1#@!#!123s

: / home / shubmkcj /
Filename : scanreport-shubmkcj-May_24_2023_07h02m.txt
back
----------- SCAN REPORT -----------
TimeStamp: Wed, 24 May 2023 07:02:42 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/shubmkcj/scanreport-shubmkcj-May_24_2023_07h02m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user shubmkcj --virusscan --vmrssmax 2000000 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/shubmkcj:

'/home/shubmkcj/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/shubmkcj]

'/home/shubmkcj/.nc_plugin/hidden'
# World writeable directory

'/home/shubmkcj/createerp.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designpitara.com/0xx.php'
# Universal decode regex match = [universal decoder]

'/home/shubmkcj/designpitara.com/index.php'
# Decode regex match = [decode regex: 1]
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]

'/home/shubmkcj/designpitara.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/designpitara.com/admin/admin.zip'

'/home/shubmkcj/designpitara.com/admin/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designpitara.com/admin/ajax.googleapis.com/ajax/libs/jquery/jquery/tmvBaf.jpg'
# Suspicious image file (hidden script file)

'/home/shubmkcj/designpitara.com/admin/ckeditor/plugins/codesnippetgeshi/dev/geshi/geshi/pic16.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designpitara.com/css/css/K.gif'
# Suspicious image file (hidden script file)

'/home/shubmkcj/designpitara.com/dash/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designpitara.com/dash/tinymce/plugins/fullscreen/fullscreen/qgEPGtI.tif'
# Suspicious image file (hidden script file)

'/home/shubmkcj/designpitara.com/feedback-form/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designpitara.com/feedback-form/vendor/font-awesome-4.7/css/css/YlthIPCwqMgQuXvk.png'
# Suspicious image file (hidden script file)

'/home/shubmkcj/designpitara.com/image/zest/function.php'
# Universal decode regex match = [universal decoder]

'/home/shubmkcj/designpitara.com/infographic/infographic/infographic/infographic/t.tiff'
# Suspicious image file (hidden script file)

'/home/shubmkcj/designpitara.com/live-google-review/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/designvcard.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/digitalvcards.org/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/digitalvcards.org/admin/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/digitalvcards.org/business/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/digitalvcards.org/include/facebook/Authentication'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/Exceptions'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/FileUpload'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/GraphNodes'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/Helpers'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/Http'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/HttpClients'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/HttpClients/certs'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/PersistentData'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/PseudoRandomString'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/facebook/Url'
# World writeable directory

'/home/shubmkcj/digitalvcards.org/include/google/vendor/phpseclib/phpseclib/travis/setup-secure-shell.sh'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]

'/home/shubmkcj/digitalvcards.org/individual/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/digitalvcards.org/my-account/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/logs/createerp.shubhariya.com-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/createerp.shubhariya.com-ssl_log-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/designpitara.shubhariya.com-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/designpitara.shubhariya.com-ssl_log-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/monitadhingra.shubhariya.com-ssl_log-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/rkhconsultant.shubhariya.com-ssl_log-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/logs/simmiguptaphotography.com.shubhariya.com-ssl_log-May-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/achal/cur/1674202526.M699364P3899591.premium140.web-hosting.com,S=9208052,W=9327782:2,S'

'/home/shubmkcj/mail/designpitara.com/contact/.spam/new/1638243804.M890831P1648737.premium140.web-hosting.com,S=450828,W=457036'
# ClamAV detected virus = [Win.Dropper.Formbook-9987995-0]

'/home/shubmkcj/mail/designpitara.com/contact/.spam/new/1667459989.M168152P3762555.premium140.web-hosting.com,S=531326,W=538632'
# ClamAV detected virus = [Win.Trojan.Pwsx-9988767-0]

'/home/shubmkcj/mail/designpitara.com/contact/.spam/new/1674792079.M360794P479760.premium140.web-hosting.com,S=61699,W=62590'
# ClamAV detected virus = [Win.Dropper.QuasarRAT-9998126-0]

'/home/shubmkcj/mail/designpitara.com/contact/.spam/new/1676948529.M474142P3587636.premium140.web-hosting.com,S=1514112,W=1534894'
# ClamAV detected virus = [Email.Phishing.VOF1-6314019-0]
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/neha/cur/1655874357.M428741P1650471.premium140.web-hosting.com,S=25975351,W=26312853:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1632401178.M187177P3241016.premium140.web-hosting.com,S=21001535,W=21274305:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1632806187.M654039P2275460.premium140.web-hosting.com,S=21019131,W=21292130:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1634883674.M847501P583911.premium140.web-hosting.com,S=20042096,W=20302957:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1641815995.M429470P3377261.premium140.web-hosting.com,S=9868852,W=10004132:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1648799614.M108250P4023611.premium140.web-hosting.com,S=11835124,W=11989093:2,S'
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/mail/designpitara.com/ravindra/cur/1654069417.M822083P3942016.premium140.web-hosting.com,S=25974450,W=26311830:2,S'
# Clamd Error for [SCAN /home/shubmkcj/mail/designpitara.com/ravindra/cur/1684921996.M991324P2352741.premium140.web-hosting.com,S=79360,W=80491:2,]: /home/shubmkcj/mail/designpitara.com/ravindra/cur/1684921996.M991324P2352741.premium140.web-hosting.com,S=79360,W=80491:2,: File path check failure: No such file or directory. ERROR

'/home/shubmkcj/monitadhingra.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/monitadhingra.com/mpanel/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/praneshaswalphotography.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/praneshaswalphotography.com/images/arrows.png'
# Suspicious image file (hidden script file)

'/home/shubmkcj/quarantine_clamavconnector/tmp_awstats_ssl_awstats122022.createerp.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/quarantine_clamavconnector/tmp_awstats_ssl_awstats122022.designpitara.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/quarantine_clamavconnector/tmp_awstats_ssl_awstats122022.testing.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/rkhconsultant.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]
# Scan Timeout (30 secs) while processing:
'/home/shubmkcj/rkhconsultant.com/rkhconsultant.com-7Dec2021(1).zip'

'/home/shubmkcj/rkhconsultant.com/dubaiproject/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/simmiguptaphotography.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/simmiguptaphotography.com/admin/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/test.urbane.createerp.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/testing.urbane.createerp.com/inputs.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.createerp.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.designpitara.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.monitadhingra.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.praneshaswalphotography.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.rkhconsultant.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.simmiguptaphotography.com.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats012023.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.createerp.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.designpitara.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.monitadhingra.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.praneshaswalphotography.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.rkhconsultant.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats022023.simmiguptaphotography.com.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.createerp.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.designpitara.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.monitadhingra.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.praneshaswalphotography.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.rkhconsultant.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.simmiguptaphotography.com.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.testing.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats032023.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.createerp.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.designpitara.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.monitadhingra.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.praneshaswalphotography.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.rkhconsultant.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.simmiguptaphotography.com.shubhariya.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.testing.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/shubmkcj/tmp/awstats/ssl/awstats042023.urbane.createerp.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

----------- SCAN SUMMARY -----------
Scanned directories: 3544
Scanned files: 61652
Ignored items: 1081
Suspicious matches: 89
Viruses found: 43
Fingerprint matches: 0
Data scanned: 9584.06 MB
Scan peak memory: 301144 kB
Scan time/item: 0.082 sec
Scan time: 5370.183 sec