UnknownSec Bypass 403

: /usr/local/maldetect.bk2069/logs/ [ drwxr-xr-x ]
name : event_log Apr 01 2023 03:41:25 root maldet(27253): {sigup} performing signature update check... Apr 01 2023 03:41:25 root maldet(27253): {sigup} local signature set is version 20230331490193 Apr 01 2023 03:41:26 root maldet(27253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2023 03:41:26 root maldet(27253): {sigup} latest signature set already installed Apr 01 2023 03:41:26 root maldet(26843): {update} completed update v1.6.5 cd06ce => v1.6.5 6b340a, running signature updates... Apr 01 2023 03:41:26 root maldet(27367): {sigup} performing signature update check... Apr 01 2023 03:41:26 root maldet(27367): {sigup} local signature set is version 20230331490193 Apr 01 2023 03:41:26 root maldet(27367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2023 03:41:26 root maldet(27367): {sigup} latest signature set already installed Apr 01 2023 03:41:26 root maldet(26843): {update} update and config import completed Apr 01 2023 03:41:26 root maldet(27485): {sigup} performing signature update check... Apr 01 2023 03:41:26 root maldet(27485): {sigup} local signature set is version 20230331490193 Apr 01 2023 03:41:26 root maldet(27485): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2023 03:41:26 root maldet(27485): {sigup} latest signature set already installed Apr 01 2023 03:41:27 root maldet(27598): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2023 03:41:29 root maldet(27598): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2023 03:41:29 root maldet(27598): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 01 2023 03:41:29 root maldet(27598): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2023 03:41:29 root maldet(27598): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2023 03:58:48 root maldet(27598): {scan} file list completed in 1039s, found 156 files... Apr 01 2023 03:58:48 root maldet(27598): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 01 2023 03:58:48 root maldet(27598): {scan} scan of (156 files) in progress... Apr 01 2023 03:59:24 root maldet(27598): {scan} scan completed on : files 156, malware hits 0, cleaned hits 0, time 1077s Apr 01 2023 03:59:24 root maldet(27598): {scan} scan report saved, to view run: maldet --report 230401-0341.27598 Apr 02 2023 03:27:27 root maldet(20792): {update} checking for available updates... Apr 02 2023 03:27:28 root maldet(20792): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2023 03:27:28 root maldet(20792): {update} hashing install files and checking against server... Apr 02 2023 03:27:28 root maldet(20792): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2023 03:27:28 root maldet(20792): {update} latest version already installed. Apr 02 2023 03:27:28 root maldet(20954): {sigup} performing signature update check... Apr 02 2023 03:27:28 root maldet(20954): {sigup} local signature set is version 20230331490193 Apr 02 2023 03:27:28 root maldet(20954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2023 03:27:28 root maldet(20954): {sigup} new signature set 202304011147602 available Apr 02 2023 03:27:28 root maldet(20954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2023 03:27:29 root maldet(20954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 2023 03:27:29 root maldet(20954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 2023 03:27:29 root maldet(20954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2023 03:27:29 root maldet(20954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 2023 03:27:29 root maldet(20954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 2023 03:27:29 root maldet(20954): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 2023 03:27:30 root maldet(20954): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 2023 03:27:30 root maldet(20954): {sigup} verified md5sum of maldet-clean.tgz Apr 02 2023 03:27:30 root maldet(20954): {sigup} unpacked and installed maldet-clean.tgz Apr 02 2023 03:27:30 root maldet(20954): {sigup} signature set update completed Apr 02 2023 03:27:30 root maldet(20954): {sigup} 17371 signatures (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2023 03:27:30 root maldet(21235): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2023 03:27:31 root maldet(21235): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2023 03:27:31 root maldet(21235): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 02 2023 03:27:31 root maldet(21235): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2023 03:27:31 root maldet(21235): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2023 03:27:36 root maldet(21235): {scan} file list completed in 5s, found 2449 files... Apr 02 2023 03:27:36 root maldet(21235): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 02 2023 03:27:36 root maldet(21235): {scan} scan of (2449 files) in progress... Apr 02 2023 03:28:37 root maldet(21235): {scan} scan completed on : files 2449, malware hits 0, cleaned hits 0, time 67s Apr 02 2023 03:28:37 root maldet(21235): {scan} scan report saved, to view run: maldet --report 230402-0327.21235 Apr 03 2023 03:40:00 root maldet(1890): {update} checking for available updates... Apr 03 2023 03:40:00 root maldet(1890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2023 03:40:00 root maldet(1890): {update} hashing install files and checking against server... Apr 03 2023 03:40:01 root maldet(1890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2023 03:40:01 root maldet(1890): {update} latest version already installed. Apr 03 2023 03:40:01 root maldet(2025): {sigup} performing signature update check... Apr 03 2023 03:40:01 root maldet(2025): {sigup} local signature set is version 202304011147602 Apr 03 2023 03:40:01 root maldet(2025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2023 03:40:01 root maldet(2025): {sigup} latest signature set already installed Apr 03 2023 03:40:01 root maldet(2407): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2023 03:40:02 root maldet(2407): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2023 03:40:02 root maldet(2407): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 03 2023 03:40:02 root maldet(2407): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2023 03:40:02 root maldet(2407): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2023 03:40:07 root maldet(2407): {scan} file list completed in 5s, found 93 files... Apr 03 2023 03:40:07 root maldet(2407): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 03 2023 03:40:07 root maldet(2407): {scan} scan of (93 files) in progress... Apr 03 2023 03:40:21 root maldet(2407): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 20s Apr 03 2023 03:40:21 root maldet(2407): {scan} scan report saved, to view run: maldet --report 230403-0340.2407 Apr 04 2023 03:29:01 root maldet(3777): {update} checking for available updates... Apr 04 2023 03:29:02 root maldet(3777): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2023 03:29:02 root maldet(3777): {update} hashing install files and checking against server... Apr 04 2023 03:29:02 root maldet(3777): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2023 03:29:02 root maldet(3777): {update} latest version already installed. Apr 04 2023 03:29:02 root maldet(3921): {sigup} performing signature update check... Apr 04 2023 03:29:02 root maldet(3921): {sigup} local signature set is version 202304011147602 Apr 04 2023 03:29:02 root maldet(3921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2023 03:29:02 root maldet(3921): {sigup} latest signature set already installed Apr 04 2023 03:29:02 root maldet(4033): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2023 03:29:03 root maldet(4033): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2023 03:29:03 root maldet(4033): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 04 2023 03:29:03 root maldet(4033): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2023 03:29:03 root maldet(4033): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2023 03:29:07 root maldet(4033): {scan} file list completed in 4s, found 1260 files... Apr 04 2023 03:29:07 root maldet(4033): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 04 2023 03:29:07 root maldet(4033): {scan} scan of (1260 files) in progress... Apr 04 2023 03:29:42 root maldet(4033): {scan} scan completed on : files 1260, malware hits 0, cleaned hits 0, time 40s Apr 04 2023 03:29:42 root maldet(4033): {scan} scan report saved, to view run: maldet --report 230404-0329.4033 Apr 05 2023 03:12:37 root maldet(2080): {update} checking for available updates... Apr 05 2023 03:12:37 root maldet(2080): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2023 03:12:37 root maldet(2080): {update} hashing install files and checking against server... Apr 05 2023 03:12:37 root maldet(2080): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2023 03:12:37 root maldet(2080): {update} latest version already installed. Apr 05 2023 03:12:37 root maldet(2218): {sigup} performing signature update check... Apr 05 2023 03:12:37 root maldet(2218): {sigup} local signature set is version 202304011147602 Apr 05 2023 03:12:37 root maldet(2218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2023 03:12:37 root maldet(2218): {sigup} new signature set 202304041879236 available Apr 05 2023 03:12:37 root maldet(2218): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2023 03:12:38 root maldet(2218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 2023 03:12:38 root maldet(2218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 2023 03:12:38 root maldet(2218): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2023 03:12:38 root maldet(2218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 2023 03:12:39 root maldet(2218): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 2023 03:12:39 root maldet(2218): {sigup} verified md5sum of maldet-sigpack.tgz Apr 05 2023 03:12:39 root maldet(2218): {sigup} unpacked and installed maldet-sigpack.tgz Apr 05 2023 03:12:39 root maldet(2218): {sigup} verified md5sum of maldet-clean.tgz Apr 05 2023 03:12:39 root maldet(2218): {sigup} unpacked and installed maldet-clean.tgz Apr 05 2023 03:12:39 root maldet(2218): {sigup} signature set update completed Apr 05 2023 03:12:39 root maldet(2218): {sigup} 17371 signatures (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2023 03:12:39 root maldet(2459): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2023 03:12:39 root maldet(2459): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2023 03:12:39 root maldet(2459): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 05 2023 03:12:39 root maldet(2459): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2023 03:12:39 root maldet(2459): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2023 03:12:44 root maldet(2459): {scan} file list completed in 5s, found 1828 files... Apr 05 2023 03:12:45 root maldet(2459): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 05 2023 03:12:45 root maldet(2459): {scan} scan of (1828 files) in progress... Apr 05 2023 03:13:47 root maldet(2459): {scan} scan completed on : files 1828, malware hits 0, cleaned hits 0, time 68s Apr 05 2023 03:13:47 root maldet(2459): {scan} scan report saved, to view run: maldet --report 230405-0312.2459 Apr 06 2023 03:42:38 root maldet(28529): {update} checking for available updates... Apr 06 2023 03:42:38 root maldet(28529): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2023 03:42:38 root maldet(28529): {update} hashing install files and checking against server... Apr 06 2023 03:42:38 root maldet(28529): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2023 03:42:38 root maldet(28529): {update} latest version already installed. Apr 06 2023 03:42:38 root maldet(28666): {sigup} performing signature update check... Apr 06 2023 03:42:38 root maldet(28666): {sigup} local signature set is version 202304041879236 Apr 06 2023 03:42:39 root maldet(28666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2023 03:42:39 root maldet(28666): {sigup} latest signature set already installed Apr 06 2023 03:42:39 root maldet(28779): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2023 03:42:39 root maldet(28779): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2023 03:42:39 root maldet(28779): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 06 2023 03:42:39 root maldet(28779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2023 03:42:39 root maldet(28779): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2023 03:42:43 root maldet(28779): {scan} file list completed in 4s, found 108 files... Apr 06 2023 03:42:43 root maldet(28779): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 06 2023 03:42:43 root maldet(28779): {scan} scan of (108 files) in progress... Apr 06 2023 03:42:51 root maldet(28779): {scan} scan completed on : files 108, malware hits 0, cleaned hits 0, time 12s Apr 06 2023 03:42:51 root maldet(28779): {scan} scan report saved, to view run: maldet --report 230406-0342.28779 Apr 07 2023 03:46:11 root maldet(29072): {update} checking for available updates... Apr 07 2023 03:46:11 root maldet(29072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2023 03:46:12 root maldet(29072): {update} hashing install files and checking against server... Apr 07 2023 03:46:12 root maldet(29072): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2023 03:46:12 root maldet(29072): {update} latest version already installed. Apr 07 2023 03:46:12 root maldet(29213): {sigup} performing signature update check... Apr 07 2023 03:46:12 root maldet(29213): {sigup} local signature set is version 202304041879236 Apr 07 2023 03:46:12 root maldet(29213): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2023 03:46:12 root maldet(29213): {sigup} latest signature set already installed Apr 07 2023 03:46:12 root maldet(29324): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2023 03:46:12 root maldet(29324): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2023 03:46:12 root maldet(29324): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 07 2023 03:46:12 root maldet(29324): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2023 03:46:12 root maldet(29324): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2023 03:46:16 root maldet(29324): {scan} file list completed in 4s, found 144 files... Apr 07 2023 03:46:16 root maldet(29324): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 07 2023 03:46:16 root maldet(29324): {scan} scan of (144 files) in progress... Apr 07 2023 03:46:24 root maldet(29324): {scan} scan completed on : files 144, malware hits 0, cleaned hits 0, time 12s Apr 07 2023 03:46:24 root maldet(29324): {scan} scan report saved, to view run: maldet --report 230407-0346.29324 Apr 08 2023 03:26:03 root maldet(28317): {update} checking for available updates... Apr 08 2023 03:26:03 root maldet(28317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2023 03:26:03 root maldet(28317): {update} hashing install files and checking against server... Apr 08 2023 03:26:03 root maldet(28317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2023 03:26:03 root maldet(28317): {update} latest version already installed. Apr 08 2023 03:26:03 root maldet(28456): {sigup} performing signature update check... Apr 08 2023 03:26:03 root maldet(28456): {sigup} local signature set is version 202304041879236 Apr 08 2023 03:26:03 root maldet(28456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2023 03:26:03 root maldet(28456): {sigup} new signature set 202304072610975 available Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 2023 03:26:04 root maldet(28456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 2023 03:26:04 root maldet(28456): {sigup} verified md5sum of maldet-sigpack.tgz Apr 08 2023 03:26:05 root maldet(28456): {sigup} unpacked and installed maldet-sigpack.tgz Apr 08 2023 03:26:05 root maldet(28456): {sigup} verified md5sum of maldet-clean.tgz Apr 08 2023 03:26:05 root maldet(28456): {sigup} unpacked and installed maldet-clean.tgz Apr 08 2023 03:26:05 root maldet(28456): {sigup} signature set update completed Apr 08 2023 03:26:05 root maldet(28456): {sigup} 17371 signatures (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2023 03:26:05 root maldet(28714): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2023 03:26:05 root maldet(28714): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2023 03:26:05 root maldet(28714): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 08 2023 03:26:05 root maldet(28714): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2023 03:26:05 root maldet(28714): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2023 03:26:09 root maldet(28714): {scan} file list completed in 4s, found 120 files... Apr 08 2023 03:26:09 root maldet(28714): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 08 2023 03:26:09 root maldet(28714): {scan} scan of (120 files) in progress... Apr 08 2023 03:26:17 root maldet(28714): {scan} scan completed on : files 120, malware hits 0, cleaned hits 0, time 12s Apr 08 2023 03:26:17 root maldet(28714): {scan} scan report saved, to view run: maldet --report 230408-0326.28714 Apr 09 2023 03:56:32 root maldet(544): {update} checking for available updates... Apr 09 2023 03:56:32 root maldet(544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2023 03:56:32 root maldet(544): {update} hashing install files and checking against server... Apr 09 2023 03:56:32 root maldet(544): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2023 03:56:32 root maldet(544): {update} latest version already installed. Apr 09 2023 03:56:32 root maldet(722): {sigup} performing signature update check... Apr 09 2023 03:56:32 root maldet(722): {sigup} local signature set is version 202304072610975 Apr 09 2023 03:56:33 root maldet(722): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2023 03:56:33 root maldet(722): {sigup} latest signature set already installed Apr 09 2023 03:56:33 root maldet(853): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2023 03:56:34 root maldet(853): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2023 03:56:34 root maldet(853): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 09 2023 03:56:34 root maldet(853): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2023 03:56:34 root maldet(853): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2023 04:06:26 root maldet(853): {scan} file list completed in 592s, found 302 files... Apr 09 2023 04:06:26 root maldet(853): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 09 2023 04:06:26 root maldet(853): {scan} scan of (302 files) in progress... Apr 09 2023 04:07:02 root maldet(853): {scan} scan completed on : files 302, malware hits 0, cleaned hits 0, time 629s Apr 09 2023 04:07:02 root maldet(853): {scan} scan report saved, to view run: maldet --report 230409-0356.853 Apr 10 2023 03:44:25 root maldet(17354): {update} checking for available updates... Apr 10 2023 03:44:25 root maldet(17354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2023 03:44:25 root maldet(17354): {update} hashing install files and checking against server... Apr 10 2023 03:44:26 root maldet(17354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2023 03:44:26 root maldet(17354): {update} latest version already installed. Apr 10 2023 03:44:26 root maldet(17489): {sigup} performing signature update check... Apr 10 2023 03:44:26 root maldet(17489): {sigup} local signature set is version 202304072610975 Apr 10 2023 03:44:26 root maldet(17489): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2023 03:44:26 root maldet(17489): {sigup} latest signature set already installed Apr 10 2023 03:44:26 root maldet(17602): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2023 03:44:27 root maldet(17602): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2023 03:44:27 root maldet(17602): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 10 2023 03:44:27 root maldet(17602): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2023 03:44:27 root maldet(17602): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrcsrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2023 03:44:31 root maldet(17602): {scan} file list completed in 4s, found 196 files... Apr 10 2023 03:44:31 root maldet(17602): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 10 2023 03:44:31 root maldet(17602): {scan} scan of (196 files) in progress... Apr 10 2023 03:44:44 root maldet(17602): {hit} malware hit {YARA}php_in_image found for /home/dnrassociates/public_html/Dashboard/page/230409124230_proimage.phtml Apr 10 2023 03:44:44 root maldet(17602): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/page/230409124230_proimage.phtml' to '/usr/local/maldetect/quarantine/230409124230_proimage.phtml.229672763' Apr 10 2023 03:44:44 root maldet(17602): {hit} malware hit {HEX}php.nested.base64.652 found for /home/dnrassociates/public_html/Dashboard/page/law.PHtml Apr 10 2023 03:44:44 root maldet(17602): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/page/law.PHtml' to '/usr/local/maldetect/quarantine/law.PHtml.72502811' Apr 10 2023 03:44:44 root maldet(17602): {hit} malware hit {HEX}php.nested.base64.652 found for /home/dnrassociates/public_html/Dashboard/page/my_seller.php Apr 10 2023 03:44:44 root maldet(17602): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/page/my_seller.php' to '/usr/local/maldetect/quarantine/my_seller.php.788628710' Apr 10 2023 03:44:44 root maldet(17602): {hit} malware hit {HEX}php.nested.base64.652 found for /tmp/.sessions/.-90125467239121912L2hvbWUvZG5yYXNzb2NpYXRlcy9wdWJsaWNfaHRtbC9EYXNoYm9hcmQvcGFnZQ==.tmp Apr 10 2023 03:44:44 root maldet(17602): {quar} malware quarantined from '/tmp/.sessions/.-90125467239121912L2hvbWUvZG5yYXNzb2NpYXRlcy9wdWJsaWNfaHRtbC9EYXNoYm9hcmQvcGFnZQ==.tmp' to '/usr/local/maldetect/quarantine/.-90125467239121912L2hvbWUvZG5yYXNzb2NpYXRlcy9wdWJsaWNfaHRtbC9EYXNoYm9hcmQvcGFnZQ==.tmp.2845212117' Apr 10 2023 03:44:44 root maldet(17602): {scan} scan completed on : files 196, malware hits 4, cleaned hits 0, time 18s Apr 10 2023 03:44:44 root maldet(17602): {scan} scan report saved, to view run: maldet --report 230410-0344.17602 Apr 11 2023 03:43:01 root maldet(1889): {update} checking for available updates... Apr 11 2023 03:43:01 root maldet(1889): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2023 03:43:01 root maldet(1889): {update} hashing install files and checking against server... Apr 11 2023 03:43:01 root maldet(1889): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2023 03:43:01 root maldet(1889): {update} version check shows latest but hash check failed, forcing update... Apr 11 2023 03:43:02 root maldet(1889): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Apr 11 2023 03:43:02 root maldet(1889): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Apr 11 2023 03:43:02 root maldet(1889): {update} verified md5sum of maldetect-current.tar.gz