Greetings
In new to this forum, but this treath seems related to an attack I had today on my shared servers.
I found a complete /n folder on root
I pasted the file artin1.pl in http://pastie.org/3241149
hope it helps
the content of the folder is:
artin1.pl
nn.php
perl.pl
tar.bmp
Hope it helps