----------- SCAN REPORT -----------
TimeStamp: Wed, 11 Sep 2024 14:27:48 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/alahcszr/scanreport-alahcszr-Sep_11_2024_14h27m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user alahcszr --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/alahcszr:

'/home/alahcszr/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/alahcszr]

'/home/alahcszr/.cpanel/caches/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/.nc_plugin/hidden'
# World writeable directory

'/home/alahcszr/.trash'
# World writeable directory

'/home/alahcszr/alghassanplastic.com/about.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/admin.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/index.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/wp-comment.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/wp-corn-sample.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/wp-logln.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/alghassanplastic.com/images/resize-6x.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/input.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/wp-login.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/8/dropdown.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/8/wp-login.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/9/about.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/9/admin.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/9/9/dropdown.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/e/about.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/e/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/lscache/e/n3JaKCgNQu2xUIGN.php'
# ClamAV detected virus = [{HEX}php.generic.malware.447.UNOFFICIAL]

'/home/alahcszr/lscache/e/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/.Drafts/cur/index.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/.Sent/new/dropdown.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/admin/.Drafts/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/admin/.Sent/index.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/anas/.Trash/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/ghassan/dropdown.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/ghassan/.Archive/dropdown.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/hamza/.spam/themes.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/alahcszr/mail/alahramplastic.com/hamza/cur/1716902355.M128389P3602946.premium283.web-hosting.com,S=25147678,W=25474698:2,S'

'/home/alahcszr/mail/alahramplastic.com/info/.Trash/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/info/.spam/about.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/alahcszr/mail/alahramplastic.com/info/cur/1708672708.M659509P1881876.premium283.web-hosting.com,S=25404243,W=25734583:2,FS'

'/home/alahcszr/mail/alahramplastic.com/mohammad/about.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alahramplastic.com/yazan/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alghassanplastic.com/info/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alghassanplastic.com/info/.Junk/input.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alghassanplastic.com/info/cur/wp-login.php:2,S'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/mail/alghassanplastic.com/waleed/n3JaKCgNQu2xUIGN.php'
# ClamAV detected virus = [{HEX}php.generic.malware.447.UNOFFICIAL]

'/home/alahcszr/mail/solo91.com/info/input.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/alahcszr/public_html/#wordpress.zip'
# Scan Timeout (30 secs) while processing:
'/home/alahcszr/public_html/Al-Ahram Catalogue 2023.pdf'

'/home/alahcszr/public_html/wp-corn-sample.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-logln.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-admin/images/resize-6x.png'
# Suspicious image file (hidden script file)
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/jetpack/modules/masterbar/admin-menu/class-admin-menu.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/mailpoet/lib/Config/Menu.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/public_html/wp-content/plugins.hold/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/alahcszr/public_html/wp-content/uploads/js_composer'
# World writeable directory

'/home/alahcszr/richcafee.com/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.1 < v5.3.2]

'/home/alahcszr/richcafee.com/wp-content/plugins/loginizer/loginizer.php'
# Script version check [OLD] [Loginizer v1.8.3 < v1.8.4]

'/home/alahcszr/solo91.com/.well-known'
# World writeable directory

'/home/alahcszr/solo91.com/.well-known/pki-validation'
# World writeable directory

'/home/alahcszr/solo91.com/cgi-bin'
# World writeable directory

'/home/alahcszr/solo91.com/cgi-bin/cgi-bin'
# World writeable directory

'/home/alahcszr/solo91.com/cgi-bin/cgi-bin/cgi-bin'
# World writeable directory

'/home/alahcszr/solo91.com/files_img'
# World writeable directory

'/home/alahcszr/solo91.com/files_img/files_img'
# World writeable directory

'/home/alahcszr/solo91.com/files_img/files_img/TSiPLAoXDHfxypCN.jpeg'
# Suspicious image file (hidden script file)

'/home/alahcszr/solo91.com/files_img/files_img/files_img'
# World writeable directory

'/home/alahcszr/solo91.com/files_img/files_img/files_img/MDjcVuGgdJAK.jpeg'
# Suspicious image file (hidden script file)

'/home/alahcszr/solo91.com/images'
# World writeable directory

'/home/alahcszr/solo91.com/wp-content/themes/flatsome/inc/admin/gutenberg/assets/include/9329.png'
# Suspicious image file (hidden script file)

'/home/alahcszr/solo91.com/wp-content/themes/flatsome/inc/admin/options/header/include/5812.jpg'
# Suspicious image file (hidden script file)

'/home/alahcszr/solo91.com/wp-content/uploads/wpcf7_uploads'
# World writeable directory

'/home/alahcszr/ssl/admin.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/certs/admin.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/certs/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/certs/text.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/csrs/checkbox.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/csrs/themes.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/keys/admin.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/keys/input.php'
# Universal decode regex match = [universal decoder]

'/home/alahcszr/ssl/keys/n3JaKCgNQu2xUIGN.php'
# ClamAV detected virus = [{HEX}php.generic.malware.447.UNOFFICIAL]

----------- SCAN SUMMARY -----------
Scanned directories: 9137
Scanned files: 63782
Ignored items: 190
Suspicious matches: 81
Viruses found: 3
Fingerprint matches: 0
Data scanned: 4111.46 MB
Scan peak memory: 406112 kB
Scan time/item: 0.046 sec
Scan time: 3319.837 sec