wordpress安装始末

编辑了，不单说cn.wordpress.org下载的安装包是有问题
只把事情说清楚，小白，也不去深究是哪的问题

事情始于6月份收到netcup的邮件
========== Abusemeldung / Abuse report ==========
We were asked by the company DHL International GmbH to assist with respect to trademark matters in domain or other online issues. DHL International GmbH recently became aware that a website hosted by your company is being used to impersonate the official DHL International GmbH website.

The DHL website can be accessed here https://www.dhl.com.

The URL https:///wordpress/wp-content/upgrade/DH24USCA/RDGDESDZRFSYJNOI/index.php?FGDD=1 is pointing to the 202.61.237.89 displaying a phishing website impersonating the official web presence of DHL.

Accordingly, given that the infringement is unequivocally unlawful, we request your written assurances within 1 business day that you will suspend or terminate the hosting for https:///wordpress/wp-content/upgrade/DH24USCA/RDGDESDZRFSYJNOI/index.php?FGDD=1 immediately.

Mit freundlichen Grüßen

Ihr netcup Team

个人习惯，下载后解压，打开原目录复制粘贴，然后宝塔关SSH,丢那不管了。
收到邮件后，我也懒得分析了，直接把站删了，完事
这件事已经过了，也没管

直到前两天，我又安装了个WP,新购的阿里99，新装的宝塔，新装的WP,新装的子比，发现默认的解压出来的wordpress又多了个新目录，才把这事想起来。