Comment by coffeeblack

Download some script and run the installer? Sounds like “setup.exe”. How to be sure the site wasn’t breached?