
----------- SCAN REPORT -----------
TimeStamp: Fri, 18 Apr 2025 11:20:01 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/fambnfli/scanreport-fambnfli-Apr_18_2025_11h20m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user fambnfli --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/fambnfli:

'/home/fambnfli/.nc_plugin/hidden'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1665566671.M783550P307951.gator4068.hostgator.com,S=42041497,W=42587730:2,RS'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1665566887.M118152P318848.gator4068.hostgator.com,S=33246905,W=33678953:2,RS'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1672234854.M609002P498945.gator4068.hostgator.com,S=33817393,W=34256638:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1684142649.M554449P360666.gator4068.hostgator.com,S=50859642,W=51521773:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1692623062.M371884P869860.gator4068.hostgator.com,S=49825471,W=50472855:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1692623800.M870998P936451.gator4068.hostgator.com,S=44462754,W=45040493:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Sent/cur/1693236156.M445235P769572.gator4068.hostgator.com,S=31023402,W=31426402:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/.Trash/cur/1741679967.M413270P858296.server701.web-hosting.com,S=26215663,W=26556173:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1673519450.M123755P610288.gator4068.hostgator.com,S=16693478,W=16910449:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1686733342.M252729P1032603.gator4068.hostgator.com,S=34238773,W=34683503:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1689079475.M767161P932194.gator4068.hostgator.com,S=35115407,W=35571451:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1689568048.M587934P795717.gator4068.hostgator.com,S=26150279,W=26489965:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1689568152.M734067P797243.gator4068.hostgator.com,S=20290044,W=20553594:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1692190304.M413218P628245.gator4068.hostgator.com,S=12129968,W=12288826:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1692197553.M714294P101663.gator4068.hostgator.com,S=13967025,W=14149734:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1697541044.M161801P932531.gator4068.hostgator.com,S=28020762,W=28384709:2,Sb'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1697614906.M32611P246784.gator4068.hostgator.com,S=33896043,W=34336277:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/info/cur/1709735373.M723926P255661.gator4068.hostgator.com,S=21237092,W=21512932:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/kayan/cur/1696252128.M999588P960273.gator4068.hostgator.com,S=31678597,W=32090196:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/kayan/cur/1699257131.M696166P484750.gator4068.hostgator.com,S=33066539,W=33496023:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/kayan/new/1742893532.M904661P2186111.server701.web-hosting.com,S=22607756,W=22917510'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/saiedeh/.Sent/cur/1697465997.M156584P918748.gator4068.hostgator.com,S=30656341,W=31054548:2,Sa'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/shadi/cur/1659002375.M594996P978552.gator4068.hostgator.com,S=14354485,W=14540924:2,S'
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/mail/fambridgefirm.com/shadi/cur/1659002470.M684490P978598.gator4068.hostgator.com,S=14354560,W=14541000:2,S'

'/home/fambnfli/public_html/.well-known/pki-validation/links.php'
# Decode regex match = [decode regex: 1]

'/home/fambnfli/public_html/.well-known/pki-validation/server.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2249]]

'/home/fambnfli/public_html/Old/en/wp-admin/wp/iySBdlgtq.php'
# Known exploit = [Fingerprint Match (fp)] [Hacker Sig Exploit [P2246]]

'/home/fambnfli/public_html/Old/en/wp-content/wp/hUnoeT.php'
# ClamAV detected virus = [TO-37027.WEBSHEL.nc_3_JQKgu_url_php.MD5-d4150ab070785a2f4f05710a1e6db199.size-2528.UNOFFICIAL]

'/home/fambnfli/public_html/Old/tr/wp-admin/wp/WWsXC.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [Hacker Sig Exploit [P2246]]

'/home/fambnfli/public_html/Old/tr/wp-content/backups-dup-lite/installer/original_files_64985c3-21114951'
# World writeable directory

'/home/fambnfli/public_html/Old/tr/wp-content/wp/WxbFmxXkU.php'
# ClamAV detected virus = [{HEX}php.nested.base64.652.UNOFFICIAL]

'/home/fambnfli/public_html/Old/wp-includes/blocks/wp/TyFvRW.php'
# ClamAV detected virus = [TO-35550.WEBSHEL.nc_21_fCZfodQzer_notags_php.MD5-68eb58311c1ebd1acef987c4c8b6dc91.size-13796.UNOFFICIAL]
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/public_html/en/wordpress-6.2.zip'

'/home/fambnfli/public_html/en/wp-content/plugins/coming-soon/app/routes.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/en/wp-content/plugins/duplicator/classes/class.constants.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/en/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/en/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]
# (decoded file [depth: 0]) Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]
# Scan Timeout (30 secs) while processing:
'/home/fambnfli/public_html/tr/wordpress-6.2.zip'

'/home/fambnfli/public_html/tr/wp-content/backups-dup-lite/installer/original_files_64985c3-21114951'
# World writeable directory

'/home/fambnfli/public_html/tr/wp-content/plugins/coming-soon/app/routes.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/tr/wp-content/plugins/duplicator/classes/class.constants.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/tr/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/fambnfli/public_html/tr/wp-content/plugins/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]
# (decoded file [depth: 0]) Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]

----------- SCAN SUMMARY -----------
Scanned directories: 18148
Scanned files: 57478
Ignored items: 324
Suspicious matches: 21
Viruses found: 3
Fingerprint matches: 3
Data scanned: 12724.38 MB
Scan peak memory: 402896 kB
Scan time/item: 0.074 sec
Scan time: 5590.629 sec

