@koandy1983, i identified the same files, as well as an empty file with the name "crontab". It seems that as soon as you disable crontabs for user "apache", the person/bot who placed the files is unable to remove them, since the files were always removed before. I too wonder how they add these...