Results 1 to 3 of 3
  1. #1

    Question Suspicious .sem file


    One of my Wordpress Blog suddenly have suspicious file called: session_mm_cgi-fcgi<number-here>.sem on it's public_html directory.

    As far as I know, Wordpress never create such file. Also I never upload such file too.

    So, is it a dangerous file ?

    Or perhaps created by the server's system for some reason ?

    Please advice.

    Thank you.

  2. #2
    Join Date
    Mar 2003
    You should start to investigate it now and check any vulnerable plugins, etc... changing the password for your site including this script is also recommended.

    Moved > Hosting Security and Technology.
    Specially 4 You
    JoneSolutions.Com ( Jones.Solutions ) is on the net 24/7 providing stable and reliable web hosting solutions and services since 2001

  3. #3
    Join Date
    Dec 2011
    These sem files is created by PHP's CGI or FastCGI handlers, It's save to remove, it might get recreated, so if you have any cronjobs running for your site, it can be one of those that generates the file, due to an error etc.

    Also if you have shell access, it can be generated as well.

Similar Threads

  1. suspicious file in temp
    By mehi60 in forum Hosting Security and Technology
    Replies: 11
    Last Post: 08-27-2013, 07:05 AM
  2. Found a suspicious file
    By TheMostCreative in forum Running a Web Hosting Business
    Replies: 15
    Last Post: 08-18-2013, 04:34 AM
  3. Suspicious File Alert
    By CyberDaemon in forum Hosting Security and Technology
    Replies: 5
    Last Post: 05-31-2013, 02:59 AM
  4. Suspicious File Alert !?
    By starline in forum Hosting Security and Technology
    Replies: 5
    Last Post: 12-07-2012, 11:20 AM
  5. lfd Suspicious File Alert‏ File: /tmp/.tmp Suspicious directory
    By critical mass in forum Hosting Security and Technology
    Replies: 13
    Last Post: 01-30-2012, 09:11 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts