Any idea who generates "cachec608f99bf971…….a90c5fc70e" directories in root?

  • I recently stumbled in a WP installation and found a couple of such directories in the root of the installation:

    “cachea76df5a76d5asd5asd5”
    “cachea87sd6765dsf76sd5f7”

    or similar. After deleting them, they popup up after some seconds.

    Inside, they contain 0-20 files without extension like “b7df6f8” of binary data, random characters or at least they look like random.

    I guess the server was breached or do you know if any plugin may generate this stuff? Scanning php files didn’t help much so far.

    Thank you

Viewing 2 replies - 1 through 2 (of 2 total)

  • It’s probably a caching plugin that’s set to auto generate files. What plugins do you have that could cause these files to continuously be built? It doesn’t looks like anything malicious and you said yourself you’ve scanned the files. I assume the scan didn’t come back with anything significant?

    Although thinking about it any cache plugin usually drops its files into wp-content, not into the root.

    Thread Starter DrLightman

    (@drlightman)

    Thanks. I found some strange file also popping in the root, I think the server has been breached or something.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Any idea who generates "cachec608f99bf971…….a90c5fc70e" directories in root?’ is closed to new replies.