cgi/9fb94d0e012ed252d7162e21eafeb4f7 is not a part of SCJ. Check it manually

[alexscj]

Hello, I've seen this before, gibberish file in /cgi/ inside the TCMS directory.

I'm attaching the file content, is encoded:

Code: Select all

xú%éK
√0DÔ‚X?Îì”öEv•È¢r˜JFlœhf∆u∆à∂ˇfi«go€ &dÃÿ∑38⁄k~g€f@\G0IaO-wd+Wôõ$a
3ª÷çñ“µ+’ãsù$y|“EìFmBB+–%¬TQ+§´´'‘PÚïO0¡•™.(CaÌ´]√¡ÀUÜHliW£˘qfl˜ïŒD¡

Is this a know issue, should I be worried ?

[alexscj]

Another site, same server:

Code: Select all

cgi/0ec6a44ae1bddf64289bf0211c46720f is not a part of SCJ. Check it manually

cgi/570714c973842005045c02faf5027309 is not a part of SCJ. Check it manually

cgi/e455c64f9e53672f8e340a5896089b97 is not a part of SCJ. Check it manually

cgi/ec77ff3b52d5b84ac40093756726112a is not a part of SCJ. Check it manually

Seems the content is different from file to file. 666 permission on all of them.

[alexscj]

Looks a lot like the files in /cache/ directory.

[admin]

those files are supposed to be in cache folder, its cache files

if you have them in other folders - looks like you edited common.php and while the file had been saving - it wrote to "current folder"

you can safely delete those files

[alexscj]

Ok, thank you

[admin]

NP