromise, or PHP Webshell Malware: Analysis, Detection, Removal
The best defense is proactive security: