Hi Peter,
Thanks for youre reaction.
Sucuri scan ended with no infections.
I deleted that folder en i checked the folder permissions.
The next day the same folder was there again.
I use the plugin “WP Security Audit Log”. I see no strange actions logged.
Also i use the plugin “Wordfence Security”, also with no result. These misleading html-files still are generated.
I have WP 3.9.1
The site runs normaly but i’m worried about content that comes from somewere. I’m not waiting for some disgusting pages.
Thanks again.
With regards,
Oipjuss