What is deleteme.xxxxxxxx.php

These appear on my Wordpress installation every time the cPanel Installatron script runs to autoupdate. They come from the cPanel Installatron script. If you installed Wordpress via a cPanel script and set it to autoupdate Wordpress Installatron will produce these files.

They are safe to delete.


Those files look like installation files for something like Wordpress, Joomla or Drupal etc. and if left on the system will doubt be a way in for hackers. The 'evil bots' are randomly checking for these kind of files (left over from incomplete installations) in order to find vulnerable sites. Although the 'lcivykmt' part of the filename should be a random string of characters so I would have thought this should be very hard to guess?!


deleteme.???.php is an Installatron temporary script. It should be self-deleting, so the fact that it remains means that the script crashed mid-task. This might have been during the original installation of the application, during a backup, or during an update.

If you have notifications enabled you should receive an email when one of these tasks fails.

And these files should be deleted if you spot them in your account (unless their date stamp is like right "now", of course). The same with old scripts named itron.php.

Tags:

Php

Security