\articles\ folder, malware?

[CrossY]

Hi,

 

I was manually scanning my website for files out of place because we are experiencing some malware recently. I notice a folder in the root of the prestashop called \articles\. It doesnt appear to be native, and I can't find it on any of my other PS installations.

 

Contents:

\5a2153a\ (empty)

0fea6_4a7fe1e1ddd268d01045012c32a76ab5 (16KB)

0fea6_b8a835df6690b2e6d2e27213ca27db27 (18KB)

 

A: Can this be safely removed?

B: Is it likely this is malware?

 

Thanks in advance.

Edited May 4, 2016 by CrossY (see edit history)

[tuk66]

/articles is not core PrestaShop folder, but you can't be sure if this folder wasn't created by any module or plain code.

[CrossY]

Thanks tuk66, I've deleted it as I doubt any of my modules created it. Shop still works fine.. will have to wait and see if it has any effect on the malware

[PrestaHeroes USA]

I  wrote this when one of my shops got hacked while living in a tiny village in mountains of Spain.

 

https://www.prestashop.com/forums/topic/303132-module-prestavault-malware-trojan-virus-protection/?do=findComment&comment=2314613

 

happy day, el